Edit tour

Windows Analysis Report
b2bXo6vmDm.exe

Overview

General Information

Sample name:	b2bXo6vmDm.exe renamed because original name is a hash value
Original sample name:	4c3049f8e220c2264692cb192b741a30.exe
Analysis ID:	1485756
MD5:	4c3049f8e220c2264692cb192b741a30
SHA1:	46c735f574daaa3e6605ef4c54c8189f5722ff2a
SHA256:	7f74b2c86e9f5706fc44c8d5093a027d1cd5856006aa80f270efae26d55c9131
Tags:	64exetrojan
Infos:

Detection

SystemBC

Score:	100
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

Antivirus detection for dropped file

Found malware configuration

Multi AV Scanner detection for dropped file

Multi AV Scanner detection for submitted file

Yara detected SystemBC

AI detected suspicious sample

C2 URLs / IPs found in malware configuration

Connects to many ports of the same IP (likely port scanning)

Machine Learning detection for dropped file

Performs DNS queries to domains with low reputation

Performs DNS queries with encoded ASCII data (may be used to data exfiltration)

Send many emails (e-Mail Spam)

Tries to detect virtualization through RDTSC time measurements

Tries to resolve many domain names, but no domain seems valid

Connects to many different domains

Connects to several IPs in different countries

Contains functionality for execution timing, often used to detect debuggers

Contains functionality to access loader functionality (e.g. LdrGetProcedureAddress)

Contains functionality to check if a debugger is running (IsDebuggerPresent)

Contains functionality to communicate with device drivers

Contains functionality to launch a program with higher privileges

Contains functionality to query CPU information (cpuid)

Contains functionality to query locales information (e.g. system language)

Contains functionality to read the PEB

Contains functionality which may be used to detect a debugger (GetProcessHeap)

Creates a process in suspended mode (likely to inject code)

Creates files inside the system directory

Creates job files (autostart)

Detected TCP or UDP traffic on non-standard ports

Detected potential crypto function

Dropped file seen in connection with other malware

Drops PE files

Drops PE files to the application program directory (C:\ProgramData)

Executes massive DNS lookups (> 100)

File is packed with WinRar

IP address seen in connection with other malware

JA3 SSL client fingerprint seen in connection with other malware

May sleep (evasive loops) to hinder dynamic analysis

PE file contains sections with non-standard names

Sigma detected: Suspicious Outbound SMTP Connections

Uses SMTP (mail sending)

Uses code obfuscation techniques (call, push, ret)

Classification

Process Tree

System is w10x64

b2bXo6vmDm.exe (PID: 6024 cmdline: "C:\Users\user\Desktop\b2bXo6vmDm.exe" MD5: 4C3049F8E220C2264692CB192B741A30)

cmd.exe (PID: 6876 cmdline: C:\Windows\system32\cmd.exe /c ""C:\Users\user\AppData\Local\Temp\RarSFX0\1.bat" " MD5: 8A2122E8162DBEF04694B9C3E0B6CDEE)

conhost.exe (PID: 4520 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: 0D698AF330FD17BEE3BF90011D49251D)

clamer.exe (PID: 6664 cmdline: clamer.exe -priverdD MD5: FB30B403C1FA1D57FB65DC8B8E00E75C)

thkdh.exe (PID: 6688 cmdline: "C:\Users\user\AppData\Local\Temp\RarSFX1\thkdh.exe" MD5: E7D405EEC8052898F4D2B0440A6B72C9)

xalhg.exe (PID: 6972 cmdline: C:\ProgramData\flax\xalhg.exe MD5: E7D405EEC8052898F4D2B0440A6B72C9)

cleanup

Malware Threat Intel

Provided by

Name	Description	Attribution	Blogpost URLs	Link
SystemBC	SystemBC is a proxy malware leveraging SOCKS5. Based on screenshots used in ads on a underground marketplace, Proofpoint decided to call it SystemBC.SystemBC has been observed occasionally, but more pronounced since June 2019. First samples goes back to October 2018.	No Attribution	https://asec.ahnlab.com/en/33600/ https://blog.reversinglabs.com/blog/code-reuse-across-packers-and-dll-loaders https://blog.talosintelligence.com/2022/08/modernloader-delivers-multiple-stealers.html https://blogs.vmware.com/security/2023/06/8base-ransomware-a-heavy-hitting-player.html https://community.riskiq.com/article/47766fbd	https://malpedia.caad.fkie.fraunhofer.de/details/win.systembc

Malware Configuration

Threatname: SystemBC

{"HOST1": "claywyaeropumps.com", "HOST2": "185.43.220.45"}

Yara Signatures

Dropped Files

Source	Rule	Description	Author	Strings
C:\Users\user\AppData\Local\Temp\RarSFX1\thkdh.exe	JoeSecurity_SystemBC	Yara detected SystemBC	Joe Security
C:\ProgramData\flax\xalhg.exe	JoeSecurity_SystemBC	Yara detected SystemBC	Joe Security

Memory Dumps

Source	Rule	Description	Author
00000004.00000002.1699625834.000000000042E000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_SystemBC	Yara detected SystemBC	Joe Security
00000003.00000003.1694019057.000001B13408C000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_SystemBC	Yara detected SystemBC	Joe Security
00000005.00000000.1701026803.0000000000405000.00000008.00000001.01000000.0000000C.sdmp	JoeSecurity_SystemBC	Yara detected SystemBC	Joe Security
00000004.00000000.1696467305.0000000000405000.00000008.00000001.01000000.0000000B.sdmp	JoeSecurity_SystemBC	Yara detected SystemBC	Joe Security
Process Memory Space: clamer.exe PID: 6664	JoeSecurity_SystemBC	Yara detected SystemBC	Joe Security
Process Memory Space: thkdh.exe PID: 6688	JoeSecurity_SystemBC	Yara detected SystemBC	Joe Security
Process Memory Space: xalhg.exe PID: 6972	JoeSecurity_SystemBC	Yara detected SystemBC	Joe Security
Click to see the 2 entries

Unpacked PEs

Source	Rule	Description	Author	Strings
4.0.thkdh.exe.400000.0.unpack	JoeSecurity_SystemBC	Yara detected SystemBC	Joe Security
5.0.xalhg.exe.400000.0.unpack	JoeSecurity_SystemBC	Yara detected SystemBC	Joe Security

Sigma Signatures

Sigma detected: Suspicious Outbound SMTP Connections

Source: Network Connection

Author: frack113: Data: DestinationIp: 185.197.194.250, DestinationIsIpv6: false, DestinationPort: 587, EventID: 3, Image: C:\ProgramData\flax\xalhg.exe, Initiated: true, ProcessId: 6972, Protocol: tcp, SourceIp: 192.168.2.4, SourceIsIpv6: false, SourcePort: 49732

Snort Signatures

⊘No Snort rule has matched

Suricata Signatures

ET Threatview.io High Confidence Cobalt Strike C2 IP group 5 - Source IP: 15.197.130.221 - Destination IP: 192.168.2.4

Timestamp:	2024-08-01T06:09:55.906251+0200
SID:	2527004
Source Port:	465
Destination Port:	53700
Protocol:	TCP
Classtype:	Misc Attack

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

AV Detection

Antivirus detection for dropped file

Source: C:\ProgramData\flax\xalhg.exe	Avira: detection malicious, Label: HEUR/AGEN.1342209
Source: C:\Users\user\AppData\Local\Temp\RarSFX1\thkdh.exe	Avira: detection malicious, Label: HEUR/AGEN.1342209

Found malware configuration

Source: 00000003.00000003.1694019057.000001B13408C000.00000004.00000020.00020000.00000000.sdmp

Malware Configuration Extractor: SystemBC {"HOST1": "claywyaeropumps.com", "HOST2": "185.43.220.45"}

Multi AV Scanner detection for dropped file

Source: C:\ProgramData\flax\xalhg.exe	ReversingLabs: Detection: 84%
Source: C:\Users\user\AppData\Local\Temp\RarSFX1\thkdh.exe	ReversingLabs: Detection: 84%

Multi AV Scanner detection for submitted file

Source: b2bXo6vmDm.exe	ReversingLabs: Detection: 42%
Source: b2bXo6vmDm.exe	Virustotal: Detection: 35%			Perma Link

AI detected suspicious sample

Source: Submited Sample

Integrated Neural Analysis Model: Matched 90.0% probability

Machine Learning detection for dropped file

Source: C:\ProgramData\flax\xalhg.exe	Joe Sandbox ML: detected
Source: C:\Users\user\AppData\Local\Temp\RarSFX1\thkdh.exe	Joe Sandbox ML: detected

Source: unknown	HTTPS traffic detected: 20.12.23.50:443 -> 192.168.2.4:49783 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.12.23.50:443 -> 192.168.2.4:53701 version: TLS 1.2

Source: b2bXo6vmDm.exe

Static PE information: HIGH_ENTROPY_VA, DYNAMIC_BASE, NX_COMPAT, GUARD_CF, TERMINAL_SERVER_AWARE

Source:

Binary string: D:\Projects\WinRAR\sfx\build\sfxrar64\Release\sfxrar.pdb source: b2bXo6vmDm.exe, clamer.exe.0.dr

Source: C:\Users\user\Desktop\b2bXo6vmDm.exe	Code function: 0_2_00007FF7FF3E40BC FindFirstFileW,FindFirstFileW,GetLastError,FindNextFileW,GetLastError,_invalid_parameter_noinfo_noreturn,_invalid_parameter_noinfo_noreturn,	0_2_00007FF7FF3E40BC
Source: C:\Users\user\Desktop\b2bXo6vmDm.exe	Code function: 0_2_00007FF7FF3FB190 EndDialog,SetDlgItemTextW,GetMessageW,IsDialogMessageW,TranslateMessage,DispatchMessageW,EndDialog,GetDlgItem,IsDlgButtonChecked,IsDlgButtonChecked,SetFocus,GetLastError,GetLastError,GetTickCount,GetLastError,GetCommandLineW,CreateFileMappingW,MapViewOfFile,ShellExecuteExW,WaitForInputIdle,Sleep,UnmapViewOfFile,CloseHandle,SetDlgItemTextW,SetDlgItemTextW,GetDlgItem,GetWindowLongPtrW,SetWindowLongPtrW,SetDlgItemTextW,IsDlgButtonChecked,SendDlgItemMessageW,GetDlgItem,IsDlgButtonChecked,GetDlgItem,SetDlgItemTextW,SetDlgItemTextW,DialogBoxParamW,EndDialog,EnableWindow,IsDlgButtonChecked,SetDlgItemTextW,_invalid_parameter_noinfo_noreturn,_invalid_parameter_noinfo_noreturn,_invalid_parameter_noinfo_noreturn,_invalid_parameter_noinfo_noreturn,_invalid_parameter_noinfo_noreturn,_invalid_parameter_noinfo_noreturn,SendDlgItemMessageW,EndDialog,GetDlgItem,SetFocus,SendDlgItemMessageW,FindFirstFileW,FindClose,SendDlgItemMessageW,_invalid_parameter_noinfo_noreturn,_invalid_parameter_noinfo_noreturn,_invalid_parameter_noinfo_noreturn,_invalid_parameter_noinfo_noreturn,_invalid_parameter_noinfo_noreturn,_invalid_parameter_noinfo_noreturn,	0_2_00007FF7FF3FB190
Source: C:\Users\user\Desktop\b2bXo6vmDm.exe	Code function: 0_2_00007FF7FF40FCA0 FindFirstFileExA,	0_2_00007FF7FF40FCA0
Source: C:\Users\user\AppData\Local\Temp\RarSFX0\clamer.exe	Code function: 3_2_00007FF6E8DC40BC FindFirstFileW,FindFirstFileW,GetLastError,FindNextFileW,GetLastError,_invalid_parameter_noinfo_noreturn,_invalid_parameter_noinfo_noreturn,	3_2_00007FF6E8DC40BC
Source: C:\Users\user\AppData\Local\Temp\RarSFX0\clamer.exe	Code function: 3_2_00007FF6E8DDB190 EndDialog,SetDlgItemTextW,GetMessageW,IsDialogMessageW,TranslateMessage,DispatchMessageW,EndDialog,GetDlgItem,IsDlgButtonChecked,IsDlgButtonChecked,SetFocus,GetLastError,GetLastError,GetTickCount,GetLastError,GetCommandLineW,CreateFileMappingW,MapViewOfFile,ShellExecuteExW,WaitForInputIdle,Sleep,UnmapViewOfFile,CloseHandle,SetDlgItemTextW,SetDlgItemTextW,GetDlgItem,GetWindowLongPtrW,SetWindowLongPtrW,SetDlgItemTextW,IsDlgButtonChecked,SendDlgItemMessageW,GetDlgItem,IsDlgButtonChecked,GetDlgItem,SetDlgItemTextW,SetDlgItemTextW,DialogBoxParamW,EndDialog,EnableWindow,IsDlgButtonChecked,SetDlgItemTextW,_invalid_parameter_noinfo_noreturn,_invalid_parameter_noinfo_noreturn,_invalid_parameter_noinfo_noreturn,_invalid_parameter_noinfo_noreturn,_invalid_parameter_noinfo_noreturn,_invalid_parameter_noinfo_noreturn,SendDlgItemMessageW,EndDialog,GetDlgItem,SetFocus,SendDlgItemMessageW,FindFirstFileW,FindClose,SendDlgItemMessageW,_invalid_parameter_noinfo_noreturn,_invalid_parameter_noinfo_noreturn,_invalid_parameter_noinfo_noreturn,_invalid_parameter_noinfo_noreturn,_invalid_parameter_noinfo_noreturn,_invalid_parameter_noinfo_noreturn,	3_2_00007FF6E8DDB190
Source: C:\Users\user\AppData\Local\Temp\RarSFX0\clamer.exe	Code function: 3_2_00007FF6E8DEFCA0 FindFirstFileExA,	3_2_00007FF6E8DEFCA0

Networking

C2 URLs / IPs found in malware configuration

Source: Malware configuration extractor	URLs: claywyaeropumps.com
Source: Malware configuration extractor	URLs: 185.43.220.45

Connects to many ports of the same IP (likely port scanning)

Source: global traffic

TCP traffic: 142.251.9.27 ports 25,465,587,5,7,8

Performs DNS queries to domains with low reputation

Source:	DNS query: mail.wavesmail.xyz
Source:	DNS query: mail.nukador.xyz
Source: C:\ProgramData\flax\xalhg.exe	DNS query: mail.darklotus.xyz
Source:	DNS query: mail.duckpro.xyz

Performs DNS queries with encoded ASCII data (may be used to data exfiltration)

Source: unknown

DNS traffic detected with encoded ASCII: query: _dc-mx.72265b24d205.kanserimmunoterapisidernegi.com; decoded parts: r&[$

Tries to resolve many domain names, but no domain seems valid

Source: unknown	DNS traffic detected: query: securesmtp.therogueagency.com replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: securesmtp.mediascript.com replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: secure.hrad.it replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: out.ambrozoom3d.com replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: mail.gmbol.cem replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: out.radiotropical.nl replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: secure.computertechnology.es replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: smtp.yashi.org replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: secure.banklemi.co.il replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: mail.evergreenmetal.it replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: securesmtp.robert-lamont.co.uk replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: mail.thegarciafamily.co.uk replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: securesmtp.internacional.ch replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: qxorpe.com replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: smtp.commanderlake.net replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: secure.542nm0ee35.com replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: secure.theadairs.co.uk replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: out.thomson.co.uk replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: secure.juanaspagodas.com replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: smtp.kwlugeppec.com replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: out.shiatzu.dk replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: securesmtp.wmsolicitors.com replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: andyc.demon.co.uk replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: mail.hambakeradams.co.uk replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: secure.jmanagersd.com replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: out.unitemediagroup.com replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: smtp.pre-stige.com.mx replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: secure.drolatic.com replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: securesmtp.slmsinc.net replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: out.zjnobx.com replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: out.uqam.ca replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: mail.physiqueprideosaka.com replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: mail.i-bionic.com replaycode: Server failure (2)
Source: unknown	DNS traffic detected: query: securesmtp.urdisc.com.ua replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: securesmtp.gaom.com replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: sprintpcs.com replaycode: Server failure (2)
Source: unknown	DNS traffic detected: query: securesmtp.iescotesbaixes.org replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: smtp.opinedms.com replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: smtp.cpdistributor.com replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: secure.ossconsulting.co.in replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: mail.manuplus.co.uk replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: mail.tipton.st replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: secure.lateral.co.tz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: secure.nuevaescuela.net replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: smtp.robertsrose.co.uk replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: securesmtp.heffron.com.au replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: securesmtp.cafrance.com replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: smtp.ondata.com.br replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: out.gotbabysigns.com replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: securesmtp.copanama.com replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: secure.euglia.net replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: secure.ruby.ocn.ne.jp replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: secure.ahelpinghandrenovations.ca replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: tecmedia-neuss.de replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: securesmtp.dckane.com replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: mail.maderasanblas.com.ar replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: secure.moretzmarketing.com replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: out.gwentmusic.net replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: mail.geopec.it replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: smtp.agenziarecasa.it replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: securesmtp.conveyors.co.uk replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: smtp.falguiere36.org replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: secure.tiptopclean.eu replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: mail.smilliesbulgaria.co.uk replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: secure.therucksack.net replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: mail.plataforma20.com replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: mail.pvlearnerss.net replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: out.rj-architecture.fr replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: mail.asbestobv.cl replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: securesmtp.spaniennachmass.de replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: smtp.marquette.com replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: secure.otto-oppermann.de replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: securesmtp.ravallielectric.com replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: out.gspainters.com.au replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: jardininfantilsmilingkidsnorte.com replaycode: Server failure (2)
Source: unknown	DNS traffic detected: query: out.advmktg.net replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: radical-resource.co.uk replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: iousm.cn replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: securesmtp.contarinivini.it replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: mail.syimpatico.ca replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: secure.greenincomeltd.org replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: out.etu.upmc.fr replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: securesmtp.crg390.com replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: securesmtp.cobmk.com replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: out.pitti.de replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: secure.fusaal.de replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: out.eezi.net.au replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: mail.courts.state.va.us replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: smtp.wtaengenhariaeletrica.com.br replaycode: Server failure (2)
Source: unknown	DNS traffic detected: query: out.pop.com.br replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: smtp.firenze.it replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: mail.alifrim.com replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: secure.expertbuyer.co.uk replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: out.caledonian.ac.uk replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: smtp.sbcompany.net replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: mail.poolhousevets.co.uk replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: smtp.valentines.net replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: out.irb.co.in replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: plues.co.jp replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: securesmtp.comune.at replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: smtp.guadalupe-whiteheadbetingbonus.info replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: smtp.executive-pet-services.com replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: jingdong919.cn replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: vfe.watchit.com replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: smtp.riversideartmuseum.org replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: securesmtp.assocbuyers.com replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: securesmtp.hansgrohe.de replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: securesmtp.rnhnyl.com replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: out.afloreslaw.com replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: out.rpmphoto.co.uk replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: smtp.ldnl.com replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: out.venturalink.net replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: secure.mathes-family.de replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: securesmtp.tjmg.jus.br replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: out.hgh.kjjk replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: mail.json.cl replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: mail.ddyldm.com replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: regalo.br replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: securesmtp.xala.dk replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: secure.glurakboard.de replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: smtp.jatengpintar.id replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: secure.h9cgeu4qd4.com replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: mail.congeladoscordero.es replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: securesmtp.zoomecx.com replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: smtp.333.net replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: secure.deltapro.com.br replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: securesmtp.essex.gov.uk replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: mail.wanderlustholidaydeals.co.uk replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: securesmtp.youwinmedia.es replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: secure.panoramica.co.uk replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: out.delusionmfg.com replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: securesmtp.doma9uog45.com replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: smtp.kron.com replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: mail.leonardo.it replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: mail.10enmeer.nl replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: mail.univ-lille2.fr replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: ahqua.co.uk replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: securesmtp.grandviewschool.ca replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: out.robertwalkerphotographer.biz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: secure.shootershill.ac.uk replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: mail.capitallendingsolutions.com replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: smtp.psiagency.net replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: abogadosanfernando.cl replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: smtp.onlineaffe.de replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: securesmtp.binggeli.dk replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: smtp.unwired.com.au replaycode: Server failure (2)
Source: unknown	DNS traffic detected: query: mail.grupoambientalbrasil.com.br replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: secure.ceskedivky.info replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: out.marocelectronique.com replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: securesmtp.straussdaly.co.za replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: mail.rm-plaza-heibronn.de replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: mail.bellapelli.com replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: out.umc.ua replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: out.didactika.it replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: out.pharmacie-annecy-74.fr replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: mail.myrabeatriz.minemailin replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: out.boone.ca replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: smtp.raspinispa.it replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: secure.ozelcenazehizmetlerim.com replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: securesmtp.onlinebizsoft.com replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: securesmtp.rewe-touristik.com replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: securesmtp.russoandsontactical.com replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: mail.interdat.co.uk replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: smtp.stonewall.org.uk replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: out.crooks.me.uk replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: securesmtp.superfoods.com.cy replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: out.web.jp replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: smtp.embutidosabuelo.com replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: mail.duckface.co.uk replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: out.dream.com replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: out.hurriyet.co replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: secure.visualillusion.com.mx replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: smtp.cm-tresura.ch replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: secure.liangruan.com replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: secure.midcountytravel.com replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: secure.davestrus.com replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: securesmtp.stefaniacostruzioni.it replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: secure.chryssopoulos.de replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: mail.diamant-eventservice.de replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: truegamerz.net replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: securesmtp.ttnonferrous.co.uk replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: securesmtp.moore25.karoo.co.uk replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: secure.werbeform-display.de replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: mail.fdgf3.fr replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: securesmtp.unicem.onmicrosoft.com replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: smtp.agate.plala.or.jp replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: mail.thebfagency.com replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: out.rybeckfoundation.com replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: securesmtp.itw.com replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: securesmtp.alnaec.com replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: securesmtp.lautogrillo.it replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: smtp.dutyandduty.com replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: smtp.theboobyhatch.org replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: out.musictechsites.co.uk replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: out.mtrace.org replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: securesmtp.mybce.catholic.com.au replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: out.cbe45.fr replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: out.datingfrance.fr replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: out.mediacreationagency.com replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: out.hanmir.com replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: out.pooleng.it replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: secure.lionor.fr replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: mail.friesenkrone.de replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: mail.kota.pl.us replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: securesmtp.compass-at.com replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: secure.mrcash.es replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: out.coccinet.com replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: access.k12.wv.us replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: secure.intrada.de replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: smtp.marioreis.ca replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: out.deepduck.de replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: secure.jmweb.site replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: out.notifyvisitors.com replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: mail.voliacable.com replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: ertu-org.p20.mxthunder.net replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: securesmtp.grizzet.com replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: securesmtp.techelm-tech.com replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: securesmtp.huascarancertificaciones.com replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: securesmtp.novadan.com.tr replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: secure.woodschapelchurch.org replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: out.aandmsolutions.co.uk replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: smtp.mybne.catholiceduau replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: out.backus.it replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: secure.thebookbus.org replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: smtp.cc-inc.org replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: out.tiscali.de replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: ltvz38.tank.jp replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: secure.lutheran-hosp.com replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: out.capital.co.kr replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: secure.siembrafeliz.com.ar replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: securesmtp.hologic.it replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: secure.evidence-room.net replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: securesmtp.webhostranker.com.mx replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: secure.graphicallsolution.com replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: foxboxup.com replaycode: Server failure (2)
Source: unknown	DNS traffic detected: query: securesmtp.amorepediatria.com.br replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: out.rmsautomacao.com replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: securesmtp.dunnva.com replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: smtp.qemcrdmg.com replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: smtp.3jmporxvku.com replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: secure.easterbrookhome.fsnet.co.uk replaycode: Server failure (2)
Source: unknown	DNS traffic detected: query: smtp.e-ling.it replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: mail.sreindia.in replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: secure.hopla.fr replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: cjuqnd.com replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: secure.sefaz.al.gov.br replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: smtp.ultrafrutasdemexico.com replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: out.gold-travel-designer.com replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: out.flingenieros.com replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: smtp.medsch.ucl.ac.uk replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: secure.sexyjeans.com.mx replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: smtp.imgpharma.com replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: securesmtp.jamesons-solicitors.co.uk replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: securesmtp.shapesandforms.tv replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: out.alunos.estacio.br replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: secure.blackpoolcab.org.uk replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: secure.sbbnet.dk replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: out.aarete.co.uj replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: groupxlyrics.cn replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: mail.capitalshoppingpark.co.uk replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: securesmtp.posthaus.com.br replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: out.easttlink.ca replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: securesmtp.iatselocal720.com replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: moldtechsoftware.com replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: mail.mexicanpharmacy.com.mx replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: securesmtp.aussieadrenaline.com replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: secure.spdlutowo.pl replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: smtp.ymlaenceredigion.org.uk replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: mail.ism-dortmund.de replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: securesmtp.chxjcnbtlanr.fr replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: out.missteenbaguio.org replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: out.zbookusa.us replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: smtp.aforna.com replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: securesmtp.muscmyanmar.com replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: out.selasdugouessant.fr replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: smtp.55mail.jp replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: securesmtp.templesfinancial.co.uk replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: securesmtp.dcsev.com replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: tommyribbers.nl replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: secure.slice2slice.com replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: out.ecotec.org.uk replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: secure.libre.fr replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: out.it.schindler.com replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: securesmtp.nwblwi.voip.tds.net replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: mail.mccconstrucoes.com.br replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: smtp.sturm.de replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: securesmtp.liberalarts.productions replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: secure.mhivwacd.com replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: secure.jacziesmer.com replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: mail.nukador.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: smtp.meriggialessandra.191.it replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: pochta.ua replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: out.accesosdemadrid.es replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: out.nento.com replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: securesmtp.honget.dk replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: mail.michaeljamesdesign.co.uk replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: securesmtp.colweytec.com.pe replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: securesmtp.qhbztb.com replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: secure.daydream.tm.fr replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: out.dishmail.net replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: securesmtp.rbrinformatica.com.br replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: secure.reflectionsinbinary.com replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: secure.tatacoffe.com replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: mail.westmorelandtransit.com replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: securesmtp.techgen.mx replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: secure.keynet.it replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: secure.hrpvjeyou.com replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: out.skotnicki.it replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: mail.jennjenn.net replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: smtp.corp.santander.pt replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: out.nrrafwps.com replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: out.netntt.fr replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: secure.wilsonsolutions.co.uk replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: out.escot.ma replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: smtp.studiozoppini.com replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: smtp.chclzq.com replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: mail.esh3.cf replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: out.nicolehatley.com replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: mail.56mb.co.uk replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: smtp.christinapeace.com replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: out.ingve.net replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: secure.servitelsa.cl replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: out.xpdr.org replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: smtp.hotellamarck.com replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: securesmtp.mmdfdmf.sdfdsfds replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: out.cggs.acteduau replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: secure.cfb.de replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: secure.dutchieguy.ca replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: smtp.eduardozuna.net replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: out.542nm0ee35.com replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: out.myspacekills.com replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: openmailbox.org replaycode: Server failure (2)
Source: unknown	DNS traffic detected: query: out.ntlworld.co.uk replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: secure.psiek.com replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: bol.combr replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: mail.ruzkmooecl.com replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: out.flash.net replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: tianya.cn replaycode: Server failure (2)
Source: unknown	DNS traffic detected: query: smtp.bestknowledgeonline.com replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: smtp.tfsbrokers.com replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: out.demoney.org replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: maxial.org replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: secure.emc.com replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: smtp.zum-stargard.pl replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: secure.federiclismo.it replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: brtph7ee.bnr.ca replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: smtp.stny.r.com replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: smtp.reach-suppport.co.uk replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: out.toon.beach.com replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: securesmtp.go-donkeys.net replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: gdavey31.fsnet.co.uk replaycode: Server failure (2)
Source: unknown	DNS traffic detected: query: secure.atloffice.co.uk replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: mail.danfoss-bauer.de replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: out.goproforma.com replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: secure.clerk.com replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: out.pfu.fujitsu.com replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: smtp.medievisti.it replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: mail.grupodosdemayo.com.pe replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: securesmtp.hm44.fslife.co.uk replaycode: Server failure (2)
Source: unknown	DNS traffic detected: query: secure.myfabulousva.com replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: secure.kingham.oxon.sch.uk replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: out.suscom.net replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: out.dnapr.co replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: securesmtp.terrace.co.jp replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: secure.scy.cn replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: smtp.fbv.gcc replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: securesmtp.ncdainfo.com replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: secure.hph.com replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: secure.webflink.de replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: securesmtp.medouhui.com replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: secure.vakiparta.net replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: secure.ya.hoo.com.vn replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: mail.ccipersonnel.co.uk replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: smtp.clear.net replaycode: Server failure (2)
Source: unknown	DNS traffic detected: query: csf-ne.jp replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: mail.beynat.com.fr replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: secure.migato.ga replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: out.micron.com replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: smtp.redpine.net replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: out.polycabos.com.br replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: mail.clock.ocn.ne.jp replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: out.francanet.com.br replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: out.francetv.fr replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: smtp.excite.co.jp replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: out.hiddentalent.org.uk replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: secure.odbskmb.cz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: secure.nptgroup.com.au replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: smtp.alec.com.au replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: securesmtp.oceanhotels.net replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: smtp.anuvarthh.com replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: mail.szef.cn replaycode: Server failure (2)
Source: unknown	DNS traffic detected: query: smtp.wildwood555.fsnet.co.uk replaycode: Server failure (2)
Source: unknown	DNS traffic detected: query: out.theamazingdipcompany.com replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: securesmtp.ual.es replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: mail.cdonova.mx replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: out.frequencycoffee.co replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: secure.rpp.de replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: secure.republicpro.com replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: out.macanders.fr replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: secure.grace-academy.org.uk replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: secure.chambershotel.com replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: securesmtp.ieladeinu.org.ar replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: kosmetika-pro.in.ua replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: mail.myrigs.fr replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: smtp.iteminfo.fr replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: secure.uqtr.ca replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: secure.da-raiders.de replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: smtp.iphone4.fr replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: smtp.financemoneyonline.in replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: out.kalaheoschool.k replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: secure.wmconnect.com replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: mail.boxercleaning.co.uk replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: mail.octamais.com.br replaycode: Server failure (2)
Source: unknown	DNS traffic detected: query: medcommunications.ca replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: out.dstv.com replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: smtp.stearns.com replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: mail.blacksheepparts.com replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: out.oneplusmexico.com replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: smtp.flipssl.com replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: securesmtp.educati.com.ch replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: out.seripap.com replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: out.cristex.co.uk replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: secure.37.tr replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: smtp.mstorrie.fsnet.co.uk replaycode: Server failure (2)
Source: unknown	DNS traffic detected: query: smtp.riptoo.com replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: securesmtp.robertofranco.ro replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: smtp.yao.com replaycode: Server failure (2)
Source: unknown	DNS traffic detected: query: out.caremedicsgroup.com replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: smtp.hart.ca.k12.us replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: secure.alpenshapes.com replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: jingdong1212.cn replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: out.engsystems.co.za replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: out.champagneconstructioninc.com replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: mail.njoyinvesting.com.mx replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: securesmtp.cotswoldbarristers.co.uk replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: out.wlanteknik.se replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: smtp.dckits.co.uk replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: secure.gitnet.co.za replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: out.starsandstripesmgmt.co replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: secure.rwern.com.br replaycode: Server failure (2)
Source: unknown	DNS traffic detected: query: zet.zero.com replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: secure.prometals.net replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: securesmtp.lovcorlogisticsllc.com replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: supertecreset.com replaycode: Server failure (2)
Source: unknown	DNS traffic detected: query: amazing-herb.com replaycode: Server failure (2)
Source: unknown	DNS traffic detected: query: out.hff.dhdf replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: mail.dartheads.com replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: dormerhouse.fsnet.co.uk replaycode: Server failure (2)
Source: unknown	DNS traffic detected: query: smtp.netime.cn replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: smtp.electrochemical.net replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: securesmtp.noneonsjajjdfjfujucjc.com replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: out.spdabie2020.onmicrosoft.com replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: smtp.mynewcaneyisd.org replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: out.ancrd.com replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: mail.gate9productions.com replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: secure.a2plus.pt replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: securesmtp.felixlasitschka.de replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: secure.walktheroom.com replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: smtp.jewsforjesus.org.uk replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: smtp.aaofoo.com replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: out.microgen.co.uk replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: securesmtp.hpsd.school replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: bigpoint.acc replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: out.jemersoft.com replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: out.jamzhome.com replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: out.springersjewelers.com replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: out.apost.plala.or.jp replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: smtp.uda.com replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: mail.tsn-369.com replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: westallmedia.co.uk replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: mail.tradexpress.com.br replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: secure.harrison.co.th replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: out.alanatricia.co.uk replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: securesmtp.nuovaedart.it replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: smtp.aeserpa.pt replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: secure.vansan.com.tr replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: secure.apgservices.co.uk replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: smtp.atomicnetworks.eu replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: out.usagencies.com replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: out.ventas.fincamex.com.mx replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: securesmtp.1tvmv.onmicrosoft.com replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: securesmtp.cantex.net replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: secure.privatemoe.ae replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: smtp.johanneswolf.co.uk replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: out.i.sotbank.jp replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: smtp.thinkmp.mx replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: smtp.hottlookin.com replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: mail.email.pl replaycode: Server failure (2)
Source: unknown	DNS traffic detected: query: secure.lakshmis.net replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: mailspirit.info replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: mail.nademacorporation.com replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: out.im2sexy.net replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: securesmtp.asketutors.com replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: smtp.plslaton.com replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: securesmtp.apcb.co.th replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: securesmtp.ensba.fr replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: smtp.bei-schlegels.de replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: out.ffwushu.fr replaycode: Server failure (2)
Source: unknown	DNS traffic detected: query: mail.mirerotravel.com replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: mail.pharmacysystems.com replaycode: Name error (3)

Source: unknown

Network traffic detected: DNS query count 1452

Source: unknown

Network traffic detected: IP country count 33

Source: global traffic	TCP traffic: 192.168.2.4:49730 -> 185.43.220.45:4000
Source: global traffic	TCP traffic: 192.168.2.4:49732 -> 185.197.194.250:587
Source: global traffic	TCP traffic: 192.168.2.4:49733 -> 13.250.88.201:587
Source: global traffic	TCP traffic: 192.168.2.4:49734 -> 50.87.144.214:587
Source: global traffic	TCP traffic: 192.168.2.4:49735 -> 217.76.146.62:587
Source: global traffic	TCP traffic: 192.168.2.4:49736 -> 52.32.228.196:587
Source: global traffic	TCP traffic: 192.168.2.4:49737 -> 202.125.94.90:587
Source: global traffic	TCP traffic: 192.168.2.4:49738 -> 212.159.8.236:587
Source: global traffic	TCP traffic: 192.168.2.4:49739 -> 84.2.43.67:587
Source: global traffic	TCP traffic: 192.168.2.4:49740 -> 162.241.219.179:587
Source: global traffic	TCP traffic: 192.168.2.4:49741 -> 178.170.244.56:587
Source: global traffic	TCP traffic: 192.168.2.4:49742 -> 103.6.196.75:587
Source: global traffic	TCP traffic: 192.168.2.4:49743 -> 199.224.64.206:587
Source: global traffic	TCP traffic: 192.168.2.4:49744 -> 212.159.9.236:587
Source: global traffic	TCP traffic: 192.168.2.4:49745 -> 193.46.84.40:587
Source: global traffic	TCP traffic: 192.168.2.4:49746 -> 103.92.235.45:587
Source: global traffic	TCP traffic: 192.168.2.4:49747 -> 200.90.133.79:587
Source: global traffic	TCP traffic: 192.168.2.4:49748 -> 162.241.219.218:587
Source: global traffic	TCP traffic: 192.168.2.4:49749 -> 160.13.60.151:587
Source: global traffic	TCP traffic: 192.168.2.4:49751 -> 84.32.84.33:587
Source: global traffic	TCP traffic: 192.168.2.4:49752 -> 38.111.141.40:587
Source: global traffic	TCP traffic: 192.168.2.4:49753 -> 41.204.183.54:587
Source: global traffic	TCP traffic: 192.168.2.4:49755 -> 50.116.87.178:587
Source: global traffic	TCP traffic: 192.168.2.4:49756 -> 18.236.21.232:587
Source: global traffic	TCP traffic: 192.168.2.4:49757 -> 93.89.226.87:587
Source: global traffic	TCP traffic: 192.168.2.4:49758 -> 66.133.129.50:587
Source: global traffic	TCP traffic: 192.168.2.4:49759 -> 185.165.46.2:587
Source: global traffic	TCP traffic: 192.168.2.4:49760 -> 64.140.165.234:587
Source: global traffic	TCP traffic: 192.168.2.4:49761 -> 203.134.153.82:587
Source: global traffic	TCP traffic: 192.168.2.4:49762 -> 203.123.60.51:587
Source: global traffic	TCP traffic: 192.168.2.4:49763 -> 167.114.62.28:587
Source: global traffic	TCP traffic: 192.168.2.4:49764 -> 103.170.105.14:587
Source: global traffic	TCP traffic: 192.168.2.4:49765 -> 208.91.199.225:587
Source: global traffic	TCP traffic: 192.168.2.4:49766 -> 190.105.202.10:587
Source: global traffic	TCP traffic: 192.168.2.4:49768 -> 103.5.50.24:587
Source: global traffic	TCP traffic: 192.168.2.4:49770 -> 62.149.157.154:587
Source: global traffic	TCP traffic: 192.168.2.4:49771 -> 212.159.8.233:587
Source: global traffic	TCP traffic: 192.168.2.4:49773 -> 212.10.10.65:587
Source: global traffic	TCP traffic: 192.168.2.4:49774 -> 15.235.118.229:587
Source: global traffic	TCP traffic: 192.168.2.4:49776 -> 164.52.146.15:587
Source: global traffic	TCP traffic: 192.168.2.4:49777 -> 212.159.8.238:587
Source: global traffic	TCP traffic: 192.168.2.4:49779 -> 94.169.2.35:587
Source: global traffic	TCP traffic: 192.168.2.4:49780 -> 202.9.85.53:587
Source: global traffic	TCP traffic: 192.168.2.4:49781 -> 195.130.132.10:587
Source: global traffic	TCP traffic: 192.168.2.4:49782 -> 146.59.44.242:587
Source: global traffic	TCP traffic: 192.168.2.4:49784 -> 62.210.246.119:587
Source: global traffic	TCP traffic: 192.168.2.4:49785 -> 209.71.212.26:587
Source: global traffic	TCP traffic: 192.168.2.4:49787 -> 191.252.112.195:587
Source: global traffic	TCP traffic: 192.168.2.4:49789 -> 66.248.160.85:587
Source: global traffic	TCP traffic: 192.168.2.4:49795 -> 51.89.247.113:587
Source: global traffic	TCP traffic: 192.168.2.4:49798 -> 195.130.132.11:587
Source: global traffic	TCP traffic: 192.168.2.4:49799 -> 198.54.120.144:587
Source: global traffic	TCP traffic: 192.168.2.4:49801 -> 165.140.69.186:587
Source: global traffic	TCP traffic: 192.168.2.4:49802 -> 108.167.180.142:587
Source: global traffic	TCP traffic: 192.168.2.4:49804 -> 144.217.158.194:587
Source: global traffic	TCP traffic: 192.168.2.4:49806 -> 83.166.143.44:587
Source: global traffic	TCP traffic: 192.168.2.4:49807 -> 62.149.128.200:587
Source: global traffic	TCP traffic: 192.168.2.4:49811 -> 82.76.254.41:587
Source: global traffic	TCP traffic: 192.168.2.4:49814 -> 62.149.128.201:587
Source: global traffic	TCP traffic: 192.168.2.4:49815 -> 210.59.228.38:587
Source: global traffic	TCP traffic: 192.168.2.4:49816 -> 83.243.58.138:587
Source: global traffic	TCP traffic: 192.168.2.4:49818 -> 103.86.139.86:587
Source: global traffic	TCP traffic: 192.168.2.4:49819 -> 103.110.129.117:587
Source: global traffic	TCP traffic: 192.168.2.4:49822 -> 191.252.112.194:587
Source: global traffic	TCP traffic: 192.168.2.4:49823 -> 13.77.77.162:587
Source: global traffic	TCP traffic: 192.168.2.4:49824 -> 41.110.190.122:587
Source: global traffic	TCP traffic: 192.168.2.4:49825 -> 31.179.210.222:587
Source: global traffic	TCP traffic: 192.168.2.4:49826 -> 37.120.193.124:587
Source: global traffic	TCP traffic: 192.168.2.4:49828 -> 178.251.28.102:587
Source: global traffic	TCP traffic: 192.168.2.4:49830 -> 210.116.104.65:587
Source: global traffic	TCP traffic: 192.168.2.4:49832 -> 139.95.7.216:587
Source: global traffic	TCP traffic: 192.168.2.4:49833 -> 103.15.48.10:587
Source: global traffic	TCP traffic: 192.168.2.4:49834 -> 162.241.62.39:587
Source: global traffic	TCP traffic: 192.168.2.4:49836 -> 111.175.54.98:587
Source: global traffic	TCP traffic: 192.168.2.4:49838 -> 212.91.113.96:587
Source: global traffic	TCP traffic: 192.168.2.4:49844 -> 89.42.218.226:587
Source: global traffic	TCP traffic: 192.168.2.4:62446 -> 89.236.174.10:587
Source: global traffic	TCP traffic: 192.168.2.4:62447 -> 77.79.88.19:587
Source: global traffic	TCP traffic: 192.168.2.4:62448 -> 162.144.12.100:587
Source: global traffic	TCP traffic: 192.168.2.4:62450 -> 162.241.61.138:587
Source: global traffic	TCP traffic: 192.168.2.4:62452 -> 74.202.139.99:587
Source: global traffic	TCP traffic: 192.168.2.4:62454 -> 23.81.68.43:587
Source: global traffic	TCP traffic: 192.168.2.4:62459 -> 195.238.20.30:587
Source: global traffic	TCP traffic: 192.168.2.4:62462 -> 195.216.236.113:587
Source: global traffic	TCP traffic: 192.168.2.4:62465 -> 216.241.20.212:587
Source: global traffic	TCP traffic: 192.168.2.4:62466 -> 91.227.123.130:587
Source: global traffic	TCP traffic: 192.168.2.4:62467 -> 74.48.172.146:587
Source: global traffic	TCP traffic: 192.168.2.4:62468 -> 169.239.218.57:587
Source: global traffic	TCP traffic: 192.168.2.4:62471 -> 202.61.232.132:587
Source: global traffic	TCP traffic: 192.168.2.4:62475 -> 167.99.74.84:587
Source: global traffic	TCP traffic: 192.168.2.4:62477 -> 185.236.1.56:587
Source: global traffic	TCP traffic: 192.168.2.4:62478 -> 203.134.11.8:587
Source: global traffic	TCP traffic: 192.168.2.4:62479 -> 186.202.190.108:587
Source: global traffic	TCP traffic: 192.168.2.4:62484 -> 177.234.159.146:587
Source: global traffic	TCP traffic: 192.168.2.4:62485 -> 199.223.255.174:587
Source: global traffic	TCP traffic: 192.168.2.4:62487 -> 103.58.102.34:587
Source: global traffic	TCP traffic: 192.168.2.4:62489 -> 103.131.51.93:587
Source: global traffic	TCP traffic: 192.168.2.4:62496 -> 162.55.131.89:587
Source: global traffic	TCP traffic: 192.168.2.4:62500 -> 115.84.127.20:587
Source: global traffic	TCP traffic: 192.168.2.4:62502 -> 23.111.182.242:587
Source: global traffic	TCP traffic: 192.168.2.4:62505 -> 69.49.241.65:587
Source: global traffic	TCP traffic: 192.168.2.4:62509 -> 158.106.138.119:587
Source: global traffic	TCP traffic: 192.168.2.4:62510 -> 157.90.129.108:587
Source: global traffic	TCP traffic: 192.168.2.4:62511 -> 115.187.18.122:587
Source: global traffic	TCP traffic: 192.168.2.4:62515 -> 74.220.219.219:587
Source: global traffic	TCP traffic: 192.168.2.4:62520 -> 162.215.252.247:587
Source: global traffic	TCP traffic: 192.168.2.4:62522 -> 123.30.244.3:587
Source: global traffic	TCP traffic: 192.168.2.4:62524 -> 173.199.153.170:587
Source: global traffic	TCP traffic: 192.168.2.4:62527 -> 185.151.28.68:587
Source: global traffic	TCP traffic: 192.168.2.4:62528 -> 208.91.199.224:587
Source: global traffic	TCP traffic: 192.168.2.4:62529 -> 93.89.226.88:587
Source: global traffic	TCP traffic: 192.168.2.4:62531 -> 203.134.11.3:587
Source: global traffic	TCP traffic: 192.168.2.4:62538 -> 139.99.90.119:587
Source: global traffic	TCP traffic: 192.168.2.4:62543 -> 200.58.111.68:587
Source: global traffic	TCP traffic: 192.168.2.4:62547 -> 94.73.188.14:587
Source: global traffic	TCP traffic: 192.168.2.4:62548 -> 104.18.208.148:587
Source: global traffic	TCP traffic: 192.168.2.4:62553 -> 35.187.82.108:587
Source: global traffic	TCP traffic: 192.168.2.4:62554 -> 185.210.92.163:587
Source: global traffic	TCP traffic: 192.168.2.4:62555 -> 103.237.169.60:587
Source: global traffic	TCP traffic: 192.168.2.4:62556 -> 76.223.26.96:587
Source: global traffic	TCP traffic: 192.168.2.4:62557 -> 52.62.236.135:587
Source: global traffic	TCP traffic: 192.168.2.4:62560 -> 213.209.1.147:587
Source: global traffic	TCP traffic: 192.168.2.4:62561 -> 37.247.121.163:587
Source: global traffic	TCP traffic: 192.168.2.4:62563 -> 212.154.35.220:587
Source: global traffic	TCP traffic: 192.168.2.4:62564 -> 3.33.130.190:587
Source: global traffic	TCP traffic: 192.168.2.4:62566 -> 24.116.124.161:587
Source: global traffic	TCP traffic: 192.168.2.4:62568 -> 66.133.129.10:587
Source: global traffic	TCP traffic: 192.168.2.4:62569 -> 193.70.18.144:587
Source: global traffic	TCP traffic: 192.168.2.4:62570 -> 180.37.194.18:587
Source: global traffic	TCP traffic: 192.168.2.4:62571 -> 213.209.1.145:587
Source: global traffic	TCP traffic: 192.168.2.4:62572 -> 104.17.37.150:587
Source: global traffic	TCP traffic: 192.168.2.4:62574 -> 185.151.28.67:587
Source: global traffic	TCP traffic: 192.168.2.4:62575 -> 108.163.133.231:587
Source: global traffic	TCP traffic: 192.168.2.4:62577 -> 46.105.189.131:587
Source: global traffic	TCP traffic: 192.168.2.4:62578 -> 92.204.80.1:587
Source: global traffic	TCP traffic: 192.168.2.4:62579 -> 52.101.157.10:587
Source: global traffic	TCP traffic: 192.168.2.4:62584 -> 5.182.26.16:587
Source: global traffic	TCP traffic: 192.168.2.4:62585 -> 185.138.56.194:587
Source: global traffic	TCP traffic: 192.168.2.4:62586 -> 209.67.129.100:587
Source: global traffic	TCP traffic: 192.168.2.4:62588 -> 74.125.71.27:587
Source: global traffic	TCP traffic: 192.168.2.4:62589 -> 82.216.111.1:587
Source: global traffic	TCP traffic: 192.168.2.4:62590 -> 162.241.203.160:587
Source: global traffic	TCP traffic: 192.168.2.4:62592 -> 103.250.215.162:587
Source: global traffic	TCP traffic: 192.168.2.4:62594 -> 103.129.255.240:587
Source: global traffic	TCP traffic: 192.168.2.4:62597 -> 195.85.196.53:587
Source: global traffic	TCP traffic: 192.168.2.4:62598 -> 50.31.176.150:587
Source: global traffic	TCP traffic: 192.168.2.4:62599 -> 159.89.3.109:587
Source: global traffic	TCP traffic: 192.168.2.4:62600 -> 40.85.218.2:587
Source: global traffic	TCP traffic: 192.168.2.4:62601 -> 185.138.56.213:587
Source: global traffic	TCP traffic: 192.168.2.4:62603 -> 118.107.203.31:587
Source: global traffic	TCP traffic: 192.168.2.4:62604 -> 89.252.178.177:587
Source: global traffic	TCP traffic: 192.168.2.4:62605 -> 202.172.28.128:587
Source: global traffic	TCP traffic: 192.168.2.4:62606 -> 49.213.103.199:587
Source: global traffic	TCP traffic: 192.168.2.4:62607 -> 168.0.132.203:587
Source: global traffic	TCP traffic: 192.168.2.4:62608 -> 64.136.52.44:587
Source: global traffic	TCP traffic: 192.168.2.4:62609 -> 205.139.110.221:587
Source: global traffic	TCP traffic: 192.168.2.4:62610 -> 94.199.206.110:587
Source: global traffic	TCP traffic: 192.168.2.4:62611 -> 162.215.248.236:587
Source: global traffic	TCP traffic: 192.168.2.4:62613 -> 103.110.127.145:587
Source: global traffic	TCP traffic: 192.168.2.4:62615 -> 217.116.5.231:587
Source: global traffic	TCP traffic: 192.168.2.4:62616 -> 52.101.149.1:587
Source: global traffic	TCP traffic: 192.168.2.4:62617 -> 65.20.63.172:587
Source: global traffic	TCP traffic: 192.168.2.4:62618 -> 138.201.138.240:587
Source: global traffic	TCP traffic: 192.168.2.4:62619 -> 194.153.145.104:587
Source: global traffic	TCP traffic: 192.168.2.4:62620 -> 216.40.42.170:587
Source: global traffic	TCP traffic: 192.168.2.4:62621 -> 185.199.220.72:587
Source: global traffic	TCP traffic: 192.168.2.4:62622 -> 104.21.22.20:587
Source: global traffic	TCP traffic: 192.168.2.4:62623 -> 52.223.34.187:587
Source: global traffic	TCP traffic: 192.168.2.4:62628 -> 162.241.62.3:587
Source: global traffic	TCP traffic: 192.168.2.4:62629 -> 142.250.186.179:587
Source: global traffic	TCP traffic: 192.168.2.4:62631 -> 109.70.148.34:587
Source: global traffic	TCP traffic: 192.168.2.4:62634 -> 62.72.58.155:587
Source: global traffic	TCP traffic: 192.168.2.4:62635 -> 188.114.97.3:587
Source: global traffic	TCP traffic: 192.168.2.4:62636 -> 62.149.128.202:587
Source: global traffic	TCP traffic: 192.168.2.4:62637 -> 104.18.3.81:587
Source: global traffic	TCP traffic: 192.168.2.4:62638 -> 185.201.10.36:587
Source: global traffic	TCP traffic: 192.168.2.4:62641 -> 188.40.120.147:587
Source: global traffic	TCP traffic: 192.168.2.4:62642 -> 158.106.135.192:587
Source: global traffic	TCP traffic: 192.168.2.4:62643 -> 80.158.67.40:587
Source: global traffic	TCP traffic: 192.168.2.4:62644 -> 107.172.219.148:587
Source: global traffic	TCP traffic: 192.168.2.4:62647 -> 54.175.134.164:587
Source: global traffic	TCP traffic: 192.168.2.4:62651 -> 106.153.226.2:587
Source: global traffic	TCP traffic: 192.168.2.4:62652 -> 5.9.80.248:587
Source: global traffic	TCP traffic: 192.168.2.4:62653 -> 45.60.74.53:587
Source: global traffic	TCP traffic: 192.168.2.4:62655 -> 67.20.76.83:587
Source: global traffic	TCP traffic: 192.168.2.4:62656 -> 85.159.56.213:587
Source: global traffic	TCP traffic: 192.168.2.4:62657 -> 212.10.10.66:587
Source: global traffic	TCP traffic: 192.168.2.4:62658 -> 94.100.132.8:587
Source: global traffic	TCP traffic: 192.168.2.4:62659 -> 198.54.125.123:587
Source: global traffic	TCP traffic: 192.168.2.4:62661 -> 199.85.66.2:587
Source: global traffic	TCP traffic: 192.168.2.4:62662 -> 103.66.86.203:587
Source: global traffic	TCP traffic: 192.168.2.4:62663 -> 62.149.128.154:587
Source: global traffic	TCP traffic: 192.168.2.4:62664 -> 142.251.9.27:587
Source: global traffic	TCP traffic: 192.168.2.4:51370 -> 164.90.203.106:587
Source: global traffic	TCP traffic: 192.168.2.4:51371 -> 3.64.163.50:587
Source: global traffic	TCP traffic: 192.168.2.4:51374 -> 129.159.110.135:587
Source: global traffic	TCP traffic: 192.168.2.4:51376 -> 175.135.254.130:587
Source: global traffic	TCP traffic: 192.168.2.4:51377 -> 20.23.151.207:587
Source: global traffic	TCP traffic: 192.168.2.4:51379 -> 34.149.236.64:587
Source: global traffic	TCP traffic: 192.168.2.4:51380 -> 191.6.216.100:587
Source: global traffic	TCP traffic: 192.168.2.4:51381 -> 157.97.36.145:587
Source: global traffic	TCP traffic: 192.168.2.4:51384 -> 208.109.32.50:587
Source: global traffic	TCP traffic: 192.168.2.4:51385 -> 49.12.191.122:587
Source: global traffic	TCP traffic: 192.168.2.4:51389 -> 178.128.251.242:587
Source: global traffic	TCP traffic: 192.168.2.4:51388 -> 194.158.122.55:587
Source: global traffic	TCP traffic: 192.168.2.4:51392 -> 199.79.63.186:587
Source: global traffic	TCP traffic: 192.168.2.4:51393 -> 94.46.169.50:587
Source: global traffic	TCP traffic: 192.168.2.4:51395 -> 81.236.63.162:587
Source: global traffic	TCP traffic: 192.168.2.4:51396 -> 193.122.131.100:587
Source: global traffic	TCP traffic: 192.168.2.4:51398 -> 74.125.200.26:587
Source: global traffic	TCP traffic: 192.168.2.4:51400 -> 185.51.248.4:587
Source: global traffic	TCP traffic: 192.168.2.4:51406 -> 207.115.66.179:587
Source: global traffic	TCP traffic: 192.168.2.4:51408 -> 200.11.153.189:587
Source: global traffic	TCP traffic: 192.168.2.4:51409 -> 2.207.150.234:587
Source: global traffic	TCP traffic: 192.168.2.4:51411 -> 211.29.132.105:587
Source: global traffic	TCP traffic: 192.168.2.4:51413 -> 40.99.150.66:587
Source: global traffic	TCP traffic: 192.168.2.4:51414 -> 142.250.186.51:587
Source: global traffic	TCP traffic: 192.168.2.4:51415 -> 15.197.225.128:587
Source: global traffic	TCP traffic: 192.168.2.4:51416 -> 5.56.33.1:587
Source: global traffic	TCP traffic: 192.168.2.4:51418 -> 64.59.128.135:587
Source: global traffic	TCP traffic: 192.168.2.4:51420 -> 86.43.151.3:587
Source: global traffic	TCP traffic: 192.168.2.4:51421 -> 148.141.109.36:587
Source: global traffic	TCP traffic: 192.168.2.4:51424 -> 49.12.122.94:587
Source: global traffic	TCP traffic: 192.168.2.4:51425 -> 161.35.151.130:587
Source: global traffic	TCP traffic: 192.168.2.4:51427 -> 188.114.96.3:587
Source: global traffic	TCP traffic: 192.168.2.4:51431 -> 202.27.184.102:587
Source: global traffic	TCP traffic: 192.168.2.4:51432 -> 114.179.184.189:587
Source: global traffic	TCP traffic: 192.168.2.4:51435 -> 162.241.225.30:587
Source: global traffic	TCP traffic: 192.168.2.4:51436 -> 50.62.88.172:587
Source: global traffic	TCP traffic: 192.168.2.4:51439 -> 217.72.192.67:587
Source: global traffic	TCP traffic: 192.168.2.4:51440 -> 186.64.116.115:587
Source: global traffic	TCP traffic: 192.168.2.4:51441 -> 193.122.191.58:587
Source: global traffic	TCP traffic: 192.168.2.4:51442 -> 198.57.196.198:587
Source: global traffic	TCP traffic: 192.168.2.4:51443 -> 200.160.2.95:587
Source: global traffic	TCP traffic: 192.168.2.4:51447 -> 185.187.81.214:587
Source: global traffic	TCP traffic: 192.168.2.4:51451 -> 46.105.229.192:587
Source: global traffic	TCP traffic: 192.168.2.4:51452 -> 13.55.163.193:587
Source: global traffic	TCP traffic: 192.168.2.4:51453 -> 52.98.179.242:587
Source: global traffic	TCP traffic: 192.168.2.4:51454 -> 207.165.35.80:587
Source: global traffic	TCP traffic: 192.168.2.4:51455 -> 142.250.153.26:587
Source: global traffic	TCP traffic: 192.168.2.4:51458 -> 84.116.6.3:587
Source: global traffic	TCP traffic: 192.168.2.4:51459 -> 68.65.122.246:587
Source: global traffic	TCP traffic: 192.168.2.4:51460 -> 217.27.32.193:587
Source: global traffic	TCP traffic: 192.168.2.4:53643 -> 205.139.110.242:587
Source: global traffic	TCP traffic: 192.168.2.4:53644 -> 107.181.238.82:587
Source: global traffic	TCP traffic: 192.168.2.4:53646 -> 173.236.127.29:587
Source: global traffic	TCP traffic: 192.168.2.4:53650 -> 96.99.227.0:587
Source: global traffic	TCP traffic: 192.168.2.4:53651 -> 46.30.213.21:587
Source: global traffic	TCP traffic: 192.168.2.4:53652 -> 157.7.144.5:587
Source: global traffic	TCP traffic: 192.168.2.4:53653 -> 90.216.128.5:587
Source: global traffic	TCP traffic: 192.168.2.4:53656 -> 85.93.219.12:587
Source: global traffic	TCP traffic: 192.168.2.4:53657 -> 52.101.166.1:587
Source: global traffic	TCP traffic: 192.168.2.4:53658 -> 195.181.248.13:587
Source: global traffic	TCP traffic: 192.168.2.4:53661 -> 92.205.54.23:587
Source: global traffic	TCP traffic: 192.168.2.4:53663 -> 103.3.70.4:587
Source: global traffic	TCP traffic: 192.168.2.4:53665 -> 108.167.188.237:587
Source: global traffic	TCP traffic: 192.168.2.4:53666 -> 203.134.71.82:587
Source: global traffic	TCP traffic: 192.168.2.4:53673 -> 50.87.150.130:587
Source: global traffic	TCP traffic: 192.168.2.4:53676 -> 153.92.0.100:587
Source: global traffic	TCP traffic: 192.168.2.4:53679 -> 3.111.210.243:587
Source: global traffic	TCP traffic: 192.168.2.4:53680 -> 84.206.126.89:587
Source: global traffic	TCP traffic: 192.168.2.4:53681 -> 66.96.147.118:587
Source: global traffic	TCP traffic: 192.168.2.4:53685 -> 93.149.98.107:587
Source: global traffic	TCP traffic: 192.168.2.4:53686 -> 201.48.8.175:587
Source: global traffic	TCP traffic: 192.168.2.4:53688 -> 162.241.123.65:587
Source: global traffic	TCP traffic: 192.168.2.4:53689 -> 78.27.225.105:587
Source: global traffic	TCP traffic: 192.168.2.4:53691 -> 98.248.157.65:587
Source: global traffic	TCP traffic: 192.168.2.4:53693 -> 66.226.70.66:587
Source: global traffic	TCP traffic: 192.168.2.4:53694 -> 209.222.82.255:587
Source: global traffic	TCP traffic: 192.168.2.4:53695 -> 217.160.0.220:587
Source: global traffic	TCP traffic: 192.168.2.4:53696 -> 137.74.253.81:587
Source: global traffic	TCP traffic: 192.168.2.4:53699 -> 209.91.128.17:587
Source: global traffic	TCP traffic: 192.168.2.4:53702 -> 188.40.63.41:587
Source: global traffic	TCP traffic: 192.168.2.4:53703 -> 190.90.160.165:587
Source: global traffic	TCP traffic: 192.168.2.4:53706 -> 35.208.225.20:587
Source: global traffic	TCP traffic: 192.168.2.4:53707 -> 133.237.129.136:587
Source: global traffic	TCP traffic: 192.168.2.4:53709 -> 187.6.211.40:587
Source: global traffic	TCP traffic: 192.168.2.4:53710 -> 141.94.139.121:587
Source: global traffic	TCP traffic: 192.168.2.4:53711 -> 119.59.116.21:587
Source: global traffic	TCP traffic: 192.168.2.4:53717 -> 212.101.122.34:587
Source: global traffic	TCP traffic: 192.168.2.4:53718 -> 54.39.70.216:587
Source: global traffic	TCP traffic: 192.168.2.4:53720 -> 35.214.166.65:587
Source: global traffic	TCP traffic: 192.168.2.4:53722 -> 140.238.133.27:587
Source: global traffic	TCP traffic: 192.168.2.4:53725 -> 134.193.117.58:587
Source: global traffic	TCP traffic: 192.168.2.4:53729 -> 150.214.204.23:587
Source: global traffic	TCP traffic: 192.168.2.4:53730 -> 47.43.18.10:587
Source: global traffic	TCP traffic: 192.168.2.4:53735 -> 142.250.150.26:587
Source: global traffic	TCP traffic: 192.168.2.4:53747 -> 38.111.141.32:587
Source: global traffic	TCP traffic: 192.168.2.4:53748 -> 92.204.80.0:587
Source: global traffic	TCP traffic: 192.168.2.4:53749 -> 3.93.93.44:587
Source: global traffic	TCP traffic: 192.168.2.4:53750 -> 209.216.88.85:587
Source: global traffic	TCP traffic: 192.168.2.4:53751 -> 94.73.188.44:587
Source: global traffic	TCP traffic: 192.168.2.4:53752 -> 92.204.80.3:587
Source: global traffic	TCP traffic: 192.168.2.4:53754 -> 83.136.192.58:587
Source: global traffic	TCP traffic: 192.168.2.4:53755 -> 109.70.148.33:587
Source: global traffic	TCP traffic: 192.168.2.4:53759 -> 85.91.64.104:587
Source: global traffic	TCP traffic: 192.168.2.4:53761 -> 43.131.226.219:587
Source: global traffic	TCP traffic: 192.168.2.4:53762 -> 119.18.54.84:587
Source: global traffic	TCP traffic: 192.168.2.4:53764 -> 193.74.71.25:587
Source: global traffic	TCP traffic: 192.168.2.4:53767 -> 193.122.187.19:587
Source: global traffic	TCP traffic: 192.168.2.4:53768 -> 216.172.172.67:587
Source: global traffic	TCP traffic: 192.168.2.4:53770 -> 195.121.65.26:587
Source: global traffic	TCP traffic: 192.168.2.4:53771 -> 35.215.111.245:587
Source: global traffic	TCP traffic: 192.168.2.4:53776 -> 34.160.41.39:587
Source: global traffic	TCP traffic: 192.168.2.4:53778 -> 62.208.144.13:587
Source: global traffic	TCP traffic: 192.168.2.4:53781 -> 194.126.214.134:587
Source: global traffic	TCP traffic: 192.168.2.4:53784 -> 185.104.29.150:587
Source: global traffic	TCP traffic: 192.168.2.4:53785 -> 13.248.129.137:587
Source: global traffic	TCP traffic: 192.168.2.4:53786 -> 13.248.169.48:587
Source: global traffic	TCP traffic: 192.168.2.4:53789 -> 220.73.163.90:587
Source: global traffic	TCP traffic: 192.168.2.4:53790 -> 64.98.38.5:587
Source: global traffic	TCP traffic: 192.168.2.4:53791 -> 5.189.128.152:587
Source: global traffic	TCP traffic: 192.168.2.4:53793 -> 52.214.181.141:587
Source: global traffic	TCP traffic: 192.168.2.4:53796 -> 104.22.64.144:587
Source: global traffic	TCP traffic: 192.168.2.4:53797 -> 75.2.37.224:587
Source: global traffic	TCP traffic: 192.168.2.4:53798 -> 3.214.30.137:587
Source: global traffic	TCP traffic: 192.168.2.4:53799 -> 52.142.45.143:587
Source: global traffic	TCP traffic: 192.168.2.4:53801 -> 142.132.181.81:587
Source: global traffic	TCP traffic: 192.168.2.4:53802 -> 46.255.231.70:587
Source: global traffic	TCP traffic: 192.168.2.4:53807 -> 87.238.28.12:587
Source: global traffic	TCP traffic: 192.168.2.4:53809 -> 170.249.199.66:587
Source: global traffic	TCP traffic: 192.168.2.4:53812 -> 74.125.200.27:587
Source: global traffic	TCP traffic: 192.168.2.4:53813 -> 3.33.243.145:587
Source: global traffic	TCP traffic: 192.168.2.4:53814 -> 52.101.168.0:587
Source: global traffic	TCP traffic: 192.168.2.4:53819 -> 129.153.232.136:587
Source: global traffic	TCP traffic: 192.168.2.4:53820 -> 62.233.41.248:587
Source: global traffic	TCP traffic: 192.168.2.4:53821 -> 161.184.245.22:587
Source: global traffic	TCP traffic: 192.168.2.4:53828 -> 162.210.199.87:587
Source: global traffic	TCP traffic: 192.168.2.4:53830 -> 191.6.216.99:587
Source: global traffic	TCP traffic: 192.168.2.4:53832 -> 205.178.146.50:587
Source: global traffic	TCP traffic: 192.168.2.4:53833 -> 212.227.15.183:587
Source: global traffic	TCP traffic: 192.168.2.4:53836 -> 162.43.101.36:587
Source: global traffic	TCP traffic: 192.168.2.4:53837 -> 119.18.54.180:587
Source: global traffic	TCP traffic: 192.168.2.4:53842 -> 211.16.12.177:587
Source: global traffic	TCP traffic: 192.168.2.4:53843 -> 213.136.31.236:587
Source: global traffic	TCP traffic: 192.168.2.4:53846 -> 216.40.42.134:587
Source: global traffic	TCP traffic: 192.168.2.4:53850 -> 74.208.236.22:587
Source: global traffic	TCP traffic: 192.168.2.4:53853 -> 13.248.206.98:587
Source: global traffic	TCP traffic: 192.168.2.4:53854 -> 64.91.253.60:587
Source: global traffic	TCP traffic: 192.168.2.4:53857 -> 3.19.116.195:587
Source: global traffic	TCP traffic: 192.168.2.4:53860 -> 151.164.129.2:587
Source: global traffic	TCP traffic: 192.168.2.4:53865 -> 80.92.67.155:587
Source: global traffic	TCP traffic: 192.168.2.4:53867 -> 194.102.108.59:587
Source: global traffic	TCP traffic: 192.168.2.4:53868 -> 89.233.19.127:587
Source: global traffic	TCP traffic: 192.168.2.4:53869 -> 116.203.110.116:587
Source: global traffic	TCP traffic: 192.168.2.4:53871 -> 173.254.30.45:587
Source: global traffic	TCP traffic: 192.168.2.4:53872 -> 216.58.206.83:587
Source: global traffic	TCP traffic: 192.168.2.4:53875 -> 162.241.2.39:587
Source: global traffic	TCP traffic: 192.168.2.4:53880 -> 3.125.131.179:587
Source: global traffic	TCP traffic: 192.168.2.4:53883 -> 213.205.37.10:587
Source: global traffic	TCP traffic: 192.168.2.4:53886 -> 197.221.10.156:587
Source: global traffic	TCP traffic: 192.168.2.4:53889 -> 104.156.60.32:587
Source: global traffic	TCP traffic: 192.168.2.4:53890 -> 200.58.110.158:587
Source: global traffic	TCP traffic: 192.168.2.4:53898 -> 13.226.175.92:587
Source: global traffic	TCP traffic: 192.168.2.4:53900 -> 82.180.138.219:587
Source: global traffic	TCP traffic: 192.168.2.4:53901 -> 212.83.186.79:587
Source: global traffic	TCP traffic: 192.168.2.4:53904 -> 93.89.224.77:587
Source: global traffic	TCP traffic: 192.168.2.4:53905 -> 208.91.197.27:587
Source: global traffic	TCP traffic: 192.168.2.4:53906 -> 31.170.163.210:587
Source: global traffic	TCP traffic: 192.168.2.4:53910 -> 35.82.88.33:587
Source: global traffic	TCP traffic: 192.168.2.4:53911 -> 191.101.172.182:587
Source: global traffic	TCP traffic: 192.168.2.4:53914 -> 54.171.95.50:587
Source: global traffic	TCP traffic: 192.168.2.4:53915 -> 129.97.128.232:587
Source: global traffic	TCP traffic: 192.168.2.4:53916 -> 74.220.207.154:587
Source: global traffic	TCP traffic: 192.168.2.4:53917 -> 88.99.236.167:587
Source: global traffic	TCP traffic: 192.168.2.4:53919 -> 34.117.28.143:587
Source: global traffic	TCP traffic: 192.168.2.4:53920 -> 185.185.51.226:587
Source: global traffic	TCP traffic: 192.168.2.4:53921 -> 162.241.226.19:587
Source: global traffic	TCP traffic: 192.168.2.4:53922 -> 105.224.1.26:587
Source: global traffic	TCP traffic: 192.168.2.4:53924 -> 204.74.99.101:587
Source: global traffic	TCP traffic: 192.168.2.4:53926 -> 142.93.64.203:587
Source: global traffic	TCP traffic: 192.168.2.4:53932 -> 141.53.10.100:587
Source: global traffic	TCP traffic: 192.168.2.4:53935 -> 94.46.168.88:587
Source: global traffic	TCP traffic: 192.168.2.4:53940 -> 162.214.115.97:587
Source: global traffic	TCP traffic: 192.168.2.4:53941 -> 149.56.185.74:587
Source: global traffic	TCP traffic: 192.168.2.4:53942 -> 185.209.62.102:587
Source: global traffic	TCP traffic: 192.168.2.4:53953 -> 66.165.234.210:587
Source: global traffic	TCP traffic: 192.168.2.4:53954 -> 106.187.245.193:587
Source: global traffic	TCP traffic: 192.168.2.4:53959 -> 51.83.216.76:587
Source: global traffic	TCP traffic: 192.168.2.4:53961 -> 180.37.199.168:587
Source: global traffic	TCP traffic: 192.168.2.4:53962 -> 120.50.131.112:587
Source: global traffic	TCP traffic: 192.168.2.4:53963 -> 180.37.194.44:587
Source: global traffic	TCP traffic: 192.168.2.4:53964 -> 62.149.157.160:587
Source: global traffic	TCP traffic: 192.168.2.4:53965 -> 13.248.158.7:587
Source: global traffic	TCP traffic: 192.168.2.4:53975 -> 198.54.115.172:587
Source: global traffic	TCP traffic: 192.168.2.4:53976 -> 185.250.104.21:587
Source: global traffic	TCP traffic: 192.168.2.4:53978 -> 62.149.157.175:587
Source: global traffic	TCP traffic: 192.168.2.4:53979 -> 87.248.97.31:587
Source: global traffic	TCP traffic: 192.168.2.4:53981 -> 23.136.240.90:587
Source: global traffic	TCP traffic: 192.168.2.4:53983 -> 72.14.185.43:587
Source: global traffic	TCP traffic: 192.168.2.4:53985 -> 208.147.67.138:587
Source: global traffic	TCP traffic: 192.168.2.4:53986 -> 92.222.115.115:587
Source: global traffic	TCP traffic: 192.168.2.4:53988 -> 167.172.23.243:587
Source: global traffic	TCP traffic: 192.168.2.4:49406 -> 212.27.48.4:587
Source: global traffic	TCP traffic: 192.168.2.4:49409 -> 35.214.121.200:587
Source: global traffic	TCP traffic: 192.168.2.4:49412 -> 27.54.86.58:587
Source: global traffic	TCP traffic: 192.168.2.4:49414 -> 128.240.216.85:587
Source: global traffic	TCP traffic: 192.168.2.4:49415 -> 209.67.129.55:587
Source: global traffic	TCP traffic: 192.168.2.4:49416 -> 111.118.214.84:587
Source: global traffic	TCP traffic: 192.168.2.4:49417 -> 180.37.194.55:587
Source: global traffic	TCP traffic: 192.168.2.4:49419 -> 64.59.136.142:587
Source: global traffic	TCP traffic: 192.168.2.4:49425 -> 108.179.193.149:587
Source: global traffic	TCP traffic: 192.168.2.4:49431 -> 91.235.53.41:587
Source: global traffic	TCP traffic: 192.168.2.4:49432 -> 81.88.58.196:587
Source: global traffic	TCP traffic: 192.168.2.4:49435 -> 193.201.172.98:587
Source: global traffic	TCP traffic: 192.168.2.4:49437 -> 77.79.202.81:587
Source: global traffic	TCP traffic: 192.168.2.4:49446 -> 217.160.0.224:587
Source: global traffic	TCP traffic: 192.168.2.4:49449 -> 103.237.110.98:587
Source: global traffic	TCP traffic: 192.168.2.4:49450 -> 195.138.80.34:587
Source: global traffic	TCP traffic: 192.168.2.4:49451 -> 129.215.17.201:587
Source: global traffic	TCP traffic: 192.168.2.4:49454 -> 91.220.42.211:587
Source: global traffic	TCP traffic: 192.168.2.4:49457 -> 162.241.252.17:587
Source: global traffic	TCP traffic: 192.168.2.4:49459 -> 173.254.30.77:587
Source: global traffic	TCP traffic: 192.168.2.4:49460 -> 182.248.170.226:587
Source: global traffic	TCP traffic: 192.168.2.4:49461 -> 185.164.14.104:587
Source: global traffic	TCP traffic: 192.168.2.4:49466 -> 52.147.208.244:587
Source: global traffic	TCP traffic: 192.168.2.4:49467 -> 129.213.13.252:587
Source: global traffic	TCP traffic: 192.168.2.4:49473 -> 134.147.42.237:587
Source: global traffic	TCP traffic: 192.168.2.4:49476 -> 119.245.179.248:587
Source: global traffic	TCP traffic: 192.168.2.4:49479 -> 18.185.115.251:587
Source: global traffic	TCP traffic: 192.168.2.4:49480 -> 217.160.0.92:587
Source: global traffic	TCP traffic: 192.168.2.4:49482 -> 199.83.128.65:587
Source: global traffic	TCP traffic: 192.168.2.4:49487 -> 177.233.6.140:587
Source: global traffic	TCP traffic: 192.168.2.4:49495 -> 68.183.186.60:587
Source: global traffic	TCP traffic: 192.168.2.4:49499 -> 41.216.183.54:587
Source: global traffic	TCP traffic: 192.168.2.4:49503 -> 50.116.87.133:587
Source: global traffic	TCP traffic: 192.168.2.4:49504 -> 54.75.201.147:587
Source: global traffic	TCP traffic: 192.168.2.4:49510 -> 60.36.166.235:587
Source: global traffic	TCP traffic: 192.168.2.4:49511 -> 62.103.147.228:587
Source: global traffic	TCP traffic: 192.168.2.4:64412 -> 194.33.181.33:587
Source: global traffic	TCP traffic: 192.168.2.4:64415 -> 211.47.76.59:587
Source: global traffic	TCP traffic: 192.168.2.4:64416 -> 62.37.237.60:587
Source: global traffic	TCP traffic: 192.168.2.4:64420 -> 129.187.254.228:587
Source: global traffic	TCP traffic: 192.168.2.4:64421 -> 185.138.42.193:587
Source: global traffic	TCP traffic: 192.168.2.4:64422 -> 60.36.166.219:587
Source: global traffic	TCP traffic: 192.168.2.4:64424 -> 150.136.132.149:587
Source: global traffic	TCP traffic: 192.168.2.4:64425 -> 83.102.40.126:587
Source: global traffic	TCP traffic: 192.168.2.4:64427 -> 129.121.4.192:587
Source: global traffic	TCP traffic: 192.168.2.4:64428 -> 157.7.231.229:587
Source: global traffic	TCP traffic: 192.168.2.4:64429 -> 110.238.68.173:587
Source: global traffic	TCP traffic: 192.168.2.4:64433 -> 68.66.232.152:587
Source: global traffic	TCP traffic: 192.168.2.4:64437 -> 212.227.15.41:587
Source: global traffic	TCP traffic: 192.168.2.4:64442 -> 62.24.139.43:587
Source: global traffic	TCP traffic: 192.168.2.4:64445 -> 185.230.63.186:587
Source: global traffic	TCP traffic: 192.168.2.4:64446 -> 162.241.85.193:587
Source: global traffic	TCP traffic: 192.168.2.4:64448 -> 186.64.116.175:587
Source: global traffic	TCP traffic: 192.168.2.4:64456 -> 176.9.174.165:587
Source: global traffic	TCP traffic: 192.168.2.4:64457 -> 65.254.250.152:587
Source: global traffic	TCP traffic: 192.168.2.4:64458 -> 59.157.135.3:587
Source: global traffic	TCP traffic: 192.168.2.4:64461 -> 194.19.134.66:587
Source: global traffic	TCP traffic: 192.168.2.4:64462 -> 75.2.24.159:587
Source: global traffic	TCP traffic: 192.168.2.4:64464 -> 3.65.150.226:587
Source: global traffic	TCP traffic: 192.168.2.4:64467 -> 95.70.148.6:587
Source: global traffic	TCP traffic: 192.168.2.4:64474 -> 198.91.81.15:587
Source: global traffic	TCP traffic: 192.168.2.4:64475 -> 34.234.100.102:587
Source: global traffic	TCP traffic: 192.168.2.4:64476 -> 185.84.180.37:587
Source: global traffic	TCP traffic: 192.168.2.4:64479 -> 108.167.168.46:587
Source: global traffic	TCP traffic: 192.168.2.4:64480 -> 31.186.13.240:587
Source: global traffic	TCP traffic: 192.168.2.4:64484 -> 142.93.237.125:587
Source: global traffic	TCP traffic: 192.168.2.4:64488 -> 79.172.249.237:587
Source: global traffic	TCP traffic: 192.168.2.4:64491 -> 162.241.62.81:587
Source: global traffic	TCP traffic: 192.168.2.4:64497 -> 179.27.99.43:587
Source: global traffic	TCP traffic: 192.168.2.4:64500 -> 195.216.236.10:587
Source: global traffic	TCP traffic: 192.168.2.4:64501 -> 81.2.194.128:587
Source: global traffic	TCP traffic: 192.168.2.4:64505 -> 183.90.241.156:587
Source: global traffic	TCP traffic: 192.168.2.4:53689 -> 34.120.156.61:587
Source: global traffic	TCP traffic: 192.168.2.4:53693 -> 220.156.64.7:587
Source: global traffic	TCP traffic: 192.168.2.4:53701 -> 143.95.240.15:587
Source: global traffic	TCP traffic: 192.168.2.4:53708 -> 52.143.158.11:587
Source: global traffic	TCP traffic: 192.168.2.4:53712 -> 52.63.237.70:587
Source: global traffic	TCP traffic: 192.168.2.4:53730 -> 95.130.17.35:587
Source: global traffic	TCP traffic: 192.168.2.4:53746 -> 46.226.148.198:587
Source: global traffic	TCP traffic: 192.168.2.4:53747 -> 211.115.64.90:587
Source: global traffic	TCP traffic: 192.168.2.4:53763 -> 102.219.84.58:587
Source: global traffic	TCP traffic: 192.168.2.4:53766 -> 41.178.51.17:587
Source: global traffic	TCP traffic: 192.168.2.4:53783 -> 113.20.30.104:587
Source: global traffic	TCP traffic: 192.168.2.4:53792 -> 60.234.0.35:587
Source: global traffic	TCP traffic: 192.168.2.4:53810 -> 162.144.38.231:587
Source: global traffic	TCP traffic: 192.168.2.4:53830 -> 94.177.209.28:587
Source: global traffic	TCP traffic: 192.168.2.4:53852 -> 158.106.133.180:587
Source: global traffic	TCP traffic: 192.168.2.4:53855 -> 199.224.64.207:587
Source: global traffic	TCP traffic: 192.168.2.4:53867 -> 208.91.198.143:587
Source: global traffic	TCP traffic: 192.168.2.4:53873 -> 190.185.150.8:587
Source: global traffic	TCP traffic: 192.168.2.4:53888 -> 119.18.49.6:587
Source: global traffic	TCP traffic: 192.168.2.4:53902 -> 80.66.179.18:587
Source: global traffic	TCP traffic: 192.168.2.4:53905 -> 200.91.27.66:587
Source: global traffic	TCP traffic: 192.168.2.4:53912 -> 77.245.159.99:587
Source: global traffic	TCP traffic: 192.168.2.4:53926 -> 167.250.76.8:587
Source: global traffic	TCP traffic: 192.168.2.4:53927 -> 208.91.198.109:587
Source: global traffic	TCP traffic: 192.168.2.4:53936 -> 162.241.140.207:587
Source: global traffic	TCP traffic: 192.168.2.4:53942 -> 94.152.11.62:587
Source: global traffic	TCP traffic: 192.168.2.4:53944 -> 35.214.213.135:587
Source: global traffic	TCP traffic: 192.168.2.4:53945 -> 197.140.11.3:587
Source: global traffic	TCP traffic: 192.168.2.4:53952 -> 40.99.157.2:587
Source: global traffic	TCP traffic: 192.168.2.4:53954 -> 198.54.126.67:587
Source: global traffic	TCP traffic: 192.168.2.4:53955 -> 121.156.118.130:587
Source: global traffic	TCP traffic: 192.168.2.4:53962 -> 91.239.207.189:587
Source: global traffic	TCP traffic: 192.168.2.4:53964 -> 95.216.78.220:587
Source: global traffic	TCP traffic: 192.168.2.4:53988 -> 109.70.148.66:587
Source: global traffic	TCP traffic: 192.168.2.4:53993 -> 162.241.216.116:587

Source: global traffic

DNS traffic detected: number of DNS queries: 1452

Source: Joe Sandbox View	IP Address: 64.136.52.44 64.136.52.44
Source: Joe Sandbox View	IP Address: 209.222.82.255 209.222.82.255

Source: Joe Sandbox View

JA3 fingerprint: 28a2c9bd18a11de089ef85a160da29e4

Source: global traffic	TCP traffic: 192.168.2.4:49732 -> 185.197.194.250:587
Source: global traffic	TCP traffic: 192.168.2.4:49733 -> 13.250.88.201:587
Source: global traffic	TCP traffic: 192.168.2.4:49734 -> 50.87.144.214:587
Source: global traffic	TCP traffic: 192.168.2.4:49735 -> 217.76.146.62:587
Source: global traffic	TCP traffic: 192.168.2.4:49736 -> 52.32.228.196:587
Source: global traffic	TCP traffic: 192.168.2.4:49737 -> 202.125.94.90:587
Source: global traffic	TCP traffic: 192.168.2.4:49738 -> 212.159.8.236:587
Source: global traffic	TCP traffic: 192.168.2.4:49739 -> 84.2.43.67:587
Source: global traffic	TCP traffic: 192.168.2.4:49740 -> 162.241.219.179:587
Source: global traffic	TCP traffic: 192.168.2.4:49741 -> 178.170.244.56:587
Source: global traffic	TCP traffic: 192.168.2.4:49742 -> 103.6.196.75:587
Source: global traffic	TCP traffic: 192.168.2.4:49743 -> 199.224.64.206:587
Source: global traffic	TCP traffic: 192.168.2.4:49744 -> 212.159.9.236:587
Source: global traffic	TCP traffic: 192.168.2.4:49745 -> 193.46.84.40:587
Source: global traffic	TCP traffic: 192.168.2.4:49746 -> 103.92.235.45:587
Source: global traffic	TCP traffic: 192.168.2.4:49747 -> 200.90.133.79:587
Source: global traffic	TCP traffic: 192.168.2.4:49748 -> 162.241.219.218:587
Source: global traffic	TCP traffic: 192.168.2.4:49749 -> 160.13.60.151:587
Source: global traffic	TCP traffic: 192.168.2.4:49751 -> 84.32.84.33:587
Source: global traffic	TCP traffic: 192.168.2.4:49752 -> 38.111.141.40:587
Source: global traffic	TCP traffic: 192.168.2.4:49753 -> 41.204.183.54:587
Source: global traffic	TCP traffic: 192.168.2.4:49755 -> 50.116.87.178:587
Source: global traffic	TCP traffic: 192.168.2.4:49756 -> 18.236.21.232:587
Source: global traffic	TCP traffic: 192.168.2.4:49757 -> 93.89.226.87:587
Source: global traffic	TCP traffic: 192.168.2.4:49758 -> 66.133.129.50:587
Source: global traffic	TCP traffic: 192.168.2.4:49759 -> 185.165.46.2:587
Source: global traffic	TCP traffic: 192.168.2.4:49760 -> 64.140.165.234:587
Source: global traffic	TCP traffic: 192.168.2.4:49761 -> 203.134.153.82:587
Source: global traffic	TCP traffic: 192.168.2.4:49762 -> 203.123.60.51:587
Source: global traffic	TCP traffic: 192.168.2.4:49763 -> 167.114.62.28:587
Source: global traffic	TCP traffic: 192.168.2.4:49764 -> 103.170.105.14:587
Source: global traffic	TCP traffic: 192.168.2.4:49765 -> 208.91.199.225:587
Source: global traffic	TCP traffic: 192.168.2.4:49766 -> 190.105.202.10:587
Source: global traffic	TCP traffic: 192.168.2.4:49768 -> 103.5.50.24:587
Source: global traffic	TCP traffic: 192.168.2.4:49770 -> 62.149.157.154:587
Source: global traffic	TCP traffic: 192.168.2.4:49771 -> 212.159.8.233:587
Source: global traffic	TCP traffic: 192.168.2.4:49773 -> 212.10.10.65:587
Source: global traffic	TCP traffic: 192.168.2.4:49774 -> 15.235.118.229:587
Source: global traffic	TCP traffic: 192.168.2.4:49776 -> 164.52.146.15:587
Source: global traffic	TCP traffic: 192.168.2.4:49777 -> 212.159.8.238:587
Source: global traffic	TCP traffic: 192.168.2.4:49779 -> 94.169.2.35:587
Source: global traffic	TCP traffic: 192.168.2.4:49780 -> 202.9.85.53:587
Source: global traffic	TCP traffic: 192.168.2.4:49781 -> 195.130.132.10:587
Source: global traffic	TCP traffic: 192.168.2.4:49782 -> 146.59.44.242:587
Source: global traffic	TCP traffic: 192.168.2.4:49784 -> 62.210.246.119:587
Source: global traffic	TCP traffic: 192.168.2.4:49785 -> 209.71.212.26:587
Source: global traffic	TCP traffic: 192.168.2.4:49787 -> 191.252.112.195:587
Source: global traffic	TCP traffic: 192.168.2.4:49789 -> 66.248.160.85:587
Source: global traffic	TCP traffic: 192.168.2.4:49795 -> 51.89.247.113:587
Source: global traffic	TCP traffic: 192.168.2.4:49798 -> 195.130.132.11:587
Source: global traffic	TCP traffic: 192.168.2.4:49799 -> 198.54.120.144:587
Source: global traffic	TCP traffic: 192.168.2.4:49801 -> 165.140.69.186:587
Source: global traffic	TCP traffic: 192.168.2.4:49802 -> 108.167.180.142:587
Source: global traffic	TCP traffic: 192.168.2.4:49804 -> 144.217.158.194:587
Source: global traffic	TCP traffic: 192.168.2.4:49806 -> 83.166.143.44:587
Source: global traffic	TCP traffic: 192.168.2.4:49807 -> 62.149.128.200:587
Source: global traffic	TCP traffic: 192.168.2.4:49811 -> 82.76.254.41:587
Source: global traffic	TCP traffic: 192.168.2.4:49814 -> 62.149.128.201:587
Source: global traffic	TCP traffic: 192.168.2.4:49815 -> 210.59.228.38:587
Source: global traffic	TCP traffic: 192.168.2.4:49816 -> 83.243.58.138:587
Source: global traffic	TCP traffic: 192.168.2.4:49818 -> 103.86.139.86:587
Source: global traffic	TCP traffic: 192.168.2.4:49819 -> 103.110.129.117:587
Source: global traffic	TCP traffic: 192.168.2.4:49822 -> 191.252.112.194:587
Source: global traffic	TCP traffic: 192.168.2.4:49823 -> 13.77.77.162:587
Source: global traffic	TCP traffic: 192.168.2.4:49824 -> 41.110.190.122:587
Source: global traffic	TCP traffic: 192.168.2.4:49825 -> 31.179.210.222:587
Source: global traffic	TCP traffic: 192.168.2.4:49826 -> 37.120.193.124:587
Source: global traffic	TCP traffic: 192.168.2.4:49828 -> 178.251.28.102:587
Source: global traffic	TCP traffic: 192.168.2.4:49830 -> 210.116.104.65:587
Source: global traffic	TCP traffic: 192.168.2.4:49832 -> 139.95.7.216:587
Source: global traffic	TCP traffic: 192.168.2.4:49833 -> 103.15.48.10:587
Source: global traffic	TCP traffic: 192.168.2.4:49834 -> 162.241.62.39:587
Source: global traffic	TCP traffic: 192.168.2.4:49836 -> 111.175.54.98:587
Source: global traffic	TCP traffic: 192.168.2.4:49838 -> 212.91.113.96:587
Source: global traffic	TCP traffic: 192.168.2.4:49844 -> 89.42.218.226:587
Source: global traffic	TCP traffic: 192.168.2.4:62446 -> 89.236.174.10:587
Source: global traffic	TCP traffic: 192.168.2.4:62447 -> 77.79.88.19:587
Source: global traffic	TCP traffic: 192.168.2.4:62448 -> 162.144.12.100:587
Source: global traffic	TCP traffic: 192.168.2.4:62450 -> 162.241.61.138:587
Source: global traffic	TCP traffic: 192.168.2.4:62452 -> 74.202.139.99:587
Source: global traffic	TCP traffic: 192.168.2.4:62454 -> 23.81.68.43:587
Source: global traffic	TCP traffic: 192.168.2.4:62459 -> 195.238.20.30:587
Source: global traffic	TCP traffic: 192.168.2.4:62462 -> 195.216.236.113:587
Source: global traffic	TCP traffic: 192.168.2.4:62465 -> 216.241.20.212:587
Source: global traffic	TCP traffic: 192.168.2.4:62466 -> 91.227.123.130:587
Source: global traffic	TCP traffic: 192.168.2.4:62467 -> 74.48.172.146:587
Source: global traffic	TCP traffic: 192.168.2.4:62468 -> 169.239.218.57:587
Source: global traffic	TCP traffic: 192.168.2.4:62471 -> 202.61.232.132:587
Source: global traffic	TCP traffic: 192.168.2.4:62475 -> 167.99.74.84:587
Source: global traffic	TCP traffic: 192.168.2.4:62477 -> 185.236.1.56:587
Source: global traffic	TCP traffic: 192.168.2.4:62478 -> 203.134.11.8:587
Source: global traffic	TCP traffic: 192.168.2.4:62479 -> 186.202.190.108:587
Source: global traffic	TCP traffic: 192.168.2.4:62484 -> 177.234.159.146:587
Source: global traffic	TCP traffic: 192.168.2.4:62485 -> 199.223.255.174:587
Source: global traffic	TCP traffic: 192.168.2.4:62487 -> 103.58.102.34:587
Source: global traffic	TCP traffic: 192.168.2.4:62489 -> 103.131.51.93:587
Source: global traffic	TCP traffic: 192.168.2.4:62496 -> 162.55.131.89:587
Source: global traffic	TCP traffic: 192.168.2.4:62500 -> 115.84.127.20:587
Source: global traffic	TCP traffic: 192.168.2.4:62502 -> 23.111.182.242:587
Source: global traffic	TCP traffic: 192.168.2.4:62505 -> 69.49.241.65:587
Source: global traffic	TCP traffic: 192.168.2.4:62509 -> 158.106.138.119:587
Source: global traffic	TCP traffic: 192.168.2.4:62510 -> 157.90.129.108:587
Source: global traffic	TCP traffic: 192.168.2.4:62511 -> 115.187.18.122:587
Source: global traffic	TCP traffic: 192.168.2.4:62515 -> 74.220.219.219:587
Source: global traffic	TCP traffic: 192.168.2.4:62520 -> 162.215.252.247:587
Source: global traffic	TCP traffic: 192.168.2.4:62522 -> 123.30.244.3:587
Source: global traffic	TCP traffic: 192.168.2.4:62524 -> 173.199.153.170:587
Source: global traffic	TCP traffic: 192.168.2.4:62527 -> 185.151.28.68:587
Source: global traffic	TCP traffic: 192.168.2.4:62528 -> 208.91.199.224:587
Source: global traffic	TCP traffic: 192.168.2.4:62529 -> 93.89.226.88:587
Source: global traffic	TCP traffic: 192.168.2.4:62531 -> 203.134.11.3:587
Source: global traffic	TCP traffic: 192.168.2.4:62538 -> 139.99.90.119:587
Source: global traffic	TCP traffic: 192.168.2.4:62543 -> 200.58.111.68:587
Source: global traffic	TCP traffic: 192.168.2.4:62547 -> 94.73.188.14:587
Source: global traffic	TCP traffic: 192.168.2.4:62548 -> 104.18.208.148:587
Source: global traffic	TCP traffic: 192.168.2.4:62553 -> 35.187.82.108:587
Source: global traffic	TCP traffic: 192.168.2.4:62554 -> 185.210.92.163:587
Source: global traffic	TCP traffic: 192.168.2.4:62555 -> 103.237.169.60:587
Source: global traffic	TCP traffic: 192.168.2.4:62556 -> 76.223.26.96:587
Source: global traffic	TCP traffic: 192.168.2.4:62557 -> 52.62.236.135:587
Source: global traffic	TCP traffic: 192.168.2.4:62560 -> 213.209.1.147:587
Source: global traffic	TCP traffic: 192.168.2.4:62561 -> 37.247.121.163:587
Source: global traffic	TCP traffic: 192.168.2.4:62562 -> 52.101.190.0:25
Source: global traffic	TCP traffic: 192.168.2.4:62563 -> 212.154.35.220:587
Source: global traffic	TCP traffic: 192.168.2.4:62564 -> 3.33.130.190:587
Source: global traffic	TCP traffic: 192.168.2.4:62566 -> 24.116.124.161:587
Source: global traffic	TCP traffic: 192.168.2.4:62567 -> 52.101.190.3:25
Source: global traffic	TCP traffic: 192.168.2.4:62568 -> 66.133.129.10:587
Source: global traffic	TCP traffic: 192.168.2.4:62569 -> 193.70.18.144:587
Source: global traffic	TCP traffic: 192.168.2.4:62570 -> 180.37.194.18:587
Source: global traffic	TCP traffic: 192.168.2.4:62571 -> 213.209.1.145:587
Source: global traffic	TCP traffic: 192.168.2.4:62572 -> 104.17.37.150:587
Source: global traffic	TCP traffic: 192.168.2.4:62574 -> 185.151.28.67:587
Source: global traffic	TCP traffic: 192.168.2.4:62575 -> 108.163.133.231:587
Source: global traffic	TCP traffic: 192.168.2.4:62577 -> 46.105.189.131:587
Source: global traffic	TCP traffic: 192.168.2.4:62578 -> 92.204.80.1:587
Source: global traffic	TCP traffic: 192.168.2.4:62579 -> 52.101.157.10:587
Source: global traffic	TCP traffic: 192.168.2.4:62583 -> 52.101.68.25:25
Source: global traffic	TCP traffic: 192.168.2.4:62584 -> 5.182.26.16:587
Source: global traffic	TCP traffic: 192.168.2.4:62585 -> 185.138.56.194:587
Source: global traffic	TCP traffic: 192.168.2.4:62586 -> 209.67.129.100:587
Source: global traffic	TCP traffic: 192.168.2.4:62588 -> 74.125.71.27:587
Source: global traffic	TCP traffic: 192.168.2.4:62589 -> 82.216.111.1:587
Source: global traffic	TCP traffic: 192.168.2.4:62590 -> 162.241.203.160:587
Source: global traffic	TCP traffic: 192.168.2.4:62592 -> 103.250.215.162:587
Source: global traffic	TCP traffic: 192.168.2.4:62594 -> 103.129.255.240:587
Source: global traffic	TCP traffic: 192.168.2.4:62597 -> 195.85.196.53:587
Source: global traffic	TCP traffic: 192.168.2.4:62598 -> 50.31.176.150:587
Source: global traffic	TCP traffic: 192.168.2.4:62599 -> 159.89.3.109:587
Source: global traffic	TCP traffic: 192.168.2.4:62600 -> 40.85.218.2:587
Source: global traffic	TCP traffic: 192.168.2.4:62601 -> 185.138.56.213:587
Source: global traffic	TCP traffic: 192.168.2.4:62603 -> 118.107.203.31:587
Source: global traffic	TCP traffic: 192.168.2.4:62604 -> 89.252.178.177:587
Source: global traffic	TCP traffic: 192.168.2.4:62605 -> 202.172.28.128:587
Source: global traffic	TCP traffic: 192.168.2.4:62606 -> 49.213.103.199:587
Source: global traffic	TCP traffic: 192.168.2.4:62607 -> 168.0.132.203:587
Source: global traffic	TCP traffic: 192.168.2.4:62608 -> 64.136.52.44:587
Source: global traffic	TCP traffic: 192.168.2.4:62609 -> 205.139.110.221:587
Source: global traffic	TCP traffic: 192.168.2.4:62610 -> 94.199.206.110:587
Source: global traffic	TCP traffic: 192.168.2.4:62611 -> 162.215.248.236:587
Source: global traffic	TCP traffic: 192.168.2.4:62613 -> 103.110.127.145:587
Source: global traffic	TCP traffic: 192.168.2.4:62615 -> 217.116.5.231:587
Source: global traffic	TCP traffic: 192.168.2.4:62616 -> 52.101.149.1:587
Source: global traffic	TCP traffic: 192.168.2.4:62617 -> 65.20.63.172:587
Source: global traffic	TCP traffic: 192.168.2.4:62618 -> 138.201.138.240:587
Source: global traffic	TCP traffic: 192.168.2.4:62619 -> 194.153.145.104:587
Source: global traffic	TCP traffic: 192.168.2.4:62620 -> 216.40.42.170:587
Source: global traffic	TCP traffic: 192.168.2.4:62621 -> 185.199.220.72:587
Source: global traffic	TCP traffic: 192.168.2.4:62622 -> 104.21.22.20:587
Source: global traffic	TCP traffic: 192.168.2.4:62623 -> 52.223.34.187:587
Source: global traffic	TCP traffic: 192.168.2.4:62625 -> 13.248.169.48:25
Source: global traffic	TCP traffic: 192.168.2.4:62628 -> 162.241.62.3:587
Source: global traffic	TCP traffic: 192.168.2.4:62629 -> 142.250.186.179:587
Source: global traffic	TCP traffic: 192.168.2.4:62631 -> 109.70.148.34:587
Source: global traffic	TCP traffic: 192.168.2.4:62634 -> 62.72.58.155:587
Source: global traffic	TCP traffic: 192.168.2.4:62635 -> 188.114.97.3:587
Source: global traffic	TCP traffic: 192.168.2.4:62636 -> 62.149.128.202:587
Source: global traffic	TCP traffic: 192.168.2.4:62637 -> 104.18.3.81:587
Source: global traffic	TCP traffic: 192.168.2.4:62638 -> 185.201.10.36:587
Source: global traffic	TCP traffic: 192.168.2.4:62641 -> 188.40.120.147:587
Source: global traffic	TCP traffic: 192.168.2.4:62642 -> 158.106.135.192:587
Source: global traffic	TCP traffic: 192.168.2.4:62643 -> 80.158.67.40:587
Source: global traffic	TCP traffic: 192.168.2.4:62644 -> 107.172.219.148:587
Source: global traffic	TCP traffic: 192.168.2.4:62647 -> 54.175.134.164:587
Source: global traffic	TCP traffic: 192.168.2.4:62651 -> 106.153.226.2:587
Source: global traffic	TCP traffic: 192.168.2.4:62652 -> 5.9.80.248:587
Source: global traffic	TCP traffic: 192.168.2.4:62653 -> 45.60.74.53:587
Source: global traffic	TCP traffic: 192.168.2.4:62655 -> 67.20.76.83:587
Source: global traffic	TCP traffic: 192.168.2.4:62656 -> 85.159.56.213:587
Source: global traffic	TCP traffic: 192.168.2.4:62657 -> 212.10.10.66:587
Source: global traffic	TCP traffic: 192.168.2.4:62658 -> 94.100.132.8:587
Source: global traffic	TCP traffic: 192.168.2.4:62659 -> 198.54.125.123:587
Source: global traffic	TCP traffic: 192.168.2.4:62661 -> 199.85.66.2:587
Source: global traffic	TCP traffic: 192.168.2.4:62662 -> 103.66.86.203:587
Source: global traffic	TCP traffic: 192.168.2.4:62663 -> 62.149.128.154:587
Source: global traffic	TCP traffic: 192.168.2.4:62664 -> 142.251.9.27:587
Source: global traffic	TCP traffic: 192.168.2.4:51370 -> 164.90.203.106:587
Source: global traffic	TCP traffic: 192.168.2.4:51371 -> 3.64.163.50:587
Source: global traffic	TCP traffic: 192.168.2.4:51374 -> 129.159.110.135:587
Source: global traffic	TCP traffic: 192.168.2.4:51376 -> 175.135.254.130:587
Source: global traffic	TCP traffic: 192.168.2.4:51377 -> 20.23.151.207:587
Source: global traffic	TCP traffic: 192.168.2.4:51379 -> 34.149.236.64:587
Source: global traffic	TCP traffic: 192.168.2.4:51380 -> 191.6.216.100:587
Source: global traffic	TCP traffic: 192.168.2.4:51381 -> 157.97.36.145:587
Source: global traffic	TCP traffic: 192.168.2.4:51384 -> 208.109.32.50:587
Source: global traffic	TCP traffic: 192.168.2.4:51385 -> 49.12.191.122:587
Source: global traffic	TCP traffic: 192.168.2.4:51389 -> 178.128.251.242:587
Source: global traffic	TCP traffic: 192.168.2.4:51388 -> 194.158.122.55:587
Source: global traffic	TCP traffic: 192.168.2.4:51391 -> 62.36.20.30:25
Source: global traffic	TCP traffic: 192.168.2.4:51392 -> 199.79.63.186:587
Source: global traffic	TCP traffic: 192.168.2.4:51393 -> 94.46.169.50:587
Source: global traffic	TCP traffic: 192.168.2.4:51395 -> 81.236.63.162:587
Source: global traffic	TCP traffic: 192.168.2.4:51396 -> 193.122.131.100:587
Source: global traffic	TCP traffic: 192.168.2.4:51398 -> 74.125.200.26:587
Source: global traffic	TCP traffic: 192.168.2.4:51399 -> 52.101.68.3:25
Source: global traffic	TCP traffic: 192.168.2.4:51400 -> 185.51.248.4:587
Source: global traffic	TCP traffic: 192.168.2.4:51406 -> 207.115.66.179:587
Source: global traffic	TCP traffic: 192.168.2.4:51408 -> 200.11.153.189:587
Source: global traffic	TCP traffic: 192.168.2.4:51409 -> 2.207.150.234:587
Source: global traffic	TCP traffic: 192.168.2.4:51411 -> 211.29.132.105:587
Source: global traffic	TCP traffic: 192.168.2.4:51413 -> 40.99.150.66:587
Source: global traffic	TCP traffic: 192.168.2.4:51414 -> 142.250.186.51:587
Source: global traffic	TCP traffic: 192.168.2.4:51415 -> 15.197.225.128:587
Source: global traffic	TCP traffic: 192.168.2.4:51416 -> 5.56.33.1:587
Source: global traffic	TCP traffic: 192.168.2.4:51418 -> 64.59.128.135:587
Source: global traffic	TCP traffic: 192.168.2.4:51420 -> 86.43.151.3:587
Source: global traffic	TCP traffic: 192.168.2.4:51421 -> 148.141.109.36:587
Source: global traffic	TCP traffic: 192.168.2.4:51424 -> 49.12.122.94:587
Source: global traffic	TCP traffic: 192.168.2.4:51425 -> 161.35.151.130:587
Source: global traffic	TCP traffic: 192.168.2.4:51427 -> 188.114.96.3:587
Source: global traffic	TCP traffic: 192.168.2.4:51431 -> 202.27.184.102:587
Source: global traffic	TCP traffic: 192.168.2.4:51432 -> 114.179.184.189:587
Source: global traffic	TCP traffic: 192.168.2.4:51435 -> 162.241.225.30:587
Source: global traffic	TCP traffic: 192.168.2.4:51436 -> 50.62.88.172:587
Source: global traffic	TCP traffic: 192.168.2.4:51439 -> 217.72.192.67:587
Source: global traffic	TCP traffic: 192.168.2.4:51440 -> 186.64.116.115:587
Source: global traffic	TCP traffic: 192.168.2.4:51441 -> 193.122.191.58:587
Source: global traffic	TCP traffic: 192.168.2.4:51442 -> 198.57.196.198:587
Source: global traffic	TCP traffic: 192.168.2.4:51443 -> 200.160.2.95:587
Source: global traffic	TCP traffic: 192.168.2.4:51447 -> 185.187.81.214:587
Source: global traffic	TCP traffic: 192.168.2.4:51451 -> 46.105.229.192:587
Source: global traffic	TCP traffic: 192.168.2.4:51452 -> 13.55.163.193:587
Source: global traffic	TCP traffic: 192.168.2.4:51453 -> 52.98.179.242:587
Source: global traffic	TCP traffic: 192.168.2.4:51454 -> 207.165.35.80:587
Source: global traffic	TCP traffic: 192.168.2.4:51455 -> 142.250.153.26:587
Source: global traffic	TCP traffic: 192.168.2.4:51458 -> 84.116.6.3:587
Source: global traffic	TCP traffic: 192.168.2.4:51459 -> 68.65.122.246:587
Source: global traffic	TCP traffic: 192.168.2.4:51460 -> 217.27.32.193:587
Source: global traffic	TCP traffic: 192.168.2.4:53643 -> 205.139.110.242:587
Source: global traffic	TCP traffic: 192.168.2.4:53644 -> 107.181.238.82:587
Source: global traffic	TCP traffic: 192.168.2.4:53646 -> 173.236.127.29:587
Source: global traffic	TCP traffic: 192.168.2.4:53650 -> 96.99.227.0:587
Source: global traffic	TCP traffic: 192.168.2.4:53651 -> 46.30.213.21:587
Source: global traffic	TCP traffic: 192.168.2.4:53652 -> 157.7.144.5:587
Source: global traffic	TCP traffic: 192.168.2.4:53653 -> 90.216.128.5:587
Source: global traffic	TCP traffic: 192.168.2.4:53656 -> 85.93.219.12:587
Source: global traffic	TCP traffic: 192.168.2.4:53657 -> 52.101.166.1:587
Source: global traffic	TCP traffic: 192.168.2.4:53658 -> 195.181.248.13:587
Source: global traffic	TCP traffic: 192.168.2.4:53661 -> 92.205.54.23:587
Source: global traffic	TCP traffic: 192.168.2.4:53663 -> 103.3.70.4:587
Source: global traffic	TCP traffic: 192.168.2.4:53665 -> 108.167.188.237:587
Source: global traffic	TCP traffic: 192.168.2.4:53666 -> 203.134.71.82:587
Source: global traffic	TCP traffic: 192.168.2.4:53667 -> 217.27.113.30:25
Source: global traffic	TCP traffic: 192.168.2.4:53671 -> 3.211.210.226:25
Source: global traffic	TCP traffic: 192.168.2.4:53673 -> 50.87.150.130:587
Source: global traffic	TCP traffic: 192.168.2.4:53676 -> 153.92.0.100:587
Source: global traffic	TCP traffic: 192.168.2.4:53679 -> 3.111.210.243:587
Source: global traffic	TCP traffic: 192.168.2.4:53680 -> 84.206.126.89:587
Source: global traffic	TCP traffic: 192.168.2.4:53681 -> 66.96.147.118:587
Source: global traffic	TCP traffic: 192.168.2.4:53685 -> 93.149.98.107:587
Source: global traffic	TCP traffic: 192.168.2.4:53686 -> 201.48.8.175:587
Source: global traffic	TCP traffic: 192.168.2.4:53688 -> 162.241.123.65:587
Source: global traffic	TCP traffic: 192.168.2.4:53689 -> 78.27.225.105:587
Source: global traffic	TCP traffic: 192.168.2.4:53691 -> 98.248.157.65:587
Source: global traffic	TCP traffic: 192.168.2.4:53693 -> 66.226.70.66:587
Source: global traffic	TCP traffic: 192.168.2.4:53694 -> 209.222.82.255:587
Source: global traffic	TCP traffic: 192.168.2.4:53695 -> 217.160.0.220:587
Source: global traffic	TCP traffic: 192.168.2.4:53696 -> 137.74.253.81:587
Source: global traffic	TCP traffic: 192.168.2.4:53699 -> 209.91.128.17:587
Source: global traffic	TCP traffic: 192.168.2.4:53702 -> 188.40.63.41:587
Source: global traffic	TCP traffic: 192.168.2.4:53703 -> 190.90.160.165:587
Source: global traffic	TCP traffic: 192.168.2.4:53706 -> 35.208.225.20:587
Source: global traffic	TCP traffic: 192.168.2.4:53707 -> 133.237.129.136:587
Source: global traffic	TCP traffic: 192.168.2.4:53709 -> 187.6.211.40:587
Source: global traffic	TCP traffic: 192.168.2.4:53710 -> 141.94.139.121:587
Source: global traffic	TCP traffic: 192.168.2.4:53711 -> 119.59.116.21:587
Source: global traffic	TCP traffic: 192.168.2.4:53717 -> 212.101.122.34:587
Source: global traffic	TCP traffic: 192.168.2.4:53718 -> 54.39.70.216:587
Source: global traffic	TCP traffic: 192.168.2.4:53720 -> 35.214.166.65:587
Source: global traffic	TCP traffic: 192.168.2.4:53722 -> 140.238.133.27:587
Source: global traffic	TCP traffic: 192.168.2.4:53725 -> 134.193.117.58:587
Source: global traffic	TCP traffic: 192.168.2.4:53729 -> 150.214.204.23:587
Source: global traffic	TCP traffic: 192.168.2.4:53730 -> 47.43.18.10:587
Source: global traffic	TCP traffic: 192.168.2.4:53733 -> 217.27.113.8:25
Source: global traffic	TCP traffic: 192.168.2.4:53735 -> 142.250.150.26:587
Source: global traffic	TCP traffic: 192.168.2.4:53744 -> 51.81.61.71:25
Source: global traffic	TCP traffic: 192.168.2.4:53747 -> 38.111.141.32:587
Source: global traffic	TCP traffic: 192.168.2.4:53748 -> 92.204.80.0:587
Source: global traffic	TCP traffic: 192.168.2.4:53749 -> 3.93.93.44:587
Source: global traffic	TCP traffic: 192.168.2.4:53750 -> 209.216.88.85:587
Source: global traffic	TCP traffic: 192.168.2.4:53751 -> 94.73.188.44:587
Source: global traffic	TCP traffic: 192.168.2.4:53752 -> 92.204.80.3:587
Source: global traffic	TCP traffic: 192.168.2.4:53754 -> 83.136.192.58:587
Source: global traffic	TCP traffic: 192.168.2.4:53755 -> 109.70.148.33:587
Source: global traffic	TCP traffic: 192.168.2.4:53759 -> 85.91.64.104:587
Source: global traffic	TCP traffic: 192.168.2.4:53761 -> 43.131.226.219:587
Source: global traffic	TCP traffic: 192.168.2.4:53762 -> 119.18.54.84:587
Source: global traffic	TCP traffic: 192.168.2.4:53764 -> 193.74.71.25:587
Source: global traffic	TCP traffic: 192.168.2.4:53767 -> 193.122.187.19:587
Source: global traffic	TCP traffic: 192.168.2.4:53768 -> 216.172.172.67:587
Source: global traffic	TCP traffic: 192.168.2.4:53770 -> 195.121.65.26:587
Source: global traffic	TCP traffic: 192.168.2.4:53771 -> 35.215.111.245:587
Source: global traffic	TCP traffic: 192.168.2.4:53776 -> 34.160.41.39:587
Source: global traffic	TCP traffic: 192.168.2.4:53778 -> 62.208.144.13:587
Source: global traffic	TCP traffic: 192.168.2.4:53781 -> 194.126.214.134:587
Source: global traffic	TCP traffic: 192.168.2.4:53783 -> 52.207.128.88:25
Source: global traffic	TCP traffic: 192.168.2.4:53784 -> 185.104.29.150:587
Source: global traffic	TCP traffic: 192.168.2.4:53785 -> 13.248.129.137:587
Source: global traffic	TCP traffic: 192.168.2.4:53789 -> 220.73.163.90:587
Source: global traffic	TCP traffic: 192.168.2.4:53790 -> 64.98.38.5:587
Source: global traffic	TCP traffic: 192.168.2.4:53791 -> 5.189.128.152:587
Source: global traffic	TCP traffic: 192.168.2.4:53793 -> 52.214.181.141:587
Source: global traffic	TCP traffic: 192.168.2.4:53796 -> 104.22.64.144:587
Source: global traffic	TCP traffic: 192.168.2.4:53797 -> 75.2.37.224:587
Source: global traffic	TCP traffic: 192.168.2.4:53798 -> 3.214.30.137:587
Source: global traffic	TCP traffic: 192.168.2.4:53799 -> 52.142.45.143:587
Source: global traffic	TCP traffic: 192.168.2.4:53801 -> 142.132.181.81:587
Source: global traffic	TCP traffic: 192.168.2.4:53802 -> 46.255.231.70:587
Source: global traffic	TCP traffic: 192.168.2.4:53807 -> 87.238.28.12:587
Source: global traffic	TCP traffic: 192.168.2.4:53809 -> 170.249.199.66:587
Source: global traffic	TCP traffic: 192.168.2.4:53812 -> 74.125.200.27:587
Source: global traffic	TCP traffic: 192.168.2.4:53813 -> 3.33.243.145:587
Source: global traffic	TCP traffic: 192.168.2.4:53814 -> 52.101.168.0:587
Source: global traffic	TCP traffic: 192.168.2.4:53819 -> 129.153.232.136:587
Source: global traffic	TCP traffic: 192.168.2.4:53820 -> 62.233.41.248:587
Source: global traffic	TCP traffic: 192.168.2.4:53821 -> 161.184.245.22:587
Source: global traffic	TCP traffic: 192.168.2.4:53826 -> 64.98.38.4:25
Source: global traffic	TCP traffic: 192.168.2.4:53828 -> 162.210.199.87:587
Source: global traffic	TCP traffic: 192.168.2.4:53830 -> 191.6.216.99:587
Source: global traffic	TCP traffic: 192.168.2.4:53832 -> 205.178.146.50:587
Source: global traffic	TCP traffic: 192.168.2.4:53833 -> 212.227.15.183:587
Source: global traffic	TCP traffic: 192.168.2.4:53836 -> 162.43.101.36:587
Source: global traffic	TCP traffic: 192.168.2.4:53837 -> 119.18.54.180:587
Source: global traffic	TCP traffic: 192.168.2.4:53842 -> 211.16.12.177:587
Source: global traffic	TCP traffic: 192.168.2.4:53843 -> 213.136.31.236:587
Source: global traffic	TCP traffic: 192.168.2.4:53846 -> 216.40.42.134:587
Source: global traffic	TCP traffic: 192.168.2.4:53850 -> 74.208.236.22:587
Source: global traffic	TCP traffic: 192.168.2.4:53853 -> 13.248.206.98:587
Source: global traffic	TCP traffic: 192.168.2.4:53854 -> 64.91.253.60:587
Source: global traffic	TCP traffic: 192.168.2.4:53857 -> 3.19.116.195:587
Source: global traffic	TCP traffic: 192.168.2.4:53860 -> 151.164.129.2:587
Source: global traffic	TCP traffic: 192.168.2.4:53865 -> 80.92.67.155:587
Source: global traffic	TCP traffic: 192.168.2.4:53867 -> 194.102.108.59:587
Source: global traffic	TCP traffic: 192.168.2.4:53868 -> 89.233.19.127:587
Source: global traffic	TCP traffic: 192.168.2.4:53869 -> 116.203.110.116:587
Source: global traffic	TCP traffic: 192.168.2.4:53871 -> 173.254.30.45:587
Source: global traffic	TCP traffic: 192.168.2.4:53872 -> 216.58.206.83:587
Source: global traffic	TCP traffic: 192.168.2.4:53875 -> 162.241.2.39:587
Source: global traffic	TCP traffic: 192.168.2.4:53880 -> 3.125.131.179:587
Source: global traffic	TCP traffic: 192.168.2.4:53883 -> 213.205.37.10:587
Source: global traffic	TCP traffic: 192.168.2.4:53886 -> 197.221.10.156:587
Source: global traffic	TCP traffic: 192.168.2.4:53889 -> 104.156.60.32:587
Source: global traffic	TCP traffic: 192.168.2.4:53890 -> 200.58.110.158:587
Source: global traffic	TCP traffic: 192.168.2.4:53898 -> 13.226.175.92:587
Source: global traffic	TCP traffic: 192.168.2.4:53900 -> 82.180.138.219:587
Source: global traffic	TCP traffic: 192.168.2.4:53901 -> 212.83.186.79:587
Source: global traffic	TCP traffic: 192.168.2.4:53904 -> 93.89.224.77:587
Source: global traffic	TCP traffic: 192.168.2.4:53905 -> 208.91.197.27:587
Source: global traffic	TCP traffic: 192.168.2.4:53906 -> 31.170.163.210:587
Source: global traffic	TCP traffic: 192.168.2.4:53907 -> 150.136.204.204:25
Source: global traffic	TCP traffic: 192.168.2.4:53910 -> 35.82.88.33:587
Source: global traffic	TCP traffic: 192.168.2.4:53911 -> 191.101.172.182:587
Source: global traffic	TCP traffic: 192.168.2.4:53914 -> 54.171.95.50:587
Source: global traffic	TCP traffic: 192.168.2.4:53915 -> 129.97.128.232:587
Source: global traffic	TCP traffic: 192.168.2.4:53916 -> 74.220.207.154:587
Source: global traffic	TCP traffic: 192.168.2.4:53917 -> 88.99.236.167:587
Source: global traffic	TCP traffic: 192.168.2.4:53919 -> 34.117.28.143:587
Source: global traffic	TCP traffic: 192.168.2.4:53920 -> 185.185.51.226:587
Source: global traffic	TCP traffic: 192.168.2.4:53921 -> 162.241.226.19:587
Source: global traffic	TCP traffic: 192.168.2.4:53922 -> 105.224.1.26:587
Source: global traffic	TCP traffic: 192.168.2.4:53924 -> 204.74.99.101:587
Source: global traffic	TCP traffic: 192.168.2.4:53926 -> 142.93.64.203:587
Source: global traffic	TCP traffic: 192.168.2.4:53932 -> 141.53.10.100:587
Source: global traffic	TCP traffic: 192.168.2.4:53935 -> 94.46.168.88:587
Source: global traffic	TCP traffic: 192.168.2.4:53940 -> 162.214.115.97:587
Source: global traffic	TCP traffic: 192.168.2.4:53941 -> 149.56.185.74:587
Source: global traffic	TCP traffic: 192.168.2.4:53942 -> 185.209.62.102:587
Source: global traffic	TCP traffic: 192.168.2.4:53953 -> 66.165.234.210:587
Source: global traffic	TCP traffic: 192.168.2.4:53954 -> 106.187.245.193:587
Source: global traffic	TCP traffic: 192.168.2.4:53959 -> 51.83.216.76:587
Source: global traffic	TCP traffic: 192.168.2.4:53961 -> 180.37.199.168:587
Source: global traffic	TCP traffic: 192.168.2.4:53962 -> 120.50.131.112:587
Source: global traffic	TCP traffic: 192.168.2.4:53963 -> 180.37.194.44:587
Source: global traffic	TCP traffic: 192.168.2.4:53964 -> 62.149.157.160:587
Source: global traffic	TCP traffic: 192.168.2.4:53965 -> 13.248.158.7:587
Source: global traffic	TCP traffic: 192.168.2.4:53975 -> 198.54.115.172:587
Source: global traffic	TCP traffic: 192.168.2.4:53976 -> 185.250.104.21:587
Source: global traffic	TCP traffic: 192.168.2.4:53978 -> 62.149.157.175:587
Source: global traffic	TCP traffic: 192.168.2.4:53979 -> 87.248.97.31:587
Source: global traffic	TCP traffic: 192.168.2.4:53981 -> 23.136.240.90:587
Source: global traffic	TCP traffic: 192.168.2.4:53983 -> 72.14.185.43:587
Source: global traffic	TCP traffic: 192.168.2.4:53985 -> 208.147.67.138:587
Source: global traffic	TCP traffic: 192.168.2.4:53986 -> 92.222.115.115:587
Source: global traffic	TCP traffic: 192.168.2.4:53988 -> 167.172.23.243:587
Source: global traffic	TCP traffic: 192.168.2.4:49406 -> 212.27.48.4:587
Source: global traffic	TCP traffic: 192.168.2.4:49409 -> 35.214.121.200:587
Source: global traffic	TCP traffic: 192.168.2.4:49412 -> 27.54.86.58:587
Source: global traffic	TCP traffic: 192.168.2.4:49414 -> 128.240.216.85:587
Source: global traffic	TCP traffic: 192.168.2.4:49415 -> 209.67.129.55:587
Source: global traffic	TCP traffic: 192.168.2.4:49416 -> 111.118.214.84:587
Source: global traffic	TCP traffic: 192.168.2.4:49417 -> 180.37.194.55:587
Source: global traffic	TCP traffic: 192.168.2.4:49419 -> 64.59.136.142:587
Source: global traffic	TCP traffic: 192.168.2.4:49425 -> 108.179.193.149:587
Source: global traffic	TCP traffic: 192.168.2.4:49431 -> 91.235.53.41:587
Source: global traffic	TCP traffic: 192.168.2.4:49432 -> 81.88.58.196:587
Source: global traffic	TCP traffic: 192.168.2.4:49435 -> 193.201.172.98:587
Source: global traffic	TCP traffic: 192.168.2.4:49437 -> 77.79.202.81:587
Source: global traffic	TCP traffic: 192.168.2.4:49446 -> 217.160.0.224:587
Source: global traffic	TCP traffic: 192.168.2.4:49449 -> 103.237.110.98:587
Source: global traffic	TCP traffic: 192.168.2.4:49450 -> 195.138.80.34:587
Source: global traffic	TCP traffic: 192.168.2.4:49451 -> 129.215.17.201:587
Source: global traffic	TCP traffic: 192.168.2.4:49454 -> 91.220.42.211:587
Source: global traffic	TCP traffic: 192.168.2.4:49457 -> 162.241.252.17:587
Source: global traffic	TCP traffic: 192.168.2.4:49459 -> 173.254.30.77:587
Source: global traffic	TCP traffic: 192.168.2.4:49460 -> 182.248.170.226:587
Source: global traffic	TCP traffic: 192.168.2.4:49461 -> 185.164.14.104:587
Source: global traffic	TCP traffic: 192.168.2.4:49466 -> 52.147.208.244:587
Source: global traffic	TCP traffic: 192.168.2.4:49467 -> 129.213.13.252:587
Source: global traffic	TCP traffic: 192.168.2.4:49473 -> 134.147.42.237:587
Source: global traffic	TCP traffic: 192.168.2.4:49476 -> 119.245.179.248:587
Source: global traffic	TCP traffic: 192.168.2.4:49479 -> 18.185.115.251:587
Source: global traffic	TCP traffic: 192.168.2.4:49480 -> 217.160.0.92:587
Source: global traffic	TCP traffic: 192.168.2.4:49482 -> 199.83.128.65:587
Source: global traffic	TCP traffic: 192.168.2.4:49487 -> 177.233.6.140:587
Source: global traffic	TCP traffic: 192.168.2.4:49490 -> 65.109.49.216:25
Source: global traffic	TCP traffic: 192.168.2.4:49495 -> 68.183.186.60:587
Source: global traffic	TCP traffic: 192.168.2.4:49499 -> 41.216.183.54:587
Source: global traffic	TCP traffic: 192.168.2.4:49503 -> 50.116.87.133:587
Source: global traffic	TCP traffic: 192.168.2.4:49504 -> 54.75.201.147:587
Source: global traffic	TCP traffic: 192.168.2.4:49510 -> 60.36.166.235:587
Source: global traffic	TCP traffic: 192.168.2.4:49511 -> 62.103.147.228:587
Source: global traffic	TCP traffic: 192.168.2.4:64412 -> 194.33.181.33:587
Source: global traffic	TCP traffic: 192.168.2.4:64415 -> 211.47.76.59:587
Source: global traffic	TCP traffic: 192.168.2.4:64416 -> 62.37.237.60:587
Source: global traffic	TCP traffic: 192.168.2.4:64420 -> 129.187.254.228:587
Source: global traffic	TCP traffic: 192.168.2.4:64421 -> 185.138.42.193:587
Source: global traffic	TCP traffic: 192.168.2.4:64422 -> 60.36.166.219:587
Source: global traffic	TCP traffic: 192.168.2.4:64424 -> 150.136.132.149:587
Source: global traffic	TCP traffic: 192.168.2.4:64425 -> 83.102.40.126:587
Source: global traffic	TCP traffic: 192.168.2.4:64427 -> 129.121.4.192:587
Source: global traffic	TCP traffic: 192.168.2.4:64428 -> 157.7.231.229:587
Source: global traffic	TCP traffic: 192.168.2.4:64429 -> 110.238.68.173:587
Source: global traffic	TCP traffic: 192.168.2.4:64433 -> 68.66.232.152:587
Source: global traffic	TCP traffic: 192.168.2.4:64437 -> 212.227.15.41:587
Source: global traffic	TCP traffic: 192.168.2.4:64442 -> 62.24.139.43:587
Source: global traffic	TCP traffic: 192.168.2.4:64445 -> 185.230.63.186:587
Source: global traffic	TCP traffic: 192.168.2.4:64446 -> 162.241.85.193:587
Source: global traffic	TCP traffic: 192.168.2.4:64448 -> 186.64.116.175:587
Source: global traffic	TCP traffic: 192.168.2.4:64456 -> 176.9.174.165:587
Source: global traffic	TCP traffic: 192.168.2.4:64457 -> 65.254.250.152:587
Source: global traffic	TCP traffic: 192.168.2.4:64458 -> 59.157.135.3:587
Source: global traffic	TCP traffic: 192.168.2.4:64461 -> 194.19.134.66:587
Source: global traffic	TCP traffic: 192.168.2.4:64462 -> 75.2.24.159:587
Source: global traffic	TCP traffic: 192.168.2.4:64464 -> 3.65.150.226:587
Source: global traffic	TCP traffic: 192.168.2.4:64467 -> 95.70.148.6:587
Source: global traffic	TCP traffic: 192.168.2.4:64474 -> 198.91.81.15:587
Source: global traffic	TCP traffic: 192.168.2.4:64475 -> 34.234.100.102:587
Source: global traffic	TCP traffic: 192.168.2.4:64476 -> 185.84.180.37:587
Source: global traffic	TCP traffic: 192.168.2.4:64479 -> 108.167.168.46:587
Source: global traffic	TCP traffic: 192.168.2.4:64480 -> 31.186.13.240:587
Source: global traffic	TCP traffic: 192.168.2.4:64484 -> 142.93.237.125:587
Source: global traffic	TCP traffic: 192.168.2.4:64488 -> 79.172.249.237:587
Source: global traffic	TCP traffic: 192.168.2.4:64491 -> 162.241.62.81:587
Source: global traffic	TCP traffic: 192.168.2.4:64497 -> 179.27.99.43:587
Source: global traffic	TCP traffic: 192.168.2.4:64500 -> 195.216.236.10:587
Source: global traffic	TCP traffic: 192.168.2.4:64501 -> 81.2.194.128:587
Source: global traffic	TCP traffic: 192.168.2.4:64505 -> 183.90.241.156:587
Source: global traffic	TCP traffic: 192.168.2.4:53689 -> 34.120.156.61:587
Source: global traffic	TCP traffic: 192.168.2.4:53693 -> 220.156.64.7:587
Source: global traffic	TCP traffic: 192.168.2.4:53701 -> 143.95.240.15:587
Source: global traffic	TCP traffic: 192.168.2.4:53708 -> 52.143.158.11:587
Source: global traffic	TCP traffic: 192.168.2.4:53712 -> 52.63.237.70:587
Source: global traffic	TCP traffic: 192.168.2.4:53730 -> 95.130.17.35:587
Source: global traffic	TCP traffic: 192.168.2.4:53746 -> 46.226.148.198:587
Source: global traffic	TCP traffic: 192.168.2.4:53747 -> 211.115.64.90:587
Source: global traffic	TCP traffic: 192.168.2.4:53763 -> 102.219.84.58:587
Source: global traffic	TCP traffic: 192.168.2.4:53766 -> 41.178.51.17:587
Source: global traffic	TCP traffic: 192.168.2.4:53783 -> 113.20.30.104:587
Source: global traffic	TCP traffic: 192.168.2.4:53792 -> 60.234.0.35:587
Source: global traffic	TCP traffic: 192.168.2.4:53810 -> 162.144.38.231:587
Source: global traffic	TCP traffic: 192.168.2.4:53830 -> 94.177.209.28:587
Source: global traffic	TCP traffic: 192.168.2.4:53852 -> 158.106.133.180:587
Source: global traffic	TCP traffic: 192.168.2.4:53855 -> 199.224.64.207:587
Source: global traffic	TCP traffic: 192.168.2.4:53867 -> 208.91.198.143:587
Source: global traffic	TCP traffic: 192.168.2.4:53873 -> 190.185.150.8:587
Source: global traffic	TCP traffic: 192.168.2.4:53887 -> 38.111.141.142:25
Source: global traffic	TCP traffic: 192.168.2.4:53888 -> 119.18.49.6:587
Source: global traffic	TCP traffic: 192.168.2.4:53902 -> 80.66.179.18:587
Source: global traffic	TCP traffic: 192.168.2.4:53905 -> 200.91.27.66:587
Source: global traffic	TCP traffic: 192.168.2.4:53912 -> 77.245.159.99:587

Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.32
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.32
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 93.184.221.240
Source: unknown	TCP traffic detected without corresponding DNS query: 93.184.221.240
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 93.184.221.240
Source: unknown	TCP traffic detected without corresponding DNS query: 93.184.221.240

Source: global traffic	HTTP traffic detected: GET /SLS/%7B522D76A4-93E1-47F8-B8CE-07C937AD1A1E%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=5B67yh1zFHPWn3u&MD=cwfMEBzV HTTP/1.1Connection: Keep-AliveAccept: /User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33Host: slscr.update.microsoft.com
Source: global traffic	HTTP traffic detected: GET /SLS/%7BE7A50285-D08D-499D-9FF8-180FDC2332BC%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=5B67yh1zFHPWn3u&MD=cwfMEBzV HTTP/1.1Connection: Keep-AliveAccept: /User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33Host: slscr.update.microsoft.com

Source: global traffic	DNS traffic detected: DNS query: claywyaeropumps.com
Source: global traffic	DNS traffic detected: DNS query: rofe.ao
Source: global traffic	DNS traffic detected: DNS query: smtp.distribon.com
Source: global traffic	DNS traffic detected: DNS query: smtp.singnet.com.sg
Source: global traffic	DNS traffic detected: DNS query: mail.almkana.com
Source: global traffic	DNS traffic detected: DNS query: mail.staff.gunadarma.ac.id
Source: global traffic	DNS traffic detected: DNS query: mail.century21.com.ve
Source: global traffic	DNS traffic detected: DNS query: smtp.ipatrimoniales.com
Source: global traffic	DNS traffic detected: DNS query: mail.midwich-cuckoos.co.uk
Source: global traffic	DNS traffic detected: DNS query: smtp.freemail.hu
Source: global traffic	DNS traffic detected: DNS query: skydutravel.com
Source: global traffic	DNS traffic detected: DNS query: mail.inovasi.com.my
Source: global traffic	DNS traffic detected: DNS query: mail.gofrosystems.com
Source: global traffic	DNS traffic detected: DNS query: smtp.frontiernet.net
Source: global traffic	DNS traffic detected: DNS query: smtp.cpdistributor.com
Source: global traffic	DNS traffic detected: DNS query: smtp.ic24.net
Source: global traffic	DNS traffic detected: DNS query: ecogreentech.co.in
Source: global traffic	DNS traffic detected: DNS query: mx.oradomail.com
Source: global traffic	DNS traffic detected: DNS query: smtp.cableonda.net
Source: global traffic	DNS traffic detected: DNS query: cehni.org
Source: global traffic	DNS traffic detected: DNS query: smtp.cg.em-net.ne.jp
Source: global traffic	DNS traffic detected: DNS query: smtp.metrocast.net
Source: global traffic	DNS traffic detected: DNS query: mail.wavesmail.xyz
Source: global traffic	DNS traffic detected: DNS query: mail.usiu.ac.ke
Source: global traffic	DNS traffic detected: DNS query: mail.hdimpressoras.com.br
Source: global traffic	DNS traffic detected: DNS query: smtp.iprimus.com.au
Source: global traffic	DNS traffic detected: DNS query: smtp.mediacombb.net
Source: global traffic	DNS traffic detected: DNS query: smtp.frontier.com
Source: global traffic	DNS traffic detected: DNS query: _dc-mx.72265b24d205.kanserimmunoterapisidernegi.com
Source: global traffic	DNS traffic detected: DNS query: smtp.mapalus.com
Source: global traffic	DNS traffic detected: DNS query: mail.burhanreklam.com
Source: global traffic	DNS traffic detected: DNS query: smtp.bps.go.id
Source: global traffic	DNS traffic detected: DNS query: ugelcondorcanqui.gob.pe
Source: global traffic	DNS traffic detected: DNS query: noorsalim.co.id
Source: global traffic	DNS traffic detected: DNS query: smtp.bp2mi.go.id
Source: global traffic	DNS traffic detected: DNS query: smtp.aqualuxinc.com
Source: global traffic	DNS traffic detected: DNS query: smtp.impresavaleriani.com
Source: global traffic	DNS traffic detected: DNS query: mail.ianjohns.co.uk
Source: global traffic	DNS traffic detected: DNS query: smtp.espetoflex.com.br
Source: global traffic	DNS traffic detected: DNS query: autoart.world
Source: global traffic	DNS traffic detected: DNS query: smtp.stofanet.dk
Source: global traffic	DNS traffic detected: DNS query: triangle-m.com
Source: global traffic	DNS traffic detected: DNS query: smtp.madasafish.com
Source: global traffic	DNS traffic detected: DNS query: mail.student.pens.ac.id
Source: global traffic	DNS traffic detected: DNS query: smtp.upcpoczta.pl
Source: global traffic	DNS traffic detected: DNS query: smtp.telenet.be
Source: global traffic	DNS traffic detected: DNS query: vrt.ovh
Source: global traffic	DNS traffic detected: DNS query: smtp.nb.sympatico.ca
Source: global traffic	DNS traffic detected: DNS query: orion-serv.ovh
Source: global traffic	DNS traffic detected: DNS query: mail.vitelcom.net
Source: global traffic	DNS traffic detected: DNS query: patioraiz.com.br
Source: global traffic	DNS traffic detected: DNS query: smtp.ac.em-net.ne.jp
Source: global traffic	DNS traffic detected: DNS query: verenasportsfit.com
Source: global traffic	DNS traffic detected: DNS query: smtp.pandora.be
Source: global traffic	DNS traffic detected: DNS query: thewebfactory.us
Source: global traffic	DNS traffic detected: DNS query: sammancontracting.com
Source: global traffic	DNS traffic detected: DNS query: voobie.com
Source: global traffic	DNS traffic detected: DNS query: smtp.af.em-net.ne.jp
Source: global traffic	DNS traffic detected: DNS query: sigsoconsultores.com
Source: global traffic	DNS traffic detected: DNS query: mail.trackerlogistica.com.br
Source: global traffic	DNS traffic detected: DNS query: smtp.kiwi-web.ch
Source: global traffic	DNS traffic detected: DNS query: smtp.lissrl.com
Source: global traffic	DNS traffic detected: DNS query: smtp.aw.em-net.ne.jp
Source: global traffic	DNS traffic detected: DNS query: smtp3-rdslink.rcs-rds.ro
Source: global traffic	DNS traffic detected: DNS query: ms5.url.com.tw
Source: global traffic	DNS traffic detected: DNS query: smtp.massagioconda.com
Source: global traffic	DNS traffic detected: DNS query: mail.magelangkota.go.id
Source: global traffic	DNS traffic detected: DNS query: smtp.jeff-bhv.de
Source: global traffic	DNS traffic detected: DNS query: smtp.start.psi.br
Source: global traffic	DNS traffic detected: DNS query: pro17.emailserver.vn
Source: global traffic	DNS traffic detected: DNS query: cashamericatoday.com
Source: global traffic	DNS traffic detected: DNS query: stu.univ-saida.dz
Source: global traffic	DNS traffic detected: DNS query: mail.airmail.cc
Source: global traffic	DNS traffic detected: DNS query: poczta.oirpwarszawa.pl
Source: global traffic	DNS traffic detected: DNS query: queenpuppy.co.kr
Source: global traffic	DNS traffic detected: DNS query: knaagdierenhotel.nl
Source: global traffic	DNS traffic detected: DNS query: jardininfantilsmilingkidsnorte.com
Source: global traffic	DNS traffic detected: DNS query: mail.ifcolaboradores.com
Source: global traffic	DNS traffic detected: DNS query: hzmx01.mxmail.netease.com
Source: global traffic	DNS traffic detected: DNS query: host06.emailserver.vn
Source: global traffic	DNS traffic detected: DNS query: mail.anydoor.eu.org
Source: global traffic	DNS traffic detected: DNS query: mail.nychousecleaners.net
Source: global traffic	DNS traffic detected: DNS query: mail.a1net.hr
Source: global traffic	DNS traffic detected: DNS query: autoforcenepal.com
Source: global traffic	DNS traffic detected: DNS query: flyview.com.br
Source: global traffic	DNS traffic detected: DNS query: smtp.andradelogistica.com.br
Source: global traffic	DNS traffic detected: DNS query: smtp.blueroom.com.ar
Source: global traffic	DNS traffic detected: DNS query: dpa-legal.com
Source: global traffic	DNS traffic detected: DNS query: smtp.quickline.com
Source: global traffic	DNS traffic detected: DNS query: mail.dener.com
Source: global traffic	DNS traffic detected: DNS query: mail.tradejournal.co
Source: global traffic	DNS traffic detected: DNS query: smtp.coqui.net
Source: global traffic	DNS traffic detected: DNS query: emjoy.com.co
Source: global traffic	DNS traffic detected: DNS query: bergopakademie.com
Source: global traffic	DNS traffic detected: DNS query: smtp.kingstair.com
Source: global traffic	DNS traffic detected: DNS query: smtp.skynet.be
Source: global traffic	DNS traffic detected: DNS query: smtp.ah.em-net.ne.jp
Source: global traffic	DNS traffic detected: DNS query: mail.zb.lv
Source: global traffic	DNS traffic detected: DNS query: aventurasdealtura.cl
Source: global traffic	DNS traffic detected: DNS query: emp3shop.unixstorm.org

Source: unknown	Network traffic detected: HTTP traffic on port 49675 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49783 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49783
Source: unknown	Network traffic detected: HTTP traffic on port 53701 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53701

Source: unknown	HTTPS traffic detected: 20.12.23.50:443 -> 192.168.2.4:49783 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.12.23.50:443 -> 192.168.2.4:53701 version: TLS 1.2

Spam, unwanted Advertisements and Ransom Demands

Send many emails (e-Mail Spam)

Source: SMTP

Network traffic detected: Mail traffic on many different IPs 444

Source: C:\Users\user\Desktop\b2bXo6vmDm.exe

Code function: 0_2_00007FF7FF3DC2F0: CreateFileW,CloseHandle,wcscpy,wcscpy,wcscpy,wcscpy,CreateFileW,DeviceIoControl,CloseHandle,GetLastError,RemoveDirectoryW,DeleteFileW,_invalid_parameter_noinfo_noreturn,_invalid_parameter_noinfo_noreturn,_invalid_parameter_noinfo_noreturn,_invalid_parameter_noinfo_noreturn,_invalid_parameter_noinfo_noreturn,_invalid_parameter_noinfo_noreturn,_invalid_parameter_noinfo_noreturn,_invalid_parameter_noinfo_noreturn,_invalid_parameter_noinfo_noreturn,_invalid_parameter_noinfo_noreturn,_invalid_parameter_noinfo_noreturn,_invalid_parameter_noinfo_noreturn,

0_2_00007FF7FF3DC2F0

Source: C:\Users\user\AppData\Local\Temp\RarSFX1\thkdh.exe

File created: C:\Windows\Tasks\Test Task17.job

Jump to behavior

Source: C:\Users\user\Desktop\b2bXo6vmDm.exe	Code function: 0_2_00007FF7FF3FCE88	0_2_00007FF7FF3FCE88
Source: C:\Users\user\Desktop\b2bXo6vmDm.exe	Code function: 0_2_00007FF7FF3D5E24	0_2_00007FF7FF3D5E24
Source: C:\Users\user\Desktop\b2bXo6vmDm.exe	Code function: 0_2_00007FF7FF3DF930	0_2_00007FF7FF3DF930
Source: C:\Users\user\Desktop\b2bXo6vmDm.exe	Code function: 0_2_00007FF7FF3E4928	0_2_00007FF7FF3E4928
Source: C:\Users\user\Desktop\b2bXo6vmDm.exe	Code function: 0_2_00007FF7FF400754	0_2_00007FF7FF400754
Source: C:\Users\user\Desktop\b2bXo6vmDm.exe	Code function: 0_2_00007FF7FF3EA4AC	0_2_00007FF7FF3EA4AC
Source: C:\Users\user\Desktop\b2bXo6vmDm.exe	Code function: 0_2_00007FF7FF3FB190	0_2_00007FF7FF3FB190
Source: C:\Users\user\Desktop\b2bXo6vmDm.exe	Code function: 0_2_00007FF7FF412080	0_2_00007FF7FF412080
Source: C:\Users\user\Desktop\b2bXo6vmDm.exe	Code function: 0_2_00007FF7FF3F1F20	0_2_00007FF7FF3F1F20
Source: C:\Users\user\Desktop\b2bXo6vmDm.exe	Code function: 0_2_00007FF7FF3EAF18	0_2_00007FF7FF3EAF18
Source: C:\Users\user\Desktop\b2bXo6vmDm.exe	Code function: 0_2_00007FF7FF3F2D58	0_2_00007FF7FF3F2D58
Source: C:\Users\user\Desktop\b2bXo6vmDm.exe	Code function: 0_2_00007FF7FF400754	0_2_00007FF7FF400754
Source: C:\Users\user\Desktop\b2bXo6vmDm.exe	Code function: 0_2_00007FF7FF3F8DF4	0_2_00007FF7FF3F8DF4
Source: C:\Users\user\Desktop\b2bXo6vmDm.exe	Code function: 0_2_00007FF7FF408C1C	0_2_00007FF7FF408C1C
Source: C:\Users\user\Desktop\b2bXo6vmDm.exe	Code function: 0_2_00007FF7FF3E5B60	0_2_00007FF7FF3E5B60
Source: C:\Users\user\Desktop\b2bXo6vmDm.exe	Code function: 0_2_00007FF7FF3EBB90	0_2_00007FF7FF3EBB90
Source: C:\Users\user\Desktop\b2bXo6vmDm.exe	Code function: 0_2_00007FF7FF3F4B98	0_2_00007FF7FF3F4B98
Source: C:\Users\user\Desktop\b2bXo6vmDm.exe	Code function: 0_2_00007FF7FF40FA94	0_2_00007FF7FF40FA94
Source: C:\Users\user\Desktop\b2bXo6vmDm.exe	Code function: 0_2_00007FF7FF3E1A48	0_2_00007FF7FF3E1A48
Source: C:\Users\user\Desktop\b2bXo6vmDm.exe	Code function: 0_2_00007FF7FF415AF8	0_2_00007FF7FF415AF8
Source: C:\Users\user\Desktop\b2bXo6vmDm.exe	Code function: 0_2_00007FF7FF3D1AA4	0_2_00007FF7FF3D1AA4
Source: C:\Users\user\Desktop\b2bXo6vmDm.exe	Code function: 0_2_00007FF7FF3F2AB0	0_2_00007FF7FF3F2AB0
Source: C:\Users\user\Desktop\b2bXo6vmDm.exe	Code function: 0_2_00007FF7FF3F3964	0_2_00007FF7FF3F3964
Source: C:\Users\user\Desktop\b2bXo6vmDm.exe	Code function: 0_2_00007FF7FF3EC96C	0_2_00007FF7FF3EC96C
Source: C:\Users\user\Desktop\b2bXo6vmDm.exe	Code function: 0_2_00007FF7FF4089A0	0_2_00007FF7FF4089A0
Source: C:\Users\user\Desktop\b2bXo6vmDm.exe	Code function: 0_2_00007FF7FF3D4840	0_2_00007FF7FF3D4840
Source: C:\Users\user\Desktop\b2bXo6vmDm.exe	Code function: 0_2_00007FF7FF40C838	0_2_00007FF7FF40C838
Source: C:\Users\user\Desktop\b2bXo6vmDm.exe	Code function: 0_2_00007FF7FF3D76C0	0_2_00007FF7FF3D76C0
Source: C:\Users\user\Desktop\b2bXo6vmDm.exe	Code function: 0_2_00007FF7FF3EB534	0_2_00007FF7FF3EB534
Source: C:\Users\user\Desktop\b2bXo6vmDm.exe	Code function: 0_2_00007FF7FF412550	0_2_00007FF7FF412550
Source: C:\Users\user\Desktop\b2bXo6vmDm.exe	Code function: 0_2_00007FF7FF3F3484	0_2_00007FF7FF3F3484
Source: C:\Users\user\Desktop\b2bXo6vmDm.exe	Code function: 0_2_00007FF7FF3F53F0	0_2_00007FF7FF3F53F0
Source: C:\Users\user\Desktop\b2bXo6vmDm.exe	Code function: 0_2_00007FF7FF3E126C	0_2_00007FF7FF3E126C
Source: C:\Users\user\Desktop\b2bXo6vmDm.exe	Code function: 0_2_00007FF7FF3D7288	0_2_00007FF7FF3D7288
Source: C:\Users\user\Desktop\b2bXo6vmDm.exe	Code function: 0_2_00007FF7FF3DC2F0	0_2_00007FF7FF3DC2F0
Source: C:\Users\user\Desktop\b2bXo6vmDm.exe	Code function: 0_2_00007FF7FF3DA310	0_2_00007FF7FF3DA310
Source: C:\Users\user\Desktop\b2bXo6vmDm.exe	Code function: 0_2_00007FF7FF3EF180	0_2_00007FF7FF3EF180
Source: C:\Users\user\Desktop\b2bXo6vmDm.exe	Code function: 0_2_00007FF7FF3F21D0	0_2_00007FF7FF3F21D0
Source: C:\Users\user\AppData\Local\Temp\RarSFX0\clamer.exe	Code function: 3_2_00007FF6E8DB5E24	3_2_00007FF6E8DB5E24
Source: C:\Users\user\AppData\Local\Temp\RarSFX0\clamer.exe	Code function: 3_2_00007FF6E8DDCE88	3_2_00007FF6E8DDCE88
Source: C:\Users\user\AppData\Local\Temp\RarSFX0\clamer.exe	Code function: 3_2_00007FF6E8DDB190	3_2_00007FF6E8DDB190
Source: C:\Users\user\AppData\Local\Temp\RarSFX0\clamer.exe	Code function: 3_2_00007FF6E8DCA4AC	3_2_00007FF6E8DCA4AC
Source: C:\Users\user\AppData\Local\Temp\RarSFX0\clamer.exe	Code function: 3_2_00007FF6E8DE0754	3_2_00007FF6E8DE0754
Source: C:\Users\user\AppData\Local\Temp\RarSFX0\clamer.exe	Code function: 3_2_00007FF6E8DBF930	3_2_00007FF6E8DBF930
Source: C:\Users\user\AppData\Local\Temp\RarSFX0\clamer.exe	Code function: 3_2_00007FF6E8DE89A0	3_2_00007FF6E8DE89A0
Source: C:\Users\user\AppData\Local\Temp\RarSFX0\clamer.exe	Code function: 3_2_00007FF6E8DD3964	3_2_00007FF6E8DD3964
Source: C:\Users\user\AppData\Local\Temp\RarSFX0\clamer.exe	Code function: 3_2_00007FF6E8DCC96C	3_2_00007FF6E8DCC96C
Source: C:\Users\user\AppData\Local\Temp\RarSFX0\clamer.exe	Code function: 3_2_00007FF6E8DF5AF8	3_2_00007FF6E8DF5AF8
Source: C:\Users\user\AppData\Local\Temp\RarSFX0\clamer.exe	Code function: 3_2_00007FF6E8DB1AA4	3_2_00007FF6E8DB1AA4
Source: C:\Users\user\AppData\Local\Temp\RarSFX0\clamer.exe	Code function: 3_2_00007FF6E8DD2AB0	3_2_00007FF6E8DD2AB0
Source: C:\Users\user\AppData\Local\Temp\RarSFX0\clamer.exe	Code function: 3_2_00007FF6E8DEFA94	3_2_00007FF6E8DEFA94
Source: C:\Users\user\AppData\Local\Temp\RarSFX0\clamer.exe	Code function: 3_2_00007FF6E8DC1A48	3_2_00007FF6E8DC1A48
Source: C:\Users\user\AppData\Local\Temp\RarSFX0\clamer.exe	Code function: 3_2_00007FF6E8DE8C1C	3_2_00007FF6E8DE8C1C
Source: C:\Users\user\AppData\Local\Temp\RarSFX0\clamer.exe	Code function: 3_2_00007FF6E8DD4B98	3_2_00007FF6E8DD4B98
Source: C:\Users\user\AppData\Local\Temp\RarSFX0\clamer.exe	Code function: 3_2_00007FF6E8DCBB90	3_2_00007FF6E8DCBB90
Source: C:\Users\user\AppData\Local\Temp\RarSFX0\clamer.exe	Code function: 3_2_00007FF6E8DC5B60	3_2_00007FF6E8DC5B60
Source: C:\Users\user\AppData\Local\Temp\RarSFX0\clamer.exe	Code function: 3_2_00007FF6E8DE0754	3_2_00007FF6E8DE0754
Source: C:\Users\user\AppData\Local\Temp\RarSFX0\clamer.exe	Code function: 3_2_00007FF6E8DD8DF4	3_2_00007FF6E8DD8DF4
Source: C:\Users\user\AppData\Local\Temp\RarSFX0\clamer.exe	Code function: 3_2_00007FF6E8DD2D58	3_2_00007FF6E8DD2D58
Source: C:\Users\user\AppData\Local\Temp\RarSFX0\clamer.exe	Code function: 3_2_00007FF6E8DD1F20	3_2_00007FF6E8DD1F20
Source: C:\Users\user\AppData\Local\Temp\RarSFX0\clamer.exe	Code function: 3_2_00007FF6E8DCAF18	3_2_00007FF6E8DCAF18
Source: C:\Users\user\AppData\Local\Temp\RarSFX0\clamer.exe	Code function: 3_2_00007FF6E8DF2080	3_2_00007FF6E8DF2080
Source: C:\Users\user\AppData\Local\Temp\RarSFX0\clamer.exe	Code function: 3_2_00007FF6E8DD21D0	3_2_00007FF6E8DD21D0
Source: C:\Users\user\AppData\Local\Temp\RarSFX0\clamer.exe	Code function: 3_2_00007FF6E8DCF180	3_2_00007FF6E8DCF180
Source: C:\Users\user\AppData\Local\Temp\RarSFX0\clamer.exe	Code function: 3_2_00007FF6E8DBA310	3_2_00007FF6E8DBA310
Source: C:\Users\user\AppData\Local\Temp\RarSFX0\clamer.exe	Code function: 3_2_00007FF6E8DBC2F0	3_2_00007FF6E8DBC2F0
Source: C:\Users\user\AppData\Local\Temp\RarSFX0\clamer.exe	Code function: 3_2_00007FF6E8DB7288	3_2_00007FF6E8DB7288
Source: C:\Users\user\AppData\Local\Temp\RarSFX0\clamer.exe	Code function: 3_2_00007FF6E8DC126C	3_2_00007FF6E8DC126C
Source: C:\Users\user\AppData\Local\Temp\RarSFX0\clamer.exe	Code function: 3_2_00007FF6E8DD53F0	3_2_00007FF6E8DD53F0
Source: C:\Users\user\AppData\Local\Temp\RarSFX0\clamer.exe	Code function: 3_2_00007FF6E8DCB534	3_2_00007FF6E8DCB534
Source: C:\Users\user\AppData\Local\Temp\RarSFX0\clamer.exe	Code function: 3_2_00007FF6E8DD3484	3_2_00007FF6E8DD3484
Source: C:\Users\user\AppData\Local\Temp\RarSFX0\clamer.exe	Code function: 3_2_00007FF6E8DF2550	3_2_00007FF6E8DF2550
Source: C:\Users\user\AppData\Local\Temp\RarSFX0\clamer.exe	Code function: 3_2_00007FF6E8DB76C0	3_2_00007FF6E8DB76C0
Source: C:\Users\user\AppData\Local\Temp\RarSFX0\clamer.exe	Code function: 3_2_00007FF6E8DC4928	3_2_00007FF6E8DC4928
Source: C:\Users\user\AppData\Local\Temp\RarSFX0\clamer.exe	Code function: 3_2_00007FF6E8DB4840	3_2_00007FF6E8DB4840
Source: C:\Users\user\AppData\Local\Temp\RarSFX0\clamer.exe	Code function: 3_2_00007FF6E8DEC838	3_2_00007FF6E8DEC838

Source: Joe Sandbox View	Dropped File: C:\ProgramData\flax\xalhg.exe B63A0E5F93B26AD0EEB9EFBA66691F3B7E7F51E93A2F0098BDE43833F7A24CC2
Source: Joe Sandbox View	Dropped File: C:\Users\user\AppData\Local\Temp\RarSFX1\thkdh.exe B63A0E5F93B26AD0EEB9EFBA66691F3B7E7F51E93A2F0098BDE43833F7A24CC2

Source: classification engine

Classification label: mal100.spre.troj.evad.winEXE@10/5@1588/100

Source: C:\Users\user\Desktop\b2bXo6vmDm.exe

Code function: 0_2_00007FF7FF3DB6D8 GetLastError,FormatMessageW,LocalFree,

0_2_00007FF7FF3DB6D8

Source: C:\Users\user\AppData\Local\Temp\RarSFX1\thkdh.exe

Code function: 4_2_0040166B CreateToolhelp32Snapshot,

4_2_0040166B

Source: C:\Users\user\Desktop\b2bXo6vmDm.exe

Code function: 0_2_00007FF7FF3F8624 FindResourceW,SizeofResource,LoadResource,LockResource,GlobalAlloc,GlobalLock,GdipAlloc,GdipCreateHBITMAPFromBitmap,GlobalUnlock,GlobalFree,

0_2_00007FF7FF3F8624

Source: C:\Windows\System32\conhost.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\SM0:4520:120:WilError_03
Source: C:\ProgramData\flax\xalhg.exe	Mutant created: \Sessions\1\BaseNamedObjects\Test Task17

Source: C:\Users\user\Desktop\b2bXo6vmDm.exe

File created: C:\Users\user\AppData\Local\Temp\RarSFX0

Jump to behavior

Source: C:\Users\user\Desktop\b2bXo6vmDm.exe

Process created: C:\Windows\System32\cmd.exe C:\Windows\system32\cmd.exe /c ""C:\Users\user\AppData\Local\Temp\RarSFX0\1.bat" "

Source: b2bXo6vmDm.exe

Static PE information: Section: .text IMAGE_SCN_CNT_CODE, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ

Source: C:\Users\user\Desktop\b2bXo6vmDm.exe

File read: C:\Windows\win.ini

Jump to behavior

Source: C:\Users\user\Desktop\b2bXo6vmDm.exe

Key opened: HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\Safer\CodeIdentifiers

Jump to behavior

Source: b2bXo6vmDm.exe	ReversingLabs: Detection: 42%
Source: b2bXo6vmDm.exe	Virustotal: Detection: 35%

Source: C:\Users\user\Desktop\b2bXo6vmDm.exe

File read: C:\Users\user\Desktop\b2bXo6vmDm.exe

Jump to behavior

Source: unknown	Process created: C:\Users\user\Desktop\b2bXo6vmDm.exe "C:\Users\user\Desktop\b2bXo6vmDm.exe"
Source: C:\Users\user\Desktop\b2bXo6vmDm.exe	Process created: C:\Windows\System32\cmd.exe C:\Windows\system32\cmd.exe /c ""C:\Users\user\AppData\Local\Temp\RarSFX0\1.bat" "
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: C:\Windows\System32\cmd.exe	Process created: C:\Users\user\AppData\Local\Temp\RarSFX0\clamer.exe clamer.exe -priverdD
Source: C:\Users\user\AppData\Local\Temp\RarSFX0\clamer.exe	Process created: C:\Users\user\AppData\Local\Temp\RarSFX1\thkdh.exe "C:\Users\user\AppData\Local\Temp\RarSFX1\thkdh.exe"
Source: unknown	Process created: C:\ProgramData\flax\xalhg.exe C:\ProgramData\flax\xalhg.exe
Source: C:\Users\user\Desktop\b2bXo6vmDm.exe	Process created: C:\Windows\System32\cmd.exe C:\Windows\system32\cmd.exe /c ""C:\Users\user\AppData\Local\Temp\RarSFX0\1.bat" "	Jump to behavior
Source: C:\Windows\System32\cmd.exe	Process created: C:\Users\user\AppData\Local\Temp\RarSFX0\clamer.exe clamer.exe -priverdD	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\RarSFX0\clamer.exe	Process created: C:\Users\user\AppData\Local\Temp\RarSFX1\thkdh.exe "C:\Users\user\AppData\Local\Temp\RarSFX1\thkdh.exe"	Jump to behavior

Source: C:\Users\user\Desktop\b2bXo6vmDm.exe	Section loaded: version.dll	Jump to behavior
Source: C:\Users\user\Desktop\b2bXo6vmDm.exe	Section loaded: dxgidebug.dll	Jump to behavior
Source: C:\Users\user\Desktop\b2bXo6vmDm.exe	Section loaded: sfc_os.dll	Jump to behavior
Source: C:\Users\user\Desktop\b2bXo6vmDm.exe	Section loaded: sspicli.dll	Jump to behavior
Source: C:\Users\user\Desktop\b2bXo6vmDm.exe	Section loaded: rsaenh.dll	Jump to behavior
Source: C:\Users\user\Desktop\b2bXo6vmDm.exe	Section loaded: uxtheme.dll	Jump to behavior
Source: C:\Users\user\Desktop\b2bXo6vmDm.exe	Section loaded: dwmapi.dll	Jump to behavior
Source: C:\Users\user\Desktop\b2bXo6vmDm.exe	Section loaded: cryptbase.dll	Jump to behavior
Source: C:\Users\user\Desktop\b2bXo6vmDm.exe	Section loaded: riched20.dll	Jump to behavior
Source: C:\Users\user\Desktop\b2bXo6vmDm.exe	Section loaded: usp10.dll	Jump to behavior
Source: C:\Users\user\Desktop\b2bXo6vmDm.exe	Section loaded: msls31.dll	Jump to behavior
Source: C:\Users\user\Desktop\b2bXo6vmDm.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Users\user\Desktop\b2bXo6vmDm.exe	Section loaded: windowscodecs.dll	Jump to behavior
Source: C:\Users\user\Desktop\b2bXo6vmDm.exe	Section loaded: textshaping.dll	Jump to behavior
Source: C:\Users\user\Desktop\b2bXo6vmDm.exe	Section loaded: textinputframework.dll	Jump to behavior
Source: C:\Users\user\Desktop\b2bXo6vmDm.exe	Section loaded: coreuicomponents.dll	Jump to behavior
Source: C:\Users\user\Desktop\b2bXo6vmDm.exe	Section loaded: coremessaging.dll	Jump to behavior
Source: C:\Users\user\Desktop\b2bXo6vmDm.exe	Section loaded: ntmarta.dll	Jump to behavior
Source: C:\Users\user\Desktop\b2bXo6vmDm.exe	Section loaded: coremessaging.dll	Jump to behavior
Source: C:\Users\user\Desktop\b2bXo6vmDm.exe	Section loaded: wintypes.dll	Jump to behavior
Source: C:\Users\user\Desktop\b2bXo6vmDm.exe	Section loaded: wintypes.dll	Jump to behavior
Source: C:\Users\user\Desktop\b2bXo6vmDm.exe	Section loaded: wintypes.dll	Jump to behavior
Source: C:\Users\user\Desktop\b2bXo6vmDm.exe	Section loaded: windows.storage.dll	Jump to behavior
Source: C:\Users\user\Desktop\b2bXo6vmDm.exe	Section loaded: wldp.dll	Jump to behavior
Source: C:\Users\user\Desktop\b2bXo6vmDm.exe	Section loaded: propsys.dll	Jump to behavior
Source: C:\Users\user\Desktop\b2bXo6vmDm.exe	Section loaded: profapi.dll	Jump to behavior
Source: C:\Users\user\Desktop\b2bXo6vmDm.exe	Section loaded: edputil.dll	Jump to behavior
Source: C:\Users\user\Desktop\b2bXo6vmDm.exe	Section loaded: urlmon.dll	Jump to behavior
Source: C:\Users\user\Desktop\b2bXo6vmDm.exe	Section loaded: iertutil.dll	Jump to behavior
Source: C:\Users\user\Desktop\b2bXo6vmDm.exe	Section loaded: srvcli.dll	Jump to behavior
Source: C:\Users\user\Desktop\b2bXo6vmDm.exe	Section loaded: netutils.dll	Jump to behavior
Source: C:\Users\user\Desktop\b2bXo6vmDm.exe	Section loaded: windows.staterepositoryps.dll	Jump to behavior
Source: C:\Users\user\Desktop\b2bXo6vmDm.exe	Section loaded: appresolver.dll	Jump to behavior
Source: C:\Users\user\Desktop\b2bXo6vmDm.exe	Section loaded: bcp47langs.dll	Jump to behavior
Source: C:\Users\user\Desktop\b2bXo6vmDm.exe	Section loaded: slc.dll	Jump to behavior
Source: C:\Users\user\Desktop\b2bXo6vmDm.exe	Section loaded: userenv.dll	Jump to behavior
Source: C:\Users\user\Desktop\b2bXo6vmDm.exe	Section loaded: sppc.dll	Jump to behavior
Source: C:\Users\user\Desktop\b2bXo6vmDm.exe	Section loaded: onecorecommonproxystub.dll	Jump to behavior
Source: C:\Users\user\Desktop\b2bXo6vmDm.exe	Section loaded: onecoreuapcommonproxystub.dll	Jump to behavior
Source: C:\Users\user\Desktop\b2bXo6vmDm.exe	Section loaded: pcacli.dll	Jump to behavior
Source: C:\Users\user\Desktop\b2bXo6vmDm.exe	Section loaded: mpr.dll	Jump to behavior
Source: C:\Users\user\Desktop\b2bXo6vmDm.exe	Section loaded: windows.fileexplorer.common.dll	Jump to behavior
Source: C:\Users\user\Desktop\b2bXo6vmDm.exe	Section loaded: apphelp.dll	Jump to behavior
Source: C:\Users\user\Desktop\b2bXo6vmDm.exe	Section loaded: ntshrui.dll	Jump to behavior
Source: C:\Users\user\Desktop\b2bXo6vmDm.exe	Section loaded: cscapi.dll	Jump to behavior
Source: C:\Users\user\Desktop\b2bXo6vmDm.exe	Section loaded: linkinfo.dll	Jump to behavior
Source: C:\Windows\System32\cmd.exe	Section loaded: cmdext.dll	Jump to behavior
Source: C:\Windows\System32\cmd.exe	Section loaded: apphelp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\RarSFX0\clamer.exe	Section loaded: version.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\RarSFX0\clamer.exe	Section loaded: dxgidebug.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\RarSFX0\clamer.exe	Section loaded: sfc_os.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\RarSFX0\clamer.exe	Section loaded: sspicli.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\RarSFX0\clamer.exe	Section loaded: rsaenh.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\RarSFX0\clamer.exe	Section loaded: uxtheme.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\RarSFX0\clamer.exe	Section loaded: dwmapi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\RarSFX0\clamer.exe	Section loaded: cryptbase.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\RarSFX0\clamer.exe	Section loaded: riched20.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\RarSFX0\clamer.exe	Section loaded: usp10.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\RarSFX0\clamer.exe	Section loaded: msls31.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\RarSFX0\clamer.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\RarSFX0\clamer.exe	Section loaded: dpapi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\RarSFX0\clamer.exe	Section loaded: windowscodecs.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\RarSFX0\clamer.exe	Section loaded: textshaping.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\RarSFX0\clamer.exe	Section loaded: textinputframework.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\RarSFX0\clamer.exe	Section loaded: coreuicomponents.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\RarSFX0\clamer.exe	Section loaded: coremessaging.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\RarSFX0\clamer.exe	Section loaded: ntmarta.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\RarSFX0\clamer.exe	Section loaded: coremessaging.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\RarSFX0\clamer.exe	Section loaded: wintypes.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\RarSFX0\clamer.exe	Section loaded: wintypes.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\RarSFX0\clamer.exe	Section loaded: wintypes.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\RarSFX0\clamer.exe	Section loaded: windows.storage.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\RarSFX0\clamer.exe	Section loaded: wldp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\RarSFX0\clamer.exe	Section loaded: propsys.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\RarSFX0\clamer.exe	Section loaded: profapi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\RarSFX0\clamer.exe	Section loaded: edputil.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\RarSFX0\clamer.exe	Section loaded: urlmon.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\RarSFX0\clamer.exe	Section loaded: iertutil.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\RarSFX0\clamer.exe	Section loaded: srvcli.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\RarSFX0\clamer.exe	Section loaded: netutils.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\RarSFX0\clamer.exe	Section loaded: windows.staterepositoryps.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\RarSFX0\clamer.exe	Section loaded: appresolver.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\RarSFX0\clamer.exe	Section loaded: bcp47langs.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\RarSFX0\clamer.exe	Section loaded: slc.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\RarSFX0\clamer.exe	Section loaded: userenv.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\RarSFX0\clamer.exe	Section loaded: sppc.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\RarSFX0\clamer.exe	Section loaded: onecorecommonproxystub.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\RarSFX0\clamer.exe	Section loaded: onecoreuapcommonproxystub.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\RarSFX0\clamer.exe	Section loaded: apphelp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\RarSFX0\clamer.exe	Section loaded: pcacli.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\RarSFX0\clamer.exe	Section loaded: mpr.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\RarSFX0\clamer.exe	Section loaded: windows.fileexplorer.common.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\RarSFX0\clamer.exe	Section loaded: ntshrui.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\RarSFX0\clamer.exe	Section loaded: cscapi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\RarSFX0\clamer.exe	Section loaded: linkinfo.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\RarSFX0\clamer.exe	Section loaded: msasn1.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\RarSFX1\thkdh.exe	Section loaded: apphelp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\RarSFX1\thkdh.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\RarSFX1\thkdh.exe	Section loaded: uxtheme.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\RarSFX1\thkdh.exe	Section loaded: mstask.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\RarSFX1\thkdh.exe	Section loaded: ntmarta.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\RarSFX1\thkdh.exe	Section loaded: textinputframework.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\RarSFX1\thkdh.exe	Section loaded: coreuicomponents.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\RarSFX1\thkdh.exe	Section loaded: coremessaging.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\RarSFX1\thkdh.exe	Section loaded: coremessaging.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\RarSFX1\thkdh.exe	Section loaded: wintypes.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\RarSFX1\thkdh.exe	Section loaded: wintypes.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\RarSFX1\thkdh.exe	Section loaded: wintypes.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\RarSFX1\thkdh.exe	Section loaded: sspicli.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\RarSFX1\thkdh.exe	Section loaded: windows.storage.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\RarSFX1\thkdh.exe	Section loaded: wldp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\RarSFX1\thkdh.exe	Section loaded: mpr.dll	Jump to behavior
Source: C:\ProgramData\flax\xalhg.exe	Section loaded: apphelp.dll	Jump to behavior
Source: C:\ProgramData\flax\xalhg.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\ProgramData\flax\xalhg.exe	Section loaded: uxtheme.dll	Jump to behavior
Source: C:\ProgramData\flax\xalhg.exe	Section loaded: textinputframework.dll	Jump to behavior
Source: C:\ProgramData\flax\xalhg.exe	Section loaded: coreuicomponents.dll	Jump to behavior
Source: C:\ProgramData\flax\xalhg.exe	Section loaded: coremessaging.dll	Jump to behavior
Source: C:\ProgramData\flax\xalhg.exe	Section loaded: ntmarta.dll	Jump to behavior
Source: C:\ProgramData\flax\xalhg.exe	Section loaded: coremessaging.dll	Jump to behavior
Source: C:\ProgramData\flax\xalhg.exe	Section loaded: wintypes.dll	Jump to behavior
Source: C:\ProgramData\flax\xalhg.exe	Section loaded: wintypes.dll	Jump to behavior
Source: C:\ProgramData\flax\xalhg.exe	Section loaded: wintypes.dll	Jump to behavior
Source: C:\ProgramData\flax\xalhg.exe	Section loaded: mstask.dll	Jump to behavior
Source: C:\ProgramData\flax\xalhg.exe	Section loaded: wsock32.dll	Jump to behavior
Source: C:\ProgramData\flax\xalhg.exe	Section loaded: mswsock.dll	Jump to behavior
Source: C:\ProgramData\flax\xalhg.exe	Section loaded: dnsapi.dll	Jump to behavior
Source: C:\ProgramData\flax\xalhg.exe	Section loaded: iphlpapi.dll	Jump to behavior
Source: C:\ProgramData\flax\xalhg.exe	Section loaded: fwpuclnt.dll	Jump to behavior
Source: C:\ProgramData\flax\xalhg.exe	Section loaded: rasadhlp.dll	Jump to behavior

Source: C:\Users\user\Desktop\b2bXo6vmDm.exe

Key value queried: HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{00BB2765-6A77-11D0-A535-00C04FD7D062}\InProcServer32

Jump to behavior

Source: Window Recorder

Window detected: More than 3 window changes detected

Source: b2bXo6vmDm.exe

Static PE information: Image base 0x140000000 > 0x60000000

Source: b2bXo6vmDm.exe	Static PE information: data directory type: IMAGE_DIRECTORY_ENTRY_IMPORT
Source: b2bXo6vmDm.exe	Static PE information: data directory type: IMAGE_DIRECTORY_ENTRY_RESOURCE
Source: b2bXo6vmDm.exe	Static PE information: data directory type: IMAGE_DIRECTORY_ENTRY_BASERELOC
Source: b2bXo6vmDm.exe	Static PE information: data directory type: IMAGE_DIRECTORY_ENTRY_DEBUG
Source: b2bXo6vmDm.exe	Static PE information: data directory type: IMAGE_DIRECTORY_ENTRY_LOAD_CONFIG
Source: b2bXo6vmDm.exe	Static PE information: data directory type: IMAGE_DIRECTORY_ENTRY_IAT

Source: b2bXo6vmDm.exe

Static PE information: HIGH_ENTROPY_VA, DYNAMIC_BASE, NX_COMPAT, GUARD_CF, TERMINAL_SERVER_AWARE

Source: b2bXo6vmDm.exe

Static PE information: data directory type: IMAGE_DIRECTORY_ENTRY_DEBUG

Source:

Binary string: D:\Projects\WinRAR\sfx\build\sfxrar64\Release\sfxrar.pdb source: b2bXo6vmDm.exe, clamer.exe.0.dr

Source: b2bXo6vmDm.exe	Static PE information: Data directory: IMAGE_DIRECTORY_ENTRY_IMPORT is in: .rdata
Source: b2bXo6vmDm.exe	Static PE information: Data directory: IMAGE_DIRECTORY_ENTRY_RESOURCE is in: .rsrc
Source: b2bXo6vmDm.exe	Static PE information: Data directory: IMAGE_DIRECTORY_ENTRY_BASERELOC is in: .reloc
Source: b2bXo6vmDm.exe	Static PE information: Data directory: IMAGE_DIRECTORY_ENTRY_LOAD_CONFIG is in: .rdata
Source: b2bXo6vmDm.exe	Static PE information: Data directory: IMAGE_DIRECTORY_ENTRY_IAT is in: .rdata

Source: C:\Users\user\Desktop\b2bXo6vmDm.exe

File created: C:\Users\user\AppData\Local\Temp\RarSFX0\__tmp_rar_sfx_access_check_5782562

Jump to behavior

Source: b2bXo6vmDm.exe	Static PE information: section name: .didat
Source: b2bXo6vmDm.exe	Static PE information: section name: _RDATA
Source: clamer.exe.0.dr	Static PE information: section name: .didat
Source: clamer.exe.0.dr	Static PE information: section name: _RDATA

Source: C:\Users\user\Desktop\b2bXo6vmDm.exe	Code function: 0_2_00007FF7FF415166 push rsi; retf	0_2_00007FF7FF415167
Source: C:\Users\user\Desktop\b2bXo6vmDm.exe	Code function: 0_2_00007FF7FF415156 push rsi; retf	0_2_00007FF7FF415157
Source: C:\Users\user\AppData\Local\Temp\RarSFX0\clamer.exe	Code function: 3_2_00007FF6E8DF5156 push rsi; retf	3_2_00007FF6E8DF5157
Source: C:\Users\user\AppData\Local\Temp\RarSFX0\clamer.exe	Code function: 3_2_00007FF6E8DF5166 push rsi; retf	3_2_00007FF6E8DF5167

Source: C:\Users\user\AppData\Local\Temp\RarSFX1\thkdh.exe	File created: C:\ProgramData\flax\xalhg.exe	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\RarSFX0\clamer.exe	File created: C:\Users\user\AppData\Local\Temp\RarSFX1\thkdh.exe	Jump to dropped file
Source: C:\Users\user\Desktop\b2bXo6vmDm.exe	File created: C:\Users\user\AppData\Local\Temp\RarSFX0\clamer.exe	Jump to dropped file

Source: C:\Users\user\AppData\Local\Temp\RarSFX1\thkdh.exe

File created: C:\ProgramData\flax\xalhg.exe

Jump to dropped file

Source: C:\Users\user\AppData\Local\Temp\RarSFX1\thkdh.exe

File created: C:\Windows\Tasks\Test Task17.job

Jump to behavior

Source: C:\Users\user\Desktop\b2bXo6vmDm.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\cmd.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\RarSFX0\clamer.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior

Malware Analysis System Evasion

Tries to detect virtualization through RDTSC time measurements

Source: C:\Users\user\AppData\Local\Temp\RarSFX1\thkdh.exe	RDTSC instruction interceptor: First address: 402E5A second address: 402E5A instructions: 0x00000000 rdtsc 0x00000002 push ebp 0x00000003 mov ebp, esp 0x00000005 push ebx 0x00000006 push ecx 0x00000007 push edx 0x00000008 push edi 0x00000009 push esi 0x0000000a imul eax, eax, 001E7319h 0x00000010 add eax, 3CFB5543h 0x00000015 rcr eax, 10h 0x00000018 add eax, esi 0x0000001a imul eax, edi 0x0000001d xor edx, edx 0x0000001f mul dword ptr [ebp+08h] 0x00000022 mov eax, edx 0x00000024 pop esi 0x00000025 pop edi 0x00000026 pop edx 0x00000027 pop ecx 0x00000028 pop ebx 0x00000029 leave 0x0000002a retn 0004h 0x0000002d lea eax, dword ptr [eax+00000300h] 0x00000033 push eax 0x00000034 push 00405C2Fh 0x00000039 call 00007F7820C9969Ch 0x0000003e push ebp 0x0000003f mov ebp, esp 0x00000041 push ebx 0x00000042 push edi 0x00000043 push esi 0x00000044 mov edi, dword ptr [ebp+08h] 0x00000047 push 000000FFh 0x0000004c call 00007F7820C97E59h 0x00000051 rdtsc
Source: C:\ProgramData\flax\xalhg.exe	RDTSC instruction interceptor: First address: 402E5A second address: 402E5A instructions: 0x00000000 rdtsc 0x00000002 push ebp 0x00000003 mov ebp, esp 0x00000005 push ebx 0x00000006 push ecx 0x00000007 push edx 0x00000008 push edi 0x00000009 push esi 0x0000000a imul eax, eax, 001E7319h 0x00000010 add eax, 3CFB5543h 0x00000015 rcr eax, 10h 0x00000018 add eax, esi 0x0000001a imul eax, edi 0x0000001d xor edx, edx 0x0000001f mul dword ptr [ebp+08h] 0x00000022 mov eax, edx 0x00000024 pop esi 0x00000025 pop edi 0x00000026 pop edx 0x00000027 pop ecx 0x00000028 pop ebx 0x00000029 leave 0x0000002a retn 0004h 0x0000002d lea eax, dword ptr [eax+00000300h] 0x00000033 push eax 0x00000034 push 00405C2Fh 0x00000039 call 00007F7820BF357Ch 0x0000003e push ebp 0x0000003f mov ebp, esp 0x00000041 push ebx 0x00000042 push edi 0x00000043 push esi 0x00000044 mov edi, dword ptr [ebp+08h] 0x00000047 push 000000FFh 0x0000004c call 00007F7820BF1D39h 0x00000051 rdtsc

Source: C:\Users\user\AppData\Local\Temp\RarSFX1\thkdh.exe

Code function: 4_2_00402E5A rdtsc

4_2_00402E5A

Source: C:\Users\user\AppData\Local\Temp\RarSFX1\thkdh.exe TID: 1068	Thread sleep time: -60000s >= -30000s			Jump to behavior
Source: C:\ProgramData\flax\xalhg.exe TID: 3720	Thread sleep time: -60000s >= -30000s			Jump to behavior

Source: C:\Users\user\Desktop\b2bXo6vmDm.exe	File Volume queried: C:\ FullSizeInformation			Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\RarSFX0\clamer.exe	File Volume queried: C:\ FullSizeInformation			Jump to behavior

Source: C:\Users\user\Desktop\b2bXo6vmDm.exe	Code function: 0_2_00007FF7FF3E40BC FindFirstFileW,FindFirstFileW,GetLastError,FindNextFileW,GetLastError,_invalid_parameter_noinfo_noreturn,_invalid_parameter_noinfo_noreturn,	0_2_00007FF7FF3E40BC
Source: C:\Users\user\Desktop\b2bXo6vmDm.exe	Code function: 0_2_00007FF7FF3FB190 EndDialog,SetDlgItemTextW,GetMessageW,IsDialogMessageW,TranslateMessage,DispatchMessageW,EndDialog,GetDlgItem,IsDlgButtonChecked,IsDlgButtonChecked,SetFocus,GetLastError,GetLastError,GetTickCount,GetLastError,GetCommandLineW,CreateFileMappingW,MapViewOfFile,ShellExecuteExW,WaitForInputIdle,Sleep,UnmapViewOfFile,CloseHandle,SetDlgItemTextW,SetDlgItemTextW,GetDlgItem,GetWindowLongPtrW,SetWindowLongPtrW,SetDlgItemTextW,IsDlgButtonChecked,SendDlgItemMessageW,GetDlgItem,IsDlgButtonChecked,GetDlgItem,SetDlgItemTextW,SetDlgItemTextW,DialogBoxParamW,EndDialog,EnableWindow,IsDlgButtonChecked,SetDlgItemTextW,_invalid_parameter_noinfo_noreturn,_invalid_parameter_noinfo_noreturn,_invalid_parameter_noinfo_noreturn,_invalid_parameter_noinfo_noreturn,_invalid_parameter_noinfo_noreturn,_invalid_parameter_noinfo_noreturn,SendDlgItemMessageW,EndDialog,GetDlgItem,SetFocus,SendDlgItemMessageW,FindFirstFileW,FindClose,SendDlgItemMessageW,_invalid_parameter_noinfo_noreturn,_invalid_parameter_noinfo_noreturn,_invalid_parameter_noinfo_noreturn,_invalid_parameter_noinfo_noreturn,_invalid_parameter_noinfo_noreturn,_invalid_parameter_noinfo_noreturn,	0_2_00007FF7FF3FB190
Source: C:\Users\user\Desktop\b2bXo6vmDm.exe	Code function: 0_2_00007FF7FF40FCA0 FindFirstFileExA,	0_2_00007FF7FF40FCA0
Source: C:\Users\user\AppData\Local\Temp\RarSFX0\clamer.exe	Code function: 3_2_00007FF6E8DC40BC FindFirstFileW,FindFirstFileW,GetLastError,FindNextFileW,GetLastError,_invalid_parameter_noinfo_noreturn,_invalid_parameter_noinfo_noreturn,	3_2_00007FF6E8DC40BC
Source: C:\Users\user\AppData\Local\Temp\RarSFX0\clamer.exe	Code function: 3_2_00007FF6E8DDB190 EndDialog,SetDlgItemTextW,GetMessageW,IsDialogMessageW,TranslateMessage,DispatchMessageW,EndDialog,GetDlgItem,IsDlgButtonChecked,IsDlgButtonChecked,SetFocus,GetLastError,GetLastError,GetTickCount,GetLastError,GetCommandLineW,CreateFileMappingW,MapViewOfFile,ShellExecuteExW,WaitForInputIdle,Sleep,UnmapViewOfFile,CloseHandle,SetDlgItemTextW,SetDlgItemTextW,GetDlgItem,GetWindowLongPtrW,SetWindowLongPtrW,SetDlgItemTextW,IsDlgButtonChecked,SendDlgItemMessageW,GetDlgItem,IsDlgButtonChecked,GetDlgItem,SetDlgItemTextW,SetDlgItemTextW,DialogBoxParamW,EndDialog,EnableWindow,IsDlgButtonChecked,SetDlgItemTextW,_invalid_parameter_noinfo_noreturn,_invalid_parameter_noinfo_noreturn,_invalid_parameter_noinfo_noreturn,_invalid_parameter_noinfo_noreturn,_invalid_parameter_noinfo_noreturn,_invalid_parameter_noinfo_noreturn,SendDlgItemMessageW,EndDialog,GetDlgItem,SetFocus,SendDlgItemMessageW,FindFirstFileW,FindClose,SendDlgItemMessageW,_invalid_parameter_noinfo_noreturn,_invalid_parameter_noinfo_noreturn,_invalid_parameter_noinfo_noreturn,_invalid_parameter_noinfo_noreturn,_invalid_parameter_noinfo_noreturn,_invalid_parameter_noinfo_noreturn,	3_2_00007FF6E8DDB190
Source: C:\Users\user\AppData\Local\Temp\RarSFX0\clamer.exe	Code function: 3_2_00007FF6E8DEFCA0 FindFirstFileExA,	3_2_00007FF6E8DEFCA0

Source: C:\Users\user\Desktop\b2bXo6vmDm.exe

Code function: 0_2_00007FF7FF4016A4 VirtualQuery,GetSystemInfo,

0_2_00007FF7FF4016A4

Source: C:\Users\user\AppData\Local\Temp\RarSFX1\thkdh.exe	Thread delayed: delay time: 60000			Jump to behavior
Source: C:\ProgramData\flax\xalhg.exe	Thread delayed: delay time: 60000			Jump to behavior

Source: clamer.exe, 00000003.00000003.1700716550.000001B130033000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: \??\SCSI#CdRom&Ven_NECVMWar&Prod_VMware_SATA_CD00#4&224f42ef&0&000000#{53f5630d-b6bf-11d0-94f2-00a0c91efb8b}8b}\
Source: xalhg.exe, 00000005.00000002.2942942478.00000000006FE000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: Hyper-V RAW%SystemRoot%\system32\mswsock.dll

Source: C:\Users\user\AppData\Local\Temp\RarSFX1\thkdh.exe

Code function: 4_2_00402E5A rdtsc

4_2_00402E5A

Source: C:\Users\user\AppData\Local\Temp\RarSFX1\thkdh.exe

Code function: 4_2_00402E87 LdrLoadDll,

4_2_00402E87

Source: C:\Users\user\Desktop\b2bXo6vmDm.exe

Code function: 0_2_00007FF7FF4076D8 RtlCaptureContext,RtlLookupFunctionEntry,RtlVirtualUnwind,IsDebuggerPresent,SetUnhandledExceptionFilter,UnhandledExceptionFilter,

0_2_00007FF7FF4076D8

Source: C:\Users\user\AppData\Local\Temp\RarSFX1\thkdh.exe

Code function: 4_2_00402E87 mov eax, dword ptr fs:[00000030h]

4_2_00402E87

Source: C:\Users\user\Desktop\b2bXo6vmDm.exe

Code function: 0_2_00007FF7FF410D20 GetProcessHeap,

0_2_00007FF7FF410D20

Source: C:\Users\user\Desktop\b2bXo6vmDm.exe	Code function: 0_2_00007FF7FF4076D8 RtlCaptureContext,RtlLookupFunctionEntry,RtlVirtualUnwind,IsDebuggerPresent,SetUnhandledExceptionFilter,UnhandledExceptionFilter,	0_2_00007FF7FF4076D8
Source: C:\Users\user\Desktop\b2bXo6vmDm.exe	Code function: 0_2_00007FF7FF402510 SetUnhandledExceptionFilter,UnhandledExceptionFilter,GetCurrentProcess,TerminateProcess,	0_2_00007FF7FF402510
Source: C:\Users\user\Desktop\b2bXo6vmDm.exe	Code function: 0_2_00007FF7FF403354 SetUnhandledExceptionFilter,	0_2_00007FF7FF403354
Source: C:\Users\user\Desktop\b2bXo6vmDm.exe	Code function: 0_2_00007FF7FF403170 IsProcessorFeaturePresent,RtlCaptureContext,RtlLookupFunctionEntry,RtlVirtualUnwind,IsDebuggerPresent,SetUnhandledExceptionFilter,UnhandledExceptionFilter,	0_2_00007FF7FF403170
Source: C:\Users\user\AppData\Local\Temp\RarSFX0\clamer.exe	Code function: 3_2_00007FF6E8DE3170 IsProcessorFeaturePresent,RtlCaptureContext,RtlLookupFunctionEntry,RtlVirtualUnwind,IsDebuggerPresent,SetUnhandledExceptionFilter,UnhandledExceptionFilter,	3_2_00007FF6E8DE3170
Source: C:\Users\user\AppData\Local\Temp\RarSFX0\clamer.exe	Code function: 3_2_00007FF6E8DE3354 SetUnhandledExceptionFilter,	3_2_00007FF6E8DE3354
Source: C:\Users\user\AppData\Local\Temp\RarSFX0\clamer.exe	Code function: 3_2_00007FF6E8DE2510 SetUnhandledExceptionFilter,UnhandledExceptionFilter,GetCurrentProcess,TerminateProcess,	3_2_00007FF6E8DE2510
Source: C:\Users\user\AppData\Local\Temp\RarSFX0\clamer.exe	Code function: 3_2_00007FF6E8DE76D8 RtlCaptureContext,RtlLookupFunctionEntry,RtlVirtualUnwind,IsDebuggerPresent,SetUnhandledExceptionFilter,UnhandledExceptionFilter,	3_2_00007FF6E8DE76D8
Source: C:\Users\user\AppData\Local\Temp\RarSFX1\thkdh.exe	Code function: 4_2_00401000 EntryPoint,CreateThread,SetUnhandledExceptionFilter,GetModuleFileNameW,EnumWindows,GetEnvironmentVariableW,CreateDirectoryW,CopyFileW,CopyFileW,Sleep,CreateMutexW,ExitProcess,	4_2_00401000

Source: C:\Users\user\Desktop\b2bXo6vmDm.exe

Code function: 0_2_00007FF7FF3FB190 EndDialog,SetDlgItemTextW,GetMessageW,IsDialogMessageW,TranslateMessage,DispatchMessageW,EndDialog,GetDlgItem,IsDlgButtonChecked,IsDlgButtonChecked,SetFocus,GetLastError,GetLastError,GetTickCount,GetLastError,GetCommandLineW,CreateFileMappingW,MapViewOfFile,ShellExecuteExW,WaitForInputIdle,Sleep,UnmapViewOfFile,CloseHandle,SetDlgItemTextW,SetDlgItemTextW,GetDlgItem,GetWindowLongPtrW,SetWindowLongPtrW,SetDlgItemTextW,IsDlgButtonChecked,SendDlgItemMessageW,GetDlgItem,IsDlgButtonChecked,GetDlgItem,SetDlgItemTextW,SetDlgItemTextW,DialogBoxParamW,EndDialog,EnableWindow,IsDlgButtonChecked,SetDlgItemTextW,_invalid_parameter_noinfo_noreturn,_invalid_parameter_noinfo_noreturn,_invalid_parameter_noinfo_noreturn,_invalid_parameter_noinfo_noreturn,_invalid_parameter_noinfo_noreturn,_invalid_parameter_noinfo_noreturn,SendDlgItemMessageW,EndDialog,GetDlgItem,SetFocus,SendDlgItemMessageW,FindFirstFileW,FindClose,SendDlgItemMessageW,_invalid_parameter_noinfo_noreturn,_invalid_parameter_noinfo_noreturn,_invalid_parameter_noinfo_noreturn,_invalid_parameter_noinfo_noreturn,_invalid_parameter_noinfo_noreturn,_invalid_parameter_noinfo_noreturn,

0_2_00007FF7FF3FB190

Source: C:\Users\user\Desktop\b2bXo6vmDm.exe	Process created: C:\Windows\System32\cmd.exe C:\Windows\system32\cmd.exe /c ""C:\Users\user\AppData\Local\Temp\RarSFX0\1.bat" "	Jump to behavior
Source: C:\Windows\System32\cmd.exe	Process created: C:\Users\user\AppData\Local\Temp\RarSFX0\clamer.exe clamer.exe -priverdD	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\RarSFX0\clamer.exe	Process created: C:\Users\user\AppData\Local\Temp\RarSFX1\thkdh.exe "C:\Users\user\AppData\Local\Temp\RarSFX1\thkdh.exe"	Jump to behavior

Source: C:\Users\user\Desktop\b2bXo6vmDm.exe

Code function: 0_2_00007FF7FF3EDC70 cpuid

0_2_00007FF7FF3EDC70

Source: C:\Users\user\Desktop\b2bXo6vmDm.exe	Code function: GetLocaleInfoW,GetNumberFormatW,		0_2_00007FF7FF3FA2CC
Source: C:\Users\user\AppData\Local\Temp\RarSFX0\clamer.exe	Code function: GetLocaleInfoW,GetNumberFormatW,		3_2_00007FF6E8DDA2CC

Source: C:\Users\user\Desktop\b2bXo6vmDm.exe

Code function: 0_2_00007FF7FF400754 GetCommandLineW,OpenFileMappingW,MapViewOfFile,UnmapViewOfFile,MapViewOfFile,UnmapViewOfFile,CloseHandle,SetEnvironmentVariableW,GetLocalTime,swprintf,SetEnvironmentVariableW,GetModuleHandleW,LoadIconW,DialogBoxParamW,SleepEx,DeleteObject,DeleteObject,CloseHandle,OleUninitialize,_invalid_parameter_noinfo_noreturn,_invalid_parameter_noinfo_noreturn,_invalid_parameter_noinfo_noreturn,

0_2_00007FF7FF400754

Source: C:\Users\user\AppData\Local\Temp\RarSFX1\thkdh.exe

Code function: 4_2_00401806 CoInitialize,GetUserNameW,GetSystemTime,

4_2_00401806

Source: C:\Users\user\Desktop\b2bXo6vmDm.exe

Code function: 0_2_00007FF7FF3E4EB0 GetVersionExW,

0_2_00007FF7FF3E4EB0

Stealing of Sensitive Information

Yara detected SystemBC

Source: Yara match	File source: 4.0.thkdh.exe.400000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 5.0.xalhg.exe.400000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 00000004.00000002.1699625834.000000000042E000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000003.00000003.1694019057.000001B13408C000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000005.00000000.1701026803.0000000000405000.00000008.00000001.01000000.0000000C.sdmp, type: MEMORY
Source: Yara match	File source: 00000004.00000000.1696467305.0000000000405000.00000008.00000001.01000000.0000000B.sdmp, type: MEMORY
Source: Yara match	File source: Process Memory Space: clamer.exe PID: 6664, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: thkdh.exe PID: 6688, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: xalhg.exe PID: 6972, type: MEMORYSTR
Source: Yara match	File source: C:\Users\user\AppData\Local\Temp\RarSFX1\thkdh.exe, type: DROPPED
Source: Yara match	File source: C:\ProgramData\flax\xalhg.exe, type: DROPPED

Remote Access Functionality

Yara detected SystemBC

Source: Yara match	File source: 4.0.thkdh.exe.400000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 5.0.xalhg.exe.400000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 00000004.00000002.1699625834.000000000042E000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000003.00000003.1694019057.000001B13408C000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000005.00000000.1701026803.0000000000405000.00000008.00000001.01000000.0000000C.sdmp, type: MEMORY
Source: Yara match	File source: 00000004.00000000.1696467305.0000000000405000.00000008.00000001.01000000.0000000B.sdmp, type: MEMORY
Source: Yara match	File source: Process Memory Space: clamer.exe PID: 6664, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: thkdh.exe PID: 6688, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: xalhg.exe PID: 6972, type: MEMORYSTR
Source: Yara match	File source: C:\Users\user\AppData\Local\Temp\RarSFX1\thkdh.exe, type: DROPPED
Source: Yara match	File source: C:\ProgramData\flax\xalhg.exe, type: DROPPED

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	1 Scripting	Valid Accounts	1 Scheduled Task/Job	1 Scheduled Task/Job	1 Exploitation for Privilege Escalation	1 Masquerading	OS Credential Dumping	1 System Time Discovery	Remote Services	1 Archive Collected Data	11 Encrypted Channel	1 Exfiltration Over Alternative Protocol	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	1 Scripting	11 Process Injection	11 Virtualization/Sandbox Evasion	LSASS Memory	231 Security Software Discovery	Remote Desktop Protocol	Data from Removable Media	1 Non-Standard Port	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	1 DLL Side-Loading	1 Scheduled Task/Job	11 Process Injection	Security Account Manager	11 Virtualization/Sandbox Evasion	SMB/Windows Admin Shares	Data from Network Shared Drive	1 Data Encoding	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	1 DLL Side-Loading	1 Obfuscated Files or Information	NTDS	1 Process Discovery	Distributed Component Object Model	Input Capture	1 Ingress Tool Transfer	Traffic Duplication	Data Destruction
Gather Victim Network Information	Server	Cloud Accounts	Launchd	Network Logon Script	Network Logon Script	1 Software Packing	LSA Secrets	1 Account Discovery	SSH	Keylogging	2 Non-Application Layer Protocol	Scheduled Transfer	Data Encrypted for Impact
Domain Properties	Botnet	Replication Through Removable Media	Scheduled Task	RC Scripts	RC Scripts	1 DLL Side-Loading	Cached Domain Credentials	1 System Owner/User Discovery	VNC	GUI Input Capture	113 Application Layer Protocol	Data Transfer Size Limits	Service Stop
DNS	Web Services	External Remote Services	Systemd Timers	Startup Items	Startup Items	Compile After Delivery	DCSync	2 File and Directory Discovery	Windows Remote Management	Web Portal Capture	Commonly Used Port	Exfiltration Over C2 Channel	Inhibit System Recovery
Network Trust Dependencies	Serverless	Drive-by Compromise	Container Orchestration Job	Scheduled Task/Job	Scheduled Task/Job	Indicator Removal from Tools	Proc Filesystem	125 System Information Discovery	Cloud Services	Credential API Hooking	Application Layer Protocol	Exfiltration Over Alternative Protocol	Defacement

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Source	Detection	Scanner	Label	Link
b2bXo6vmDm.exe	42%	ReversingLabs	Win64.Trojan.Amadey
b2bXo6vmDm.exe	36%	Virustotal		Browse

Dropped Files

Source	Detection	Scanner	Label
C:\ProgramData\flax\xalhg.exe	100%	Avira	HEUR/AGEN.1342209
C:\Users\user\AppData\Local\Temp\RarSFX1\thkdh.exe	100%	Avira	HEUR/AGEN.1342209
C:\ProgramData\flax\xalhg.exe	100%	Joe Sandbox ML
C:\Users\user\AppData\Local\Temp\RarSFX1\thkdh.exe	100%	Joe Sandbox ML
C:\ProgramData\flax\xalhg.exe	84%	ReversingLabs	Win32.Backdoor.Coroxy
C:\Users\user\AppData\Local\Temp\RarSFX0\clamer.exe	8%	ReversingLabs
C:\Users\user\AppData\Local\Temp\RarSFX1\thkdh.exe	84%	ReversingLabs	Win32.Backdoor.Coroxy

Unpacked PE Files

⊘No Antivirus matches

Domains

Source	Detection	Scanner	Link
box.ua	0%	Virustotal	Browse
grupoartplus.com.br	0%	Virustotal	Browse
walla.com	0%	Virustotal	Browse
alt2.aspmx.l.google.com	0%	Virustotal	Browse

URLs

Source	Detection	Scanner	Label	Link
claywyaeropumps.com	0%	Avira URL Cloud	safe
185.43.220.45	0%	Avira URL Cloud	safe

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Antivirus Detection	Reputation
box.ua	178.128.251.242	true	false	0%, Virustotal, Browse	unknown
mail.trabzonturkuazosgb.com	93.89.226.88	true	false		unknown
grupoartplus.com.br	192.185.218.14	true	false	0%, Virustotal, Browse	unknown
smtp.markcomm.com.mx	162.215.121.91	true	false		unknown
walla.com	34.160.41.39	true	false	0%, Virustotal, Browse	unknown
alt2.aspmx.l.google.com	142.251.9.27	true	false	0%, Virustotal, Browse	unknown
mail.wxs.nl	195.121.65.26	true	false		unknown
mail.personalizateya.com	162.241.225.30	true	false		unknown
mail.woodsville-florist.com	103.237.169.60	true	false		unknown
smtp.okulmix.net	185.84.180.37	true	false		unknown
mail.gallant.ca	149.248.61.31	true	false		unknown
smtp-hk.gtm.oss-core.net	203.134.71.84	true	false		unknown
smtp.nwytg.net	65.109.49.216	true	false		unknown
smtp.maskatel.net	67.223.158.212	true	false		unknown
d1881mr5w2vitt.cloudfront.net	13.226.175.92	true	false		unknown
secure.de.de	80.92.67.155	true	false		unknown
qipoo.pe	162.55.131.89	true	false		unknown
smtp-ip.gtm.oss-core.net	203.134.153.82	true	false		unknown
telusplanet.net	161.184.245.22	true	false		unknown
smtp.163.net	106.38.219.73	true	false		unknown
smtp.euroaffiliati.com	62.149.128.200	true	false		unknown
lisaallaninteriordesign.co.uk	185.151.30.142	true	false		unknown
data-affinity.com	45.82.191.137	true	false		unknown
d333211.b.ess.de.barracudanetworks.com	18.185.115.251	true	false		unknown
jcom-home.mx.zaq.ne.jp	175.135.254.129	true	false		unknown
smtp.infinito.it	194.185.246.171	true	false		unknown
smtp.aslogic.es	217.116.0.228	true	false		unknown
toymaster.com.br	162.241.62.81	true	false		unknown
mail.o-guitars.com	200.58.111.68	true	false		unknown
creativesalem.com	130.211.29.77	true	false		unknown
e-mds.com	15.197.225.128	true	false		unknown
saarbourgdesign-de.mail.protection.outlook.com	52.101.73.16	true	false		unknown
mx00.ionos.de	212.227.15.41	true	false		unknown
mx-cluster-ca01.hornetsecurity.com	108.163.133.231	true	false		unknown
mail.the-beach.net	38.111.141.32	true	false		unknown
_dc-mx.374b7b1c2704.ssbresidence.com	198.54.115.172	true	false		unknown
mta.auchanbox.fr	82.216.111.1	true	false		unknown
smtp.cfa.org.uk	83.170.124.83	true	false		unknown
walla.co.il	34.160.41.39	true	false		unknown
mail.korreoweb.com	52.58.173.206	true	false		unknown
h1realestate.com.au	103.250.215.162	true	false		unknown
mail.cock.li	37.120.193.124	true	false		unknown
mr.fibercorp.com.ar	201.212.2.146	true	false		unknown
securesmtp.jungclaus.dk	94.231.103.59	true	false		unknown
swiftukrecruitment.com	173.199.153.170	true	false		unknown
blackfoot.net.av-mx.com	129.159.110.135	true	false		unknown
mail.destroyannoy.com	199.223.255.174	true	false		unknown
voytacha.hu	34.254.44.104	true	false		unknown
uwo-ca.mail.protection.outlook.com	52.101.190.3	true	false		unknown
aplprinter.com	201.48.8.175	true	false		unknown
mx.oradomail.com	193.46.84.40	true	false		unknown
teletu.it	85.93.219.12	true	false		unknown
mail.tanahbumbukab.go.id	188.114.96.3	true	false		unknown
alkharafa.com	103.28.23.103	true	false		unknown
shawmail.glb.shawcable.net	64.59.128.135	true	false		unknown
bnn.go.id	103.3.70.4	true	false		unknown
mx2.nz.smxemail.com	203.84.135.3	true	false		unknown
mailout.netbeat.de	83.243.58.138	true	false		unknown
out.co.uk	64.91.253.60	true	false		unknown
mail.xplornet.com.cust.a.hostedemail.com	216.40.42.170	true	false		unknown
hw.ac.uk	185.18.139.13	true	false		unknown
mx.giochi0.it	104.131.176.42	true	false		unknown
infoseek.jp	133.237.129.136	true	false		unknown
mail.fmc.echolabs.net	38.111.141.40	true	false		unknown
tallerduff.com	179.27.99.43	true	false		unknown
mail.cinel.com	62.149.157.160	true	false		unknown
smtp.acsalaska.net	66.226.70.80	true	false		unknown
smtp.toucansurf.com	62.24.139.43	true	false		unknown
vodafone.es	45.60.74.53	true	false		unknown
mail.scarlet.be	193.74.71.25	true	false		unknown
712936.parkingcrew.net	76.223.26.96	true	false		unknown
yapaytech.com	188.114.97.3	true	false		unknown
mail.wavesmail.xyz	84.32.84.33	true	true		unknown
smtpb.ugr.es	150.214.204.23	true	false		unknown
mail.dskbangladesh.org	115.127.7.4	true	false		unknown
mail.vivaconstrucoes.com.br	31.170.163.210	true	false		unknown
newcastle.ac.uk	128.240.216.85	true	false		unknown
smtp.tmsbioscience.com.netsolmail.net	205.178.146.50	true	false		unknown
mx1.mirohost.net	78.27.225.105	true	false		unknown
grupokervo.com.mx	15.235.118.229	true	false		unknown
asp12.mailinblack.com	52.143.158.11	true	false		unknown
mx2.zoho.com	136.143.183.44	true	false		unknown
smtp.lantic.net	209.203.34.199	true	false		unknown
mail.simnet.is	194.105.232.75	true	false		unknown
cluster6a.us.messagelabs.com	52.207.128.88	true	false		unknown
smtp.connecttime.net	64.29.145.194	true	false		unknown
inbound-smtp.us-east-1.amazonaws.com	3.211.210.226	true	false		unknown
gs-heinrich.de	81.14.185.137	true	false		unknown
mx02.earthlink-vadesecure.net	51.81.61.71	true	false		unknown
cormorant.upnet.gr	150.140.129.7	true	false		unknown
secure.svmcards.co.uk	188.114.97.3	true	false		unknown
smtp.aol.g03.yahoodns.net	87.248.97.31	true	false		unknown
mail.milmotors.it	62.149.157.160	true	false		unknown
comhem-se.mail.protection.outlook.com	52.101.68.3	true	false		unknown
dr.com	204.74.99.101	true	false		unknown
smtp.otbstudios.com	13.248.169.48	true	false		unknown
smtp.lissrl.com	62.149.128.200	true	false		unknown
powerencry.com	162.210.199.87	true	false		unknown
mx.abcnetworkingu.pl	167.172.23.243	true	false		unknown
mx01-brz.echolabs.net	38.111.141.142	true	false		unknown

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
185.43.220.45	true	Avira URL Cloud: safe	unknown
claywyaeropumps.com	true	Avira URL Cloud: safe	unknown

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
64.136.52.44	smtp.netzero.net	United States	13446	AS-NETZEROUS	false
92.222.115.115	smtp.itaonline.it	France	16276	OVHFR	false
162.241.219.179	skydutravel.com	United States	46606	UNIFIEDLAYER-AS-1US	false
158.106.138.119	fiftyone.com.ar	United States	63410	PRIVATESYSTEMSUS	false
185.210.92.163	arayazilim.com	Turkey	42926	RADORETR	false
95.216.78.220	iis-berlin.de	Germany	24940	HETZNER-ASDE	false
209.222.82.255	d69402a.ess.barracudanetworks.com	United States	16509	AMAZON-02US	false
3.130.204.160	hdr-nlb5-4e815dd67a14bf7f.elb.us-east-2.amazonaws.com	United States	16509	AMAZON-02US	false
31.179.210.222	poczta.oirpwarszawa.pl	Poland	6830	LIBERTYGLOBALLibertyGlobalformerlyUPCBroadbandHolding	false
198.54.115.172	_dc-mx.374b7b1c2704.ssbresidence.com	United States	22612	NAMECHEAP-NETUS	false
162.55.131.89	qipoo.pe	United States	35893	ACPCA	false
129.159.110.135	blackfoot.net.av-mx.com	United States	14506	ORCL-ASHBURN3US	false
195.216.236.10	mail.inbox.lt	Latvia	12993	DEAC-ASLV	false
77.88.21.249	mx.yandex.net	Russian Federation	13238	YANDEXRU	false
187.6.211.40	oi.com.br	Brazil	8167	BrasilTelecomSA-FilialDistritoFederalBR	false
23.29.124.10	mail.g8vs.cl	United States	54540	INCERO-HVVCUS	false
106.0.62.81	mail.elarabyofficeeg.com	Bangladesh	56264	TOMATOWEB-BDTomatoWebPvtLimitedBD	false
66.226.70.66	smtp.dfwair.net	United States	30447	INFB2-ASUS	false
190.90.160.165	fabricanteslac.com.co	Colombia	26619	GTDCOLOMBIASASCO	false
13.248.169.48	smtp.otbstudios.com	United States	16509	AMAZON-02US	false
87.238.28.12	cheapnet.it	Italy	213260	CWNET-ASIT	false
186.64.116.110	mail.cesfamdalcahue.cl	Chile	52368	ZAMLTDACL	false
103.58.102.34	bsotr.or.id	Indonesia	133800	IDNIC-BIZNETGIO-AS-IDPTBiznetGioNusantaraID	false
52.142.45.143	xcenda.com	United States	8075	MICROSOFT-CORP-MSN-AS-BLOCKUS	false
93.89.224.77	kurnaz.com.tr	Turkey	51557	TR-FBSTR	false
108.179.193.149	primataeletronica.com.br	United States	46606	UNIFIEDLAYER-AS-1US	false
167.250.76.8	devlyn.com.mx	Mexico	265503	IQCLOUDSADECVMX	false
220.156.64.62	cnci-mediacat-mbox-v4.xspmail.jp	Japan	2497	IIJInternetInitiativeJapanIncJP	false
34.174.16.149	smtp.metropei.com	United States	2686	ATGS-MMD-ASUS	false
179.27.99.43	tallerduff.com	Uruguay	6057	AdministracionNacionaldeTelecomunicacionesUY	false
115.124.126.155	praco.in	India	45815	HOSTCOIN-AS-IN-APESDSSoftwareSolutionPvtLtdIN	false
186.64.116.115	mail.domotec.cl	Chile	52368	ZAMLTDACL	false
209.71.212.26	smtp-aliant.bell.net	Canada	577	BACOMCA	false
185.146.23.48	universaluniform.co.uk	United States	55293	A2HOSTINGUS	false
99.86.4.88	icrar.org	United States	16509	AMAZON-02US	false
202.172.28.128	inter7.jp	Japan	37907	DIGIROCKDigiRockIncJP	false
59.157.135.3	smtp.hb.tp1.jp	Japan	10013	FBDCFreeBitCoLtdJP	false
208.91.198.143	unknown	United States	394695	PUBLIC-DOMAIN-REGISTRYUS	false
192.185.129.82	hackveda.in	United States	46606	UNIFIEDLAYER-AS-1US	false
162.241.85.193	keybrainstech.com	United States	26337	OIS1US	false
202.9.85.53	mail.student.pens.ac.id	Indonesia	46052	EEPIS-AS-IDPoliteknikElektronikaNegeriSurabayaID	false
94.73.188.44	mx-out05.natrohost.com	Turkey	34619	CIZGITR	false
62.128.193.140	smtp-in.iomartmail.com	United Kingdom	20860	IOMART-ASGB	false
15.197.130.221	out.actionwise.co.za	United States	7430	TANDEMUS	false
81.88.58.196	smtp-pt.securemail.pro	Italy	39729	REGISTER-ASIT	false
212.27.48.4	smtp.libertysurf.net	France	12322	PROXADFR	false
177.234.159.146	inoveservices.com.br	Brazil	33182	DIMENOCUS	false
84.2.43.67	smtp.freemail.hu	Hungary	15545	MT-DC-ASEUHungaryHU	false
217.27.113.30	mail.simail.it	Italy	28999	SIPORTAL-ASViaToledo5IT	false
186.202.190.108	vivaxnet.com.br	Brazil	27715	LocawebServicosdeInternetSABR	false
100.24.208.97	ctdelco.org	United States	14618	AMAZON-AESUS	false
98.248.157.65	inboxsky.com	United States	7922	COMCAST-7922US	false
142.104.197.65	smtp.uvic.ca	Canada	16462	UVIC-ASCA	false
54.152.155.0	is7vikings.org	United States	14618	AMAZON-AESUS	false
94.46.169.50	rosseti.eu	Portugal	24768	ALMOUROLTECPT	false
64.59.128.135	shawmail.glb.shawcable.net	Canada	6327	SHAWCA	false
162.241.203.160	mail.magazinelojao.com.br	United States	26337	OIS1US	false
217.116.5.231	legados.net	Spain	16371	ACENS_ASSpainHostinghousingandVPNservicesES	false
162.241.252.17	mail.professionalneon.com	United States	46606	UNIFIEDLAYER-AS-1US	false
167.99.74.84	orbit360bd.com	United States	14061	DIGITALOCEAN-ASNUS	false
46.105.189.131	jgstream.com	France	16276	OVHFR	false
40.99.157.2	unknown	United States	8075	MICROSOFT-CORP-MSN-AS-BLOCKUS	false
200.11.153.189	cantv.net	Venezuela	8048	CANTVServiciosVenezuelaVE	false
209.91.128.17	smtp.vianet.ca	Canada	5690	VIANET-NOCA	false
52.143.158.11	asp12.mailinblack.com	United States	8075	MICROSOFT-CORP-MSN-AS-BLOCKUS	false
92.205.13.202	baronsestates.com	Germany	8972	GD-EMEA-DC-SXB1DE	false
60.36.166.235	mx.plala.or.jp	Japan	4713	OCNNTTCommunicationsCorporationJP	false
94.46.168.88	tbcevents.pt	Portugal	24768	ALMOUROLTECPT	false
72.14.185.43	mail.reverberations.co.uk	United States	63949	LINODE-APLinodeLLCUS	false
68.66.232.152	emailsl.com	United States	55293	A2HOSTINGUS	false
217.76.146.62	smtp.ipatrimoniales.com	Spain	8560	ONEANDONE-ASBrauerstrasse48DE	false
103.92.235.45	ecogreentech.co.in	India	138251	ZINIOSS-AS-INZiniosInformationTechnologyPvtLtdIN	false
105.224.1.26	telkomsa.net	South Africa	37457	Telkom-InternetZA	false
64.59.136.142	unknown	Canada	6327	SHAWCA	false
35.208.225.20	psci.net	United States	19527	GOOGLE-2US	false
34.160.41.39	walla.com	United States	2686	ATGS-MMD-ASUS	false
64.98.38.5	mail.morrisbb.net.cust.b.hostedemail.com	Canada	32491	TUCOWS-3CA	false
162.214.115.97	icrservices.com	United States	46606	UNIFIEDLAYER-AS-1US	false
80.66.179.18	mail.ut.ac.ir	Iran (ISLAMIC Republic Of)	29068	UT-ASIR	false
64.98.38.4	mx.lycos.es.cust.b.hostedemail.com	Canada	32491	TUCOWS-3CA	false
150.140.129.7	cormorant.upnet.gr	Greece	5408	GR-NEThttpwwwgrnetgrGR	false
94.231.103.107	mail.simply.com	Denmark	48854	ZITCOMDK	false
185.230.63.186	hirvahr.com	Israel	58182	WIX_COMIL	false
194.126.214.134	mail.idea.rs	Croatia (LOCAL Name: Hrvatska)	34540	MSTART-ASHR	false
103.237.110.98	mail.arabellacountryhouse.com.au	Australia	55803	DIGITALPACIFIC-AUDigitalPacificPtyLtdAustraliaAU	false
212.159.8.233	mail.freenetname.co.uk	United Kingdom	6871	PLUSNETUKInternetServiceProviderGB	false
212.159.8.236	mail.ic24.net	United Kingdom	6871	PLUSNETUKInternetServiceProviderGB	false
200.58.110.158	mail.laradio1045.com	Argentina	27823	DattateccomAR	false
203.170.129.8	mail.duckpro.xyz	Thailand	9891	CSLOX-IDC-AS-APCSLOXINFOPublicCompanyLimitedTH	false
212.85.36.18	surgeib1.nova.es	Spain	12521	NOVA_INTERNET_AS12521Madrid-SpainES	false
212.159.8.238	smtp.madasafish.com	United Kingdom	6871	PLUSNETUKInternetServiceProviderGB	false
91.203.144.64	starservice.com.ua	Ukraine	45045	GOODNET-ASUA	false
173.254.30.77	mail.rendercube.co.uk	United States	46606	UNIFIEDLAYER-AS-1US	false
52.63.237.70	sep-kakadu02.au-east.atmailcloud.com	United States	16509	AMAZON-02US	false
34.246.118.232	heatons.co.uk	United States	16509	AMAZON-02US	false
52.71.57.184	hdr-nlb9-41371129e8304c29.elb.us-east-1.amazonaws.com	United States	14618	AMAZON-AESUS	false
3.33.130.190	connectthink.com	United States	8987	AMAZONEXPANSIONGB	false
192.99.212.43	wyrral.com	Canada	16276	OVHFR	false
103.131.51.93	warmadewa.ac.id	Indonesia	136851	IDNIC-COLO-AS-IDPTARDETAMEDIAGLOBALKOMPUTINDOID	false
162.248.104.127	gaelsong.com	United States	53454	FULLDUPLEX-DENUS	false

General Information

Joe Sandbox version:	40.0.0 Tourmaline
Analysis ID:	1485756
Start date and time:	2024-08-01 06:08:06 +02:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 6m 55s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	default.jbs
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	10
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Sample name:	b2bXo6vmDm.exe renamed because original name is a hash value
Original Sample Name:	4c3049f8e220c2264692cb192b741a30.exe
Detection:	MAL
Classification:	mal100.spre.troj.evad.winEXE@10/5@1588/100
EGA Information:	Successful, ratio: 100%
HCA Information:	Successful, ratio: 100% Number of executed functions: 137 Number of non-executed functions: 111
Cookbook Comments:	Found application associated with file extension: .exe

Warnings

Exclude process from analysis (whitelisted): MpCmdRun.exe, WMIADAP.exe, SIHClient.exe, conhost.exe
Excluded IPs from analysis (whitelisted): 199.232.214.172, 192.229.221.95, 17.42.251.41, 17.57.155.28
Excluded domains from analysis (whitelisted): ocsp.digicert.com, slscr.update.microsoft.com, st-smtp.mail.me.com.akadns.net, ctldl.windowsupdate.com, smtp.me.com.akadns.net, smtp.mail.me.com.akadns.net, fe3cr.delivery.mp.microsoft.com
Not all processes where analyzed, report is missing behavior information
Report size exceeded maximum capacity and may have missing behavior information.
Report size exceeded maximum capacity and may have missing disassembly code.
Report size exceeded maximum capacity and may have missing network information.
Report size getting too big, too many NtAllocateVirtualMemory calls found.
Report size getting too big, too many NtDeviceIoControlFile calls found.
Report size getting too big, too many NtOpenKeyEx calls found.
Report size getting too big, too many NtProtectVirtualMemory calls found.
Report size getting too big, too many NtQueryValueKey calls found.

Simulations

Behavior and APIs

Time	Type	Description
00:08:59	API Interceptor	1x Sleep call for process: thkdh.exe modified
00:08:59	API Interceptor	1x Sleep call for process: b2bXo6vmDm.exe modified
00:09:00	API Interceptor	1x Sleep call for process: xalhg.exe modified
05:08:59	Task Scheduler	Run new task: Test Task17 path: C:\ProgramData\flax\xalhg.exe

Joe Sandbox View / Context

IPs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link
209.222.82.255	Fzfee1Lgc2.elf	Get hash	malicious	Unknown	Browse
	Yb6ztdvQaB.elf	Get hash	malicious	Unknown	Browse
	appdrivesound.exe	Get hash	malicious	SystemBC	Browse
	yq5xNPpWCT.exe	Get hash	malicious	PureLog Stealer, SystemBC	Browse
	cbIcBAgY5W.exe	Get hash	malicious	SystemBC	Browse
	file.exe	Get hash	malicious	SystemBC	Browse
	3Lf408k9mg.exe	Get hash	malicious	PureLog Stealer, SystemBC	Browse
	vm6XYZzWOd.exe	Get hash	malicious	PureLog Stealer, SystemBC	Browse
	z8s945rPmZ.exe	Get hash	malicious	SystemBC	Browse
	xqz8sQ4mZB.exe	Get hash	malicious	Glupteba, SmokeLoader	Browse
64.136.52.44	appdrivesound.exe	Get hash	malicious	SystemBC	Browse
	UDxMi3I3lO.exe	Get hash	malicious	PureLog Stealer, SystemBC	Browse
	file.exe	Get hash	malicious	SystemBC	Browse
	3Lf408k9mg.exe	Get hash	malicious	PureLog Stealer, SystemBC	Browse
	file.exe	Get hash	malicious	SystemBC	Browse
	vm6XYZzWOd.exe	Get hash	malicious	PureLog Stealer, SystemBC	Browse
92.222.115.115	z8s945rPmZ.exe	Get hash	malicious	SystemBC	Browse
162.241.219.179	file.exe	Get hash	malicious	SystemBC	Browse
162.241.219.179	mixazed.exe	Get hash	malicious	GoBrut	Browse
158.106.138.119	mixazed.exe	Get hash	malicious	GoBrut	Browse

Domains

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
box.ua	c5018a3915e8a9de41e083f7936c2d232b9a73ba41c8c07fb7b2d90d5f5d8e8e_dump.exe	Get hash	malicious	SystemBC	Browse	178.128.251.242
	3Lf408k9mg.exe	Get hash	malicious	PureLog Stealer, SystemBC	Browse	178.128.251.242
	file.exe	Get hash	malicious	SystemBC	Browse	178.128.251.242
grupoartplus.com.br	file.exe	Get hash	malicious	SystemBC	Browse	192.185.218.14
mail.wxs.nl	appdrivesound.exe	Get hash	malicious	SystemBC	Browse	195.121.65.26
	yq5xNPpWCT.exe	Get hash	malicious	PureLog Stealer, SystemBC	Browse	195.121.65.26
	td2RgV6HyP.exe	Get hash	malicious	SystemBC	Browse	195.121.65.26
	vm6XYZzWOd.exe	Get hash	malicious	PureLog Stealer, SystemBC	Browse	195.121.65.26
	z8s945rPmZ.exe	Get hash	malicious	SystemBC	Browse	195.121.65.26
walla.com	appdrivesound.exe	Get hash	malicious	SystemBC	Browse	143.204.98.5
	5CxmQXL0LD.exe	Get hash	malicious	SystemBC	Browse	143.204.98.111
	yq5xNPpWCT.exe	Get hash	malicious	PureLog Stealer, SystemBC	Browse	143.204.98.5
	c5018a3915e8a9de41e083f7936c2d232b9a73ba41c8c07fb7b2d90d5f5d8e8e_dump.exe	Get hash	malicious	SystemBC	Browse	18.238.243.121
	UDxMi3I3lO.exe	Get hash	malicious	PureLog Stealer, SystemBC	Browse	143.204.98.111
	cbIcBAgY5W.exe	Get hash	malicious	SystemBC	Browse	143.204.98.119
	file.exe	Get hash	malicious	SystemBC	Browse	143.204.98.5
	3Lf408k9mg.exe	Get hash	malicious	PureLog Stealer, SystemBC	Browse	18.238.243.30
	file.exe	Get hash	malicious	SystemBC	Browse	18.238.243.78
	vm6XYZzWOd.exe	Get hash	malicious	PureLog Stealer, SystemBC	Browse	13.32.87.77
smtp-hk.gtm.oss-core.net	file.exe	Get hash	malicious	SystemBC	Browse	203.134.153.84
	file.exe	Get hash	malicious	SystemBC	Browse	203.134.153.84
	z8s945rPmZ.exe	Get hash	malicious	SystemBC	Browse	203.134.153.84

ASNs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
AS-NETZEROUS	appdrivesound.exe	Get hash	malicious	SystemBC	Browse	64.136.52.50
	5CxmQXL0LD.exe	Get hash	malicious	SystemBC	Browse	64.136.52.50
	yq5xNPpWCT.exe	Get hash	malicious	PureLog Stealer, SystemBC	Browse	64.136.52.50
	t5SYVk0Tkt.exe	Get hash	malicious	PureLog Stealer, SystemBC	Browse	64.136.44.44
	UDxMi3I3lO.exe	Get hash	malicious	PureLog Stealer, SystemBC	Browse	64.136.44.50
	TL6bE5Uq4y.exe	Get hash	malicious	PureLog Stealer, SystemBC	Browse	64.136.44.44
	http://dev-kejomokkegajun.pantheonsite.io/best/juno.html	Get hash	malicious	Unknown	Browse	64.136.45.169
	file.exe	Get hash	malicious	PureLog Stealer, SystemBC	Browse	64.136.52.40
	DPqKF5vqpe.exe	Get hash	malicious	LummaC, Python Stealer, Amadey, Monster Stealer, PureLog Stealer, RedLine, SystemBC	Browse	64.136.52.50
	td2RgV6HyP.exe	Get hash	malicious	SystemBC	Browse	64.136.52.50
OVHFR	http://dxbvx.fastollubricant.com/4qosXI14454HoGB1305susersqutm14478DUIDWNHPBHWNYUY192698HVZM17132I17	Get hash	malicious	Unknown	Browse	217.182.178.228
	https://forms.office.com/e/c7HLGpx1Py	Get hash	malicious	Unknown	Browse	217.182.178.234
	EVCPUSBND147124_MBL Check_revised.exe	Get hash	malicious	FormBook, PureLog Stealer	Browse	54.38.220.85
	http://moremashup.com	Get hash	malicious	Unknown	Browse	54.38.113.3
	https://generously-supporter-capably.w3spaces.com/	Get hash	malicious	Unknown	Browse	51.89.9.254
	https://fbq.pages.dev/%5C%5C%5C%22https:%5C/%5C/t.myvisualiq.net%5C/impression_pixel?r=739915162&et=i&ago=212&ao=546&aca=26620495&si=4449639&ci=-7&pi=316681543&ad=-7&advt=4470647&chnl=-7&vndr=115&sz=6696&u=%5Bcustom_data%5D&pt=i%5C%5C%5C%22	Get hash	malicious	HTMLPhisher	Browse	51.68.39.188
	https://njd.pages.dev/account/js-reporting/?crumb=uz4.07kerli&message=javascript_not_enabled&ref=/account/challenge/password	Get hash	malicious	HTMLPhisher	Browse	217.182.178.228
	https://hadiah-dana.kaget.freeappid.store/	Get hash	malicious	Unknown	Browse	51.79.157.177
	Memorandum of Understanding on Cooperation between.docx.exe	Get hash	malicious	Unknown	Browse	51.91.96.18
	Memorandum of Understanding on Cooperation between.docx.exe	Get hash	malicious	Unknown	Browse	51.91.96.18
PRIVATESYSTEMSUS	93g0DCqh1e.elf	Get hash	malicious	Mirai	Browse	162.255.160.105
	WIwTo1UTMq.elf	Get hash	malicious	Mirai	Browse	209.42.232.104
	file.exe	Get hash	malicious	SystemBC	Browse	104.193.110.177
	LisectAVT_2403002B_393.exe	Get hash	malicious	AgentTesla	Browse	209.42.193.204
	http://hwylovermk.shop/product_details/5509027.html	Get hash	malicious	Unknown	Browse	207.7.86.111
	Yb6ztdvQaB.elf	Get hash	malicious	Unknown	Browse	104.193.108.101
	SecuriteInfo.com.FileRepMalware.25505.20211.exe	Get hash	malicious	Unknown	Browse	170.249.236.240
	eRsWoZUs2o.elf	Get hash	malicious	Mirai	Browse	170.249.222.159
	arm5-20240707-0306.elf	Get hash	malicious	Mirai	Browse	209.42.232.146
	https://t.apemail.net/c/nqkqiuydkvjvgaqbdiaqcvagdibq6dyhdihaaaihdjlfiayfa5laivksb5kaifi3audqmdycaibrwaabaadqmbagaynq4byoaedqeaipamnqogyvpf3bkgyvafkambqpkikwu-nqdbwfkcivnrkgyvpf3bkgygamaa4bqedmcagbahdmcqabqaaicqagygaeaqobyoaunqkbygb4baeay3aubq6dyaaacqmgyvarjqgvktkmbacgqbafkamgqdb4hqogqoaaaqogswkqbqkb2warkved2uaqkrwdqhbyaqoaqbb4brwflqivle4rcdlbmvef3yi5jfsf37lbbeiuqxpzmucxsdkzbv4wczc4nbo7kclelqmdyxcelv2qszaubboh3gijpfixaxmrjfsuy6cunrkyk6kjaboz2flbdverkdjykrwaabaadqmbagaynrkx2dinduidiydbcveqksi5pe6gkulbnbqvsakjcvqascdbcqgbcgaiauggk7innfwfi3incueuq3aabaegyvpf3bkg2zijnvwg2zijnvwg2zijnvwg2zijnvwgyvafkambqpkikwu	Get hash	malicious	Unknown	Browse	104.193.111.229
UNIFIEDLAYER-AS-1US	https://customervoice.microsoft.com/Pages/ResponsePage.aspx?id=VEPAnwijpUm87o3xy8ND1cJ8xINveHJMur3NEXJwuyVUMTlIVElEVTE5QlBXTExERkQ0NDhHVElDMi4u	Get hash	malicious	HTMLPhisher	Browse	69.49.230.198
	http://www.mpo.alagoasatual.com.br/3dfevrier/	Get hash	malicious	Unknown	Browse	50.116.113.178
	https://nathancrane.acemlnb.com/lt.php?x=3DZy~GE6Unib6H_8zt9NU.ls1KIjjNH3vMVhYKc3J3WZ7835yEy.0OFr13VziNHyjvYyY6HHKnSe	Get hash	malicious	Unknown	Browse	162.241.136.86
	Holland LP_Open_Invoices.pdf	Get hash	malicious	HTMLPhisher	Browse	192.185.92.7
	https://jobsnearmeusa.com/Exit?adgroupid=109677066428&adposition=&campaignid=10045193036&creative=487634015749&device=c&feeditemid=&keyword=clasificado&loc_interest_ms=&loc_physical_ms=9007454&matchtype=b&placement=&q=clasificado&targetid=kwd-24416206&utm_campaign=10045193036_109677066428&utm_content=487634015749&utm_medium=cpc&utm_source=google-sem&utm_term=clasificado	Get hash	malicious	Unknown	Browse	162.241.154.189
	r777528623004-FedEx-Shipping-Label.exe	Get hash	malicious	FormBook	Browse	162.240.173.148
	DHL- INVOICE-1851940333.bat.exe	Get hash	malicious	AgentTesla, PureLog Stealer	Browse	162.241.224.14
	Confirmation transfer Copy AGS # 22-00379.exe	Get hash	malicious	GuLoader, Snake Keylogger	Browse	108.167.181.251
	https://track.enterprisetechsol.com/z.z?l=aHR0cHM6Ly9yZXNvdXJjZS5pdGJ1c2luZXNzdG9kYXkuY29tL3doaXRlcGFwZXJzLzQ3OTA5LU1pY3Jvc29mdC1DUEwtUTMtUE1HLUF6dXJlLVVLLTItbGFuZGluZy5waHA%2fZT1jaGVvbG1pbi55YW5nQGh5dW5kYWllbGV2YXRvci5jb20%3d&r=14650708707&d=12037165&p=2&t=h&h=b31ef758ea4a5eaf1cd28fb80e2a38d7	Get hash	malicious	Unknown	Browse	192.185.58.143
	https://www.aichappraisers.com/wp-admin/pn/upload/en.php?rand=13inboxlightaspxn.1774256418&fid.4.1252899642&fid=1&fav.1&rand.13inboxlight.aspxn.1774256418&fid.1252899642&fid.1&fav.1&email=&.rand=13inboxlight.aspx?n=1774256418&fid=4	Get hash	malicious	Unknown	Browse	192.185.157.252

JA3 Fingerprints

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
28a2c9bd18a11de089ef85a160da29e4	https://comstar-usa.connectboosterportal.com/	Get hash	malicious	Unknown	Browse	20.12.23.50
	https://drive.google.com/file/d/1m9FXY_yMaStETtCYX6Nl9hFeKTFaExIX/view?usp=sharing_eil_m&ts=66aa9806	Get hash	malicious	Unknown	Browse	20.12.23.50
	https://eu.docusign.net	Get hash	malicious	Unknown	Browse	20.12.23.50
	https://link-9032123.com/	Get hash	malicious	HTMLPhisher	Browse	20.12.23.50
	http://is.gd/pttgovjx	Get hash	malicious	Unknown	Browse	20.12.23.50
	http://is.gd/pttgovyqa2	Get hash	malicious	Unknown	Browse	20.12.23.50
	https://khpornvideocambodia.vvipwww.com/	Get hash	malicious	Unknown	Browse	20.12.23.50
	http://is.gd/pttgovaz9	Get hash	malicious	Unknown	Browse	20.12.23.50
	http://is.gd/pttgovtp1	Get hash	malicious	Unknown	Browse	20.12.23.50
	https://pttgov-az.top/help/	Get hash	malicious	Unknown	Browse	20.12.23.50

Dropped Files

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link
C:\Users\user\AppData\Local\Temp\RarSFX1\thkdh.exe	file.exe	Get hash	malicious	SystemBC	Browse
	file.exe	Get hash	malicious	SystemBC	Browse
	c5018a3915e8a9de41e083f7936c2d232b9a73ba41c8c07fb7b2d90d5f5d8e8e_dump.exe	Get hash	malicious	SystemBC	Browse
C:\ProgramData\flax\xalhg.exe	file.exe	Get hash	malicious	SystemBC	Browse
	file.exe	Get hash	malicious	SystemBC	Browse
	c5018a3915e8a9de41e083f7936c2d232b9a73ba41c8c07fb7b2d90d5f5d8e8e_dump.exe	Get hash	malicious	SystemBC	Browse

Created / dropped Files

C:\ProgramData\flax\xalhg.exe

Download File

Process:	C:\Users\user\AppData\Local\Temp\RarSFX1\thkdh.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	16384
Entropy (8bit):	5.1311062282409
Encrypted:	false
SSDEEP:	192:0cG7C70KVYmEDmSv+ShxlxCB5jNw56NgaaeA8J7CkXhMQzpa:0ZKGmESEH3s5jNIFadAsdXja
MD5:	E7D405EEC8052898F4D2B0440A6B72C9
SHA1:	58CF7BFCEC81FAF744682F9479B905FEED8E6E68
SHA-256:	B63A0E5F93B26AD0EEB9EFBA66691F3B7E7F51E93A2F0098BDE43833F7A24CC2
SHA-512:	324507084BD56F7102459EFE7B3C2D2560F4E89ED03EC4A38539EBB71BCCDF1DEF7BC961C259F9B02F4B2BE0D5E095136C9EFCD5FC3108AF3DC61D24970D6121
Malicious:	true
Yara Hits:	Rule: JoeSecurity_SystemBC, Description: Yara detected SystemBC, Source: C:\ProgramData\flax\xalhg.exe, Author: Joe Security
Antivirus:	Antivirus: Avira, Detection: 100% Antivirus: Joe Sandbox ML, Detection: 100% Antivirus: ReversingLabs, Detection: 84%
Joe Sandbox View:	Filename: file.exe, Detection: malicious, Browse Filename: file.exe, Detection: malicious, Browse Filename: c5018a3915e8a9de41e083f7936c2d232b9a73ba41c8c07fb7b2d90d5f5d8e8e_dump.exe, Detection: malicious, Browse
Reputation:	low
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......U..;..th..th..th..ghM.th.fh..thRich..th........................PE..L....Q.[.................$...................@....@..........................p...............................................@..<....................................................................................@...............................text...V#.......$.................. ..`.rdata.......@.......(..............@..@.data...7....P......................@...........................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\RarSFX0\1.bat

Download File

Process:	C:\Users\user\Desktop\b2bXo6vmDm.exe
File Type:	DOS batch file, ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	37
Entropy (8bit):	4.280682339234349
Encrypted:	false
SSDEEP:	3:mKDDFRKeEIyEXMMH:hgIyEc2
MD5:	28151380C82F5DE81C1323171201E013
SHA1:	AE515D813BA2B17C8C5EBDAE196663DC81C26D3C
SHA-256:	BB8582CE28DB923F243C8D7A3F2ECCB0ED25930F5B5C94133AF8EEFB57A8231D
SHA-512:	46B29CBA0DC813DE0C58D2D83DC298FA677921FD1F19F41E2ED3C7909C497FAB2236D10A9AE59B3F38E49CF167964EDE45E15543673A1E0843266242B8E26253
Malicious:	false
Reputation:	low
Preview:	@echo off..start clamer.exe -priverdD

C:\Users\user\AppData\Local\Temp\RarSFX0\clamer.exe

Download File

Process:	C:\Users\user\Desktop\b2bXo6vmDm.exe
File Type:	PE32+ executable (GUI) x86-64, for MS Windows
Category:	dropped
Size (bytes):	464808
Entropy (8bit):	6.591136303546832
Encrypted:	false
SSDEEP:	12288:yyveQB/fTHIGaPkKEYzURNAwbAgOT+t1I2Co:yuDXTIGaPhEYzUzA0bZN
MD5:	FB30B403C1FA1D57FB65DC8B8E00E75C
SHA1:	161CF9D271AEE2D7D2F7A0A5D0001830929C300B
SHA-256:	83D9579E6B71561A9DAFBDD309B4DBFADDF816C7CCC25E4672C8D9DFB14B6673
SHA-512:	D0D15E51527BCFAD38C01C46B4C43257407EAD9C328BC4D48D21C9702C16872E52509E014444E78CD22F1AD96C11A88D281C2A745DF0A4CA21243352F879DE85
Malicious:	true
Antivirus:	Antivirus: ReversingLabs, Detection: 8%
Reputation:	low
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......$.2.`.\.`.\.`.\..y..h.\..y....\..y..m.\.....b.\...X.r.\..._.j.\...Y.Y.\.i..i.\.i..b.\.i..g.\.`.].C.\..Y.R.\..\.a.\...a.\..^.a.\.Rich`.\.........PE..d...#.@f.........."....!.h...j.................@..........................................`.............................................4......P...............l0..............p....6..T....................7..(......@....................... ....................text...ng.......h.................. ..`.rdata...(.......*...l..............@..@.data...\...........................@....pdata..l0.......2..................@..@.didat..`...........................@..._RDATA..\...........................@..@.rsrc...............................@..@.reloc..p...........................@..B........................................................................................................................................

C:\Users\user\AppData\Local\Temp\RarSFX1\thkdh.exe

Download File

Process:	C:\Users\user\AppData\Local\Temp\RarSFX0\clamer.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	16384
Entropy (8bit):	5.1311062282409
Encrypted:	false
SSDEEP:	192:0cG7C70KVYmEDmSv+ShxlxCB5jNw56NgaaeA8J7CkXhMQzpa:0ZKGmESEH3s5jNIFadAsdXja
MD5:	E7D405EEC8052898F4D2B0440A6B72C9
SHA1:	58CF7BFCEC81FAF744682F9479B905FEED8E6E68
SHA-256:	B63A0E5F93B26AD0EEB9EFBA66691F3B7E7F51E93A2F0098BDE43833F7A24CC2
SHA-512:	324507084BD56F7102459EFE7B3C2D2560F4E89ED03EC4A38539EBB71BCCDF1DEF7BC961C259F9B02F4B2BE0D5E095136C9EFCD5FC3108AF3DC61D24970D6121
Malicious:	true
Yara Hits:	Rule: JoeSecurity_SystemBC, Description: Yara detected SystemBC, Source: C:\Users\user\AppData\Local\Temp\RarSFX1\thkdh.exe, Author: Joe Security
Antivirus:	Antivirus: Avira, Detection: 100% Antivirus: Joe Sandbox ML, Detection: 100% Antivirus: ReversingLabs, Detection: 84%
Joe Sandbox View:	Filename: file.exe, Detection: malicious, Browse Filename: file.exe, Detection: malicious, Browse Filename: c5018a3915e8a9de41e083f7936c2d232b9a73ba41c8c07fb7b2d90d5f5d8e8e_dump.exe, Detection: malicious, Browse
Reputation:	low
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......U..;..th..th..th..ghM.th.fh..thRich..th........................PE..L....Q.[.................$...................@....@..........................p...............................................@..<....................................................................................@...............................text...V#.......$.................. ..`.rdata.......@.......(..............@..@.data...7....P......................@...........................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Windows\Tasks\Test Task17.job

Download File

Process:	C:\Users\user\AppData\Local\Temp\RarSFX1\thkdh.exe
File Type:	data
Category:	dropped
Size (bytes):	232
Entropy (8bit):	3.3145614692392074
Encrypted:	false
SSDEEP:	6:JmGJI/82abhEZegClRdtPjgsW2YRZuy0lDY1NXt1:JtahabTgejzvYRQVMNXH
MD5:	CAF7D5FF3FBBE0BFD36CBD743E4A8539
SHA1:	0FE29A0688EA96CF4784E1969F0F9D08823A5813
SHA-256:	EEF74474576B108F3E9C4FAAF1695C885B2A2B05856267630AE886A99738CE86
SHA-512:	EEBCA43522A0B4D5C498344DDFC34873B7FBC23E1AF3D324C9F39557AEE85E5894B3E36F6AAE40987E81B789193EFEC7099EE424DFB1032B0D526EEA425619BE
Malicious:	false
Preview:	......d..$.H......N.F.......<... .....\.......... ......................C.:.\.P.r.o.g.r.a.m.D.a.t.a.\.f.l.a.x.\.x.a.l.h.g...e.x.e.........J.O.N.E.S.-.P.C.\.j.o.n.e.s...................0.........L.....................................

Static File Info

General

File type:	PE32+ executable (GUI) x86-64, for MS Windows
Entropy (8bit):	6.472291474365454
TrID:	Win64 Executable GUI (202006/5) 92.65% Win64 Executable (generic) (12005/4) 5.51% Generic Win/DOS Executable (2004/3) 0.92% DOS Executable Generic (2002/1) 0.92% Autodesk FLIC Image File (extensions: flc, fli, cel) (7/3) 0.00%
File name:	b2bXo6vmDm.exe
File size:	920'376 bytes
MD5:	4c3049f8e220c2264692cb192b741a30
SHA1:	46c735f574daaa3e6605ef4c54c8189f5722ff2a
SHA256:	7f74b2c86e9f5706fc44c8d5093a027d1cd5856006aa80f270efae26d55c9131
SHA512:	b13dc855c3c06b56aa9bf181680b69003839adeaf16c5372912004a7bf42882e340c445c58e24e083692b4dcbb15c3e0cf244664458ccdd0dd7668b440277e0a
SSDEEP:	24576:juDXTIGaPhEYzUzA0aVuDXTIGaPhEYzUzA0bZB:KDjlabwz9jDjlabwz9dB
TLSH:	DD158E59E7E808F8E077E138E9525916F3BA3C0D4370869F13A6556B2F273E09D3A712
File Content Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......$.2.`.\.`.\.`.\..y..h.\..y....\..y..m.\.....b.\...X.r.\..._.j.\...Y.Y.\.i...i.\.i...b.\.i...g.\.`.].C.\...Y.R.\...\.a.\.....a.\

File Icon


Icon Hash:	90cececece8e8eb0

Static PE Info

General

Entrypoint:	0x140032ee0
Entrypoint Section:	.text
Digitally signed:	false
Imagebase:	0x140000000
Subsystem:	windows gui
Image File Characteristics:	EXECUTABLE_IMAGE, LARGE_ADDRESS_AWARE
DLL Characteristics:	HIGH_ENTROPY_VA, DYNAMIC_BASE, NX_COMPAT, GUARD_CF, TERMINAL_SERVER_AWARE
Time Stamp:	0x66409723 [Sun May 12 10:17:07 2024 UTC]
TLS Callbacks:
CLR (.Net) Version:
OS Version Major:	5
OS Version Minor:	2
File Version Major:	5
File Version Minor:	2
Subsystem Version Major:	5
Subsystem Version Minor:	2
Import Hash:	b1c5b1beabd90d9fdabd1df0779ea832

Entrypoint Preview

Instruction
dec eax
sub esp, 28h
call 00007F78206B6EB8h
dec eax
add esp, 28h
jmp 00007F78206B684Fh
int3
int3
dec eax
mov eax, esp
dec eax
mov dword ptr [eax+08h], ebx
dec eax
mov dword ptr [eax+10h], ebp
dec eax
mov dword ptr [eax+18h], esi
dec eax
mov dword ptr [eax+20h], edi
inc ecx
push esi
dec eax
sub esp, 20h
dec ebp
mov edx, dword ptr [ecx+38h]
dec eax
mov esi, edx
dec ebp
mov esi, eax
dec eax
mov ebp, ecx
dec ecx
mov edx, ecx
dec eax
mov ecx, esi
dec ecx
mov edi, ecx
inc ecx
mov ebx, dword ptr [edx]
dec eax
shl ebx, 04h
dec ecx
add ebx, edx
dec esp
lea eax, dword ptr [ebx+04h]
call 00007F78206B5CD3h
mov eax, dword ptr [ebp+04h]
and al, 66h
neg al
mov eax, 00000001h
sbb edx, edx
neg edx
add edx, eax
test dword ptr [ebx+04h], edx
je 00007F78206B69E3h
dec esp
mov ecx, edi
dec ebp
mov eax, esi
dec eax
mov edx, esi
dec eax
mov ecx, ebp
call 00007F78206B89F7h
dec eax
mov ebx, dword ptr [esp+30h]
dec eax
mov ebp, dword ptr [esp+38h]
dec eax
mov esi, dword ptr [esp+40h]
dec eax
mov edi, dword ptr [esp+48h]
dec eax
add esp, 20h
inc ecx
pop esi
ret
int3
int3
int3
dec eax
sub esp, 48h
dec eax
lea ecx, dword ptr [esp+20h]
call 00007F78206A5263h
dec eax
lea edx, dword ptr [00025747h]
dec eax
lea ecx, dword ptr [esp+20h]
call 00007F78206B7AB2h
int3
jmp 00007F78206BDC94h
int3
int3
int3
int3
int3
int3

Rich Headers

Programming Language:

[ C ] VS2008 SP1 build 30729
[IMP] VS2008 SP1 build 30729

Data Directories

Name	Virtual Address	Virtual Size	Is in Section
IMAGE_DIRECTORY_ENTRY_EXPORT	0x597a0	0x34	.rdata
IMAGE_DIRECTORY_ENTRY_IMPORT	0x597d4	0x50	.rdata
IMAGE_DIRECTORY_ENTRY_RESOURCE	0x70000	0xff7c	.rsrc
IMAGE_DIRECTORY_ENTRY_EXCEPTION	0x6a000	0x306c	.pdata
IMAGE_DIRECTORY_ENTRY_SECURITY	0x0	0x0
IMAGE_DIRECTORY_ENTRY_BASERELOC	0x80000	0x970	.reloc
IMAGE_DIRECTORY_ENTRY_DEBUG	0x536c0	0x54	.rdata
IMAGE_DIRECTORY_ENTRY_COPYRIGHT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_GLOBALPTR	0x0	0x0
IMAGE_DIRECTORY_ENTRY_TLS	0x53780	0x28	.rdata
IMAGE_DIRECTORY_ENTRY_LOAD_CONFIG	0x4b3f0	0x140	.rdata
IMAGE_DIRECTORY_ENTRY_BOUND_IMPORT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_IAT	0x48000	0x508	.rdata
IMAGE_DIRECTORY_ENTRY_DELAY_IMPORT	0x588bc	0x120	.rdata
IMAGE_DIRECTORY_ENTRY_COM_DESCRIPTOR	0x0	0x0
IMAGE_DIRECTORY_ENTRY_RESERVED	0x0	0x0

Sections

Name	Virtual Address	Virtual Size	Raw Size	MD5	Xored PE	ZLIB Complexity	File Type	Entropy	Characteristics
.text	0x1000	0x4676e	0x46800	f06bb06e02377ae8b223122e53be35c2	False	0.5372340425531915	data	6.47079645411382	IMAGE_SCN_CNT_CODE, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ
.rdata	0x48000	0x128c4	0x12a00	2de06d4a6920a6911e64ff20000ea72f	False	0.4499003775167785	data	5.273999097784603	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_READ
.data	0x5b000	0xe75c	0x1a00	0dbdb901a7d477980097e42e511a94fb	False	0.28275240384615385	data	3.2571023907881185	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
.pdata	0x6a000	0x306c	0x3200	b0ce0f057741ad2a4ef4717079fa34e9	False	0.483359375	data	5.501810413666288	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_READ
.didat	0x6e000	0x360	0x400	1fcc7b1d7a02443319f8fcc2be4ca936	False	0.2578125	data	3.0459938492946015	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
_RDATA	0x6f000	0x15c	0x200	3f331ec50f09ba861beaf955b33712d5	False	0.408203125	data	3.3356393424384843	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_READ
.rsrc	0x70000	0xff7c	0x10000	7cc0e4178407044344713ed68f887c23	False	0.2468109130859375	data	5.044029509615392	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_READ
.reloc	0x80000	0x970	0xa00	77a9ddfc47a5650d6eebbcc823e39532	False	0.52421875	data	5.336289720085303	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_DISCARDABLE, IMAGE_SCN_MEM_READ

Resources

Name	RVA	Size	Type	ZLIB Complexity
PNG	0x706a4	0xb45	PNG image data, 93 x 302, 8-bit/color RGB, non-interlaced	1.0027729636048528
PNG	0x711ec	0x15a9	PNG image data, 186 x 604, 8-bit/color RGB, non-interlaced	0.9363390441839495
RT_ICON	0x72798	0x8db	PNG image data, 256 x 256, 8-bit/color RGBA, non-interlaced	0.8142920158800176
RT_ICON	0x73074	0x4228	Device independent bitmap graphic, 64 x 128 x 32, image size 0	0.029168634860651865
RT_ICON	0x7729c	0x25a8	Device independent bitmap graphic, 48 x 96 x 32, image size 0	0.047925311203319505
RT_ICON	0x79844	0x1a68	Device independent bitmap graphic, 40 x 80 x 32, image size 0	0.05798816568047337
RT_ICON	0x7b2ac	0x10a8	Device independent bitmap graphic, 32 x 64 x 32, image size 0	0.06543151969981238
RT_ICON	0x7c354	0x988	Device independent bitmap graphic, 24 x 48 x 32, image size 0	0.10327868852459017
RT_ICON	0x7ccdc	0x6b8	Device independent bitmap graphic, 20 x 40 x 32, image size 0	0.12732558139534883
RT_ICON	0x7d394	0x468	Device independent bitmap graphic, 16 x 32 x 32, image size 0	0.10815602836879433
RT_DIALOG	0x7d7fc	0x2ba	data	0.5286532951289399
RT_DIALOG	0x7dab8	0x13a	data	0.6560509554140127
RT_DIALOG	0x7dbf4	0xf2	data	0.71900826446281
RT_DIALOG	0x7dce8	0x14a	data	0.6
RT_DIALOG	0x7de34	0x314	data	0.47588832487309646
RT_DIALOG	0x7e148	0x24a	data	0.6279863481228669
RT_STRING	0x7e394	0x1fc	data	0.421259842519685
RT_STRING	0x7e590	0x246	data	0.41924398625429554
RT_STRING	0x7e7d8	0x1a6	data	0.514218009478673
RT_STRING	0x7e980	0xdc	data	0.65
RT_STRING	0x7ea5c	0x470	data	0.3873239436619718
RT_STRING	0x7eecc	0x164	data	0.5056179775280899
RT_STRING	0x7f030	0x110	data	0.5772058823529411
RT_STRING	0x7f140	0x158	data	0.4563953488372093
RT_STRING	0x7f298	0xe8	data	0.5948275862068966
RT_STRING	0x7f380	0x1c6	data	0.5242290748898678
RT_STRING	0x7f548	0x268	data	0.4837662337662338
RT_GROUP_ICON	0x7f7b0	0x76	data	0.7457627118644068
RT_MANIFEST	0x7f828	0x753	XML 1.0 document, ASCII text, with CRLF line terminators	0.3957333333333333

Imports

DLL	Import
KERNEL32.dll	LocalFree, GetLastError, SetLastError, FormatMessageW, GetCurrentProcess, DeviceIoControl, SetFileTime, CloseHandle, RemoveDirectoryW, CreateFileW, DeleteFileW, CreateHardLinkW, GetShortPathNameW, GetLongPathNameW, MoveFileW, GetFileType, GetStdHandle, WriteFile, ReadFile, FlushFileBuffers, SetEndOfFile, SetFilePointer, GetCurrentProcessId, CreateDirectoryW, SetFileAttributesW, GetFileAttributesW, FindClose, FindFirstFileW, FindNextFileW, GetVersionExW, GetModuleFileNameW, SetCurrentDirectoryW, GetCurrentDirectoryW, GetFullPathNameW, FoldStringW, GetModuleHandleW, FindResourceW, FreeLibrary, GetProcAddress, ExpandEnvironmentStringsW, ExitProcess, SetThreadExecutionState, Sleep, LoadLibraryW, GetSystemDirectoryW, CompareStringW, AllocConsole, FreeConsole, AttachConsole, WriteConsoleW, GetProcessAffinityMask, CreateThread, SetThreadPriority, InitializeCriticalSection, EnterCriticalSection, LeaveCriticalSection, DeleteCriticalSection, SetEvent, ResetEvent, ReleaseSemaphore, WaitForSingleObject, CreateEventW, CreateSemaphoreW, GetSystemTime, SystemTimeToTzSpecificLocalTime, TzSpecificLocalTimeToSystemTime, SystemTimeToFileTime, FileTimeToLocalFileTime, LocalFileTimeToFileTime, FileTimeToSystemTime, GetCPInfo, IsDBCSLeadByte, MultiByteToWideChar, WideCharToMultiByte, GlobalAlloc, LockResource, GlobalLock, GlobalUnlock, GlobalFree, GlobalMemoryStatusEx, LoadResource, SizeofResource, GetTimeFormatW, GetDateFormatW, GetExitCodeProcess, GetLocalTime, GetTickCount, MapViewOfFile, UnmapViewOfFile, CreateFileMappingW, OpenFileMappingW, GetCommandLineW, SetEnvironmentVariableW, GetTempPathW, MoveFileExW, GetLocaleInfoW, GetNumberFormatW, SetFilePointerEx, GetConsoleMode, GetConsoleCP, HeapSize, SetStdHandle, GetProcessHeap, FreeEnvironmentStringsW, GetEnvironmentStringsW, GetCommandLineA, GetOEMCP, IsValidCodePage, FindNextFileA, RaiseException, GetSystemInfo, VirtualProtect, VirtualQuery, LoadLibraryExA, RtlCaptureContext, RtlLookupFunctionEntry, RtlVirtualUnwind, UnhandledExceptionFilter, SetUnhandledExceptionFilter, TerminateProcess, IsProcessorFeaturePresent, InitializeCriticalSectionAndSpinCount, WaitForSingleObjectEx, IsDebuggerPresent, GetStartupInfoW, QueryPerformanceCounter, GetCurrentThreadId, GetSystemTimeAsFileTime, InitializeSListHead, RtlPcToFileHeader, RtlUnwindEx, EncodePointer, TlsAlloc, TlsGetValue, TlsSetValue, TlsFree, LoadLibraryExW, QueryPerformanceFrequency, GetModuleHandleExW, GetModuleFileNameA, GetACP, HeapFree, HeapAlloc, GetStringTypeW, HeapReAlloc, LCMapStringW, FindFirstFileExA
OLEAUT32.dll	SysAllocString, SysFreeString, VariantClear
gdiplus.dll	GdipCloneImage, GdipFree, GdipDisposeImage, GdipCreateBitmapFromStream, GdipCreateHBITMAPFromBitmap, GdiplusStartup, GdiplusShutdown, GdipAlloc

Network Behavior

Suricata IDS Alerts

Timestamp	Protocol	SID	Signature	Source Port	Dest Port	Source IP	Dest IP
2024-08-01T06:09:55.906251+0200	TCP	2527004	ET Threatview.io High Confidence Cobalt Strike C2 IP group 5	465	53700	15.197.130.221	192.168.2.4

Network Port Distribution

TCP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Aug 1, 2024 06:08:55.230827093 CEST	49675	443	192.168.2.4	173.222.162.32
Aug 1, 2024 06:09:01.380388975 CEST	49730	4000	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:01.385329962 CEST	4000	49730	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:01.385451078 CEST	49730	4000	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:01.385555983 CEST	49730	4000	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:01.390310049 CEST	4000	49730	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:01.987231016 CEST	4000	49730	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:01.987284899 CEST	4000	49730	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:01.987416983 CEST	49730	4000	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:01.987483978 CEST	49730	4000	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:01.989273071 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:01.992440939 CEST	4000	49730	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:01.994116068 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:01.994190931 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:01.995162010 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:02.000013113 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:04.840373039 CEST	49675	443	192.168.2.4	173.222.162.32
Aug 1, 2024 06:09:09.104897976 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:09.152692080 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:09.302769899 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:09.355854988 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:09.390480042 CEST	49732	587	192.168.2.4	185.197.194.250
Aug 1, 2024 06:09:09.395275116 CEST	587	49732	185.197.194.250	192.168.2.4
Aug 1, 2024 06:09:09.395370960 CEST	49732	587	192.168.2.4	185.197.194.250
Aug 1, 2024 06:09:09.395503998 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:09.400238991 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:09.432800055 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:09.480839014 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:09.643806934 CEST	49733	587	192.168.2.4	13.250.88.201
Aug 1, 2024 06:09:09.648684978 CEST	587	49733	13.250.88.201	192.168.2.4
Aug 1, 2024 06:09:09.648767948 CEST	49733	587	192.168.2.4	13.250.88.201
Aug 1, 2024 06:09:09.648895979 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:09.668159008 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:09.715203047 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:09.791912079 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:09.840210915 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:09.921164989 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:09.965249062 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:10.004573107 CEST	49734	587	192.168.2.4	50.87.144.214
Aug 1, 2024 06:09:10.009943008 CEST	587	49734	50.87.144.214	192.168.2.4
Aug 1, 2024 06:09:10.010023117 CEST	49734	587	192.168.2.4	50.87.144.214
Aug 1, 2024 06:09:10.010152102 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:10.041987896 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:10.051362991 CEST	49735	587	192.168.2.4	217.76.146.62
Aug 1, 2024 06:09:10.056157112 CEST	587	49735	217.76.146.62	192.168.2.4
Aug 1, 2024 06:09:10.056226969 CEST	49735	587	192.168.2.4	217.76.146.62
Aug 1, 2024 06:09:10.056350946 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:10.104290009 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:10.107156038 CEST	49736	587	192.168.2.4	52.32.228.196
Aug 1, 2024 06:09:10.112003088 CEST	587	49736	52.32.228.196	192.168.2.4
Aug 1, 2024 06:09:10.112070084 CEST	49736	587	192.168.2.4	52.32.228.196
Aug 1, 2024 06:09:10.112272024 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:10.117031097 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:10.154211044 CEST	49737	587	192.168.2.4	202.125.94.90
Aug 1, 2024 06:09:10.159076929 CEST	587	49737	202.125.94.90	192.168.2.4
Aug 1, 2024 06:09:10.159240961 CEST	49737	587	192.168.2.4	202.125.94.90
Aug 1, 2024 06:09:10.159261942 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:10.164138079 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:10.183929920 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:10.230958939 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:10.259890079 CEST	49738	587	192.168.2.4	212.159.8.236
Aug 1, 2024 06:09:10.264790058 CEST	587	49738	212.159.8.236	192.168.2.4
Aug 1, 2024 06:09:10.264883041 CEST	49738	587	192.168.2.4	212.159.8.236
Aug 1, 2024 06:09:10.265094042 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:10.315174103 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:10.340116024 CEST	49739	587	192.168.2.4	84.2.43.67
Aug 1, 2024 06:09:10.344995975 CEST	587	49739	84.2.43.67	192.168.2.4
Aug 1, 2024 06:09:10.345077038 CEST	49739	587	192.168.2.4	84.2.43.67
Aug 1, 2024 06:09:10.345205069 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:10.396431923 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:10.517605066 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:10.534307003 CEST	587	49733	13.250.88.201	192.168.2.4
Aug 1, 2024 06:09:10.534852028 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:10.539793015 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:10.542196035 CEST	49740	587	192.168.2.4	162.241.219.179
Aug 1, 2024 06:09:10.547015905 CEST	587	49740	162.241.219.179	192.168.2.4
Aug 1, 2024 06:09:10.547194958 CEST	49740	587	192.168.2.4	162.241.219.179
Aug 1, 2024 06:09:10.547350883 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:10.552140951 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:10.574593067 CEST	49733	587	192.168.2.4	13.250.88.201
Aug 1, 2024 06:09:10.651428938 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:10.653136015 CEST	587	49735	217.76.146.62	192.168.2.4
Aug 1, 2024 06:09:10.653444052 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:10.658343077 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:10.675088882 CEST	587	49736	52.32.228.196	192.168.2.4
Aug 1, 2024 06:09:10.675297976 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:10.680150986 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:10.699784994 CEST	49735	587	192.168.2.4	217.76.146.62
Aug 1, 2024 06:09:10.730979919 CEST	49736	587	192.168.2.4	52.32.228.196
Aug 1, 2024 06:09:10.740607023 CEST	587	49734	50.87.144.214	192.168.2.4
Aug 1, 2024 06:09:10.740890026 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:10.745579004 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:10.745690107 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:10.745892048 CEST	49733	587	192.168.2.4	13.250.88.201
Aug 1, 2024 06:09:10.750703096 CEST	587	49733	13.250.88.201	192.168.2.4
Aug 1, 2024 06:09:10.793416023 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:10.793422937 CEST	49734	587	192.168.2.4	50.87.144.214
Aug 1, 2024 06:09:10.832636118 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:10.887192965 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:10.963263035 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:10.963443995 CEST	49735	587	192.168.2.4	217.76.146.62
Aug 1, 2024 06:09:10.968283892 CEST	587	49735	217.76.146.62	192.168.2.4
Aug 1, 2024 06:09:11.012079954 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:11.042435884 CEST	49741	587	192.168.2.4	178.170.244.56
Aug 1, 2024 06:09:11.047257900 CEST	587	49741	178.170.244.56	192.168.2.4
Aug 1, 2024 06:09:11.047333956 CEST	49741	587	192.168.2.4	178.170.244.56
Aug 1, 2024 06:09:11.047523022 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:11.049941063 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:11.050098896 CEST	49736	587	192.168.2.4	52.32.228.196
Aug 1, 2024 06:09:11.052264929 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:11.054857969 CEST	587	49736	52.32.228.196	192.168.2.4
Aug 1, 2024 06:09:11.090312958 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:11.103436947 CEST	587	49733	13.250.88.201	192.168.2.4
Aug 1, 2024 06:09:11.103827953 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:11.108643055 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:11.136898041 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:11.137124062 CEST	49734	587	192.168.2.4	50.87.144.214
Aug 1, 2024 06:09:11.142008066 CEST	587	49734	50.87.144.214	192.168.2.4
Aug 1, 2024 06:09:11.152718067 CEST	49733	587	192.168.2.4	13.250.88.201
Aug 1, 2024 06:09:11.163710117 CEST	587	49735	217.76.146.62	192.168.2.4
Aug 1, 2024 06:09:11.163893938 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:11.212294102 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:11.215217113 CEST	49735	587	192.168.2.4	217.76.146.62
Aug 1, 2024 06:09:11.216547012 CEST	587	49736	52.32.228.196	192.168.2.4
Aug 1, 2024 06:09:11.216737986 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:11.221554995 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:11.243314028 CEST	49742	587	192.168.2.4	103.6.196.75
Aug 1, 2024 06:09:11.248195887 CEST	587	49742	103.6.196.75	192.168.2.4
Aug 1, 2024 06:09:11.248399019 CEST	49742	587	192.168.2.4	103.6.196.75
Aug 1, 2024 06:09:11.248480082 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:11.253304958 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:11.255853891 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:11.257097006 CEST	587	49732	185.197.194.250	192.168.2.4
Aug 1, 2024 06:09:11.257169008 CEST	49732	587	192.168.2.4	185.197.194.250
Aug 1, 2024 06:09:11.258184910 CEST	49732	587	192.168.2.4	185.197.194.250
Aug 1, 2024 06:09:11.258402109 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:11.262068987 CEST	49736	587	192.168.2.4	52.32.228.196
Aug 1, 2024 06:09:11.262990952 CEST	587	49732	185.197.194.250	192.168.2.4
Aug 1, 2024 06:09:11.297682047 CEST	587	49734	50.87.144.214	192.168.2.4
Aug 1, 2024 06:09:11.308339119 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:11.308434010 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:11.308564901 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:11.313359976 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:11.321567059 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:11.321741104 CEST	49733	587	192.168.2.4	13.250.88.201
Aug 1, 2024 06:09:11.326359034 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:11.326584101 CEST	587	49733	13.250.88.201	192.168.2.4
Aug 1, 2024 06:09:11.340323925 CEST	49734	587	192.168.2.4	50.87.144.214
Aug 1, 2024 06:09:11.355645895 CEST	587	49739	84.2.43.67	192.168.2.4
Aug 1, 2024 06:09:11.357363939 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:11.362201929 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:11.391484022 CEST	49743	587	192.168.2.4	199.224.64.206
Aug 1, 2024 06:09:11.396337986 CEST	587	49743	199.224.64.206	192.168.2.4
Aug 1, 2024 06:09:11.396420956 CEST	49743	587	192.168.2.4	199.224.64.206
Aug 1, 2024 06:09:11.400384903 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:11.401101112 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:11.401357889 CEST	49735	587	192.168.2.4	217.76.146.62
Aug 1, 2024 06:09:11.402714014 CEST	49739	587	192.168.2.4	84.2.43.67
Aug 1, 2024 06:09:11.406176090 CEST	587	49735	217.76.146.62	192.168.2.4
Aug 1, 2024 06:09:11.433720112 CEST	587	49740	162.241.219.179	192.168.2.4
Aug 1, 2024 06:09:11.448298931 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:11.448384047 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:11.453162909 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:11.480936050 CEST	49740	587	192.168.2.4	162.241.219.179
Aug 1, 2024 06:09:11.492743015 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:11.543433905 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:11.712198019 CEST	587	49737	202.125.94.90	192.168.2.4
Aug 1, 2024 06:09:11.712647915 CEST	587	49735	217.76.146.62	192.168.2.4
Aug 1, 2024 06:09:11.712729931 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:11.712908983 CEST	587	49733	13.250.88.201	192.168.2.4
Aug 1, 2024 06:09:11.713033915 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:11.713222980 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:11.714251041 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:11.718255997 CEST	49736	587	192.168.2.4	52.32.228.196
Aug 1, 2024 06:09:11.718364000 CEST	49739	587	192.168.2.4	84.2.43.67
Aug 1, 2024 06:09:11.718442917 CEST	49734	587	192.168.2.4	50.87.144.214
Aug 1, 2024 06:09:11.719048977 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:11.719105959 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:11.723181963 CEST	587	49736	52.32.228.196	192.168.2.4
Aug 1, 2024 06:09:11.723256111 CEST	587	49739	84.2.43.67	192.168.2.4
Aug 1, 2024 06:09:11.723292112 CEST	587	49734	50.87.144.214	192.168.2.4
Aug 1, 2024 06:09:11.724035978 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:11.740317106 CEST	587	49737	202.125.94.90	192.168.2.4
Aug 1, 2024 06:09:11.740394115 CEST	49737	587	192.168.2.4	202.125.94.90
Aug 1, 2024 06:09:11.760818005 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:11.761009932 CEST	49740	587	192.168.2.4	162.241.219.179
Aug 1, 2024 06:09:11.762089968 CEST	49735	587	192.168.2.4	217.76.146.62
Aug 1, 2024 06:09:11.762099028 CEST	49733	587	192.168.2.4	13.250.88.201
Aug 1, 2024 06:09:11.765813112 CEST	587	49740	162.241.219.179	192.168.2.4
Aug 1, 2024 06:09:11.774521112 CEST	49744	587	192.168.2.4	212.159.9.236
Aug 1, 2024 06:09:11.779390097 CEST	587	49744	212.159.9.236	192.168.2.4
Aug 1, 2024 06:09:11.779479980 CEST	49744	587	192.168.2.4	212.159.9.236
Aug 1, 2024 06:09:11.779843092 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:11.785151005 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:11.819968939 CEST	587	49738	212.159.8.236	192.168.2.4
Aug 1, 2024 06:09:11.820185900 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:11.825047970 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:11.870718956 CEST	49745	587	192.168.2.4	193.46.84.40
Aug 1, 2024 06:09:11.871566057 CEST	49738	587	192.168.2.4	212.159.8.236
Aug 1, 2024 06:09:11.875660896 CEST	587	49745	193.46.84.40	192.168.2.4
Aug 1, 2024 06:09:11.875767946 CEST	49745	587	192.168.2.4	193.46.84.40
Aug 1, 2024 06:09:11.875894070 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:11.881072998 CEST	587	49734	50.87.144.214	192.168.2.4
Aug 1, 2024 06:09:11.881083965 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:11.881315947 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:11.884763002 CEST	587	49736	52.32.228.196	192.168.2.4
Aug 1, 2024 06:09:11.885813951 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:11.885905027 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:11.890636921 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:11.927663088 CEST	587	49740	162.241.219.179	192.168.2.4
Aug 1, 2024 06:09:11.929675102 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:11.933959961 CEST	49734	587	192.168.2.4	50.87.144.214
Aug 1, 2024 06:09:11.935089111 CEST	49736	587	192.168.2.4	52.32.228.196
Aug 1, 2024 06:09:11.948656082 CEST	587	49739	84.2.43.67	192.168.2.4
Aug 1, 2024 06:09:11.967978954 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:11.968056917 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:11.968306065 CEST	49737	587	192.168.2.4	202.125.94.90
Aug 1, 2024 06:09:11.973200083 CEST	587	49737	202.125.94.90	192.168.2.4
Aug 1, 2024 06:09:11.980942965 CEST	49740	587	192.168.2.4	162.241.219.179
Aug 1, 2024 06:09:11.996577024 CEST	49739	587	192.168.2.4	84.2.43.67
Aug 1, 2024 06:09:12.001693964 CEST	49746	587	192.168.2.4	103.92.235.45
Aug 1, 2024 06:09:12.006865978 CEST	587	49746	103.92.235.45	192.168.2.4
Aug 1, 2024 06:09:12.006953955 CEST	49746	587	192.168.2.4	103.92.235.45
Aug 1, 2024 06:09:12.016277075 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:12.016335964 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:12.021190882 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:12.051287889 CEST	49747	587	192.168.2.4	200.90.133.79
Aug 1, 2024 06:09:12.056066036 CEST	587	49747	200.90.133.79	192.168.2.4
Aug 1, 2024 06:09:12.056133032 CEST	49747	587	192.168.2.4	200.90.133.79
Aug 1, 2024 06:09:12.056319952 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:12.059880018 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:12.059943914 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:12.060591936 CEST	49735	587	192.168.2.4	217.76.146.62
Aug 1, 2024 06:09:12.060717106 CEST	49733	587	192.168.2.4	13.250.88.201
Aug 1, 2024 06:09:12.065712929 CEST	587	49735	217.76.146.62	192.168.2.4
Aug 1, 2024 06:09:12.065768957 CEST	587	49733	13.250.88.201	192.168.2.4
Aug 1, 2024 06:09:12.096151114 CEST	49748	587	192.168.2.4	162.241.219.218
Aug 1, 2024 06:09:12.100406885 CEST	587	49743	199.224.64.206	192.168.2.4
Aug 1, 2024 06:09:12.100959063 CEST	587	49748	162.241.219.218	192.168.2.4
Aug 1, 2024 06:09:12.101047039 CEST	49748	587	192.168.2.4	162.241.219.218
Aug 1, 2024 06:09:12.104257107 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:12.104338884 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:12.109123945 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:12.149164915 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:12.149333000 CEST	49738	587	192.168.2.4	212.159.8.236
Aug 1, 2024 06:09:12.152709961 CEST	49743	587	192.168.2.4	199.224.64.206
Aug 1, 2024 06:09:12.154225111 CEST	587	49738	212.159.8.236	192.168.2.4
Aug 1, 2024 06:09:12.199721098 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:12.270522118 CEST	587	49735	217.76.146.62	192.168.2.4
Aug 1, 2024 06:09:12.270580053 CEST	587	49735	217.76.146.62	192.168.2.4
Aug 1, 2024 06:09:12.270590067 CEST	587	49735	217.76.146.62	192.168.2.4
Aug 1, 2024 06:09:12.270600080 CEST	587	49735	217.76.146.62	192.168.2.4
Aug 1, 2024 06:09:12.270745993 CEST	49735	587	192.168.2.4	217.76.146.62
Aug 1, 2024 06:09:12.270745993 CEST	49735	587	192.168.2.4	217.76.146.62
Aug 1, 2024 06:09:12.273701906 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:12.278515100 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:12.278662920 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:12.279047966 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:12.279211044 CEST	49740	587	192.168.2.4	162.241.219.179
Aug 1, 2024 06:09:12.279345989 CEST	49734	587	192.168.2.4	50.87.144.214
Aug 1, 2024 06:09:12.279437065 CEST	49736	587	192.168.2.4	52.32.228.196
Aug 1, 2024 06:09:12.282994032 CEST	587	49741	178.170.244.56	192.168.2.4
Aug 1, 2024 06:09:12.283176899 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:12.283958912 CEST	587	49740	162.241.219.179	192.168.2.4
Aug 1, 2024 06:09:12.284121037 CEST	587	49734	50.87.144.214	192.168.2.4
Aug 1, 2024 06:09:12.284176111 CEST	587	49736	52.32.228.196	192.168.2.4
Aug 1, 2024 06:09:12.319586992 CEST	587	49737	202.125.94.90	192.168.2.4
Aug 1, 2024 06:09:12.321927071 CEST	587	49738	212.159.8.236	192.168.2.4
Aug 1, 2024 06:09:12.324769974 CEST	49741	587	192.168.2.4	178.170.244.56
Aug 1, 2024 06:09:12.328253984 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:12.328320026 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:12.333122969 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:12.365801096 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:12.366012096 CEST	49739	587	192.168.2.4	84.2.43.67
Aug 1, 2024 06:09:12.370855093 CEST	587	49739	84.2.43.67	192.168.2.4
Aug 1, 2024 06:09:12.371623993 CEST	49737	587	192.168.2.4	202.125.94.90
Aug 1, 2024 06:09:12.371762991 CEST	49738	587	192.168.2.4	212.159.8.236
Aug 1, 2024 06:09:12.406430006 CEST	587	49733	13.250.88.201	192.168.2.4
Aug 1, 2024 06:09:12.406440020 CEST	587	49733	13.250.88.201	192.168.2.4
Aug 1, 2024 06:09:12.406450987 CEST	587	49733	13.250.88.201	192.168.2.4
Aug 1, 2024 06:09:12.406534910 CEST	49733	587	192.168.2.4	13.250.88.201
Aug 1, 2024 06:09:12.406585932 CEST	587	49733	13.250.88.201	192.168.2.4
Aug 1, 2024 06:09:12.406595945 CEST	587	49733	13.250.88.201	192.168.2.4
Aug 1, 2024 06:09:12.406646013 CEST	49733	587	192.168.2.4	13.250.88.201
Aug 1, 2024 06:09:12.406702042 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:12.407011032 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:12.411596060 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:12.411838055 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:12.420012951 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:12.420686960 CEST	49743	587	192.168.2.4	199.224.64.206
Aug 1, 2024 06:09:12.425426006 CEST	587	49743	199.224.64.206	192.168.2.4
Aug 1, 2024 06:09:12.446799040 CEST	587	49736	52.32.228.196	192.168.2.4
Aug 1, 2024 06:09:12.446846962 CEST	587	49736	52.32.228.196	192.168.2.4
Aug 1, 2024 06:09:12.446860075 CEST	587	49736	52.32.228.196	192.168.2.4
Aug 1, 2024 06:09:12.446893930 CEST	49736	587	192.168.2.4	52.32.228.196
Aug 1, 2024 06:09:12.447078943 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:12.447078943 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:12.448215961 CEST	587	49740	162.241.219.179	192.168.2.4
Aug 1, 2024 06:09:12.449605942 CEST	49733	587	192.168.2.4	13.250.88.201
Aug 1, 2024 06:09:12.451922894 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:12.451987982 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:12.468523979 CEST	587	49734	50.87.144.214	192.168.2.4
Aug 1, 2024 06:09:12.468534946 CEST	587	49734	50.87.144.214	192.168.2.4
Aug 1, 2024 06:09:12.468544960 CEST	587	49734	50.87.144.214	192.168.2.4
Aug 1, 2024 06:09:12.468621016 CEST	49734	587	192.168.2.4	50.87.144.214
Aug 1, 2024 06:09:12.468775034 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:12.473551035 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:12.473602057 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:12.496495008 CEST	49740	587	192.168.2.4	162.241.219.179
Aug 1, 2024 06:09:12.496503115 CEST	49736	587	192.168.2.4	52.32.228.196
Aug 1, 2024 06:09:12.498547077 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:12.498785973 CEST	49735	587	192.168.2.4	217.76.146.62
Aug 1, 2024 06:09:12.503865004 CEST	587	49735	217.76.146.62	192.168.2.4
Aug 1, 2024 06:09:12.503932953 CEST	49735	587	192.168.2.4	217.76.146.62
Aug 1, 2024 06:09:12.508902073 CEST	587	49735	217.76.146.62	192.168.2.4
Aug 1, 2024 06:09:12.541413069 CEST	587	49743	199.224.64.206	192.168.2.4
Aug 1, 2024 06:09:12.541878939 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:12.543915033 CEST	49749	587	192.168.2.4	160.13.60.151
Aug 1, 2024 06:09:12.548708916 CEST	587	49749	160.13.60.151	192.168.2.4
Aug 1, 2024 06:09:12.548778057 CEST	49749	587	192.168.2.4	160.13.60.151
Aug 1, 2024 06:09:12.561891079 CEST	587	49739	84.2.43.67	192.168.2.4
Aug 1, 2024 06:09:12.590321064 CEST	49743	587	192.168.2.4	199.224.64.206
Aug 1, 2024 06:09:12.592263937 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:12.592329025 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:12.597275019 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:12.605961084 CEST	49739	587	192.168.2.4	84.2.43.67
Aug 1, 2024 06:09:12.627248049 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:12.627593040 CEST	49741	587	192.168.2.4	178.170.244.56
Aug 1, 2024 06:09:12.628374100 CEST	49737	587	192.168.2.4	202.125.94.90
Aug 1, 2024 06:09:12.628443003 CEST	49738	587	192.168.2.4	212.159.8.236
Aug 1, 2024 06:09:12.630253077 CEST	49750	587	192.168.2.4	13.250.88.201
Aug 1, 2024 06:09:12.632425070 CEST	587	49741	178.170.244.56	192.168.2.4
Aug 1, 2024 06:09:12.633176088 CEST	587	49737	202.125.94.90	192.168.2.4
Aug 1, 2024 06:09:12.633233070 CEST	587	49738	212.159.8.236	192.168.2.4
Aug 1, 2024 06:09:12.635014057 CEST	587	49750	13.250.88.201	192.168.2.4
Aug 1, 2024 06:09:12.635102034 CEST	49750	587	192.168.2.4	13.250.88.201
Aug 1, 2024 06:09:12.639568090 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:12.688290119 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:12.699582100 CEST	587	49735	217.76.146.62	192.168.2.4
Aug 1, 2024 06:09:12.700583935 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:12.705590010 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:12.714062929 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:12.714905024 CEST	49733	587	192.168.2.4	13.250.88.201
Aug 1, 2024 06:09:12.714976072 CEST	49740	587	192.168.2.4	162.241.219.179
Aug 1, 2024 06:09:12.715056896 CEST	49736	587	192.168.2.4	52.32.228.196
Aug 1, 2024 06:09:12.715384007 CEST	49734	587	192.168.2.4	50.87.144.214
Aug 1, 2024 06:09:12.719681978 CEST	587	49733	13.250.88.201	192.168.2.4
Aug 1, 2024 06:09:12.719897032 CEST	587	49740	162.241.219.179	192.168.2.4
Aug 1, 2024 06:09:12.719911098 CEST	587	49736	52.32.228.196	192.168.2.4
Aug 1, 2024 06:09:12.719961882 CEST	49736	587	192.168.2.4	52.32.228.196
Aug 1, 2024 06:09:12.720144987 CEST	587	49734	50.87.144.214	192.168.2.4
Aug 1, 2024 06:09:12.724703074 CEST	587	49736	52.32.228.196	192.168.2.4
Aug 1, 2024 06:09:12.738440037 CEST	587	49745	193.46.84.40	192.168.2.4
Aug 1, 2024 06:09:12.738748074 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:12.746483088 CEST	49735	587	192.168.2.4	217.76.146.62
Aug 1, 2024 06:09:12.784425974 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:12.793386936 CEST	49745	587	192.168.2.4	193.46.84.40
Aug 1, 2024 06:09:12.801671028 CEST	587	49738	212.159.8.236	192.168.2.4
Aug 1, 2024 06:09:12.802133083 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:12.806966066 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:12.807902098 CEST	587	49735	217.76.146.62	192.168.2.4
Aug 1, 2024 06:09:12.808099031 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:12.813075066 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:12.824242115 CEST	587	49747	200.90.133.79	192.168.2.4
Aug 1, 2024 06:09:12.824531078 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:12.829368114 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:12.832545042 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:12.832771063 CEST	49743	587	192.168.2.4	199.224.64.206
Aug 1, 2024 06:09:12.837533951 CEST	587	49743	199.224.64.206	192.168.2.4
Aug 1, 2024 06:09:12.847377062 CEST	587	49741	178.170.244.56	192.168.2.4
Aug 1, 2024 06:09:12.847671986 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:12.855854034 CEST	49738	587	192.168.2.4	212.159.8.236
Aug 1, 2024 06:09:12.856060028 CEST	49735	587	192.168.2.4	217.76.146.62
Aug 1, 2024 06:09:12.871467113 CEST	49747	587	192.168.2.4	200.90.133.79
Aug 1, 2024 06:09:12.876527071 CEST	587	49746	103.92.235.45	192.168.2.4
Aug 1, 2024 06:09:12.882884979 CEST	587	49734	50.87.144.214	192.168.2.4
Aug 1, 2024 06:09:12.887098074 CEST	49741	587	192.168.2.4	178.170.244.56
Aug 1, 2024 06:09:12.887546062 CEST	587	49736	52.32.228.196	192.168.2.4
Aug 1, 2024 06:09:12.894181967 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:12.894247055 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:12.894356966 CEST	49739	587	192.168.2.4	84.2.43.67
Aug 1, 2024 06:09:12.899199963 CEST	587	49739	84.2.43.67	192.168.2.4
Aug 1, 2024 06:09:12.903594971 CEST	587	49740	162.241.219.179	192.168.2.4
Aug 1, 2024 06:09:12.903614998 CEST	587	49740	162.241.219.179	192.168.2.4
Aug 1, 2024 06:09:12.903625965 CEST	587	49740	162.241.219.179	192.168.2.4
Aug 1, 2024 06:09:12.903678894 CEST	49740	587	192.168.2.4	162.241.219.179
Aug 1, 2024 06:09:12.903882027 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:12.908746958 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:12.908889055 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:12.918359995 CEST	49746	587	192.168.2.4	103.92.235.45
Aug 1, 2024 06:09:12.933990955 CEST	49734	587	192.168.2.4	50.87.144.214
Aug 1, 2024 06:09:12.934036016 CEST	49736	587	192.168.2.4	52.32.228.196
Aug 1, 2024 06:09:12.947724104 CEST	49751	587	192.168.2.4	84.32.84.33
Aug 1, 2024 06:09:12.952558041 CEST	587	49751	84.32.84.33	192.168.2.4
Aug 1, 2024 06:09:12.952656031 CEST	49751	587	192.168.2.4	84.32.84.33
Aug 1, 2024 06:09:12.952846050 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:12.953217983 CEST	587	49743	199.224.64.206	192.168.2.4
Aug 1, 2024 06:09:12.961663008 CEST	587	49735	217.76.146.62	192.168.2.4
Aug 1, 2024 06:09:12.974375010 CEST	587	49736	52.32.228.196	192.168.2.4
Aug 1, 2024 06:09:12.974455118 CEST	587	49748	162.241.219.218	192.168.2.4
Aug 1, 2024 06:09:12.978977919 CEST	587	49737	202.125.94.90	192.168.2.4
Aug 1, 2024 06:09:12.995011091 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:12.995228052 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:12.995296955 CEST	49745	587	192.168.2.4	193.46.84.40
Aug 1, 2024 06:09:12.996500969 CEST	49743	587	192.168.2.4	199.224.64.206
Aug 1, 2024 06:09:13.000284910 CEST	587	49745	193.46.84.40	192.168.2.4
Aug 1, 2024 06:09:13.015050888 CEST	49735	587	192.168.2.4	217.76.146.62
Aug 1, 2024 06:09:13.027715921 CEST	49736	587	192.168.2.4	52.32.228.196
Aug 1, 2024 06:09:13.027725935 CEST	49737	587	192.168.2.4	202.125.94.90
Aug 1, 2024 06:09:13.028088093 CEST	49748	587	192.168.2.4	162.241.219.218
Aug 1, 2024 06:09:13.040553093 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:13.057398081 CEST	587	49733	13.250.88.201	192.168.2.4
Aug 1, 2024 06:09:13.057626963 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:13.062443972 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:13.079150915 CEST	49752	587	192.168.2.4	38.111.141.40
Aug 1, 2024 06:09:13.083996058 CEST	587	49752	38.111.141.40	192.168.2.4
Aug 1, 2024 06:09:13.084069014 CEST	49752	587	192.168.2.4	38.111.141.40
Aug 1, 2024 06:09:13.084228992 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:13.084381104 CEST	587	49736	52.32.228.196	192.168.2.4
Aug 1, 2024 06:09:13.088193893 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:13.088280916 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:13.088768959 CEST	49738	587	192.168.2.4	212.159.8.236
Aug 1, 2024 06:09:13.088857889 CEST	49747	587	192.168.2.4	200.90.133.79
Aug 1, 2024 06:09:13.093643904 CEST	587	49738	212.159.8.236	192.168.2.4
Aug 1, 2024 06:09:13.093653917 CEST	587	49747	200.90.133.79	192.168.2.4
Aug 1, 2024 06:09:13.100550890 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:13.100708008 CEST	587	49739	84.2.43.67	192.168.2.4
Aug 1, 2024 06:09:13.100780010 CEST	587	49739	84.2.43.67	192.168.2.4
Aug 1, 2024 06:09:13.100791931 CEST	587	49739	84.2.43.67	192.168.2.4
Aug 1, 2024 06:09:13.100801945 CEST	587	49739	84.2.43.67	192.168.2.4
Aug 1, 2024 06:09:13.100850105 CEST	49739	587	192.168.2.4	84.2.43.67
Aug 1, 2024 06:09:13.100874901 CEST	49739	587	192.168.2.4	84.2.43.67
Aug 1, 2024 06:09:13.100976944 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:13.100976944 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:13.101202011 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:13.105830908 CEST	49733	587	192.168.2.4	13.250.88.201
Aug 1, 2024 06:09:13.105921030 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:13.106057882 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:13.109991074 CEST	587	49742	103.6.196.75	192.168.2.4
Aug 1, 2024 06:09:13.110167027 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:13.137105942 CEST	49736	587	192.168.2.4	52.32.228.196
Aug 1, 2024 06:09:13.152995110 CEST	49742	587	192.168.2.4	103.6.196.75
Aug 1, 2024 06:09:13.156404972 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:13.176434040 CEST	49753	587	192.168.2.4	41.204.183.54
Aug 1, 2024 06:09:13.181242943 CEST	587	49753	41.204.183.54	192.168.2.4
Aug 1, 2024 06:09:13.181344032 CEST	49753	587	192.168.2.4	41.204.183.54
Aug 1, 2024 06:09:13.181488037 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:13.186567068 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:13.188260078 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:13.188394070 CEST	49746	587	192.168.2.4	103.92.235.45
Aug 1, 2024 06:09:13.188468933 CEST	49741	587	192.168.2.4	178.170.244.56
Aug 1, 2024 06:09:13.188549042 CEST	49734	587	192.168.2.4	50.87.144.214
Aug 1, 2024 06:09:13.188616037 CEST	49740	587	192.168.2.4	162.241.219.179
Aug 1, 2024 06:09:13.193288088 CEST	587	49746	103.92.235.45	192.168.2.4
Aug 1, 2024 06:09:13.193296909 CEST	587	49741	178.170.244.56	192.168.2.4
Aug 1, 2024 06:09:13.193386078 CEST	587	49734	50.87.144.214	192.168.2.4
Aug 1, 2024 06:09:13.193447113 CEST	587	49739	84.2.43.67	192.168.2.4
Aug 1, 2024 06:09:13.193455935 CEST	587	49740	162.241.219.179	192.168.2.4
Aug 1, 2024 06:09:13.193629980 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:13.226461887 CEST	587	49745	193.46.84.40	192.168.2.4
Aug 1, 2024 06:09:13.240282059 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:13.240344048 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:13.245125055 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:13.246464968 CEST	49739	587	192.168.2.4	84.2.43.67
Aug 1, 2024 06:09:13.270683050 CEST	587	49747	200.90.133.79	192.168.2.4
Aug 1, 2024 06:09:13.270844936 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:13.273535013 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:13.277745008 CEST	49745	587	192.168.2.4	193.46.84.40
Aug 1, 2024 06:09:13.283713102 CEST	49743	587	192.168.2.4	199.224.64.206
Aug 1, 2024 06:09:13.283844948 CEST	49735	587	192.168.2.4	217.76.146.62
Aug 1, 2024 06:09:13.283982992 CEST	49748	587	192.168.2.4	162.241.219.218
Aug 1, 2024 06:09:13.284157038 CEST	587	49738	212.159.8.236	192.168.2.4
Aug 1, 2024 06:09:13.284603119 CEST	587	49744	212.159.9.236	192.168.2.4
Aug 1, 2024 06:09:13.284909964 CEST	587	49744	212.159.9.236	192.168.2.4
Aug 1, 2024 06:09:13.284956932 CEST	49744	587	192.168.2.4	212.159.9.236
Aug 1, 2024 06:09:13.285420895 CEST	587	49738	212.159.8.236	192.168.2.4
Aug 1, 2024 06:09:13.285475969 CEST	49738	587	192.168.2.4	212.159.8.236
Aug 1, 2024 06:09:13.288568974 CEST	587	49743	199.224.64.206	192.168.2.4
Aug 1, 2024 06:09:13.288741112 CEST	587	49735	217.76.146.62	192.168.2.4
Aug 1, 2024 06:09:13.288749933 CEST	587	49748	162.241.219.218	192.168.2.4
Aug 1, 2024 06:09:13.296241045 CEST	49737	587	192.168.2.4	202.125.94.90
Aug 1, 2024 06:09:13.296612978 CEST	49738	587	192.168.2.4	212.159.8.236
Aug 1, 2024 06:09:13.297321081 CEST	49744	587	192.168.2.4	212.159.9.236
Aug 1, 2024 06:09:13.301089048 CEST	587	49737	202.125.94.90	192.168.2.4
Aug 1, 2024 06:09:13.301584005 CEST	587	49738	212.159.8.236	192.168.2.4
Aug 1, 2024 06:09:13.302284002 CEST	587	49744	212.159.9.236	192.168.2.4
Aug 1, 2024 06:09:13.312007904 CEST	49754	587	192.168.2.4	84.2.43.67
Aug 1, 2024 06:09:13.316888094 CEST	587	49754	84.2.43.67	192.168.2.4
Aug 1, 2024 06:09:13.316960096 CEST	49754	587	192.168.2.4	84.2.43.67
Aug 1, 2024 06:09:13.320264101 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:13.320321083 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:13.324656010 CEST	49747	587	192.168.2.4	200.90.133.79
Aug 1, 2024 06:09:13.325570107 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:13.348644972 CEST	587	49734	50.87.144.214	192.168.2.4
Aug 1, 2024 06:09:13.348860979 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:13.353688002 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:13.355127096 CEST	587	49740	162.241.219.179	192.168.2.4
Aug 1, 2024 06:09:13.355345964 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:13.358779907 CEST	49755	587	192.168.2.4	50.116.87.178
Aug 1, 2024 06:09:13.402810097 CEST	49734	587	192.168.2.4	50.87.144.214
Aug 1, 2024 06:09:13.402996063 CEST	49740	587	192.168.2.4	162.241.219.179
Aug 1, 2024 06:09:13.585232019 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:13.585345984 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:13.585453033 CEST	49733	587	192.168.2.4	13.250.88.201
Aug 1, 2024 06:09:13.585578918 CEST	587	49743	199.224.64.206	192.168.2.4
Aug 1, 2024 06:09:13.585608959 CEST	587	49741	178.170.244.56	192.168.2.4
Aug 1, 2024 06:09:13.585659981 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:13.585689068 CEST	587	49748	162.241.219.218	192.168.2.4
Aug 1, 2024 06:09:13.585714102 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:13.585800886 CEST	587	49735	217.76.146.62	192.168.2.4
Aug 1, 2024 06:09:13.585829020 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:13.585875988 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:13.585932970 CEST	587	49750	13.250.88.201	192.168.2.4
Aug 1, 2024 06:09:13.585998058 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:13.586025953 CEST	587	49746	103.92.235.45	192.168.2.4
Aug 1, 2024 06:09:13.586052895 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:13.586252928 CEST	49736	587	192.168.2.4	52.32.228.196
Aug 1, 2024 06:09:13.586347103 CEST	49742	587	192.168.2.4	103.6.196.75
Aug 1, 2024 06:09:13.586420059 CEST	49739	587	192.168.2.4	84.2.43.67
Aug 1, 2024 06:09:13.586585045 CEST	49745	587	192.168.2.4	193.46.84.40
Aug 1, 2024 06:09:13.586664915 CEST	587	49734	50.87.144.214	192.168.2.4
Aug 1, 2024 06:09:13.586730957 CEST	587	49740	162.241.219.179	192.168.2.4
Aug 1, 2024 06:09:13.586729050 CEST	49734	587	192.168.2.4	50.87.144.214
Aug 1, 2024 06:09:13.586762905 CEST	587	49755	50.116.87.178	192.168.2.4
Aug 1, 2024 06:09:13.586781979 CEST	49740	587	192.168.2.4	162.241.219.179
Aug 1, 2024 06:09:13.586838007 CEST	49755	587	192.168.2.4	50.116.87.178
Aug 1, 2024 06:09:13.587461948 CEST	49747	587	192.168.2.4	200.90.133.79
Aug 1, 2024 06:09:13.590240002 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:13.590446949 CEST	587	49733	13.250.88.201	192.168.2.4
Aug 1, 2024 06:09:13.591111898 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:13.591161966 CEST	587	49736	52.32.228.196	192.168.2.4
Aug 1, 2024 06:09:13.591171026 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:13.591191053 CEST	587	49742	103.6.196.75	192.168.2.4
Aug 1, 2024 06:09:13.591439009 CEST	587	49739	84.2.43.67	192.168.2.4
Aug 1, 2024 06:09:13.591466904 CEST	587	49745	193.46.84.40	192.168.2.4
Aug 1, 2024 06:09:13.591500044 CEST	49739	587	192.168.2.4	84.2.43.67
Aug 1, 2024 06:09:13.592272997 CEST	587	49747	200.90.133.79	192.168.2.4
Aug 1, 2024 06:09:13.596003056 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:13.596307993 CEST	587	49739	84.2.43.67	192.168.2.4
Aug 1, 2024 06:09:13.596442938 CEST	49756	587	192.168.2.4	18.236.21.232
Aug 1, 2024 06:09:13.601356030 CEST	587	49756	18.236.21.232	192.168.2.4
Aug 1, 2024 06:09:13.601433992 CEST	49756	587	192.168.2.4	18.236.21.232
Aug 1, 2024 06:09:13.601562023 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:13.606339931 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:13.628319025 CEST	587	49741	178.170.244.56	192.168.2.4
Aug 1, 2024 06:09:13.628348112 CEST	587	49743	199.224.64.206	192.168.2.4
Aug 1, 2024 06:09:13.628376961 CEST	49741	587	192.168.2.4	178.170.244.56
Aug 1, 2024 06:09:13.628401995 CEST	49743	587	192.168.2.4	199.224.64.206
Aug 1, 2024 06:09:13.630126953 CEST	49757	587	192.168.2.4	93.89.226.87
Aug 1, 2024 06:09:13.634983063 CEST	587	49757	93.89.226.87	192.168.2.4
Aug 1, 2024 06:09:13.635068893 CEST	49757	587	192.168.2.4	93.89.226.87
Aug 1, 2024 06:09:13.635564089 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:13.635807037 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:13.636004925 CEST	49734	587	192.168.2.4	50.87.144.214
Aug 1, 2024 06:09:13.637124062 CEST	49748	587	192.168.2.4	162.241.219.218
Aug 1, 2024 06:09:13.637124062 CEST	49750	587	192.168.2.4	13.250.88.201
Aug 1, 2024 06:09:13.637363911 CEST	49746	587	192.168.2.4	103.92.235.45
Aug 1, 2024 06:09:13.637365103 CEST	49735	587	192.168.2.4	217.76.146.62
Aug 1, 2024 06:09:13.640814066 CEST	587	49734	50.87.144.214	192.168.2.4
Aug 1, 2024 06:09:13.647303104 CEST	587	49737	202.125.94.90	192.168.2.4
Aug 1, 2024 06:09:13.647331953 CEST	587	49737	202.125.94.90	192.168.2.4
Aug 1, 2024 06:09:13.647382975 CEST	587	49737	202.125.94.90	192.168.2.4
Aug 1, 2024 06:09:13.647403002 CEST	49737	587	192.168.2.4	202.125.94.90
Aug 1, 2024 06:09:13.647422075 CEST	587	49737	202.125.94.90	192.168.2.4
Aug 1, 2024 06:09:13.647449970 CEST	587	49737	202.125.94.90	192.168.2.4
Aug 1, 2024 06:09:13.647475004 CEST	49737	587	192.168.2.4	202.125.94.90
Aug 1, 2024 06:09:13.647533894 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:13.647716045 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:13.651037931 CEST	587	49737	202.125.94.90	192.168.2.4
Aug 1, 2024 06:09:13.651119947 CEST	49737	587	192.168.2.4	202.125.94.90
Aug 1, 2024 06:09:13.651160002 CEST	587	49737	202.125.94.90	192.168.2.4
Aug 1, 2024 06:09:13.651190042 CEST	587	49737	202.125.94.90	192.168.2.4
Aug 1, 2024 06:09:13.651221037 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:13.651221037 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:13.651223898 CEST	587	49737	202.125.94.90	192.168.2.4
Aug 1, 2024 06:09:13.651248932 CEST	49737	587	192.168.2.4	202.125.94.90
Aug 1, 2024 06:09:13.651415110 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:13.652442932 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:13.652690887 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:13.653182030 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:13.656279087 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:13.656615019 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:13.699636936 CEST	49737	587	192.168.2.4	202.125.94.90
Aug 1, 2024 06:09:13.716590881 CEST	49758	587	192.168.2.4	66.133.129.50
Aug 1, 2024 06:09:13.721493006 CEST	587	49758	66.133.129.50	192.168.2.4
Aug 1, 2024 06:09:13.721575975 CEST	49758	587	192.168.2.4	66.133.129.50
Aug 1, 2024 06:09:13.721719980 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:13.751862049 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:13.753068924 CEST	587	49736	52.32.228.196	192.168.2.4
Aug 1, 2024 06:09:13.753335953 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:13.762594938 CEST	587	49747	200.90.133.79	192.168.2.4
Aug 1, 2024 06:09:13.783112049 CEST	587	49739	84.2.43.67	192.168.2.4
Aug 1, 2024 06:09:13.793350935 CEST	49736	587	192.168.2.4	52.32.228.196
Aug 1, 2024 06:09:13.795990944 CEST	587	49734	50.87.144.214	192.168.2.4
Aug 1, 2024 06:09:13.799510002 CEST	587	49745	193.46.84.40	192.168.2.4
Aug 1, 2024 06:09:13.804291010 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:13.804502964 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:13.808964014 CEST	49747	587	192.168.2.4	200.90.133.79
Aug 1, 2024 06:09:13.810108900 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:13.824626923 CEST	49739	587	192.168.2.4	84.2.43.67
Aug 1, 2024 06:09:13.840403080 CEST	49734	587	192.168.2.4	50.87.144.214
Aug 1, 2024 06:09:13.840419054 CEST	49745	587	192.168.2.4	193.46.84.40
Aug 1, 2024 06:09:13.885885954 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:13.886573076 CEST	49740	587	192.168.2.4	162.241.219.179
Aug 1, 2024 06:09:13.886648893 CEST	49743	587	192.168.2.4	199.224.64.206
Aug 1, 2024 06:09:13.886718988 CEST	49750	587	192.168.2.4	13.250.88.201
Aug 1, 2024 06:09:13.886778116 CEST	587	49739	84.2.43.67	192.168.2.4
Aug 1, 2024 06:09:13.886791945 CEST	49748	587	192.168.2.4	162.241.219.218
Aug 1, 2024 06:09:13.886893034 CEST	49735	587	192.168.2.4	217.76.146.62
Aug 1, 2024 06:09:13.886950016 CEST	49746	587	192.168.2.4	103.92.235.45
Aug 1, 2024 06:09:13.887027025 CEST	49741	587	192.168.2.4	178.170.244.56
Aug 1, 2024 06:09:13.887236118 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:13.891561031 CEST	587	49740	162.241.219.179	192.168.2.4
Aug 1, 2024 06:09:13.891591072 CEST	587	49743	199.224.64.206	192.168.2.4
Aug 1, 2024 06:09:13.891638994 CEST	587	49750	13.250.88.201	192.168.2.4
Aug 1, 2024 06:09:13.891665936 CEST	587	49748	162.241.219.218	192.168.2.4
Aug 1, 2024 06:09:13.891807079 CEST	587	49735	217.76.146.62	192.168.2.4
Aug 1, 2024 06:09:13.891858101 CEST	587	49746	103.92.235.45	192.168.2.4
Aug 1, 2024 06:09:13.892016888 CEST	587	49741	178.170.244.56	192.168.2.4
Aug 1, 2024 06:09:13.894069910 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:13.902249098 CEST	587	49737	202.125.94.90	192.168.2.4
Aug 1, 2024 06:09:13.902471066 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:13.908454895 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:13.914613008 CEST	587	49742	103.6.196.75	192.168.2.4
Aug 1, 2024 06:09:13.914849997 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:13.919848919 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:13.934093952 CEST	49739	587	192.168.2.4	84.2.43.67
Aug 1, 2024 06:09:13.942568064 CEST	587	49733	13.250.88.201	192.168.2.4
Aug 1, 2024 06:09:13.942800045 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:13.947774887 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:13.949677944 CEST	49737	587	192.168.2.4	202.125.94.90
Aug 1, 2024 06:09:13.971194029 CEST	49742	587	192.168.2.4	103.6.196.75
Aug 1, 2024 06:09:13.981188059 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:13.986326933 CEST	49736	587	192.168.2.4	52.32.228.196
Aug 1, 2024 06:09:13.991960049 CEST	587	49736	52.32.228.196	192.168.2.4
Aug 1, 2024 06:09:13.996536970 CEST	49733	587	192.168.2.4	13.250.88.201
Aug 1, 2024 06:09:13.999142885 CEST	587	49753	41.204.183.54	192.168.2.4
Aug 1, 2024 06:09:13.999824047 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:14.000094891 CEST	49759	587	192.168.2.4	185.165.46.2
Aug 1, 2024 06:09:14.007364035 CEST	587	49759	185.165.46.2	192.168.2.4
Aug 1, 2024 06:09:14.007499933 CEST	49759	587	192.168.2.4	185.165.46.2
Aug 1, 2024 06:09:14.008627892 CEST	587	49743	199.224.64.206	192.168.2.4
Aug 1, 2024 06:09:14.043490887 CEST	49753	587	192.168.2.4	41.204.183.54
Aug 1, 2024 06:09:14.048371077 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:14.048512936 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:14.053338051 CEST	587	49748	162.241.219.218	192.168.2.4
Aug 1, 2024 06:09:14.053666115 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:14.053700924 CEST	587	49740	162.241.219.179	192.168.2.4
Aug 1, 2024 06:09:14.056269884 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:14.060622931 CEST	49743	587	192.168.2.4	199.224.64.206
Aug 1, 2024 06:09:14.061124086 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:14.061191082 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:14.064963102 CEST	49760	587	192.168.2.4	64.140.165.234
Aug 1, 2024 06:09:14.065960884 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:14.069677114 CEST	49761	587	192.168.2.4	203.134.153.82
Aug 1, 2024 06:09:14.069766998 CEST	587	49760	64.140.165.234	192.168.2.4
Aug 1, 2024 06:09:14.069849014 CEST	49760	587	192.168.2.4	64.140.165.234
Aug 1, 2024 06:09:14.072911024 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:14.074476004 CEST	587	49761	203.134.153.82	192.168.2.4
Aug 1, 2024 06:09:14.074568987 CEST	49761	587	192.168.2.4	203.134.153.82
Aug 1, 2024 06:09:14.077744007 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:14.077805996 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:14.082618952 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:14.102969885 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:14.103319883 CEST	49747	587	192.168.2.4	200.90.133.79
Aug 1, 2024 06:09:14.103327990 CEST	49734	587	192.168.2.4	50.87.144.214
Aug 1, 2024 06:09:14.103414059 CEST	49745	587	192.168.2.4	193.46.84.40
Aug 1, 2024 06:09:14.105869055 CEST	49748	587	192.168.2.4	162.241.219.218
Aug 1, 2024 06:09:14.105880022 CEST	49740	587	192.168.2.4	162.241.219.179
Aug 1, 2024 06:09:14.108172894 CEST	587	49747	200.90.133.79	192.168.2.4
Aug 1, 2024 06:09:14.108314991 CEST	587	49734	50.87.144.214	192.168.2.4
Aug 1, 2024 06:09:14.108344078 CEST	587	49745	193.46.84.40	192.168.2.4
Aug 1, 2024 06:09:14.113629103 CEST	587	49741	178.170.244.56	192.168.2.4
Aug 1, 2024 06:09:14.114557981 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:14.138062954 CEST	587	49755	50.116.87.178	192.168.2.4
Aug 1, 2024 06:09:14.148775101 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:14.148865938 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:14.152831078 CEST	49739	587	192.168.2.4	84.2.43.67
Aug 1, 2024 06:09:14.157937050 CEST	587	49739	84.2.43.67	192.168.2.4
Aug 1, 2024 06:09:14.168378115 CEST	49741	587	192.168.2.4	178.170.244.56
Aug 1, 2024 06:09:14.188468933 CEST	49755	587	192.168.2.4	50.116.87.178
Aug 1, 2024 06:09:14.196316957 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:14.236167908 CEST	587	49746	103.92.235.45	192.168.2.4
Aug 1, 2024 06:09:14.238013983 CEST	587	49758	66.133.129.50	192.168.2.4
Aug 1, 2024 06:09:14.240927935 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:14.241816998 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:14.246777058 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:14.247334003 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:14.247735977 CEST	49733	587	192.168.2.4	13.250.88.201
Aug 1, 2024 06:09:14.247812033 CEST	49742	587	192.168.2.4	103.6.196.75
Aug 1, 2024 06:09:14.247925043 CEST	49737	587	192.168.2.4	202.125.94.90
Aug 1, 2024 06:09:14.252593994 CEST	587	49733	13.250.88.201	192.168.2.4
Aug 1, 2024 06:09:14.252705097 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:14.252751112 CEST	587	49742	103.6.196.75	192.168.2.4
Aug 1, 2024 06:09:14.252866983 CEST	587	49737	202.125.94.90	192.168.2.4
Aug 1, 2024 06:09:14.268455029 CEST	587	49757	93.89.226.87	192.168.2.4
Aug 1, 2024 06:09:14.271928072 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:14.276923895 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:14.277746916 CEST	49746	587	192.168.2.4	103.92.235.45
Aug 1, 2024 06:09:14.277750015 CEST	49758	587	192.168.2.4	66.133.129.50
Aug 1, 2024 06:09:14.277909994 CEST	587	49747	200.90.133.79	192.168.2.4
Aug 1, 2024 06:09:14.278249025 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:14.283078909 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:14.308983088 CEST	49757	587	192.168.2.4	93.89.226.87
Aug 1, 2024 06:09:14.324599028 CEST	49747	587	192.168.2.4	200.90.133.79
Aug 1, 2024 06:09:14.333713055 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:14.333856106 CEST	587	49754	84.2.43.67	192.168.2.4
Aug 1, 2024 06:09:14.333867073 CEST	49753	587	192.168.2.4	41.204.183.54
Aug 1, 2024 06:09:14.334021091 CEST	49743	587	192.168.2.4	199.224.64.206
Aug 1, 2024 06:09:14.334227085 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:14.338700056 CEST	587	49753	41.204.183.54	192.168.2.4
Aug 1, 2024 06:09:14.338816881 CEST	587	49743	199.224.64.206	192.168.2.4
Aug 1, 2024 06:09:14.339025974 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:14.348165989 CEST	587	49739	84.2.43.67	192.168.2.4
Aug 1, 2024 06:09:14.358998060 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:14.360260963 CEST	49762	587	192.168.2.4	203.123.60.51
Aug 1, 2024 06:09:14.363859892 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:14.365192890 CEST	587	49762	203.123.60.51	192.168.2.4
Aug 1, 2024 06:09:14.365267992 CEST	49762	587	192.168.2.4	203.123.60.51
Aug 1, 2024 06:09:14.367172003 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:14.372562885 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:14.380619049 CEST	49754	587	192.168.2.4	84.2.43.67
Aug 1, 2024 06:09:14.402724981 CEST	49739	587	192.168.2.4	84.2.43.67
Aug 1, 2024 06:09:14.404439926 CEST	587	49747	200.90.133.79	192.168.2.4
Aug 1, 2024 06:09:14.404555082 CEST	587	49747	200.90.133.79	192.168.2.4
Aug 1, 2024 06:09:14.404606104 CEST	49747	587	192.168.2.4	200.90.133.79
Aug 1, 2024 06:09:14.406601906 CEST	587	49745	193.46.84.40	192.168.2.4
Aug 1, 2024 06:09:14.406917095 CEST	587	49745	193.46.84.40	192.168.2.4
Aug 1, 2024 06:09:14.406991959 CEST	49745	587	192.168.2.4	193.46.84.40
Aug 1, 2024 06:09:14.409039021 CEST	587	49750	13.250.88.201	192.168.2.4
Aug 1, 2024 06:09:14.410274029 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:14.410644054 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:14.414016008 CEST	587	49749	160.13.60.151	192.168.2.4
Aug 1, 2024 06:09:14.415292978 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:14.415344954 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:14.415579081 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:14.421690941 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:14.425863028 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:14.426016092 CEST	49740	587	192.168.2.4	162.241.219.179
Aug 1, 2024 06:09:14.426103115 CEST	49748	587	192.168.2.4	162.241.219.218
Aug 1, 2024 06:09:14.426829100 CEST	49741	587	192.168.2.4	178.170.244.56
Aug 1, 2024 06:09:14.430846930 CEST	587	49740	162.241.219.179	192.168.2.4
Aug 1, 2024 06:09:14.430947065 CEST	587	49748	162.241.219.218	192.168.2.4
Aug 1, 2024 06:09:14.431598902 CEST	587	49741	178.170.244.56	192.168.2.4
Aug 1, 2024 06:09:14.449750900 CEST	49750	587	192.168.2.4	13.250.88.201
Aug 1, 2024 06:09:14.457020998 CEST	587	49743	199.224.64.206	192.168.2.4
Aug 1, 2024 06:09:14.457237005 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:14.465234995 CEST	49749	587	192.168.2.4	160.13.60.151
Aug 1, 2024 06:09:14.502007008 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:14.502163887 CEST	49755	587	192.168.2.4	50.116.87.178
Aug 1, 2024 06:09:14.507040024 CEST	587	49755	50.116.87.178	192.168.2.4
Aug 1, 2024 06:09:14.512109041 CEST	49743	587	192.168.2.4	199.224.64.206
Aug 1, 2024 06:09:14.521786928 CEST	587	49752	38.111.141.40	192.168.2.4
Aug 1, 2024 06:09:14.521863937 CEST	587	49752	38.111.141.40	192.168.2.4
Aug 1, 2024 06:09:14.521986961 CEST	49752	587	192.168.2.4	38.111.141.40
Aug 1, 2024 06:09:14.522330046 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:14.522419930 CEST	49752	587	192.168.2.4	38.111.141.40
Aug 1, 2024 06:09:14.527129889 CEST	587	49752	38.111.141.40	192.168.2.4
Aug 1, 2024 06:09:14.549098015 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:14.549278021 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:14.549751997 CEST	49757	587	192.168.2.4	93.89.226.87
Aug 1, 2024 06:09:14.549839973 CEST	49758	587	192.168.2.4	66.133.129.50
Aug 1, 2024 06:09:14.549900055 CEST	49746	587	192.168.2.4	103.92.235.45
Aug 1, 2024 06:09:14.554838896 CEST	587	49757	93.89.226.87	192.168.2.4
Aug 1, 2024 06:09:14.554877043 CEST	587	49758	66.133.129.50	192.168.2.4
Aug 1, 2024 06:09:14.554907084 CEST	587	49746	103.92.235.45	192.168.2.4
Aug 1, 2024 06:09:14.576978922 CEST	587	49742	103.6.196.75	192.168.2.4
Aug 1, 2024 06:09:14.584032059 CEST	587	49733	13.250.88.201	192.168.2.4
Aug 1, 2024 06:09:14.594300032 CEST	587	49740	162.241.219.179	192.168.2.4
Aug 1, 2024 06:09:14.596307039 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:14.596452951 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:14.597531080 CEST	587	49748	162.241.219.218	192.168.2.4
Aug 1, 2024 06:09:14.597553968 CEST	587	49748	162.241.219.218	192.168.2.4
Aug 1, 2024 06:09:14.597564936 CEST	587	49748	162.241.219.218	192.168.2.4
Aug 1, 2024 06:09:14.597600937 CEST	49748	587	192.168.2.4	162.241.219.218
Aug 1, 2024 06:09:14.597616911 CEST	587	49748	162.241.219.218	192.168.2.4
Aug 1, 2024 06:09:14.597659111 CEST	49748	587	192.168.2.4	162.241.219.218
Aug 1, 2024 06:09:14.597779989 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:14.599308014 CEST	587	49737	202.125.94.90	192.168.2.4
Aug 1, 2024 06:09:14.601294041 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:14.601377010 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:14.602626085 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:14.602679968 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:14.606230021 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:14.615216970 CEST	587	49755	50.116.87.178	192.168.2.4
Aug 1, 2024 06:09:14.615525961 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:14.620446920 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:14.621488094 CEST	49742	587	192.168.2.4	103.6.196.75
Aug 1, 2024 06:09:14.637238979 CEST	49740	587	192.168.2.4	162.241.219.179
Aug 1, 2024 06:09:14.637243986 CEST	49733	587	192.168.2.4	13.250.88.201
Aug 1, 2024 06:09:14.647177935 CEST	587	49741	178.170.244.56	192.168.2.4
Aug 1, 2024 06:09:14.647464037 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:14.652339935 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:14.652797937 CEST	49737	587	192.168.2.4	202.125.94.90
Aug 1, 2024 06:09:14.653379917 CEST	587	49758	66.133.129.50	192.168.2.4
Aug 1, 2024 06:09:14.653619051 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:14.658442020 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:14.663322926 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:14.664944887 CEST	49739	587	192.168.2.4	84.2.43.67
Aug 1, 2024 06:09:14.665611029 CEST	49754	587	192.168.2.4	84.2.43.67
Aug 1, 2024 06:09:14.665721893 CEST	49745	587	192.168.2.4	193.46.84.40
Aug 1, 2024 06:09:14.665972948 CEST	49750	587	192.168.2.4	13.250.88.201
Aug 1, 2024 06:09:14.666093111 CEST	49749	587	192.168.2.4	160.13.60.151
Aug 1, 2024 06:09:14.666177034 CEST	49747	587	192.168.2.4	200.90.133.79
Aug 1, 2024 06:09:14.668375969 CEST	49755	587	192.168.2.4	50.116.87.178
Aug 1, 2024 06:09:14.669787884 CEST	587	49739	84.2.43.67	192.168.2.4
Aug 1, 2024 06:09:14.670408964 CEST	587	49754	84.2.43.67	192.168.2.4
Aug 1, 2024 06:09:14.670562029 CEST	587	49745	193.46.84.40	192.168.2.4
Aug 1, 2024 06:09:14.670623064 CEST	49745	587	192.168.2.4	193.46.84.40
Aug 1, 2024 06:09:14.670718908 CEST	587	49750	13.250.88.201	192.168.2.4
Aug 1, 2024 06:09:14.670886040 CEST	587	49749	160.13.60.151	192.168.2.4
Aug 1, 2024 06:09:14.670918941 CEST	587	49747	200.90.133.79	192.168.2.4
Aug 1, 2024 06:09:14.675434113 CEST	587	49745	193.46.84.40	192.168.2.4
Aug 1, 2024 06:09:14.699765921 CEST	49741	587	192.168.2.4	178.170.244.56
Aug 1, 2024 06:09:14.699774981 CEST	49758	587	192.168.2.4	66.133.129.50
Aug 1, 2024 06:09:14.715388060 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:14.734632015 CEST	49763	587	192.168.2.4	167.114.62.28
Aug 1, 2024 06:09:14.739553928 CEST	587	49763	167.114.62.28	192.168.2.4
Aug 1, 2024 06:09:14.739640951 CEST	49763	587	192.168.2.4	167.114.62.28
Aug 1, 2024 06:09:14.739784956 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:14.739924908 CEST	49764	587	192.168.2.4	103.170.105.14
Aug 1, 2024 06:09:14.744734049 CEST	587	49764	103.170.105.14	192.168.2.4
Aug 1, 2024 06:09:14.744821072 CEST	49764	587	192.168.2.4	103.170.105.14
Aug 1, 2024 06:09:14.745265961 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:14.745335102 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:14.762020111 CEST	49765	587	192.168.2.4	208.91.199.225
Aug 1, 2024 06:09:14.766846895 CEST	587	49765	208.91.199.225	192.168.2.4
Aug 1, 2024 06:09:14.766925097 CEST	49765	587	192.168.2.4	208.91.199.225
Aug 1, 2024 06:09:14.776979923 CEST	587	49757	93.89.226.87	192.168.2.4
Aug 1, 2024 06:09:14.792264938 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:14.792545080 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:14.797327995 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:14.805596113 CEST	49766	587	192.168.2.4	190.105.202.10
Aug 1, 2024 06:09:14.810444117 CEST	587	49766	190.105.202.10	192.168.2.4
Aug 1, 2024 06:09:14.810518026 CEST	49766	587	192.168.2.4	190.105.202.10
Aug 1, 2024 06:09:14.810652971 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:14.816391945 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:14.824635029 CEST	49757	587	192.168.2.4	93.89.226.87
Aug 1, 2024 06:09:14.831840992 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:14.832621098 CEST	49733	587	192.168.2.4	13.250.88.201
Aug 1, 2024 06:09:14.832632065 CEST	49740	587	192.168.2.4	162.241.219.179
Aug 1, 2024 06:09:14.832715034 CEST	49742	587	192.168.2.4	103.6.196.75
Aug 1, 2024 06:09:14.833959103 CEST	49767	587	192.168.2.4	13.250.88.201
Aug 1, 2024 06:09:14.837443113 CEST	587	49740	162.241.219.179	192.168.2.4
Aug 1, 2024 06:09:14.837452888 CEST	587	49733	13.250.88.201	192.168.2.4
Aug 1, 2024 06:09:14.837466955 CEST	587	49742	103.6.196.75	192.168.2.4
Aug 1, 2024 06:09:14.838721037 CEST	587	49767	13.250.88.201	192.168.2.4
Aug 1, 2024 06:09:14.838828087 CEST	49767	587	192.168.2.4	13.250.88.201
Aug 1, 2024 06:09:14.838921070 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:14.843353033 CEST	587	49747	200.90.133.79	192.168.2.4
Aug 1, 2024 06:09:14.866465092 CEST	587	49754	84.2.43.67	192.168.2.4
Aug 1, 2024 06:09:14.887224913 CEST	49747	587	192.168.2.4	200.90.133.79
Aug 1, 2024 06:09:14.888262033 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:14.888320923 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:14.893095970 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:14.917047024 CEST	587	49746	103.92.235.45	192.168.2.4
Aug 1, 2024 06:09:14.917275906 CEST	587	49746	103.92.235.45	192.168.2.4
Aug 1, 2024 06:09:14.917288065 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:14.917288065 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:14.917306900 CEST	587	49746	103.92.235.45	192.168.2.4
Aug 1, 2024 06:09:14.917327881 CEST	49746	587	192.168.2.4	103.92.235.45
Aug 1, 2024 06:09:14.917341948 CEST	587	49746	103.92.235.45	192.168.2.4
Aug 1, 2024 06:09:14.917386055 CEST	49746	587	192.168.2.4	103.92.235.45
Aug 1, 2024 06:09:14.917561054 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:14.918355942 CEST	49754	587	192.168.2.4	84.2.43.67
Aug 1, 2024 06:09:14.922262907 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:14.922409058 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:14.948331118 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:14.948590040 CEST	49755	587	192.168.2.4	50.116.87.178
Aug 1, 2024 06:09:14.948692083 CEST	49741	587	192.168.2.4	178.170.244.56
Aug 1, 2024 06:09:14.948796988 CEST	49737	587	192.168.2.4	202.125.94.90
Aug 1, 2024 06:09:14.948867083 CEST	49748	587	192.168.2.4	162.241.219.218
Aug 1, 2024 06:09:14.948965073 CEST	49758	587	192.168.2.4	66.133.129.50
Aug 1, 2024 06:09:14.953408003 CEST	587	49755	50.116.87.178	192.168.2.4
Aug 1, 2024 06:09:14.953479052 CEST	587	49741	178.170.244.56	192.168.2.4
Aug 1, 2024 06:09:14.953630924 CEST	587	49737	202.125.94.90	192.168.2.4
Aug 1, 2024 06:09:14.953659058 CEST	587	49748	162.241.219.218	192.168.2.4
Aug 1, 2024 06:09:14.953726053 CEST	587	49758	66.133.129.50	192.168.2.4
Aug 1, 2024 06:09:14.962810993 CEST	587	49759	185.165.46.2	192.168.2.4
Aug 1, 2024 06:09:14.963457108 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:14.966753960 CEST	587	49747	200.90.133.79	192.168.2.4
Aug 1, 2024 06:09:14.986048937 CEST	587	49749	160.13.60.151	192.168.2.4
Aug 1, 2024 06:09:15.004471064 CEST	587	49750	13.250.88.201	192.168.2.4
Aug 1, 2024 06:09:15.006681919 CEST	587	49745	193.46.84.40	192.168.2.4
Aug 1, 2024 06:09:15.008716106 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:15.008829117 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:15.012144089 CEST	49747	587	192.168.2.4	200.90.133.79
Aug 1, 2024 06:09:15.013951063 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:15.018208981 CEST	49759	587	192.168.2.4	185.165.46.2
Aug 1, 2024 06:09:15.027790070 CEST	49749	587	192.168.2.4	160.13.60.151
Aug 1, 2024 06:09:15.029202938 CEST	49768	587	192.168.2.4	103.5.50.24
Aug 1, 2024 06:09:15.034044981 CEST	587	49768	103.5.50.24	192.168.2.4
Aug 1, 2024 06:09:15.034126043 CEST	49768	587	192.168.2.4	103.5.50.24
Aug 1, 2024 06:09:15.034307003 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:15.040256977 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:15.052469015 CEST	587	49758	66.133.129.50	192.168.2.4
Aug 1, 2024 06:09:15.052720070 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:15.055383921 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:15.055546045 CEST	49757	587	192.168.2.4	93.89.226.87
Aug 1, 2024 06:09:15.059020996 CEST	49750	587	192.168.2.4	13.250.88.201
Aug 1, 2024 06:09:15.059027910 CEST	49745	587	192.168.2.4	193.46.84.40
Aug 1, 2024 06:09:15.060389996 CEST	587	49757	93.89.226.87	192.168.2.4
Aug 1, 2024 06:09:15.062431097 CEST	587	49755	50.116.87.178	192.168.2.4
Aug 1, 2024 06:09:15.092053890 CEST	49758	587	192.168.2.4	66.133.129.50
Aug 1, 2024 06:09:15.104361057 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:15.104420900 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:15.105885983 CEST	49755	587	192.168.2.4	50.116.87.178
Aug 1, 2024 06:09:15.109236002 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:15.111215115 CEST	587	49748	162.241.219.218	192.168.2.4
Aug 1, 2024 06:09:15.111464024 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:15.116364956 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:15.127450943 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:15.128125906 CEST	49754	587	192.168.2.4	84.2.43.67
Aug 1, 2024 06:09:15.129797935 CEST	49769	587	192.168.2.4	84.2.43.67
Aug 1, 2024 06:09:15.132972002 CEST	587	49754	84.2.43.67	192.168.2.4
Aug 1, 2024 06:09:15.134692907 CEST	587	49769	84.2.43.67	192.168.2.4
Aug 1, 2024 06:09:15.134779930 CEST	49769	587	192.168.2.4	84.2.43.67
Aug 1, 2024 06:09:15.134917021 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:15.152774096 CEST	49748	587	192.168.2.4	162.241.219.218
Aug 1, 2024 06:09:15.168097019 CEST	587	49741	178.170.244.56	192.168.2.4
Aug 1, 2024 06:09:15.169853926 CEST	587	49742	103.6.196.75	192.168.2.4
Aug 1, 2024 06:09:15.169887066 CEST	587	49742	103.6.196.75	192.168.2.4
Aug 1, 2024 06:09:15.169903040 CEST	587	49742	103.6.196.75	192.168.2.4
Aug 1, 2024 06:09:15.169919968 CEST	587	49742	103.6.196.75	192.168.2.4
Aug 1, 2024 06:09:15.170110941 CEST	49742	587	192.168.2.4	103.6.196.75
Aug 1, 2024 06:09:15.170110941 CEST	49742	587	192.168.2.4	103.6.196.75
Aug 1, 2024 06:09:15.170178890 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:15.174968958 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:15.175060987 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:15.196212053 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:15.196376085 CEST	49746	587	192.168.2.4	103.92.235.45
Aug 1, 2024 06:09:15.196537018 CEST	49759	587	192.168.2.4	185.165.46.2
Aug 1, 2024 06:09:15.201230049 CEST	587	49746	103.92.235.45	192.168.2.4
Aug 1, 2024 06:09:15.201343060 CEST	587	49759	185.165.46.2	192.168.2.4
Aug 1, 2024 06:09:15.215293884 CEST	49741	587	192.168.2.4	178.170.244.56
Aug 1, 2024 06:09:15.246639967 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:15.273653030 CEST	587	49733	13.250.88.201	192.168.2.4
Aug 1, 2024 06:09:15.274063110 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:15.282840014 CEST	587	49757	93.89.226.87	192.168.2.4
Aug 1, 2024 06:09:15.299563885 CEST	587	49737	202.125.94.90	192.168.2.4
Aug 1, 2024 06:09:15.311088085 CEST	587	49763	167.114.62.28	192.168.2.4
Aug 1, 2024 06:09:15.313787937 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:15.313868046 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:15.314119101 CEST	49749	587	192.168.2.4	160.13.60.151
Aug 1, 2024 06:09:15.314220905 CEST	49747	587	192.168.2.4	200.90.133.79
Aug 1, 2024 06:09:15.314323902 CEST	49745	587	192.168.2.4	193.46.84.40
Aug 1, 2024 06:09:15.314402103 CEST	49750	587	192.168.2.4	13.250.88.201
Aug 1, 2024 06:09:15.318905115 CEST	587	49749	160.13.60.151	192.168.2.4
Aug 1, 2024 06:09:15.318980932 CEST	587	49747	200.90.133.79	192.168.2.4
Aug 1, 2024 06:09:15.319086075 CEST	587	49745	193.46.84.40	192.168.2.4
Aug 1, 2024 06:09:15.319154978 CEST	587	49750	13.250.88.201	192.168.2.4
Aug 1, 2024 06:09:15.324681997 CEST	49733	587	192.168.2.4	13.250.88.201
Aug 1, 2024 06:09:15.324682951 CEST	49757	587	192.168.2.4	93.89.226.87
Aug 1, 2024 06:09:15.330949068 CEST	587	49754	84.2.43.67	192.168.2.4
Aug 1, 2024 06:09:15.340349913 CEST	49737	587	192.168.2.4	202.125.94.90
Aug 1, 2024 06:09:15.355981112 CEST	49763	587	192.168.2.4	167.114.62.28
Aug 1, 2024 06:09:15.364311934 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:15.364387989 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:15.365873098 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:15.366147995 CEST	49758	587	192.168.2.4	66.133.129.50
Aug 1, 2024 06:09:15.367291927 CEST	49755	587	192.168.2.4	50.116.87.178
Aug 1, 2024 06:09:15.367389917 CEST	49741	587	192.168.2.4	178.170.244.56
Aug 1, 2024 06:09:15.367470980 CEST	49748	587	192.168.2.4	162.241.219.218
Aug 1, 2024 06:09:15.369266033 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:15.371006012 CEST	587	49758	66.133.129.50	192.168.2.4
Aug 1, 2024 06:09:15.371546984 CEST	49754	587	192.168.2.4	84.2.43.67
Aug 1, 2024 06:09:15.372020006 CEST	587	49755	50.116.87.178	192.168.2.4
Aug 1, 2024 06:09:15.372227907 CEST	587	49741	178.170.244.56	192.168.2.4
Aug 1, 2024 06:09:15.372241974 CEST	587	49748	162.241.219.218	192.168.2.4
Aug 1, 2024 06:09:15.418447018 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:15.433450937 CEST	49770	587	192.168.2.4	62.149.157.154
Aug 1, 2024 06:09:15.438366890 CEST	587	49770	62.149.157.154	192.168.2.4
Aug 1, 2024 06:09:15.438452005 CEST	49770	587	192.168.2.4	62.149.157.154
Aug 1, 2024 06:09:15.438635111 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:15.440428019 CEST	49771	587	192.168.2.4	212.159.8.233
Aug 1, 2024 06:09:15.443703890 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:15.445226908 CEST	587	49771	212.159.8.233	192.168.2.4
Aug 1, 2024 06:09:15.445355892 CEST	49771	587	192.168.2.4	212.159.8.233
Aug 1, 2024 06:09:15.445509911 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:15.451087952 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:15.456237078 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:15.456501961 CEST	49742	587	192.168.2.4	103.6.196.75
Aug 1, 2024 06:09:15.461328030 CEST	587	49742	103.6.196.75	192.168.2.4
Aug 1, 2024 06:09:15.466254950 CEST	587	49759	185.165.46.2	192.168.2.4
Aug 1, 2024 06:09:15.466538906 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:15.470019102 CEST	587	49758	66.133.129.50	192.168.2.4
Aug 1, 2024 06:09:15.488826990 CEST	587	49747	200.90.133.79	192.168.2.4
Aug 1, 2024 06:09:15.490627050 CEST	587	49755	50.116.87.178	192.168.2.4
Aug 1, 2024 06:09:15.490653992 CEST	587	49755	50.116.87.178	192.168.2.4
Aug 1, 2024 06:09:15.490694046 CEST	587	49755	50.116.87.178	192.168.2.4
Aug 1, 2024 06:09:15.490730047 CEST	49755	587	192.168.2.4	50.116.87.178
Aug 1, 2024 06:09:15.490883112 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:15.491149902 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:15.495678902 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:15.495908022 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:15.512309074 CEST	49758	587	192.168.2.4	66.133.129.50
Aug 1, 2024 06:09:15.512330055 CEST	49759	587	192.168.2.4	185.165.46.2
Aug 1, 2024 06:09:15.532145977 CEST	587	49745	193.46.84.40	192.168.2.4
Aug 1, 2024 06:09:15.536329985 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:15.536444902 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:15.538229942 CEST	587	49748	162.241.219.218	192.168.2.4
Aug 1, 2024 06:09:15.538286924 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:15.538471937 CEST	49733	587	192.168.2.4	13.250.88.201
Aug 1, 2024 06:09:15.541342020 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:15.541412115 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:15.543320894 CEST	587	49733	13.250.88.201	192.168.2.4
Aug 1, 2024 06:09:15.543409109 CEST	49755	587	192.168.2.4	50.116.87.178
Aug 1, 2024 06:09:15.543441057 CEST	49747	587	192.168.2.4	200.90.133.79
Aug 1, 2024 06:09:15.543822050 CEST	587	49746	103.92.235.45	192.168.2.4
Aug 1, 2024 06:09:15.546331882 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:15.546459913 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:15.551399946 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:15.572455883 CEST	587	49760	64.140.165.234	192.168.2.4
Aug 1, 2024 06:09:15.572870970 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:15.577712059 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:15.577805042 CEST	49745	587	192.168.2.4	193.46.84.40
Aug 1, 2024 06:09:15.587035894 CEST	587	49741	178.170.244.56	192.168.2.4
Aug 1, 2024 06:09:15.587366104 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:15.590353966 CEST	49748	587	192.168.2.4	162.241.219.218
Aug 1, 2024 06:09:15.590356112 CEST	49746	587	192.168.2.4	103.92.235.45
Aug 1, 2024 06:09:15.592219114 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:15.614732027 CEST	587	49764	103.170.105.14	192.168.2.4
Aug 1, 2024 06:09:15.614845037 CEST	587	49764	103.170.105.14	192.168.2.4
Aug 1, 2024 06:09:15.615145922 CEST	49764	587	192.168.2.4	103.170.105.14
Aug 1, 2024 06:09:15.615313053 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:15.615475893 CEST	49764	587	192.168.2.4	103.170.105.14
Aug 1, 2024 06:09:15.620158911 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:15.620191097 CEST	587	49764	103.170.105.14	192.168.2.4
Aug 1, 2024 06:09:15.620213985 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:15.621552944 CEST	49760	587	192.168.2.4	64.140.165.234
Aug 1, 2024 06:09:15.623073101 CEST	587	49749	160.13.60.151	192.168.2.4
Aug 1, 2024 06:09:15.625094891 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:15.625174046 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:15.628187895 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:15.628375053 CEST	49763	587	192.168.2.4	167.114.62.28
Aug 1, 2024 06:09:15.628499985 CEST	49737	587	192.168.2.4	202.125.94.90
Aug 1, 2024 06:09:15.628663063 CEST	49757	587	192.168.2.4	93.89.226.87
Aug 1, 2024 06:09:15.633177996 CEST	587	49763	167.114.62.28	192.168.2.4
Aug 1, 2024 06:09:15.633241892 CEST	587	49737	202.125.94.90	192.168.2.4
Aug 1, 2024 06:09:15.633352995 CEST	587	49757	93.89.226.87	192.168.2.4
Aug 1, 2024 06:09:15.637188911 CEST	49741	587	192.168.2.4	178.170.244.56
Aug 1, 2024 06:09:15.663614988 CEST	587	49750	13.250.88.201	192.168.2.4
Aug 1, 2024 06:09:15.663630962 CEST	587	49750	13.250.88.201	192.168.2.4
Aug 1, 2024 06:09:15.663647890 CEST	587	49750	13.250.88.201	192.168.2.4
Aug 1, 2024 06:09:15.663665056 CEST	587	49750	13.250.88.201	192.168.2.4
Aug 1, 2024 06:09:15.663678885 CEST	587	49750	13.250.88.201	192.168.2.4
Aug 1, 2024 06:09:15.663691044 CEST	49750	587	192.168.2.4	13.250.88.201
Aug 1, 2024 06:09:15.663726091 CEST	49750	587	192.168.2.4	13.250.88.201
Aug 1, 2024 06:09:15.664012909 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:15.668407917 CEST	49749	587	192.168.2.4	160.13.60.151
Aug 1, 2024 06:09:15.668802023 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:15.669059992 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:15.732918024 CEST	587	49763	167.114.62.28	192.168.2.4
Aug 1, 2024 06:09:15.733160973 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:15.743736982 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:15.744870901 CEST	49754	587	192.168.2.4	84.2.43.67
Aug 1, 2024 06:09:15.745234013 CEST	49759	587	192.168.2.4	185.165.46.2
Aug 1, 2024 06:09:15.745330095 CEST	49758	587	192.168.2.4	66.133.129.50
Aug 1, 2024 06:09:15.745409966 CEST	49747	587	192.168.2.4	200.90.133.79
Aug 1, 2024 06:09:15.745493889 CEST	587	49767	13.250.88.201	192.168.2.4
Aug 1, 2024 06:09:15.745496035 CEST	49755	587	192.168.2.4	50.116.87.178
Aug 1, 2024 06:09:15.745673895 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:15.748585939 CEST	49772	587	192.168.2.4	13.250.88.201
Aug 1, 2024 06:09:15.749758959 CEST	587	49754	84.2.43.67	192.168.2.4
Aug 1, 2024 06:09:15.749980927 CEST	587	49759	185.165.46.2	192.168.2.4
Aug 1, 2024 06:09:15.750072002 CEST	587	49758	66.133.129.50	192.168.2.4
Aug 1, 2024 06:09:15.750123978 CEST	587	49747	200.90.133.79	192.168.2.4
Aug 1, 2024 06:09:15.750242949 CEST	587	49755	50.116.87.178	192.168.2.4
Aug 1, 2024 06:09:15.753366947 CEST	587	49772	13.250.88.201	192.168.2.4
Aug 1, 2024 06:09:15.753442049 CEST	49772	587	192.168.2.4	13.250.88.201
Aug 1, 2024 06:09:15.777782917 CEST	49763	587	192.168.2.4	167.114.62.28
Aug 1, 2024 06:09:15.780491114 CEST	587	49761	203.134.153.82	192.168.2.4
Aug 1, 2024 06:09:15.780508041 CEST	587	49761	203.134.153.82	192.168.2.4
Aug 1, 2024 06:09:15.780560017 CEST	49761	587	192.168.2.4	203.134.153.82
Aug 1, 2024 06:09:15.780893087 CEST	49761	587	192.168.2.4	203.134.153.82
Aug 1, 2024 06:09:15.788497925 CEST	587	49761	203.134.153.82	192.168.2.4
Aug 1, 2024 06:09:15.788522959 CEST	587	49742	103.6.196.75	192.168.2.4
Aug 1, 2024 06:09:15.793083906 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:15.793148041 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:15.794147015 CEST	49767	587	192.168.2.4	13.250.88.201
Aug 1, 2024 06:09:15.798713923 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:15.826873064 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:15.827090979 CEST	49748	587	192.168.2.4	162.241.219.218
Aug 1, 2024 06:09:15.827188015 CEST	49746	587	192.168.2.4	103.92.235.45
Aug 1, 2024 06:09:15.827297926 CEST	49745	587	192.168.2.4	193.46.84.40
Aug 1, 2024 06:09:15.827392101 CEST	49760	587	192.168.2.4	64.140.165.234
Aug 1, 2024 06:09:15.832389116 CEST	587	49748	162.241.219.218	192.168.2.4
Aug 1, 2024 06:09:15.832420111 CEST	587	49746	103.92.235.45	192.168.2.4
Aug 1, 2024 06:09:15.832449913 CEST	587	49745	193.46.84.40	192.168.2.4
Aug 1, 2024 06:09:15.832479000 CEST	587	49760	64.140.165.234	192.168.2.4
Aug 1, 2024 06:09:15.840277910 CEST	49742	587	192.168.2.4	103.6.196.75
Aug 1, 2024 06:09:15.852386951 CEST	587	49758	66.133.129.50	192.168.2.4
Aug 1, 2024 06:09:15.852658987 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:15.859277010 CEST	587	49757	93.89.226.87	192.168.2.4
Aug 1, 2024 06:09:15.859308958 CEST	587	49755	50.116.87.178	192.168.2.4
Aug 1, 2024 06:09:15.879823923 CEST	587	49766	190.105.202.10	192.168.2.4
Aug 1, 2024 06:09:15.900363922 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:15.900497913 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:15.902765036 CEST	49758	587	192.168.2.4	66.133.129.50
Aug 1, 2024 06:09:15.902786970 CEST	49755	587	192.168.2.4	50.116.87.178
Aug 1, 2024 06:09:15.902786970 CEST	49757	587	192.168.2.4	93.89.226.87
Aug 1, 2024 06:09:15.905355930 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:15.910026073 CEST	587	49733	13.250.88.201	192.168.2.4
Aug 1, 2024 06:09:15.910242081 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:15.915038109 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:15.919783115 CEST	587	49747	200.90.133.79	192.168.2.4
Aug 1, 2024 06:09:15.920063972 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:15.925225019 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:15.934108019 CEST	49766	587	192.168.2.4	190.105.202.10
Aug 1, 2024 06:09:15.944458961 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:15.944772959 CEST	49749	587	192.168.2.4	160.13.60.151
Aug 1, 2024 06:09:15.944772959 CEST	49741	587	192.168.2.4	178.170.244.56
Aug 1, 2024 06:09:15.944834948 CEST	49750	587	192.168.2.4	13.250.88.201
Aug 1, 2024 06:09:15.946248055 CEST	587	49754	84.2.43.67	192.168.2.4
Aug 1, 2024 06:09:15.946293116 CEST	587	49754	84.2.43.67	192.168.2.4
Aug 1, 2024 06:09:15.946310043 CEST	587	49754	84.2.43.67	192.168.2.4
Aug 1, 2024 06:09:15.946340084 CEST	587	49754	84.2.43.67	192.168.2.4
Aug 1, 2024 06:09:15.946346998 CEST	49754	587	192.168.2.4	84.2.43.67
Aug 1, 2024 06:09:15.946377993 CEST	49754	587	192.168.2.4	84.2.43.67
Aug 1, 2024 06:09:15.946436882 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:15.946436882 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:15.946659088 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:15.949672937 CEST	587	49749	160.13.60.151	192.168.2.4
Aug 1, 2024 06:09:15.949687958 CEST	587	49741	178.170.244.56	192.168.2.4
Aug 1, 2024 06:09:15.949702024 CEST	587	49750	13.250.88.201	192.168.2.4
Aug 1, 2024 06:09:15.951272964 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:15.951402903 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:15.963192940 CEST	587	49759	185.165.46.2	192.168.2.4
Aug 1, 2024 06:09:15.965266943 CEST	49747	587	192.168.2.4	200.90.133.79
Aug 1, 2024 06:09:15.965272903 CEST	49733	587	192.168.2.4	13.250.88.201
Aug 1, 2024 06:09:15.979310989 CEST	587	49737	202.125.94.90	192.168.2.4
Aug 1, 2024 06:09:15.988156080 CEST	587	49760	64.140.165.234	192.168.2.4
Aug 1, 2024 06:09:15.996311903 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:15.996390104 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:15.999958992 CEST	587	49748	162.241.219.218	192.168.2.4
Aug 1, 2024 06:09:16.001151085 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:16.001327038 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:16.001897097 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:16.002988100 CEST	49763	587	192.168.2.4	167.114.62.28
Aug 1, 2024 06:09:16.003060102 CEST	49767	587	192.168.2.4	13.250.88.201
Aug 1, 2024 06:09:16.008173943 CEST	587	49763	167.114.62.28	192.168.2.4
Aug 1, 2024 06:09:16.008188009 CEST	587	49767	13.250.88.201	192.168.2.4
Aug 1, 2024 06:09:16.012141943 CEST	49759	587	192.168.2.4	185.165.46.2
Aug 1, 2024 06:09:16.027939081 CEST	49737	587	192.168.2.4	202.125.94.90
Aug 1, 2024 06:09:16.030390024 CEST	49773	587	192.168.2.4	212.10.10.65
Aug 1, 2024 06:09:16.035187960 CEST	587	49773	212.10.10.65	192.168.2.4
Aug 1, 2024 06:09:16.035276890 CEST	49773	587	192.168.2.4	212.10.10.65
Aug 1, 2024 06:09:16.043391943 CEST	49760	587	192.168.2.4	64.140.165.234
Aug 1, 2024 06:09:16.043411970 CEST	49748	587	192.168.2.4	162.241.219.218
Aug 1, 2024 06:09:16.043411970 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:16.043998003 CEST	587	49745	193.46.84.40	192.168.2.4
Aug 1, 2024 06:09:16.048285007 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:16.048460007 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:16.048993111 CEST	587	49754	84.2.43.67	192.168.2.4
Aug 1, 2024 06:09:16.052239895 CEST	587	49770	62.149.157.154	192.168.2.4
Aug 1, 2024 06:09:16.083190918 CEST	587	49769	84.2.43.67	192.168.2.4
Aug 1, 2024 06:09:16.088212013 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:16.088474035 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:16.088486910 CEST	49742	587	192.168.2.4	103.6.196.75
Aug 1, 2024 06:09:16.088579893 CEST	49758	587	192.168.2.4	66.133.129.50
Aug 1, 2024 06:09:16.090295076 CEST	49745	587	192.168.2.4	193.46.84.40
Aug 1, 2024 06:09:16.092101097 CEST	49754	587	192.168.2.4	84.2.43.67
Aug 1, 2024 06:09:16.093516111 CEST	587	49742	103.6.196.75	192.168.2.4
Aug 1, 2024 06:09:16.093548059 CEST	587	49758	66.133.129.50	192.168.2.4
Aug 1, 2024 06:09:16.105897903 CEST	49770	587	192.168.2.4	62.149.157.154
Aug 1, 2024 06:09:16.108706951 CEST	587	49763	167.114.62.28	192.168.2.4
Aug 1, 2024 06:09:16.133471012 CEST	587	49733	13.250.88.201	192.168.2.4
Aug 1, 2024 06:09:16.133706093 CEST	49733	587	192.168.2.4	13.250.88.201
Aug 1, 2024 06:09:16.133749962 CEST	49733	587	192.168.2.4	13.250.88.201
Aug 1, 2024 06:09:16.136336088 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:16.136395931 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:16.137171984 CEST	49769	587	192.168.2.4	84.2.43.67
Aug 1, 2024 06:09:16.138520956 CEST	49774	587	192.168.2.4	15.235.118.229
Aug 1, 2024 06:09:16.138528109 CEST	587	49733	13.250.88.201	192.168.2.4
Aug 1, 2024 06:09:16.141228914 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:16.143328905 CEST	587	49774	15.235.118.229	192.168.2.4
Aug 1, 2024 06:09:16.143462896 CEST	49774	587	192.168.2.4	15.235.118.229
Aug 1, 2024 06:09:16.143611908 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:16.148785114 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:16.152775049 CEST	49763	587	192.168.2.4	167.114.62.28
Aug 1, 2024 06:09:16.171092987 CEST	587	49746	103.92.235.45	192.168.2.4
Aug 1, 2024 06:09:16.171406984 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:16.176280975 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:16.198523045 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:16.198704004 CEST	49757	587	192.168.2.4	93.89.226.87
Aug 1, 2024 06:09:16.198813915 CEST	49766	587	192.168.2.4	190.105.202.10
Aug 1, 2024 06:09:16.198884010 CEST	49755	587	192.168.2.4	50.116.87.178
Aug 1, 2024 06:09:16.199431896 CEST	49747	587	192.168.2.4	200.90.133.79
Aug 1, 2024 06:09:16.201958895 CEST	49775	587	192.168.2.4	13.250.88.201
Aug 1, 2024 06:09:16.203608036 CEST	587	49757	93.89.226.87	192.168.2.4
Aug 1, 2024 06:09:16.203671932 CEST	587	49766	190.105.202.10	192.168.2.4
Aug 1, 2024 06:09:16.203701973 CEST	587	49755	50.116.87.178	192.168.2.4
Aug 1, 2024 06:09:16.204206944 CEST	587	49747	200.90.133.79	192.168.2.4
Aug 1, 2024 06:09:16.206835032 CEST	587	49775	13.250.88.201	192.168.2.4
Aug 1, 2024 06:09:16.206909895 CEST	49775	587	192.168.2.4	13.250.88.201
Aug 1, 2024 06:09:16.207065105 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:16.207770109 CEST	587	49758	66.133.129.50	192.168.2.4
Aug 1, 2024 06:09:16.211282969 CEST	49776	587	192.168.2.4	164.52.146.15
Aug 1, 2024 06:09:16.215256929 CEST	49746	587	192.168.2.4	103.92.235.45
Aug 1, 2024 06:09:16.216106892 CEST	587	49776	164.52.146.15	192.168.2.4
Aug 1, 2024 06:09:16.216175079 CEST	49776	587	192.168.2.4	164.52.146.15
Aug 1, 2024 06:09:16.216361046 CEST	587	49736	52.32.228.196	192.168.2.4
Aug 1, 2024 06:09:16.226643085 CEST	587	49756	18.236.21.232	192.168.2.4
Aug 1, 2024 06:09:16.226676941 CEST	587	49756	18.236.21.232	192.168.2.4
Aug 1, 2024 06:09:16.226726055 CEST	49756	587	192.168.2.4	18.236.21.232
Aug 1, 2024 06:09:16.227154016 CEST	49756	587	192.168.2.4	18.236.21.232
Aug 1, 2024 06:09:16.231923103 CEST	587	49756	18.236.21.232	192.168.2.4
Aug 1, 2024 06:09:16.252367020 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:16.252432108 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:16.257247925 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:16.262159109 CEST	49758	587	192.168.2.4	66.133.129.50
Aug 1, 2024 06:09:16.262183905 CEST	49736	587	192.168.2.4	52.32.228.196
Aug 1, 2024 06:09:16.278453112 CEST	587	49750	13.250.88.201	192.168.2.4
Aug 1, 2024 06:09:16.278959036 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:16.283868074 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:16.299048901 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:16.299216986 CEST	49737	587	192.168.2.4	202.125.94.90
Aug 1, 2024 06:09:16.299320936 CEST	49748	587	192.168.2.4	162.241.219.218
Aug 1, 2024 06:09:16.299428940 CEST	49760	587	192.168.2.4	64.140.165.234
Aug 1, 2024 06:09:16.299499989 CEST	49759	587	192.168.2.4	185.165.46.2
Aug 1, 2024 06:09:16.304078102 CEST	587	49737	202.125.94.90	192.168.2.4
Aug 1, 2024 06:09:16.304094076 CEST	587	49748	162.241.219.218	192.168.2.4
Aug 1, 2024 06:09:16.304184914 CEST	587	49760	64.140.165.234	192.168.2.4
Aug 1, 2024 06:09:16.304213047 CEST	587	49759	185.165.46.2	192.168.2.4
Aug 1, 2024 06:09:16.311646938 CEST	587	49755	50.116.87.178	192.168.2.4
Aug 1, 2024 06:09:16.311988115 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:16.324652910 CEST	49750	587	192.168.2.4	13.250.88.201
Aug 1, 2024 06:09:16.333996058 CEST	587	49734	50.87.144.214	192.168.2.4
Aug 1, 2024 06:09:16.355899096 CEST	49755	587	192.168.2.4	50.116.87.178
Aug 1, 2024 06:09:16.360284090 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:16.360340118 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:16.365134001 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:16.370650053 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:16.373825073 CEST	49745	587	192.168.2.4	193.46.84.40
Aug 1, 2024 06:09:16.373939991 CEST	49769	587	192.168.2.4	84.2.43.67
Aug 1, 2024 06:09:16.374308109 CEST	49770	587	192.168.2.4	62.149.157.154
Aug 1, 2024 06:09:16.374404907 CEST	49754	587	192.168.2.4	84.2.43.67
Aug 1, 2024 06:09:16.374531031 CEST	49763	587	192.168.2.4	167.114.62.28
Aug 1, 2024 06:09:16.378606081 CEST	587	49745	193.46.84.40	192.168.2.4
Aug 1, 2024 06:09:16.378669977 CEST	587	49769	84.2.43.67	192.168.2.4
Aug 1, 2024 06:09:16.379268885 CEST	587	49770	62.149.157.154	192.168.2.4
Aug 1, 2024 06:09:16.379297972 CEST	587	49754	84.2.43.67	192.168.2.4
Aug 1, 2024 06:09:16.379312992 CEST	587	49763	167.114.62.28	192.168.2.4
Aug 1, 2024 06:09:16.379355907 CEST	49754	587	192.168.2.4	84.2.43.67
Aug 1, 2024 06:09:16.384068966 CEST	587	49754	84.2.43.67	192.168.2.4
Aug 1, 2024 06:09:16.387132883 CEST	49734	587	192.168.2.4	50.87.144.214
Aug 1, 2024 06:09:16.387634039 CEST	587	49749	160.13.60.151	192.168.2.4
Aug 1, 2024 06:09:16.388123989 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:16.425966024 CEST	587	49757	93.89.226.87	192.168.2.4
Aug 1, 2024 06:09:16.427270889 CEST	587	49742	103.6.196.75	192.168.2.4
Aug 1, 2024 06:09:16.430010080 CEST	587	49766	190.105.202.10	192.168.2.4
Aug 1, 2024 06:09:16.433970928 CEST	49749	587	192.168.2.4	160.13.60.151
Aug 1, 2024 06:09:16.436289072 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:16.436335087 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:16.441055059 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:16.452052116 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:16.452188969 CEST	49746	587	192.168.2.4	103.92.235.45
Aug 1, 2024 06:09:16.457159996 CEST	587	49746	103.92.235.45	192.168.2.4
Aug 1, 2024 06:09:16.458852053 CEST	587	49760	64.140.165.234	192.168.2.4
Aug 1, 2024 06:09:16.460542917 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:16.480875015 CEST	49766	587	192.168.2.4	190.105.202.10
Aug 1, 2024 06:09:16.480890036 CEST	49757	587	192.168.2.4	93.89.226.87
Aug 1, 2024 06:09:16.480891943 CEST	49742	587	192.168.2.4	103.6.196.75
Aug 1, 2024 06:09:16.482595921 CEST	49777	587	192.168.2.4	212.159.8.238
Aug 1, 2024 06:09:16.487420082 CEST	587	49777	212.159.8.238	192.168.2.4
Aug 1, 2024 06:09:16.487487078 CEST	49777	587	192.168.2.4	212.159.8.238
Aug 1, 2024 06:09:16.489032984 CEST	587	49763	167.114.62.28	192.168.2.4
Aug 1, 2024 06:09:16.489064932 CEST	587	49763	167.114.62.28	192.168.2.4
Aug 1, 2024 06:09:16.489103079 CEST	587	49763	167.114.62.28	192.168.2.4
Aug 1, 2024 06:09:16.489139080 CEST	49763	587	192.168.2.4	167.114.62.28
Aug 1, 2024 06:09:16.489329100 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:16.489382029 CEST	587	49763	167.114.62.28	192.168.2.4
Aug 1, 2024 06:09:16.489430904 CEST	49763	587	192.168.2.4	167.114.62.28
Aug 1, 2024 06:09:16.494178057 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:16.494235039 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:16.494312048 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:16.512142897 CEST	49760	587	192.168.2.4	64.140.165.234
Aug 1, 2024 06:09:16.528505087 CEST	587	49767	13.250.88.201	192.168.2.4
Aug 1, 2024 06:09:16.540364027 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:16.540422916 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:16.545286894 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:16.554078102 CEST	587	49759	185.165.46.2	192.168.2.4
Aug 1, 2024 06:09:16.554292917 CEST	587	49759	185.165.46.2	192.168.2.4
Aug 1, 2024 06:09:16.554406881 CEST	49759	587	192.168.2.4	185.165.46.2
Aug 1, 2024 06:09:16.554442883 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:16.554442883 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:16.558588982 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:16.558654070 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:16.558742046 CEST	49736	587	192.168.2.4	52.32.228.196
Aug 1, 2024 06:09:16.558820963 CEST	49750	587	192.168.2.4	13.250.88.201
Aug 1, 2024 06:09:16.558926105 CEST	49755	587	192.168.2.4	50.116.87.178
Aug 1, 2024 06:09:16.559557915 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:16.563580036 CEST	587	49736	52.32.228.196	192.168.2.4
Aug 1, 2024 06:09:16.563595057 CEST	587	49750	13.250.88.201	192.168.2.4
Aug 1, 2024 06:09:16.563612938 CEST	587	49755	50.116.87.178	192.168.2.4
Aug 1, 2024 06:09:16.574377060 CEST	587	49769	84.2.43.67	192.168.2.4
Aug 1, 2024 06:09:16.575440884 CEST	49767	587	192.168.2.4	13.250.88.201
Aug 1, 2024 06:09:16.575458050 CEST	587	49754	84.2.43.67	192.168.2.4
Aug 1, 2024 06:09:16.575803041 CEST	587	49763	167.114.62.28	192.168.2.4
Aug 1, 2024 06:09:16.577614069 CEST	587	49770	62.149.157.154	192.168.2.4
Aug 1, 2024 06:09:16.581999063 CEST	587	49745	193.46.84.40	192.168.2.4
Aug 1, 2024 06:09:16.604388952 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:16.604449034 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:16.609281063 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:16.621035099 CEST	587	49773	212.10.10.65	192.168.2.4
Aug 1, 2024 06:09:16.621282101 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:16.621500015 CEST	49769	587	192.168.2.4	84.2.43.67
Aug 1, 2024 06:09:16.621507883 CEST	49770	587	192.168.2.4	62.149.157.154
Aug 1, 2024 06:09:16.621515036 CEST	49754	587	192.168.2.4	84.2.43.67
Aug 1, 2024 06:09:16.621521950 CEST	49763	587	192.168.2.4	167.114.62.28
Aug 1, 2024 06:09:16.622071028 CEST	587	49772	13.250.88.201	192.168.2.4
Aug 1, 2024 06:09:16.627070904 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:16.627125978 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:16.632719994 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:16.637114048 CEST	49745	587	192.168.2.4	193.46.84.40
Aug 1, 2024 06:09:16.646174908 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:16.647569895 CEST	49734	587	192.168.2.4	50.87.144.214
Aug 1, 2024 06:09:16.647576094 CEST	49749	587	192.168.2.4	160.13.60.151
Aug 1, 2024 06:09:16.648950100 CEST	49778	587	192.168.2.4	199.224.64.206
Aug 1, 2024 06:09:16.652437925 CEST	587	49749	160.13.60.151	192.168.2.4
Aug 1, 2024 06:09:16.652468920 CEST	587	49734	50.87.144.214	192.168.2.4
Aug 1, 2024 06:09:16.653749943 CEST	587	49778	199.224.64.206	192.168.2.4
Aug 1, 2024 06:09:16.653819084 CEST	49778	587	192.168.2.4	199.224.64.206
Aug 1, 2024 06:09:16.653951883 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:16.668360949 CEST	49772	587	192.168.2.4	13.250.88.201
Aug 1, 2024 06:09:16.668380022 CEST	49773	587	192.168.2.4	212.10.10.65
Aug 1, 2024 06:09:16.672070980 CEST	587	49755	50.116.87.178	192.168.2.4
Aug 1, 2024 06:09:16.678963900 CEST	587	49754	84.2.43.67	192.168.2.4
Aug 1, 2024 06:09:16.700330973 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:16.700383902 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:16.705207109 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:16.715234995 CEST	49755	587	192.168.2.4	50.116.87.178
Aug 1, 2024 06:09:16.719664097 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:16.719796896 CEST	587	49776	164.52.146.15	192.168.2.4
Aug 1, 2024 06:09:16.725300074 CEST	587	49736	52.32.228.196	192.168.2.4
Aug 1, 2024 06:09:16.726313114 CEST	49766	587	192.168.2.4	190.105.202.10
Aug 1, 2024 06:09:16.726433039 CEST	49742	587	192.168.2.4	103.6.196.75
Aug 1, 2024 06:09:16.726466894 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:16.726627111 CEST	49757	587	192.168.2.4	93.89.226.87
Aug 1, 2024 06:09:16.726701975 CEST	49760	587	192.168.2.4	64.140.165.234
Aug 1, 2024 06:09:16.730894089 CEST	49754	587	192.168.2.4	84.2.43.67
Aug 1, 2024 06:09:16.731559038 CEST	587	49766	190.105.202.10	192.168.2.4
Aug 1, 2024 06:09:16.731589079 CEST	587	49742	103.6.196.75	192.168.2.4
Aug 1, 2024 06:09:16.731827021 CEST	587	49757	93.89.226.87	192.168.2.4
Aug 1, 2024 06:09:16.731856108 CEST	587	49760	64.140.165.234	192.168.2.4
Aug 1, 2024 06:09:16.753778934 CEST	587	49737	202.125.94.90	192.168.2.4
Aug 1, 2024 06:09:16.759282112 CEST	49779	587	192.168.2.4	94.169.2.35
Aug 1, 2024 06:09:16.760601044 CEST	49780	587	192.168.2.4	202.9.85.53
Aug 1, 2024 06:09:16.762134075 CEST	49776	587	192.168.2.4	164.52.146.15
Aug 1, 2024 06:09:16.764199972 CEST	587	49779	94.169.2.35	192.168.2.4
Aug 1, 2024 06:09:16.764282942 CEST	49779	587	192.168.2.4	94.169.2.35
Aug 1, 2024 06:09:16.765409946 CEST	587	49780	202.9.85.53	192.168.2.4
Aug 1, 2024 06:09:16.765480042 CEST	49780	587	192.168.2.4	202.9.85.53
Aug 1, 2024 06:09:16.776336908 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:16.776396036 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:16.777734995 CEST	49736	587	192.168.2.4	52.32.228.196
Aug 1, 2024 06:09:16.781336069 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:16.796025991 CEST	587	49746	103.92.235.45	192.168.2.4
Aug 1, 2024 06:09:16.796232939 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:16.801083088 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:16.807274103 CEST	587	49734	50.87.144.214	192.168.2.4
Aug 1, 2024 06:09:16.807486057 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:16.809004068 CEST	49737	587	192.168.2.4	202.125.94.90
Aug 1, 2024 06:09:16.812313080 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:16.819812059 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:16.819941998 CEST	49767	587	192.168.2.4	13.250.88.201
Aug 1, 2024 06:09:16.820030928 CEST	49759	587	192.168.2.4	185.165.46.2
Aug 1, 2024 06:09:16.824953079 CEST	587	49767	13.250.88.201	192.168.2.4
Aug 1, 2024 06:09:16.824981928 CEST	587	49759	185.165.46.2	192.168.2.4
Aug 1, 2024 06:09:16.825035095 CEST	49759	587	192.168.2.4	185.165.46.2
Aug 1, 2024 06:09:16.829905033 CEST	587	49759	185.165.46.2	192.168.2.4
Aug 1, 2024 06:09:16.840260029 CEST	49746	587	192.168.2.4	103.92.235.45
Aug 1, 2024 06:09:16.855879068 CEST	49734	587	192.168.2.4	50.87.144.214
Aug 1, 2024 06:09:16.871490955 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:16.886600971 CEST	587	49760	64.140.165.234	192.168.2.4
Aug 1, 2024 06:09:16.886646032 CEST	587	49760	64.140.165.234	192.168.2.4
Aug 1, 2024 06:09:16.886683941 CEST	587	49760	64.140.165.234	192.168.2.4
Aug 1, 2024 06:09:16.886698961 CEST	49760	587	192.168.2.4	64.140.165.234
Aug 1, 2024 06:09:16.886881113 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:16.887886047 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:16.887933016 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:16.888787031 CEST	49769	587	192.168.2.4	84.2.43.67
Aug 1, 2024 06:09:16.888957977 CEST	49770	587	192.168.2.4	62.149.157.154
Aug 1, 2024 06:09:16.889102936 CEST	49745	587	192.168.2.4	193.46.84.40
Aug 1, 2024 06:09:16.889309883 CEST	49773	587	192.168.2.4	212.10.10.65
Aug 1, 2024 06:09:16.889390945 CEST	49763	587	192.168.2.4	167.114.62.28
Aug 1, 2024 06:09:16.889691114 CEST	49772	587	192.168.2.4	13.250.88.201
Aug 1, 2024 06:09:16.891835928 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:16.893594980 CEST	587	49769	84.2.43.67	192.168.2.4
Aug 1, 2024 06:09:16.893735886 CEST	587	49770	62.149.157.154	192.168.2.4
Aug 1, 2024 06:09:16.893852949 CEST	587	49745	193.46.84.40	192.168.2.4
Aug 1, 2024 06:09:16.894064903 CEST	587	49773	212.10.10.65	192.168.2.4
Aug 1, 2024 06:09:16.894197941 CEST	587	49763	167.114.62.28	192.168.2.4
Aug 1, 2024 06:09:16.894248962 CEST	49763	587	192.168.2.4	167.114.62.28
Aug 1, 2024 06:09:16.894562960 CEST	587	49772	13.250.88.201	192.168.2.4
Aug 1, 2024 06:09:16.899163008 CEST	587	49763	167.114.62.28	192.168.2.4
Aug 1, 2024 06:09:16.910162926 CEST	587	49750	13.250.88.201	192.168.2.4
Aug 1, 2024 06:09:16.917141914 CEST	587	49771	212.159.8.233	192.168.2.4
Aug 1, 2024 06:09:16.917659044 CEST	587	49771	212.159.8.233	192.168.2.4
Aug 1, 2024 06:09:16.917712927 CEST	49771	587	192.168.2.4	212.159.8.233
Aug 1, 2024 06:09:16.917805910 CEST	49771	587	192.168.2.4	212.159.8.233
Aug 1, 2024 06:09:16.922627926 CEST	587	49771	212.159.8.233	192.168.2.4
Aug 1, 2024 06:09:16.924956083 CEST	587	49768	103.5.50.24	192.168.2.4
Aug 1, 2024 06:09:16.932307005 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:16.932358027 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:16.933986902 CEST	49760	587	192.168.2.4	64.140.165.234
Aug 1, 2024 06:09:16.937196970 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:16.954144001 CEST	587	49757	93.89.226.87	192.168.2.4
Aug 1, 2024 06:09:16.954453945 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:16.955858946 CEST	587	49766	190.105.202.10	192.168.2.4
Aug 1, 2024 06:09:16.959336996 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:16.959392071 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:16.964199066 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:16.965531111 CEST	49750	587	192.168.2.4	13.250.88.201
Aug 1, 2024 06:09:16.965607882 CEST	587	49749	160.13.60.151	192.168.2.4
Aug 1, 2024 06:09:16.965646982 CEST	49768	587	192.168.2.4	103.5.50.24
Aug 1, 2024 06:09:16.965862036 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:16.970621109 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:16.975560904 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:16.975759983 CEST	49755	587	192.168.2.4	50.116.87.178
Aug 1, 2024 06:09:16.975860119 CEST	49754	587	192.168.2.4	84.2.43.67
Aug 1, 2024 06:09:16.975929022 CEST	49776	587	192.168.2.4	164.52.146.15
Aug 1, 2024 06:09:16.980565071 CEST	587	49755	50.116.87.178	192.168.2.4
Aug 1, 2024 06:09:16.980729103 CEST	587	49754	84.2.43.67	192.168.2.4
Aug 1, 2024 06:09:16.980762959 CEST	587	49776	164.52.146.15	192.168.2.4
Aug 1, 2024 06:09:16.996498108 CEST	49757	587	192.168.2.4	93.89.226.87
Aug 1, 2024 06:09:16.996521950 CEST	49766	587	192.168.2.4	190.105.202.10
Aug 1, 2024 06:09:17.012132883 CEST	49749	587	192.168.2.4	160.13.60.151
Aug 1, 2024 06:09:17.027744055 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:17.046577930 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:17.050578117 CEST	587	49763	167.114.62.28	192.168.2.4
Aug 1, 2024 06:09:17.051018953 CEST	49737	587	192.168.2.4	202.125.94.90
Aug 1, 2024 06:09:17.051110983 CEST	49736	587	192.168.2.4	52.32.228.196
Aug 1, 2024 06:09:17.051198959 CEST	49746	587	192.168.2.4	103.92.235.45
Aug 1, 2024 06:09:17.051287889 CEST	49734	587	192.168.2.4	50.87.144.214
Aug 1, 2024 06:09:17.051520109 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:17.054435968 CEST	587	49742	103.6.196.75	192.168.2.4
Aug 1, 2024 06:09:17.056019068 CEST	587	49737	202.125.94.90	192.168.2.4
Aug 1, 2024 06:09:17.056034088 CEST	587	49736	52.32.228.196	192.168.2.4
Aug 1, 2024 06:09:17.056046963 CEST	587	49746	103.92.235.45	192.168.2.4
Aug 1, 2024 06:09:17.056081057 CEST	587	49734	50.87.144.214	192.168.2.4
Aug 1, 2024 06:09:17.075349092 CEST	587	49773	212.10.10.65	192.168.2.4
Aug 1, 2024 06:09:17.083386898 CEST	587	49769	84.2.43.67	192.168.2.4
Aug 1, 2024 06:09:17.087531090 CEST	587	49776	164.52.146.15	192.168.2.4
Aug 1, 2024 06:09:17.100385904 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:17.100441933 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:17.104501009 CEST	587	49735	217.76.146.62	192.168.2.4
Aug 1, 2024 06:09:17.104860067 CEST	587	49770	62.149.157.154	192.168.2.4
Aug 1, 2024 06:09:17.104871988 CEST	587	49745	193.46.84.40	192.168.2.4
Aug 1, 2024 06:09:17.105884075 CEST	49763	587	192.168.2.4	167.114.62.28
Aug 1, 2024 06:09:17.106036901 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:17.106085062 CEST	49742	587	192.168.2.4	103.6.196.75
Aug 1, 2024 06:09:17.106089115 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:17.111017942 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:17.111563921 CEST	587	49775	13.250.88.201	192.168.2.4
Aug 1, 2024 06:09:17.111766100 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:17.116760969 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:17.121529102 CEST	49773	587	192.168.2.4	212.10.10.65
Aug 1, 2024 06:09:17.133613110 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:17.133825064 CEST	49760	587	192.168.2.4	64.140.165.234
Aug 1, 2024 06:09:17.134073019 CEST	587	49740	162.241.219.179	192.168.2.4
Aug 1, 2024 06:09:17.134316921 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:17.137131929 CEST	49776	587	192.168.2.4	164.52.146.15
Aug 1, 2024 06:09:17.137156010 CEST	49769	587	192.168.2.4	84.2.43.67
Aug 1, 2024 06:09:17.138967037 CEST	587	49760	64.140.165.234	192.168.2.4
Aug 1, 2024 06:09:17.152775049 CEST	49735	587	192.168.2.4	217.76.146.62
Aug 1, 2024 06:09:17.152776003 CEST	49775	587	192.168.2.4	13.250.88.201
Aug 1, 2024 06:09:17.152781010 CEST	49745	587	192.168.2.4	193.46.84.40
Aug 1, 2024 06:09:17.152837992 CEST	49770	587	192.168.2.4	62.149.157.154
Aug 1, 2024 06:09:17.161415100 CEST	49781	587	192.168.2.4	195.130.132.10
Aug 1, 2024 06:09:17.165986061 CEST	587	49767	13.250.88.201	192.168.2.4
Aug 1, 2024 06:09:17.166266918 CEST	587	49781	195.130.132.10	192.168.2.4
Aug 1, 2024 06:09:17.166358948 CEST	49781	587	192.168.2.4	195.130.132.10
Aug 1, 2024 06:09:17.176502943 CEST	587	49754	84.2.43.67	192.168.2.4
Aug 1, 2024 06:09:17.184415102 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:17.184453964 CEST	49740	587	192.168.2.4	162.241.219.179
Aug 1, 2024 06:09:17.184501886 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:17.189357996 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:17.215965033 CEST	49767	587	192.168.2.4	13.250.88.201
Aug 1, 2024 06:09:17.230912924 CEST	49754	587	192.168.2.4	84.2.43.67
Aug 1, 2024 06:09:17.245196104 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:17.245908022 CEST	49750	587	192.168.2.4	13.250.88.201
Aug 1, 2024 06:09:17.245990992 CEST	49768	587	192.168.2.4	103.5.50.24
Aug 1, 2024 06:09:17.246005058 CEST	49757	587	192.168.2.4	93.89.226.87
Aug 1, 2024 06:09:17.246112108 CEST	49749	587	192.168.2.4	160.13.60.151
Aug 1, 2024 06:09:17.246198893 CEST	49766	587	192.168.2.4	190.105.202.10
Aug 1, 2024 06:09:17.250294924 CEST	587	49759	185.165.46.2	192.168.2.4
Aug 1, 2024 06:09:17.250502110 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:17.250754118 CEST	587	49750	13.250.88.201	192.168.2.4
Aug 1, 2024 06:09:17.250808001 CEST	587	49768	103.5.50.24	192.168.2.4
Aug 1, 2024 06:09:17.250915051 CEST	587	49757	93.89.226.87	192.168.2.4
Aug 1, 2024 06:09:17.250943899 CEST	587	49749	160.13.60.151	192.168.2.4
Aug 1, 2024 06:09:17.250977993 CEST	587	49766	190.105.202.10	192.168.2.4
Aug 1, 2024 06:09:17.255312920 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:17.268551111 CEST	587	49778	199.224.64.206	192.168.2.4
Aug 1, 2024 06:09:17.268775940 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:17.273866892 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:17.293489933 CEST	49759	587	192.168.2.4	185.165.46.2
Aug 1, 2024 06:09:17.305778027 CEST	587	49760	64.140.165.234	192.168.2.4
Aug 1, 2024 06:09:17.305991888 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:17.309269905 CEST	49778	587	192.168.2.4	199.224.64.206
Aug 1, 2024 06:09:17.310900927 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:17.322993040 CEST	49782	587	192.168.2.4	146.59.44.242
Aug 1, 2024 06:09:17.324640989 CEST	587	49739	84.2.43.67	192.168.2.4
Aug 1, 2024 06:09:17.325172901 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:17.329600096 CEST	587	49782	146.59.44.242	192.168.2.4
Aug 1, 2024 06:09:17.329902887 CEST	49782	587	192.168.2.4	146.59.44.242
Aug 1, 2024 06:09:17.331209898 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:17.331352949 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:17.336390972 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:17.342808962 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:17.343072891 CEST	49763	587	192.168.2.4	167.114.62.28
Aug 1, 2024 06:09:17.347899914 CEST	587	49763	167.114.62.28	192.168.2.4
Aug 1, 2024 06:09:17.360089064 CEST	49760	587	192.168.2.4	64.140.165.234
Aug 1, 2024 06:09:17.371561050 CEST	49739	587	192.168.2.4	84.2.43.67
Aug 1, 2024 06:09:17.387125015 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:17.402157068 CEST	587	49737	202.125.94.90	192.168.2.4
Aug 1, 2024 06:09:17.408087015 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:17.408555984 CEST	587	49746	103.92.235.45	192.168.2.4
Aug 1, 2024 06:09:17.417783022 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:17.417946100 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:17.417956114 CEST	49742	587	192.168.2.4	103.6.196.75
Aug 1, 2024 06:09:17.418167114 CEST	49773	587	192.168.2.4	212.10.10.65
Aug 1, 2024 06:09:17.418167114 CEST	49776	587	192.168.2.4	164.52.146.15
Aug 1, 2024 06:09:17.418340921 CEST	49775	587	192.168.2.4	13.250.88.201
Aug 1, 2024 06:09:17.418340921 CEST	49735	587	192.168.2.4	217.76.146.62
Aug 1, 2024 06:09:17.418453932 CEST	49740	587	192.168.2.4	162.241.219.179
Aug 1, 2024 06:09:17.418545961 CEST	49745	587	192.168.2.4	193.46.84.40
Aug 1, 2024 06:09:17.418761969 CEST	49769	587	192.168.2.4	84.2.43.67
Aug 1, 2024 06:09:17.422137022 CEST	49770	587	192.168.2.4	62.149.157.154
Aug 1, 2024 06:09:17.422993898 CEST	587	49742	103.6.196.75	192.168.2.4
Aug 1, 2024 06:09:17.423058987 CEST	587	49773	212.10.10.65	192.168.2.4
Aug 1, 2024 06:09:17.423098087 CEST	587	49776	164.52.146.15	192.168.2.4
Aug 1, 2024 06:09:17.423151970 CEST	587	49775	13.250.88.201	192.168.2.4
Aug 1, 2024 06:09:17.423202991 CEST	587	49735	217.76.146.62	192.168.2.4
Aug 1, 2024 06:09:17.423424006 CEST	587	49740	162.241.219.179	192.168.2.4
Aug 1, 2024 06:09:17.423458099 CEST	587	49745	193.46.84.40	192.168.2.4
Aug 1, 2024 06:09:17.424124002 CEST	587	49769	84.2.43.67	192.168.2.4
Aug 1, 2024 06:09:17.426934958 CEST	587	49770	62.149.157.154	192.168.2.4
Aug 1, 2024 06:09:17.431509018 CEST	587	49772	13.250.88.201	192.168.2.4
Aug 1, 2024 06:09:17.446485996 CEST	587	49774	15.235.118.229	192.168.2.4
Aug 1, 2024 06:09:17.448024988 CEST	587	49763	167.114.62.28	192.168.2.4
Aug 1, 2024 06:09:17.449661970 CEST	49737	587	192.168.2.4	202.125.94.90
Aug 1, 2024 06:09:17.464366913 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:17.464623928 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:17.467178106 CEST	49746	587	192.168.2.4	103.92.235.45
Aug 1, 2024 06:09:17.469590902 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:17.473357916 CEST	587	49757	93.89.226.87	192.168.2.4
Aug 1, 2024 06:09:17.473587990 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:17.478549004 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:17.482178926 CEST	49772	587	192.168.2.4	13.250.88.201
Aug 1, 2024 06:09:17.496496916 CEST	49774	587	192.168.2.4	15.235.118.229
Aug 1, 2024 06:09:17.496620893 CEST	49763	587	192.168.2.4	167.114.62.28
Aug 1, 2024 06:09:17.499829054 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:17.500113010 CEST	49754	587	192.168.2.4	84.2.43.67
Aug 1, 2024 06:09:17.500116110 CEST	49767	587	192.168.2.4	13.250.88.201
Aug 1, 2024 06:09:17.504933119 CEST	587	49754	84.2.43.67	192.168.2.4
Aug 1, 2024 06:09:17.504946947 CEST	587	49767	13.250.88.201	192.168.2.4
Aug 1, 2024 06:09:17.510138035 CEST	587	49766	190.105.202.10	192.168.2.4
Aug 1, 2024 06:09:17.510183096 CEST	587	49766	190.105.202.10	192.168.2.4
Aug 1, 2024 06:09:17.510220051 CEST	587	49766	190.105.202.10	192.168.2.4
Aug 1, 2024 06:09:17.510256052 CEST	587	49766	190.105.202.10	192.168.2.4
Aug 1, 2024 06:09:17.510337114 CEST	49766	587	192.168.2.4	190.105.202.10
Aug 1, 2024 06:09:17.510337114 CEST	49766	587	192.168.2.4	190.105.202.10
Aug 1, 2024 06:09:17.510554075 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:17.510554075 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:17.510781050 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:17.515486002 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:17.515842915 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:17.515887976 CEST	49783	443	192.168.2.4	20.12.23.50
Aug 1, 2024 06:09:17.515971899 CEST	443	49783	20.12.23.50	192.168.2.4
Aug 1, 2024 06:09:17.516072035 CEST	49783	443	192.168.2.4	20.12.23.50
Aug 1, 2024 06:09:17.520123959 CEST	49783	443	192.168.2.4	20.12.23.50
Aug 1, 2024 06:09:17.520172119 CEST	443	49783	20.12.23.50	192.168.2.4
Aug 1, 2024 06:09:17.527755022 CEST	49757	587	192.168.2.4	93.89.226.87
Aug 1, 2024 06:09:17.531857967 CEST	587	49779	94.169.2.35	192.168.2.4
Aug 1, 2024 06:09:17.532324076 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:17.537555933 CEST	587	49776	164.52.146.15	192.168.2.4
Aug 1, 2024 06:09:17.558073044 CEST	587	49749	160.13.60.151	192.168.2.4
Aug 1, 2024 06:09:17.565843105 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:17.566112041 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:17.574100018 CEST	49778	587	192.168.2.4	199.224.64.206
Aug 1, 2024 06:09:17.574208975 CEST	49759	587	192.168.2.4	185.165.46.2
Aug 1, 2024 06:09:17.574613094 CEST	49779	587	192.168.2.4	94.169.2.35
Aug 1, 2024 06:09:17.574621916 CEST	49760	587	192.168.2.4	64.140.165.234
Aug 1, 2024 06:09:17.578974009 CEST	587	49778	199.224.64.206	192.168.2.4
Aug 1, 2024 06:09:17.579004049 CEST	587	49759	185.165.46.2	192.168.2.4
Aug 1, 2024 06:09:17.579459906 CEST	587	49760	64.140.165.234	192.168.2.4
Aug 1, 2024 06:09:17.579997063 CEST	587	49750	13.250.88.201	192.168.2.4
Aug 1, 2024 06:09:17.585059881 CEST	587	49740	162.241.219.179	192.168.2.4
Aug 1, 2024 06:09:17.592236042 CEST	49776	587	192.168.2.4	164.52.146.15
Aug 1, 2024 06:09:17.593167067 CEST	587	49768	103.5.50.24	192.168.2.4
Aug 1, 2024 06:09:17.605025053 CEST	587	49773	212.10.10.65	192.168.2.4
Aug 1, 2024 06:09:17.606005907 CEST	49749	587	192.168.2.4	160.13.60.151
Aug 1, 2024 06:09:17.612371922 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:17.612812042 CEST	49784	587	192.168.2.4	62.210.246.119
Aug 1, 2024 06:09:17.612874985 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:17.615406990 CEST	587	49769	84.2.43.67	192.168.2.4
Aug 1, 2024 06:09:17.615443945 CEST	587	49769	84.2.43.67	192.168.2.4
Aug 1, 2024 06:09:17.615479946 CEST	587	49769	84.2.43.67	192.168.2.4
Aug 1, 2024 06:09:17.615514994 CEST	587	49769	84.2.43.67	192.168.2.4
Aug 1, 2024 06:09:17.615520954 CEST	49769	587	192.168.2.4	84.2.43.67
Aug 1, 2024 06:09:17.615667105 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:17.615667105 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:17.615677118 CEST	49769	587	192.168.2.4	84.2.43.67
Aug 1, 2024 06:09:17.615895033 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:17.617711067 CEST	587	49784	62.210.246.119	192.168.2.4
Aug 1, 2024 06:09:17.617739916 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:17.617856026 CEST	49784	587	192.168.2.4	62.210.246.119
Aug 1, 2024 06:09:17.618467093 CEST	587	49735	217.76.146.62	192.168.2.4
Aug 1, 2024 06:09:17.620517015 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:17.620544910 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:17.620585918 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:17.620764017 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:17.620791912 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:17.620822906 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:17.625504971 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:17.626914978 CEST	587	49745	193.46.84.40	192.168.2.4
Aug 1, 2024 06:09:17.628247023 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:17.630275965 CEST	587	49770	62.149.157.154	192.168.2.4
Aug 1, 2024 06:09:17.630332947 CEST	587	49770	62.149.157.154	192.168.2.4
Aug 1, 2024 06:09:17.630384922 CEST	587	49770	62.149.157.154	192.168.2.4
Aug 1, 2024 06:09:17.630422115 CEST	587	49770	62.149.157.154	192.168.2.4
Aug 1, 2024 06:09:17.630426884 CEST	49770	587	192.168.2.4	62.149.157.154
Aug 1, 2024 06:09:17.630451918 CEST	587	49770	62.149.157.154	192.168.2.4
Aug 1, 2024 06:09:17.630538940 CEST	49770	587	192.168.2.4	62.149.157.154
Aug 1, 2024 06:09:17.630539894 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:17.630539894 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:17.630882025 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:17.633059978 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:17.635359049 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:17.635390997 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:17.635564089 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:17.635652065 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:17.635818005 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:17.637121916 CEST	49740	587	192.168.2.4	162.241.219.179
Aug 1, 2024 06:09:17.637121916 CEST	49750	587	192.168.2.4	13.250.88.201
Aug 1, 2024 06:09:17.637125015 CEST	49768	587	192.168.2.4	103.5.50.24
Aug 1, 2024 06:09:17.656097889 CEST	49773	587	192.168.2.4	212.10.10.65
Aug 1, 2024 06:09:17.658308029 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:17.658832073 CEST	49739	587	192.168.2.4	84.2.43.67
Aug 1, 2024 06:09:17.663671970 CEST	587	49739	84.2.43.67	192.168.2.4
Aug 1, 2024 06:09:17.668376923 CEST	49745	587	192.168.2.4	193.46.84.40
Aug 1, 2024 06:09:17.668426991 CEST	49735	587	192.168.2.4	217.76.146.62
Aug 1, 2024 06:09:17.692148924 CEST	587	49778	199.224.64.206	192.168.2.4
Aug 1, 2024 06:09:17.692404985 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:17.718063116 CEST	587	49769	84.2.43.67	192.168.2.4
Aug 1, 2024 06:09:17.718097925 CEST	587	49781	195.130.132.10	192.168.2.4
Aug 1, 2024 06:09:17.718195915 CEST	587	49781	195.130.132.10	192.168.2.4
Aug 1, 2024 06:09:17.724212885 CEST	49781	587	192.168.2.4	195.130.132.10
Aug 1, 2024 06:09:17.724314928 CEST	49781	587	192.168.2.4	195.130.132.10
Aug 1, 2024 06:09:17.726145029 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:17.726362944 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:17.726417065 CEST	49737	587	192.168.2.4	202.125.94.90
Aug 1, 2024 06:09:17.726528883 CEST	49763	587	192.168.2.4	167.114.62.28
Aug 1, 2024 06:09:17.726619959 CEST	49772	587	192.168.2.4	13.250.88.201
Aug 1, 2024 06:09:17.726830959 CEST	49746	587	192.168.2.4	103.92.235.45
Aug 1, 2024 06:09:17.727068901 CEST	49774	587	192.168.2.4	15.235.118.229
Aug 1, 2024 06:09:17.729106903 CEST	587	49781	195.130.132.10	192.168.2.4
Aug 1, 2024 06:09:17.731352091 CEST	587	49737	202.125.94.90	192.168.2.4
Aug 1, 2024 06:09:17.731385946 CEST	587	49763	167.114.62.28	192.168.2.4
Aug 1, 2024 06:09:17.731393099 CEST	49757	587	192.168.2.4	93.89.226.87
Aug 1, 2024 06:09:17.731415033 CEST	587	49772	13.250.88.201	192.168.2.4
Aug 1, 2024 06:09:17.731570005 CEST	587	49746	103.92.235.45	192.168.2.4
Aug 1, 2024 06:09:17.731822968 CEST	587	49774	15.235.118.229	192.168.2.4
Aug 1, 2024 06:09:17.736534119 CEST	587	49757	93.89.226.87	192.168.2.4
Aug 1, 2024 06:09:17.736603975 CEST	49757	587	192.168.2.4	93.89.226.87
Aug 1, 2024 06:09:17.736795902 CEST	587	49760	64.140.165.234	192.168.2.4
Aug 1, 2024 06:09:17.746540070 CEST	49778	587	192.168.2.4	199.224.64.206
Aug 1, 2024 06:09:17.762161970 CEST	49769	587	192.168.2.4	84.2.43.67
Aug 1, 2024 06:09:17.772336006 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:17.772583008 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:17.777390003 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:17.777790070 CEST	49760	587	192.168.2.4	64.140.165.234
Aug 1, 2024 06:09:17.781069040 CEST	587	49775	13.250.88.201	192.168.2.4
Aug 1, 2024 06:09:17.781471014 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:17.786334038 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:17.810611963 CEST	587	49759	185.165.46.2	192.168.2.4
Aug 1, 2024 06:09:17.810858011 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:17.815340996 CEST	49785	587	192.168.2.4	209.71.212.26
Aug 1, 2024 06:09:17.816023111 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:17.818722963 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:17.818913937 CEST	49779	587	192.168.2.4	94.169.2.35
Aug 1, 2024 06:09:17.819076061 CEST	49749	587	192.168.2.4	160.13.60.151
Aug 1, 2024 06:09:17.819081068 CEST	49766	587	192.168.2.4	190.105.202.10
Aug 1, 2024 06:09:17.819238901 CEST	49740	587	192.168.2.4	162.241.219.179
Aug 1, 2024 06:09:17.819258928 CEST	49776	587	192.168.2.4	164.52.146.15
Aug 1, 2024 06:09:17.819355965 CEST	49750	587	192.168.2.4	13.250.88.201
Aug 1, 2024 06:09:17.819480896 CEST	49768	587	192.168.2.4	103.5.50.24
Aug 1, 2024 06:09:17.822093964 CEST	49773	587	192.168.2.4	212.10.10.65
Aug 1, 2024 06:09:17.822484016 CEST	587	49785	209.71.212.26	192.168.2.4
Aug 1, 2024 06:09:17.823806047 CEST	587	49779	94.169.2.35	192.168.2.4
Aug 1, 2024 06:09:17.823923111 CEST	587	49749	160.13.60.151	192.168.2.4
Aug 1, 2024 06:09:17.823923111 CEST	49785	587	192.168.2.4	209.71.212.26
Aug 1, 2024 06:09:17.824019909 CEST	587	49766	190.105.202.10	192.168.2.4
Aug 1, 2024 06:09:17.824048996 CEST	587	49740	162.241.219.179	192.168.2.4
Aug 1, 2024 06:09:17.824052095 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:17.824117899 CEST	587	49776	164.52.146.15	192.168.2.4
Aug 1, 2024 06:09:17.824259043 CEST	587	49750	13.250.88.201	192.168.2.4
Aug 1, 2024 06:09:17.824342012 CEST	587	49768	103.5.50.24	192.168.2.4
Aug 1, 2024 06:09:17.824623108 CEST	49775	587	192.168.2.4	13.250.88.201
Aug 1, 2024 06:09:17.826895952 CEST	587	49773	212.10.10.65	192.168.2.4
Aug 1, 2024 06:09:17.831480026 CEST	587	49774	15.235.118.229	192.168.2.4
Aug 1, 2024 06:09:17.853857994 CEST	587	49739	84.2.43.67	192.168.2.4
Aug 1, 2024 06:09:17.854147911 CEST	587	49739	84.2.43.67	192.168.2.4
Aug 1, 2024 06:09:17.854224920 CEST	49739	587	192.168.2.4	84.2.43.67
Aug 1, 2024 06:09:17.854275942 CEST	587	49739	84.2.43.67	192.168.2.4
Aug 1, 2024 06:09:17.854476929 CEST	49739	587	192.168.2.4	84.2.43.67
Aug 1, 2024 06:09:17.854577065 CEST	49739	587	192.168.2.4	84.2.43.67
Aug 1, 2024 06:09:17.855873108 CEST	49759	587	192.168.2.4	185.165.46.2
Aug 1, 2024 06:09:17.859349012 CEST	587	49739	84.2.43.67	192.168.2.4
Aug 1, 2024 06:09:17.860891104 CEST	587	49767	13.250.88.201	192.168.2.4
Aug 1, 2024 06:09:17.860964060 CEST	587	49767	13.250.88.201	192.168.2.4
Aug 1, 2024 06:09:17.860997915 CEST	587	49767	13.250.88.201	192.168.2.4
Aug 1, 2024 06:09:17.861033916 CEST	587	49767	13.250.88.201	192.168.2.4
Aug 1, 2024 06:09:17.861036062 CEST	49767	587	192.168.2.4	13.250.88.201
Aug 1, 2024 06:09:17.861104965 CEST	49767	587	192.168.2.4	13.250.88.201
Aug 1, 2024 06:09:17.861104012 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:17.861418962 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:17.866000891 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:17.866282940 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:17.866317987 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:17.871490002 CEST	49774	587	192.168.2.4	15.235.118.229
Aug 1, 2024 06:09:17.903142929 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:17.903431892 CEST	49770	587	192.168.2.4	62.149.157.154
Aug 1, 2024 06:09:17.903433084 CEST	49735	587	192.168.2.4	217.76.146.62
Aug 1, 2024 06:09:17.905800104 CEST	49778	587	192.168.2.4	199.224.64.206
Aug 1, 2024 06:09:17.908361912 CEST	587	49770	62.149.157.154	192.168.2.4
Aug 1, 2024 06:09:17.908392906 CEST	587	49735	217.76.146.62	192.168.2.4
Aug 1, 2024 06:09:17.910576105 CEST	587	49778	199.224.64.206	192.168.2.4
Aug 1, 2024 06:09:17.918859959 CEST	49745	587	192.168.2.4	193.46.84.40
Aug 1, 2024 06:09:17.918863058 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:17.924024105 CEST	587	49745	193.46.84.40	192.168.2.4
Aug 1, 2024 06:09:17.924094915 CEST	49745	587	192.168.2.4	193.46.84.40
Aug 1, 2024 06:09:17.958945990 CEST	49786	587	192.168.2.4	160.13.60.151
Aug 1, 2024 06:09:17.963859081 CEST	587	49786	160.13.60.151	192.168.2.4
Aug 1, 2024 06:09:17.963979006 CEST	49786	587	192.168.2.4	160.13.60.151
Aug 1, 2024 06:09:17.964282990 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:17.964344025 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:17.969342947 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:17.982033014 CEST	587	49763	167.114.62.28	192.168.2.4
Aug 1, 2024 06:09:17.982280016 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:17.985944986 CEST	587	49776	164.52.146.15	192.168.2.4
Aug 1, 2024 06:09:17.985991955 CEST	587	49776	164.52.146.15	192.168.2.4
Aug 1, 2024 06:09:17.986027002 CEST	587	49776	164.52.146.15	192.168.2.4
Aug 1, 2024 06:09:17.986064911 CEST	587	49776	164.52.146.15	192.168.2.4
Aug 1, 2024 06:09:17.986099005 CEST	49776	587	192.168.2.4	164.52.146.15
Aug 1, 2024 06:09:17.986185074 CEST	49776	587	192.168.2.4	164.52.146.15
Aug 1, 2024 06:09:17.986186028 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:17.986186981 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:17.986386061 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:17.987087965 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:17.991065979 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:17.991189957 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:17.991218090 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:17.991298914 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:18.003307104 CEST	587	49779	94.169.2.35	192.168.2.4
Aug 1, 2024 06:09:18.003566980 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:18.008409023 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:18.008948088 CEST	587	49773	212.10.10.65	192.168.2.4
Aug 1, 2024 06:09:18.009005070 CEST	587	49773	212.10.10.65	192.168.2.4
Aug 1, 2024 06:09:18.009035110 CEST	587	49773	212.10.10.65	192.168.2.4
Aug 1, 2024 06:09:18.009068012 CEST	587	49773	212.10.10.65	192.168.2.4
Aug 1, 2024 06:09:18.009195089 CEST	49773	587	192.168.2.4	212.10.10.65
Aug 1, 2024 06:09:18.009195089 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:18.009195089 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:18.009449005 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:18.011215925 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:18.011377096 CEST	49760	587	192.168.2.4	64.140.165.234
Aug 1, 2024 06:09:18.011497021 CEST	49775	587	192.168.2.4	13.250.88.201
Aug 1, 2024 06:09:18.011501074 CEST	49769	587	192.168.2.4	84.2.43.67
Aug 1, 2024 06:09:18.014182091 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:18.014364958 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:18.015405893 CEST	49787	587	192.168.2.4	191.252.112.195
Aug 1, 2024 06:09:18.016191959 CEST	587	49760	64.140.165.234	192.168.2.4
Aug 1, 2024 06:09:18.016340017 CEST	587	49769	84.2.43.67	192.168.2.4
Aug 1, 2024 06:09:18.016369104 CEST	587	49775	13.250.88.201	192.168.2.4
Aug 1, 2024 06:09:18.016396046 CEST	49769	587	192.168.2.4	84.2.43.67
Aug 1, 2024 06:09:18.020239115 CEST	587	49787	191.252.112.195	192.168.2.4
Aug 1, 2024 06:09:18.020459890 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:18.020467997 CEST	49787	587	192.168.2.4	191.252.112.195
Aug 1, 2024 06:09:18.021161079 CEST	587	49769	84.2.43.67	192.168.2.4
Aug 1, 2024 06:09:18.021214008 CEST	587	49777	212.159.8.238	192.168.2.4
Aug 1, 2024 06:09:18.021368980 CEST	587	49777	212.159.8.238	192.168.2.4
Aug 1, 2024 06:09:18.021704912 CEST	49777	587	192.168.2.4	212.159.8.238
Aug 1, 2024 06:09:18.021704912 CEST	49777	587	192.168.2.4	212.159.8.238
Aug 1, 2024 06:09:18.022181034 CEST	587	49778	199.224.64.206	192.168.2.4
Aug 1, 2024 06:09:18.026511908 CEST	587	49777	212.159.8.238	192.168.2.4
Aug 1, 2024 06:09:18.028139114 CEST	49763	587	192.168.2.4	167.114.62.28
Aug 1, 2024 06:09:18.043458939 CEST	49779	587	192.168.2.4	94.169.2.35
Aug 1, 2024 06:09:18.050960064 CEST	587	49766	190.105.202.10	192.168.2.4
Aug 1, 2024 06:09:18.062360048 CEST	587	49772	13.250.88.201	192.168.2.4
Aug 1, 2024 06:09:18.068355083 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:18.068424940 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:18.072761059 CEST	587	49776	164.52.146.15	192.168.2.4
Aug 1, 2024 06:09:18.073275089 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:18.073334932 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:18.074769020 CEST	49778	587	192.168.2.4	199.224.64.206
Aug 1, 2024 06:09:18.077636957 CEST	587	49746	103.92.235.45	192.168.2.4
Aug 1, 2024 06:09:18.078213930 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:18.078286886 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:18.083131075 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:18.105926037 CEST	49766	587	192.168.2.4	190.105.202.10
Aug 1, 2024 06:09:18.106950998 CEST	49772	587	192.168.2.4	13.250.88.201
Aug 1, 2024 06:09:18.107012987 CEST	587	49770	62.149.157.154	192.168.2.4
Aug 1, 2024 06:09:18.113431931 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:18.114593029 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:18.114813089 CEST	49759	587	192.168.2.4	185.165.46.2
Aug 1, 2024 06:09:18.114954948 CEST	49767	587	192.168.2.4	13.250.88.201
Aug 1, 2024 06:09:18.114962101 CEST	49774	587	192.168.2.4	15.235.118.229
Aug 1, 2024 06:09:18.115962982 CEST	49776	587	192.168.2.4	164.52.146.15
Aug 1, 2024 06:09:18.118221045 CEST	443	49783	20.12.23.50	192.168.2.4
Aug 1, 2024 06:09:18.118432045 CEST	49783	443	192.168.2.4	20.12.23.50
Aug 1, 2024 06:09:18.119714975 CEST	587	49759	185.165.46.2	192.168.2.4
Aug 1, 2024 06:09:18.119745970 CEST	587	49767	13.250.88.201	192.168.2.4
Aug 1, 2024 06:09:18.119777918 CEST	587	49774	15.235.118.229	192.168.2.4
Aug 1, 2024 06:09:18.121515989 CEST	49746	587	192.168.2.4	103.92.235.45
Aug 1, 2024 06:09:18.122759104 CEST	49783	443	192.168.2.4	20.12.23.50
Aug 1, 2024 06:09:18.122771978 CEST	443	49783	20.12.23.50	192.168.2.4
Aug 1, 2024 06:09:18.123158932 CEST	443	49783	20.12.23.50	192.168.2.4
Aug 1, 2024 06:09:18.129029036 CEST	587	49749	160.13.60.151	192.168.2.4
Aug 1, 2024 06:09:18.152755976 CEST	49770	587	192.168.2.4	62.149.157.154
Aug 1, 2024 06:09:18.164372921 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:18.165628910 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:18.168370008 CEST	49783	443	192.168.2.4	20.12.23.50
Aug 1, 2024 06:09:18.169373989 CEST	587	49768	103.5.50.24	192.168.2.4
Aug 1, 2024 06:09:18.170521021 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:18.170623064 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:18.170856953 CEST	587	49760	64.140.165.234	192.168.2.4
Aug 1, 2024 06:09:18.175506115 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:18.175554991 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:18.180361032 CEST	587	49737	202.125.94.90	192.168.2.4
Aug 1, 2024 06:09:18.180389881 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:18.180614948 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:18.181514025 CEST	587	49748	162.241.219.218	192.168.2.4
Aug 1, 2024 06:09:18.183995008 CEST	49749	587	192.168.2.4	160.13.60.151
Aug 1, 2024 06:09:18.185508013 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:18.185585976 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:18.190918922 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:18.205265999 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:18.205523968 CEST	49763	587	192.168.2.4	167.114.62.28
Aug 1, 2024 06:09:18.205699921 CEST	49779	587	192.168.2.4	94.169.2.35
Aug 1, 2024 06:09:18.207119942 CEST	587	49769	84.2.43.67	192.168.2.4
Aug 1, 2024 06:09:18.207523108 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:18.210376024 CEST	587	49763	167.114.62.28	192.168.2.4
Aug 1, 2024 06:09:18.210547924 CEST	587	49779	94.169.2.35	192.168.2.4
Aug 1, 2024 06:09:18.215245008 CEST	49768	587	192.168.2.4	103.5.50.24
Aug 1, 2024 06:09:18.215270042 CEST	49760	587	192.168.2.4	64.140.165.234
Aug 1, 2024 06:09:18.218930006 CEST	587	49774	15.235.118.229	192.168.2.4
Aug 1, 2024 06:09:18.223129034 CEST	49789	587	192.168.2.4	66.248.160.85
Aug 1, 2024 06:09:18.224878073 CEST	587	49741	178.170.244.56	192.168.2.4
Aug 1, 2024 06:09:18.227920055 CEST	587	49789	66.248.160.85	192.168.2.4
Aug 1, 2024 06:09:18.227992058 CEST	49789	587	192.168.2.4	66.248.160.85
Aug 1, 2024 06:09:18.230870962 CEST	49748	587	192.168.2.4	162.241.219.218
Aug 1, 2024 06:09:18.230881929 CEST	49737	587	192.168.2.4	202.125.94.90
Aug 1, 2024 06:09:18.256207943 CEST	49790	587	192.168.2.4	192.185.177.117
Aug 1, 2024 06:09:18.256273985 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:18.256330967 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:18.261080027 CEST	587	49790	192.185.177.117	192.168.2.4
Aug 1, 2024 06:09:18.261153936 CEST	49790	587	192.168.2.4	192.185.177.117
Aug 1, 2024 06:09:18.261248112 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:18.261373043 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:18.262134075 CEST	49774	587	192.168.2.4	15.235.118.229
Aug 1, 2024 06:09:18.262130976 CEST	49769	587	192.168.2.4	84.2.43.67
Aug 1, 2024 06:09:18.266558886 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:18.268754005 CEST	587	49750	13.250.88.201	192.168.2.4
Aug 1, 2024 06:09:18.268940926 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:18.273792028 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:18.277745962 CEST	49741	587	192.168.2.4	178.170.244.56
Aug 1, 2024 06:09:18.309041023 CEST	49750	587	192.168.2.4	13.250.88.201
Aug 1, 2024 06:09:18.310683966 CEST	587	49769	84.2.43.67	192.168.2.4
Aug 1, 2024 06:09:18.310718060 CEST	587	49763	167.114.62.28	192.168.2.4
Aug 1, 2024 06:09:18.310920000 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:18.315840960 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:18.315896988 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:18.320744038 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:18.323509932 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:18.326080084 CEST	49773	587	192.168.2.4	212.10.10.65
Aug 1, 2024 06:09:18.326921940 CEST	49766	587	192.168.2.4	190.105.202.10
Aug 1, 2024 06:09:18.327013969 CEST	49778	587	192.168.2.4	199.224.64.206
Aug 1, 2024 06:09:18.327117920 CEST	49746	587	192.168.2.4	103.92.235.45
Aug 1, 2024 06:09:18.327192068 CEST	49772	587	192.168.2.4	13.250.88.201
Aug 1, 2024 06:09:18.327279091 CEST	49776	587	192.168.2.4	164.52.146.15
Aug 1, 2024 06:09:18.328092098 CEST	49791	587	192.168.2.4	84.2.43.67
Aug 1, 2024 06:09:18.328797102 CEST	49792	587	192.168.2.4	84.2.43.67
Aug 1, 2024 06:09:18.330943108 CEST	587	49773	212.10.10.65	192.168.2.4
Aug 1, 2024 06:09:18.331792116 CEST	587	49766	190.105.202.10	192.168.2.4
Aug 1, 2024 06:09:18.331821918 CEST	587	49778	199.224.64.206	192.168.2.4
Aug 1, 2024 06:09:18.331855059 CEST	587	49746	103.92.235.45	192.168.2.4
Aug 1, 2024 06:09:18.331949949 CEST	587	49772	13.250.88.201	192.168.2.4
Aug 1, 2024 06:09:18.332067966 CEST	587	49776	164.52.146.15	192.168.2.4
Aug 1, 2024 06:09:18.332882881 CEST	587	49791	84.2.43.67	192.168.2.4
Aug 1, 2024 06:09:18.332943916 CEST	49791	587	192.168.2.4	84.2.43.67
Aug 1, 2024 06:09:18.333079100 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:18.333591938 CEST	587	49792	84.2.43.67	192.168.2.4
Aug 1, 2024 06:09:18.333653927 CEST	49792	587	192.168.2.4	84.2.43.67
Aug 1, 2024 06:09:18.340437889 CEST	587	49759	185.165.46.2	192.168.2.4
Aug 1, 2024 06:09:18.347076893 CEST	587	49785	209.71.212.26	192.168.2.4
Aug 1, 2024 06:09:18.355881929 CEST	49763	587	192.168.2.4	167.114.62.28
Aug 1, 2024 06:09:18.355885983 CEST	49769	587	192.168.2.4	84.2.43.67
Aug 1, 2024 06:09:18.356476068 CEST	587	49775	13.250.88.201	192.168.2.4
Aug 1, 2024 06:09:18.380475998 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:18.384635925 CEST	587	49784	62.210.246.119	192.168.2.4
Aug 1, 2024 06:09:18.385623932 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:18.387159109 CEST	49759	587	192.168.2.4	185.165.46.2
Aug 1, 2024 06:09:18.387162924 CEST	49785	587	192.168.2.4	209.71.212.26
Aug 1, 2024 06:09:18.389053106 CEST	587	49779	94.169.2.35	192.168.2.4
Aug 1, 2024 06:09:18.390455961 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:18.390517950 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:18.392643929 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:18.392676115 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:18.392709017 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:18.392725945 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:18.392740965 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:18.392760992 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:18.392784119 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:18.392819881 CEST	49760	587	192.168.2.4	64.140.165.234
Aug 1, 2024 06:09:18.392836094 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:18.392838955 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:18.392888069 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:18.392888069 CEST	49770	587	192.168.2.4	62.149.157.154
Aug 1, 2024 06:09:18.392894983 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:18.392930031 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:18.392975092 CEST	49748	587	192.168.2.4	162.241.219.218
Aug 1, 2024 06:09:18.392982960 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:18.393063068 CEST	49737	587	192.168.2.4	202.125.94.90
Aug 1, 2024 06:09:18.393125057 CEST	49768	587	192.168.2.4	103.5.50.24
Aug 1, 2024 06:09:18.393605947 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:18.393659115 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:18.393734932 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:18.393757105 CEST	49749	587	192.168.2.4	160.13.60.151
Aug 1, 2024 06:09:18.393769026 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:18.393798113 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:18.393804073 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:18.393816948 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:18.396320105 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:18.396348953 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:18.396398067 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:18.396476030 CEST	49749	587	192.168.2.4	160.13.60.151
Aug 1, 2024 06:09:18.397897959 CEST	587	49760	64.140.165.234	192.168.2.4
Aug 1, 2024 06:09:18.397928953 CEST	587	49770	62.149.157.154	192.168.2.4
Aug 1, 2024 06:09:18.397964954 CEST	587	49748	162.241.219.218	192.168.2.4
Aug 1, 2024 06:09:18.398061991 CEST	587	49737	202.125.94.90	192.168.2.4
Aug 1, 2024 06:09:18.398092031 CEST	587	49768	103.5.50.24	192.168.2.4
Aug 1, 2024 06:09:18.398637056 CEST	587	49749	160.13.60.151	192.168.2.4
Aug 1, 2024 06:09:18.398693085 CEST	587	49749	160.13.60.151	192.168.2.4
Aug 1, 2024 06:09:18.398725033 CEST	587	49749	160.13.60.151	192.168.2.4
Aug 1, 2024 06:09:18.398899078 CEST	587	49749	160.13.60.151	192.168.2.4
Aug 1, 2024 06:09:18.398931026 CEST	587	49749	160.13.60.151	192.168.2.4
Aug 1, 2024 06:09:18.398982048 CEST	587	49749	160.13.60.151	192.168.2.4
Aug 1, 2024 06:09:18.399009943 CEST	587	49749	160.13.60.151	192.168.2.4
Aug 1, 2024 06:09:18.401293993 CEST	587	49749	160.13.60.151	192.168.2.4
Aug 1, 2024 06:09:18.401504040 CEST	587	49749	160.13.60.151	192.168.2.4
Aug 1, 2024 06:09:18.401531935 CEST	587	49749	160.13.60.151	192.168.2.4
Aug 1, 2024 06:09:18.401557922 CEST	587	49749	160.13.60.151	192.168.2.4
Aug 1, 2024 06:09:18.402735949 CEST	49775	587	192.168.2.4	13.250.88.201
Aug 1, 2024 06:09:18.403376102 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:18.403409958 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:18.403433084 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:18.403445959 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:18.403518915 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:18.404542923 CEST	49749	587	192.168.2.4	160.13.60.151
Aug 1, 2024 06:09:18.409354925 CEST	587	49749	160.13.60.151	192.168.2.4
Aug 1, 2024 06:09:18.409476995 CEST	587	49749	160.13.60.151	192.168.2.4
Aug 1, 2024 06:09:18.434052944 CEST	49784	587	192.168.2.4	62.210.246.119
Aug 1, 2024 06:09:18.434070110 CEST	49779	587	192.168.2.4	94.169.2.35
Aug 1, 2024 06:09:18.439038992 CEST	587	49776	164.52.146.15	192.168.2.4
Aug 1, 2024 06:09:18.444055080 CEST	587	49778	199.224.64.206	192.168.2.4
Aug 1, 2024 06:09:18.445698977 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:18.460161924 CEST	587	49767	13.250.88.201	192.168.2.4
Aug 1, 2024 06:09:18.472949028 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:18.472989082 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:18.473023891 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:18.473057032 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:18.473057985 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:18.473071098 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:18.473093987 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:18.473112106 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:18.473146915 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:18.473160982 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:18.473160982 CEST	49749	587	192.168.2.4	160.13.60.151
Aug 1, 2024 06:09:18.473181009 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:18.473191023 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:18.473232031 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:18.473233938 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:18.473265886 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:18.473273993 CEST	49749	587	192.168.2.4	160.13.60.151
Aug 1, 2024 06:09:18.473273993 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:18.473300934 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:18.473315001 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:18.473347902 CEST	49749	587	192.168.2.4	160.13.60.151
Aug 1, 2024 06:09:18.473347902 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:18.473438025 CEST	49749	587	192.168.2.4	160.13.60.151
Aug 1, 2024 06:09:18.473994970 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:18.474029064 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:18.474055052 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:18.474062920 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:18.474075079 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:18.474102974 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:18.474109888 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:18.474140882 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:18.474185944 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:18.474271059 CEST	49749	587	192.168.2.4	160.13.60.151
Aug 1, 2024 06:09:18.474313974 CEST	49749	587	192.168.2.4	160.13.60.151
Aug 1, 2024 06:09:18.478216887 CEST	587	49749	160.13.60.151	192.168.2.4
Aug 1, 2024 06:09:18.478313923 CEST	587	49749	160.13.60.151	192.168.2.4
Aug 1, 2024 06:09:18.478343010 CEST	587	49749	160.13.60.151	192.168.2.4
Aug 1, 2024 06:09:18.478374004 CEST	587	49749	160.13.60.151	192.168.2.4
Aug 1, 2024 06:09:18.478518963 CEST	587	49749	160.13.60.151	192.168.2.4
Aug 1, 2024 06:09:18.478549957 CEST	587	49749	160.13.60.151	192.168.2.4
Aug 1, 2024 06:09:18.478672028 CEST	587	49749	160.13.60.151	192.168.2.4
Aug 1, 2024 06:09:18.478699923 CEST	587	49749	160.13.60.151	192.168.2.4
Aug 1, 2024 06:09:18.478732109 CEST	587	49749	160.13.60.151	192.168.2.4
Aug 1, 2024 06:09:18.479095936 CEST	587	49749	160.13.60.151	192.168.2.4
Aug 1, 2024 06:09:18.479231119 CEST	587	49749	160.13.60.151	192.168.2.4
Aug 1, 2024 06:09:18.479401112 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:18.479454041 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:18.479489088 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:18.479511023 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:18.479542971 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:18.479576111 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:18.479592085 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:18.479610920 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:18.479655981 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:18.479721069 CEST	49749	587	192.168.2.4	160.13.60.151
Aug 1, 2024 06:09:18.479856014 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:18.479877949 CEST	49749	587	192.168.2.4	160.13.60.151
Aug 1, 2024 06:09:18.480014086 CEST	49749	587	192.168.2.4	160.13.60.151
Aug 1, 2024 06:09:18.483273029 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:18.483330965 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:18.483382940 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:18.483391047 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:18.483418941 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:18.483427048 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:18.483453989 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:18.483546019 CEST	49749	587	192.168.2.4	160.13.60.151
Aug 1, 2024 06:09:18.483546019 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:18.484612942 CEST	587	49749	160.13.60.151	192.168.2.4
Aug 1, 2024 06:09:18.484769106 CEST	587	49749	160.13.60.151	192.168.2.4
Aug 1, 2024 06:09:18.484818935 CEST	587	49749	160.13.60.151	192.168.2.4
Aug 1, 2024 06:09:18.484846115 CEST	587	49749	160.13.60.151	192.168.2.4
Aug 1, 2024 06:09:18.484899044 CEST	587	49749	160.13.60.151	192.168.2.4
Aug 1, 2024 06:09:18.484951019 CEST	587	49749	160.13.60.151	192.168.2.4
Aug 1, 2024 06:09:18.488508940 CEST	587	49749	160.13.60.151	192.168.2.4
Aug 1, 2024 06:09:18.496505976 CEST	49776	587	192.168.2.4	164.52.146.15
Aug 1, 2024 06:09:18.496553898 CEST	49778	587	192.168.2.4	199.224.64.206
Aug 1, 2024 06:09:18.512146950 CEST	49767	587	192.168.2.4	13.250.88.201
Aug 1, 2024 06:09:18.512207031 CEST	587	49773	212.10.10.65	192.168.2.4
Aug 1, 2024 06:09:18.512983084 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:18.545115948 CEST	587	49780	202.9.85.53	192.168.2.4
Aug 1, 2024 06:09:18.552855968 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:18.552895069 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:18.552917004 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:18.552930117 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:18.552941084 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:18.552974939 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:18.552982092 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:18.553020954 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:18.553030014 CEST	49749	587	192.168.2.4	160.13.60.151
Aug 1, 2024 06:09:18.553044081 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:18.553075075 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:18.553076029 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:18.553109884 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:18.553121090 CEST	49749	587	192.168.2.4	160.13.60.151
Aug 1, 2024 06:09:18.553121090 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:18.553143024 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:18.553162098 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:18.553189039 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:18.553199053 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:18.553246021 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:18.553853989 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:18.553889036 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:18.553910971 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:18.553934097 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:18.553939104 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:18.553973913 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:18.553980112 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:18.554008007 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:18.554033041 CEST	49749	587	192.168.2.4	160.13.60.151
Aug 1, 2024 06:09:18.554042101 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:18.554044008 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:18.554044008 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:18.554095984 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:18.554157019 CEST	49749	587	192.168.2.4	160.13.60.151
Aug 1, 2024 06:09:18.554665089 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:18.555665970 CEST	587	49748	162.241.219.218	192.168.2.4
Aug 1, 2024 06:09:18.558146954 CEST	587	49749	160.13.60.151	192.168.2.4
Aug 1, 2024 06:09:18.558368921 CEST	587	49766	190.105.202.10	192.168.2.4
Aug 1, 2024 06:09:18.558398008 CEST	587	49749	160.13.60.151	192.168.2.4
Aug 1, 2024 06:09:18.558465004 CEST	587	49749	160.13.60.151	192.168.2.4
Aug 1, 2024 06:09:18.558491945 CEST	587	49749	160.13.60.151	192.168.2.4
Aug 1, 2024 06:09:18.558993101 CEST	49773	587	192.168.2.4	212.10.10.65
Aug 1, 2024 06:09:18.559139967 CEST	587	49749	160.13.60.151	192.168.2.4
Aug 1, 2024 06:09:18.559252977 CEST	587	49749	160.13.60.151	192.168.2.4
Aug 1, 2024 06:09:18.559282064 CEST	587	49749	160.13.60.151	192.168.2.4
Aug 1, 2024 06:09:18.559335947 CEST	587	49749	160.13.60.151	192.168.2.4
Aug 1, 2024 06:09:18.559364080 CEST	587	49749	160.13.60.151	192.168.2.4
Aug 1, 2024 06:09:18.559393883 CEST	587	49749	160.13.60.151	192.168.2.4
Aug 1, 2024 06:09:18.559448004 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:18.559499979 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:18.559501886 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:18.559531927 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:18.559577942 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:18.559582949 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:18.559633017 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:18.559653997 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:18.559667110 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:18.559699059 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:18.559703112 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:18.559755087 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:18.559964895 CEST	49749	587	192.168.2.4	160.13.60.151
Aug 1, 2024 06:09:18.560208082 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:18.560260057 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:18.560262918 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:18.560297012 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:18.560316086 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:18.560333014 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:18.560338974 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:18.560384989 CEST	49749	587	192.168.2.4	160.13.60.151
Aug 1, 2024 06:09:18.560384989 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:18.560729027 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:18.560758114 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:18.560781956 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:18.560805082 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:18.560899973 CEST	49749	587	192.168.2.4	160.13.60.151
Aug 1, 2024 06:09:18.561043978 CEST	49774	587	192.168.2.4	15.235.118.229
Aug 1, 2024 06:09:18.561139107 CEST	49741	587	192.168.2.4	178.170.244.56
Aug 1, 2024 06:09:18.561218023 CEST	49750	587	192.168.2.4	13.250.88.201
Aug 1, 2024 06:09:18.561311960 CEST	49769	587	192.168.2.4	84.2.43.67
Aug 1, 2024 06:09:18.561378956 CEST	49763	587	192.168.2.4	167.114.62.28
Aug 1, 2024 06:09:18.564935923 CEST	587	49749	160.13.60.151	192.168.2.4
Aug 1, 2024 06:09:18.564987898 CEST	587	49749	160.13.60.151	192.168.2.4
Aug 1, 2024 06:09:18.564992905 CEST	49749	587	192.168.2.4	160.13.60.151
Aug 1, 2024 06:09:18.565016031 CEST	587	49749	160.13.60.151	192.168.2.4
Aug 1, 2024 06:09:18.565319061 CEST	587	49749	160.13.60.151	192.168.2.4
Aug 1, 2024 06:09:18.565427065 CEST	587	49749	160.13.60.151	192.168.2.4
Aug 1, 2024 06:09:18.565454960 CEST	587	49749	160.13.60.151	192.168.2.4
Aug 1, 2024 06:09:18.565519094 CEST	587	49749	160.13.60.151	192.168.2.4
Aug 1, 2024 06:09:18.565546036 CEST	587	49749	160.13.60.151	192.168.2.4
Aug 1, 2024 06:09:18.565707922 CEST	587	49749	160.13.60.151	192.168.2.4
Aug 1, 2024 06:09:18.565757036 CEST	587	49749	160.13.60.151	192.168.2.4
Aug 1, 2024 06:09:18.565783978 CEST	587	49749	160.13.60.151	192.168.2.4
Aug 1, 2024 06:09:18.565855980 CEST	587	49774	15.235.118.229	192.168.2.4
Aug 1, 2024 06:09:18.566030025 CEST	587	49741	178.170.244.56	192.168.2.4
Aug 1, 2024 06:09:18.566063881 CEST	587	49750	13.250.88.201	192.168.2.4
Aug 1, 2024 06:09:18.566239119 CEST	587	49769	84.2.43.67	192.168.2.4
Aug 1, 2024 06:09:18.566272020 CEST	587	49763	167.114.62.28	192.168.2.4
Aug 1, 2024 06:09:18.569816113 CEST	587	49749	160.13.60.151	192.168.2.4
Aug 1, 2024 06:09:18.590276957 CEST	49780	587	192.168.2.4	202.9.85.53
Aug 1, 2024 06:09:18.596666098 CEST	587	49770	62.149.157.154	192.168.2.4
Aug 1, 2024 06:09:18.605873108 CEST	49748	587	192.168.2.4	162.241.219.218
Aug 1, 2024 06:09:18.605878115 CEST	49766	587	192.168.2.4	190.105.202.10
Aug 1, 2024 06:09:18.612304926 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:18.612354994 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:18.617187023 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:18.637124062 CEST	49770	587	192.168.2.4	62.149.157.154
Aug 1, 2024 06:09:18.639467001 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:18.639604092 CEST	49784	587	192.168.2.4	62.210.246.119
Aug 1, 2024 06:09:18.639698982 CEST	49759	587	192.168.2.4	185.165.46.2
Aug 1, 2024 06:09:18.639774084 CEST	49785	587	192.168.2.4	209.71.212.26
Aug 1, 2024 06:09:18.639858961 CEST	49775	587	192.168.2.4	13.250.88.201
Aug 1, 2024 06:09:18.639945984 CEST	49779	587	192.168.2.4	94.169.2.35
Aug 1, 2024 06:09:18.644351006 CEST	587	49784	62.210.246.119	192.168.2.4
Aug 1, 2024 06:09:18.644471884 CEST	587	49759	185.165.46.2	192.168.2.4
Aug 1, 2024 06:09:18.644601107 CEST	587	49785	209.71.212.26	192.168.2.4
Aug 1, 2024 06:09:18.644629955 CEST	587	49775	13.250.88.201	192.168.2.4
Aug 1, 2024 06:09:18.644758940 CEST	587	49779	94.169.2.35	192.168.2.4
Aug 1, 2024 06:09:18.669482946 CEST	587	49763	167.114.62.28	192.168.2.4
Aug 1, 2024 06:09:18.669684887 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:18.671983004 CEST	587	49774	15.235.118.229	192.168.2.4
Aug 1, 2024 06:09:18.672022104 CEST	587	49774	15.235.118.229	192.168.2.4
Aug 1, 2024 06:09:18.672049999 CEST	587	49774	15.235.118.229	192.168.2.4
Aug 1, 2024 06:09:18.672096014 CEST	49774	587	192.168.2.4	15.235.118.229
Aug 1, 2024 06:09:18.672245026 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:18.672245026 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:18.672513008 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:18.672761917 CEST	587	49772	13.250.88.201	192.168.2.4
Aug 1, 2024 06:09:18.672813892 CEST	587	49772	13.250.88.201	192.168.2.4
Aug 1, 2024 06:09:18.672827959 CEST	587	49772	13.250.88.201	192.168.2.4
Aug 1, 2024 06:09:18.672867060 CEST	49772	587	192.168.2.4	13.250.88.201
Aug 1, 2024 06:09:18.672885895 CEST	587	49772	13.250.88.201	192.168.2.4
Aug 1, 2024 06:09:18.672900915 CEST	587	49772	13.250.88.201	192.168.2.4
Aug 1, 2024 06:09:18.672916889 CEST	587	49772	13.250.88.201	192.168.2.4
Aug 1, 2024 06:09:18.672930002 CEST	49772	587	192.168.2.4	13.250.88.201
Aug 1, 2024 06:09:18.672955036 CEST	49772	587	192.168.2.4	13.250.88.201
Aug 1, 2024 06:09:18.673058987 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:18.673260927 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:18.675152063 CEST	587	49746	103.92.235.45	192.168.2.4
Aug 1, 2024 06:09:18.676995039 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:18.677048922 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:18.677221060 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:18.677825928 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:18.677840948 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:18.678103924 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:18.682073116 CEST	49783	443	192.168.2.4	20.12.23.50
Aug 1, 2024 06:09:18.715576887 CEST	49763	587	192.168.2.4	167.114.62.28
Aug 1, 2024 06:09:18.724509954 CEST	443	49783	20.12.23.50	192.168.2.4
Aug 1, 2024 06:09:18.728265047 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:18.730876923 CEST	49746	587	192.168.2.4	103.92.235.45
Aug 1, 2024 06:09:18.743982077 CEST	587	49737	202.125.94.90	192.168.2.4
Aug 1, 2024 06:09:18.744160891 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:18.749022007 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:18.756438971 CEST	587	49769	84.2.43.67	192.168.2.4
Aug 1, 2024 06:09:18.756654978 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:18.757265091 CEST	587	49768	103.5.50.24	192.168.2.4
Aug 1, 2024 06:09:18.757297993 CEST	587	49768	103.5.50.24	192.168.2.4
Aug 1, 2024 06:09:18.757323027 CEST	587	49768	103.5.50.24	192.168.2.4
Aug 1, 2024 06:09:18.757364988 CEST	49768	587	192.168.2.4	103.5.50.24
Aug 1, 2024 06:09:18.757476091 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:18.757476091 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:18.757742882 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:18.761333942 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:18.761477947 CEST	49776	587	192.168.2.4	164.52.146.15
Aug 1, 2024 06:09:18.762233973 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:18.762732029 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:18.763520956 CEST	587	49786	160.13.60.151	192.168.2.4
Aug 1, 2024 06:09:18.763628960 CEST	49778	587	192.168.2.4	199.224.64.206
Aug 1, 2024 06:09:18.763993025 CEST	49767	587	192.168.2.4	13.250.88.201
Aug 1, 2024 06:09:18.764497995 CEST	49773	587	192.168.2.4	212.10.10.65
Aug 1, 2024 06:09:18.766275883 CEST	49794	587	192.168.2.4	13.250.88.201
Aug 1, 2024 06:09:18.766284943 CEST	587	49776	164.52.146.15	192.168.2.4
Aug 1, 2024 06:09:18.768404007 CEST	587	49778	199.224.64.206	192.168.2.4
Aug 1, 2024 06:09:18.768827915 CEST	587	49767	13.250.88.201	192.168.2.4
Aug 1, 2024 06:09:18.769279957 CEST	587	49773	212.10.10.65	192.168.2.4
Aug 1, 2024 06:09:18.770744085 CEST	587	49785	209.71.212.26	192.168.2.4
Aug 1, 2024 06:09:18.771032095 CEST	587	49794	13.250.88.201	192.168.2.4
Aug 1, 2024 06:09:18.771100044 CEST	49794	587	192.168.2.4	13.250.88.201
Aug 1, 2024 06:09:18.781002045 CEST	587	49741	178.170.244.56	192.168.2.4
Aug 1, 2024 06:09:18.789427042 CEST	49795	587	192.168.2.4	51.89.247.113
Aug 1, 2024 06:09:18.793404102 CEST	49737	587	192.168.2.4	202.125.94.90
Aug 1, 2024 06:09:18.794167042 CEST	587	49795	51.89.247.113	192.168.2.4
Aug 1, 2024 06:09:18.794244051 CEST	49795	587	192.168.2.4	51.89.247.113
Aug 1, 2024 06:09:18.804394007 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:18.804461002 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:18.809007883 CEST	49769	587	192.168.2.4	84.2.43.67
Aug 1, 2024 06:09:18.809056997 CEST	49786	587	192.168.2.4	160.13.60.151
Aug 1, 2024 06:09:18.809252977 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:18.810851097 CEST	587	49789	66.248.160.85	192.168.2.4
Aug 1, 2024 06:09:18.811065912 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:18.815871954 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:18.816521883 CEST	587	49784	62.210.246.119	192.168.2.4
Aug 1, 2024 06:09:18.816898108 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:18.821671009 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:18.824621916 CEST	49785	587	192.168.2.4	209.71.212.26
Aug 1, 2024 06:09:18.824749947 CEST	49741	587	192.168.2.4	178.170.244.56
Aug 1, 2024 06:09:18.827467918 CEST	587	49779	94.169.2.35	192.168.2.4
Aug 1, 2024 06:09:18.827490091 CEST	587	49779	94.169.2.35	192.168.2.4
Aug 1, 2024 06:09:18.827507973 CEST	587	49779	94.169.2.35	192.168.2.4
Aug 1, 2024 06:09:18.827550888 CEST	49779	587	192.168.2.4	94.169.2.35
Aug 1, 2024 06:09:18.827681065 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:18.827681065 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:18.832552910 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:18.832572937 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:18.832588911 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:18.832623005 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:18.837439060 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:18.848261118 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:18.848577976 CEST	49766	587	192.168.2.4	190.105.202.10
Aug 1, 2024 06:09:18.848619938 CEST	49780	587	192.168.2.4	202.9.85.53
Aug 1, 2024 06:09:18.848654032 CEST	49748	587	192.168.2.4	162.241.219.218
Aug 1, 2024 06:09:18.848731041 CEST	49770	587	192.168.2.4	62.149.157.154
Aug 1, 2024 06:09:18.853313923 CEST	587	49766	190.105.202.10	192.168.2.4
Aug 1, 2024 06:09:18.853456020 CEST	587	49748	162.241.219.218	192.168.2.4
Aug 1, 2024 06:09:18.853471041 CEST	587	49780	202.9.85.53	192.168.2.4
Aug 1, 2024 06:09:18.853487015 CEST	587	49770	62.149.157.154	192.168.2.4
Aug 1, 2024 06:09:18.853789091 CEST	587	49759	185.165.46.2	192.168.2.4
Aug 1, 2024 06:09:18.854022980 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:18.855880022 CEST	49789	587	192.168.2.4	66.248.160.85
Aug 1, 2024 06:09:18.871498108 CEST	49784	587	192.168.2.4	62.210.246.119
Aug 1, 2024 06:09:18.871519089 CEST	49779	587	192.168.2.4	94.169.2.35
Aug 1, 2024 06:09:18.872932911 CEST	587	49776	164.52.146.15	192.168.2.4
Aug 1, 2024 06:09:18.874039888 CEST	443	49783	20.12.23.50	192.168.2.4
Aug 1, 2024 06:09:18.874069929 CEST	443	49783	20.12.23.50	192.168.2.4
Aug 1, 2024 06:09:18.874078035 CEST	443	49783	20.12.23.50	192.168.2.4
Aug 1, 2024 06:09:18.874089003 CEST	443	49783	20.12.23.50	192.168.2.4
Aug 1, 2024 06:09:18.874116898 CEST	443	49783	20.12.23.50	192.168.2.4
Aug 1, 2024 06:09:18.874182940 CEST	49783	443	192.168.2.4	20.12.23.50
Aug 1, 2024 06:09:18.874183893 CEST	49783	443	192.168.2.4	20.12.23.50
Aug 1, 2024 06:09:18.874209881 CEST	443	49783	20.12.23.50	192.168.2.4
Aug 1, 2024 06:09:18.874247074 CEST	443	49783	20.12.23.50	192.168.2.4
Aug 1, 2024 06:09:18.874263048 CEST	49783	443	192.168.2.4	20.12.23.50
Aug 1, 2024 06:09:18.874270916 CEST	443	49783	20.12.23.50	192.168.2.4
Aug 1, 2024 06:09:18.874315977 CEST	49783	443	192.168.2.4	20.12.23.50
Aug 1, 2024 06:09:18.874361992 CEST	49783	443	192.168.2.4	20.12.23.50
Aug 1, 2024 06:09:18.874660015 CEST	443	49783	20.12.23.50	192.168.2.4
Aug 1, 2024 06:09:18.874711990 CEST	443	49783	20.12.23.50	192.168.2.4
Aug 1, 2024 06:09:18.874885082 CEST	49783	443	192.168.2.4	20.12.23.50
Aug 1, 2024 06:09:18.881006956 CEST	587	49778	199.224.64.206	192.168.2.4
Aug 1, 2024 06:09:18.902760983 CEST	49759	587	192.168.2.4	185.165.46.2
Aug 1, 2024 06:09:18.904284954 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:18.904356003 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:18.909148932 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:18.918375969 CEST	49776	587	192.168.2.4	164.52.146.15
Aug 1, 2024 06:09:18.924583912 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:18.924606085 CEST	587	49750	13.250.88.201	192.168.2.4
Aug 1, 2024 06:09:18.924734116 CEST	49774	587	192.168.2.4	15.235.118.229
Aug 1, 2024 06:09:18.924833059 CEST	49772	587	192.168.2.4	13.250.88.201
Aug 1, 2024 06:09:18.924920082 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:18.924926043 CEST	49746	587	192.168.2.4	103.92.235.45
Aug 1, 2024 06:09:18.929524899 CEST	587	49774	15.235.118.229	192.168.2.4
Aug 1, 2024 06:09:18.929611921 CEST	587	49772	13.250.88.201	192.168.2.4
Aug 1, 2024 06:09:18.929649115 CEST	587	49746	103.92.235.45	192.168.2.4
Aug 1, 2024 06:09:18.933986902 CEST	49778	587	192.168.2.4	199.224.64.206
Aug 1, 2024 06:09:18.950664997 CEST	587	49773	212.10.10.65	192.168.2.4
Aug 1, 2024 06:09:18.965236902 CEST	49750	587	192.168.2.4	13.250.88.201
Aug 1, 2024 06:09:18.972424984 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:18.972476959 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:18.977324963 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:18.993881941 CEST	587	49775	13.250.88.201	192.168.2.4
Aug 1, 2024 06:09:18.993916035 CEST	587	49775	13.250.88.201	192.168.2.4
Aug 1, 2024 06:09:18.993932009 CEST	587	49775	13.250.88.201	192.168.2.4
Aug 1, 2024 06:09:18.993947983 CEST	587	49775	13.250.88.201	192.168.2.4
Aug 1, 2024 06:09:18.993963957 CEST	49775	587	192.168.2.4	13.250.88.201
Aug 1, 2024 06:09:18.993987083 CEST	49775	587	192.168.2.4	13.250.88.201
Aug 1, 2024 06:09:18.994169950 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:18.996495962 CEST	49773	587	192.168.2.4	212.10.10.65
Aug 1, 2024 06:09:18.999032974 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:18.999049902 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:18.999062061 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:18.999078035 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:19.016942024 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:19.017131090 CEST	49769	587	192.168.2.4	84.2.43.67
Aug 1, 2024 06:09:19.017679930 CEST	49785	587	192.168.2.4	209.71.212.26
Aug 1, 2024 06:09:19.017762899 CEST	49789	587	192.168.2.4	66.248.160.85
Aug 1, 2024 06:09:19.017841101 CEST	49741	587	192.168.2.4	178.170.244.56
Aug 1, 2024 06:09:19.017913103 CEST	49786	587	192.168.2.4	160.13.60.151
Aug 1, 2024 06:09:19.017988920 CEST	49784	587	192.168.2.4	62.210.246.119
Aug 1, 2024 06:09:19.018083096 CEST	49768	587	192.168.2.4	103.5.50.24
Aug 1, 2024 06:09:19.019269943 CEST	49797	587	192.168.2.4	13.250.88.201
Aug 1, 2024 06:09:19.021954060 CEST	587	49769	84.2.43.67	192.168.2.4
Aug 1, 2024 06:09:19.022499084 CEST	587	49785	209.71.212.26	192.168.2.4
Aug 1, 2024 06:09:19.022531986 CEST	587	49789	66.248.160.85	192.168.2.4
Aug 1, 2024 06:09:19.022584915 CEST	587	49741	178.170.244.56	192.168.2.4
Aug 1, 2024 06:09:19.022716999 CEST	587	49786	160.13.60.151	192.168.2.4
Aug 1, 2024 06:09:19.022767067 CEST	587	49784	62.210.246.119	192.168.2.4
Aug 1, 2024 06:09:19.022835016 CEST	587	49768	103.5.50.24	192.168.2.4
Aug 1, 2024 06:09:19.024106026 CEST	587	49797	13.250.88.201	192.168.2.4
Aug 1, 2024 06:09:19.024167061 CEST	49797	587	192.168.2.4	13.250.88.201
Aug 1, 2024 06:09:19.024336100 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:19.024878979 CEST	587	49782	146.59.44.242	192.168.2.4
Aug 1, 2024 06:09:19.025059938 CEST	49782	587	192.168.2.4	146.59.44.242
Aug 1, 2024 06:09:19.025059938 CEST	49782	587	192.168.2.4	146.59.44.242
Aug 1, 2024 06:09:19.028081894 CEST	49737	587	192.168.2.4	202.125.94.90
Aug 1, 2024 06:09:19.028191090 CEST	587	49774	15.235.118.229	192.168.2.4
Aug 1, 2024 06:09:19.029989004 CEST	587	49782	146.59.44.242	192.168.2.4
Aug 1, 2024 06:09:19.033287048 CEST	587	49790	192.185.177.117	192.168.2.4
Aug 1, 2024 06:09:19.033319950 CEST	587	49737	202.125.94.90	192.168.2.4
Aug 1, 2024 06:09:19.033417940 CEST	49737	587	192.168.2.4	202.125.94.90
Aug 1, 2024 06:09:19.054243088 CEST	587	49770	62.149.157.154	192.168.2.4
Aug 1, 2024 06:09:19.072427988 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:19.072508097 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:19.074620962 CEST	49774	587	192.168.2.4	15.235.118.229
Aug 1, 2024 06:09:19.074703932 CEST	49790	587	192.168.2.4	192.185.177.117
Aug 1, 2024 06:09:19.077287912 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:19.078742027 CEST	587	49766	190.105.202.10	192.168.2.4
Aug 1, 2024 06:09:19.080646038 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:19.085443020 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:19.105876923 CEST	49770	587	192.168.2.4	62.149.157.154
Aug 1, 2024 06:09:19.121505022 CEST	49766	587	192.168.2.4	190.105.202.10
Aug 1, 2024 06:09:19.134457111 CEST	587	49767	13.250.88.201	192.168.2.4
Aug 1, 2024 06:09:19.135941029 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:19.136218071 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:19.136394024 CEST	49779	587	192.168.2.4	94.169.2.35
Aug 1, 2024 06:09:19.137031078 CEST	49759	587	192.168.2.4	185.165.46.2
Aug 1, 2024 06:09:19.137324095 CEST	49778	587	192.168.2.4	199.224.64.206
Aug 1, 2024 06:09:19.137432098 CEST	49776	587	192.168.2.4	164.52.146.15
Aug 1, 2024 06:09:19.139013052 CEST	587	49785	209.71.212.26	192.168.2.4
Aug 1, 2024 06:09:19.141021013 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:19.141108036 CEST	587	49779	94.169.2.35	192.168.2.4
Aug 1, 2024 06:09:19.141844034 CEST	587	49759	185.165.46.2	192.168.2.4
Aug 1, 2024 06:09:19.141928911 CEST	49779	587	192.168.2.4	94.169.2.35
Aug 1, 2024 06:09:19.142043114 CEST	587	49750	13.250.88.201	192.168.2.4
Aug 1, 2024 06:09:19.142057896 CEST	587	49778	199.224.64.206	192.168.2.4
Aug 1, 2024 06:09:19.142098904 CEST	49750	587	192.168.2.4	13.250.88.201
Aug 1, 2024 06:09:19.142118931 CEST	587	49776	164.52.146.15	192.168.2.4
Aug 1, 2024 06:09:19.146131992 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:19.146439075 CEST	49750	587	192.168.2.4	13.250.88.201
Aug 1, 2024 06:09:19.146697998 CEST	587	49779	94.169.2.35	192.168.2.4
Aug 1, 2024 06:09:19.151047945 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:19.151118994 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:19.151169062 CEST	587	49750	13.250.88.201	192.168.2.4
Aug 1, 2024 06:09:19.156054974 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:19.156793118 CEST	49723	80	192.168.2.4	93.184.221.240
Aug 1, 2024 06:09:19.162384987 CEST	80	49723	93.184.221.240	192.168.2.4
Aug 1, 2024 06:09:19.162950039 CEST	49723	80	192.168.2.4	93.184.221.240
Aug 1, 2024 06:09:19.184039116 CEST	49767	587	192.168.2.4	13.250.88.201
Aug 1, 2024 06:09:19.184076071 CEST	49785	587	192.168.2.4	209.71.212.26
Aug 1, 2024 06:09:19.201857090 CEST	587	49780	202.9.85.53	192.168.2.4
Aug 1, 2024 06:09:19.202260971 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:19.207066059 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:19.208378077 CEST	49798	587	192.168.2.4	195.130.132.11
Aug 1, 2024 06:09:19.210771084 CEST	587	49789	66.248.160.85	192.168.2.4
Aug 1, 2024 06:09:19.210879087 CEST	587	49755	50.116.87.178	192.168.2.4
Aug 1, 2024 06:09:19.210972071 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:19.213315964 CEST	587	49798	195.130.132.11	192.168.2.4
Aug 1, 2024 06:09:19.213423967 CEST	49798	587	192.168.2.4	195.130.132.11
Aug 1, 2024 06:09:19.214643955 CEST	587	49784	62.210.246.119	192.168.2.4
Aug 1, 2024 06:09:19.215804100 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:19.215853930 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:19.220714092 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:19.228204012 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:19.228400946 CEST	49773	587	192.168.2.4	212.10.10.65
Aug 1, 2024 06:09:19.233222961 CEST	587	49773	212.10.10.65	192.168.2.4
Aug 1, 2024 06:09:19.246515989 CEST	49780	587	192.168.2.4	202.9.85.53
Aug 1, 2024 06:09:19.250395060 CEST	587	49776	164.52.146.15	192.168.2.4
Aug 1, 2024 06:09:19.250602007 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:19.256129026 CEST	587	49778	199.224.64.206	192.168.2.4
Aug 1, 2024 06:09:19.260072947 CEST	587	49772	13.250.88.201	192.168.2.4
Aug 1, 2024 06:09:19.262130022 CEST	49755	587	192.168.2.4	50.116.87.178
Aug 1, 2024 06:09:19.262130022 CEST	49784	587	192.168.2.4	62.210.246.119
Aug 1, 2024 06:09:19.262135983 CEST	49789	587	192.168.2.4	66.248.160.85
Aug 1, 2024 06:09:19.293376923 CEST	49776	587	192.168.2.4	164.52.146.15
Aug 1, 2024 06:09:19.296457052 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:19.296519995 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:19.296681881 CEST	49778	587	192.168.2.4	199.224.64.206
Aug 1, 2024 06:09:19.301050901 CEST	587	49792	84.2.43.67	192.168.2.4
Aug 1, 2024 06:09:19.301331997 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:19.301393032 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:19.303065062 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:19.303113937 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:19.303132057 CEST	587	49754	84.2.43.67	192.168.2.4
Aug 1, 2024 06:09:19.303217888 CEST	49775	587	192.168.2.4	13.250.88.201
Aug 1, 2024 06:09:19.303319931 CEST	49770	587	192.168.2.4	62.149.157.154
Aug 1, 2024 06:09:19.303417921 CEST	49790	587	192.168.2.4	192.185.177.117
Aug 1, 2024 06:09:19.303472996 CEST	49774	587	192.168.2.4	15.235.118.229
Aug 1, 2024 06:09:19.308017015 CEST	587	49775	13.250.88.201	192.168.2.4
Aug 1, 2024 06:09:19.308073044 CEST	587	49770	62.149.157.154	192.168.2.4
Aug 1, 2024 06:09:19.308231115 CEST	587	49790	192.185.177.117	192.168.2.4
Aug 1, 2024 06:09:19.308260918 CEST	587	49774	15.235.118.229	192.168.2.4
Aug 1, 2024 06:09:19.309003115 CEST	49772	587	192.168.2.4	13.250.88.201
Aug 1, 2024 06:09:19.319910049 CEST	587	49779	94.169.2.35	192.168.2.4
Aug 1, 2024 06:09:19.326567888 CEST	587	49786	160.13.60.151	192.168.2.4
Aug 1, 2024 06:09:19.348347902 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:19.348406076 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:19.353283882 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:19.355896950 CEST	49792	587	192.168.2.4	84.2.43.67
Aug 1, 2024 06:09:19.355906963 CEST	49754	587	192.168.2.4	84.2.43.67
Aug 1, 2024 06:09:19.356723070 CEST	587	49759	185.165.46.2	192.168.2.4
Aug 1, 2024 06:09:19.357461929 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:19.362276077 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:19.366200924 CEST	587	49768	103.5.50.24	192.168.2.4
Aug 1, 2024 06:09:19.366502047 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:19.371459961 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:19.371517897 CEST	49779	587	192.168.2.4	94.169.2.35
Aug 1, 2024 06:09:19.372108936 CEST	49786	587	192.168.2.4	160.13.60.151
Aug 1, 2024 06:09:19.388407946 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:19.388844967 CEST	49766	587	192.168.2.4	190.105.202.10
Aug 1, 2024 06:09:19.391546011 CEST	49783	443	192.168.2.4	20.12.23.50
Aug 1, 2024 06:09:19.391576052 CEST	443	49783	20.12.23.50	192.168.2.4
Aug 1, 2024 06:09:19.391617060 CEST	49783	443	192.168.2.4	20.12.23.50
Aug 1, 2024 06:09:19.391625881 CEST	443	49783	20.12.23.50	192.168.2.4
Aug 1, 2024 06:09:19.393682003 CEST	587	49766	190.105.202.10	192.168.2.4
Aug 1, 2024 06:09:19.403085947 CEST	49759	587	192.168.2.4	185.165.46.2
Aug 1, 2024 06:09:19.406996012 CEST	587	49774	15.235.118.229	192.168.2.4
Aug 1, 2024 06:09:19.407351017 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:19.407960892 CEST	587	49779	94.169.2.35	192.168.2.4
Aug 1, 2024 06:09:19.414561033 CEST	587	49773	212.10.10.65	192.168.2.4
Aug 1, 2024 06:09:19.417299986 CEST	587	49790	192.185.177.117	192.168.2.4
Aug 1, 2024 06:09:19.418370008 CEST	49768	587	192.168.2.4	103.5.50.24
Aug 1, 2024 06:09:19.449636936 CEST	49774	587	192.168.2.4	15.235.118.229
Aug 1, 2024 06:09:19.449659109 CEST	49779	587	192.168.2.4	94.169.2.35
Aug 1, 2024 06:09:19.456286907 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:19.458147049 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:19.458394051 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:19.463021994 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:19.465256929 CEST	49773	587	192.168.2.4	212.10.10.65
Aug 1, 2024 06:09:19.465311050 CEST	49790	587	192.168.2.4	192.185.177.117
Aug 1, 2024 06:09:19.470129967 CEST	587	49791	84.2.43.67	192.168.2.4
Aug 1, 2024 06:09:19.480531931 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:19.482546091 CEST	49767	587	192.168.2.4	13.250.88.201
Aug 1, 2024 06:09:19.482755899 CEST	49785	587	192.168.2.4	209.71.212.26
Aug 1, 2024 06:09:19.485685110 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:19.487365007 CEST	587	49767	13.250.88.201	192.168.2.4
Aug 1, 2024 06:09:19.487535000 CEST	587	49785	209.71.212.26	192.168.2.4
Aug 1, 2024 06:09:19.496320009 CEST	587	49779	94.169.2.35	192.168.2.4
Aug 1, 2024 06:09:19.497416019 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:19.502193928 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:19.508428097 CEST	587	49770	62.149.157.154	192.168.2.4
Aug 1, 2024 06:09:19.509156942 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:19.512125969 CEST	49791	587	192.168.2.4	84.2.43.67
Aug 1, 2024 06:09:19.514086008 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:19.526525974 CEST	49799	587	192.168.2.4	198.54.120.144
Aug 1, 2024 06:09:19.531440020 CEST	587	49799	198.54.120.144	192.168.2.4
Aug 1, 2024 06:09:19.531511068 CEST	49799	587	192.168.2.4	198.54.120.144
Aug 1, 2024 06:09:19.531831026 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:19.536907911 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:19.539235115 CEST	587	49795	51.89.247.113	192.168.2.4
Aug 1, 2024 06:09:19.539541006 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:19.543389082 CEST	49779	587	192.168.2.4	94.169.2.35
Aug 1, 2024 06:09:19.544456005 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:19.550184965 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:19.550695896 CEST	49776	587	192.168.2.4	164.52.146.15
Aug 1, 2024 06:09:19.550872087 CEST	49755	587	192.168.2.4	50.116.87.178
Aug 1, 2024 06:09:19.550964117 CEST	49780	587	192.168.2.4	202.9.85.53
Aug 1, 2024 06:09:19.551043987 CEST	49789	587	192.168.2.4	66.248.160.85
Aug 1, 2024 06:09:19.551294088 CEST	49784	587	192.168.2.4	62.210.246.119
Aug 1, 2024 06:09:19.555537939 CEST	587	49776	164.52.146.15	192.168.2.4
Aug 1, 2024 06:09:19.555646896 CEST	587	49755	50.116.87.178	192.168.2.4
Aug 1, 2024 06:09:19.555840015 CEST	587	49780	202.9.85.53	192.168.2.4
Aug 1, 2024 06:09:19.555870056 CEST	587	49789	66.248.160.85	192.168.2.4
Aug 1, 2024 06:09:19.556056976 CEST	587	49784	62.210.246.119	192.168.2.4
Aug 1, 2024 06:09:19.559164047 CEST	49770	587	192.168.2.4	62.149.157.154
Aug 1, 2024 06:09:19.590255976 CEST	49795	587	192.168.2.4	51.89.247.113
Aug 1, 2024 06:09:19.590270042 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:19.608818054 CEST	587	49785	209.71.212.26	192.168.2.4
Aug 1, 2024 06:09:19.608853102 CEST	587	49785	209.71.212.26	192.168.2.4
Aug 1, 2024 06:09:19.608890057 CEST	587	49785	209.71.212.26	192.168.2.4
Aug 1, 2024 06:09:19.608917952 CEST	587	49785	209.71.212.26	192.168.2.4
Aug 1, 2024 06:09:19.608967066 CEST	49785	587	192.168.2.4	209.71.212.26
Aug 1, 2024 06:09:19.609114885 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:19.609114885 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:19.609179020 CEST	49785	587	192.168.2.4	209.71.212.26
Aug 1, 2024 06:09:19.614034891 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:19.614089966 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:19.614120007 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:19.623967886 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:19.624089956 CEST	49772	587	192.168.2.4	13.250.88.201
Aug 1, 2024 06:09:19.624191999 CEST	49754	587	192.168.2.4	84.2.43.67
Aug 1, 2024 06:09:19.624249935 CEST	49792	587	192.168.2.4	84.2.43.67
Aug 1, 2024 06:09:19.625614882 CEST	49786	587	192.168.2.4	160.13.60.151
Aug 1, 2024 06:09:19.625706911 CEST	49759	587	192.168.2.4	185.165.46.2
Aug 1, 2024 06:09:19.628880024 CEST	587	49772	13.250.88.201	192.168.2.4
Aug 1, 2024 06:09:19.629014969 CEST	587	49754	84.2.43.67	192.168.2.4
Aug 1, 2024 06:09:19.629048109 CEST	587	49792	84.2.43.67	192.168.2.4
Aug 1, 2024 06:09:19.630441904 CEST	587	49786	160.13.60.151	192.168.2.4
Aug 1, 2024 06:09:19.630491972 CEST	587	49759	185.165.46.2	192.168.2.4
Aug 1, 2024 06:09:19.647206068 CEST	587	49775	13.250.88.201	192.168.2.4
Aug 1, 2024 06:09:19.647458076 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:19.663485050 CEST	587	49755	50.116.87.178	192.168.2.4
Aug 1, 2024 06:09:19.668497086 CEST	587	49753	41.204.183.54	192.168.2.4
Aug 1, 2024 06:09:19.675128937 CEST	587	49794	13.250.88.201	192.168.2.4
Aug 1, 2024 06:09:19.696427107 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:19.696479082 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:19.699613094 CEST	49775	587	192.168.2.4	13.250.88.201
Aug 1, 2024 06:09:19.700927019 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:19.701251984 CEST	49768	587	192.168.2.4	103.5.50.24
Aug 1, 2024 06:09:19.701317072 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:19.701361895 CEST	49774	587	192.168.2.4	15.235.118.229
Aug 1, 2024 06:09:19.706165075 CEST	587	49768	103.5.50.24	192.168.2.4
Aug 1, 2024 06:09:19.706192970 CEST	587	49774	15.235.118.229	192.168.2.4
Aug 1, 2024 06:09:19.715243101 CEST	49794	587	192.168.2.4	13.250.88.201
Aug 1, 2024 06:09:19.715243101 CEST	49755	587	192.168.2.4	50.116.87.178
Aug 1, 2024 06:09:19.715327024 CEST	49753	587	192.168.2.4	41.204.183.54
Aug 1, 2024 06:09:19.728478909 CEST	587	49784	62.210.246.119	192.168.2.4
Aug 1, 2024 06:09:19.728718042 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:19.733561039 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:19.743772984 CEST	587	49789	66.248.160.85	192.168.2.4
Aug 1, 2024 06:09:19.743959904 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:19.748785019 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:19.749485016 CEST	587	49784	62.210.246.119	192.168.2.4
Aug 1, 2024 06:09:19.749519110 CEST	587	49784	62.210.246.119	192.168.2.4
Aug 1, 2024 06:09:19.749571085 CEST	587	49784	62.210.246.119	192.168.2.4
Aug 1, 2024 06:09:19.749579906 CEST	49784	587	192.168.2.4	62.210.246.119
Aug 1, 2024 06:09:19.749615908 CEST	587	49798	195.130.132.11	192.168.2.4
Aug 1, 2024 06:09:19.749622107 CEST	49784	587	192.168.2.4	62.210.246.119
Aug 1, 2024 06:09:19.749644995 CEST	587	49798	195.130.132.11	192.168.2.4
Aug 1, 2024 06:09:19.749742985 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:19.749742985 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:19.749761105 CEST	49798	587	192.168.2.4	195.130.132.11
Aug 1, 2024 06:09:19.750308990 CEST	49798	587	192.168.2.4	195.130.132.11
Aug 1, 2024 06:09:19.752602100 CEST	587	49742	103.6.196.75	192.168.2.4
Aug 1, 2024 06:09:19.754553080 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:19.754592896 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:19.754641056 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:19.754657984 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:19.755063057 CEST	587	49798	195.130.132.11	192.168.2.4
Aug 1, 2024 06:09:19.759537935 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:19.788314104 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:19.788472891 CEST	49773	587	192.168.2.4	212.10.10.65
Aug 1, 2024 06:09:19.788666010 CEST	49790	587	192.168.2.4	192.185.177.117
Aug 1, 2024 06:09:19.788666010 CEST	49791	587	192.168.2.4	84.2.43.67
Aug 1, 2024 06:09:19.788743019 CEST	49770	587	192.168.2.4	62.149.157.154
Aug 1, 2024 06:09:19.788815975 CEST	49779	587	192.168.2.4	94.169.2.35
Aug 1, 2024 06:09:19.793358088 CEST	587	49773	212.10.10.65	192.168.2.4
Aug 1, 2024 06:09:19.793369055 CEST	49789	587	192.168.2.4	66.248.160.85
Aug 1, 2024 06:09:19.793394089 CEST	49742	587	192.168.2.4	103.6.196.75
Aug 1, 2024 06:09:19.793529034 CEST	587	49790	192.185.177.117	192.168.2.4
Aug 1, 2024 06:09:19.793559074 CEST	587	49791	84.2.43.67	192.168.2.4
Aug 1, 2024 06:09:19.793595076 CEST	587	49770	62.149.157.154	192.168.2.4
Aug 1, 2024 06:09:19.793644905 CEST	587	49779	94.169.2.35	192.168.2.4
Aug 1, 2024 06:09:19.817214012 CEST	587	49784	62.210.246.119	192.168.2.4
Aug 1, 2024 06:09:19.817584038 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:19.819824934 CEST	49801	587	192.168.2.4	165.140.69.186
Aug 1, 2024 06:09:19.824826002 CEST	587	49801	165.140.69.186	192.168.2.4
Aug 1, 2024 06:09:19.825256109 CEST	587	49754	84.2.43.67	192.168.2.4
Aug 1, 2024 06:09:19.825351954 CEST	49801	587	192.168.2.4	165.140.69.186
Aug 1, 2024 06:09:19.825737953 CEST	587	49754	84.2.43.67	192.168.2.4
Aug 1, 2024 06:09:19.825877905 CEST	587	49754	84.2.43.67	192.168.2.4
Aug 1, 2024 06:09:19.825946093 CEST	49754	587	192.168.2.4	84.2.43.67
Aug 1, 2024 06:09:19.826232910 CEST	49754	587	192.168.2.4	84.2.43.67
Aug 1, 2024 06:09:19.828634024 CEST	587	49767	13.250.88.201	192.168.2.4
Aug 1, 2024 06:09:19.831505060 CEST	587	49754	84.2.43.67	192.168.2.4
Aug 1, 2024 06:09:19.840163946 CEST	587	49759	185.165.46.2	192.168.2.4
Aug 1, 2024 06:09:19.864355087 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:19.866445065 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:19.871340990 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:19.871716976 CEST	49784	587	192.168.2.4	62.210.246.119
Aug 1, 2024 06:09:19.872242928 CEST	49767	587	192.168.2.4	13.250.88.201
Aug 1, 2024 06:09:19.873147964 CEST	587	49797	13.250.88.201	192.168.2.4
Aug 1, 2024 06:09:19.873461962 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:19.878284931 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:19.887135029 CEST	49759	587	192.168.2.4	185.165.46.2
Aug 1, 2024 06:09:19.903848886 CEST	587	49780	202.9.85.53	192.168.2.4
Aug 1, 2024 06:09:19.904016972 CEST	587	49790	192.185.177.117	192.168.2.4
Aug 1, 2024 06:09:19.904052973 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:19.909003973 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:19.909696102 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:19.909778118 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:19.914406061 CEST	49795	587	192.168.2.4	51.89.247.113
Aug 1, 2024 06:09:19.918401003 CEST	49797	587	192.168.2.4	13.250.88.201
Aug 1, 2024 06:09:19.919217110 CEST	587	49795	51.89.247.113	192.168.2.4
Aug 1, 2024 06:09:19.932171106 CEST	587	49786	160.13.60.151	192.168.2.4
Aug 1, 2024 06:09:19.946331978 CEST	587	49746	103.92.235.45	192.168.2.4
Aug 1, 2024 06:09:19.949632883 CEST	49780	587	192.168.2.4	202.9.85.53
Aug 1, 2024 06:09:19.950511932 CEST	49790	587	192.168.2.4	192.185.177.117
Aug 1, 2024 06:09:19.954940081 CEST	587	49787	191.252.112.195	192.168.2.4
Aug 1, 2024 06:09:19.956298113 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:19.956465006 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:19.961298943 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:19.973505020 CEST	587	49779	94.169.2.35	192.168.2.4
Aug 1, 2024 06:09:19.973809004 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:19.978214025 CEST	587	49772	13.250.88.201	192.168.2.4
Aug 1, 2024 06:09:19.978657961 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:19.978712082 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:19.979341030 CEST	587	49773	212.10.10.65	192.168.2.4
Aug 1, 2024 06:09:19.979598999 CEST	587	49773	212.10.10.65	192.168.2.4
Aug 1, 2024 06:09:19.979659081 CEST	49773	587	192.168.2.4	212.10.10.65
Aug 1, 2024 06:09:19.979717016 CEST	49773	587	192.168.2.4	212.10.10.65
Aug 1, 2024 06:09:19.980942011 CEST	49786	587	192.168.2.4	160.13.60.151
Aug 1, 2024 06:09:19.982275009 CEST	587	49791	84.2.43.67	192.168.2.4
Aug 1, 2024 06:09:19.983557940 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:19.983751059 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:19.984543085 CEST	587	49773	212.10.10.65	192.168.2.4
Aug 1, 2024 06:09:19.988588095 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:19.993112087 CEST	587	49770	62.149.157.154	192.168.2.4
Aug 1, 2024 06:09:19.993299961 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:19.995974064 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:19.996218920 CEST	49785	587	192.168.2.4	209.71.212.26
Aug 1, 2024 06:09:19.996218920 CEST	49775	587	192.168.2.4	13.250.88.201
Aug 1, 2024 06:09:19.996313095 CEST	49753	587	192.168.2.4	41.204.183.54
Aug 1, 2024 06:09:19.996375084 CEST	49755	587	192.168.2.4	50.116.87.178
Aug 1, 2024 06:09:19.996458054 CEST	49794	587	192.168.2.4	13.250.88.201
Aug 1, 2024 06:09:19.996503115 CEST	49746	587	192.168.2.4	103.92.235.45
Aug 1, 2024 06:09:19.996519089 CEST	49789	587	192.168.2.4	66.248.160.85
Aug 1, 2024 06:09:19.996598959 CEST	49742	587	192.168.2.4	103.6.196.75
Aug 1, 2024 06:09:19.996622086 CEST	49787	587	192.168.2.4	191.252.112.195
Aug 1, 2024 06:09:20.001053095 CEST	587	49775	13.250.88.201	192.168.2.4
Aug 1, 2024 06:09:20.001125097 CEST	587	49785	209.71.212.26	192.168.2.4
Aug 1, 2024 06:09:20.001154900 CEST	587	49753	41.204.183.54	192.168.2.4
Aug 1, 2024 06:09:20.001183033 CEST	587	49755	50.116.87.178	192.168.2.4
Aug 1, 2024 06:09:20.001276016 CEST	587	49794	13.250.88.201	192.168.2.4
Aug 1, 2024 06:09:20.001405001 CEST	587	49789	66.248.160.85	192.168.2.4
Aug 1, 2024 06:09:20.001544952 CEST	587	49742	103.6.196.75	192.168.2.4
Aug 1, 2024 06:09:20.027868032 CEST	49772	587	192.168.2.4	13.250.88.201
Aug 1, 2024 06:09:20.027883053 CEST	49779	587	192.168.2.4	94.169.2.35
Aug 1, 2024 06:09:20.027904034 CEST	49791	587	192.168.2.4	84.2.43.67
Aug 1, 2024 06:09:20.043494940 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:20.043515921 CEST	49770	587	192.168.2.4	62.149.157.154
Aug 1, 2024 06:09:20.044308901 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:20.048099041 CEST	587	49768	103.5.50.24	192.168.2.4
Aug 1, 2024 06:09:20.048285961 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:20.053090096 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:20.065658092 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:20.065835953 CEST	49784	587	192.168.2.4	62.210.246.119
Aug 1, 2024 06:09:20.070610046 CEST	587	49784	62.210.246.119	192.168.2.4
Aug 1, 2024 06:09:20.070748091 CEST	49784	587	192.168.2.4	62.210.246.119
Aug 1, 2024 06:09:20.077889919 CEST	587	49784	62.210.246.119	192.168.2.4
Aug 1, 2024 06:09:20.090503931 CEST	49768	587	192.168.2.4	103.5.50.24
Aug 1, 2024 06:09:20.105977058 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:20.120127916 CEST	587	49785	209.71.212.26	192.168.2.4
Aug 1, 2024 06:09:20.120332956 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:20.140810966 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:20.142265081 CEST	49767	587	192.168.2.4	13.250.88.201
Aug 1, 2024 06:09:20.142328978 CEST	49797	587	192.168.2.4	13.250.88.201
Aug 1, 2024 06:09:20.142477989 CEST	49790	587	192.168.2.4	192.185.177.117
Aug 1, 2024 06:09:20.142544031 CEST	49780	587	192.168.2.4	202.9.85.53
Aug 1, 2024 06:09:20.147147894 CEST	587	49767	13.250.88.201	192.168.2.4
Aug 1, 2024 06:09:20.147201061 CEST	587	49797	13.250.88.201	192.168.2.4
Aug 1, 2024 06:09:20.147452116 CEST	587	49790	192.185.177.117	192.168.2.4
Aug 1, 2024 06:09:20.147480965 CEST	587	49780	202.9.85.53	192.168.2.4
Aug 1, 2024 06:09:20.151401043 CEST	587	49749	160.13.60.151	192.168.2.4
Aug 1, 2024 06:09:20.151624918 CEST	587	49749	160.13.60.151	192.168.2.4
Aug 1, 2024 06:09:20.151693106 CEST	49749	587	192.168.2.4	160.13.60.151
Aug 1, 2024 06:09:20.151846886 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:20.151985884 CEST	49749	587	192.168.2.4	160.13.60.151
Aug 1, 2024 06:09:20.153055906 CEST	49759	587	192.168.2.4	185.165.46.2
Aug 1, 2024 06:09:20.156760931 CEST	587	49749	160.13.60.151	192.168.2.4
Aug 1, 2024 06:09:20.158236027 CEST	587	49759	185.165.46.2	192.168.2.4
Aug 1, 2024 06:09:20.159992933 CEST	587	49795	51.89.247.113	192.168.2.4
Aug 1, 2024 06:09:20.160072088 CEST	49759	587	192.168.2.4	185.165.46.2
Aug 1, 2024 06:09:20.168385983 CEST	49785	587	192.168.2.4	209.71.212.26
Aug 1, 2024 06:09:20.173259974 CEST	49802	587	192.168.2.4	108.167.180.142
Aug 1, 2024 06:09:20.178112984 CEST	587	49802	108.167.180.142	192.168.2.4
Aug 1, 2024 06:09:20.178282976 CEST	49802	587	192.168.2.4	108.167.180.142
Aug 1, 2024 06:09:20.200314045 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:20.200609922 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:20.205400944 CEST	587	49785	209.71.212.26	192.168.2.4
Aug 1, 2024 06:09:20.205452919 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:20.205728054 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:20.210553885 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:20.215266943 CEST	49795	587	192.168.2.4	51.89.247.113
Aug 1, 2024 06:09:20.246553898 CEST	49785	587	192.168.2.4	209.71.212.26
Aug 1, 2024 06:09:20.262480974 CEST	587	49792	84.2.43.67	192.168.2.4
Aug 1, 2024 06:09:20.262763023 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:20.266043901 CEST	587	49790	192.185.177.117	192.168.2.4
Aug 1, 2024 06:09:20.266078949 CEST	587	49790	192.185.177.117	192.168.2.4
Aug 1, 2024 06:09:20.266114950 CEST	587	49790	192.185.177.117	192.168.2.4
Aug 1, 2024 06:09:20.266139030 CEST	49790	587	192.168.2.4	192.185.177.117
Aug 1, 2024 06:09:20.266344070 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:20.266344070 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:20.267558098 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:20.267621040 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:20.271195889 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:20.271224976 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:20.271311998 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:20.272438049 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:20.276448965 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:20.276611090 CEST	49786	587	192.168.2.4	160.13.60.151
Aug 1, 2024 06:09:20.276694059 CEST	49787	587	192.168.2.4	191.252.112.195
Aug 1, 2024 06:09:20.276777029 CEST	49779	587	192.168.2.4	94.169.2.35
Aug 1, 2024 06:09:20.276902914 CEST	49772	587	192.168.2.4	13.250.88.201
Aug 1, 2024 06:09:20.277012110 CEST	49791	587	192.168.2.4	84.2.43.67
Aug 1, 2024 06:09:20.277179956 CEST	49770	587	192.168.2.4	62.149.157.154
Aug 1, 2024 06:09:20.281555891 CEST	587	49786	160.13.60.151	192.168.2.4
Aug 1, 2024 06:09:20.281585932 CEST	587	49787	191.252.112.195	192.168.2.4
Aug 1, 2024 06:09:20.281620026 CEST	587	49779	94.169.2.35	192.168.2.4
Aug 1, 2024 06:09:20.281706095 CEST	587	49772	13.250.88.201	192.168.2.4
Aug 1, 2024 06:09:20.281738043 CEST	587	49791	84.2.43.67	192.168.2.4
Aug 1, 2024 06:09:20.281977892 CEST	587	49770	62.149.157.154	192.168.2.4
Aug 1, 2024 06:09:20.306365967 CEST	49790	587	192.168.2.4	192.185.177.117
Aug 1, 2024 06:09:20.309057951 CEST	49792	587	192.168.2.4	84.2.43.67
Aug 1, 2024 06:09:20.324059963 CEST	49803	587	192.168.2.4	160.13.60.151
Aug 1, 2024 06:09:20.324137926 CEST	587	49742	103.6.196.75	192.168.2.4
Aug 1, 2024 06:09:20.324445963 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:20.328957081 CEST	587	49803	160.13.60.151	192.168.2.4
Aug 1, 2024 06:09:20.329161882 CEST	49803	587	192.168.2.4	160.13.60.151
Aug 1, 2024 06:09:20.335437059 CEST	49804	587	192.168.2.4	144.217.158.194
Aug 1, 2024 06:09:20.340359926 CEST	587	49804	144.217.158.194	192.168.2.4
Aug 1, 2024 06:09:20.340461969 CEST	49804	587	192.168.2.4	144.217.158.194
Aug 1, 2024 06:09:20.354290009 CEST	587	49775	13.250.88.201	192.168.2.4
Aug 1, 2024 06:09:20.354409933 CEST	587	49790	192.185.177.117	192.168.2.4
Aug 1, 2024 06:09:20.358175993 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:20.358326912 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:20.358563900 CEST	49768	587	192.168.2.4	103.5.50.24
Aug 1, 2024 06:09:20.363379002 CEST	587	49768	103.5.50.24	192.168.2.4
Aug 1, 2024 06:09:20.367362976 CEST	587	49784	62.210.246.119	192.168.2.4
Aug 1, 2024 06:09:20.371515989 CEST	49742	587	192.168.2.4	103.6.196.75
Aug 1, 2024 06:09:20.378664970 CEST	587	49747	200.90.133.79	192.168.2.4
Aug 1, 2024 06:09:20.402786016 CEST	49775	587	192.168.2.4	13.250.88.201
Aug 1, 2024 06:09:20.402811050 CEST	49790	587	192.168.2.4	192.185.177.117
Aug 1, 2024 06:09:20.408286095 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:20.408468962 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:20.413331032 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:20.418565989 CEST	49784	587	192.168.2.4	62.210.246.119
Aug 1, 2024 06:09:20.434005022 CEST	49747	587	192.168.2.4	200.90.133.79
Aug 1, 2024 06:09:20.445027113 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:20.445207119 CEST	49795	587	192.168.2.4	51.89.247.113
Aug 1, 2024 06:09:20.449989080 CEST	587	49795	51.89.247.113	192.168.2.4
Aug 1, 2024 06:09:20.461867094 CEST	587	49779	94.169.2.35	192.168.2.4
Aug 1, 2024 06:09:20.462088108 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:20.470015049 CEST	587	49791	84.2.43.67	192.168.2.4
Aug 1, 2024 06:09:20.480881929 CEST	587	49770	62.149.157.154	192.168.2.4
Aug 1, 2024 06:09:20.489070892 CEST	587	49787	191.252.112.195	192.168.2.4
Aug 1, 2024 06:09:20.496263027 CEST	587	49780	202.9.85.53	192.168.2.4
Aug 1, 2024 06:09:20.496299028 CEST	587	49780	202.9.85.53	192.168.2.4
Aug 1, 2024 06:09:20.496335030 CEST	587	49780	202.9.85.53	192.168.2.4
Aug 1, 2024 06:09:20.496368885 CEST	587	49780	202.9.85.53	192.168.2.4
Aug 1, 2024 06:09:20.496402979 CEST	49780	587	192.168.2.4	202.9.85.53
Aug 1, 2024 06:09:20.496459007 CEST	49780	587	192.168.2.4	202.9.85.53
Aug 1, 2024 06:09:20.496681929 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:20.496885061 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:20.498187065 CEST	587	49799	198.54.120.144	192.168.2.4
Aug 1, 2024 06:09:20.501570940 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:20.501630068 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:20.501739025 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:20.501766920 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:20.512196064 CEST	49791	587	192.168.2.4	84.2.43.67
Aug 1, 2024 06:09:20.515613079 CEST	49779	587	192.168.2.4	94.169.2.35
Aug 1, 2024 06:09:20.527826071 CEST	49770	587	192.168.2.4	62.149.157.154
Aug 1, 2024 06:09:20.531004906 CEST	587	49794	13.250.88.201	192.168.2.4
Aug 1, 2024 06:09:20.543442965 CEST	49799	587	192.168.2.4	198.54.120.144
Aug 1, 2024 06:09:20.543530941 CEST	49787	587	192.168.2.4	191.252.112.195
Aug 1, 2024 06:09:20.548296928 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:20.548353910 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:20.553191900 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:20.573318958 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:20.573512077 CEST	49792	587	192.168.2.4	84.2.43.67
Aug 1, 2024 06:09:20.573642969 CEST	49785	587	192.168.2.4	209.71.212.26
Aug 1, 2024 06:09:20.574624062 CEST	49742	587	192.168.2.4	103.6.196.75
Aug 1, 2024 06:09:20.574649096 CEST	49794	587	192.168.2.4	13.250.88.201
Aug 1, 2024 06:09:20.578299999 CEST	587	49792	84.2.43.67	192.168.2.4
Aug 1, 2024 06:09:20.578530073 CEST	587	49785	209.71.212.26	192.168.2.4
Aug 1, 2024 06:09:20.579407930 CEST	587	49742	103.6.196.75	192.168.2.4
Aug 1, 2024 06:09:20.611782074 CEST	587	49772	13.250.88.201	192.168.2.4
Aug 1, 2024 06:09:20.611995935 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:20.633810997 CEST	49806	587	192.168.2.4	83.166.143.44
Aug 1, 2024 06:09:20.638631105 CEST	587	49806	83.166.143.44	192.168.2.4
Aug 1, 2024 06:09:20.638719082 CEST	49806	587	192.168.2.4	83.166.143.44
Aug 1, 2024 06:09:20.647788048 CEST	587	49789	66.248.160.85	192.168.2.4
Aug 1, 2024 06:09:20.647819042 CEST	587	49789	66.248.160.85	192.168.2.4
Aug 1, 2024 06:09:20.647911072 CEST	49789	587	192.168.2.4	66.248.160.85
Aug 1, 2024 06:09:20.648031950 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:20.652837038 CEST	49772	587	192.168.2.4	13.250.88.201
Aug 1, 2024 06:09:20.652858973 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:20.652910948 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:20.655008078 CEST	587	49786	160.13.60.151	192.168.2.4
Aug 1, 2024 06:09:20.658026934 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:20.658080101 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:20.662620068 CEST	587	49795	51.89.247.113	192.168.2.4
Aug 1, 2024 06:09:20.663686991 CEST	587	49797	13.250.88.201	192.168.2.4
Aug 1, 2024 06:09:20.696352005 CEST	587	49785	209.71.212.26	192.168.2.4
Aug 1, 2024 06:09:20.699475050 CEST	587	49767	13.250.88.201	192.168.2.4
Aug 1, 2024 06:09:20.699754000 CEST	49786	587	192.168.2.4	160.13.60.151
Aug 1, 2024 06:09:20.703141928 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:20.703217983 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:20.703306913 CEST	49775	587	192.168.2.4	13.250.88.201
Aug 1, 2024 06:09:20.703404903 CEST	49784	587	192.168.2.4	62.210.246.119
Aug 1, 2024 06:09:20.703476906 CEST	49747	587	192.168.2.4	200.90.133.79
Aug 1, 2024 06:09:20.703561068 CEST	49779	587	192.168.2.4	94.169.2.35
Aug 1, 2024 06:09:20.703645945 CEST	49790	587	192.168.2.4	192.185.177.117
Aug 1, 2024 06:09:20.706326008 CEST	587	49768	103.5.50.24	192.168.2.4
Aug 1, 2024 06:09:20.708188057 CEST	587	49775	13.250.88.201	192.168.2.4
Aug 1, 2024 06:09:20.708216906 CEST	587	49784	62.210.246.119	192.168.2.4
Aug 1, 2024 06:09:20.708245993 CEST	587	49747	200.90.133.79	192.168.2.4
Aug 1, 2024 06:09:20.708323956 CEST	587	49779	94.169.2.35	192.168.2.4
Aug 1, 2024 06:09:20.708425045 CEST	587	49790	192.185.177.117	192.168.2.4
Aug 1, 2024 06:09:20.715387106 CEST	49795	587	192.168.2.4	51.89.247.113
Aug 1, 2024 06:09:20.716330051 CEST	49797	587	192.168.2.4	13.250.88.201
Aug 1, 2024 06:09:20.746619940 CEST	49768	587	192.168.2.4	103.5.50.24
Aug 1, 2024 06:09:20.746620893 CEST	49767	587	192.168.2.4	13.250.88.201
Aug 1, 2024 06:09:20.747313976 CEST	49785	587	192.168.2.4	209.71.212.26
Aug 1, 2024 06:09:20.748338938 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:20.748404026 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:20.749737978 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:20.749841928 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:20.749959946 CEST	49770	587	192.168.2.4	62.149.157.154
Aug 1, 2024 06:09:20.749993086 CEST	49787	587	192.168.2.4	191.252.112.195
Aug 1, 2024 06:09:20.750073910 CEST	49791	587	192.168.2.4	84.2.43.67
Aug 1, 2024 06:09:20.750133991 CEST	49799	587	192.168.2.4	198.54.120.144
Aug 1, 2024 06:09:20.753175020 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:20.754750967 CEST	587	49770	62.149.157.154	192.168.2.4
Aug 1, 2024 06:09:20.754779100 CEST	587	49787	191.252.112.195	192.168.2.4
Aug 1, 2024 06:09:20.754899025 CEST	587	49791	84.2.43.67	192.168.2.4
Aug 1, 2024 06:09:20.755079031 CEST	587	49799	198.54.120.144	192.168.2.4
Aug 1, 2024 06:09:20.757415056 CEST	587	49780	202.9.85.53	192.168.2.4
Aug 1, 2024 06:09:20.757589102 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:20.762444019 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:20.766674995 CEST	587	49792	84.2.43.67	192.168.2.4
Aug 1, 2024 06:09:20.767143011 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:20.771960974 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:20.809274912 CEST	49792	587	192.168.2.4	84.2.43.67
Aug 1, 2024 06:09:20.809381008 CEST	49780	587	192.168.2.4	202.9.85.53
Aug 1, 2024 06:09:20.818197966 CEST	587	49790	192.185.177.117	192.168.2.4
Aug 1, 2024 06:09:20.818464994 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:20.823317051 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:20.840045929 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:20.840198994 CEST	49794	587	192.168.2.4	13.250.88.201
Aug 1, 2024 06:09:20.844695091 CEST	49772	587	192.168.2.4	13.250.88.201
Aug 1, 2024 06:09:20.844993114 CEST	587	49794	13.250.88.201	192.168.2.4
Aug 1, 2024 06:09:20.849560022 CEST	587	49772	13.250.88.201	192.168.2.4
Aug 1, 2024 06:09:20.850811958 CEST	587	49804	144.217.158.194	192.168.2.4
Aug 1, 2024 06:09:20.854569912 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:20.871576071 CEST	49790	587	192.168.2.4	192.185.177.117
Aug 1, 2024 06:09:20.879790068 CEST	587	49802	108.167.180.142	192.168.2.4
Aug 1, 2024 06:09:20.880506039 CEST	587	49784	62.210.246.119	192.168.2.4
Aug 1, 2024 06:09:20.886496067 CEST	587	49779	94.169.2.35	192.168.2.4
Aug 1, 2024 06:09:20.890314102 CEST	49807	587	192.168.2.4	62.149.128.200
Aug 1, 2024 06:09:20.895185947 CEST	587	49807	62.149.128.200	192.168.2.4
Aug 1, 2024 06:09:20.895272970 CEST	49807	587	192.168.2.4	62.149.128.200
Aug 1, 2024 06:09:20.900304079 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:20.900377989 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:20.902780056 CEST	49804	587	192.168.2.4	144.217.158.194
Aug 1, 2024 06:09:20.905178070 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:20.910259008 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:20.910399914 CEST	49786	587	192.168.2.4	160.13.60.151
Aug 1, 2024 06:09:20.910471916 CEST	49789	587	192.168.2.4	66.248.160.85
Aug 1, 2024 06:09:20.915328979 CEST	587	49786	160.13.60.151	192.168.2.4
Aug 1, 2024 06:09:20.915359020 CEST	587	49789	66.248.160.85	192.168.2.4
Aug 1, 2024 06:09:20.916506052 CEST	587	49801	165.140.69.186	192.168.2.4
Aug 1, 2024 06:09:20.916692972 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:20.934067965 CEST	49784	587	192.168.2.4	62.210.246.119
Aug 1, 2024 06:09:20.934709072 CEST	49802	587	192.168.2.4	108.167.180.142
Aug 1, 2024 06:09:20.934715033 CEST	49779	587	192.168.2.4	94.169.2.35
Aug 1, 2024 06:09:20.943913937 CEST	587	49791	84.2.43.67	192.168.2.4
Aug 1, 2024 06:09:20.943969965 CEST	587	49791	84.2.43.67	192.168.2.4
Aug 1, 2024 06:09:20.944005013 CEST	587	49791	84.2.43.67	192.168.2.4
Aug 1, 2024 06:09:20.944037914 CEST	587	49791	84.2.43.67	192.168.2.4
Aug 1, 2024 06:09:20.944057941 CEST	49791	587	192.168.2.4	84.2.43.67
Aug 1, 2024 06:09:20.944180012 CEST	49791	587	192.168.2.4	84.2.43.67
Aug 1, 2024 06:09:20.944192886 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:20.944192886 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:20.944401979 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:20.949191093 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:20.949219942 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:20.949254036 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:20.953159094 CEST	587	49770	62.149.157.154	192.168.2.4
Aug 1, 2024 06:09:20.953394890 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:20.962454081 CEST	587	49787	191.252.112.195	192.168.2.4
Aug 1, 2024 06:09:20.965275049 CEST	49801	587	192.168.2.4	165.140.69.186
Aug 1, 2024 06:09:20.992095947 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:20.992153883 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:20.992248058 CEST	49785	587	192.168.2.4	209.71.212.26
Aug 1, 2024 06:09:20.992321968 CEST	49767	587	192.168.2.4	13.250.88.201
Aug 1, 2024 06:09:20.992403030 CEST	49797	587	192.168.2.4	13.250.88.201
Aug 1, 2024 06:09:20.992494106 CEST	49795	587	192.168.2.4	51.89.247.113
Aug 1, 2024 06:09:20.996763945 CEST	49770	587	192.168.2.4	62.149.157.154
Aug 1, 2024 06:09:20.997054100 CEST	587	49785	209.71.212.26	192.168.2.4
Aug 1, 2024 06:09:20.997153997 CEST	587	49767	13.250.88.201	192.168.2.4
Aug 1, 2024 06:09:20.997209072 CEST	587	49797	13.250.88.201	192.168.2.4
Aug 1, 2024 06:09:20.997309923 CEST	587	49795	51.89.247.113	192.168.2.4
Aug 1, 2024 06:09:21.012140989 CEST	49787	587	192.168.2.4	191.252.112.195
Aug 1, 2024 06:09:21.034815073 CEST	587	49799	198.54.120.144	192.168.2.4
Aug 1, 2024 06:09:21.040328979 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:21.040386915 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:21.045173883 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:21.045377970 CEST	587	49791	84.2.43.67	192.168.2.4
Aug 1, 2024 06:09:21.045550108 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:21.047398090 CEST	587	49775	13.250.88.201	192.168.2.4
Aug 1, 2024 06:09:21.050381899 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:21.050456047 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:21.055294991 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:21.083944082 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:21.084180117 CEST	49768	587	192.168.2.4	103.5.50.24
Aug 1, 2024 06:09:21.084225893 CEST	49792	587	192.168.2.4	84.2.43.67
Aug 1, 2024 06:09:21.084321976 CEST	49780	587	192.168.2.4	202.9.85.53
Aug 1, 2024 06:09:21.089045048 CEST	587	49768	103.5.50.24	192.168.2.4
Aug 1, 2024 06:09:21.089076042 CEST	587	49792	84.2.43.67	192.168.2.4
Aug 1, 2024 06:09:21.089169979 CEST	587	49780	202.9.85.53	192.168.2.4
Aug 1, 2024 06:09:21.090279102 CEST	49775	587	192.168.2.4	13.250.88.201
Aug 1, 2024 06:09:21.094367981 CEST	49799	587	192.168.2.4	198.54.120.144
Aug 1, 2024 06:09:21.094379902 CEST	49791	587	192.168.2.4	84.2.43.67
Aug 1, 2024 06:09:21.106215000 CEST	587	49735	217.76.146.62	192.168.2.4
Aug 1, 2024 06:09:21.106818914 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:21.117146015 CEST	587	49803	160.13.60.151	192.168.2.4
Aug 1, 2024 06:09:21.152276039 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:21.152766943 CEST	49735	587	192.168.2.4	217.76.146.62
Aug 1, 2024 06:09:21.152789116 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:21.152834892 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:21.152884960 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:21.152885914 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:21.152919054 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:21.152931929 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:21.153017044 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:21.153069019 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:21.153105021 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:21.153115988 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:21.153151035 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:21.153187037 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:21.153220892 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:21.153254986 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:21.153266907 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:21.153892040 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:21.153939009 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:21.153973103 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:21.154010057 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:21.154017925 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:21.154233932 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:21.156510115 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:21.156538010 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:21.156560898 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:21.156572104 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:21.156582117 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:21.156604052 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:21.156614065 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:21.156646013 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:21.156668901 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:21.156713963 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:21.156721115 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:21.156754017 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:21.156760931 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:21.156855106 CEST	49790	587	192.168.2.4	192.185.177.117
Aug 1, 2024 06:09:21.156927109 CEST	49804	587	192.168.2.4	144.217.158.194
Aug 1, 2024 06:09:21.157002926 CEST	49784	587	192.168.2.4	62.210.246.119
Aug 1, 2024 06:09:21.157067060 CEST	49802	587	192.168.2.4	108.167.180.142
Aug 1, 2024 06:09:21.157067060 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:21.157102108 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:21.157136917 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:21.157141924 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:21.157171011 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:21.157181025 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:21.157274961 CEST	49779	587	192.168.2.4	94.169.2.35
Aug 1, 2024 06:09:21.157274961 CEST	49801	587	192.168.2.4	165.140.69.186
Aug 1, 2024 06:09:21.157522917 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:21.157576084 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:21.157608986 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:21.157619953 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:21.157644033 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:21.157687902 CEST	49770	587	192.168.2.4	62.149.157.154
Aug 1, 2024 06:09:21.157689095 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:21.157778978 CEST	49770	587	192.168.2.4	62.149.157.154
Aug 1, 2024 06:09:21.157855988 CEST	49770	587	192.168.2.4	62.149.157.154
Aug 1, 2024 06:09:21.158032894 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:21.160082102 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:21.160139084 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:21.160167933 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:21.160206079 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:21.160218000 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:21.160231113 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:21.160269976 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:21.160305023 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:21.160315990 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:21.160417080 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:21.160450935 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:21.160489082 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:21.160876989 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:21.160943985 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:21.160990953 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:21.160999060 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:21.161032915 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:21.161041975 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:21.161066055 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:21.161115885 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:21.161542892 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:21.161576033 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:21.161609888 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:21.161624908 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:21.161699057 CEST	587	49790	192.185.177.117	192.168.2.4
Aug 1, 2024 06:09:21.161752939 CEST	587	49804	144.217.158.194	192.168.2.4
Aug 1, 2024 06:09:21.161967993 CEST	587	49784	62.210.246.119	192.168.2.4
Aug 1, 2024 06:09:21.161995888 CEST	587	49802	108.167.180.142	192.168.2.4
Aug 1, 2024 06:09:21.162287951 CEST	587	49779	94.169.2.35	192.168.2.4
Aug 1, 2024 06:09:21.162317038 CEST	587	49801	165.140.69.186	192.168.2.4
Aug 1, 2024 06:09:21.162499905 CEST	587	49770	62.149.157.154	192.168.2.4
Aug 1, 2024 06:09:21.162590027 CEST	587	49770	62.149.157.154	192.168.2.4
Aug 1, 2024 06:09:21.162617922 CEST	587	49770	62.149.157.154	192.168.2.4
Aug 1, 2024 06:09:21.162645102 CEST	49770	587	192.168.2.4	62.149.157.154
Aug 1, 2024 06:09:21.162658930 CEST	49770	587	192.168.2.4	62.149.157.154
Aug 1, 2024 06:09:21.162678957 CEST	587	49770	62.149.157.154	192.168.2.4
Aug 1, 2024 06:09:21.162708044 CEST	587	49770	62.149.157.154	192.168.2.4
Aug 1, 2024 06:09:21.162731886 CEST	49770	587	192.168.2.4	62.149.157.154
Aug 1, 2024 06:09:21.162734985 CEST	587	49770	62.149.157.154	192.168.2.4
Aug 1, 2024 06:09:21.162765980 CEST	49770	587	192.168.2.4	62.149.157.154
Aug 1, 2024 06:09:21.162774086 CEST	49770	587	192.168.2.4	62.149.157.154
Aug 1, 2024 06:09:21.162791014 CEST	587	49770	62.149.157.154	192.168.2.4
Aug 1, 2024 06:09:21.162818909 CEST	587	49770	62.149.157.154	192.168.2.4
Aug 1, 2024 06:09:21.162846088 CEST	587	49770	62.149.157.154	192.168.2.4
Aug 1, 2024 06:09:21.162873030 CEST	49770	587	192.168.2.4	62.149.157.154
Aug 1, 2024 06:09:21.162873983 CEST	587	49770	62.149.157.154	192.168.2.4
Aug 1, 2024 06:09:21.162888050 CEST	49770	587	192.168.2.4	62.149.157.154
Aug 1, 2024 06:09:21.162900925 CEST	587	49770	62.149.157.154	192.168.2.4
Aug 1, 2024 06:09:21.162920952 CEST	49770	587	192.168.2.4	62.149.157.154
Aug 1, 2024 06:09:21.162957907 CEST	49770	587	192.168.2.4	62.149.157.154
Aug 1, 2024 06:09:21.163681984 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:21.163736105 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:21.163765907 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:21.163785934 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:21.163798094 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:21.163810968 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:21.163836956 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:21.163866043 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:21.163908005 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:21.164051056 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:21.164119959 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:21.164151907 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:21.164165020 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:21.164201021 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:21.164253950 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:21.164354086 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:21.164387941 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:21.164403915 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:21.164422035 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:21.164469957 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:21.164747000 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:21.164802074 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:21.164834023 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:21.164866924 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:21.164880037 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:21.165088892 CEST	49808	587	192.168.2.4	212.10.10.65
Aug 1, 2024 06:09:21.165107012 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:21.167351961 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:21.167380095 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:21.167431116 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:21.167690992 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:21.167718887 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:21.167749882 CEST	587	49770	62.149.157.154	192.168.2.4
Aug 1, 2024 06:09:21.167764902 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:21.167795897 CEST	49770	587	192.168.2.4	62.149.157.154
Aug 1, 2024 06:09:21.167802095 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:21.167834997 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:21.167870998 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:21.167882919 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:21.167907000 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:21.167954922 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:21.167968988 CEST	587	49770	62.149.157.154	192.168.2.4
Aug 1, 2024 06:09:21.167999029 CEST	587	49770	62.149.157.154	192.168.2.4
Aug 1, 2024 06:09:21.168013096 CEST	49770	587	192.168.2.4	62.149.157.154
Aug 1, 2024 06:09:21.168025970 CEST	587	49770	62.149.157.154	192.168.2.4
Aug 1, 2024 06:09:21.168052912 CEST	587	49770	62.149.157.154	192.168.2.4
Aug 1, 2024 06:09:21.168059111 CEST	49770	587	192.168.2.4	62.149.157.154
Aug 1, 2024 06:09:21.168068886 CEST	49770	587	192.168.2.4	62.149.157.154
Aug 1, 2024 06:09:21.168081045 CEST	587	49770	62.149.157.154	192.168.2.4
Aug 1, 2024 06:09:21.168102026 CEST	49770	587	192.168.2.4	62.149.157.154
Aug 1, 2024 06:09:21.168129921 CEST	49770	587	192.168.2.4	62.149.157.154
Aug 1, 2024 06:09:21.168135881 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:21.168170929 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:21.168206930 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:21.168236017 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:21.168256998 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:21.168263912 CEST	587	49770	62.149.157.154	192.168.2.4
Aug 1, 2024 06:09:21.168277979 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:21.168293953 CEST	587	49770	62.149.157.154	192.168.2.4
Aug 1, 2024 06:09:21.168346882 CEST	587	49770	62.149.157.154	192.168.2.4
Aug 1, 2024 06:09:21.168399096 CEST	49770	587	192.168.2.4	62.149.157.154
Aug 1, 2024 06:09:21.168401003 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:21.168411016 CEST	49803	587	192.168.2.4	160.13.60.151
Aug 1, 2024 06:09:21.168433905 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:21.168467045 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:21.168514967 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:21.168515921 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:21.168548107 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:21.168590069 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:21.168677092 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:21.168704987 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:21.168747902 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:21.169547081 CEST	49770	587	192.168.2.4	62.149.157.154
Aug 1, 2024 06:09:21.169625998 CEST	49770	587	192.168.2.4	62.149.157.154
Aug 1, 2024 06:09:21.169915915 CEST	587	49808	212.10.10.65	192.168.2.4
Aug 1, 2024 06:09:21.169987917 CEST	49808	587	192.168.2.4	212.10.10.65
Aug 1, 2024 06:09:21.170130968 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:21.171411037 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:21.171439886 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:21.171471119 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:21.171478033 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:21.171490908 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:21.171524048 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:21.171535969 CEST	49770	587	192.168.2.4	62.149.157.154
Aug 1, 2024 06:09:21.171556950 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:21.171560049 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:21.171567917 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:21.171595097 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:21.171601057 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:21.171653986 CEST	49770	587	192.168.2.4	62.149.157.154
Aug 1, 2024 06:09:21.171669960 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:21.173357964 CEST	587	49770	62.149.157.154	192.168.2.4
Aug 1, 2024 06:09:21.173536062 CEST	587	49770	62.149.157.154	192.168.2.4
Aug 1, 2024 06:09:21.173568964 CEST	587	49770	62.149.157.154	192.168.2.4
Aug 1, 2024 06:09:21.173618078 CEST	587	49770	62.149.157.154	192.168.2.4
Aug 1, 2024 06:09:21.173681974 CEST	587	49770	62.149.157.154	192.168.2.4
Aug 1, 2024 06:09:21.173811913 CEST	587	49770	62.149.157.154	192.168.2.4
Aug 1, 2024 06:09:21.173840046 CEST	587	49770	62.149.157.154	192.168.2.4
Aug 1, 2024 06:09:21.173871040 CEST	587	49770	62.149.157.154	192.168.2.4
Aug 1, 2024 06:09:21.173970938 CEST	587	49770	62.149.157.154	192.168.2.4
Aug 1, 2024 06:09:21.173999071 CEST	587	49770	62.149.157.154	192.168.2.4
Aug 1, 2024 06:09:21.174334049 CEST	587	49770	62.149.157.154	192.168.2.4
Aug 1, 2024 06:09:21.174385071 CEST	587	49770	62.149.157.154	192.168.2.4
Aug 1, 2024 06:09:21.174417019 CEST	587	49770	62.149.157.154	192.168.2.4
Aug 1, 2024 06:09:21.174513102 CEST	587	49770	62.149.157.154	192.168.2.4
Aug 1, 2024 06:09:21.174540043 CEST	587	49770	62.149.157.154	192.168.2.4
Aug 1, 2024 06:09:21.174637079 CEST	587	49770	62.149.157.154	192.168.2.4
Aug 1, 2024 06:09:21.174664974 CEST	587	49770	62.149.157.154	192.168.2.4
Aug 1, 2024 06:09:21.174695969 CEST	587	49770	62.149.157.154	192.168.2.4
Aug 1, 2024 06:09:21.176472902 CEST	587	49770	62.149.157.154	192.168.2.4
Aug 1, 2024 06:09:21.176558971 CEST	587	49770	62.149.157.154	192.168.2.4
Aug 1, 2024 06:09:21.176587105 CEST	587	49770	62.149.157.154	192.168.2.4
Aug 1, 2024 06:09:21.176717997 CEST	587	49770	62.149.157.154	192.168.2.4
Aug 1, 2024 06:09:21.176745892 CEST	587	49770	62.149.157.154	192.168.2.4
Aug 1, 2024 06:09:21.185272932 CEST	587	49794	13.250.88.201	192.168.2.4
Aug 1, 2024 06:09:21.208070040 CEST	587	49789	66.248.160.85	192.168.2.4
Aug 1, 2024 06:09:21.216285944 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:21.218406916 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:21.220993996 CEST	587	49786	160.13.60.151	192.168.2.4
Aug 1, 2024 06:09:21.223246098 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:21.226790905 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:21.230951071 CEST	49794	587	192.168.2.4	13.250.88.201
Aug 1, 2024 06:09:21.231564045 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:21.232341051 CEST	587	49769	84.2.43.67	192.168.2.4
Aug 1, 2024 06:09:21.232871056 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:21.233541965 CEST	587	49795	51.89.247.113	192.168.2.4
Aug 1, 2024 06:09:21.233572960 CEST	587	49795	51.89.247.113	192.168.2.4
Aug 1, 2024 06:09:21.233606100 CEST	587	49795	51.89.247.113	192.168.2.4
Aug 1, 2024 06:09:21.233623028 CEST	49795	587	192.168.2.4	51.89.247.113
Aug 1, 2024 06:09:21.233639956 CEST	587	49795	51.89.247.113	192.168.2.4
Aug 1, 2024 06:09:21.233690977 CEST	49795	587	192.168.2.4	51.89.247.113
Aug 1, 2024 06:09:21.234282017 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:21.237988949 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:21.239065886 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:21.239099979 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:21.239173889 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:21.239605904 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:21.239919901 CEST	49770	587	192.168.2.4	62.149.157.154
Aug 1, 2024 06:09:21.240170956 CEST	49787	587	192.168.2.4	191.252.112.195
Aug 1, 2024 06:09:21.244760990 CEST	587	49770	62.149.157.154	192.168.2.4
Aug 1, 2024 06:09:21.244813919 CEST	49770	587	192.168.2.4	62.149.157.154
Aug 1, 2024 06:09:21.244813919 CEST	587	49770	62.149.157.154	192.168.2.4
Aug 1, 2024 06:09:21.244841099 CEST	587	49770	62.149.157.154	192.168.2.4
Aug 1, 2024 06:09:21.244904995 CEST	587	49770	62.149.157.154	192.168.2.4
Aug 1, 2024 06:09:21.245034933 CEST	587	49787	191.252.112.195	192.168.2.4
Aug 1, 2024 06:09:21.249655962 CEST	587	49770	62.149.157.154	192.168.2.4
Aug 1, 2024 06:09:21.256670952 CEST	587	49806	83.166.143.44	192.168.2.4
Aug 1, 2024 06:09:21.256861925 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:21.262160063 CEST	49789	587	192.168.2.4	66.248.160.85
Aug 1, 2024 06:09:21.262218952 CEST	49786	587	192.168.2.4	160.13.60.151
Aug 1, 2024 06:09:21.262423992 CEST	587	49804	144.217.158.194	192.168.2.4
Aug 1, 2024 06:09:21.270592928 CEST	587	49802	108.167.180.142	192.168.2.4
Aug 1, 2024 06:09:21.271075964 CEST	587	49790	192.185.177.117	192.168.2.4
Aug 1, 2024 06:09:21.277792931 CEST	49769	587	192.168.2.4	84.2.43.67
Aug 1, 2024 06:09:21.278100967 CEST	587	49792	84.2.43.67	192.168.2.4
Aug 1, 2024 06:09:21.278136015 CEST	587	49792	84.2.43.67	192.168.2.4
Aug 1, 2024 06:09:21.278171062 CEST	587	49792	84.2.43.67	192.168.2.4
Aug 1, 2024 06:09:21.278189898 CEST	49792	587	192.168.2.4	84.2.43.67
Aug 1, 2024 06:09:21.278204918 CEST	587	49792	84.2.43.67	192.168.2.4
Aug 1, 2024 06:09:21.278352976 CEST	49792	587	192.168.2.4	84.2.43.67
Aug 1, 2024 06:09:21.279445887 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:21.284281969 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:21.284311056 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:21.294797897 CEST	587	49772	13.250.88.201	192.168.2.4
Aug 1, 2024 06:09:21.299532890 CEST	587	49801	165.140.69.186	192.168.2.4
Aug 1, 2024 06:09:21.309019089 CEST	49806	587	192.168.2.4	83.166.143.44
Aug 1, 2024 06:09:21.309060097 CEST	49804	587	192.168.2.4	144.217.158.194
Aug 1, 2024 06:09:21.310050964 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:21.310115099 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:21.311717987 CEST	49799	587	192.168.2.4	198.54.120.144
Aug 1, 2024 06:09:21.311796904 CEST	49775	587	192.168.2.4	13.250.88.201
Aug 1, 2024 06:09:21.311882973 CEST	49791	587	192.168.2.4	84.2.43.67
Aug 1, 2024 06:09:21.316087008 CEST	49809	587	192.168.2.4	160.13.60.151
Aug 1, 2024 06:09:21.316519976 CEST	587	49799	198.54.120.144	192.168.2.4
Aug 1, 2024 06:09:21.316601038 CEST	587	49775	13.250.88.201	192.168.2.4
Aug 1, 2024 06:09:21.316632986 CEST	587	49791	84.2.43.67	192.168.2.4
Aug 1, 2024 06:09:21.320945024 CEST	587	49809	160.13.60.151	192.168.2.4
Aug 1, 2024 06:09:21.320995092 CEST	587	49795	51.89.247.113	192.168.2.4
Aug 1, 2024 06:09:21.321026087 CEST	49809	587	192.168.2.4	160.13.60.151
Aug 1, 2024 06:09:21.321723938 CEST	587	49785	209.71.212.26	192.168.2.4
Aug 1, 2024 06:09:21.322583914 CEST	587	49797	13.250.88.201	192.168.2.4
Aug 1, 2024 06:09:21.324650049 CEST	49790	587	192.168.2.4	192.185.177.117
Aug 1, 2024 06:09:21.324671984 CEST	49802	587	192.168.2.4	108.167.180.142
Aug 1, 2024 06:09:21.334362984 CEST	587	49784	62.210.246.119	192.168.2.4
Aug 1, 2024 06:09:21.340312958 CEST	49772	587	192.168.2.4	13.250.88.201
Aug 1, 2024 06:09:21.340325117 CEST	49801	587	192.168.2.4	165.140.69.186
Aug 1, 2024 06:09:21.342055082 CEST	587	49779	94.169.2.35	192.168.2.4
Aug 1, 2024 06:09:21.356268883 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:21.356322050 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:21.357464075 CEST	49810	587	192.168.2.4	160.13.60.151
Aug 1, 2024 06:09:21.361202002 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:21.362267971 CEST	587	49810	160.13.60.151	192.168.2.4
Aug 1, 2024 06:09:21.362359047 CEST	49810	587	192.168.2.4	160.13.60.151
Aug 1, 2024 06:09:21.362482071 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:21.362831116 CEST	49785	587	192.168.2.4	209.71.212.26
Aug 1, 2024 06:09:21.367742062 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:21.369512081 CEST	587	49776	164.52.146.15	192.168.2.4
Aug 1, 2024 06:09:21.369699001 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:21.371516943 CEST	49795	587	192.168.2.4	51.89.247.113
Aug 1, 2024 06:09:21.371572971 CEST	49797	587	192.168.2.4	13.250.88.201
Aug 1, 2024 06:09:21.374511957 CEST	587	49767	13.250.88.201	192.168.2.4
Aug 1, 2024 06:09:21.374540091 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:21.374730110 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:21.379304886 CEST	587	49792	84.2.43.67	192.168.2.4
Aug 1, 2024 06:09:21.379659891 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:21.379714012 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:21.384511948 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:21.387164116 CEST	49784	587	192.168.2.4	62.210.246.119
Aug 1, 2024 06:09:21.387172937 CEST	49779	587	192.168.2.4	94.169.2.35
Aug 1, 2024 06:09:21.401896954 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:21.402060986 CEST	49735	587	192.168.2.4	217.76.146.62
Aug 1, 2024 06:09:21.406831980 CEST	587	49735	217.76.146.62	192.168.2.4
Aug 1, 2024 06:09:21.418411970 CEST	49776	587	192.168.2.4	164.52.146.15
Aug 1, 2024 06:09:21.418418884 CEST	49767	587	192.168.2.4	13.250.88.201
Aug 1, 2024 06:09:21.433998108 CEST	49792	587	192.168.2.4	84.2.43.67
Aug 1, 2024 06:09:21.437946081 CEST	587	49780	202.9.85.53	192.168.2.4
Aug 1, 2024 06:09:21.438157082 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:21.453614950 CEST	587	49787	191.252.112.195	192.168.2.4
Aug 1, 2024 06:09:21.453669071 CEST	587	49787	191.252.112.195	192.168.2.4
Aug 1, 2024 06:09:21.453699112 CEST	587	49787	191.252.112.195	192.168.2.4
Aug 1, 2024 06:09:21.453752041 CEST	587	49787	191.252.112.195	192.168.2.4
Aug 1, 2024 06:09:21.453752041 CEST	49787	587	192.168.2.4	191.252.112.195
Aug 1, 2024 06:09:21.453782082 CEST	587	49787	191.252.112.195	192.168.2.4
Aug 1, 2024 06:09:21.453836918 CEST	49787	587	192.168.2.4	191.252.112.195
Aug 1, 2024 06:09:21.453892946 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:21.453892946 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:21.454088926 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:21.458657980 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:21.458878994 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:21.458945036 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:21.471477032 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:21.471630096 CEST	49803	587	192.168.2.4	160.13.60.151
Aug 1, 2024 06:09:21.471723080 CEST	49769	587	192.168.2.4	84.2.43.67
Aug 1, 2024 06:09:21.471796036 CEST	49794	587	192.168.2.4	13.250.88.201
Aug 1, 2024 06:09:21.471885920 CEST	49789	587	192.168.2.4	66.248.160.85
Aug 1, 2024 06:09:21.471963882 CEST	49786	587	192.168.2.4	160.13.60.151
Aug 1, 2024 06:09:21.472045898 CEST	49806	587	192.168.2.4	83.166.143.44
Aug 1, 2024 06:09:21.472162008 CEST	49804	587	192.168.2.4	144.217.158.194
Aug 1, 2024 06:09:21.472238064 CEST	49802	587	192.168.2.4	108.167.180.142
Aug 1, 2024 06:09:21.474241972 CEST	49790	587	192.168.2.4	192.185.177.117
Aug 1, 2024 06:09:21.476389885 CEST	587	49803	160.13.60.151	192.168.2.4
Aug 1, 2024 06:09:21.476562023 CEST	587	49769	84.2.43.67	192.168.2.4
Aug 1, 2024 06:09:21.476594925 CEST	587	49794	13.250.88.201	192.168.2.4
Aug 1, 2024 06:09:21.476711988 CEST	587	49789	66.248.160.85	192.168.2.4
Aug 1, 2024 06:09:21.476758003 CEST	587	49786	160.13.60.151	192.168.2.4
Aug 1, 2024 06:09:21.476807117 CEST	587	49806	83.166.143.44	192.168.2.4
Aug 1, 2024 06:09:21.476912022 CEST	587	49804	144.217.158.194	192.168.2.4
Aug 1, 2024 06:09:21.476998091 CEST	587	49802	108.167.180.142	192.168.2.4
Aug 1, 2024 06:09:21.479042053 CEST	587	49790	192.185.177.117	192.168.2.4
Aug 1, 2024 06:09:21.480882883 CEST	49780	587	192.168.2.4	202.9.85.53
Aug 1, 2024 06:09:21.486385107 CEST	587	49774	15.235.118.229	192.168.2.4
Aug 1, 2024 06:09:21.486820936 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:21.506105900 CEST	587	49791	84.2.43.67	192.168.2.4
Aug 1, 2024 06:09:21.506757021 CEST	587	49807	62.149.128.200	192.168.2.4
Aug 1, 2024 06:09:21.527795076 CEST	49774	587	192.168.2.4	15.235.118.229
Aug 1, 2024 06:09:21.532334089 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:21.534429073 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:21.539237022 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:21.548640013 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:21.548877954 CEST	49772	587	192.168.2.4	13.250.88.201
Aug 1, 2024 06:09:21.548980951 CEST	49801	587	192.168.2.4	165.140.69.186
Aug 1, 2024 06:09:21.549105883 CEST	49779	587	192.168.2.4	94.169.2.35
Aug 1, 2024 06:09:21.549182892 CEST	49784	587	192.168.2.4	62.210.246.119
Aug 1, 2024 06:09:21.549249887 CEST	49785	587	192.168.2.4	209.71.212.26
Aug 1, 2024 06:09:21.549321890 CEST	49797	587	192.168.2.4	13.250.88.201
Aug 1, 2024 06:09:21.549391031 CEST	49795	587	192.168.2.4	51.89.247.113
Aug 1, 2024 06:09:21.553699970 CEST	587	49772	13.250.88.201	192.168.2.4
Aug 1, 2024 06:09:21.553752899 CEST	587	49801	165.140.69.186	192.168.2.4
Aug 1, 2024 06:09:21.553807974 CEST	587	49779	94.169.2.35	192.168.2.4
Aug 1, 2024 06:09:21.553963900 CEST	587	49784	62.210.246.119	192.168.2.4
Aug 1, 2024 06:09:21.553997993 CEST	587	49785	209.71.212.26	192.168.2.4
Aug 1, 2024 06:09:21.554111004 CEST	587	49797	13.250.88.201	192.168.2.4
Aug 1, 2024 06:09:21.554234028 CEST	587	49795	51.89.247.113	192.168.2.4
Aug 1, 2024 06:09:21.556587934 CEST	49795	587	192.168.2.4	51.89.247.113
Aug 1, 2024 06:09:21.559040070 CEST	49791	587	192.168.2.4	84.2.43.67
Aug 1, 2024 06:09:21.559046984 CEST	49807	587	192.168.2.4	62.149.128.200
Aug 1, 2024 06:09:21.561419010 CEST	587	49795	51.89.247.113	192.168.2.4
Aug 1, 2024 06:09:21.563906908 CEST	587	49766	190.105.202.10	192.168.2.4
Aug 1, 2024 06:09:21.567296982 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:21.570070982 CEST	587	49787	191.252.112.195	192.168.2.4
Aug 1, 2024 06:09:21.578558922 CEST	587	49804	144.217.158.194	192.168.2.4
Aug 1, 2024 06:09:21.586395025 CEST	587	49802	108.167.180.142	192.168.2.4
Aug 1, 2024 06:09:21.588257074 CEST	587	49790	192.185.177.117	192.168.2.4
Aug 1, 2024 06:09:21.593103886 CEST	587	49767	13.250.88.201	192.168.2.4
Aug 1, 2024 06:09:21.593175888 CEST	49767	587	192.168.2.4	13.250.88.201
Aug 1, 2024 06:09:21.593261003 CEST	49767	587	192.168.2.4	13.250.88.201
Aug 1, 2024 06:09:21.598002911 CEST	587	49767	13.250.88.201	192.168.2.4
Aug 1, 2024 06:09:21.599863052 CEST	587	49799	198.54.120.144	192.168.2.4
Aug 1, 2024 06:09:21.602226019 CEST	587	49735	217.76.146.62	192.168.2.4
Aug 1, 2024 06:09:21.612302065 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:21.612375021 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:21.617135048 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:21.621530056 CEST	49787	587	192.168.2.4	191.252.112.195
Aug 1, 2024 06:09:21.621527910 CEST	49766	587	192.168.2.4	190.105.202.10
Aug 1, 2024 06:09:21.621697903 CEST	49804	587	192.168.2.4	144.217.158.194
Aug 1, 2024 06:09:21.629868984 CEST	587	49770	62.149.157.154	192.168.2.4
Aug 1, 2024 06:09:21.630121946 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:21.634949923 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:21.637161970 CEST	49802	587	192.168.2.4	108.167.180.142
Aug 1, 2024 06:09:21.638236046 CEST	49790	587	192.168.2.4	192.185.177.117
Aug 1, 2024 06:09:21.652771950 CEST	49799	587	192.168.2.4	198.54.120.144
Aug 1, 2024 06:09:21.653954983 CEST	49735	587	192.168.2.4	217.76.146.62
Aug 1, 2024 06:09:21.657491922 CEST	587	49791	84.2.43.67	192.168.2.4
Aug 1, 2024 06:09:21.657737970 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:21.659023046 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:21.659447908 CEST	49776	587	192.168.2.4	164.52.146.15
Aug 1, 2024 06:09:21.660017967 CEST	49780	587	192.168.2.4	202.9.85.53
Aug 1, 2024 06:09:21.660084963 CEST	49792	587	192.168.2.4	84.2.43.67
Aug 1, 2024 06:09:21.664264917 CEST	587	49776	164.52.146.15	192.168.2.4
Aug 1, 2024 06:09:21.664827108 CEST	587	49780	202.9.85.53	192.168.2.4
Aug 1, 2024 06:09:21.664860010 CEST	587	49792	84.2.43.67	192.168.2.4
Aug 1, 2024 06:09:21.664912939 CEST	587	49789	66.248.160.85	192.168.2.4
Aug 1, 2024 06:09:21.664977074 CEST	49792	587	192.168.2.4	84.2.43.67
Aug 1, 2024 06:09:21.666683912 CEST	587	49769	84.2.43.67	192.168.2.4
Aug 1, 2024 06:09:21.666991949 CEST	587	49769	84.2.43.67	192.168.2.4
Aug 1, 2024 06:09:21.667057037 CEST	49769	587	192.168.2.4	84.2.43.67
Aug 1, 2024 06:09:21.667196989 CEST	587	49769	84.2.43.67	192.168.2.4
Aug 1, 2024 06:09:21.667256117 CEST	49769	587	192.168.2.4	84.2.43.67
Aug 1, 2024 06:09:21.667320013 CEST	49769	587	192.168.2.4	84.2.43.67
Aug 1, 2024 06:09:21.669724941 CEST	587	49792	84.2.43.67	192.168.2.4
Aug 1, 2024 06:09:21.671212912 CEST	49811	587	192.168.2.4	82.76.254.41
Aug 1, 2024 06:09:21.672045946 CEST	587	49769	84.2.43.67	192.168.2.4
Aug 1, 2024 06:09:21.672518969 CEST	587	49785	209.71.212.26	192.168.2.4
Aug 1, 2024 06:09:21.674393892 CEST	587	49806	83.166.143.44	192.168.2.4
Aug 1, 2024 06:09:21.676017046 CEST	587	49811	82.76.254.41	192.168.2.4
Aug 1, 2024 06:09:21.676095009 CEST	49811	587	192.168.2.4	82.76.254.41
Aug 1, 2024 06:09:21.684048891 CEST	49770	587	192.168.2.4	62.149.157.154
Aug 1, 2024 06:09:21.690253973 CEST	587	49801	165.140.69.186	192.168.2.4
Aug 1, 2024 06:09:21.699764967 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:21.699767113 CEST	49791	587	192.168.2.4	84.2.43.67
Aug 1, 2024 06:09:21.704335928 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:21.705393076 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:21.710170031 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:21.715316057 CEST	49789	587	192.168.2.4	66.248.160.85
Aug 1, 2024 06:09:21.718236923 CEST	49785	587	192.168.2.4	209.71.212.26
Aug 1, 2024 06:09:21.726207018 CEST	587	49784	62.210.246.119	192.168.2.4
Aug 1, 2024 06:09:21.730479002 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:21.730916023 CEST	49806	587	192.168.2.4	83.166.143.44
Aug 1, 2024 06:09:21.732477903 CEST	587	49779	94.169.2.35	192.168.2.4
Aug 1, 2024 06:09:21.735320091 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:21.738126040 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:21.742930889 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:21.746541977 CEST	49801	587	192.168.2.4	165.140.69.186
Aug 1, 2024 06:09:21.762769938 CEST	587	49775	13.250.88.201	192.168.2.4
Aug 1, 2024 06:09:21.766679049 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:21.770679951 CEST	587	49776	164.52.146.15	192.168.2.4
Aug 1, 2024 06:09:21.771536112 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:21.771734953 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:21.772754908 CEST	587	49808	212.10.10.65	192.168.2.4
Aug 1, 2024 06:09:21.776699066 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:21.776953936 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:21.777033091 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:21.777791977 CEST	49784	587	192.168.2.4	62.210.246.119
Aug 1, 2024 06:09:21.777798891 CEST	49779	587	192.168.2.4	94.169.2.35
Aug 1, 2024 06:09:21.778884888 CEST	49807	587	192.168.2.4	62.149.128.200
Aug 1, 2024 06:09:21.778961897 CEST	49774	587	192.168.2.4	15.235.118.229
Aug 1, 2024 06:09:21.779182911 CEST	587	49803	160.13.60.151	192.168.2.4
Aug 1, 2024 06:09:21.780457020 CEST	49812	587	192.168.2.4	212.10.10.65
Aug 1, 2024 06:09:21.782136917 CEST	587	49786	160.13.60.151	192.168.2.4
Aug 1, 2024 06:09:21.783744097 CEST	587	49807	62.149.128.200	192.168.2.4
Aug 1, 2024 06:09:21.783772945 CEST	587	49774	15.235.118.229	192.168.2.4
Aug 1, 2024 06:09:21.785329103 CEST	587	49812	212.10.10.65	192.168.2.4
Aug 1, 2024 06:09:21.786955118 CEST	49812	587	192.168.2.4	212.10.10.65
Aug 1, 2024 06:09:21.809135914 CEST	49775	587	192.168.2.4	13.250.88.201
Aug 1, 2024 06:09:21.824781895 CEST	49776	587	192.168.2.4	164.52.146.15
Aug 1, 2024 06:09:21.824781895 CEST	49808	587	192.168.2.4	212.10.10.65
Aug 1, 2024 06:09:21.824780941 CEST	49786	587	192.168.2.4	160.13.60.151
Aug 1, 2024 06:09:21.824783087 CEST	49803	587	192.168.2.4	160.13.60.151
Aug 1, 2024 06:09:21.827713966 CEST	587	49794	13.250.88.201	192.168.2.4
Aug 1, 2024 06:09:21.827747107 CEST	587	49794	13.250.88.201	192.168.2.4
Aug 1, 2024 06:09:21.827801943 CEST	587	49794	13.250.88.201	192.168.2.4
Aug 1, 2024 06:09:21.827822924 CEST	49794	587	192.168.2.4	13.250.88.201
Aug 1, 2024 06:09:21.827840090 CEST	587	49794	13.250.88.201	192.168.2.4
Aug 1, 2024 06:09:21.827868938 CEST	587	49794	13.250.88.201	192.168.2.4
Aug 1, 2024 06:09:21.827914953 CEST	49794	587	192.168.2.4	13.250.88.201
Aug 1, 2024 06:09:21.827960968 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:21.828164101 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:21.828269958 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:21.832779884 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:21.832834005 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:21.832916975 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:21.833120108 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:21.833148003 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:21.855381966 CEST	587	49792	84.2.43.67	192.168.2.4
Aug 1, 2024 06:09:21.858377934 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:21.858474970 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:21.858634949 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:21.858639002 CEST	49766	587	192.168.2.4	190.105.202.10
Aug 1, 2024 06:09:21.858680964 CEST	49802	587	192.168.2.4	108.167.180.142
Aug 1, 2024 06:09:21.858753920 CEST	49804	587	192.168.2.4	144.217.158.194
Aug 1, 2024 06:09:21.858882904 CEST	49790	587	192.168.2.4	192.185.177.117
Aug 1, 2024 06:09:21.858962059 CEST	49799	587	192.168.2.4	198.54.120.144
Aug 1, 2024 06:09:21.859028101 CEST	49787	587	192.168.2.4	191.252.112.195
Aug 1, 2024 06:09:21.863415956 CEST	587	49766	190.105.202.10	192.168.2.4
Aug 1, 2024 06:09:21.863516092 CEST	587	49802	108.167.180.142	192.168.2.4
Aug 1, 2024 06:09:21.863544941 CEST	587	49804	144.217.158.194	192.168.2.4
Aug 1, 2024 06:09:21.863652945 CEST	587	49790	192.185.177.117	192.168.2.4
Aug 1, 2024 06:09:21.863776922 CEST	587	49799	198.54.120.144	192.168.2.4
Aug 1, 2024 06:09:21.863873005 CEST	587	49787	191.252.112.195	192.168.2.4
Aug 1, 2024 06:09:21.866344929 CEST	49787	587	192.168.2.4	191.252.112.195
Aug 1, 2024 06:09:21.871186018 CEST	587	49787	191.252.112.195	192.168.2.4
Aug 1, 2024 06:09:21.873148918 CEST	49735	587	192.168.2.4	217.76.146.62
Aug 1, 2024 06:09:21.878285885 CEST	587	49735	217.76.146.62	192.168.2.4
Aug 1, 2024 06:09:21.878395081 CEST	49735	587	192.168.2.4	217.76.146.62
Aug 1, 2024 06:09:21.882281065 CEST	587	49774	15.235.118.229	192.168.2.4
Aug 1, 2024 06:09:21.887888908 CEST	587	49797	13.250.88.201	192.168.2.4
Aug 1, 2024 06:09:21.887944937 CEST	587	49797	13.250.88.201	192.168.2.4
Aug 1, 2024 06:09:21.887974977 CEST	587	49797	13.250.88.201	192.168.2.4
Aug 1, 2024 06:09:21.888003111 CEST	49797	587	192.168.2.4	13.250.88.201
Aug 1, 2024 06:09:21.888009071 CEST	587	49797	13.250.88.201	192.168.2.4
Aug 1, 2024 06:09:21.888041973 CEST	587	49797	13.250.88.201	192.168.2.4
Aug 1, 2024 06:09:21.888053894 CEST	49797	587	192.168.2.4	13.250.88.201
Aug 1, 2024 06:09:21.888381004 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:21.892621040 CEST	587	49795	51.89.247.113	192.168.2.4
Aug 1, 2024 06:09:21.893207073 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:21.893239021 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:21.902853966 CEST	49792	587	192.168.2.4	84.2.43.67
Aug 1, 2024 06:09:21.913127899 CEST	587	49772	13.250.88.201	192.168.2.4
Aug 1, 2024 06:09:21.934154034 CEST	49797	587	192.168.2.4	13.250.88.201
Aug 1, 2024 06:09:21.934155941 CEST	49774	587	192.168.2.4	15.235.118.229
Aug 1, 2024 06:09:21.934155941 CEST	49795	587	192.168.2.4	51.89.247.113
Aug 1, 2024 06:09:21.940294981 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:21.940361977 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:21.945125103 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:21.950114012 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:21.951430082 CEST	49791	587	192.168.2.4	84.2.43.67
Aug 1, 2024 06:09:21.953051090 CEST	49813	587	192.168.2.4	62.149.157.154
Aug 1, 2024 06:09:21.953181028 CEST	49789	587	192.168.2.4	66.248.160.85
Aug 1, 2024 06:09:21.953274012 CEST	49806	587	192.168.2.4	83.166.143.44
Aug 1, 2024 06:09:21.953353882 CEST	49785	587	192.168.2.4	209.71.212.26
Aug 1, 2024 06:09:21.953435898 CEST	49784	587	192.168.2.4	62.210.246.119
Aug 1, 2024 06:09:21.953535080 CEST	49801	587	192.168.2.4	165.140.69.186
Aug 1, 2024 06:09:21.956201077 CEST	587	49791	84.2.43.67	192.168.2.4
Aug 1, 2024 06:09:21.957803965 CEST	587	49813	62.149.157.154	192.168.2.4
Aug 1, 2024 06:09:21.957874060 CEST	49813	587	192.168.2.4	62.149.157.154
Aug 1, 2024 06:09:21.957896948 CEST	587	49789	66.248.160.85	192.168.2.4
Aug 1, 2024 06:09:21.957941055 CEST	587	49806	83.166.143.44	192.168.2.4
Aug 1, 2024 06:09:21.958014965 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:21.958056927 CEST	587	49785	209.71.212.26	192.168.2.4
Aug 1, 2024 06:09:21.958117962 CEST	587	49784	62.210.246.119	192.168.2.4
Aug 1, 2024 06:09:21.958281040 CEST	587	49801	165.140.69.186	192.168.2.4
Aug 1, 2024 06:09:21.965303898 CEST	49772	587	192.168.2.4	13.250.88.201
Aug 1, 2024 06:09:21.969172001 CEST	587	49804	144.217.158.194	192.168.2.4
Aug 1, 2024 06:09:21.969209909 CEST	587	49804	144.217.158.194	192.168.2.4
Aug 1, 2024 06:09:21.969225883 CEST	587	49804	144.217.158.194	192.168.2.4
Aug 1, 2024 06:09:21.969269037 CEST	49804	587	192.168.2.4	144.217.158.194
Aug 1, 2024 06:09:21.969414949 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:21.969414949 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:21.969625950 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:21.974204063 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:21.974374056 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:21.979146004 CEST	587	49802	108.167.180.142	192.168.2.4
Aug 1, 2024 06:09:21.979193926 CEST	587	49802	108.167.180.142	192.168.2.4
Aug 1, 2024 06:09:21.979208946 CEST	587	49802	108.167.180.142	192.168.2.4
Aug 1, 2024 06:09:21.979228020 CEST	587	49802	108.167.180.142	192.168.2.4
Aug 1, 2024 06:09:21.979281902 CEST	49802	587	192.168.2.4	108.167.180.142
Aug 1, 2024 06:09:21.979305983 CEST	49802	587	192.168.2.4	108.167.180.142
Aug 1, 2024 06:09:21.979418039 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:21.979418039 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:21.979620934 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:21.984395027 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:21.984474897 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:21.985239983 CEST	587	49792	84.2.43.67	192.168.2.4
Aug 1, 2024 06:09:21.986263037 CEST	587	49807	62.149.128.200	192.168.2.4
Aug 1, 2024 06:09:22.014218092 CEST	587	49780	202.9.85.53	192.168.2.4
Aug 1, 2024 06:09:22.027899981 CEST	49792	587	192.168.2.4	84.2.43.67
Aug 1, 2024 06:09:22.027903080 CEST	49807	587	192.168.2.4	62.149.128.200
Aug 1, 2024 06:09:22.032322884 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:22.032407999 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:22.033183098 CEST	49814	587	192.168.2.4	62.149.128.201
Aug 1, 2024 06:09:22.037229061 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:22.038103104 CEST	587	49814	62.149.128.201	192.168.2.4
Aug 1, 2024 06:09:22.038188934 CEST	49814	587	192.168.2.4	62.149.128.201
Aug 1, 2024 06:09:22.038302898 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:22.043617010 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:22.058130980 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:22.058378935 CEST	49808	587	192.168.2.4	212.10.10.65
Aug 1, 2024 06:09:22.058547974 CEST	49776	587	192.168.2.4	164.52.146.15
Aug 1, 2024 06:09:22.058547974 CEST	49775	587	192.168.2.4	13.250.88.201
Aug 1, 2024 06:09:22.058590889 CEST	49786	587	192.168.2.4	160.13.60.151
Aug 1, 2024 06:09:22.058664083 CEST	49803	587	192.168.2.4	160.13.60.151
Aug 1, 2024 06:09:22.058727980 CEST	49794	587	192.168.2.4	13.250.88.201
Aug 1, 2024 06:09:22.059032917 CEST	49780	587	192.168.2.4	202.9.85.53
Aug 1, 2024 06:09:22.059293032 CEST	49779	587	192.168.2.4	94.169.2.35
Aug 1, 2024 06:09:22.059422016 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:22.063163996 CEST	587	49808	212.10.10.65	192.168.2.4
Aug 1, 2024 06:09:22.063364029 CEST	587	49776	164.52.146.15	192.168.2.4
Aug 1, 2024 06:09:22.063426018 CEST	587	49775	13.250.88.201	192.168.2.4
Aug 1, 2024 06:09:22.063457012 CEST	587	49786	160.13.60.151	192.168.2.4
Aug 1, 2024 06:09:22.063508987 CEST	587	49803	160.13.60.151	192.168.2.4
Aug 1, 2024 06:09:22.063538074 CEST	587	49794	13.250.88.201	192.168.2.4
Aug 1, 2024 06:09:22.064209938 CEST	587	49779	94.169.2.35	192.168.2.4
Aug 1, 2024 06:09:22.064280987 CEST	49779	587	192.168.2.4	94.169.2.35
Aug 1, 2024 06:09:22.072304010 CEST	587	49787	191.252.112.195	192.168.2.4
Aug 1, 2024 06:09:22.080723047 CEST	587	49785	209.71.212.26	192.168.2.4
Aug 1, 2024 06:09:22.088671923 CEST	587	49766	190.105.202.10	192.168.2.4
Aug 1, 2024 06:09:22.103529930 CEST	587	49801	165.140.69.186	192.168.2.4
Aug 1, 2024 06:09:22.103569984 CEST	587	49801	165.140.69.186	192.168.2.4
Aug 1, 2024 06:09:22.103606939 CEST	587	49801	165.140.69.186	192.168.2.4
Aug 1, 2024 06:09:22.103851080 CEST	49801	587	192.168.2.4	165.140.69.186
Aug 1, 2024 06:09:22.103981018 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:22.104275942 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:22.108789921 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:22.108844042 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:22.108875036 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:22.121771097 CEST	49785	587	192.168.2.4	209.71.212.26
Aug 1, 2024 06:09:22.121769905 CEST	49787	587	192.168.2.4	191.252.112.195
Aug 1, 2024 06:09:22.126353979 CEST	587	49772	13.250.88.201	192.168.2.4
Aug 1, 2024 06:09:22.126535892 CEST	49772	587	192.168.2.4	13.250.88.201
Aug 1, 2024 06:09:22.126682043 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:22.126686096 CEST	49772	587	192.168.2.4	13.250.88.201
Aug 1, 2024 06:09:22.127561092 CEST	587	49809	160.13.60.151	192.168.2.4
Aug 1, 2024 06:09:22.130670071 CEST	587	49784	62.210.246.119	192.168.2.4
Aug 1, 2024 06:09:22.131499052 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:22.131529093 CEST	587	49772	13.250.88.201	192.168.2.4
Aug 1, 2024 06:09:22.131560087 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:22.136346102 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:22.137204885 CEST	49766	587	192.168.2.4	190.105.202.10
Aug 1, 2024 06:09:22.144856930 CEST	587	49791	84.2.43.67	192.168.2.4
Aug 1, 2024 06:09:22.145139933 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:22.146079063 CEST	587	49789	66.248.160.85	192.168.2.4
Aug 1, 2024 06:09:22.149926901 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:22.150012016 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:22.151884079 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:22.152046919 CEST	587	49799	198.54.120.144	192.168.2.4
Aug 1, 2024 06:09:22.152076960 CEST	587	49799	198.54.120.144	192.168.2.4
Aug 1, 2024 06:09:22.152132988 CEST	587	49799	198.54.120.144	192.168.2.4
Aug 1, 2024 06:09:22.152143955 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:22.152148008 CEST	49799	587	192.168.2.4	198.54.120.144
Aug 1, 2024 06:09:22.152173042 CEST	587	49799	198.54.120.144	192.168.2.4
Aug 1, 2024 06:09:22.152173996 CEST	49774	587	192.168.2.4	15.235.118.229
Aug 1, 2024 06:09:22.152201891 CEST	587	49799	198.54.120.144	192.168.2.4
Aug 1, 2024 06:09:22.152265072 CEST	49799	587	192.168.2.4	198.54.120.144
Aug 1, 2024 06:09:22.152265072 CEST	49797	587	192.168.2.4	13.250.88.201
Aug 1, 2024 06:09:22.152384996 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:22.152561903 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:22.153728962 CEST	587	49810	160.13.60.151	192.168.2.4
Aug 1, 2024 06:09:22.156369925 CEST	587	49806	83.166.143.44	192.168.2.4
Aug 1, 2024 06:09:22.157036066 CEST	587	49774	15.235.118.229	192.168.2.4
Aug 1, 2024 06:09:22.157088041 CEST	587	49797	13.250.88.201	192.168.2.4
Aug 1, 2024 06:09:22.157172918 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:22.157238007 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:22.157289982 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:22.157474041 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:22.168407917 CEST	49809	587	192.168.2.4	160.13.60.151
Aug 1, 2024 06:09:22.184039116 CEST	49784	587	192.168.2.4	62.210.246.119
Aug 1, 2024 06:09:22.188848972 CEST	587	49787	191.252.112.195	192.168.2.4
Aug 1, 2024 06:09:22.198945999 CEST	49815	587	192.168.2.4	210.59.228.38
Aug 1, 2024 06:09:22.199641943 CEST	49789	587	192.168.2.4	66.248.160.85
Aug 1, 2024 06:09:22.199656963 CEST	49791	587	192.168.2.4	84.2.43.67
Aug 1, 2024 06:09:22.199701071 CEST	49806	587	192.168.2.4	83.166.143.44
Aug 1, 2024 06:09:22.200086117 CEST	49810	587	192.168.2.4	160.13.60.151
Aug 1, 2024 06:09:22.203799963 CEST	587	49815	210.59.228.38	192.168.2.4
Aug 1, 2024 06:09:22.203902960 CEST	49815	587	192.168.2.4	210.59.228.38
Aug 1, 2024 06:09:22.204260111 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:22.204340935 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:22.209099054 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:22.218306065 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:22.219969034 CEST	49795	587	192.168.2.4	51.89.247.113
Aug 1, 2024 06:09:22.219976902 CEST	49804	587	192.168.2.4	144.217.158.194
Aug 1, 2024 06:09:22.224756002 CEST	587	49795	51.89.247.113	192.168.2.4
Aug 1, 2024 06:09:22.224769115 CEST	587	49804	144.217.158.194	192.168.2.4
Aug 1, 2024 06:09:22.230921030 CEST	49787	587	192.168.2.4	191.252.112.195
Aug 1, 2024 06:09:22.238748074 CEST	587	49799	198.54.120.144	192.168.2.4
Aug 1, 2024 06:09:22.242978096 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:22.249100924 CEST	587	49808	212.10.10.65	192.168.2.4
Aug 1, 2024 06:09:22.288378000 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:22.288436890 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:22.293203115 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:22.293421984 CEST	49799	587	192.168.2.4	198.54.120.144
Aug 1, 2024 06:09:22.293431044 CEST	49808	587	192.168.2.4	212.10.10.65
Aug 1, 2024 06:09:22.325620890 CEST	587	49804	144.217.158.194	192.168.2.4
Aug 1, 2024 06:09:22.325882912 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:22.330710888 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:22.335007906 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:22.335211992 CEST	49792	587	192.168.2.4	84.2.43.67
Aug 1, 2024 06:09:22.335299969 CEST	49807	587	192.168.2.4	62.149.128.200
Aug 1, 2024 06:09:22.335378885 CEST	49780	587	192.168.2.4	202.9.85.53
Aug 1, 2024 06:09:22.335436106 CEST	49802	587	192.168.2.4	108.167.180.142
Aug 1, 2024 06:09:22.335962057 CEST	49766	587	192.168.2.4	190.105.202.10
Aug 1, 2024 06:09:22.336036921 CEST	49785	587	192.168.2.4	209.71.212.26
Aug 1, 2024 06:09:22.340042114 CEST	587	49792	84.2.43.67	192.168.2.4
Aug 1, 2024 06:09:22.340084076 CEST	587	49807	62.149.128.200	192.168.2.4
Aug 1, 2024 06:09:22.340143919 CEST	587	49780	202.9.85.53	192.168.2.4
Aug 1, 2024 06:09:22.340238094 CEST	587	49802	108.167.180.142	192.168.2.4
Aug 1, 2024 06:09:22.340715885 CEST	587	49766	190.105.202.10	192.168.2.4
Aug 1, 2024 06:09:22.340842009 CEST	587	49785	209.71.212.26	192.168.2.4
Aug 1, 2024 06:09:22.343949080 CEST	587	49812	212.10.10.65	192.168.2.4
Aug 1, 2024 06:09:22.344099045 CEST	587	49812	212.10.10.65	192.168.2.4
Aug 1, 2024 06:09:22.344186068 CEST	49812	587	192.168.2.4	212.10.10.65
Aug 1, 2024 06:09:22.344235897 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:22.344407082 CEST	49812	587	192.168.2.4	212.10.10.65
Aug 1, 2024 06:09:22.349163055 CEST	587	49812	212.10.10.65	192.168.2.4
Aug 1, 2024 06:09:22.365636110 CEST	587	49803	160.13.60.151	192.168.2.4
Aug 1, 2024 06:09:22.367125034 CEST	587	49786	160.13.60.151	192.168.2.4
Aug 1, 2024 06:09:22.371545076 CEST	49804	587	192.168.2.4	144.217.158.194
Aug 1, 2024 06:09:22.380238056 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:22.380305052 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:22.380769014 CEST	49801	587	192.168.2.4	165.140.69.186
Aug 1, 2024 06:09:22.380937099 CEST	49809	587	192.168.2.4	160.13.60.151
Aug 1, 2024 06:09:22.380990982 CEST	49791	587	192.168.2.4	84.2.43.67
Aug 1, 2024 06:09:22.381062984 CEST	49789	587	192.168.2.4	66.248.160.85
Aug 1, 2024 06:09:22.381139994 CEST	49810	587	192.168.2.4	160.13.60.151
Aug 1, 2024 06:09:22.381202936 CEST	49806	587	192.168.2.4	83.166.143.44
Aug 1, 2024 06:09:22.385652065 CEST	587	49801	165.140.69.186	192.168.2.4
Aug 1, 2024 06:09:22.385719061 CEST	49801	587	192.168.2.4	165.140.69.186
Aug 1, 2024 06:09:22.385827065 CEST	587	49809	160.13.60.151	192.168.2.4
Aug 1, 2024 06:09:22.385857105 CEST	587	49791	84.2.43.67	192.168.2.4
Aug 1, 2024 06:09:22.385890007 CEST	587	49789	66.248.160.85	192.168.2.4
Aug 1, 2024 06:09:22.385963917 CEST	587	49810	160.13.60.151	192.168.2.4
Aug 1, 2024 06:09:22.385994911 CEST	587	49806	83.166.143.44	192.168.2.4
Aug 1, 2024 06:09:22.390527964 CEST	587	49801	165.140.69.186	192.168.2.4
Aug 1, 2024 06:09:22.405191898 CEST	587	49794	13.250.88.201	192.168.2.4
Aug 1, 2024 06:09:22.418431997 CEST	49803	587	192.168.2.4	160.13.60.151
Aug 1, 2024 06:09:22.418452978 CEST	49786	587	192.168.2.4	160.13.60.151
Aug 1, 2024 06:09:22.421366930 CEST	49816	587	192.168.2.4	83.243.58.138
Aug 1, 2024 06:09:22.424213886 CEST	587	49795	51.89.247.113	192.168.2.4
Aug 1, 2024 06:09:22.426244020 CEST	587	49816	83.243.58.138	192.168.2.4
Aug 1, 2024 06:09:22.426328897 CEST	49816	587	192.168.2.4	83.243.58.138
Aug 1, 2024 06:09:22.428284883 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:22.428392887 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:22.432291031 CEST	587	49775	13.250.88.201	192.168.2.4
Aug 1, 2024 06:09:22.433274984 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:22.433330059 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:22.438167095 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:22.448743105 CEST	587	49802	108.167.180.142	192.168.2.4
Aug 1, 2024 06:09:22.449023008 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:22.449665070 CEST	49794	587	192.168.2.4	13.250.88.201
Aug 1, 2024 06:09:22.453870058 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:22.458774090 CEST	587	49785	209.71.212.26	192.168.2.4
Aug 1, 2024 06:09:22.458988905 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:22.463824987 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:22.465303898 CEST	49795	587	192.168.2.4	51.89.247.113
Aug 1, 2024 06:09:22.480891943 CEST	49775	587	192.168.2.4	13.250.88.201
Aug 1, 2024 06:09:22.481734037 CEST	587	49797	13.250.88.201	192.168.2.4
Aug 1, 2024 06:09:22.481972933 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:22.486782074 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:22.496548891 CEST	49802	587	192.168.2.4	108.167.180.142
Aug 1, 2024 06:09:22.510993004 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:22.511156082 CEST	49787	587	192.168.2.4	191.252.112.195
Aug 1, 2024 06:09:22.511231899 CEST	49799	587	192.168.2.4	198.54.120.144
Aug 1, 2024 06:09:22.512162924 CEST	49785	587	192.168.2.4	209.71.212.26
Aug 1, 2024 06:09:22.516132116 CEST	587	49787	191.252.112.195	192.168.2.4
Aug 1, 2024 06:09:22.516160965 CEST	587	49799	198.54.120.144	192.168.2.4
Aug 1, 2024 06:09:22.516213894 CEST	49799	587	192.168.2.4	198.54.120.144
Aug 1, 2024 06:09:22.521039963 CEST	587	49799	198.54.120.144	192.168.2.4
Aug 1, 2024 06:09:22.527787924 CEST	49797	587	192.168.2.4	13.250.88.201
Aug 1, 2024 06:09:22.528568983 CEST	587	49792	84.2.43.67	192.168.2.4
Aug 1, 2024 06:09:22.529134989 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:22.542785883 CEST	587	49807	62.149.128.200	192.168.2.4
Aug 1, 2024 06:09:22.551237106 CEST	587	49813	62.149.157.154	192.168.2.4
Aug 1, 2024 06:09:22.568743944 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:22.568810940 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:22.568845987 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:22.568881989 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:22.568902969 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:22.568933010 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:22.568954945 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:22.568985939 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:22.568990946 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:22.569021940 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:22.569041014 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:22.569072962 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:22.569119930 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:22.569154024 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:22.569171906 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:22.569190025 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:22.569201946 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:22.569225073 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:22.569276094 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:22.569319963 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:22.569371939 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:22.569426060 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:22.572676897 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:22.572711945 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:22.572845936 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:22.572876930 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:22.572900057 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:22.572905064 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:22.572936058 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:22.572964907 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:22.572989941 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:22.572998047 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:22.573031902 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:22.573065996 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:22.573080063 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:22.573103905 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:22.573126078 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:22.573262930 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:22.573313951 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:22.573348999 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:22.573370934 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:22.573381901 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:22.573410988 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:22.574027061 CEST	49808	587	192.168.2.4	212.10.10.65
Aug 1, 2024 06:09:22.574116945 CEST	49804	587	192.168.2.4	144.217.158.194
Aug 1, 2024 06:09:22.574249029 CEST	49803	587	192.168.2.4	160.13.60.151
Aug 1, 2024 06:09:22.574356079 CEST	49786	587	192.168.2.4	160.13.60.151
Aug 1, 2024 06:09:22.574522972 CEST	49786	587	192.168.2.4	160.13.60.151
Aug 1, 2024 06:09:22.574629068 CEST	49786	587	192.168.2.4	160.13.60.151
Aug 1, 2024 06:09:22.574762106 CEST	49792	587	192.168.2.4	84.2.43.67
Aug 1, 2024 06:09:22.574994087 CEST	49786	587	192.168.2.4	160.13.60.151
Aug 1, 2024 06:09:22.576122046 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:22.576152086 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:22.576205015 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:22.576216936 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:22.576239109 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:22.576263905 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:22.576272964 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:22.576308012 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:22.576328993 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:22.576440096 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:22.576495886 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:22.576507092 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:22.576536894 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:22.576572895 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:22.576587915 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:22.576605082 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:22.576663017 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:22.576673031 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:22.576756954 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:22.576791048 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:22.576805115 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:22.576826096 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:22.576922894 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:22.576955080 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:22.576973915 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:22.577001095 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:22.578818083 CEST	587	49808	212.10.10.65	192.168.2.4
Aug 1, 2024 06:09:22.578982115 CEST	587	49804	144.217.158.194	192.168.2.4
Aug 1, 2024 06:09:22.579015970 CEST	587	49803	160.13.60.151	192.168.2.4
Aug 1, 2024 06:09:22.579179049 CEST	587	49786	160.13.60.151	192.168.2.4
Aug 1, 2024 06:09:22.579251051 CEST	49786	587	192.168.2.4	160.13.60.151
Aug 1, 2024 06:09:22.579385042 CEST	587	49786	160.13.60.151	192.168.2.4
Aug 1, 2024 06:09:22.579413891 CEST	587	49786	160.13.60.151	192.168.2.4
Aug 1, 2024 06:09:22.579451084 CEST	49786	587	192.168.2.4	160.13.60.151
Aug 1, 2024 06:09:22.579488039 CEST	49786	587	192.168.2.4	160.13.60.151
Aug 1, 2024 06:09:22.579514980 CEST	587	49786	160.13.60.151	192.168.2.4
Aug 1, 2024 06:09:22.579544067 CEST	587	49786	160.13.60.151	192.168.2.4
Aug 1, 2024 06:09:22.579571009 CEST	587	49786	160.13.60.151	192.168.2.4
Aug 1, 2024 06:09:22.579577923 CEST	49786	587	192.168.2.4	160.13.60.151
Aug 1, 2024 06:09:22.579607964 CEST	587	49786	160.13.60.151	192.168.2.4
Aug 1, 2024 06:09:22.579679966 CEST	49786	587	192.168.2.4	160.13.60.151
Aug 1, 2024 06:09:22.579689026 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:22.579741001 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:22.579788923 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:22.579839945 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:22.579843044 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:22.579885960 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:22.579921007 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:22.579940081 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:22.579948902 CEST	587	49786	160.13.60.151	192.168.2.4
Aug 1, 2024 06:09:22.579978943 CEST	587	49786	160.13.60.151	192.168.2.4
Aug 1, 2024 06:09:22.579987049 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:22.580008030 CEST	587	49786	160.13.60.151	192.168.2.4
Aug 1, 2024 06:09:22.580040932 CEST	49786	587	192.168.2.4	160.13.60.151
Aug 1, 2024 06:09:22.580058098 CEST	587	49786	160.13.60.151	192.168.2.4
Aug 1, 2024 06:09:22.580070972 CEST	49786	587	192.168.2.4	160.13.60.151
Aug 1, 2024 06:09:22.580087900 CEST	587	49786	160.13.60.151	192.168.2.4
Aug 1, 2024 06:09:22.580111980 CEST	49786	587	192.168.2.4	160.13.60.151
Aug 1, 2024 06:09:22.580173969 CEST	49786	587	192.168.2.4	160.13.60.151
Aug 1, 2024 06:09:22.580313921 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:22.580347061 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:22.580382109 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:22.580401897 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:22.580434084 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:22.580516100 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:22.580549955 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:22.580564022 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:22.580585003 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:22.580600977 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:22.580636024 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:22.580672026 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:22.580684900 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:22.580699921 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:22.580756903 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:22.583420038 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:22.583448887 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:22.583547115 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:22.583683968 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:22.583713055 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:22.583766937 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:22.583787918 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:22.583820105 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:22.583852053 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:22.583867073 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:22.583888054 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:22.583937883 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:22.583971024 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:22.584001064 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:22.584048986 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:22.584059000 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:22.584089994 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:22.584144115 CEST	587	49786	160.13.60.151	192.168.2.4
Aug 1, 2024 06:09:22.584170103 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:22.584192038 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:22.584238052 CEST	49786	587	192.168.2.4	160.13.60.151
Aug 1, 2024 06:09:22.584242105 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:22.584273100 CEST	587	49806	83.166.143.44	192.168.2.4
Aug 1, 2024 06:09:22.584290981 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:22.584326982 CEST	587	49806	83.166.143.44	192.168.2.4
Aug 1, 2024 06:09:22.584358931 CEST	587	49806	83.166.143.44	192.168.2.4
Aug 1, 2024 06:09:22.584364891 CEST	49786	587	192.168.2.4	160.13.60.151
Aug 1, 2024 06:09:22.584388018 CEST	49806	587	192.168.2.4	83.166.143.44
Aug 1, 2024 06:09:22.584412098 CEST	587	49806	83.166.143.44	192.168.2.4
Aug 1, 2024 06:09:22.584440947 CEST	587	49786	160.13.60.151	192.168.2.4
Aug 1, 2024 06:09:22.584501982 CEST	49806	587	192.168.2.4	83.166.143.44
Aug 1, 2024 06:09:22.584511042 CEST	49786	587	192.168.2.4	160.13.60.151
Aug 1, 2024 06:09:22.584521055 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:22.584557056 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:22.584583998 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:22.584583998 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:22.584588051 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:22.584599972 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:22.584623098 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:22.584629059 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:22.584655046 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:22.584672928 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:22.584688902 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:22.584705114 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:22.584717035 CEST	587	49786	160.13.60.151	192.168.2.4
Aug 1, 2024 06:09:22.584737062 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:22.584743023 CEST	587	49786	160.13.60.151	192.168.2.4
Aug 1, 2024 06:09:22.584779024 CEST	49786	587	192.168.2.4	160.13.60.151
Aug 1, 2024 06:09:22.584804058 CEST	49786	587	192.168.2.4	160.13.60.151
Aug 1, 2024 06:09:22.584845066 CEST	587	49786	160.13.60.151	192.168.2.4
Aug 1, 2024 06:09:22.584908962 CEST	587	49786	160.13.60.151	192.168.2.4
Aug 1, 2024 06:09:22.585007906 CEST	49786	587	192.168.2.4	160.13.60.151
Aug 1, 2024 06:09:22.585057974 CEST	587	49786	160.13.60.151	192.168.2.4
Aug 1, 2024 06:09:22.585153103 CEST	49786	587	192.168.2.4	160.13.60.151
Aug 1, 2024 06:09:22.585450888 CEST	587	49786	160.13.60.151	192.168.2.4
Aug 1, 2024 06:09:22.585522890 CEST	49786	587	192.168.2.4	160.13.60.151
Aug 1, 2024 06:09:22.585553885 CEST	587	49806	83.166.143.44	192.168.2.4
Aug 1, 2024 06:09:22.585591078 CEST	587	49806	83.166.143.44	192.168.2.4
Aug 1, 2024 06:09:22.585640907 CEST	587	49786	160.13.60.151	192.168.2.4
Aug 1, 2024 06:09:22.585666895 CEST	587	49786	160.13.60.151	192.168.2.4
Aug 1, 2024 06:09:22.585721970 CEST	49786	587	192.168.2.4	160.13.60.151
Aug 1, 2024 06:09:22.585721970 CEST	49786	587	192.168.2.4	160.13.60.151
Aug 1, 2024 06:09:22.585743904 CEST	587	49786	160.13.60.151	192.168.2.4
Aug 1, 2024 06:09:22.585764885 CEST	49806	587	192.168.2.4	83.166.143.44
Aug 1, 2024 06:09:22.585896015 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:22.587069988 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:22.587099075 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:22.587122917 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:22.587336063 CEST	49786	587	192.168.2.4	160.13.60.151
Aug 1, 2024 06:09:22.587363958 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:22.587416887 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:22.587435961 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:22.587466002 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:22.587501049 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:22.587507010 CEST	49786	587	192.168.2.4	160.13.60.151
Aug 1, 2024 06:09:22.587517023 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:22.589760065 CEST	587	49786	160.13.60.151	192.168.2.4
Aug 1, 2024 06:09:22.589951992 CEST	587	49786	160.13.60.151	192.168.2.4
Aug 1, 2024 06:09:22.589996099 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:22.590044975 CEST	587	49786	160.13.60.151	192.168.2.4
Aug 1, 2024 06:09:22.590073109 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:22.590306044 CEST	49807	587	192.168.2.4	62.149.128.200
Aug 1, 2024 06:09:22.590481043 CEST	587	49786	160.13.60.151	192.168.2.4
Aug 1, 2024 06:09:22.590730906 CEST	587	49786	160.13.60.151	192.168.2.4
Aug 1, 2024 06:09:22.590835094 CEST	587	49786	160.13.60.151	192.168.2.4
Aug 1, 2024 06:09:22.590862036 CEST	587	49786	160.13.60.151	192.168.2.4
Aug 1, 2024 06:09:22.590888977 CEST	587	49786	160.13.60.151	192.168.2.4
Aug 1, 2024 06:09:22.590915918 CEST	587	49786	160.13.60.151	192.168.2.4
Aug 1, 2024 06:09:22.590948105 CEST	587	49786	160.13.60.151	192.168.2.4
Aug 1, 2024 06:09:22.590976954 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:22.592181921 CEST	587	49786	160.13.60.151	192.168.2.4
Aug 1, 2024 06:09:22.592422009 CEST	587	49786	160.13.60.151	192.168.2.4
Aug 1, 2024 06:09:22.592448950 CEST	587	49786	160.13.60.151	192.168.2.4
Aug 1, 2024 06:09:22.592561007 CEST	587	49786	160.13.60.151	192.168.2.4
Aug 1, 2024 06:09:22.592605114 CEST	587	49786	160.13.60.151	192.168.2.4
Aug 1, 2024 06:09:22.605935097 CEST	49813	587	192.168.2.4	62.149.157.154
Aug 1, 2024 06:09:22.611849070 CEST	587	49801	165.140.69.186	192.168.2.4
Aug 1, 2024 06:09:22.632376909 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:22.632440090 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:22.637283087 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:22.648505926 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:22.648535967 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:22.648586988 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:22.648610115 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:22.648622990 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:22.648657084 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:22.648669004 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:22.648871899 CEST	49786	587	192.168.2.4	160.13.60.151
Aug 1, 2024 06:09:22.648946047 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:22.648993969 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:22.648996115 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:22.649032116 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:22.649085045 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:22.649105072 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:22.649137020 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:22.649171114 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:22.649189949 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:22.649207115 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:22.649256945 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:22.649287939 CEST	587	49775	13.250.88.201	192.168.2.4
Aug 1, 2024 06:09:22.649308920 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:22.649358988 CEST	49775	587	192.168.2.4	13.250.88.201
Aug 1, 2024 06:09:22.649547100 CEST	49775	587	192.168.2.4	13.250.88.201
Aug 1, 2024 06:09:22.649769068 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:22.650434017 CEST	49795	587	192.168.2.4	51.89.247.113
Aug 1, 2024 06:09:22.650434017 CEST	49794	587	192.168.2.4	13.250.88.201
Aug 1, 2024 06:09:22.650558949 CEST	49802	587	192.168.2.4	108.167.180.142
Aug 1, 2024 06:09:22.650661945 CEST	49785	587	192.168.2.4	209.71.212.26
Aug 1, 2024 06:09:22.650804043 CEST	587	49814	62.149.128.201	192.168.2.4
Aug 1, 2024 06:09:22.650933981 CEST	49785	587	192.168.2.4	209.71.212.26
Aug 1, 2024 06:09:22.652056932 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:22.652113914 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:22.652143002 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:22.652144909 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:22.652180910 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:22.652195930 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:22.652231932 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:22.652265072 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:22.652298927 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:22.652323961 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:22.652333975 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:22.652348995 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:22.652376890 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:22.652400017 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:22.652441978 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:22.652450085 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:22.652501106 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:22.652523994 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:22.652549982 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:22.652571917 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:22.652625084 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:22.652661085 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:22.652690887 CEST	49785	587	192.168.2.4	209.71.212.26
Aug 1, 2024 06:09:22.652714014 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:22.652744055 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:22.652811050 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:22.652818918 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:22.652842045 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:22.652861118 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:22.652867079 CEST	49801	587	192.168.2.4	165.140.69.186
Aug 1, 2024 06:09:22.653825045 CEST	587	49786	160.13.60.151	192.168.2.4
Aug 1, 2024 06:09:22.654084921 CEST	587	49786	160.13.60.151	192.168.2.4
Aug 1, 2024 06:09:22.654258013 CEST	587	49786	160.13.60.151	192.168.2.4
Aug 1, 2024 06:09:22.654375076 CEST	587	49775	13.250.88.201	192.168.2.4
Aug 1, 2024 06:09:22.655253887 CEST	587	49795	51.89.247.113	192.168.2.4
Aug 1, 2024 06:09:22.655282974 CEST	587	49794	13.250.88.201	192.168.2.4
Aug 1, 2024 06:09:22.655314922 CEST	587	49802	108.167.180.142	192.168.2.4
Aug 1, 2024 06:09:22.655467987 CEST	587	49785	209.71.212.26	192.168.2.4
Aug 1, 2024 06:09:22.655597925 CEST	587	49785	209.71.212.26	192.168.2.4
Aug 1, 2024 06:09:22.655626059 CEST	587	49785	209.71.212.26	192.168.2.4
Aug 1, 2024 06:09:22.655663967 CEST	49785	587	192.168.2.4	209.71.212.26
Aug 1, 2024 06:09:22.655725002 CEST	49785	587	192.168.2.4	209.71.212.26
Aug 1, 2024 06:09:22.655752897 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:22.655785084 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:22.655836105 CEST	587	49785	209.71.212.26	192.168.2.4
Aug 1, 2024 06:09:22.655838013 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:22.655864000 CEST	587	49785	209.71.212.26	192.168.2.4
Aug 1, 2024 06:09:22.655891895 CEST	49785	587	192.168.2.4	209.71.212.26
Aug 1, 2024 06:09:22.655891895 CEST	587	49785	209.71.212.26	192.168.2.4
Aug 1, 2024 06:09:22.655946970 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:22.655976057 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:22.656023026 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:22.656028986 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:22.656058073 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:22.656109095 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:22.656109095 CEST	587	49785	209.71.212.26	192.168.2.4
Aug 1, 2024 06:09:22.656160116 CEST	587	49785	209.71.212.26	192.168.2.4
Aug 1, 2024 06:09:22.656192064 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:22.656224012 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:22.656240940 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:22.656256914 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:22.656289101 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:22.656311035 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:22.656325102 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:22.656337976 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:22.656373024 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:22.656378031 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:22.656450033 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:22.656495094 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:22.656497955 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:22.656538010 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:22.656548977 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:22.656582117 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:22.656588078 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:22.656620026 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:22.656630039 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:22.656652927 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:22.656668901 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:22.657834053 CEST	587	49785	209.71.212.26	192.168.2.4
Aug 1, 2024 06:09:22.657922029 CEST	587	49785	209.71.212.26	192.168.2.4
Aug 1, 2024 06:09:22.657948971 CEST	587	49785	209.71.212.26	192.168.2.4
Aug 1, 2024 06:09:22.658117056 CEST	49785	587	192.168.2.4	209.71.212.26
Aug 1, 2024 06:09:22.658827066 CEST	49785	587	192.168.2.4	209.71.212.26
Aug 1, 2024 06:09:22.658924103 CEST	49785	587	192.168.2.4	209.71.212.26
Aug 1, 2024 06:09:22.659029961 CEST	49785	587	192.168.2.4	209.71.212.26
Aug 1, 2024 06:09:22.659418106 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:22.659447908 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:22.659507990 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:22.659748077 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:22.659801960 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:22.659821033 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:22.659835100 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:22.659871101 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:22.659885883 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:22.659899950 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:22.659950972 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:22.659974098 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:22.660023928 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:22.660057068 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:22.660083055 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:22.660129070 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:22.660166979 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:22.660177946 CEST	49797	587	192.168.2.4	13.250.88.201
Aug 1, 2024 06:09:22.660197020 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:22.660239935 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:22.660274029 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:22.660307884 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:22.660325050 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:22.660350084 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:22.660497904 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:22.660531998 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:22.660795927 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:22.661495924 CEST	587	49785	209.71.212.26	192.168.2.4
Aug 1, 2024 06:09:22.661525965 CEST	587	49785	209.71.212.26	192.168.2.4
Aug 1, 2024 06:09:22.661576033 CEST	587	49785	209.71.212.26	192.168.2.4
Aug 1, 2024 06:09:22.661602974 CEST	49785	587	192.168.2.4	209.71.212.26
Aug 1, 2024 06:09:22.661604881 CEST	587	49785	209.71.212.26	192.168.2.4
Aug 1, 2024 06:09:22.661633968 CEST	587	49785	209.71.212.26	192.168.2.4
Aug 1, 2024 06:09:22.661645889 CEST	49785	587	192.168.2.4	209.71.212.26
Aug 1, 2024 06:09:22.661674976 CEST	49785	587	192.168.2.4	209.71.212.26
Aug 1, 2024 06:09:22.661684990 CEST	587	49785	209.71.212.26	192.168.2.4
Aug 1, 2024 06:09:22.661699057 CEST	49785	587	192.168.2.4	209.71.212.26
Aug 1, 2024 06:09:22.661714077 CEST	587	49785	209.71.212.26	192.168.2.4
Aug 1, 2024 06:09:22.661731005 CEST	49785	587	192.168.2.4	209.71.212.26
Aug 1, 2024 06:09:22.661771059 CEST	49785	587	192.168.2.4	209.71.212.26
Aug 1, 2024 06:09:22.662082911 CEST	49817	587	192.168.2.4	13.250.88.201
Aug 1, 2024 06:09:22.663096905 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:22.663152933 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:22.663181067 CEST	587	49785	209.71.212.26	192.168.2.4
Aug 1, 2024 06:09:22.663216114 CEST	587	49785	209.71.212.26	192.168.2.4
Aug 1, 2024 06:09:22.663230896 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:22.663264990 CEST	587	49785	209.71.212.26	192.168.2.4
Aug 1, 2024 06:09:22.663266897 CEST	49785	587	192.168.2.4	209.71.212.26
Aug 1, 2024 06:09:22.663283110 CEST	49785	587	192.168.2.4	209.71.212.26
Aug 1, 2024 06:09:22.663515091 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:22.663547039 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:22.663618088 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:22.663651943 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:22.663659096 CEST	49785	587	192.168.2.4	209.71.212.26
Aug 1, 2024 06:09:22.663785934 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:22.663820982 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:22.663851023 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:22.663873911 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:22.663902998 CEST	587	49785	209.71.212.26	192.168.2.4
Aug 1, 2024 06:09:22.663935900 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:22.663942099 CEST	49785	587	192.168.2.4	209.71.212.26
Aug 1, 2024 06:09:22.663949966 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:22.663989067 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:22.664022923 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:22.664057970 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:22.664074898 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:22.664089918 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:22.664127111 CEST	49785	587	192.168.2.4	209.71.212.26
Aug 1, 2024 06:09:22.664129972 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:22.664144993 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:22.664174080 CEST	587	49785	209.71.212.26	192.168.2.4
Aug 1, 2024 06:09:22.664201975 CEST	587	49785	209.71.212.26	192.168.2.4
Aug 1, 2024 06:09:22.664230108 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:22.664258957 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:22.664292097 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:22.664325953 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:22.664341927 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:22.664402008 CEST	49785	587	192.168.2.4	209.71.212.26
Aug 1, 2024 06:09:22.665201902 CEST	587	49797	13.250.88.201	192.168.2.4
Aug 1, 2024 06:09:22.666539907 CEST	587	49785	209.71.212.26	192.168.2.4
Aug 1, 2024 06:09:22.666718006 CEST	587	49785	209.71.212.26	192.168.2.4
Aug 1, 2024 06:09:22.666840076 CEST	587	49785	209.71.212.26	192.168.2.4
Aug 1, 2024 06:09:22.666980982 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:22.667011023 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:22.667041063 CEST	587	49785	209.71.212.26	192.168.2.4
Aug 1, 2024 06:09:22.667076111 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:22.667078018 CEST	587	49817	13.250.88.201	192.168.2.4
Aug 1, 2024 06:09:22.667124987 CEST	49785	587	192.168.2.4	209.71.212.26
Aug 1, 2024 06:09:22.667149067 CEST	49817	587	192.168.2.4	13.250.88.201
Aug 1, 2024 06:09:22.667289972 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:22.668277025 CEST	587	49785	209.71.212.26	192.168.2.4
Aug 1, 2024 06:09:22.668328047 CEST	587	49785	209.71.212.26	192.168.2.4
Aug 1, 2024 06:09:22.668354988 CEST	587	49785	209.71.212.26	192.168.2.4
Aug 1, 2024 06:09:22.669229984 CEST	587	49785	209.71.212.26	192.168.2.4
Aug 1, 2024 06:09:22.669367075 CEST	587	49785	209.71.212.26	192.168.2.4
Aug 1, 2024 06:09:22.669487953 CEST	587	49785	209.71.212.26	192.168.2.4
Aug 1, 2024 06:09:22.669637918 CEST	587	49785	209.71.212.26	192.168.2.4
Aug 1, 2024 06:09:22.669665098 CEST	587	49785	209.71.212.26	192.168.2.4
Aug 1, 2024 06:09:22.669713020 CEST	587	49785	209.71.212.26	192.168.2.4
Aug 1, 2024 06:09:22.669739962 CEST	587	49785	209.71.212.26	192.168.2.4
Aug 1, 2024 06:09:22.671967983 CEST	587	49785	209.71.212.26	192.168.2.4
Aug 1, 2024 06:09:22.672065020 CEST	587	49785	209.71.212.26	192.168.2.4
Aug 1, 2024 06:09:22.672095060 CEST	587	49785	209.71.212.26	192.168.2.4
Aug 1, 2024 06:09:22.679533005 CEST	587	49804	144.217.158.194	192.168.2.4
Aug 1, 2024 06:09:22.688477039 CEST	587	49780	202.9.85.53	192.168.2.4
Aug 1, 2024 06:09:22.688970089 CEST	587	49806	83.166.143.44	192.168.2.4
Aug 1, 2024 06:09:22.689460993 CEST	587	49810	160.13.60.151	192.168.2.4
Aug 1, 2024 06:09:22.692792892 CEST	587	49809	160.13.60.151	192.168.2.4
Aug 1, 2024 06:09:22.699892998 CEST	49814	587	192.168.2.4	62.149.128.201
Aug 1, 2024 06:09:22.712512970 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:22.712775946 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:22.717686892 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:22.723987103 CEST	587	49787	191.252.112.195	192.168.2.4
Aug 1, 2024 06:09:22.724241972 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:22.724396944 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:22.724493980 CEST	49785	587	192.168.2.4	209.71.212.26
Aug 1, 2024 06:09:22.729304075 CEST	587	49785	209.71.212.26	192.168.2.4
Aug 1, 2024 06:09:22.729371071 CEST	49785	587	192.168.2.4	209.71.212.26
Aug 1, 2024 06:09:22.729435921 CEST	587	49785	209.71.212.26	192.168.2.4
Aug 1, 2024 06:09:22.730899096 CEST	49810	587	192.168.2.4	160.13.60.151
Aug 1, 2024 06:09:22.730904102 CEST	49780	587	192.168.2.4	202.9.85.53
Aug 1, 2024 06:09:22.731511116 CEST	49804	587	192.168.2.4	144.217.158.194
Aug 1, 2024 06:09:22.731578112 CEST	49806	587	192.168.2.4	83.166.143.44
Aug 1, 2024 06:09:22.734313965 CEST	587	49785	209.71.212.26	192.168.2.4
Aug 1, 2024 06:09:22.746721983 CEST	49809	587	192.168.2.4	160.13.60.151
Aug 1, 2024 06:09:22.763638973 CEST	587	49808	212.10.10.65	192.168.2.4
Aug 1, 2024 06:09:22.763773918 CEST	587	49802	108.167.180.142	192.168.2.4
Aug 1, 2024 06:09:22.772339106 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:22.772660017 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:22.777482986 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:22.778002977 CEST	49787	587	192.168.2.4	191.252.112.195
Aug 1, 2024 06:09:22.804753065 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:22.805460930 CEST	49792	587	192.168.2.4	84.2.43.67
Aug 1, 2024 06:09:22.805490971 CEST	49807	587	192.168.2.4	62.149.128.200
Aug 1, 2024 06:09:22.805565119 CEST	49813	587	192.168.2.4	62.149.157.154
Aug 1, 2024 06:09:22.809076071 CEST	49802	587	192.168.2.4	108.167.180.142
Aug 1, 2024 06:09:22.810007095 CEST	49808	587	192.168.2.4	212.10.10.65
Aug 1, 2024 06:09:22.810414076 CEST	587	49792	84.2.43.67	192.168.2.4
Aug 1, 2024 06:09:22.810446024 CEST	587	49807	62.149.128.200	192.168.2.4
Aug 1, 2024 06:09:22.810538054 CEST	587	49813	62.149.157.154	192.168.2.4
Aug 1, 2024 06:09:22.851861954 CEST	587	49795	51.89.247.113	192.168.2.4
Aug 1, 2024 06:09:22.852058887 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:22.878897905 CEST	587	49747	200.90.133.79	192.168.2.4
Aug 1, 2024 06:09:22.900336981 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:22.903242111 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:22.905304909 CEST	49795	587	192.168.2.4	51.89.247.113
Aug 1, 2024 06:09:22.908080101 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:22.914519072 CEST	587	49803	160.13.60.151	192.168.2.4
Aug 1, 2024 06:09:22.919346094 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:22.924182892 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:22.934103966 CEST	49747	587	192.168.2.4	200.90.133.79
Aug 1, 2024 06:09:22.939156055 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:22.939454079 CEST	49814	587	192.168.2.4	62.149.128.201
Aug 1, 2024 06:09:22.939464092 CEST	49801	587	192.168.2.4	165.140.69.186
Aug 1, 2024 06:09:22.944369078 CEST	587	49814	62.149.128.201	192.168.2.4
Aug 1, 2024 06:09:22.944384098 CEST	587	49801	165.140.69.186	192.168.2.4
Aug 1, 2024 06:09:22.958291054 CEST	49818	587	192.168.2.4	103.86.139.86
Aug 1, 2024 06:09:22.963176966 CEST	587	49818	103.86.139.86	192.168.2.4
Aug 1, 2024 06:09:22.963265896 CEST	49818	587	192.168.2.4	103.86.139.86
Aug 1, 2024 06:09:22.963397026 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:22.965368986 CEST	49803	587	192.168.2.4	160.13.60.151
Aug 1, 2024 06:09:23.007905960 CEST	587	49797	13.250.88.201	192.168.2.4
Aug 1, 2024 06:09:23.008718967 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:23.009094954 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:23.009937048 CEST	587	49813	62.149.157.154	192.168.2.4
Aug 1, 2024 06:09:23.011049986 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:23.011358023 CEST	49804	587	192.168.2.4	144.217.158.194
Aug 1, 2024 06:09:23.011408091 CEST	587	49794	13.250.88.201	192.168.2.4
Aug 1, 2024 06:09:23.011428118 CEST	49780	587	192.168.2.4	202.9.85.53
Aug 1, 2024 06:09:23.011513948 CEST	49810	587	192.168.2.4	160.13.60.151
Aug 1, 2024 06:09:23.011614084 CEST	49809	587	192.168.2.4	160.13.60.151
Aug 1, 2024 06:09:23.011636972 CEST	49787	587	192.168.2.4	191.252.112.195
Aug 1, 2024 06:09:23.011727095 CEST	49806	587	192.168.2.4	83.166.143.44
Aug 1, 2024 06:09:23.013926029 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:23.013979912 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:23.015230894 CEST	587	49807	62.149.128.200	192.168.2.4
Aug 1, 2024 06:09:23.015302896 CEST	587	49807	62.149.128.200	192.168.2.4
Aug 1, 2024 06:09:23.015337944 CEST	587	49807	62.149.128.200	192.168.2.4
Aug 1, 2024 06:09:23.015372992 CEST	587	49807	62.149.128.200	192.168.2.4
Aug 1, 2024 06:09:23.015456915 CEST	49807	587	192.168.2.4	62.149.128.200
Aug 1, 2024 06:09:23.015487909 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:23.015487909 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:23.015495062 CEST	49807	587	192.168.2.4	62.149.128.200
Aug 1, 2024 06:09:23.015667915 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:23.016231060 CEST	587	49804	144.217.158.194	192.168.2.4
Aug 1, 2024 06:09:23.016261101 CEST	587	49780	202.9.85.53	192.168.2.4
Aug 1, 2024 06:09:23.016413927 CEST	587	49810	160.13.60.151	192.168.2.4
Aug 1, 2024 06:09:23.016443014 CEST	587	49809	160.13.60.151	192.168.2.4
Aug 1, 2024 06:09:23.016474962 CEST	587	49787	191.252.112.195	192.168.2.4
Aug 1, 2024 06:09:23.016545057 CEST	587	49806	83.166.143.44	192.168.2.4
Aug 1, 2024 06:09:23.017029047 CEST	49806	587	192.168.2.4	83.166.143.44
Aug 1, 2024 06:09:23.018845081 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:23.020375013 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:23.020402908 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:23.020437002 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:23.020507097 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:23.020538092 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:23.021827936 CEST	587	49806	83.166.143.44	192.168.2.4
Aug 1, 2024 06:09:23.027122974 CEST	587	49799	198.54.120.144	192.168.2.4
Aug 1, 2024 06:09:23.027375937 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:23.032191992 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:23.059039116 CEST	49797	587	192.168.2.4	13.250.88.201
Aug 1, 2024 06:09:23.059041023 CEST	49813	587	192.168.2.4	62.149.157.154
Aug 1, 2024 06:09:23.059134007 CEST	49794	587	192.168.2.4	13.250.88.201
Aug 1, 2024 06:09:23.074645996 CEST	49799	587	192.168.2.4	198.54.120.144
Aug 1, 2024 06:09:23.081655025 CEST	587	49801	165.140.69.186	192.168.2.4
Aug 1, 2024 06:09:23.083312035 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:23.088113070 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:23.103068113 CEST	587	49785	209.71.212.26	192.168.2.4
Aug 1, 2024 06:09:23.103638887 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:23.104016066 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:23.104779005 CEST	49802	587	192.168.2.4	108.167.180.142
Aug 1, 2024 06:09:23.104834080 CEST	49808	587	192.168.2.4	212.10.10.65
Aug 1, 2024 06:09:23.105022907 CEST	49795	587	192.168.2.4	51.89.247.113
Aug 1, 2024 06:09:23.109560966 CEST	587	49802	108.167.180.142	192.168.2.4
Aug 1, 2024 06:09:23.109638929 CEST	587	49808	212.10.10.65	192.168.2.4
Aug 1, 2024 06:09:23.109786034 CEST	587	49795	51.89.247.113	192.168.2.4
Aug 1, 2024 06:09:23.117202997 CEST	587	49804	144.217.158.194	192.168.2.4
Aug 1, 2024 06:09:23.117961884 CEST	49819	587	192.168.2.4	103.110.129.117
Aug 1, 2024 06:09:23.122857094 CEST	587	49819	103.110.129.117	192.168.2.4
Aug 1, 2024 06:09:23.122925043 CEST	49819	587	192.168.2.4	103.110.129.117
Aug 1, 2024 06:09:23.137193918 CEST	49801	587	192.168.2.4	165.140.69.186
Aug 1, 2024 06:09:23.142077923 CEST	587	49816	83.243.58.138	192.168.2.4
Aug 1, 2024 06:09:23.147176027 CEST	587	49814	62.149.128.201	192.168.2.4
Aug 1, 2024 06:09:23.152328014 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:23.152496099 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:23.152771950 CEST	49785	587	192.168.2.4	209.71.212.26
Aug 1, 2024 06:09:23.157327890 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:23.168421984 CEST	49804	587	192.168.2.4	144.217.158.194
Aug 1, 2024 06:09:23.175003052 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:23.175164938 CEST	49747	587	192.168.2.4	200.90.133.79
Aug 1, 2024 06:09:23.175365925 CEST	49803	587	192.168.2.4	160.13.60.151
Aug 1, 2024 06:09:23.180033922 CEST	587	49747	200.90.133.79	192.168.2.4
Aug 1, 2024 06:09:23.180186033 CEST	587	49803	160.13.60.151	192.168.2.4
Aug 1, 2024 06:09:23.184031963 CEST	49816	587	192.168.2.4	83.243.58.138
Aug 1, 2024 06:09:23.189610958 CEST	587	49815	210.59.228.38	192.168.2.4
Aug 1, 2024 06:09:23.189779043 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:23.199836016 CEST	49814	587	192.168.2.4	62.149.128.201
Aug 1, 2024 06:09:23.214612961 CEST	587	49806	83.166.143.44	192.168.2.4
Aug 1, 2024 06:09:23.219222069 CEST	587	49802	108.167.180.142	192.168.2.4
Aug 1, 2024 06:09:23.231014967 CEST	49815	587	192.168.2.4	210.59.228.38
Aug 1, 2024 06:09:23.231977940 CEST	587	49787	191.252.112.195	192.168.2.4
Aug 1, 2024 06:09:23.236608982 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:23.236679077 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:23.241769075 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:23.262306929 CEST	49806	587	192.168.2.4	83.166.143.44
Aug 1, 2024 06:09:23.263362885 CEST	49802	587	192.168.2.4	108.167.180.142
Aug 1, 2024 06:09:23.266904116 CEST	587	49740	162.241.219.179	192.168.2.4
Aug 1, 2024 06:09:23.272733927 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:23.277676105 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:23.277817011 CEST	49787	587	192.168.2.4	191.252.112.195
Aug 1, 2024 06:09:23.281641960 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:23.281786919 CEST	49813	587	192.168.2.4	62.149.157.154
Aug 1, 2024 06:09:23.281868935 CEST	49797	587	192.168.2.4	13.250.88.201
Aug 1, 2024 06:09:23.281955004 CEST	49794	587	192.168.2.4	13.250.88.201
Aug 1, 2024 06:09:23.282047987 CEST	49807	587	192.168.2.4	62.149.128.200
Aug 1, 2024 06:09:23.282121897 CEST	49799	587	192.168.2.4	198.54.120.144
Aug 1, 2024 06:09:23.286695957 CEST	587	49813	62.149.157.154	192.168.2.4
Aug 1, 2024 06:09:23.286772013 CEST	587	49797	13.250.88.201	192.168.2.4
Aug 1, 2024 06:09:23.286804914 CEST	587	49794	13.250.88.201	192.168.2.4
Aug 1, 2024 06:09:23.286863089 CEST	587	49807	62.149.128.200	192.168.2.4
Aug 1, 2024 06:09:23.286895037 CEST	587	49799	198.54.120.144	192.168.2.4
Aug 1, 2024 06:09:23.295470953 CEST	587	49808	212.10.10.65	192.168.2.4
Aug 1, 2024 06:09:23.295527935 CEST	587	49808	212.10.10.65	192.168.2.4
Aug 1, 2024 06:09:23.295562983 CEST	587	49808	212.10.10.65	192.168.2.4
Aug 1, 2024 06:09:23.295645952 CEST	49808	587	192.168.2.4	212.10.10.65
Aug 1, 2024 06:09:23.295769930 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:23.295769930 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:23.295974970 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:23.300708055 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:23.300949097 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:23.301893950 CEST	587	49795	51.89.247.113	192.168.2.4
Aug 1, 2024 06:09:23.302067995 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:23.309129953 CEST	49740	587	192.168.2.4	162.241.219.179
Aug 1, 2024 06:09:23.319370985 CEST	587	49806	83.166.143.44	192.168.2.4
Aug 1, 2024 06:09:23.319859028 CEST	587	49810	160.13.60.151	192.168.2.4
Aug 1, 2024 06:09:23.322803974 CEST	587	49809	160.13.60.151	192.168.2.4
Aug 1, 2024 06:09:23.349416018 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:23.349617004 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:23.355084896 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:23.356106043 CEST	49795	587	192.168.2.4	51.89.247.113
Aug 1, 2024 06:09:23.371608019 CEST	49810	587	192.168.2.4	160.13.60.151
Aug 1, 2024 06:09:23.371759892 CEST	49809	587	192.168.2.4	160.13.60.151
Aug 1, 2024 06:09:23.371767998 CEST	49806	587	192.168.2.4	83.166.143.44
Aug 1, 2024 06:09:23.387794971 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:23.388931990 CEST	49804	587	192.168.2.4	144.217.158.194
Aug 1, 2024 06:09:23.388941050 CEST	49801	587	192.168.2.4	165.140.69.186
Aug 1, 2024 06:09:23.388982058 CEST	49816	587	192.168.2.4	83.243.58.138
Aug 1, 2024 06:09:23.389058113 CEST	49814	587	192.168.2.4	62.149.128.201
Aug 1, 2024 06:09:23.390758038 CEST	49820	587	192.168.2.4	13.250.88.201
Aug 1, 2024 06:09:23.393847942 CEST	587	49804	144.217.158.194	192.168.2.4
Aug 1, 2024 06:09:23.393906116 CEST	587	49801	165.140.69.186	192.168.2.4
Aug 1, 2024 06:09:23.393938065 CEST	587	49816	83.243.58.138	192.168.2.4
Aug 1, 2024 06:09:23.393974066 CEST	587	49814	62.149.128.201	192.168.2.4
Aug 1, 2024 06:09:23.397933006 CEST	587	49820	13.250.88.201	192.168.2.4
Aug 1, 2024 06:09:23.398032904 CEST	49820	587	192.168.2.4	13.250.88.201
Aug 1, 2024 06:09:23.398147106 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:23.439795017 CEST	587	49768	103.5.50.24	192.168.2.4
Aug 1, 2024 06:09:23.444319010 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:23.444432020 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:23.449254990 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:23.463850021 CEST	587	49806	83.166.143.44	192.168.2.4
Aug 1, 2024 06:09:23.464050055 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:23.468878984 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:23.486438990 CEST	587	49813	62.149.157.154	192.168.2.4
Aug 1, 2024 06:09:23.486629963 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:23.488940954 CEST	587	49803	160.13.60.151	192.168.2.4
Aug 1, 2024 06:09:23.489937067 CEST	587	49807	62.149.128.200	192.168.2.4
Aug 1, 2024 06:09:23.490195036 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:23.490382910 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:23.490999937 CEST	49815	587	192.168.2.4	210.59.228.38
Aug 1, 2024 06:09:23.492619991 CEST	49821	587	192.168.2.4	209.71.212.26
Aug 1, 2024 06:09:23.495367050 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:23.495877028 CEST	587	49815	210.59.228.38	192.168.2.4
Aug 1, 2024 06:09:23.496521950 CEST	49768	587	192.168.2.4	103.5.50.24
Aug 1, 2024 06:09:23.497415066 CEST	587	49821	209.71.212.26	192.168.2.4
Aug 1, 2024 06:09:23.497524023 CEST	49821	587	192.168.2.4	209.71.212.26
Aug 1, 2024 06:09:23.497618914 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:23.512502909 CEST	49806	587	192.168.2.4	83.166.143.44
Aug 1, 2024 06:09:23.525327921 CEST	587	49780	202.9.85.53	192.168.2.4
Aug 1, 2024 06:09:23.526228905 CEST	49822	587	192.168.2.4	191.252.112.194
Aug 1, 2024 06:09:23.527790070 CEST	49813	587	192.168.2.4	62.149.157.154
Aug 1, 2024 06:09:23.531121016 CEST	587	49822	191.252.112.194	192.168.2.4
Aug 1, 2024 06:09:23.531199932 CEST	49822	587	192.168.2.4	191.252.112.194
Aug 1, 2024 06:09:23.541591883 CEST	587	49736	52.32.228.196	192.168.2.4
Aug 1, 2024 06:09:23.543411016 CEST	49807	587	192.168.2.4	62.149.128.200
Aug 1, 2024 06:09:23.543415070 CEST	49803	587	192.168.2.4	160.13.60.151
Aug 1, 2024 06:09:23.544291019 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:23.544645071 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:23.549443960 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:23.554163933 CEST	587	49817	13.250.88.201	192.168.2.4
Aug 1, 2024 06:09:23.555824041 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:23.555991888 CEST	49740	587	192.168.2.4	162.241.219.179
Aug 1, 2024 06:09:23.556014061 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:23.556101084 CEST	49787	587	192.168.2.4	191.252.112.195
Aug 1, 2024 06:09:23.556248903 CEST	49802	587	192.168.2.4	108.167.180.142
Aug 1, 2024 06:09:23.556248903 CEST	49795	587	192.168.2.4	51.89.247.113
Aug 1, 2024 06:09:23.556337118 CEST	49808	587	192.168.2.4	212.10.10.65
Aug 1, 2024 06:09:23.560801029 CEST	587	49740	162.241.219.179	192.168.2.4
Aug 1, 2024 06:09:23.560950994 CEST	587	49787	191.252.112.195	192.168.2.4
Aug 1, 2024 06:09:23.561028004 CEST	587	49802	108.167.180.142	192.168.2.4
Aug 1, 2024 06:09:23.561058998 CEST	587	49795	51.89.247.113	192.168.2.4
Aug 1, 2024 06:09:23.561103106 CEST	587	49808	212.10.10.65	192.168.2.4
Aug 1, 2024 06:09:23.565277100 CEST	587	49734	50.87.144.214	192.168.2.4
Aug 1, 2024 06:09:23.565310955 CEST	587	49760	64.140.165.234	192.168.2.4
Aug 1, 2024 06:09:23.569847107 CEST	587	49799	198.54.120.144	192.168.2.4
Aug 1, 2024 06:09:23.574693918 CEST	49780	587	192.168.2.4	202.9.85.53
Aug 1, 2024 06:09:23.583560944 CEST	587	49816	83.243.58.138	192.168.2.4
Aug 1, 2024 06:09:23.590452909 CEST	49736	587	192.168.2.4	52.32.228.196
Aug 1, 2024 06:09:23.596612930 CEST	587	49814	62.149.128.201	192.168.2.4
Aug 1, 2024 06:09:23.604332924 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:23.606004953 CEST	49817	587	192.168.2.4	13.250.88.201
Aug 1, 2024 06:09:23.606046915 CEST	49734	587	192.168.2.4	50.87.144.214
Aug 1, 2024 06:09:23.606082916 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:23.606086016 CEST	49760	587	192.168.2.4	64.140.165.234
Aug 1, 2024 06:09:23.610894918 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:23.611433983 CEST	587	49797	13.250.88.201	192.168.2.4
Aug 1, 2024 06:09:23.618108988 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:23.621567011 CEST	49799	587	192.168.2.4	198.54.120.144
Aug 1, 2024 06:09:23.622912884 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:23.626223087 CEST	587	49794	13.250.88.201	192.168.2.4
Aug 1, 2024 06:09:23.628319025 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:23.633075953 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:23.636498928 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:23.637276888 CEST	49816	587	192.168.2.4	83.243.58.138
Aug 1, 2024 06:09:23.639645100 CEST	49809	587	192.168.2.4	160.13.60.151
Aug 1, 2024 06:09:23.639744043 CEST	49810	587	192.168.2.4	160.13.60.151
Aug 1, 2024 06:09:23.644479036 CEST	587	49809	160.13.60.151	192.168.2.4
Aug 1, 2024 06:09:23.644503117 CEST	587	49810	160.13.60.151	192.168.2.4
Aug 1, 2024 06:09:23.652870893 CEST	49814	587	192.168.2.4	62.149.128.201
Aug 1, 2024 06:09:23.653321028 CEST	49797	587	192.168.2.4	13.250.88.201
Aug 1, 2024 06:09:23.668517113 CEST	49794	587	192.168.2.4	13.250.88.201
Aug 1, 2024 06:09:23.684036970 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:23.696839094 CEST	49823	587	192.168.2.4	13.77.77.162
Aug 1, 2024 06:09:23.701659918 CEST	587	49823	13.77.77.162	192.168.2.4
Aug 1, 2024 06:09:23.704241991 CEST	49823	587	192.168.2.4	13.77.77.162
Aug 1, 2024 06:09:23.704299927 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:23.709866047 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:23.716257095 CEST	49768	587	192.168.2.4	103.5.50.24
Aug 1, 2024 06:09:23.721015930 CEST	587	49768	103.5.50.24	192.168.2.4
Aug 1, 2024 06:09:23.722292900 CEST	587	49740	162.241.219.179	192.168.2.4
Aug 1, 2024 06:09:23.722481966 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:23.746156931 CEST	587	49808	212.10.10.65	192.168.2.4
Aug 1, 2024 06:09:23.753659010 CEST	587	49795	51.89.247.113	192.168.2.4
Aug 1, 2024 06:09:23.762186050 CEST	49740	587	192.168.2.4	162.241.219.179
Aug 1, 2024 06:09:23.768282890 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:23.769020081 CEST	587	49787	191.252.112.195	192.168.2.4
Aug 1, 2024 06:09:23.769139051 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:23.773987055 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:23.776148081 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:23.780951023 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:23.792789936 CEST	49824	587	192.168.2.4	41.110.190.122
Aug 1, 2024 06:09:23.793401957 CEST	49808	587	192.168.2.4	212.10.10.65
Aug 1, 2024 06:09:23.796370983 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:23.797764063 CEST	587	49824	41.110.190.122	192.168.2.4
Aug 1, 2024 06:09:23.797844887 CEST	49824	587	192.168.2.4	41.110.190.122
Aug 1, 2024 06:09:23.798006058 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:23.798007011 CEST	49803	587	192.168.2.4	160.13.60.151
Aug 1, 2024 06:09:23.798007011 CEST	49806	587	192.168.2.4	83.166.143.44
Aug 1, 2024 06:09:23.798104048 CEST	49807	587	192.168.2.4	62.149.128.200
Aug 1, 2024 06:09:23.798176050 CEST	49813	587	192.168.2.4	62.149.157.154
Aug 1, 2024 06:09:23.798748016 CEST	587	49815	210.59.228.38	192.168.2.4
Aug 1, 2024 06:09:23.802875996 CEST	587	49803	160.13.60.151	192.168.2.4
Aug 1, 2024 06:09:23.803028107 CEST	587	49806	83.166.143.44	192.168.2.4
Aug 1, 2024 06:09:23.803059101 CEST	587	49807	62.149.128.200	192.168.2.4
Aug 1, 2024 06:09:23.803093910 CEST	587	49813	62.149.157.154	192.168.2.4
Aug 1, 2024 06:09:23.809051991 CEST	49787	587	192.168.2.4	191.252.112.195
Aug 1, 2024 06:09:23.809103012 CEST	49795	587	192.168.2.4	51.89.247.113
Aug 1, 2024 06:09:23.840389013 CEST	49815	587	192.168.2.4	210.59.228.38
Aug 1, 2024 06:09:23.844295979 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:23.848131895 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:23.853060007 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:23.867892027 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:23.868187904 CEST	49780	587	192.168.2.4	202.9.85.53
Aug 1, 2024 06:09:23.868272066 CEST	49816	587	192.168.2.4	83.243.58.138
Aug 1, 2024 06:09:23.868343115 CEST	49760	587	192.168.2.4	64.140.165.234
Aug 1, 2024 06:09:23.868419886 CEST	49817	587	192.168.2.4	13.250.88.201
Aug 1, 2024 06:09:23.868501902 CEST	49734	587	192.168.2.4	50.87.144.214
Aug 1, 2024 06:09:23.868583918 CEST	49799	587	192.168.2.4	198.54.120.144
Aug 1, 2024 06:09:23.868748903 CEST	49814	587	192.168.2.4	62.149.128.201
Aug 1, 2024 06:09:23.869980097 CEST	49736	587	192.168.2.4	52.32.228.196
Aug 1, 2024 06:09:23.873173952 CEST	587	49780	202.9.85.53	192.168.2.4
Aug 1, 2024 06:09:23.873188972 CEST	587	49816	83.243.58.138	192.168.2.4
Aug 1, 2024 06:09:23.873200893 CEST	587	49760	64.140.165.234	192.168.2.4
Aug 1, 2024 06:09:23.873214006 CEST	587	49817	13.250.88.201	192.168.2.4
Aug 1, 2024 06:09:23.873229027 CEST	587	49734	50.87.144.214	192.168.2.4
Aug 1, 2024 06:09:23.873277903 CEST	587	49799	198.54.120.144	192.168.2.4
Aug 1, 2024 06:09:23.873452902 CEST	587	49814	62.149.128.201	192.168.2.4
Aug 1, 2024 06:09:23.874700069 CEST	587	49736	52.32.228.196	192.168.2.4
Aug 1, 2024 06:09:23.918493032 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:23.990164042 CEST	587	49810	160.13.60.151	192.168.2.4
Aug 1, 2024 06:09:23.990550041 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:23.996558905 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:23.997556925 CEST	587	49809	160.13.60.151	192.168.2.4
Aug 1, 2024 06:09:23.998137951 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:23.998142958 CEST	49797	587	192.168.2.4	13.250.88.201
Aug 1, 2024 06:09:23.999187946 CEST	49794	587	192.168.2.4	13.250.88.201
Aug 1, 2024 06:09:24.002265930 CEST	587	49806	83.166.143.44	192.168.2.4
Aug 1, 2024 06:09:24.002912045 CEST	587	49797	13.250.88.201	192.168.2.4
Aug 1, 2024 06:09:24.003873110 CEST	587	49794	13.250.88.201	192.168.2.4
Aug 1, 2024 06:09:24.005810022 CEST	587	49807	62.149.128.200	192.168.2.4
Aug 1, 2024 06:09:24.007595062 CEST	587	49813	62.149.157.154	192.168.2.4
Aug 1, 2024 06:09:24.007638931 CEST	587	49813	62.149.157.154	192.168.2.4
Aug 1, 2024 06:09:24.007653952 CEST	587	49813	62.149.157.154	192.168.2.4
Aug 1, 2024 06:09:24.007671118 CEST	587	49813	62.149.157.154	192.168.2.4
Aug 1, 2024 06:09:24.007716894 CEST	49813	587	192.168.2.4	62.149.157.154
Aug 1, 2024 06:09:24.007863045 CEST	49813	587	192.168.2.4	62.149.157.154
Aug 1, 2024 06:09:24.008090019 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:24.008090019 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:24.012886047 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:24.012898922 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:24.012967110 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:24.030003071 CEST	587	49760	64.140.165.234	192.168.2.4
Aug 1, 2024 06:09:24.030736923 CEST	587	49821	209.71.212.26	192.168.2.4
Aug 1, 2024 06:09:24.030803919 CEST	587	49734	50.87.144.214	192.168.2.4
Aug 1, 2024 06:09:24.030973911 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:24.036412001 CEST	587	49736	52.32.228.196	192.168.2.4
Aug 1, 2024 06:09:24.043405056 CEST	49806	587	192.168.2.4	83.166.143.44
Aug 1, 2024 06:09:24.043411970 CEST	49810	587	192.168.2.4	160.13.60.151
Aug 1, 2024 06:09:24.043545961 CEST	49809	587	192.168.2.4	160.13.60.151
Aug 1, 2024 06:09:24.059027910 CEST	49807	587	192.168.2.4	62.149.128.200
Aug 1, 2024 06:09:24.062764883 CEST	587	49768	103.5.50.24	192.168.2.4
Aug 1, 2024 06:09:24.064233065 CEST	587	49816	83.243.58.138	192.168.2.4
Aug 1, 2024 06:09:24.074666023 CEST	49734	587	192.168.2.4	50.87.144.214
Aug 1, 2024 06:09:24.074666023 CEST	49760	587	192.168.2.4	64.140.165.234
Aug 1, 2024 06:09:24.074795961 CEST	49821	587	192.168.2.4	209.71.212.26
Aug 1, 2024 06:09:24.080179930 CEST	587	49814	62.149.128.201	192.168.2.4
Aug 1, 2024 06:09:24.080193043 CEST	587	49814	62.149.128.201	192.168.2.4
Aug 1, 2024 06:09:24.080209970 CEST	587	49814	62.149.128.201	192.168.2.4
Aug 1, 2024 06:09:24.080241919 CEST	49814	587	192.168.2.4	62.149.128.201
Aug 1, 2024 06:09:24.080276966 CEST	587	49814	62.149.128.201	192.168.2.4
Aug 1, 2024 06:09:24.080290079 CEST	587	49814	62.149.128.201	192.168.2.4
Aug 1, 2024 06:09:24.080303907 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:24.080317974 CEST	49814	587	192.168.2.4	62.149.128.201
Aug 1, 2024 06:09:24.080348969 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:24.080471992 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:24.080694914 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:24.082196951 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:24.084810019 CEST	49795	587	192.168.2.4	51.89.247.113
Aug 1, 2024 06:09:24.084928989 CEST	49808	587	192.168.2.4	212.10.10.65
Aug 1, 2024 06:09:24.085022926 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:24.085280895 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:24.085293055 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:24.085304976 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:24.085437059 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:24.085565090 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:24.089584112 CEST	587	49795	51.89.247.113	192.168.2.4
Aug 1, 2024 06:09:24.089658022 CEST	587	49808	212.10.10.65	192.168.2.4
Aug 1, 2024 06:09:24.091130018 CEST	49736	587	192.168.2.4	52.32.228.196
Aug 1, 2024 06:09:24.091588974 CEST	49740	587	192.168.2.4	162.241.219.179
Aug 1, 2024 06:09:24.091739893 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:24.103676081 CEST	587	49813	62.149.157.154	192.168.2.4
Aug 1, 2024 06:09:24.103900909 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:24.104095936 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:24.104146004 CEST	587	49790	192.185.177.117	192.168.2.4
Aug 1, 2024 06:09:24.104181051 CEST	587	49792	84.2.43.67	192.168.2.4
Aug 1, 2024 06:09:24.104254007 CEST	587	49740	162.241.219.179	192.168.2.4
Aug 1, 2024 06:09:24.105242968 CEST	49740	587	192.168.2.4	162.241.219.179
Aug 1, 2024 06:09:24.105894089 CEST	49768	587	192.168.2.4	103.5.50.24
Aug 1, 2024 06:09:24.105895996 CEST	49816	587	192.168.2.4	83.243.58.138
Aug 1, 2024 06:09:24.108855963 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:24.108900070 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:24.108963013 CEST	587	49803	160.13.60.151	192.168.2.4
Aug 1, 2024 06:09:24.113610029 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:24.116051912 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:24.118153095 CEST	49825	587	192.168.2.4	31.179.210.222
Aug 1, 2024 06:09:24.120798111 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:24.121526003 CEST	49814	587	192.168.2.4	62.149.128.201
Aug 1, 2024 06:09:24.122881889 CEST	587	49825	31.179.210.222	192.168.2.4
Aug 1, 2024 06:09:24.122947931 CEST	49825	587	192.168.2.4	31.179.210.222
Aug 1, 2024 06:09:24.123070002 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:24.128340006 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:24.152775049 CEST	49813	587	192.168.2.4	62.149.157.154
Aug 1, 2024 06:09:24.152785063 CEST	49792	587	192.168.2.4	84.2.43.67
Aug 1, 2024 06:09:24.152785063 CEST	49803	587	192.168.2.4	160.13.60.151
Aug 1, 2024 06:09:24.152798891 CEST	49790	587	192.168.2.4	192.185.177.117
Aug 1, 2024 06:09:24.156450987 CEST	49826	587	192.168.2.4	37.120.193.124
Aug 1, 2024 06:09:24.161204100 CEST	587	49826	37.120.193.124	192.168.2.4
Aug 1, 2024 06:09:24.161276102 CEST	49826	587	192.168.2.4	37.120.193.124
Aug 1, 2024 06:09:24.161396980 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:24.166675091 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:24.170705080 CEST	587	49814	62.149.128.201	192.168.2.4
Aug 1, 2024 06:09:24.170912027 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:24.171936989 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:24.172068119 CEST	49787	587	192.168.2.4	191.252.112.195
Aug 1, 2024 06:09:24.172152042 CEST	49815	587	192.168.2.4	210.59.228.38
Aug 1, 2024 06:09:24.176795959 CEST	587	49787	191.252.112.195	192.168.2.4
Aug 1, 2024 06:09:24.176863909 CEST	587	49815	210.59.228.38	192.168.2.4
Aug 1, 2024 06:09:24.215388060 CEST	49814	587	192.168.2.4	62.149.128.201
Aug 1, 2024 06:09:24.215389013 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:24.220227003 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:24.223315001 CEST	587	49780	202.9.85.53	192.168.2.4
Aug 1, 2024 06:09:24.223329067 CEST	587	49823	13.77.77.162	192.168.2.4
Aug 1, 2024 06:09:24.223539114 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:24.235928059 CEST	587	49791	84.2.43.67	192.168.2.4
Aug 1, 2024 06:09:24.253688097 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:24.253743887 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:24.253829956 CEST	49810	587	192.168.2.4	160.13.60.151
Aug 1, 2024 06:09:24.254990101 CEST	49809	587	192.168.2.4	160.13.60.151
Aug 1, 2024 06:09:24.255074024 CEST	49806	587	192.168.2.4	83.166.143.44
Aug 1, 2024 06:09:24.255173922 CEST	49807	587	192.168.2.4	62.149.128.200
Aug 1, 2024 06:09:24.256658077 CEST	49827	587	192.168.2.4	13.250.88.201
Aug 1, 2024 06:09:24.258595943 CEST	587	49810	160.13.60.151	192.168.2.4
Aug 1, 2024 06:09:24.259747028 CEST	587	49809	160.13.60.151	192.168.2.4
Aug 1, 2024 06:09:24.259845018 CEST	587	49806	83.166.143.44	192.168.2.4
Aug 1, 2024 06:09:24.259921074 CEST	587	49807	62.149.128.200	192.168.2.4
Aug 1, 2024 06:09:24.261406898 CEST	587	49827	13.250.88.201	192.168.2.4
Aug 1, 2024 06:09:24.261471033 CEST	49827	587	192.168.2.4	13.250.88.201
Aug 1, 2024 06:09:24.274389982 CEST	587	49808	212.10.10.65	192.168.2.4
Aug 1, 2024 06:09:24.277822971 CEST	49780	587	192.168.2.4	202.9.85.53
Aug 1, 2024 06:09:24.277838945 CEST	49791	587	192.168.2.4	84.2.43.67
Aug 1, 2024 06:09:24.277842045 CEST	49823	587	192.168.2.4	13.77.77.162
Aug 1, 2024 06:09:24.279675961 CEST	587	49795	51.89.247.113	192.168.2.4
Aug 1, 2024 06:09:24.284451008 CEST	587	49820	13.250.88.201	192.168.2.4
Aug 1, 2024 06:09:24.304282904 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:24.304492950 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:24.309447050 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:24.322844028 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:24.323285103 CEST	49808	587	192.168.2.4	212.10.10.65
Aug 1, 2024 06:09:24.323652029 CEST	49760	587	192.168.2.4	64.140.165.234
Aug 1, 2024 06:09:24.323849916 CEST	49821	587	192.168.2.4	209.71.212.26
Aug 1, 2024 06:09:24.323972940 CEST	49816	587	192.168.2.4	83.243.58.138
Aug 1, 2024 06:09:24.324079990 CEST	49768	587	192.168.2.4	103.5.50.24
Aug 1, 2024 06:09:24.324743986 CEST	49795	587	192.168.2.4	51.89.247.113
Aug 1, 2024 06:09:24.325078011 CEST	49736	587	192.168.2.4	52.32.228.196
Aug 1, 2024 06:09:24.325078964 CEST	49820	587	192.168.2.4	13.250.88.201
Aug 1, 2024 06:09:24.325221062 CEST	49734	587	192.168.2.4	50.87.144.214
Aug 1, 2024 06:09:24.325254917 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:24.328516006 CEST	587	49760	64.140.165.234	192.168.2.4
Aug 1, 2024 06:09:24.328613997 CEST	587	49821	209.71.212.26	192.168.2.4
Aug 1, 2024 06:09:24.328710079 CEST	587	49816	83.243.58.138	192.168.2.4
Aug 1, 2024 06:09:24.328840971 CEST	587	49768	103.5.50.24	192.168.2.4
Aug 1, 2024 06:09:24.330153942 CEST	587	49736	52.32.228.196	192.168.2.4
Aug 1, 2024 06:09:24.330207109 CEST	49736	587	192.168.2.4	52.32.228.196
Aug 1, 2024 06:09:24.330734015 CEST	587	49734	50.87.144.214	192.168.2.4
Aug 1, 2024 06:09:24.330779076 CEST	49734	587	192.168.2.4	50.87.144.214
Aug 1, 2024 06:09:24.333565950 CEST	587	49786	160.13.60.151	192.168.2.4
Aug 1, 2024 06:09:24.333802938 CEST	587	49786	160.13.60.151	192.168.2.4
Aug 1, 2024 06:09:24.333852053 CEST	49786	587	192.168.2.4	160.13.60.151
Aug 1, 2024 06:09:24.333916903 CEST	49786	587	192.168.2.4	160.13.60.151
Aug 1, 2024 06:09:24.338665962 CEST	587	49786	160.13.60.151	192.168.2.4
Aug 1, 2024 06:09:24.372318029 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:24.372375965 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:24.377872944 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:24.389585018 CEST	587	49787	191.252.112.195	192.168.2.4
Aug 1, 2024 06:09:24.389870882 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:24.394673109 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:24.434124947 CEST	49787	587	192.168.2.4	191.252.112.195
Aug 1, 2024 06:09:24.453917980 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:24.454061985 CEST	49792	587	192.168.2.4	84.2.43.67
Aug 1, 2024 06:09:24.454144001 CEST	49803	587	192.168.2.4	160.13.60.151
Aug 1, 2024 06:09:24.454232931 CEST	49790	587	192.168.2.4	192.185.177.117
Aug 1, 2024 06:09:24.454314947 CEST	49813	587	192.168.2.4	62.149.157.154
Aug 1, 2024 06:09:24.455094099 CEST	49814	587	192.168.2.4	62.149.128.201
Aug 1, 2024 06:09:24.459371090 CEST	587	49792	84.2.43.67	192.168.2.4
Aug 1, 2024 06:09:24.459386110 CEST	587	49803	160.13.60.151	192.168.2.4
Aug 1, 2024 06:09:24.459868908 CEST	587	49790	192.185.177.117	192.168.2.4
Aug 1, 2024 06:09:24.459883928 CEST	587	49813	62.149.157.154	192.168.2.4
Aug 1, 2024 06:09:24.460422993 CEST	587	49814	62.149.128.201	192.168.2.4
Aug 1, 2024 06:09:24.460566044 CEST	587	49817	13.250.88.201	192.168.2.4
Aug 1, 2024 06:09:24.460889101 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:24.465962887 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:24.487240076 CEST	587	49794	13.250.88.201	192.168.2.4
Aug 1, 2024 06:09:24.487521887 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:24.492269039 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:24.493786097 CEST	49828	587	192.168.2.4	178.251.28.102
Aug 1, 2024 06:09:24.500036001 CEST	587	49828	178.251.28.102	192.168.2.4
Aug 1, 2024 06:09:24.500154018 CEST	49828	587	192.168.2.4	178.251.28.102
Aug 1, 2024 06:09:24.500298023 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:24.505523920 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:24.510221958 CEST	587	49807	62.149.128.200	192.168.2.4
Aug 1, 2024 06:09:24.510396004 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:24.511631966 CEST	587	49797	13.250.88.201	192.168.2.4
Aug 1, 2024 06:09:24.512171030 CEST	49817	587	192.168.2.4	13.250.88.201
Aug 1, 2024 06:09:24.515141010 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:24.515187979 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:24.519993067 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:24.526128054 CEST	587	49806	83.166.143.44	192.168.2.4
Aug 1, 2024 06:09:24.526462078 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:24.527751923 CEST	49794	587	192.168.2.4	13.250.88.201
Aug 1, 2024 06:09:24.529015064 CEST	587	49815	210.59.228.38	192.168.2.4
Aug 1, 2024 06:09:24.531245947 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:24.531289101 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:24.534476995 CEST	587	49748	162.241.219.218	192.168.2.4
Aug 1, 2024 06:09:24.536071062 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:24.536125898 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:24.540994883 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:24.553080082 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:24.553391933 CEST	49780	587	192.168.2.4	202.9.85.53
Aug 1, 2024 06:09:24.553483009 CEST	49823	587	192.168.2.4	13.77.77.162
Aug 1, 2024 06:09:24.553560972 CEST	49791	587	192.168.2.4	84.2.43.67
Aug 1, 2024 06:09:24.558372974 CEST	587	49780	202.9.85.53	192.168.2.4
Aug 1, 2024 06:09:24.558406115 CEST	587	49823	13.77.77.162	192.168.2.4
Aug 1, 2024 06:09:24.558442116 CEST	587	49791	84.2.43.67	192.168.2.4
Aug 1, 2024 06:09:24.559042931 CEST	49807	587	192.168.2.4	62.149.128.200
Aug 1, 2024 06:09:24.560106039 CEST	49797	587	192.168.2.4	13.250.88.201
Aug 1, 2024 06:09:24.563239098 CEST	587	49810	160.13.60.151	192.168.2.4
Aug 1, 2024 06:09:24.563419104 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:24.567123890 CEST	587	49816	83.243.58.138	192.168.2.4
Aug 1, 2024 06:09:24.567234993 CEST	587	49816	83.243.58.138	192.168.2.4
Aug 1, 2024 06:09:24.567285061 CEST	49816	587	192.168.2.4	83.243.58.138
Aug 1, 2024 06:09:24.567322016 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:24.567322016 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:24.567493916 CEST	587	49816	83.243.58.138	192.168.2.4
Aug 1, 2024 06:09:24.567580938 CEST	587	49816	83.243.58.138	192.168.2.4
Aug 1, 2024 06:09:24.567629099 CEST	49816	587	192.168.2.4	83.243.58.138
Aug 1, 2024 06:09:24.567691088 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:24.568443060 CEST	587	49809	160.13.60.151	192.168.2.4
Aug 1, 2024 06:09:24.568474054 CEST	587	49790	192.185.177.117	192.168.2.4
Aug 1, 2024 06:09:24.572132111 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:24.572192907 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:24.572540998 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:24.574655056 CEST	49748	587	192.168.2.4	162.241.219.218
Aug 1, 2024 06:09:24.574656963 CEST	49815	587	192.168.2.4	210.59.228.38
Aug 1, 2024 06:09:24.574660063 CEST	49806	587	192.168.2.4	83.166.143.44
Aug 1, 2024 06:09:24.576996088 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:24.594582081 CEST	587	49766	190.105.202.10	192.168.2.4
Aug 1, 2024 06:09:24.594779015 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:24.605920076 CEST	49810	587	192.168.2.4	160.13.60.151
Aug 1, 2024 06:09:24.618402958 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:24.618669987 CEST	49820	587	192.168.2.4	13.250.88.201
Aug 1, 2024 06:09:24.618670940 CEST	49808	587	192.168.2.4	212.10.10.65
Aug 1, 2024 06:09:24.621535063 CEST	49790	587	192.168.2.4	192.185.177.117
Aug 1, 2024 06:09:24.621545076 CEST	49809	587	192.168.2.4	160.13.60.151
Aug 1, 2024 06:09:24.622504950 CEST	49795	587	192.168.2.4	51.89.247.113
Aug 1, 2024 06:09:24.622637987 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:24.623507977 CEST	587	49820	13.250.88.201	192.168.2.4
Aug 1, 2024 06:09:24.623538017 CEST	587	49808	212.10.10.65	192.168.2.4
Aug 1, 2024 06:09:24.627552986 CEST	587	49795	51.89.247.113	192.168.2.4
Aug 1, 2024 06:09:24.627659082 CEST	49795	587	192.168.2.4	51.89.247.113
Aug 1, 2024 06:09:24.637209892 CEST	49766	587	192.168.2.4	190.105.202.10
Aug 1, 2024 06:09:24.641500950 CEST	587	49821	209.71.212.26	192.168.2.4
Aug 1, 2024 06:09:24.648015022 CEST	587	49792	84.2.43.67	192.168.2.4
Aug 1, 2024 06:09:24.648051977 CEST	587	49792	84.2.43.67	192.168.2.4
Aug 1, 2024 06:09:24.648112059 CEST	587	49792	84.2.43.67	192.168.2.4
Aug 1, 2024 06:09:24.648226976 CEST	49792	587	192.168.2.4	84.2.43.67
Aug 1, 2024 06:09:24.648226976 CEST	49792	587	192.168.2.4	84.2.43.67
Aug 1, 2024 06:09:24.648705006 CEST	49792	587	192.168.2.4	84.2.43.67
Aug 1, 2024 06:09:24.653462887 CEST	587	49792	84.2.43.67	192.168.2.4
Aug 1, 2024 06:09:24.659765005 CEST	587	49813	62.149.157.154	192.168.2.4
Aug 1, 2024 06:09:24.660795927 CEST	587	49823	13.77.77.162	192.168.2.4
Aug 1, 2024 06:09:24.663561106 CEST	587	49814	62.149.128.201	192.168.2.4
Aug 1, 2024 06:09:24.668288946 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:24.668450117 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:24.673254013 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:24.684154034 CEST	49821	587	192.168.2.4	209.71.212.26
Aug 1, 2024 06:09:24.714653969 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:24.715295076 CEST	49814	587	192.168.2.4	62.149.128.201
Aug 1, 2024 06:09:24.715296984 CEST	49813	587	192.168.2.4	62.149.157.154
Aug 1, 2024 06:09:24.715454102 CEST	49823	587	192.168.2.4	13.77.77.162
Aug 1, 2024 06:09:24.718058109 CEST	49829	587	192.168.2.4	191.252.112.195
Aug 1, 2024 06:09:24.722891092 CEST	587	49829	191.252.112.195	192.168.2.4
Aug 1, 2024 06:09:24.722954035 CEST	49829	587	192.168.2.4	191.252.112.195
Aug 1, 2024 06:09:24.723098040 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:24.728262901 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:24.747009039 CEST	587	49791	84.2.43.67	192.168.2.4
Aug 1, 2024 06:09:24.747117043 CEST	587	49791	84.2.43.67	192.168.2.4
Aug 1, 2024 06:09:24.747163057 CEST	49791	587	192.168.2.4	84.2.43.67
Aug 1, 2024 06:09:24.747247934 CEST	587	49791	84.2.43.67	192.168.2.4
Aug 1, 2024 06:09:24.747288942 CEST	49791	587	192.168.2.4	84.2.43.67
Aug 1, 2024 06:09:24.747675896 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:24.747840881 CEST	49791	587	192.168.2.4	84.2.43.67
Aug 1, 2024 06:09:24.752522945 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:24.752553940 CEST	587	49791	84.2.43.67	192.168.2.4
Aug 1, 2024 06:09:24.752576113 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:24.757381916 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:24.759953022 CEST	587	49803	160.13.60.151	192.168.2.4
Aug 1, 2024 06:09:24.760157108 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:24.764970064 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:24.767390013 CEST	587	49818	103.86.139.86	192.168.2.4
Aug 1, 2024 06:09:24.767608881 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:24.772367954 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:24.796293020 CEST	587	49824	41.110.190.122	192.168.2.4
Aug 1, 2024 06:09:24.796478987 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:24.801273108 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:24.808413982 CEST	587	49808	212.10.10.65	192.168.2.4
Aug 1, 2024 06:09:24.808720112 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:24.809015989 CEST	49803	587	192.168.2.4	160.13.60.151
Aug 1, 2024 06:09:24.812103033 CEST	49818	587	192.168.2.4	103.86.139.86
Aug 1, 2024 06:09:24.813510895 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:24.815078020 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:24.815241098 CEST	49817	587	192.168.2.4	13.250.88.201
Aug 1, 2024 06:09:24.815332890 CEST	49794	587	192.168.2.4	13.250.88.201
Aug 1, 2024 06:09:24.815431118 CEST	49807	587	192.168.2.4	62.149.128.200
Aug 1, 2024 06:09:24.815510035 CEST	49797	587	192.168.2.4	13.250.88.201
Aug 1, 2024 06:09:24.815579891 CEST	49806	587	192.168.2.4	83.166.143.44
Aug 1, 2024 06:09:24.815659046 CEST	49748	587	192.168.2.4	162.241.219.218
Aug 1, 2024 06:09:24.815745115 CEST	49810	587	192.168.2.4	160.13.60.151
Aug 1, 2024 06:09:24.815830946 CEST	49815	587	192.168.2.4	210.59.228.38
Aug 1, 2024 06:09:24.819988966 CEST	587	49817	13.250.88.201	192.168.2.4
Aug 1, 2024 06:09:24.820019007 CEST	587	49794	13.250.88.201	192.168.2.4
Aug 1, 2024 06:09:24.820135117 CEST	587	49807	62.149.128.200	192.168.2.4
Aug 1, 2024 06:09:24.820538044 CEST	587	49797	13.250.88.201	192.168.2.4
Aug 1, 2024 06:09:24.820580959 CEST	587	49806	83.166.143.44	192.168.2.4
Aug 1, 2024 06:09:24.820595026 CEST	587	49748	162.241.219.218	192.168.2.4
Aug 1, 2024 06:09:24.820607901 CEST	587	49810	160.13.60.151	192.168.2.4
Aug 1, 2024 06:09:24.820638895 CEST	587	49815	210.59.228.38	192.168.2.4
Aug 1, 2024 06:09:24.840274096 CEST	49824	587	192.168.2.4	41.110.190.122
Aug 1, 2024 06:09:24.855914116 CEST	49808	587	192.168.2.4	212.10.10.65
Aug 1, 2024 06:09:24.855914116 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:24.859502077 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:24.859649897 CEST	49790	587	192.168.2.4	192.185.177.117
Aug 1, 2024 06:09:24.859730959 CEST	49809	587	192.168.2.4	160.13.60.151
Aug 1, 2024 06:09:24.859803915 CEST	49766	587	192.168.2.4	190.105.202.10
Aug 1, 2024 06:09:24.859880924 CEST	49816	587	192.168.2.4	83.243.58.138
Aug 1, 2024 06:09:24.864424944 CEST	587	49790	192.185.177.117	192.168.2.4
Aug 1, 2024 06:09:24.864526987 CEST	587	49809	160.13.60.151	192.168.2.4
Aug 1, 2024 06:09:24.864564896 CEST	587	49766	190.105.202.10	192.168.2.4
Aug 1, 2024 06:09:24.864618063 CEST	587	49816	83.243.58.138	192.168.2.4
Aug 1, 2024 06:09:24.867530107 CEST	49830	587	192.168.2.4	210.116.104.65
Aug 1, 2024 06:09:24.872442961 CEST	587	49830	210.116.104.65	192.168.2.4
Aug 1, 2024 06:09:24.872622013 CEST	49830	587	192.168.2.4	210.116.104.65
Aug 1, 2024 06:09:24.872652054 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:24.896776915 CEST	587	49826	37.120.193.124	192.168.2.4
Aug 1, 2024 06:09:24.924580097 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:24.924830914 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:24.929651022 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:24.935389042 CEST	587	49825	31.179.210.222	192.168.2.4
Aug 1, 2024 06:09:24.935702085 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:24.937756062 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:24.937813044 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:24.937829971 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:24.937844992 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:24.937858105 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:24.937892914 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:24.937892914 CEST	49821	587	192.168.2.4	209.71.212.26
Aug 1, 2024 06:09:24.937899113 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:24.937932968 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:24.937943935 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:24.937967062 CEST	49813	587	192.168.2.4	62.149.157.154
Aug 1, 2024 06:09:24.937988043 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:24.938021898 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:24.938025951 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:24.938025951 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:24.938038111 CEST	49814	587	192.168.2.4	62.149.128.201
Aug 1, 2024 06:09:24.938148975 CEST	49823	587	192.168.2.4	13.77.77.162
Aug 1, 2024 06:09:24.938157082 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:24.938185930 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:24.938199043 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:24.938220024 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:24.938246012 CEST	49803	587	192.168.2.4	160.13.60.151
Aug 1, 2024 06:09:24.938271999 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:24.938309908 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:24.938309908 CEST	49803	587	192.168.2.4	160.13.60.151
Aug 1, 2024 06:09:24.938344002 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:24.938359022 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:24.938378096 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:24.938389063 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:24.941626072 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:24.941685915 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:24.941705942 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:24.941721916 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:24.941757917 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:24.941772938 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:24.941800117 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:24.941833019 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:24.941836119 CEST	49803	587	192.168.2.4	160.13.60.151
Aug 1, 2024 06:09:24.941839933 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:24.941926003 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:24.941961050 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:24.941967964 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:24.942240000 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:24.942287922 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:24.942292929 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:24.942327976 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:24.942362070 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:24.942365885 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:24.942397118 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:24.942435026 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:24.942972898 CEST	587	49821	209.71.212.26	192.168.2.4
Aug 1, 2024 06:09:24.943191051 CEST	587	49813	62.149.157.154	192.168.2.4
Aug 1, 2024 06:09:24.943312883 CEST	587	49814	62.149.128.201	192.168.2.4
Aug 1, 2024 06:09:24.943342924 CEST	587	49823	13.77.77.162	192.168.2.4
Aug 1, 2024 06:09:24.943373919 CEST	587	49803	160.13.60.151	192.168.2.4
Aug 1, 2024 06:09:24.943424940 CEST	49803	587	192.168.2.4	160.13.60.151
Aug 1, 2024 06:09:24.943427086 CEST	587	49803	160.13.60.151	192.168.2.4
Aug 1, 2024 06:09:24.943459988 CEST	587	49803	160.13.60.151	192.168.2.4
Aug 1, 2024 06:09:24.943475962 CEST	49803	587	192.168.2.4	160.13.60.151
Aug 1, 2024 06:09:24.943501949 CEST	49803	587	192.168.2.4	160.13.60.151
Aug 1, 2024 06:09:24.943552971 CEST	587	49803	160.13.60.151	192.168.2.4
Aug 1, 2024 06:09:24.943600893 CEST	49803	587	192.168.2.4	160.13.60.151
Aug 1, 2024 06:09:24.943631887 CEST	587	49803	160.13.60.151	192.168.2.4
Aug 1, 2024 06:09:24.943659067 CEST	587	49803	160.13.60.151	192.168.2.4
Aug 1, 2024 06:09:24.943685055 CEST	49803	587	192.168.2.4	160.13.60.151
Aug 1, 2024 06:09:24.943708897 CEST	587	49803	160.13.60.151	192.168.2.4
Aug 1, 2024 06:09:24.943737030 CEST	587	49803	160.13.60.151	192.168.2.4
Aug 1, 2024 06:09:24.946121931 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:24.946258068 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:24.946300983 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:24.946310997 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:24.946346998 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:24.946347952 CEST	49803	587	192.168.2.4	160.13.60.151
Aug 1, 2024 06:09:24.946376085 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:24.946388006 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:24.946428061 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:24.946472883 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:24.946479082 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:24.946511030 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:24.946544886 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:24.946547985 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:24.946578026 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:24.946619034 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:24.946629047 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:24.946662903 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:24.946696043 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:24.946701050 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:24.946726084 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:24.946772099 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:24.946779013 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:24.946811914 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:24.946850061 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:24.946866035 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:24.946893930 CEST	587	49803	160.13.60.151	192.168.2.4
Aug 1, 2024 06:09:24.946921110 CEST	587	49803	160.13.60.151	192.168.2.4
Aug 1, 2024 06:09:24.946933985 CEST	49803	587	192.168.2.4	160.13.60.151
Aug 1, 2024 06:09:24.946948051 CEST	587	49803	160.13.60.151	192.168.2.4
Aug 1, 2024 06:09:24.946966887 CEST	49803	587	192.168.2.4	160.13.60.151
Aug 1, 2024 06:09:24.946988106 CEST	49803	587	192.168.2.4	160.13.60.151
Aug 1, 2024 06:09:24.948256016 CEST	587	49803	160.13.60.151	192.168.2.4
Aug 1, 2024 06:09:24.948283911 CEST	587	49803	160.13.60.151	192.168.2.4
Aug 1, 2024 06:09:24.948312044 CEST	49803	587	192.168.2.4	160.13.60.151
Aug 1, 2024 06:09:24.948326111 CEST	49803	587	192.168.2.4	160.13.60.151
Aug 1, 2024 06:09:24.948334932 CEST	587	49803	160.13.60.151	192.168.2.4
Aug 1, 2024 06:09:24.948362112 CEST	587	49803	160.13.60.151	192.168.2.4
Aug 1, 2024 06:09:24.948470116 CEST	587	49803	160.13.60.151	192.168.2.4
Aug 1, 2024 06:09:24.948555946 CEST	587	49803	160.13.60.151	192.168.2.4
Aug 1, 2024 06:09:24.948723078 CEST	587	49803	160.13.60.151	192.168.2.4
Aug 1, 2024 06:09:24.949660063 CEST	49826	587	192.168.2.4	37.120.193.124
Aug 1, 2024 06:09:24.950005054 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:24.950056076 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:24.950058937 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:24.950088024 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:24.950138092 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:24.950145006 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:24.950193882 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:24.950227976 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:24.950233936 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:24.950261116 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:24.950301886 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:24.950314045 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:24.950345993 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:24.950381041 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:24.950386047 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:24.950432062 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:24.950465918 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:24.950469971 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:24.950499058 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:24.950535059 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:24.950536966 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:24.950567961 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:24.950599909 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:24.950607061 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:24.951463938 CEST	49803	587	192.168.2.4	160.13.60.151
Aug 1, 2024 06:09:24.951539993 CEST	49803	587	192.168.2.4	160.13.60.151
Aug 1, 2024 06:09:24.951637983 CEST	49803	587	192.168.2.4	160.13.60.151
Aug 1, 2024 06:09:24.951725006 CEST	49803	587	192.168.2.4	160.13.60.151
Aug 1, 2024 06:09:24.951781034 CEST	587	49803	160.13.60.151	192.168.2.4
Aug 1, 2024 06:09:24.951905012 CEST	587	49803	160.13.60.151	192.168.2.4
Aug 1, 2024 06:09:24.952054977 CEST	587	49803	160.13.60.151	192.168.2.4
Aug 1, 2024 06:09:24.952083111 CEST	587	49803	160.13.60.151	192.168.2.4
Aug 1, 2024 06:09:24.952132940 CEST	587	49803	160.13.60.151	192.168.2.4
Aug 1, 2024 06:09:24.952159882 CEST	587	49803	160.13.60.151	192.168.2.4
Aug 1, 2024 06:09:24.953265905 CEST	587	49803	160.13.60.151	192.168.2.4
Aug 1, 2024 06:09:24.953294992 CEST	587	49803	160.13.60.151	192.168.2.4
Aug 1, 2024 06:09:24.953418016 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:24.953445911 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:24.953473091 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:24.953521967 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:24.953556061 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:24.953560114 CEST	49803	587	192.168.2.4	160.13.60.151
Aug 1, 2024 06:09:24.953574896 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:24.953608990 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:24.953634977 CEST	49803	587	192.168.2.4	160.13.60.151
Aug 1, 2024 06:09:24.953643084 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:24.953676939 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:24.953710079 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:24.953746080 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:24.953751087 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:24.953778982 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:24.953815937 CEST	49803	587	192.168.2.4	160.13.60.151
Aug 1, 2024 06:09:24.953818083 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:24.953893900 CEST	49803	587	192.168.2.4	160.13.60.151
Aug 1, 2024 06:09:24.953932047 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:24.953960896 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:24.954000950 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:24.954014063 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:24.954041004 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:24.954078913 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:24.954114914 CEST	49803	587	192.168.2.4	160.13.60.151
Aug 1, 2024 06:09:24.956368923 CEST	587	49803	160.13.60.151	192.168.2.4
Aug 1, 2024 06:09:24.956537962 CEST	587	49803	160.13.60.151	192.168.2.4
Aug 1, 2024 06:09:24.957066059 CEST	587	49803	160.13.60.151	192.168.2.4
Aug 1, 2024 06:09:24.958694935 CEST	587	49803	160.13.60.151	192.168.2.4
Aug 1, 2024 06:09:24.958836079 CEST	587	49803	160.13.60.151	192.168.2.4
Aug 1, 2024 06:09:24.959057093 CEST	587	49803	160.13.60.151	192.168.2.4
Aug 1, 2024 06:09:24.959084988 CEST	587	49803	160.13.60.151	192.168.2.4
Aug 1, 2024 06:09:24.959136009 CEST	587	49803	160.13.60.151	192.168.2.4
Aug 1, 2024 06:09:24.959162951 CEST	587	49803	160.13.60.151	192.168.2.4
Aug 1, 2024 06:09:24.959216118 CEST	587	49803	160.13.60.151	192.168.2.4
Aug 1, 2024 06:09:24.959243059 CEST	587	49803	160.13.60.151	192.168.2.4
Aug 1, 2024 06:09:24.959270000 CEST	587	49803	160.13.60.151	192.168.2.4
Aug 1, 2024 06:09:24.959300995 CEST	587	49803	160.13.60.151	192.168.2.4
Aug 1, 2024 06:09:24.959327936 CEST	587	49803	160.13.60.151	192.168.2.4
Aug 1, 2024 06:09:24.977869034 CEST	587	49748	162.241.219.218	192.168.2.4
Aug 1, 2024 06:09:24.978138924 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:24.980932951 CEST	49825	587	192.168.2.4	31.179.210.222
Aug 1, 2024 06:09:24.992059946 CEST	587	49820	13.250.88.201	192.168.2.4
Aug 1, 2024 06:09:24.999625921 CEST	587	49780	202.9.85.53	192.168.2.4
Aug 1, 2024 06:09:25.016599894 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:25.016882896 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:25.017056942 CEST	49803	587	192.168.2.4	160.13.60.151
Aug 1, 2024 06:09:25.019778967 CEST	587	49822	191.252.112.194	192.168.2.4
Aug 1, 2024 06:09:25.021820068 CEST	587	49803	160.13.60.151	192.168.2.4
Aug 1, 2024 06:09:25.022150993 CEST	587	49803	160.13.60.151	192.168.2.4
Aug 1, 2024 06:09:25.023874044 CEST	587	49807	62.149.128.200	192.168.2.4
Aug 1, 2024 06:09:25.024087906 CEST	587	49806	83.166.143.44	192.168.2.4
Aug 1, 2024 06:09:25.027944088 CEST	49748	587	192.168.2.4	162.241.219.218
Aug 1, 2024 06:09:25.043538094 CEST	49820	587	192.168.2.4	13.250.88.201
Aug 1, 2024 06:09:25.043550014 CEST	49780	587	192.168.2.4	202.9.85.53
Aug 1, 2024 06:09:25.045759916 CEST	587	49823	13.77.77.162	192.168.2.4
Aug 1, 2024 06:09:25.054776907 CEST	587	49816	83.243.58.138	192.168.2.4
Aug 1, 2024 06:09:25.061594963 CEST	587	49821	209.71.212.26	192.168.2.4
Aug 1, 2024 06:09:25.064330101 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:25.064412117 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:25.069209099 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:25.074743032 CEST	49822	587	192.168.2.4	191.252.112.194
Aug 1, 2024 06:09:25.074743986 CEST	49806	587	192.168.2.4	83.166.143.44
Aug 1, 2024 06:09:25.074748039 CEST	49807	587	192.168.2.4	62.149.128.200
Aug 1, 2024 06:09:25.090425968 CEST	49823	587	192.168.2.4	13.77.77.162
Aug 1, 2024 06:09:25.090884924 CEST	587	49766	190.105.202.10	192.168.2.4
Aug 1, 2024 06:09:25.091588020 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:25.102896929 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:25.105923891 CEST	49816	587	192.168.2.4	83.243.58.138
Aug 1, 2024 06:09:25.108295918 CEST	49821	587	192.168.2.4	209.71.212.26
Aug 1, 2024 06:09:25.108829975 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:25.109036922 CEST	49824	587	192.168.2.4	41.110.190.122
Aug 1, 2024 06:09:25.109129906 CEST	49818	587	192.168.2.4	103.86.139.86
Aug 1, 2024 06:09:25.109205961 CEST	49808	587	192.168.2.4	212.10.10.65
Aug 1, 2024 06:09:25.113790989 CEST	587	49824	41.110.190.122	192.168.2.4
Aug 1, 2024 06:09:25.113919973 CEST	587	49818	103.86.139.86	192.168.2.4
Aug 1, 2024 06:09:25.113951921 CEST	587	49808	212.10.10.65	192.168.2.4
Aug 1, 2024 06:09:25.124063015 CEST	587	49815	210.59.228.38	192.168.2.4
Aug 1, 2024 06:09:25.124171972 CEST	587	49815	210.59.228.38	192.168.2.4
Aug 1, 2024 06:09:25.124207973 CEST	587	49815	210.59.228.38	192.168.2.4
Aug 1, 2024 06:09:25.124224901 CEST	49815	587	192.168.2.4	210.59.228.38
Aug 1, 2024 06:09:25.124244928 CEST	587	49815	210.59.228.38	192.168.2.4
Aug 1, 2024 06:09:25.124289989 CEST	49815	587	192.168.2.4	210.59.228.38
Aug 1, 2024 06:09:25.124336004 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:25.124336004 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:25.124557018 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:25.125417948 CEST	587	49815	210.59.228.38	192.168.2.4
Aug 1, 2024 06:09:25.125454903 CEST	587	49815	210.59.228.38	192.168.2.4
Aug 1, 2024 06:09:25.125502110 CEST	49815	587	192.168.2.4	210.59.228.38
Aug 1, 2024 06:09:25.125607967 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:25.125607967 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:25.127355099 CEST	587	49810	160.13.60.151	192.168.2.4
Aug 1, 2024 06:09:25.129261971 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:25.129311085 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:25.129390001 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:25.130431890 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:25.134676933 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:25.135390997 CEST	587	49802	108.167.180.142	192.168.2.4
Aug 1, 2024 06:09:25.135601044 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:25.137178898 CEST	49766	587	192.168.2.4	190.105.202.10
Aug 1, 2024 06:09:25.142221928 CEST	587	49813	62.149.157.154	192.168.2.4
Aug 1, 2024 06:09:25.146115065 CEST	587	49814	62.149.128.201	192.168.2.4
Aug 1, 2024 06:09:25.147222996 CEST	587	49827	13.250.88.201	192.168.2.4
Aug 1, 2024 06:09:25.156883001 CEST	587	49817	13.250.88.201	192.168.2.4
Aug 1, 2024 06:09:25.168411016 CEST	49810	587	192.168.2.4	160.13.60.151
Aug 1, 2024 06:09:25.172667980 CEST	587	49809	160.13.60.151	192.168.2.4
Aug 1, 2024 06:09:25.183068991 CEST	587	49797	13.250.88.201	192.168.2.4
Aug 1, 2024 06:09:25.184020042 CEST	49813	587	192.168.2.4	62.149.157.154
Aug 1, 2024 06:09:25.184264898 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:25.184334993 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:25.185513020 CEST	49802	587	192.168.2.4	108.167.180.142
Aug 1, 2024 06:09:25.189105034 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:25.189806938 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:25.194216013 CEST	587	49794	13.250.88.201	192.168.2.4
Aug 1, 2024 06:09:25.194442987 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:25.199650049 CEST	49814	587	192.168.2.4	62.149.128.201
Aug 1, 2024 06:09:25.199661016 CEST	49817	587	192.168.2.4	13.250.88.201
Aug 1, 2024 06:09:25.199666977 CEST	49827	587	192.168.2.4	13.250.88.201
Aug 1, 2024 06:09:25.200814962 CEST	49748	587	192.168.2.4	162.241.219.218
Aug 1, 2024 06:09:25.205929041 CEST	587	49748	162.241.219.218	192.168.2.4
Aug 1, 2024 06:09:25.205985069 CEST	49748	587	192.168.2.4	162.241.219.218
Aug 1, 2024 06:09:25.215289116 CEST	49809	587	192.168.2.4	160.13.60.151
Aug 1, 2024 06:09:25.228550911 CEST	587	49741	178.170.244.56	192.168.2.4
Aug 1, 2024 06:09:25.230918884 CEST	49797	587	192.168.2.4	13.250.88.201
Aug 1, 2024 06:09:25.236435890 CEST	587	49828	178.251.28.102	192.168.2.4
Aug 1, 2024 06:09:25.240324020 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:25.240382910 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:25.245373011 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:25.246522903 CEST	49794	587	192.168.2.4	13.250.88.201
Aug 1, 2024 06:09:25.276164055 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:25.276316881 CEST	49825	587	192.168.2.4	31.179.210.222
Aug 1, 2024 06:09:25.276421070 CEST	49826	587	192.168.2.4	37.120.193.124
Aug 1, 2024 06:09:25.277771950 CEST	49741	587	192.168.2.4	178.170.244.56
Aug 1, 2024 06:09:25.277817965 CEST	49828	587	192.168.2.4	178.251.28.102
Aug 1, 2024 06:09:25.281152964 CEST	587	49825	31.179.210.222	192.168.2.4
Aug 1, 2024 06:09:25.281342983 CEST	587	49826	37.120.193.124	192.168.2.4
Aug 1, 2024 06:09:25.304744005 CEST	587	49808	212.10.10.65	192.168.2.4
Aug 1, 2024 06:09:25.304841042 CEST	587	49808	212.10.10.65	192.168.2.4
Aug 1, 2024 06:09:25.304900885 CEST	49808	587	192.168.2.4	212.10.10.65
Aug 1, 2024 06:09:25.305025101 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:25.305176020 CEST	49808	587	192.168.2.4	212.10.10.65
Aug 1, 2024 06:09:25.309951067 CEST	587	49808	212.10.10.65	192.168.2.4
Aug 1, 2024 06:09:25.331806898 CEST	587	49753	41.204.183.54	192.168.2.4
Aug 1, 2024 06:09:25.335187912 CEST	587	49824	41.110.190.122	192.168.2.4
Aug 1, 2024 06:09:25.352355003 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:25.352411032 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:25.357218981 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:25.387141943 CEST	49753	587	192.168.2.4	41.204.183.54
Aug 1, 2024 06:09:25.387173891 CEST	49824	587	192.168.2.4	41.110.190.122
Aug 1, 2024 06:09:25.396847963 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:25.397264957 CEST	49780	587	192.168.2.4	202.9.85.53
Aug 1, 2024 06:09:25.397334099 CEST	49822	587	192.168.2.4	191.252.112.194
Aug 1, 2024 06:09:25.397412062 CEST	49823	587	192.168.2.4	13.77.77.162
Aug 1, 2024 06:09:25.397488117 CEST	49807	587	192.168.2.4	62.149.128.200
Aug 1, 2024 06:09:25.397567034 CEST	49820	587	192.168.2.4	13.250.88.201
Aug 1, 2024 06:09:25.397664070 CEST	49816	587	192.168.2.4	83.243.58.138
Aug 1, 2024 06:09:25.397736073 CEST	49806	587	192.168.2.4	83.166.143.44
Aug 1, 2024 06:09:25.397821903 CEST	49821	587	192.168.2.4	209.71.212.26
Aug 1, 2024 06:09:25.397945881 CEST	49810	587	192.168.2.4	160.13.60.151
Aug 1, 2024 06:09:25.398010015 CEST	49815	587	192.168.2.4	210.59.228.38
Aug 1, 2024 06:09:25.401712894 CEST	587	49797	13.250.88.201	192.168.2.4
Aug 1, 2024 06:09:25.401804924 CEST	49797	587	192.168.2.4	13.250.88.201
Aug 1, 2024 06:09:25.401879072 CEST	49797	587	192.168.2.4	13.250.88.201
Aug 1, 2024 06:09:25.402004957 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:25.402182102 CEST	587	49780	202.9.85.53	192.168.2.4
Aug 1, 2024 06:09:25.402213097 CEST	587	49822	191.252.112.194	192.168.2.4
Aug 1, 2024 06:09:25.402265072 CEST	587	49823	13.77.77.162	192.168.2.4
Aug 1, 2024 06:09:25.402293921 CEST	587	49807	62.149.128.200	192.168.2.4
Aug 1, 2024 06:09:25.402329922 CEST	587	49820	13.250.88.201	192.168.2.4
Aug 1, 2024 06:09:25.402447939 CEST	587	49816	83.243.58.138	192.168.2.4
Aug 1, 2024 06:09:25.402519941 CEST	587	49806	83.166.143.44	192.168.2.4
Aug 1, 2024 06:09:25.402642965 CEST	587	49821	209.71.212.26	192.168.2.4
Aug 1, 2024 06:09:25.402735949 CEST	587	49810	160.13.60.151	192.168.2.4
Aug 1, 2024 06:09:25.402790070 CEST	587	49815	210.59.228.38	192.168.2.4
Aug 1, 2024 06:09:25.402853012 CEST	49815	587	192.168.2.4	210.59.228.38
Aug 1, 2024 06:09:25.403383970 CEST	49766	587	192.168.2.4	190.105.202.10
Aug 1, 2024 06:09:25.406775951 CEST	587	49797	13.250.88.201	192.168.2.4
Aug 1, 2024 06:09:25.406922102 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:25.406972885 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:25.407629013 CEST	587	49815	210.59.228.38	192.168.2.4
Aug 1, 2024 06:09:25.408509016 CEST	587	49766	190.105.202.10	192.168.2.4
Aug 1, 2024 06:09:25.408565998 CEST	49766	587	192.168.2.4	190.105.202.10
Aug 1, 2024 06:09:25.411730051 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:25.418255091 CEST	587	49794	13.250.88.201	192.168.2.4
Aug 1, 2024 06:09:25.418308973 CEST	49794	587	192.168.2.4	13.250.88.201
Aug 1, 2024 06:09:25.418529987 CEST	49794	587	192.168.2.4	13.250.88.201
Aug 1, 2024 06:09:25.418680906 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:25.423398972 CEST	587	49794	13.250.88.201	192.168.2.4
Aug 1, 2024 06:09:25.423669100 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:25.445693970 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:25.445844889 CEST	49802	587	192.168.2.4	108.167.180.142
Aug 1, 2024 06:09:25.445940971 CEST	49809	587	192.168.2.4	160.13.60.151
Aug 1, 2024 06:09:25.446012020 CEST	49814	587	192.168.2.4	62.149.128.201
Aug 1, 2024 06:09:25.446079016 CEST	49813	587	192.168.2.4	62.149.157.154
Aug 1, 2024 06:09:25.446154118 CEST	49817	587	192.168.2.4	13.250.88.201
Aug 1, 2024 06:09:25.446232080 CEST	49827	587	192.168.2.4	13.250.88.201
Aug 1, 2024 06:09:25.450723886 CEST	587	49802	108.167.180.142	192.168.2.4
Aug 1, 2024 06:09:25.450752974 CEST	587	49809	160.13.60.151	192.168.2.4
Aug 1, 2024 06:09:25.450804949 CEST	587	49814	62.149.128.201	192.168.2.4
Aug 1, 2024 06:09:25.450834990 CEST	587	49813	62.149.157.154	192.168.2.4
Aug 1, 2024 06:09:25.450951099 CEST	587	49817	13.250.88.201	192.168.2.4
Aug 1, 2024 06:09:25.451150894 CEST	587	49827	13.250.88.201	192.168.2.4
Aug 1, 2024 06:09:25.452542067 CEST	587	49818	103.86.139.86	192.168.2.4
Aug 1, 2024 06:09:25.452724934 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:25.484270096 CEST	587	49825	31.179.210.222	192.168.2.4
Aug 1, 2024 06:09:25.496614933 CEST	49818	587	192.168.2.4	103.86.139.86
Aug 1, 2024 06:09:25.498598099 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:25.498663902 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:25.498735905 CEST	49741	587	192.168.2.4	178.170.244.56
Aug 1, 2024 06:09:25.498826981 CEST	49828	587	192.168.2.4	178.251.28.102
Aug 1, 2024 06:09:25.502559900 CEST	587	49804	144.217.158.194	192.168.2.4
Aug 1, 2024 06:09:25.503658056 CEST	587	49741	178.170.244.56	192.168.2.4
Aug 1, 2024 06:09:25.503688097 CEST	587	49828	178.251.28.102	192.168.2.4
Aug 1, 2024 06:09:25.504528999 CEST	587	49823	13.77.77.162	192.168.2.4
Aug 1, 2024 06:09:25.525074005 CEST	587	49821	209.71.212.26	192.168.2.4
Aug 1, 2024 06:09:25.525105000 CEST	587	49821	209.71.212.26	192.168.2.4
Aug 1, 2024 06:09:25.525145054 CEST	587	49821	209.71.212.26	192.168.2.4
Aug 1, 2024 06:09:25.525182009 CEST	587	49821	209.71.212.26	192.168.2.4
Aug 1, 2024 06:09:25.525273085 CEST	49821	587	192.168.2.4	209.71.212.26
Aug 1, 2024 06:09:25.525273085 CEST	49821	587	192.168.2.4	209.71.212.26
Aug 1, 2024 06:09:25.525440931 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:25.527781010 CEST	49825	587	192.168.2.4	31.179.210.222
Aug 1, 2024 06:09:25.530628920 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:25.530658007 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:25.533437014 CEST	587	49801	165.140.69.186	192.168.2.4
Aug 1, 2024 06:09:25.534637928 CEST	587	49826	37.120.193.124	192.168.2.4
Aug 1, 2024 06:09:25.543499947 CEST	49804	587	192.168.2.4	144.217.158.194
Aug 1, 2024 06:09:25.559048891 CEST	587	49802	108.167.180.142	192.168.2.4
Aug 1, 2024 06:09:25.559047937 CEST	49823	587	192.168.2.4	13.77.77.162
Aug 1, 2024 06:09:25.572407961 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:25.572755098 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:25.574640036 CEST	49801	587	192.168.2.4	165.140.69.186
Aug 1, 2024 06:09:25.574692011 CEST	49826	587	192.168.2.4	37.120.193.124
Aug 1, 2024 06:09:25.577632904 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:25.590512037 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:25.592199087 CEST	587	49816	83.243.58.138	192.168.2.4
Aug 1, 2024 06:09:25.592487097 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:25.593306065 CEST	49831	587	192.168.2.4	66.133.129.50
Aug 1, 2024 06:09:25.598233938 CEST	587	49831	66.133.129.50	192.168.2.4
Aug 1, 2024 06:09:25.598318100 CEST	49831	587	192.168.2.4	66.133.129.50
Aug 1, 2024 06:09:25.604917049 CEST	587	49807	62.149.128.200	192.168.2.4
Aug 1, 2024 06:09:25.605159044 CEST	587	49807	62.149.128.200	192.168.2.4
Aug 1, 2024 06:09:25.605230093 CEST	49807	587	192.168.2.4	62.149.128.200
Aug 1, 2024 06:09:25.605328083 CEST	49807	587	192.168.2.4	62.149.128.200
Aug 1, 2024 06:09:25.605890036 CEST	49802	587	192.168.2.4	108.167.180.142
Aug 1, 2024 06:09:25.609632015 CEST	587	49806	83.166.143.44	192.168.2.4
Aug 1, 2024 06:09:25.610120058 CEST	587	49807	62.149.128.200	192.168.2.4
Aug 1, 2024 06:09:25.611551046 CEST	587	49822	191.252.112.194	192.168.2.4
Aug 1, 2024 06:09:25.637146950 CEST	49816	587	192.168.2.4	83.243.58.138
Aug 1, 2024 06:09:25.640342951 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:25.640429020 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:25.645210981 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:25.650011063 CEST	587	49813	62.149.157.154	192.168.2.4
Aug 1, 2024 06:09:25.650269985 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:25.652777910 CEST	49806	587	192.168.2.4	83.166.143.44
Aug 1, 2024 06:09:25.652785063 CEST	49822	587	192.168.2.4	191.252.112.194
Aug 1, 2024 06:09:25.653556108 CEST	587	49814	62.149.128.201	192.168.2.4
Aug 1, 2024 06:09:25.655085087 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:25.655144930 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:25.659953117 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:25.664627075 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:25.664792061 CEST	49824	587	192.168.2.4	41.110.190.122
Aug 1, 2024 06:09:25.668698072 CEST	49753	587	192.168.2.4	41.204.183.54
Aug 1, 2024 06:09:25.668842077 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:25.669631958 CEST	587	49824	41.110.190.122	192.168.2.4
Aug 1, 2024 06:09:25.673791885 CEST	587	49753	41.204.183.54	192.168.2.4
Aug 1, 2024 06:09:25.673846960 CEST	49753	587	192.168.2.4	41.204.183.54
Aug 1, 2024 06:09:25.679555893 CEST	587	49828	178.251.28.102	192.168.2.4
Aug 1, 2024 06:09:25.699659109 CEST	49813	587	192.168.2.4	62.149.157.154
Aug 1, 2024 06:09:25.699666023 CEST	49814	587	192.168.2.4	62.149.128.201
Aug 1, 2024 06:09:25.705234051 CEST	587	49810	160.13.60.151	192.168.2.4
Aug 1, 2024 06:09:25.705826998 CEST	587	49815	210.59.228.38	192.168.2.4
Aug 1, 2024 06:09:25.716345072 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:25.716408968 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:25.718693018 CEST	587	49741	178.170.244.56	192.168.2.4
Aug 1, 2024 06:09:25.721270084 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:25.721327066 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:25.726198912 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:25.730989933 CEST	49828	587	192.168.2.4	178.251.28.102
Aug 1, 2024 06:09:25.731460094 CEST	587	49820	13.250.88.201	192.168.2.4
Aug 1, 2024 06:09:25.731775999 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:25.736567020 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:25.742068052 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:25.742201090 CEST	49818	587	192.168.2.4	103.86.139.86
Aug 1, 2024 06:09:25.742355108 CEST	49825	587	192.168.2.4	31.179.210.222
Aug 1, 2024 06:09:25.742357016 CEST	49823	587	192.168.2.4	13.77.77.162
Aug 1, 2024 06:09:25.742399931 CEST	49804	587	192.168.2.4	144.217.158.194
Aug 1, 2024 06:09:25.746511936 CEST	49815	587	192.168.2.4	210.59.228.38
Aug 1, 2024 06:09:25.747021914 CEST	587	49818	103.86.139.86	192.168.2.4
Aug 1, 2024 06:09:25.747073889 CEST	49810	587	192.168.2.4	160.13.60.151
Aug 1, 2024 06:09:25.747186899 CEST	587	49825	31.179.210.222	192.168.2.4
Aug 1, 2024 06:09:25.747240067 CEST	587	49823	13.77.77.162	192.168.2.4
Aug 1, 2024 06:09:25.747270107 CEST	587	49804	144.217.158.194	192.168.2.4
Aug 1, 2024 06:09:25.755629063 CEST	587	49819	103.110.129.117	192.168.2.4
Aug 1, 2024 06:09:25.755810022 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:25.756921053 CEST	587	49809	160.13.60.151	192.168.2.4
Aug 1, 2024 06:09:25.763029099 CEST	49741	587	192.168.2.4	178.170.244.56
Aug 1, 2024 06:09:25.777868032 CEST	49820	587	192.168.2.4	13.250.88.201
Aug 1, 2024 06:09:25.799141884 CEST	587	49817	13.250.88.201	192.168.2.4
Aug 1, 2024 06:09:25.799189091 CEST	587	49817	13.250.88.201	192.168.2.4
Aug 1, 2024 06:09:25.799245119 CEST	587	49817	13.250.88.201	192.168.2.4
Aug 1, 2024 06:09:25.799282074 CEST	587	49817	13.250.88.201	192.168.2.4
Aug 1, 2024 06:09:25.799310923 CEST	587	49817	13.250.88.201	192.168.2.4
Aug 1, 2024 06:09:25.799405098 CEST	49817	587	192.168.2.4	13.250.88.201
Aug 1, 2024 06:09:25.799405098 CEST	49817	587	192.168.2.4	13.250.88.201
Aug 1, 2024 06:09:25.799526930 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:25.804272890 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:25.804344893 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:25.804415941 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:25.804444075 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:25.804563999 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:25.809019089 CEST	49819	587	192.168.2.4	103.110.129.117
Aug 1, 2024 06:09:25.809835911 CEST	49809	587	192.168.2.4	160.13.60.151
Aug 1, 2024 06:09:25.820972919 CEST	587	49829	191.252.112.195	192.168.2.4
Aug 1, 2024 06:09:25.821194887 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:25.823915005 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:25.824165106 CEST	49821	587	192.168.2.4	209.71.212.26
Aug 1, 2024 06:09:25.824316978 CEST	49801	587	192.168.2.4	165.140.69.186
Aug 1, 2024 06:09:25.824376106 CEST	49826	587	192.168.2.4	37.120.193.124
Aug 1, 2024 06:09:25.824457884 CEST	49802	587	192.168.2.4	108.167.180.142
Aug 1, 2024 06:09:25.824542999 CEST	49816	587	192.168.2.4	83.243.58.138
Aug 1, 2024 06:09:25.828952074 CEST	587	49821	209.71.212.26	192.168.2.4
Aug 1, 2024 06:09:25.829011917 CEST	49821	587	192.168.2.4	209.71.212.26
Aug 1, 2024 06:09:25.829132080 CEST	587	49801	165.140.69.186	192.168.2.4
Aug 1, 2024 06:09:25.829183102 CEST	587	49826	37.120.193.124	192.168.2.4
Aug 1, 2024 06:09:25.829215050 CEST	587	49802	108.167.180.142	192.168.2.4
Aug 1, 2024 06:09:25.829355955 CEST	587	49816	83.243.58.138	192.168.2.4
Aug 1, 2024 06:09:25.833889961 CEST	587	49821	209.71.212.26	192.168.2.4
Aug 1, 2024 06:09:25.840415001 CEST	49817	587	192.168.2.4	13.250.88.201
Aug 1, 2024 06:09:25.847745895 CEST	587	49804	144.217.158.194	192.168.2.4
Aug 1, 2024 06:09:25.849567890 CEST	587	49823	13.77.77.162	192.168.2.4
Aug 1, 2024 06:09:25.868479967 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:25.868756056 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:25.871601105 CEST	49829	587	192.168.2.4	191.252.112.195
Aug 1, 2024 06:09:25.873646021 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:25.891539097 CEST	587	49824	41.110.190.122	192.168.2.4
Aug 1, 2024 06:09:25.891730070 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:25.896089077 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:25.896234989 CEST	49806	587	192.168.2.4	83.166.143.44
Aug 1, 2024 06:09:25.896318913 CEST	49822	587	192.168.2.4	191.252.112.194
Aug 1, 2024 06:09:25.901139975 CEST	587	49806	83.166.143.44	192.168.2.4
Aug 1, 2024 06:09:25.901173115 CEST	587	49822	191.252.112.194	192.168.2.4
Aug 1, 2024 06:09:25.901268005 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:25.901328087 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:25.901340961 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:25.901364088 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:25.901402950 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:25.901416063 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:25.901503086 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:25.901536942 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:25.901551962 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:25.901575089 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:25.901614904 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:25.901624918 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:25.901644945 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:25.901681900 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:25.901691914 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:25.901767969 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:25.901802063 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:25.901818991 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:25.901822090 CEST	49813	587	192.168.2.4	62.149.157.154
Aug 1, 2024 06:09:25.901884079 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:25.901889086 CEST	49814	587	192.168.2.4	62.149.128.201
Aug 1, 2024 06:09:25.901931047 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:25.901971102 CEST	49828	587	192.168.2.4	178.251.28.102
Aug 1, 2024 06:09:25.902077913 CEST	49810	587	192.168.2.4	160.13.60.151
Aug 1, 2024 06:09:25.902159929 CEST	49810	587	192.168.2.4	160.13.60.151
Aug 1, 2024 06:09:25.902232885 CEST	49810	587	192.168.2.4	160.13.60.151
Aug 1, 2024 06:09:25.902765989 CEST	49804	587	192.168.2.4	144.217.158.194
Aug 1, 2024 06:09:25.902770042 CEST	49823	587	192.168.2.4	13.77.77.162
Aug 1, 2024 06:09:25.903266907 CEST	49741	587	192.168.2.4	178.170.244.56
Aug 1, 2024 06:09:25.903389931 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:25.905021906 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:25.905052900 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:25.905097008 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:25.905107975 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:25.905117035 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:25.905144930 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:25.905168056 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:25.905184031 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:25.905194044 CEST	49810	587	192.168.2.4	160.13.60.151
Aug 1, 2024 06:09:25.905199051 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:25.905236006 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:25.905249119 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:25.905272961 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:25.905281067 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:25.905380964 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:25.905410051 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:25.905440092 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:25.905446053 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:25.905495882 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:25.905534029 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:25.905567884 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:25.905587912 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:25.905606031 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:25.905616045 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:25.905642033 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:25.905661106 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:25.905690908 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:25.906759977 CEST	587	49813	62.149.157.154	192.168.2.4
Aug 1, 2024 06:09:25.906816006 CEST	587	49814	62.149.128.201	192.168.2.4
Aug 1, 2024 06:09:25.906960964 CEST	587	49828	178.251.28.102	192.168.2.4
Aug 1, 2024 06:09:25.906991005 CEST	587	49810	160.13.60.151	192.168.2.4
Aug 1, 2024 06:09:25.907058001 CEST	49810	587	192.168.2.4	160.13.60.151
Aug 1, 2024 06:09:25.907140970 CEST	587	49810	160.13.60.151	192.168.2.4
Aug 1, 2024 06:09:25.907170057 CEST	587	49810	160.13.60.151	192.168.2.4
Aug 1, 2024 06:09:25.907222033 CEST	587	49810	160.13.60.151	192.168.2.4
Aug 1, 2024 06:09:25.907228947 CEST	49810	587	192.168.2.4	160.13.60.151
Aug 1, 2024 06:09:25.907248974 CEST	587	49810	160.13.60.151	192.168.2.4
Aug 1, 2024 06:09:25.907278061 CEST	587	49810	160.13.60.151	192.168.2.4
Aug 1, 2024 06:09:25.907280922 CEST	49810	587	192.168.2.4	160.13.60.151
Aug 1, 2024 06:09:25.907306910 CEST	587	49810	160.13.60.151	192.168.2.4
Aug 1, 2024 06:09:25.907306910 CEST	49810	587	192.168.2.4	160.13.60.151
Aug 1, 2024 06:09:25.907330990 CEST	49810	587	192.168.2.4	160.13.60.151
Aug 1, 2024 06:09:25.907334089 CEST	587	49810	160.13.60.151	192.168.2.4
Aug 1, 2024 06:09:25.907361984 CEST	587	49810	160.13.60.151	192.168.2.4
Aug 1, 2024 06:09:25.908318043 CEST	587	49741	178.170.244.56	192.168.2.4
Aug 1, 2024 06:09:25.908370972 CEST	49741	587	192.168.2.4	178.170.244.56
Aug 1, 2024 06:09:25.908741951 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:25.908802032 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:25.908833981 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:25.908849001 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:25.908894062 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:25.908893108 CEST	49810	587	192.168.2.4	160.13.60.151
Aug 1, 2024 06:09:25.908927917 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:25.908946991 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:25.908967018 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:25.909022093 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:25.909023046 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:25.909056902 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:25.909091949 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:25.909109116 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:25.909181118 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:25.909209013 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:25.909239054 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:25.909265995 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:25.909298897 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:25.909317970 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:25.909336090 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:25.909372091 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:25.909384012 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:25.909502029 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:25.909531116 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:25.909559965 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:25.910489082 CEST	587	49810	160.13.60.151	192.168.2.4
Aug 1, 2024 06:09:25.910562038 CEST	49810	587	192.168.2.4	160.13.60.151
Aug 1, 2024 06:09:25.910592079 CEST	587	49810	160.13.60.151	192.168.2.4
Aug 1, 2024 06:09:25.910620928 CEST	587	49810	160.13.60.151	192.168.2.4
Aug 1, 2024 06:09:25.910672903 CEST	49810	587	192.168.2.4	160.13.60.151
Aug 1, 2024 06:09:25.914985895 CEST	587	49810	160.13.60.151	192.168.2.4
Aug 1, 2024 06:09:25.915013075 CEST	587	49810	160.13.60.151	192.168.2.4
Aug 1, 2024 06:09:25.915044069 CEST	587	49810	160.13.60.151	192.168.2.4
Aug 1, 2024 06:09:25.915056944 CEST	49810	587	192.168.2.4	160.13.60.151
Aug 1, 2024 06:09:25.915071964 CEST	587	49810	160.13.60.151	192.168.2.4
Aug 1, 2024 06:09:25.915100098 CEST	587	49810	160.13.60.151	192.168.2.4
Aug 1, 2024 06:09:25.915152073 CEST	587	49810	160.13.60.151	192.168.2.4
Aug 1, 2024 06:09:25.915180922 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:25.915211916 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:25.915246010 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:25.915280104 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:25.915316105 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:25.915345907 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:25.915345907 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:25.915348053 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:25.915359974 CEST	49810	587	192.168.2.4	160.13.60.151
Aug 1, 2024 06:09:25.915369987 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:25.915381908 CEST	587	49810	160.13.60.151	192.168.2.4
Aug 1, 2024 06:09:25.915399075 CEST	49810	587	192.168.2.4	160.13.60.151
Aug 1, 2024 06:09:25.915411949 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:25.915445089 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:25.915467978 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:25.915483952 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:25.915515900 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:25.915534973 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:25.915549040 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:25.915554047 CEST	49810	587	192.168.2.4	160.13.60.151
Aug 1, 2024 06:09:25.915577888 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:25.915596008 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:25.915611029 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:25.915621042 CEST	49810	587	192.168.2.4	160.13.60.151
Aug 1, 2024 06:09:25.915647030 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:25.915654898 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:25.915678978 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:25.915714025 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:25.915724039 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:25.915743113 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:25.915776014 CEST	587	49810	160.13.60.151	192.168.2.4
Aug 1, 2024 06:09:25.915788889 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:25.915827990 CEST	587	49810	160.13.60.151	192.168.2.4
Aug 1, 2024 06:09:25.915854931 CEST	587	49810	160.13.60.151	192.168.2.4
Aug 1, 2024 06:09:25.915909052 CEST	587	49810	160.13.60.151	192.168.2.4
Aug 1, 2024 06:09:25.915936947 CEST	587	49810	160.13.60.151	192.168.2.4
Aug 1, 2024 06:09:25.915963888 CEST	587	49810	160.13.60.151	192.168.2.4
Aug 1, 2024 06:09:25.916146994 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:25.916199923 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:25.916232109 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:25.916249990 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:25.916286945 CEST	49810	587	192.168.2.4	160.13.60.151
Aug 1, 2024 06:09:25.916311979 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:25.916359901 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:25.916359901 CEST	49810	587	192.168.2.4	160.13.60.151
Aug 1, 2024 06:09:25.916364908 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:25.916397095 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:25.916441917 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:25.916455030 CEST	49810	587	192.168.2.4	160.13.60.151
Aug 1, 2024 06:09:25.916934967 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:25.916987896 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:25.917020082 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:25.917037964 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:25.917056084 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:25.917066097 CEST	49810	587	192.168.2.4	160.13.60.151
Aug 1, 2024 06:09:25.917092085 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:25.917103052 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:25.917126894 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:25.917176962 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:25.920882940 CEST	587	49810	160.13.60.151	192.168.2.4
Aug 1, 2024 06:09:25.920911074 CEST	587	49810	160.13.60.151	192.168.2.4
Aug 1, 2024 06:09:25.920938969 CEST	587	49810	160.13.60.151	192.168.2.4
Aug 1, 2024 06:09:25.920990944 CEST	587	49810	160.13.60.151	192.168.2.4
Aug 1, 2024 06:09:25.921304941 CEST	587	49810	160.13.60.151	192.168.2.4
Aug 1, 2024 06:09:25.921343088 CEST	587	49810	160.13.60.151	192.168.2.4
Aug 1, 2024 06:09:25.921370029 CEST	587	49810	160.13.60.151	192.168.2.4
Aug 1, 2024 06:09:25.921483994 CEST	587	49810	160.13.60.151	192.168.2.4
Aug 1, 2024 06:09:25.921511889 CEST	587	49810	160.13.60.151	192.168.2.4
Aug 1, 2024 06:09:25.921545029 CEST	587	49810	160.13.60.151	192.168.2.4
Aug 1, 2024 06:09:25.921672106 CEST	587	49810	160.13.60.151	192.168.2.4
Aug 1, 2024 06:09:25.921701908 CEST	587	49810	160.13.60.151	192.168.2.4
Aug 1, 2024 06:09:25.921787024 CEST	587	49810	160.13.60.151	192.168.2.4
Aug 1, 2024 06:09:25.921813965 CEST	587	49810	160.13.60.151	192.168.2.4
Aug 1, 2024 06:09:25.921848059 CEST	587	49815	210.59.228.38	192.168.2.4
Aug 1, 2024 06:09:25.922032118 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:25.922041893 CEST	587	49810	160.13.60.151	192.168.2.4
Aug 1, 2024 06:09:25.922070026 CEST	587	49810	160.13.60.151	192.168.2.4
Aug 1, 2024 06:09:25.934016943 CEST	49824	587	192.168.2.4	41.110.190.122
Aug 1, 2024 06:09:25.948311090 CEST	587	49821	209.71.212.26	192.168.2.4
Aug 1, 2024 06:09:25.948797941 CEST	587	49825	31.179.210.222	192.168.2.4
Aug 1, 2024 06:09:25.965269089 CEST	49815	587	192.168.2.4	210.59.228.38
Aug 1, 2024 06:09:25.966706991 CEST	587	49801	165.140.69.186	192.168.2.4
Aug 1, 2024 06:09:25.972332001 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:25.972395897 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:25.976079941 CEST	587	49827	13.250.88.201	192.168.2.4
Aug 1, 2024 06:09:25.976638079 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:25.976669073 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:25.976701021 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:25.976728916 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:25.976763964 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:25.976774931 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:25.976785898 CEST	49810	587	192.168.2.4	160.13.60.151
Aug 1, 2024 06:09:25.976813078 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:25.976819038 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:25.976844072 CEST	49819	587	192.168.2.4	103.110.129.117
Aug 1, 2024 06:09:25.976854086 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:25.976866007 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:25.976888895 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:25.976898909 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:25.976919889 CEST	49820	587	192.168.2.4	13.250.88.201
Aug 1, 2024 06:09:25.976929903 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:25.976963997 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:25.977011919 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:25.977020979 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:25.977025986 CEST	49809	587	192.168.2.4	160.13.60.151
Aug 1, 2024 06:09:25.977052927 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:25.977066040 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:25.977094889 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:25.977101088 CEST	49809	587	192.168.2.4	160.13.60.151
Aug 1, 2024 06:09:25.977111101 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:25.977158070 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:25.977166891 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:25.977204084 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:25.977206945 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:25.977216959 CEST	49809	587	192.168.2.4	160.13.60.151
Aug 1, 2024 06:09:25.977255106 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:25.977257967 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:25.977329969 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:25.977363110 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:25.977380037 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:25.980771065 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:25.980853081 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:25.980906010 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:25.980906963 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:25.980917931 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:25.980943918 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:25.980947971 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:25.980976105 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:25.981024027 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:25.981029987 CEST	49809	587	192.168.2.4	160.13.60.151
Aug 1, 2024 06:09:25.981031895 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:25.981065989 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:25.981086016 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:25.981118917 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:25.981121063 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:25.981132984 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:25.981163979 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:25.981175900 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:25.981209040 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:25.981220961 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:25.981244087 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:25.981251955 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:25.981278896 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:25.981287003 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:25.982147932 CEST	587	49810	160.13.60.151	192.168.2.4
Aug 1, 2024 06:09:25.982201099 CEST	587	49810	160.13.60.151	192.168.2.4
Aug 1, 2024 06:09:25.982234001 CEST	587	49810	160.13.60.151	192.168.2.4
Aug 1, 2024 06:09:25.982467890 CEST	587	49810	160.13.60.151	192.168.2.4
Aug 1, 2024 06:09:25.982496977 CEST	587	49810	160.13.60.151	192.168.2.4
Aug 1, 2024 06:09:25.982660055 CEST	587	49810	160.13.60.151	192.168.2.4
Aug 1, 2024 06:09:25.982690096 CEST	587	49819	103.110.129.117	192.168.2.4
Aug 1, 2024 06:09:25.982718945 CEST	587	49820	13.250.88.201	192.168.2.4
Aug 1, 2024 06:09:25.982749939 CEST	587	49809	160.13.60.151	192.168.2.4
Aug 1, 2024 06:09:25.982800961 CEST	587	49809	160.13.60.151	192.168.2.4
Aug 1, 2024 06:09:25.982809067 CEST	49809	587	192.168.2.4	160.13.60.151
Aug 1, 2024 06:09:25.982830048 CEST	587	49809	160.13.60.151	192.168.2.4
Aug 1, 2024 06:09:25.982856989 CEST	587	49809	160.13.60.151	192.168.2.4
Aug 1, 2024 06:09:25.982861996 CEST	49809	587	192.168.2.4	160.13.60.151
Aug 1, 2024 06:09:25.982886076 CEST	49809	587	192.168.2.4	160.13.60.151
Aug 1, 2024 06:09:25.982908010 CEST	587	49809	160.13.60.151	192.168.2.4
Aug 1, 2024 06:09:25.982916117 CEST	49809	587	192.168.2.4	160.13.60.151
Aug 1, 2024 06:09:25.982935905 CEST	587	49809	160.13.60.151	192.168.2.4
Aug 1, 2024 06:09:25.982964993 CEST	587	49809	160.13.60.151	192.168.2.4
Aug 1, 2024 06:09:25.982985020 CEST	49809	587	192.168.2.4	160.13.60.151
Aug 1, 2024 06:09:25.983555079 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:25.983630896 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:25.984129906 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:25.984185934 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:25.984216928 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:25.984230995 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:25.984251022 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:25.984292984 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:25.984359980 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:25.984441042 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:25.984502077 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:25.984517097 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:25.984558105 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:25.984586954 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:25.984600067 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:25.984642029 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:25.984675884 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:25.984693050 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:25.984707117 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:25.984745979 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:25.984756947 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:25.984781027 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:25.984818935 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:25.984832048 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:25.984911919 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:25.984961987 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:25.986134052 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:25.986188889 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:25.986217976 CEST	587	49809	160.13.60.151	192.168.2.4
Aug 1, 2024 06:09:25.986232042 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:25.986268997 CEST	587	49809	160.13.60.151	192.168.2.4
Aug 1, 2024 06:09:25.986279964 CEST	49809	587	192.168.2.4	160.13.60.151
Aug 1, 2024 06:09:25.986298084 CEST	587	49809	160.13.60.151	192.168.2.4
Aug 1, 2024 06:09:25.986381054 CEST	49809	587	192.168.2.4	160.13.60.151
Aug 1, 2024 06:09:25.986381054 CEST	49809	587	192.168.2.4	160.13.60.151
Aug 1, 2024 06:09:25.986403942 CEST	587	49809	160.13.60.151	192.168.2.4
Aug 1, 2024 06:09:25.986433029 CEST	587	49809	160.13.60.151	192.168.2.4
Aug 1, 2024 06:09:25.986455917 CEST	49809	587	192.168.2.4	160.13.60.151
Aug 1, 2024 06:09:25.986483097 CEST	49809	587	192.168.2.4	160.13.60.151
Aug 1, 2024 06:09:25.987739086 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:25.987768888 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:25.987814903 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:25.987822056 CEST	587	49809	160.13.60.151	192.168.2.4
Aug 1, 2024 06:09:25.987843990 CEST	49817	587	192.168.2.4	13.250.88.201
Aug 1, 2024 06:09:25.987849951 CEST	587	49809	160.13.60.151	192.168.2.4
Aug 1, 2024 06:09:25.987876892 CEST	587	49809	160.13.60.151	192.168.2.4
Aug 1, 2024 06:09:25.987884998 CEST	49809	587	192.168.2.4	160.13.60.151
Aug 1, 2024 06:09:25.987926006 CEST	49809	587	192.168.2.4	160.13.60.151
Aug 1, 2024 06:09:25.987926960 CEST	49809	587	192.168.2.4	160.13.60.151
Aug 1, 2024 06:09:25.987932920 CEST	587	49809	160.13.60.151	192.168.2.4
Aug 1, 2024 06:09:25.987961054 CEST	587	49809	160.13.60.151	192.168.2.4
Aug 1, 2024 06:09:25.987993002 CEST	587	49809	160.13.60.151	192.168.2.4
Aug 1, 2024 06:09:25.987993956 CEST	49809	587	192.168.2.4	160.13.60.151
Aug 1, 2024 06:09:25.988581896 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:25.988639116 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:25.988675117 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:25.988684893 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:25.988701105 CEST	49809	587	192.168.2.4	160.13.60.151
Aug 1, 2024 06:09:25.988763094 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:25.988780975 CEST	49809	587	192.168.2.4	160.13.60.151
Aug 1, 2024 06:09:25.988796949 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:25.988799095 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:25.988833904 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:25.988871098 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:25.988877058 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:25.988908052 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:25.988919973 CEST	49809	587	192.168.2.4	160.13.60.151
Aug 1, 2024 06:09:25.988941908 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:25.988955975 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:25.988975048 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:25.989001036 CEST	49809	587	192.168.2.4	160.13.60.151
Aug 1, 2024 06:09:25.989008904 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:25.989021063 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:25.989078999 CEST	49809	587	192.168.2.4	160.13.60.151
Aug 1, 2024 06:09:25.991162062 CEST	587	49809	160.13.60.151	192.168.2.4
Aug 1, 2024 06:09:25.991219044 CEST	49809	587	192.168.2.4	160.13.60.151
Aug 1, 2024 06:09:25.991317034 CEST	587	49809	160.13.60.151	192.168.2.4
Aug 1, 2024 06:09:25.991328001 CEST	49832	587	192.168.2.4	139.95.7.216
Aug 1, 2024 06:09:25.991513968 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:25.991544008 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:25.991570950 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:25.991575956 CEST	587	49809	160.13.60.151	192.168.2.4
Aug 1, 2024 06:09:25.991609097 CEST	587	49809	160.13.60.151	192.168.2.4
Aug 1, 2024 06:09:25.991636038 CEST	587	49809	160.13.60.151	192.168.2.4
Aug 1, 2024 06:09:25.991643906 CEST	49809	587	192.168.2.4	160.13.60.151
Aug 1, 2024 06:09:25.991800070 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:25.991857052 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:25.991857052 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:25.991888046 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:25.991931915 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:25.991946936 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:25.991980076 CEST	49809	587	192.168.2.4	160.13.60.151
Aug 1, 2024 06:09:25.991981030 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:25.992013931 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:25.992026091 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:25.992050886 CEST	49809	587	192.168.2.4	160.13.60.151
Aug 1, 2024 06:09:25.992080927 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:25.992136955 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:25.992139101 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:25.992170095 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:25.992203951 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:25.992218018 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:25.992240906 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:25.992269993 CEST	49809	587	192.168.2.4	160.13.60.151
Aug 1, 2024 06:09:25.992283106 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:25.992310047 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:25.992350101 CEST	49809	587	192.168.2.4	160.13.60.151
Aug 1, 2024 06:09:25.992367983 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:25.992403984 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:25.992417097 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:25.992439032 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:25.992479086 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:25.992808104 CEST	587	49817	13.250.88.201	192.168.2.4
Aug 1, 2024 06:09:25.992929935 CEST	587	49809	160.13.60.151	192.168.2.4
Aug 1, 2024 06:09:25.992959023 CEST	587	49809	160.13.60.151	192.168.2.4
Aug 1, 2024 06:09:25.992990971 CEST	587	49809	160.13.60.151	192.168.2.4
Aug 1, 2024 06:09:25.993041992 CEST	587	49809	160.13.60.151	192.168.2.4
Aug 1, 2024 06:09:25.993068933 CEST	587	49809	160.13.60.151	192.168.2.4
Aug 1, 2024 06:09:25.993855953 CEST	587	49809	160.13.60.151	192.168.2.4
Aug 1, 2024 06:09:25.994014025 CEST	587	49809	160.13.60.151	192.168.2.4
Aug 1, 2024 06:09:25.994041920 CEST	587	49809	160.13.60.151	192.168.2.4
Aug 1, 2024 06:09:25.994112968 CEST	587	49809	160.13.60.151	192.168.2.4
Aug 1, 2024 06:09:25.994163036 CEST	587	49809	160.13.60.151	192.168.2.4
Aug 1, 2024 06:09:25.994190931 CEST	587	49809	160.13.60.151	192.168.2.4
Aug 1, 2024 06:09:25.994677067 CEST	49833	587	192.168.2.4	103.15.48.10
Aug 1, 2024 06:09:25.995080948 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:25.995157957 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:25.995210886 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:25.995287895 CEST	49809	587	192.168.2.4	160.13.60.151
Aug 1, 2024 06:09:25.995501041 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:25.995529890 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:25.995574951 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:25.995615959 CEST	49809	587	192.168.2.4	160.13.60.151
Aug 1, 2024 06:09:25.996056080 CEST	587	49809	160.13.60.151	192.168.2.4
Aug 1, 2024 06:09:25.996181965 CEST	587	49809	160.13.60.151	192.168.2.4
Aug 1, 2024 06:09:25.996216059 CEST	587	49832	139.95.7.216	192.168.2.4
Aug 1, 2024 06:09:25.996284962 CEST	49832	587	192.168.2.4	139.95.7.216
Aug 1, 2024 06:09:25.996398926 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:25.996509075 CEST	49821	587	192.168.2.4	209.71.212.26
Aug 1, 2024 06:09:25.996547937 CEST	587	49809	160.13.60.151	192.168.2.4
Aug 1, 2024 06:09:25.996575117 CEST	587	49809	160.13.60.151	192.168.2.4
Aug 1, 2024 06:09:25.996593952 CEST	49825	587	192.168.2.4	31.179.210.222
Aug 1, 2024 06:09:25.997400999 CEST	587	49809	160.13.60.151	192.168.2.4
Aug 1, 2024 06:09:25.997430086 CEST	587	49809	160.13.60.151	192.168.2.4
Aug 1, 2024 06:09:25.997544050 CEST	587	49809	160.13.60.151	192.168.2.4
Aug 1, 2024 06:09:25.997571945 CEST	587	49809	160.13.60.151	192.168.2.4
Aug 1, 2024 06:09:25.997600079 CEST	587	49809	160.13.60.151	192.168.2.4
Aug 1, 2024 06:09:25.997628927 CEST	587	49809	160.13.60.151	192.168.2.4
Aug 1, 2024 06:09:25.997657061 CEST	587	49809	160.13.60.151	192.168.2.4
Aug 1, 2024 06:09:25.997684956 CEST	587	49809	160.13.60.151	192.168.2.4
Aug 1, 2024 06:09:25.999573946 CEST	587	49833	103.15.48.10	192.168.2.4
Aug 1, 2024 06:09:25.999644041 CEST	49833	587	192.168.2.4	103.15.48.10
Aug 1, 2024 06:09:26.000222921 CEST	587	49809	160.13.60.151	192.168.2.4
Aug 1, 2024 06:09:26.000257969 CEST	587	49809	160.13.60.151	192.168.2.4
Aug 1, 2024 06:09:26.000291109 CEST	587	49809	160.13.60.151	192.168.2.4
Aug 1, 2024 06:09:26.000343084 CEST	587	49809	160.13.60.151	192.168.2.4
Aug 1, 2024 06:09:26.000437021 CEST	587	49809	160.13.60.151	192.168.2.4
Aug 1, 2024 06:09:26.000463963 CEST	587	49809	160.13.60.151	192.168.2.4
Aug 1, 2024 06:09:26.000808954 CEST	587	49809	160.13.60.151	192.168.2.4
Aug 1, 2024 06:09:26.000860929 CEST	587	49809	160.13.60.151	192.168.2.4
Aug 1, 2024 06:09:26.012157917 CEST	49801	587	192.168.2.4	165.140.69.186
Aug 1, 2024 06:09:26.021661997 CEST	587	49816	83.243.58.138	192.168.2.4
Aug 1, 2024 06:09:26.027770996 CEST	49827	587	192.168.2.4	13.250.88.201
Aug 1, 2024 06:09:26.038665056 CEST	587	49821	209.71.212.26	192.168.2.4
Aug 1, 2024 06:09:26.045133114 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:26.045192957 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:26.050945044 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:26.065036058 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:26.065182924 CEST	49809	587	192.168.2.4	160.13.60.151
Aug 1, 2024 06:09:26.065388918 CEST	49829	587	192.168.2.4	191.252.112.195
Aug 1, 2024 06:09:26.065391064 CEST	49823	587	192.168.2.4	13.77.77.162
Aug 1, 2024 06:09:26.065417051 CEST	49804	587	192.168.2.4	144.217.158.194
Aug 1, 2024 06:09:26.070930004 CEST	587	49809	160.13.60.151	192.168.2.4
Aug 1, 2024 06:09:26.071079969 CEST	587	49823	13.77.77.162	192.168.2.4
Aug 1, 2024 06:09:26.071110964 CEST	587	49829	191.252.112.195	192.168.2.4
Aug 1, 2024 06:09:26.071420908 CEST	587	49804	144.217.158.194	192.168.2.4
Aug 1, 2024 06:09:26.074668884 CEST	49816	587	192.168.2.4	83.243.58.138
Aug 1, 2024 06:09:26.082119942 CEST	587	49828	178.251.28.102	192.168.2.4
Aug 1, 2024 06:09:26.082242012 CEST	587	49826	37.120.193.124	192.168.2.4
Aug 1, 2024 06:09:26.082340956 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:26.090276003 CEST	49821	587	192.168.2.4	209.71.212.26
Aug 1, 2024 06:09:26.103734970 CEST	587	49818	103.86.139.86	192.168.2.4
Aug 1, 2024 06:09:26.103765965 CEST	587	49806	83.166.143.44	192.168.2.4
Aug 1, 2024 06:09:26.109081030 CEST	587	49813	62.149.157.154	192.168.2.4
Aug 1, 2024 06:09:26.109802008 CEST	587	49831	66.133.129.50	192.168.2.4
Aug 1, 2024 06:09:26.111382961 CEST	587	49822	191.252.112.194	192.168.2.4
Aug 1, 2024 06:09:26.112121105 CEST	587	49814	62.149.128.201	192.168.2.4
Aug 1, 2024 06:09:26.120898008 CEST	49834	587	192.168.2.4	162.241.62.39
Aug 1, 2024 06:09:26.126796007 CEST	587	49834	162.241.62.39	192.168.2.4
Aug 1, 2024 06:09:26.126977921 CEST	49834	587	192.168.2.4	162.241.62.39
Aug 1, 2024 06:09:26.132989883 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:26.133061886 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:26.137214899 CEST	49828	587	192.168.2.4	178.251.28.102
Aug 1, 2024 06:09:26.138125896 CEST	49826	587	192.168.2.4	37.120.193.124
Aug 1, 2024 06:09:26.138946056 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:26.144637108 CEST	587	49755	50.116.87.178	192.168.2.4
Aug 1, 2024 06:09:26.144821882 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:26.150784969 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:26.152770996 CEST	49806	587	192.168.2.4	83.166.143.44
Aug 1, 2024 06:09:26.152792931 CEST	49813	587	192.168.2.4	62.149.157.154
Aug 1, 2024 06:09:26.152792931 CEST	49814	587	192.168.2.4	62.149.128.201
Aug 1, 2024 06:09:26.152798891 CEST	49831	587	192.168.2.4	66.133.129.50
Aug 1, 2024 06:09:26.152807951 CEST	49818	587	192.168.2.4	103.86.139.86
Aug 1, 2024 06:09:26.152903080 CEST	49822	587	192.168.2.4	191.252.112.194
Aug 1, 2024 06:09:26.172673941 CEST	587	49823	13.77.77.162	192.168.2.4
Aug 1, 2024 06:09:26.172931910 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:26.177856922 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:26.184089899 CEST	49755	587	192.168.2.4	50.116.87.178
Aug 1, 2024 06:09:26.185053110 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:26.185332060 CEST	49824	587	192.168.2.4	41.110.190.122
Aug 1, 2024 06:09:26.185406923 CEST	49815	587	192.168.2.4	210.59.228.38
Aug 1, 2024 06:09:26.190378904 CEST	587	49824	41.110.190.122	192.168.2.4
Aug 1, 2024 06:09:26.190773010 CEST	587	49815	210.59.228.38	192.168.2.4
Aug 1, 2024 06:09:26.215323925 CEST	49823	587	192.168.2.4	13.77.77.162
Aug 1, 2024 06:09:26.230994940 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:26.273672104 CEST	587	49829	191.252.112.195	192.168.2.4
Aug 1, 2024 06:09:26.273888111 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:26.315294981 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:26.315563917 CEST	49801	587	192.168.2.4	165.140.69.186
Aug 1, 2024 06:09:26.315618038 CEST	49827	587	192.168.2.4	13.250.88.201
Aug 1, 2024 06:09:26.315721035 CEST	49825	587	192.168.2.4	31.179.210.222
Aug 1, 2024 06:09:26.316025972 CEST	587	49799	198.54.120.144	192.168.2.4
Aug 1, 2024 06:09:26.316221952 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:26.320528030 CEST	587	49801	165.140.69.186	192.168.2.4
Aug 1, 2024 06:09:26.320560932 CEST	587	49827	13.250.88.201	192.168.2.4
Aug 1, 2024 06:09:26.320594072 CEST	587	49825	31.179.210.222	192.168.2.4
Aug 1, 2024 06:09:26.324632883 CEST	49829	587	192.168.2.4	191.252.112.195
Aug 1, 2024 06:09:26.325159073 CEST	587	49820	13.250.88.201	192.168.2.4
Aug 1, 2024 06:09:26.325216055 CEST	587	49820	13.250.88.201	192.168.2.4
Aug 1, 2024 06:09:26.325251102 CEST	587	49820	13.250.88.201	192.168.2.4
Aug 1, 2024 06:09:26.325285912 CEST	587	49820	13.250.88.201	192.168.2.4
Aug 1, 2024 06:09:26.325299978 CEST	49820	587	192.168.2.4	13.250.88.201
Aug 1, 2024 06:09:26.325349092 CEST	49820	587	192.168.2.4	13.250.88.201
Aug 1, 2024 06:09:26.325551033 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:26.328907967 CEST	587	49817	13.250.88.201	192.168.2.4
Aug 1, 2024 06:09:26.330352068 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:26.330403090 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:26.330437899 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:26.334731102 CEST	587	49819	103.110.129.117	192.168.2.4
Aug 1, 2024 06:09:26.335257053 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:26.335309029 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:26.349117994 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:26.349148989 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:26.349203110 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:26.349236965 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:26.349272966 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:26.349323988 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:26.349329948 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:26.349329948 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:26.349360943 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:26.349380970 CEST	49821	587	192.168.2.4	209.71.212.26
Aug 1, 2024 06:09:26.349394083 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:26.349395037 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:26.349426985 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:26.349473953 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:26.349510908 CEST	49816	587	192.168.2.4	83.243.58.138
Aug 1, 2024 06:09:26.349596024 CEST	49828	587	192.168.2.4	178.251.28.102
Aug 1, 2024 06:09:26.350052118 CEST	49831	587	192.168.2.4	66.133.129.50
Aug 1, 2024 06:09:26.350120068 CEST	49813	587	192.168.2.4	62.149.157.154
Aug 1, 2024 06:09:26.350152969 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:26.350208044 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:26.350208998 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:26.350210905 CEST	49806	587	192.168.2.4	83.166.143.44
Aug 1, 2024 06:09:26.350240946 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:26.350286961 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:26.350296021 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:26.350323915 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:26.350333929 CEST	49826	587	192.168.2.4	37.120.193.124
Aug 1, 2024 06:09:26.350368023 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:26.350378990 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:26.350406885 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:26.350440979 CEST	49806	587	192.168.2.4	83.166.143.44
Aug 1, 2024 06:09:26.350466013 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:26.350542068 CEST	49755	587	192.168.2.4	50.116.87.178
Aug 1, 2024 06:09:26.350615025 CEST	49814	587	192.168.2.4	62.149.128.201
Aug 1, 2024 06:09:26.350696087 CEST	49818	587	192.168.2.4	103.86.139.86
Aug 1, 2024 06:09:26.350783110 CEST	49806	587	192.168.2.4	83.166.143.44
Aug 1, 2024 06:09:26.350840092 CEST	49822	587	192.168.2.4	191.252.112.194
Aug 1, 2024 06:09:26.350909948 CEST	49806	587	192.168.2.4	83.166.143.44
Aug 1, 2024 06:09:26.350991964 CEST	49806	587	192.168.2.4	83.166.143.44
Aug 1, 2024 06:09:26.352387905 CEST	49835	587	192.168.2.4	84.2.43.67
Aug 1, 2024 06:09:26.352961063 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:26.352989912 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:26.353043079 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:26.353044033 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:26.353079081 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:26.353112936 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:26.353126049 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:26.353163958 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:26.353193998 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:26.353238106 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:26.353244066 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:26.353296995 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:26.353329897 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:26.353343964 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:26.353375912 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:26.353864908 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:26.353893042 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:26.353951931 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:26.354296923 CEST	587	49821	209.71.212.26	192.168.2.4
Aug 1, 2024 06:09:26.354326963 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:26.354475975 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:26.354511023 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:26.354548931 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:26.354572058 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:26.354593992 CEST	587	49816	83.243.58.138	192.168.2.4
Aug 1, 2024 06:09:26.354604959 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:26.354624987 CEST	587	49828	178.251.28.102	192.168.2.4
Aug 1, 2024 06:09:26.354841948 CEST	587	49831	66.133.129.50	192.168.2.4
Aug 1, 2024 06:09:26.355264902 CEST	587	49813	62.149.157.154	192.168.2.4
Aug 1, 2024 06:09:26.355303049 CEST	587	49806	83.166.143.44	192.168.2.4
Aug 1, 2024 06:09:26.355565071 CEST	587	49806	83.166.143.44	192.168.2.4
Aug 1, 2024 06:09:26.355593920 CEST	587	49826	37.120.193.124	192.168.2.4
Aug 1, 2024 06:09:26.355622053 CEST	49806	587	192.168.2.4	83.166.143.44
Aug 1, 2024 06:09:26.355622053 CEST	587	49806	83.166.143.44	192.168.2.4
Aug 1, 2024 06:09:26.355657101 CEST	587	49806	83.166.143.44	192.168.2.4
Aug 1, 2024 06:09:26.355674982 CEST	49806	587	192.168.2.4	83.166.143.44
Aug 1, 2024 06:09:26.355709076 CEST	49806	587	192.168.2.4	83.166.143.44
Aug 1, 2024 06:09:26.355716944 CEST	587	49806	83.166.143.44	192.168.2.4
Aug 1, 2024 06:09:26.355745077 CEST	587	49755	50.116.87.178	192.168.2.4
Aug 1, 2024 06:09:26.355761051 CEST	49806	587	192.168.2.4	83.166.143.44
Aug 1, 2024 06:09:26.355789900 CEST	587	49814	62.149.128.201	192.168.2.4
Aug 1, 2024 06:09:26.355819941 CEST	587	49818	103.86.139.86	192.168.2.4
Aug 1, 2024 06:09:26.355846882 CEST	587	49806	83.166.143.44	192.168.2.4
Aug 1, 2024 06:09:26.355874062 CEST	587	49806	83.166.143.44	192.168.2.4
Aug 1, 2024 06:09:26.355901003 CEST	587	49806	83.166.143.44	192.168.2.4
Aug 1, 2024 06:09:26.355927944 CEST	587	49806	83.166.143.44	192.168.2.4
Aug 1, 2024 06:09:26.355932951 CEST	49806	587	192.168.2.4	83.166.143.44
Aug 1, 2024 06:09:26.355977058 CEST	49799	587	192.168.2.4	198.54.120.144
Aug 1, 2024 06:09:26.355981112 CEST	587	49822	191.252.112.194	192.168.2.4
Aug 1, 2024 06:09:26.356008053 CEST	587	49806	83.166.143.44	192.168.2.4
Aug 1, 2024 06:09:26.356034994 CEST	587	49806	83.166.143.44	192.168.2.4
Aug 1, 2024 06:09:26.356061935 CEST	587	49806	83.166.143.44	192.168.2.4
Aug 1, 2024 06:09:26.356089115 CEST	587	49806	83.166.143.44	192.168.2.4
Aug 1, 2024 06:09:26.356117010 CEST	587	49806	83.166.143.44	192.168.2.4
Aug 1, 2024 06:09:26.357270002 CEST	587	49835	84.2.43.67	192.168.2.4
Aug 1, 2024 06:09:26.357945919 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:26.357984066 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:26.358019114 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:26.358032942 CEST	49835	587	192.168.2.4	84.2.43.67
Aug 1, 2024 06:09:26.358055115 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:26.358071089 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:26.358104944 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:26.358139992 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:26.358151913 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:26.358196974 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:26.358198881 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:26.358211040 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:26.358232975 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:26.358243942 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:26.358268023 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:26.358277082 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:26.358309984 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:26.358320951 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:26.358356953 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:26.358361959 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:26.358364105 CEST	49806	587	192.168.2.4	83.166.143.44
Aug 1, 2024 06:09:26.358392000 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:26.358405113 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:26.358437061 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:26.358491898 CEST	49806	587	192.168.2.4	83.166.143.44
Aug 1, 2024 06:09:26.358588934 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:26.358623028 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:26.358639956 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:26.358656883 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:26.358665943 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:26.358700037 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:26.360723972 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:26.360754967 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:26.360814095 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:26.360866070 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:26.360918999 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:26.360951900 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:26.360969067 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:26.360996962 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:26.361026049 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:26.361042976 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:26.361058950 CEST	587	49806	83.166.143.44	192.168.2.4
Aug 1, 2024 06:09:26.361110926 CEST	587	49806	83.166.143.44	192.168.2.4
Aug 1, 2024 06:09:26.361113071 CEST	49806	587	192.168.2.4	83.166.143.44
Aug 1, 2024 06:09:26.361139059 CEST	587	49806	83.166.143.44	192.168.2.4
Aug 1, 2024 06:09:26.361174107 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:26.361247063 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:26.361274958 CEST	587	49806	83.166.143.44	192.168.2.4
Aug 1, 2024 06:09:26.361294031 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:26.361326933 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:26.361361027 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:26.361392021 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:26.361414909 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:26.361428022 CEST	587	49806	83.166.143.44	192.168.2.4
Aug 1, 2024 06:09:26.361440897 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:26.361455917 CEST	587	49806	83.166.143.44	192.168.2.4
Aug 1, 2024 06:09:26.361655951 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:26.361706972 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:26.361721992 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:26.361752033 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:26.361768961 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:26.361794949 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:26.361805916 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:26.361836910 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:26.361850977 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:26.363869905 CEST	587	49806	83.166.143.44	192.168.2.4
Aug 1, 2024 06:09:26.363923073 CEST	587	49806	83.166.143.44	192.168.2.4
Aug 1, 2024 06:09:26.363950014 CEST	587	49806	83.166.143.44	192.168.2.4
Aug 1, 2024 06:09:26.363977909 CEST	587	49806	83.166.143.44	192.168.2.4
Aug 1, 2024 06:09:26.364011049 CEST	587	49806	83.166.143.44	192.168.2.4
Aug 1, 2024 06:09:26.364599943 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:26.364636898 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:26.364660978 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:26.364690065 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:26.364722967 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:26.364769936 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:26.364809036 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:26.364837885 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:26.364885092 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:26.364954948 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:26.365008116 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:26.365012884 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:26.365040064 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:26.365087986 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:26.365506887 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:26.365540028 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:26.365576029 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:26.365628004 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:26.365634918 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:26.365663052 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:26.365711927 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:26.365716934 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:26.365748882 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:26.365765095 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:26.365781069 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:26.365823030 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:26.365850925 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:26.365874052 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:26.365897894 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:26.366082907 CEST	49806	587	192.168.2.4	83.166.143.44
Aug 1, 2024 06:09:26.366331100 CEST	587	49806	83.166.143.44	192.168.2.4
Aug 1, 2024 06:09:26.366344929 CEST	49806	587	192.168.2.4	83.166.143.44
Aug 1, 2024 06:09:26.366436005 CEST	587	49806	83.166.143.44	192.168.2.4
Aug 1, 2024 06:09:26.366456985 CEST	49806	587	192.168.2.4	83.166.143.44
Aug 1, 2024 06:09:26.366579056 CEST	49806	587	192.168.2.4	83.166.143.44
Aug 1, 2024 06:09:26.366704941 CEST	49806	587	192.168.2.4	83.166.143.44
Aug 1, 2024 06:09:26.366801977 CEST	49806	587	192.168.2.4	83.166.143.44
Aug 1, 2024 06:09:26.366899967 CEST	49806	587	192.168.2.4	83.166.143.44
Aug 1, 2024 06:09:26.366986990 CEST	49806	587	192.168.2.4	83.166.143.44
Aug 1, 2024 06:09:26.367073059 CEST	49806	587	192.168.2.4	83.166.143.44
Aug 1, 2024 06:09:26.367161989 CEST	49806	587	192.168.2.4	83.166.143.44
Aug 1, 2024 06:09:26.367250919 CEST	49806	587	192.168.2.4	83.166.143.44
Aug 1, 2024 06:09:26.367347956 CEST	49806	587	192.168.2.4	83.166.143.44
Aug 1, 2024 06:09:26.368341923 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:26.368371010 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:26.368424892 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:26.368432045 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:26.368458033 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:26.368486881 CEST	49806	587	192.168.2.4	83.166.143.44
Aug 1, 2024 06:09:26.368499994 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:26.368514061 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:26.368767977 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:26.368794918 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:26.368846893 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:26.368907928 CEST	49806	587	192.168.2.4	83.166.143.44
Aug 1, 2024 06:09:26.370944023 CEST	587	49806	83.166.143.44	192.168.2.4
Aug 1, 2024 06:09:26.370996952 CEST	587	49806	83.166.143.44	192.168.2.4
Aug 1, 2024 06:09:26.371433973 CEST	587	49806	83.166.143.44	192.168.2.4
Aug 1, 2024 06:09:26.371463060 CEST	587	49806	83.166.143.44	192.168.2.4
Aug 1, 2024 06:09:26.371543884 CEST	49817	587	192.168.2.4	13.250.88.201
Aug 1, 2024 06:09:26.371627092 CEST	587	49806	83.166.143.44	192.168.2.4
Aug 1, 2024 06:09:26.371654987 CEST	587	49806	83.166.143.44	192.168.2.4
Aug 1, 2024 06:09:26.371686935 CEST	587	49806	83.166.143.44	192.168.2.4
Aug 1, 2024 06:09:26.371714115 CEST	587	49806	83.166.143.44	192.168.2.4
Aug 1, 2024 06:09:26.371931076 CEST	587	49806	83.166.143.44	192.168.2.4
Aug 1, 2024 06:09:26.371964931 CEST	587	49806	83.166.143.44	192.168.2.4
Aug 1, 2024 06:09:26.372122049 CEST	587	49806	83.166.143.44	192.168.2.4
Aug 1, 2024 06:09:26.372149944 CEST	587	49806	83.166.143.44	192.168.2.4
Aug 1, 2024 06:09:26.372203112 CEST	587	49806	83.166.143.44	192.168.2.4
Aug 1, 2024 06:09:26.372231960 CEST	587	49806	83.166.143.44	192.168.2.4
Aug 1, 2024 06:09:26.372265100 CEST	587	49806	83.166.143.44	192.168.2.4
Aug 1, 2024 06:09:26.372292995 CEST	587	49806	83.166.143.44	192.168.2.4
Aug 1, 2024 06:09:26.372343063 CEST	587	49806	83.166.143.44	192.168.2.4
Aug 1, 2024 06:09:26.372370005 CEST	587	49806	83.166.143.44	192.168.2.4
Aug 1, 2024 06:09:26.372421026 CEST	587	49806	83.166.143.44	192.168.2.4
Aug 1, 2024 06:09:26.372447968 CEST	587	49806	83.166.143.44	192.168.2.4
Aug 1, 2024 06:09:26.372678995 CEST	587	49806	83.166.143.44	192.168.2.4
Aug 1, 2024 06:09:26.372706890 CEST	587	49806	83.166.143.44	192.168.2.4
Aug 1, 2024 06:09:26.372735023 CEST	587	49806	83.166.143.44	192.168.2.4
Aug 1, 2024 06:09:26.372761965 CEST	587	49806	83.166.143.44	192.168.2.4
Aug 1, 2024 06:09:26.373405933 CEST	587	49806	83.166.143.44	192.168.2.4
Aug 1, 2024 06:09:26.373522997 CEST	587	49806	83.166.143.44	192.168.2.4
Aug 1, 2024 06:09:26.373745918 CEST	587	49806	83.166.143.44	192.168.2.4
Aug 1, 2024 06:09:26.373857021 CEST	587	49806	83.166.143.44	192.168.2.4
Aug 1, 2024 06:09:26.374022007 CEST	587	49806	83.166.143.44	192.168.2.4
Aug 1, 2024 06:09:26.375030041 CEST	587	49806	83.166.143.44	192.168.2.4
Aug 1, 2024 06:09:26.387176991 CEST	49819	587	192.168.2.4	103.110.129.117
Aug 1, 2024 06:09:26.413259029 CEST	49836	587	192.168.2.4	111.175.54.98
Aug 1, 2024 06:09:26.413423061 CEST	587	49824	41.110.190.122	192.168.2.4
Aug 1, 2024 06:09:26.413459063 CEST	587	49824	41.110.190.122	192.168.2.4
Aug 1, 2024 06:09:26.413491964 CEST	587	49824	41.110.190.122	192.168.2.4
Aug 1, 2024 06:09:26.413512945 CEST	49824	587	192.168.2.4	41.110.190.122
Aug 1, 2024 06:09:26.413527012 CEST	587	49824	41.110.190.122	192.168.2.4
Aug 1, 2024 06:09:26.413583994 CEST	49824	587	192.168.2.4	41.110.190.122
Aug 1, 2024 06:09:26.413676977 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:26.413875103 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:26.414171934 CEST	587	49824	41.110.190.122	192.168.2.4
Aug 1, 2024 06:09:26.414203882 CEST	587	49824	41.110.190.122	192.168.2.4
Aug 1, 2024 06:09:26.414235115 CEST	587	49824	41.110.190.122	192.168.2.4
Aug 1, 2024 06:09:26.414247036 CEST	49824	587	192.168.2.4	41.110.190.122
Aug 1, 2024 06:09:26.414387941 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:26.414387941 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:26.418072939 CEST	587	49836	111.175.54.98	192.168.2.4
Aug 1, 2024 06:09:26.418148041 CEST	49836	587	192.168.2.4	111.175.54.98
Aug 1, 2024 06:09:26.418629885 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:26.418786049 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:26.418842077 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:26.419306040 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:26.423752069 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:26.427136898 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:26.427263975 CEST	49806	587	192.168.2.4	83.166.143.44
Aug 1, 2024 06:09:26.432187080 CEST	587	49806	83.166.143.44	192.168.2.4
Aug 1, 2024 06:09:26.452044964 CEST	587	49831	66.133.129.50	192.168.2.4
Aug 1, 2024 06:09:26.452513933 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:26.462966919 CEST	587	49755	50.116.87.178	192.168.2.4
Aug 1, 2024 06:09:26.465390921 CEST	49824	587	192.168.2.4	41.110.190.122
Aug 1, 2024 06:09:26.473465919 CEST	587	49821	209.71.212.26	192.168.2.4
Aug 1, 2024 06:09:26.494182110 CEST	587	49815	210.59.228.38	192.168.2.4
Aug 1, 2024 06:09:26.496730089 CEST	49831	587	192.168.2.4	66.133.129.50
Aug 1, 2024 06:09:26.504384995 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:26.504688025 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:26.505469084 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:26.505937099 CEST	49823	587	192.168.2.4	13.77.77.162
Aug 1, 2024 06:09:26.506068945 CEST	49829	587	192.168.2.4	191.252.112.195
Aug 1, 2024 06:09:26.506159067 CEST	49799	587	192.168.2.4	198.54.120.144
Aug 1, 2024 06:09:26.509526968 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:26.510901928 CEST	587	49823	13.77.77.162	192.168.2.4
Aug 1, 2024 06:09:26.510951996 CEST	587	49829	191.252.112.195	192.168.2.4
Aug 1, 2024 06:09:26.511008978 CEST	587	49799	198.54.120.144	192.168.2.4
Aug 1, 2024 06:09:26.512347937 CEST	49755	587	192.168.2.4	50.116.87.178
Aug 1, 2024 06:09:26.512656927 CEST	49787	587	192.168.2.4	191.252.112.195
Aug 1, 2024 06:09:26.512732029 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:26.512824059 CEST	49743	587	192.168.2.4	199.224.64.206
Aug 1, 2024 06:09:26.513408899 CEST	49746	587	192.168.2.4	103.92.235.45
Aug 1, 2024 06:09:26.513422012 CEST	49770	587	192.168.2.4	62.149.157.154
Aug 1, 2024 06:09:26.517802954 CEST	587	49787	191.252.112.195	192.168.2.4
Aug 1, 2024 06:09:26.517860889 CEST	49787	587	192.168.2.4	191.252.112.195
Aug 1, 2024 06:09:26.518013000 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:26.518122911 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:26.518542051 CEST	587	49743	199.224.64.206	192.168.2.4
Aug 1, 2024 06:09:26.518600941 CEST	49743	587	192.168.2.4	199.224.64.206
Aug 1, 2024 06:09:26.519094944 CEST	587	49746	103.92.235.45	192.168.2.4
Aug 1, 2024 06:09:26.519125938 CEST	587	49770	62.149.157.154	192.168.2.4
Aug 1, 2024 06:09:26.519150019 CEST	49746	587	192.168.2.4	103.92.235.45
Aug 1, 2024 06:09:26.519169092 CEST	49770	587	192.168.2.4	62.149.157.154
Aug 1, 2024 06:09:26.523009062 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:26.524130106 CEST	587	49825	31.179.210.222	192.168.2.4
Aug 1, 2024 06:09:26.524184942 CEST	587	49825	31.179.210.222	192.168.2.4
Aug 1, 2024 06:09:26.524215937 CEST	587	49825	31.179.210.222	192.168.2.4
Aug 1, 2024 06:09:26.524250984 CEST	587	49825	31.179.210.222	192.168.2.4
Aug 1, 2024 06:09:26.524324894 CEST	49825	587	192.168.2.4	31.179.210.222
Aug 1, 2024 06:09:26.524399996 CEST	49825	587	192.168.2.4	31.179.210.222
Aug 1, 2024 06:09:26.524543047 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:26.527774096 CEST	49821	587	192.168.2.4	209.71.212.26
Aug 1, 2024 06:09:26.529438972 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:26.529515982 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:26.529577971 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:26.537707090 CEST	587	49828	178.251.28.102	192.168.2.4
Aug 1, 2024 06:09:26.537749052 CEST	587	49828	178.251.28.102	192.168.2.4
Aug 1, 2024 06:09:26.537825108 CEST	49828	587	192.168.2.4	178.251.28.102
Aug 1, 2024 06:09:26.537997961 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:26.540704012 CEST	587	49830	210.116.104.65	192.168.2.4
Aug 1, 2024 06:09:26.542793036 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:26.542973995 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:26.543252945 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:26.543421984 CEST	49815	587	192.168.2.4	210.59.228.38
Aug 1, 2024 06:09:26.545902014 CEST	587	49816	83.243.58.138	192.168.2.4
Aug 1, 2024 06:09:26.546875000 CEST	587	49824	41.110.190.122	192.168.2.4
Aug 1, 2024 06:09:26.548038006 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:26.548101902 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:26.552932024 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:26.555139065 CEST	587	49813	62.149.157.154	192.168.2.4
Aug 1, 2024 06:09:26.555354118 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:26.558367968 CEST	587	49814	62.149.128.201	192.168.2.4
Aug 1, 2024 06:09:26.558578968 CEST	587	49814	62.149.128.201	192.168.2.4
Aug 1, 2024 06:09:26.558655024 CEST	49814	587	192.168.2.4	62.149.128.201
Aug 1, 2024 06:09:26.558937073 CEST	49814	587	192.168.2.4	62.149.128.201
Aug 1, 2024 06:09:26.560173988 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:26.560245991 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:26.563889027 CEST	587	49814	62.149.128.201	192.168.2.4
Aug 1, 2024 06:09:26.565062046 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:26.566181898 CEST	587	49822	191.252.112.194	192.168.2.4
Aug 1, 2024 06:09:26.566215992 CEST	587	49822	191.252.112.194	192.168.2.4
Aug 1, 2024 06:09:26.566272020 CEST	587	49822	191.252.112.194	192.168.2.4
Aug 1, 2024 06:09:26.566289902 CEST	49822	587	192.168.2.4	191.252.112.194
Aug 1, 2024 06:09:26.566312075 CEST	587	49822	191.252.112.194	192.168.2.4
Aug 1, 2024 06:09:26.566340923 CEST	587	49822	191.252.112.194	192.168.2.4
Aug 1, 2024 06:09:26.566361904 CEST	49822	587	192.168.2.4	191.252.112.194
Aug 1, 2024 06:09:26.566447973 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:26.566647053 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:26.571300030 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:26.571451902 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:26.571516991 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:26.571623087 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:26.571655989 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:26.574994087 CEST	587	49789	66.248.160.85	192.168.2.4
Aug 1, 2024 06:09:26.575464010 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:26.580344915 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:26.590267897 CEST	49830	587	192.168.2.4	210.116.104.65
Aug 1, 2024 06:09:26.590281010 CEST	49816	587	192.168.2.4	83.243.58.138
Aug 1, 2024 06:09:26.590300083 CEST	49824	587	192.168.2.4	41.110.190.122
Aug 1, 2024 06:09:26.596581936 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:26.596714973 CEST	49820	587	192.168.2.4	13.250.88.201
Aug 1, 2024 06:09:26.596802950 CEST	49817	587	192.168.2.4	13.250.88.201
Aug 1, 2024 06:09:26.596930981 CEST	49819	587	192.168.2.4	103.110.129.117
Aug 1, 2024 06:09:26.601600885 CEST	587	49820	13.250.88.201	192.168.2.4
Aug 1, 2024 06:09:26.601762056 CEST	587	49817	13.250.88.201	192.168.2.4
Aug 1, 2024 06:09:26.601792097 CEST	587	49819	103.110.129.117	192.168.2.4
Aug 1, 2024 06:09:26.605904102 CEST	49813	587	192.168.2.4	62.149.157.154
Aug 1, 2024 06:09:26.606441021 CEST	49785	587	192.168.2.4	209.71.212.26
Aug 1, 2024 06:09:26.606441021 CEST	49822	587	192.168.2.4	191.252.112.194
Aug 1, 2024 06:09:26.606574059 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:26.611989975 CEST	587	49785	209.71.212.26	192.168.2.4
Aug 1, 2024 06:09:26.612133980 CEST	49785	587	192.168.2.4	209.71.212.26
Aug 1, 2024 06:09:26.613331079 CEST	587	49826	37.120.193.124	192.168.2.4
Aug 1, 2024 06:09:26.613368988 CEST	587	49826	37.120.193.124	192.168.2.4
Aug 1, 2024 06:09:26.613404036 CEST	587	49826	37.120.193.124	192.168.2.4
Aug 1, 2024 06:09:26.613429070 CEST	49826	587	192.168.2.4	37.120.193.124
Aug 1, 2024 06:09:26.613434076 CEST	587	49823	13.77.77.162	192.168.2.4
Aug 1, 2024 06:09:26.613630056 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:26.618524075 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:26.618654013 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:26.618712902 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:26.621526003 CEST	49789	587	192.168.2.4	66.248.160.85
Aug 1, 2024 06:09:26.645335913 CEST	587	49827	13.250.88.201	192.168.2.4
Aug 1, 2024 06:09:26.652779102 CEST	49826	587	192.168.2.4	37.120.193.124
Aug 1, 2024 06:09:26.652802944 CEST	49823	587	192.168.2.4	13.77.77.162
Aug 1, 2024 06:09:26.664372921 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:26.664583921 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:26.669821024 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:26.682785988 CEST	587	49822	191.252.112.194	192.168.2.4
Aug 1, 2024 06:09:26.683114052 CEST	587	49834	162.241.62.39	192.168.2.4
Aug 1, 2024 06:09:26.683404922 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:26.686871052 CEST	587	49803	160.13.60.151	192.168.2.4
Aug 1, 2024 06:09:26.687019110 CEST	587	49803	160.13.60.151	192.168.2.4
Aug 1, 2024 06:09:26.687077045 CEST	49803	587	192.168.2.4	160.13.60.151
Aug 1, 2024 06:09:26.687294960 CEST	49803	587	192.168.2.4	160.13.60.151
Aug 1, 2024 06:09:26.688231945 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:26.688626051 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:26.692044973 CEST	587	49803	160.13.60.151	192.168.2.4
Aug 1, 2024 06:09:26.693423986 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:26.695496082 CEST	587	49818	103.86.139.86	192.168.2.4
Aug 1, 2024 06:09:26.695527077 CEST	587	49818	103.86.139.86	192.168.2.4
Aug 1, 2024 06:09:26.695561886 CEST	587	49818	103.86.139.86	192.168.2.4
Aug 1, 2024 06:09:26.695589066 CEST	49818	587	192.168.2.4	103.86.139.86
Aug 1, 2024 06:09:26.695596933 CEST	587	49818	103.86.139.86	192.168.2.4
Aug 1, 2024 06:09:26.695724964 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:26.695740938 CEST	49818	587	192.168.2.4	103.86.139.86
Aug 1, 2024 06:09:26.695940971 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:26.699655056 CEST	49827	587	192.168.2.4	13.250.88.201
Aug 1, 2024 06:09:26.700593948 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:26.700691938 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:26.700742006 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:26.700993061 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:26.703758001 CEST	587	49826	37.120.193.124	192.168.2.4
Aug 1, 2024 06:09:26.709970951 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:26.714135885 CEST	587	49829	191.252.112.195	192.168.2.4
Aug 1, 2024 06:09:26.714848042 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:26.715007067 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:26.719804049 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:26.722008944 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:26.722588062 CEST	49831	587	192.168.2.4	66.133.129.50
Aug 1, 2024 06:09:26.728518963 CEST	587	49831	66.133.129.50	192.168.2.4
Aug 1, 2024 06:09:26.730901003 CEST	49822	587	192.168.2.4	191.252.112.194
Aug 1, 2024 06:09:26.730904102 CEST	49834	587	192.168.2.4	162.241.62.39
Aug 1, 2024 06:09:26.740637064 CEST	49837	587	192.168.2.4	192.185.32.240
Aug 1, 2024 06:09:26.745452881 CEST	587	49837	192.185.32.240	192.168.2.4
Aug 1, 2024 06:09:26.746624947 CEST	49826	587	192.168.2.4	37.120.193.124
Aug 1, 2024 06:09:26.746655941 CEST	49837	587	192.168.2.4	192.185.32.240
Aug 1, 2024 06:09:26.748029947 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:26.762173891 CEST	49829	587	192.168.2.4	191.252.112.195
Aug 1, 2024 06:09:26.768765926 CEST	49838	587	192.168.2.4	212.91.113.96
Aug 1, 2024 06:09:26.773658991 CEST	587	49838	212.91.113.96	192.168.2.4
Aug 1, 2024 06:09:26.776242971 CEST	49838	587	192.168.2.4	212.91.113.96
Aug 1, 2024 06:09:26.781821012 CEST	587	49818	103.86.139.86	192.168.2.4
Aug 1, 2024 06:09:26.793081999 CEST	587	49799	198.54.120.144	192.168.2.4
Aug 1, 2024 06:09:26.796278954 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:26.796436071 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:26.801351070 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:26.824796915 CEST	49818	587	192.168.2.4	103.86.139.86
Aug 1, 2024 06:09:26.825766087 CEST	587	49831	66.133.129.50	192.168.2.4
Aug 1, 2024 06:09:26.825951099 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:26.831192970 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:26.833514929 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:26.833786964 CEST	49815	587	192.168.2.4	210.59.228.38
Aug 1, 2024 06:09:26.833878994 CEST	49821	587	192.168.2.4	209.71.212.26
Aug 1, 2024 06:09:26.834024906 CEST	49825	587	192.168.2.4	31.179.210.222
Aug 1, 2024 06:09:26.834076881 CEST	49830	587	192.168.2.4	210.116.104.65
Aug 1, 2024 06:09:26.834166050 CEST	49816	587	192.168.2.4	83.243.58.138
Aug 1, 2024 06:09:26.834233999 CEST	49813	587	192.168.2.4	62.149.157.154
Aug 1, 2024 06:09:26.834307909 CEST	49824	587	192.168.2.4	41.110.190.122
Aug 1, 2024 06:09:26.834454060 CEST	49828	587	192.168.2.4	178.251.28.102
Aug 1, 2024 06:09:26.834532976 CEST	49789	587	192.168.2.4	66.248.160.85
Aug 1, 2024 06:09:26.838738918 CEST	587	49815	210.59.228.38	192.168.2.4
Aug 1, 2024 06:09:26.838768959 CEST	587	49821	209.71.212.26	192.168.2.4
Aug 1, 2024 06:09:26.838802099 CEST	587	49825	31.179.210.222	192.168.2.4
Aug 1, 2024 06:09:26.838852882 CEST	587	49830	210.116.104.65	192.168.2.4
Aug 1, 2024 06:09:26.839036942 CEST	587	49816	83.243.58.138	192.168.2.4
Aug 1, 2024 06:09:26.839066029 CEST	587	49813	62.149.157.154	192.168.2.4
Aug 1, 2024 06:09:26.839250088 CEST	587	49824	41.110.190.122	192.168.2.4
Aug 1, 2024 06:09:26.839278936 CEST	587	49828	178.251.28.102	192.168.2.4
Aug 1, 2024 06:09:26.839303970 CEST	49824	587	192.168.2.4	41.110.190.122
Aug 1, 2024 06:09:26.840267897 CEST	49799	587	192.168.2.4	198.54.120.144
Aug 1, 2024 06:09:26.840598106 CEST	587	49789	66.248.160.85	192.168.2.4
Aug 1, 2024 06:09:26.840818882 CEST	49755	587	192.168.2.4	50.116.87.178
Aug 1, 2024 06:09:26.840949059 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:26.844649076 CEST	587	49824	41.110.190.122	192.168.2.4
Aug 1, 2024 06:09:26.845947027 CEST	587	49755	50.116.87.178	192.168.2.4
Aug 1, 2024 06:09:26.846020937 CEST	49755	587	192.168.2.4	50.116.87.178
Aug 1, 2024 06:09:26.871681929 CEST	49831	587	192.168.2.4	66.133.129.50
Aug 1, 2024 06:09:26.883148909 CEST	587	49806	83.166.143.44	192.168.2.4
Aug 1, 2024 06:09:26.884634972 CEST	587	49832	139.95.7.216	192.168.2.4
Aug 1, 2024 06:09:26.888300896 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:26.888362885 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:26.893280983 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:26.908206940 CEST	587	49742	103.6.196.75	192.168.2.4
Aug 1, 2024 06:09:26.908406019 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:26.913245916 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:26.921144009 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:26.929567099 CEST	587	49820	13.250.88.201	192.168.2.4
Aug 1, 2024 06:09:26.929776907 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:26.934029102 CEST	49806	587	192.168.2.4	83.166.143.44
Aug 1, 2024 06:09:26.934209108 CEST	49832	587	192.168.2.4	139.95.7.216
Aug 1, 2024 06:09:26.934329987 CEST	49823	587	192.168.2.4	13.77.77.162
Aug 1, 2024 06:09:26.940104008 CEST	587	49823	13.77.77.162	192.168.2.4
Aug 1, 2024 06:09:26.940206051 CEST	49823	587	192.168.2.4	13.77.77.162
Aug 1, 2024 06:09:26.949666023 CEST	49742	587	192.168.2.4	103.6.196.75
Aug 1, 2024 06:09:26.954595089 CEST	587	49819	103.110.129.117	192.168.2.4
Aug 1, 2024 06:09:26.961924076 CEST	587	49821	209.71.212.26	192.168.2.4
Aug 1, 2024 06:09:26.970654011 CEST	587	49817	13.250.88.201	192.168.2.4
Aug 1, 2024 06:09:26.976351023 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:26.976507902 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:26.980956078 CEST	49820	587	192.168.2.4	13.250.88.201
Aug 1, 2024 06:09:26.981426954 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:26.996515036 CEST	49819	587	192.168.2.4	103.110.129.117
Aug 1, 2024 06:09:27.000587940 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:27.000777006 CEST	49834	587	192.168.2.4	162.241.62.39
Aug 1, 2024 06:09:27.000849009 CEST	49827	587	192.168.2.4	13.250.88.201
Aug 1, 2024 06:09:27.000938892 CEST	49822	587	192.168.2.4	191.252.112.194
Aug 1, 2024 06:09:27.005966902 CEST	587	49834	162.241.62.39	192.168.2.4
Aug 1, 2024 06:09:27.006017923 CEST	587	49827	13.250.88.201	192.168.2.4
Aug 1, 2024 06:09:27.006047010 CEST	587	49822	191.252.112.194	192.168.2.4
Aug 1, 2024 06:09:27.012156963 CEST	49821	587	192.168.2.4	209.71.212.26
Aug 1, 2024 06:09:27.012156963 CEST	49817	587	192.168.2.4	13.250.88.201
Aug 1, 2024 06:09:27.014301062 CEST	587	49828	178.251.28.102	192.168.2.4
Aug 1, 2024 06:09:27.016271114 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:27.029429913 CEST	587	49816	83.243.58.138	192.168.2.4
Aug 1, 2024 06:09:27.038902998 CEST	587	49813	62.149.157.154	192.168.2.4
Aug 1, 2024 06:09:27.043006897 CEST	587	49825	31.179.210.222	192.168.2.4
Aug 1, 2024 06:09:27.059020042 CEST	49828	587	192.168.2.4	178.251.28.102
Aug 1, 2024 06:09:27.060735941 CEST	587	49824	41.110.190.122	192.168.2.4
Aug 1, 2024 06:09:27.064301014 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:27.064368010 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:27.068358898 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:27.068766117 CEST	49829	587	192.168.2.4	191.252.112.195
Aug 1, 2024 06:09:27.068845987 CEST	49799	587	192.168.2.4	198.54.120.144
Aug 1, 2024 06:09:27.068902969 CEST	49826	587	192.168.2.4	37.120.193.124
Aug 1, 2024 06:09:27.069048882 CEST	49818	587	192.168.2.4	103.86.139.86
Aug 1, 2024 06:09:27.069855928 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:27.074299097 CEST	587	49829	191.252.112.195	192.168.2.4
Aug 1, 2024 06:09:27.074645996 CEST	49816	587	192.168.2.4	83.243.58.138
Aug 1, 2024 06:09:27.074906111 CEST	587	49799	198.54.120.144	192.168.2.4
Aug 1, 2024 06:09:27.074934959 CEST	587	49826	37.120.193.124	192.168.2.4
Aug 1, 2024 06:09:27.074963093 CEST	587	49818	103.86.139.86	192.168.2.4
Aug 1, 2024 06:09:27.075006962 CEST	49826	587	192.168.2.4	37.120.193.124
Aug 1, 2024 06:09:27.080437899 CEST	587	49826	37.120.193.124	192.168.2.4
Aug 1, 2024 06:09:27.090271950 CEST	49813	587	192.168.2.4	62.149.157.154
Aug 1, 2024 06:09:27.090856075 CEST	49825	587	192.168.2.4	31.179.210.222
Aug 1, 2024 06:09:27.105910063 CEST	49824	587	192.168.2.4	41.110.190.122
Aug 1, 2024 06:09:27.116565943 CEST	587	49834	162.241.62.39	192.168.2.4
Aug 1, 2024 06:09:27.118761063 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:27.124557972 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:27.155304909 CEST	587	49830	210.116.104.65	192.168.2.4
Aug 1, 2024 06:09:27.155487061 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:27.156769991 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:27.157100916 CEST	49831	587	192.168.2.4	66.133.129.50
Aug 1, 2024 06:09:27.157166004 CEST	49832	587	192.168.2.4	139.95.7.216
Aug 1, 2024 06:09:27.161931038 CEST	587	49831	66.133.129.50	192.168.2.4
Aug 1, 2024 06:09:27.162019968 CEST	587	49832	139.95.7.216	192.168.2.4
Aug 1, 2024 06:09:27.168390036 CEST	49834	587	192.168.2.4	162.241.62.39
Aug 1, 2024 06:09:27.194273949 CEST	587	49824	41.110.190.122	192.168.2.4
Aug 1, 2024 06:09:27.199652910 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:27.199655056 CEST	49830	587	192.168.2.4	210.116.104.65
Aug 1, 2024 06:09:27.202125072 CEST	587	49825	31.179.210.222	192.168.2.4
Aug 1, 2024 06:09:27.205189943 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:27.205235004 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:27.216538906 CEST	587	49822	191.252.112.194	192.168.2.4
Aug 1, 2024 06:09:27.236520052 CEST	49839	587	192.168.2.4	192.198.192.27
Aug 1, 2024 06:09:27.241456032 CEST	587	49839	192.198.192.27	192.168.2.4
Aug 1, 2024 06:09:27.241533995 CEST	49839	587	192.168.2.4	192.198.192.27
Aug 1, 2024 06:09:27.246517897 CEST	49824	587	192.168.2.4	41.110.190.122
Aug 1, 2024 06:09:27.246529102 CEST	49825	587	192.168.2.4	31.179.210.222
Aug 1, 2024 06:09:27.248032093 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:27.248094082 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:27.248176098 CEST	49742	587	192.168.2.4	103.6.196.75
Aug 1, 2024 06:09:27.248229980 CEST	49820	587	192.168.2.4	13.250.88.201
Aug 1, 2024 06:09:27.253071070 CEST	587	49742	103.6.196.75	192.168.2.4
Aug 1, 2024 06:09:27.253099918 CEST	587	49820	13.250.88.201	192.168.2.4
Aug 1, 2024 06:09:27.257329941 CEST	587	49835	84.2.43.67	192.168.2.4
Aug 1, 2024 06:09:27.259257078 CEST	587	49831	66.133.129.50	192.168.2.4
Aug 1, 2024 06:09:27.262129068 CEST	49822	587	192.168.2.4	191.252.112.194
Aug 1, 2024 06:09:27.283251047 CEST	587	49829	191.252.112.195	192.168.2.4
Aug 1, 2024 06:09:27.283318043 CEST	587	49829	191.252.112.195	192.168.2.4
Aug 1, 2024 06:09:27.283390999 CEST	587	49829	191.252.112.195	192.168.2.4
Aug 1, 2024 06:09:27.283390999 CEST	49829	587	192.168.2.4	191.252.112.195
Aug 1, 2024 06:09:27.283426046 CEST	587	49829	191.252.112.195	192.168.2.4
Aug 1, 2024 06:09:27.283459902 CEST	587	49829	191.252.112.195	192.168.2.4
Aug 1, 2024 06:09:27.283478022 CEST	49829	587	192.168.2.4	191.252.112.195
Aug 1, 2024 06:09:27.283552885 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:27.283792973 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:27.288368940 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:27.288570881 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:27.288599014 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:27.309020996 CEST	49835	587	192.168.2.4	84.2.43.67
Aug 1, 2024 06:09:27.310453892 CEST	49831	587	192.168.2.4	66.133.129.50
Aug 1, 2024 06:09:27.325990915 CEST	587	49837	192.185.32.240	192.168.2.4
Aug 1, 2024 06:09:27.326181889 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:27.329593897 CEST	49829	587	192.168.2.4	191.252.112.195
Aug 1, 2024 06:09:27.330538988 CEST	587	49826	37.120.193.124	192.168.2.4
Aug 1, 2024 06:09:27.340080976 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:27.340132952 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:27.342648983 CEST	49821	587	192.168.2.4	209.71.212.26
Aug 1, 2024 06:09:27.342756987 CEST	49817	587	192.168.2.4	13.250.88.201
Aug 1, 2024 06:09:27.342823982 CEST	49828	587	192.168.2.4	178.251.28.102
Aug 1, 2024 06:09:27.342889071 CEST	49819	587	192.168.2.4	103.110.129.117
Aug 1, 2024 06:09:27.347470045 CEST	587	49821	209.71.212.26	192.168.2.4
Aug 1, 2024 06:09:27.347568035 CEST	587	49817	13.250.88.201	192.168.2.4
Aug 1, 2024 06:09:27.347600937 CEST	587	49828	178.251.28.102	192.168.2.4
Aug 1, 2024 06:09:27.347718954 CEST	587	49819	103.110.129.117	192.168.2.4
Aug 1, 2024 06:09:27.354144096 CEST	587	49747	200.90.133.79	192.168.2.4
Aug 1, 2024 06:09:27.368963003 CEST	587	49827	13.250.88.201	192.168.2.4
Aug 1, 2024 06:09:27.368993998 CEST	587	49827	13.250.88.201	192.168.2.4
Aug 1, 2024 06:09:27.369044065 CEST	587	49827	13.250.88.201	192.168.2.4
Aug 1, 2024 06:09:27.369045019 CEST	49827	587	192.168.2.4	13.250.88.201
Aug 1, 2024 06:09:27.369081020 CEST	587	49827	13.250.88.201	192.168.2.4
Aug 1, 2024 06:09:27.369112015 CEST	587	49827	13.250.88.201	192.168.2.4
Aug 1, 2024 06:09:27.369127989 CEST	49827	587	192.168.2.4	13.250.88.201
Aug 1, 2024 06:09:27.373545885 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:27.373641968 CEST	49837	587	192.168.2.4	192.185.32.240
Aug 1, 2024 06:09:27.374515057 CEST	49826	587	192.168.2.4	37.120.193.124
Aug 1, 2024 06:09:27.378446102 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:27.378474951 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:27.381449938 CEST	587	49822	191.252.112.194	192.168.2.4
Aug 1, 2024 06:09:27.389349937 CEST	49840	587	192.168.2.4	192.185.213.51
Aug 1, 2024 06:09:27.395813942 CEST	587	49840	192.185.213.51	192.168.2.4
Aug 1, 2024 06:09:27.395906925 CEST	49840	587	192.168.2.4	192.185.213.51
Aug 1, 2024 06:09:27.402772903 CEST	49747	587	192.168.2.4	200.90.133.79
Aug 1, 2024 06:09:27.403243065 CEST	587	49829	191.252.112.195	192.168.2.4
Aug 1, 2024 06:09:27.413731098 CEST	587	49818	103.86.139.86	192.168.2.4
Aug 1, 2024 06:09:27.418402910 CEST	49827	587	192.168.2.4	13.250.88.201
Aug 1, 2024 06:09:27.418824911 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:27.418879032 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:27.420435905 CEST	49816	587	192.168.2.4	83.243.58.138
Aug 1, 2024 06:09:27.420519114 CEST	49834	587	192.168.2.4	162.241.62.39
Aug 1, 2024 06:09:27.420591116 CEST	49813	587	192.168.2.4	62.149.157.154
Aug 1, 2024 06:09:27.425263882 CEST	587	49816	83.243.58.138	192.168.2.4
Aug 1, 2024 06:09:27.425461054 CEST	587	49834	162.241.62.39	192.168.2.4
Aug 1, 2024 06:09:27.425510883 CEST	587	49813	62.149.157.154	192.168.2.4
Aug 1, 2024 06:09:27.429244995 CEST	49841	587	192.168.2.4	190.105.202.10
Aug 1, 2024 06:09:27.434030056 CEST	49822	587	192.168.2.4	191.252.112.194
Aug 1, 2024 06:09:27.434058905 CEST	587	49841	190.105.202.10	192.168.2.4
Aug 1, 2024 06:09:27.434128046 CEST	49841	587	192.168.2.4	190.105.202.10
Aug 1, 2024 06:09:27.443154097 CEST	587	49826	37.120.193.124	192.168.2.4
Aug 1, 2024 06:09:27.449660063 CEST	49829	587	192.168.2.4	191.252.112.195
Aug 1, 2024 06:09:27.464292049 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:27.464375019 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:27.465286970 CEST	49818	587	192.168.2.4	103.86.139.86
Aug 1, 2024 06:09:27.468281984 CEST	587	49821	209.71.212.26	192.168.2.4
Aug 1, 2024 06:09:27.469795942 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:27.469851971 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:27.474703074 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:27.496524096 CEST	49826	587	192.168.2.4	37.120.193.124
Aug 1, 2024 06:09:27.506531954 CEST	587	49832	139.95.7.216	192.168.2.4
Aug 1, 2024 06:09:27.506776094 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:27.511032104 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:27.511163950 CEST	49824	587	192.168.2.4	41.110.190.122
Aug 1, 2024 06:09:27.511260986 CEST	49825	587	192.168.2.4	31.179.210.222
Aug 1, 2024 06:09:27.511332989 CEST	49830	587	192.168.2.4	210.116.104.65
Aug 1, 2024 06:09:27.511673927 CEST	49831	587	192.168.2.4	66.133.129.50
Aug 1, 2024 06:09:27.511825085 CEST	49835	587	192.168.2.4	84.2.43.67
Aug 1, 2024 06:09:27.513899088 CEST	49821	587	192.168.2.4	209.71.212.26
Aug 1, 2024 06:09:27.513900042 CEST	49842	587	192.168.2.4	13.250.88.201
Aug 1, 2024 06:09:27.516139030 CEST	587	49824	41.110.190.122	192.168.2.4
Aug 1, 2024 06:09:27.516166925 CEST	587	49825	31.179.210.222	192.168.2.4
Aug 1, 2024 06:09:27.516288042 CEST	587	49830	210.116.104.65	192.168.2.4
Aug 1, 2024 06:09:27.516683102 CEST	587	49831	66.133.129.50	192.168.2.4
Aug 1, 2024 06:09:27.516710997 CEST	587	49835	84.2.43.67	192.168.2.4
Aug 1, 2024 06:09:27.518722057 CEST	587	49842	13.250.88.201	192.168.2.4
Aug 1, 2024 06:09:27.518831015 CEST	49842	587	192.168.2.4	13.250.88.201
Aug 1, 2024 06:09:27.521773100 CEST	587	49838	212.91.113.96	192.168.2.4
Aug 1, 2024 06:09:27.522770882 CEST	587	49828	178.251.28.102	192.168.2.4
Aug 1, 2024 06:09:27.528594017 CEST	587	49789	66.248.160.85	192.168.2.4
Aug 1, 2024 06:09:27.537198067 CEST	587	49834	162.241.62.39	192.168.2.4
Aug 1, 2024 06:09:27.556332111 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:27.556432009 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:27.559046030 CEST	49832	587	192.168.2.4	139.95.7.216
Aug 1, 2024 06:09:27.561336994 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:27.574671984 CEST	49789	587	192.168.2.4	66.248.160.85
Aug 1, 2024 06:09:27.574675083 CEST	49828	587	192.168.2.4	178.251.28.102
Aug 1, 2024 06:09:27.574676037 CEST	49838	587	192.168.2.4	212.91.113.96
Aug 1, 2024 06:09:27.577133894 CEST	587	49742	103.6.196.75	192.168.2.4
Aug 1, 2024 06:09:27.577337980 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:27.582700968 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:27.591068029 CEST	49834	587	192.168.2.4	162.241.62.39
Aug 1, 2024 06:09:27.598632097 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:27.598763943 CEST	49837	587	192.168.2.4	192.185.32.240
Aug 1, 2024 06:09:27.598844051 CEST	49747	587	192.168.2.4	200.90.133.79
Aug 1, 2024 06:09:27.600095987 CEST	587	49820	13.250.88.201	192.168.2.4
Aug 1, 2024 06:09:27.600271940 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:27.603559971 CEST	587	49837	192.185.32.240	192.168.2.4
Aug 1, 2024 06:09:27.603610039 CEST	587	49747	200.90.133.79	192.168.2.4
Aug 1, 2024 06:09:27.614589930 CEST	587	49831	66.133.129.50	192.168.2.4
Aug 1, 2024 06:09:27.621577024 CEST	49742	587	192.168.2.4	103.6.196.75
Aug 1, 2024 06:09:27.624561071 CEST	587	49813	62.149.157.154	192.168.2.4
Aug 1, 2024 06:09:27.625555038 CEST	587	49833	103.15.48.10	192.168.2.4
Aug 1, 2024 06:09:27.625588894 CEST	587	49816	83.243.58.138	192.168.2.4
Aug 1, 2024 06:09:27.651658058 CEST	587	49810	160.13.60.151	192.168.2.4
Aug 1, 2024 06:09:27.651804924 CEST	587	49810	160.13.60.151	192.168.2.4
Aug 1, 2024 06:09:27.651959896 CEST	49810	587	192.168.2.4	160.13.60.151
Aug 1, 2024 06:09:27.652201891 CEST	49810	587	192.168.2.4	160.13.60.151
Aug 1, 2024 06:09:27.652277946 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:27.652347088 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:27.652820110 CEST	49820	587	192.168.2.4	13.250.88.201
Aug 1, 2024 06:09:27.657037973 CEST	587	49810	160.13.60.151	192.168.2.4
Aug 1, 2024 06:09:27.657149076 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:27.668422937 CEST	49813	587	192.168.2.4	62.149.157.154
Aug 1, 2024 06:09:27.668479919 CEST	49816	587	192.168.2.4	83.243.58.138
Aug 1, 2024 06:09:27.668601990 CEST	49831	587	192.168.2.4	66.133.129.50
Aug 1, 2024 06:09:27.669270992 CEST	49833	587	192.168.2.4	103.15.48.10
Aug 1, 2024 06:09:27.681792021 CEST	587	49817	13.250.88.201	192.168.2.4
Aug 1, 2024 06:09:27.682100058 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:27.686983109 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:27.691965103 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:27.692122936 CEST	49822	587	192.168.2.4	191.252.112.194
Aug 1, 2024 06:09:27.692222118 CEST	49829	587	192.168.2.4	191.252.112.195
Aug 1, 2024 06:09:27.692385912 CEST	49827	587	192.168.2.4	13.250.88.201
Aug 1, 2024 06:09:27.696888924 CEST	587	49822	191.252.112.194	192.168.2.4
Aug 1, 2024 06:09:27.696933031 CEST	587	49829	191.252.112.195	192.168.2.4
Aug 1, 2024 06:09:27.696979046 CEST	49829	587	192.168.2.4	191.252.112.195
Aug 1, 2024 06:09:27.697117090 CEST	587	49827	13.250.88.201	192.168.2.4
Aug 1, 2024 06:09:27.700643063 CEST	587	49819	103.110.129.117	192.168.2.4
Aug 1, 2024 06:09:27.700661898 CEST	587	49819	103.110.129.117	192.168.2.4
Aug 1, 2024 06:09:27.700679064 CEST	587	49819	103.110.129.117	192.168.2.4
Aug 1, 2024 06:09:27.700695038 CEST	587	49819	103.110.129.117	192.168.2.4
Aug 1, 2024 06:09:27.700720072 CEST	49819	587	192.168.2.4	103.110.129.117
Aug 1, 2024 06:09:27.700733900 CEST	49819	587	192.168.2.4	103.110.129.117
Aug 1, 2024 06:09:27.701258898 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:27.701720953 CEST	587	49829	191.252.112.195	192.168.2.4
Aug 1, 2024 06:09:27.706165075 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:27.706223965 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:27.712168932 CEST	587	49837	192.185.32.240	192.168.2.4
Aug 1, 2024 06:09:27.712663889 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:27.713824034 CEST	587	49818	103.86.139.86	192.168.2.4
Aug 1, 2024 06:09:27.718590021 CEST	587	49825	31.179.210.222	192.168.2.4
Aug 1, 2024 06:09:27.730981112 CEST	49817	587	192.168.2.4	13.250.88.201
Aug 1, 2024 06:09:27.737575054 CEST	587	49824	41.110.190.122	192.168.2.4
Aug 1, 2024 06:09:27.739268064 CEST	587	49809	160.13.60.151	192.168.2.4
Aug 1, 2024 06:09:27.739511967 CEST	587	49809	160.13.60.151	192.168.2.4
Aug 1, 2024 06:09:27.739572048 CEST	49809	587	192.168.2.4	160.13.60.151
Aug 1, 2024 06:09:27.739701033 CEST	49809	587	192.168.2.4	160.13.60.151
Aug 1, 2024 06:09:27.744527102 CEST	587	49809	160.13.60.151	192.168.2.4
Aug 1, 2024 06:09:27.760349035 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:27.760406017 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:27.762142897 CEST	49837	587	192.168.2.4	192.185.32.240
Aug 1, 2024 06:09:27.762192011 CEST	49818	587	192.168.2.4	103.86.139.86
Aug 1, 2024 06:09:27.762192011 CEST	49825	587	192.168.2.4	31.179.210.222
Aug 1, 2024 06:09:27.765223980 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:27.773972988 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:27.774122953 CEST	49821	587	192.168.2.4	209.71.212.26
Aug 1, 2024 06:09:27.774202108 CEST	49826	587	192.168.2.4	37.120.193.124
Aug 1, 2024 06:09:27.777771950 CEST	49824	587	192.168.2.4	41.110.190.122
Aug 1, 2024 06:09:27.779073954 CEST	587	49821	209.71.212.26	192.168.2.4
Aug 1, 2024 06:09:27.779103041 CEST	587	49826	37.120.193.124	192.168.2.4
Aug 1, 2024 06:09:27.789345980 CEST	587	49819	103.110.129.117	192.168.2.4
Aug 1, 2024 06:09:27.789531946 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:27.802850008 CEST	587	49839	192.198.192.27	192.168.2.4
Aug 1, 2024 06:09:27.819713116 CEST	587	49835	84.2.43.67	192.168.2.4
Aug 1, 2024 06:09:27.833097935 CEST	587	49830	210.116.104.65	192.168.2.4
Aug 1, 2024 06:09:27.834346056 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:27.834398985 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:27.834422112 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:27.834431887 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:27.834454060 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:27.834470034 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:27.834480047 CEST	49832	587	192.168.2.4	139.95.7.216
Aug 1, 2024 06:09:27.834484100 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:27.834563017 CEST	49838	587	192.168.2.4	212.91.113.96
Aug 1, 2024 06:09:27.834671021 CEST	49789	587	192.168.2.4	66.248.160.85
Aug 1, 2024 06:09:27.834681988 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:27.834733963 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:27.834733963 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:27.834753036 CEST	49828	587	192.168.2.4	178.251.28.102
Aug 1, 2024 06:09:27.834767103 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:27.834784031 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:27.834801912 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:27.834817886 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:27.834837914 CEST	49834	587	192.168.2.4	162.241.62.39
Aug 1, 2024 06:09:27.834845066 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:27.834877014 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:27.834928989 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:27.834928989 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:27.834961891 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:27.834978104 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:27.834994078 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:27.835011959 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:27.835313082 CEST	49831	587	192.168.2.4	66.133.129.50
Aug 1, 2024 06:09:27.835370064 CEST	49820	587	192.168.2.4	13.250.88.201
Aug 1, 2024 06:09:27.835452080 CEST	49833	587	192.168.2.4	103.15.48.10
Aug 1, 2024 06:09:27.835536957 CEST	49813	587	192.168.2.4	62.149.157.154
Aug 1, 2024 06:09:27.835618019 CEST	49813	587	192.168.2.4	62.149.157.154
Aug 1, 2024 06:09:27.835691929 CEST	49813	587	192.168.2.4	62.149.157.154
Aug 1, 2024 06:09:27.836431980 CEST	49843	587	192.168.2.4	202.9.85.53
Aug 1, 2024 06:09:27.838006973 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:27.838058949 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:27.838074923 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:27.838093042 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:27.838112116 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:27.838128090 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:27.838138103 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:27.838177919 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:27.838202000 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:27.838207960 CEST	49813	587	192.168.2.4	62.149.157.154
Aug 1, 2024 06:09:27.838232040 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:27.838249922 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:27.838263035 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:27.838284969 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:27.838296890 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:27.838308096 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:27.838329077 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:27.838342905 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:27.838376045 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:27.838413000 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:27.838439941 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:27.838459969 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:27.838474989 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:27.838491917 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:27.838541031 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:27.838545084 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:27.838576078 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:27.838601112 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:27.838607073 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:27.838640928 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:27.838654041 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:27.838670015 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:27.838701010 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:27.838716984 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:27.839360952 CEST	587	49832	139.95.7.216	192.168.2.4
Aug 1, 2024 06:09:27.839389086 CEST	587	49838	212.91.113.96	192.168.2.4
Aug 1, 2024 06:09:27.839562893 CEST	587	49789	66.248.160.85	192.168.2.4
Aug 1, 2024 06:09:27.839843988 CEST	587	49828	178.251.28.102	192.168.2.4
Aug 1, 2024 06:09:27.839876890 CEST	587	49834	162.241.62.39	192.168.2.4
Aug 1, 2024 06:09:27.840161085 CEST	587	49831	66.133.129.50	192.168.2.4
Aug 1, 2024 06:09:27.840188980 CEST	587	49820	13.250.88.201	192.168.2.4
Aug 1, 2024 06:09:27.840276957 CEST	587	49833	103.15.48.10	192.168.2.4
Aug 1, 2024 06:09:27.840301991 CEST	49819	587	192.168.2.4	103.110.129.117
Aug 1, 2024 06:09:27.840384960 CEST	587	49813	62.149.157.154	192.168.2.4
Aug 1, 2024 06:09:27.840411901 CEST	587	49813	62.149.157.154	192.168.2.4
Aug 1, 2024 06:09:27.840441942 CEST	49813	587	192.168.2.4	62.149.157.154
Aug 1, 2024 06:09:27.840460062 CEST	587	49813	62.149.157.154	192.168.2.4
Aug 1, 2024 06:09:27.840501070 CEST	49813	587	192.168.2.4	62.149.157.154
Aug 1, 2024 06:09:27.840600967 CEST	587	49813	62.149.157.154	192.168.2.4
Aug 1, 2024 06:09:27.840629101 CEST	587	49813	62.149.157.154	192.168.2.4
Aug 1, 2024 06:09:27.840651989 CEST	49813	587	192.168.2.4	62.149.157.154
Aug 1, 2024 06:09:27.840656996 CEST	587	49813	62.149.157.154	192.168.2.4
Aug 1, 2024 06:09:27.840675116 CEST	49813	587	192.168.2.4	62.149.157.154
Aug 1, 2024 06:09:27.840689898 CEST	587	49813	62.149.157.154	192.168.2.4
Aug 1, 2024 06:09:27.840697050 CEST	49813	587	192.168.2.4	62.149.157.154
Aug 1, 2024 06:09:27.840847969 CEST	49742	587	192.168.2.4	103.6.196.75
Aug 1, 2024 06:09:27.841240883 CEST	587	49843	202.9.85.53	192.168.2.4
Aug 1, 2024 06:09:27.841304064 CEST	49843	587	192.168.2.4	202.9.85.53
Aug 1, 2024 06:09:27.841706038 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:27.841733932 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:27.841763020 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:27.841964960 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:27.842011929 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:27.842017889 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:27.842051983 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:27.842065096 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:27.842089891 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:27.842107058 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:27.842143059 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:27.842152119 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:27.842185020 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:27.842190981 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:27.842235088 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:27.842237949 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:27.842273951 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:27.842283010 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:27.842308998 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:27.842315912 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:27.842360020 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:27.842360973 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:27.842395067 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:27.842401981 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:27.842422962 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:27.842437029 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:27.842466116 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:27.842473984 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:27.842506886 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:27.842518091 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:27.842540026 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:27.842561960 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:27.843549967 CEST	587	49813	62.149.157.154	192.168.2.4
Aug 1, 2024 06:09:27.843610048 CEST	49813	587	192.168.2.4	62.149.157.154
Aug 1, 2024 06:09:27.843627930 CEST	587	49813	62.149.157.154	192.168.2.4
Aug 1, 2024 06:09:27.843655109 CEST	587	49813	62.149.157.154	192.168.2.4
Aug 1, 2024 06:09:27.843684912 CEST	49813	587	192.168.2.4	62.149.157.154
Aug 1, 2024 06:09:27.843697071 CEST	49813	587	192.168.2.4	62.149.157.154
Aug 1, 2024 06:09:27.843777895 CEST	587	49813	62.149.157.154	192.168.2.4
Aug 1, 2024 06:09:27.843805075 CEST	587	49813	62.149.157.154	192.168.2.4
Aug 1, 2024 06:09:27.843830109 CEST	49813	587	192.168.2.4	62.149.157.154
Aug 1, 2024 06:09:27.843842983 CEST	49813	587	192.168.2.4	62.149.157.154
Aug 1, 2024 06:09:27.843869925 CEST	587	49813	62.149.157.154	192.168.2.4
Aug 1, 2024 06:09:27.843923092 CEST	49813	587	192.168.2.4	62.149.157.154
Aug 1, 2024 06:09:27.845276117 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:27.845289946 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:27.845304966 CEST	587	49813	62.149.157.154	192.168.2.4
Aug 1, 2024 06:09:27.845318079 CEST	587	49813	62.149.157.154	192.168.2.4
Aug 1, 2024 06:09:27.845334053 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:27.845355034 CEST	49813	587	192.168.2.4	62.149.157.154
Aug 1, 2024 06:09:27.845401049 CEST	587	49813	62.149.157.154	192.168.2.4
Aug 1, 2024 06:09:27.845408916 CEST	49813	587	192.168.2.4	62.149.157.154
Aug 1, 2024 06:09:27.845443010 CEST	49813	587	192.168.2.4	62.149.157.154
Aug 1, 2024 06:09:27.845494032 CEST	587	49813	62.149.157.154	192.168.2.4
Aug 1, 2024 06:09:27.845617056 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:27.845629930 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:27.845673084 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:27.845674038 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:27.845716000 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:27.845720053 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:27.845726013 CEST	49813	587	192.168.2.4	62.149.157.154
Aug 1, 2024 06:09:27.845731020 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:27.845746040 CEST	587	49813	62.149.157.154	192.168.2.4
Aug 1, 2024 06:09:27.845757961 CEST	587	49813	62.149.157.154	192.168.2.4
Aug 1, 2024 06:09:27.845767975 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:27.845804930 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:27.845817089 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:27.845835924 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:27.845855951 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:27.845880032 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:27.845882893 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:27.845921993 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:27.845925093 CEST	49813	587	192.168.2.4	62.149.157.154
Aug 1, 2024 06:09:27.845942020 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:27.845954895 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:27.845993996 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:27.845997095 CEST	49813	587	192.168.2.4	62.149.157.154
Aug 1, 2024 06:09:27.846131086 CEST	587	49742	103.6.196.75	192.168.2.4
Aug 1, 2024 06:09:27.846182108 CEST	49742	587	192.168.2.4	103.6.196.75
Aug 1, 2024 06:09:27.846549988 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:27.846604109 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:27.846605062 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:27.846620083 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:27.846657038 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:27.846658945 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:27.846659899 CEST	49813	587	192.168.2.4	62.149.157.154
Aug 1, 2024 06:09:27.846673965 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:27.846702099 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:27.848500967 CEST	587	49813	62.149.157.154	192.168.2.4
Aug 1, 2024 06:09:27.848588943 CEST	587	49813	62.149.157.154	192.168.2.4
Aug 1, 2024 06:09:27.848709106 CEST	587	49813	62.149.157.154	192.168.2.4
Aug 1, 2024 06:09:27.848732948 CEST	587	49813	62.149.157.154	192.168.2.4
Aug 1, 2024 06:09:27.848814964 CEST	587	49813	62.149.157.154	192.168.2.4
Aug 1, 2024 06:09:27.848927975 CEST	587	49813	62.149.157.154	192.168.2.4
Aug 1, 2024 06:09:27.849490881 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:27.849545002 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:27.849550009 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:27.849566936 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:27.849581957 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:27.849611998 CEST	49813	587	192.168.2.4	62.149.157.154
Aug 1, 2024 06:09:27.849613905 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:27.849632025 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:27.849678040 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:27.849694967 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:27.849708080 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:27.849735022 CEST	49813	587	192.168.2.4	62.149.157.154
Aug 1, 2024 06:09:27.849739075 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:27.849742889 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:27.849761009 CEST	49813	587	192.168.2.4	62.149.157.154
Aug 1, 2024 06:09:27.849798918 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:27.849888086 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:27.849931002 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:27.849945068 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:27.849958897 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:27.849976063 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:27.849988937 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:27.849993944 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:27.850008011 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:27.850023031 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:27.850049019 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:27.850049973 CEST	49813	587	192.168.2.4	62.149.157.154
Aug 1, 2024 06:09:27.850116014 CEST	587	49813	62.149.157.154	192.168.2.4
Aug 1, 2024 06:09:27.850199938 CEST	587	49813	62.149.157.154	192.168.2.4
Aug 1, 2024 06:09:27.850269079 CEST	587	49813	62.149.157.154	192.168.2.4
Aug 1, 2024 06:09:27.850593090 CEST	587	49813	62.149.157.154	192.168.2.4
Aug 1, 2024 06:09:27.850826979 CEST	587	49813	62.149.157.154	192.168.2.4
Aug 1, 2024 06:09:27.851036072 CEST	587	49813	62.149.157.154	192.168.2.4
Aug 1, 2024 06:09:27.851047993 CEST	587	49813	62.149.157.154	192.168.2.4
Aug 1, 2024 06:09:27.851475000 CEST	587	49813	62.149.157.154	192.168.2.4
Aug 1, 2024 06:09:27.851563931 CEST	587	49813	62.149.157.154	192.168.2.4
Aug 1, 2024 06:09:27.854501009 CEST	587	49813	62.149.157.154	192.168.2.4
Aug 1, 2024 06:09:27.854608059 CEST	587	49813	62.149.157.154	192.168.2.4
Aug 1, 2024 06:09:27.854698896 CEST	587	49813	62.149.157.154	192.168.2.4
Aug 1, 2024 06:09:27.854711056 CEST	587	49813	62.149.157.154	192.168.2.4
Aug 1, 2024 06:09:27.855081081 CEST	587	49813	62.149.157.154	192.168.2.4
Aug 1, 2024 06:09:27.855895042 CEST	49839	587	192.168.2.4	192.198.192.27
Aug 1, 2024 06:09:27.871686935 CEST	49835	587	192.168.2.4	84.2.43.67
Aug 1, 2024 06:09:27.887135983 CEST	49830	587	192.168.2.4	210.116.104.65
Aug 1, 2024 06:09:27.900976896 CEST	587	49829	191.252.112.195	192.168.2.4
Aug 1, 2024 06:09:27.901320934 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:27.903897047 CEST	587	49821	209.71.212.26	192.168.2.4
Aug 1, 2024 06:09:27.906217098 CEST	587	49822	191.252.112.194	192.168.2.4
Aug 1, 2024 06:09:27.919728041 CEST	587	49840	192.185.213.51	192.168.2.4
Aug 1, 2024 06:09:27.919833899 CEST	49844	587	192.168.2.4	89.42.218.226
Aug 1, 2024 06:09:27.921016932 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:27.921084881 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:27.921158075 CEST	49813	587	192.168.2.4	62.149.157.154
Aug 1, 2024 06:09:27.921226978 CEST	49817	587	192.168.2.4	13.250.88.201
Aug 1, 2024 06:09:27.924581051 CEST	587	49844	89.42.218.226	192.168.2.4
Aug 1, 2024 06:09:27.924665928 CEST	49844	587	192.168.2.4	89.42.218.226
Aug 1, 2024 06:09:27.925940990 CEST	587	49813	62.149.157.154	192.168.2.4
Aug 1, 2024 06:09:27.925954103 CEST	587	49813	62.149.157.154	192.168.2.4
Aug 1, 2024 06:09:27.925971031 CEST	587	49813	62.149.157.154	192.168.2.4
Aug 1, 2024 06:09:27.925993919 CEST	587	49813	62.149.157.154	192.168.2.4
Aug 1, 2024 06:09:27.926035881 CEST	587	49817	13.250.88.201	192.168.2.4
Aug 1, 2024 06:09:27.949656963 CEST	49829	587	192.168.2.4	191.252.112.195
Aug 1, 2024 06:09:27.949673891 CEST	49821	587	192.168.2.4	209.71.212.26
Aug 1, 2024 06:09:27.949675083 CEST	49822	587	192.168.2.4	191.252.112.194
Aug 1, 2024 06:09:27.965281010 CEST	49840	587	192.168.2.4	192.185.213.51
Aug 1, 2024 06:09:27.968245029 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:27.968403101 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:27.973244905 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:27.991692066 CEST	587	49831	66.133.129.50	192.168.2.4
Aug 1, 2024 06:09:27.991940022 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:27.996953011 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:28.014008045 CEST	587	49834	162.241.62.39	192.168.2.4
Aug 1, 2024 06:09:28.014023066 CEST	587	49834	162.241.62.39	192.168.2.4
Aug 1, 2024 06:09:28.014039993 CEST	587	49834	162.241.62.39	192.168.2.4
Aug 1, 2024 06:09:28.014071941 CEST	49834	587	192.168.2.4	162.241.62.39
Aug 1, 2024 06:09:28.014235973 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:28.019030094 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:28.019042969 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:28.019054890 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:28.043432951 CEST	49831	587	192.168.2.4	66.133.129.50
Aug 1, 2024 06:09:28.044771910 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:28.044909954 CEST	49837	587	192.168.2.4	192.185.32.240
Aug 1, 2024 06:09:28.044980049 CEST	49818	587	192.168.2.4	103.86.139.86
Aug 1, 2024 06:09:28.045044899 CEST	49825	587	192.168.2.4	31.179.210.222
Aug 1, 2024 06:09:28.045109987 CEST	49824	587	192.168.2.4	41.110.190.122
Aug 1, 2024 06:09:28.049755096 CEST	587	49837	192.185.32.240	192.168.2.4
Aug 1, 2024 06:09:28.049768925 CEST	587	49818	103.86.139.86	192.168.2.4
Aug 1, 2024 06:09:28.049799919 CEST	587	49825	31.179.210.222	192.168.2.4
Aug 1, 2024 06:09:28.049814939 CEST	587	49824	41.110.190.122	192.168.2.4
Aug 1, 2024 06:09:28.059035063 CEST	49834	587	192.168.2.4	162.241.62.39
Aug 1, 2024 06:09:28.063765049 CEST	587	49827	13.250.88.201	192.168.2.4
Aug 1, 2024 06:09:28.064213037 CEST	587	49829	191.252.112.195	192.168.2.4
Aug 1, 2024 06:09:28.066242933 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:28.068227053 CEST	587	49826	37.120.193.124	192.168.2.4
Aug 1, 2024 06:09:28.070051908 CEST	587	49828	178.251.28.102	192.168.2.4
Aug 1, 2024 06:09:28.070518970 CEST	587	49838	212.91.113.96	192.168.2.4
Aug 1, 2024 06:09:28.105976105 CEST	49827	587	192.168.2.4	13.250.88.201
Aug 1, 2024 06:09:28.106719017 CEST	49829	587	192.168.2.4	191.252.112.195
Aug 1, 2024 06:09:28.116343021 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:28.116461039 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:28.121285915 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:28.121534109 CEST	49826	587	192.168.2.4	37.120.193.124
Aug 1, 2024 06:09:28.121534109 CEST	49828	587	192.168.2.4	178.251.28.102
Aug 1, 2024 06:09:28.121540070 CEST	49838	587	192.168.2.4	212.91.113.96
Aug 1, 2024 06:09:28.158008099 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:28.158160925 CEST	49819	587	192.168.2.4	103.110.129.117
Aug 1, 2024 06:09:28.159090042 CEST	587	49837	192.185.32.240	192.168.2.4
Aug 1, 2024 06:09:28.159254074 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:28.160425901 CEST	62445	53	192.168.2.4	1.1.1.1
Aug 1, 2024 06:09:28.162995100 CEST	587	49819	103.110.129.117	192.168.2.4
Aug 1, 2024 06:09:28.163050890 CEST	49819	587	192.168.2.4	103.110.129.117
Aug 1, 2024 06:09:28.165318012 CEST	53	62445	1.1.1.1	192.168.2.4
Aug 1, 2024 06:09:28.165424109 CEST	62445	53	192.168.2.4	1.1.1.1
Aug 1, 2024 06:09:28.165462971 CEST	62445	53	192.168.2.4	1.1.1.1
Aug 1, 2024 06:09:28.167845964 CEST	587	49819	103.110.129.117	192.168.2.4
Aug 1, 2024 06:09:28.168173075 CEST	62446	587	192.168.2.4	89.236.174.10
Aug 1, 2024 06:09:28.170214891 CEST	53	62445	1.1.1.1	192.168.2.4
Aug 1, 2024 06:09:28.172954082 CEST	587	62446	89.236.174.10	192.168.2.4
Aug 1, 2024 06:09:28.173017025 CEST	62446	587	192.168.2.4	89.236.174.10
Aug 1, 2024 06:09:28.173437119 CEST	587	49820	13.250.88.201	192.168.2.4
Aug 1, 2024 06:09:28.187366962 CEST	587	49832	139.95.7.216	192.168.2.4
Aug 1, 2024 06:09:28.193928003 CEST	587	49833	103.15.48.10	192.168.2.4
Aug 1, 2024 06:09:28.199716091 CEST	49837	587	192.168.2.4	192.185.32.240
Aug 1, 2024 06:09:28.208343029 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:28.208511114 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:28.213341951 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:28.215290070 CEST	49820	587	192.168.2.4	13.250.88.201
Aug 1, 2024 06:09:28.231082916 CEST	49832	587	192.168.2.4	139.95.7.216
Aug 1, 2024 06:09:28.236059904 CEST	587	49776	164.52.146.15	192.168.2.4
Aug 1, 2024 06:09:28.236243963 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:28.241035938 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:28.246521950 CEST	49833	587	192.168.2.4	103.15.48.10
Aug 1, 2024 06:09:28.251017094 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:28.251147985 CEST	49835	587	192.168.2.4	84.2.43.67
Aug 1, 2024 06:09:28.251229048 CEST	49839	587	192.168.2.4	192.198.192.27
Aug 1, 2024 06:09:28.251307011 CEST	49830	587	192.168.2.4	210.116.104.65
Aug 1, 2024 06:09:28.251557112 CEST	49822	587	192.168.2.4	191.252.112.194
Aug 1, 2024 06:09:28.251625061 CEST	49821	587	192.168.2.4	209.71.212.26
Aug 1, 2024 06:09:28.251683950 CEST	49840	587	192.168.2.4	192.185.213.51
Aug 1, 2024 06:09:28.251761913 CEST	49834	587	192.168.2.4	162.241.62.39
Aug 1, 2024 06:09:28.252754927 CEST	587	49825	31.179.210.222	192.168.2.4
Aug 1, 2024 06:09:28.252937078 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:28.255880117 CEST	587	49835	84.2.43.67	192.168.2.4
Aug 1, 2024 06:09:28.255939007 CEST	587	49839	192.198.192.27	192.168.2.4
Aug 1, 2024 06:09:28.256022930 CEST	587	49830	210.116.104.65	192.168.2.4
Aug 1, 2024 06:09:28.256336927 CEST	587	49822	191.252.112.194	192.168.2.4
Aug 1, 2024 06:09:28.256403923 CEST	587	49821	209.71.212.26	192.168.2.4
Aug 1, 2024 06:09:28.256417990 CEST	587	49840	192.185.213.51	192.168.2.4
Aug 1, 2024 06:09:28.256494999 CEST	587	49834	162.241.62.39	192.168.2.4
Aug 1, 2024 06:09:28.271601915 CEST	587	49824	41.110.190.122	192.168.2.4
Aug 1, 2024 06:09:28.271719933 CEST	587	49824	41.110.190.122	192.168.2.4
Aug 1, 2024 06:09:28.271770954 CEST	49824	587	192.168.2.4	41.110.190.122
Aug 1, 2024 06:09:28.271802902 CEST	587	49824	41.110.190.122	192.168.2.4
Aug 1, 2024 06:09:28.271851063 CEST	49824	587	192.168.2.4	41.110.190.122
Aug 1, 2024 06:09:28.272126913 CEST	49824	587	192.168.2.4	41.110.190.122
Aug 1, 2024 06:09:28.276839972 CEST	587	49824	41.110.190.122	192.168.2.4
Aug 1, 2024 06:09:28.277786970 CEST	49776	587	192.168.2.4	164.52.146.15
Aug 1, 2024 06:09:28.293402910 CEST	49825	587	192.168.2.4	31.179.210.222
Aug 1, 2024 06:09:28.300267935 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:28.300344944 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:28.304816961 CEST	62447	587	192.168.2.4	77.79.88.19
Aug 1, 2024 06:09:28.305141926 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:28.309602976 CEST	587	62447	77.79.88.19	192.168.2.4
Aug 1, 2024 06:09:28.309662104 CEST	62447	587	192.168.2.4	77.79.88.19
Aug 1, 2024 06:09:28.309896946 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:28.315087080 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:28.327958107 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:28.328155041 CEST	49827	587	192.168.2.4	13.250.88.201
Aug 1, 2024 06:09:28.331757069 CEST	587	49813	62.149.157.154	192.168.2.4
Aug 1, 2024 06:09:28.332004070 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:28.332943916 CEST	587	49827	13.250.88.201	192.168.2.4
Aug 1, 2024 06:09:28.364922047 CEST	587	49841	190.105.202.10	192.168.2.4
Aug 1, 2024 06:09:28.367116928 CEST	587	49840	192.185.213.51	192.168.2.4
Aug 1, 2024 06:09:28.367314100 CEST	587	49834	162.241.62.39	192.168.2.4
Aug 1, 2024 06:09:28.376195908 CEST	587	49821	209.71.212.26	192.168.2.4
Aug 1, 2024 06:09:28.380336046 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:28.380419970 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:28.385185957 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:28.387198925 CEST	49813	587	192.168.2.4	62.149.157.154
Aug 1, 2024 06:09:28.389498949 CEST	587	49818	103.86.139.86	192.168.2.4
Aug 1, 2024 06:09:28.389700890 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:28.394613981 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:28.399470091 CEST	587	49842	13.250.88.201	192.168.2.4
Aug 1, 2024 06:09:28.399827003 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:28.404666901 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:28.407036066 CEST	587	49839	192.198.192.27	192.168.2.4
Aug 1, 2024 06:09:28.407294989 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:28.412228107 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:28.418462992 CEST	49841	587	192.168.2.4	190.105.202.10
Aug 1, 2024 06:09:28.418471098 CEST	49840	587	192.168.2.4	192.185.213.51
Aug 1, 2024 06:09:28.418474913 CEST	49834	587	192.168.2.4	162.241.62.39
Aug 1, 2024 06:09:28.421397924 CEST	587	49817	13.250.88.201	192.168.2.4
Aug 1, 2024 06:09:28.421624899 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:28.426426888 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:28.434068918 CEST	49821	587	192.168.2.4	209.71.212.26
Aug 1, 2024 06:09:28.435342073 CEST	49818	587	192.168.2.4	103.86.139.86
Aug 1, 2024 06:09:28.444015980 CEST	587	49835	84.2.43.67	192.168.2.4
Aug 1, 2024 06:09:28.444286108 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:28.449142933 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:28.449698925 CEST	49839	587	192.168.2.4	192.198.192.27
Aug 1, 2024 06:09:28.449712038 CEST	49842	587	192.168.2.4	13.250.88.201
Aug 1, 2024 06:09:28.465375900 CEST	49817	587	192.168.2.4	13.250.88.201
Aug 1, 2024 06:09:28.466383934 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:28.466778040 CEST	49828	587	192.168.2.4	178.251.28.102
Aug 1, 2024 06:09:28.466926098 CEST	49838	587	192.168.2.4	212.91.113.96
Aug 1, 2024 06:09:28.467042923 CEST	49826	587	192.168.2.4	37.120.193.124
Aug 1, 2024 06:09:28.467164040 CEST	49829	587	192.168.2.4	191.252.112.195
Aug 1, 2024 06:09:28.467274904 CEST	49820	587	192.168.2.4	13.250.88.201
Aug 1, 2024 06:09:28.467386961 CEST	49833	587	192.168.2.4	103.15.48.10
Aug 1, 2024 06:09:28.467494965 CEST	49837	587	192.168.2.4	192.185.32.240
Aug 1, 2024 06:09:28.467607975 CEST	49832	587	192.168.2.4	139.95.7.216
Aug 1, 2024 06:09:28.471541882 CEST	587	49828	178.251.28.102	192.168.2.4
Aug 1, 2024 06:09:28.471648932 CEST	587	49838	212.91.113.96	192.168.2.4
Aug 1, 2024 06:09:28.471735001 CEST	587	49826	37.120.193.124	192.168.2.4
Aug 1, 2024 06:09:28.471900940 CEST	587	49829	191.252.112.195	192.168.2.4
Aug 1, 2024 06:09:28.471966982 CEST	587	49820	13.250.88.201	192.168.2.4
Aug 1, 2024 06:09:28.472110987 CEST	587	49833	103.15.48.10	192.168.2.4
Aug 1, 2024 06:09:28.472256899 CEST	587	49837	192.185.32.240	192.168.2.4
Aug 1, 2024 06:09:28.472394943 CEST	587	49832	139.95.7.216	192.168.2.4
Aug 1, 2024 06:09:28.474183083 CEST	587	49822	191.252.112.194	192.168.2.4
Aug 1, 2024 06:09:28.474415064 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:28.487423897 CEST	587	49774	15.235.118.229	192.168.2.4
Aug 1, 2024 06:09:28.496562958 CEST	49835	587	192.168.2.4	84.2.43.67
Aug 1, 2024 06:09:28.520303965 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:28.520411968 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:28.525293112 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:28.527821064 CEST	49774	587	192.168.2.4	15.235.118.229
Aug 1, 2024 06:09:28.527821064 CEST	49822	587	192.168.2.4	191.252.112.194
Aug 1, 2024 06:09:28.567626953 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:28.568039894 CEST	49776	587	192.168.2.4	164.52.146.15
Aug 1, 2024 06:09:28.568124056 CEST	49825	587	192.168.2.4	31.179.210.222
Aug 1, 2024 06:09:28.572881937 CEST	587	49776	164.52.146.15	192.168.2.4
Aug 1, 2024 06:09:28.572911024 CEST	587	49825	31.179.210.222	192.168.2.4
Aug 1, 2024 06:09:28.573054075 CEST	62448	587	192.168.2.4	162.144.12.100
Aug 1, 2024 06:09:28.574194908 CEST	587	49830	210.116.104.65	192.168.2.4
Aug 1, 2024 06:09:28.574264050 CEST	587	49830	210.116.104.65	192.168.2.4
Aug 1, 2024 06:09:28.574320078 CEST	49830	587	192.168.2.4	210.116.104.65
Aug 1, 2024 06:09:28.574407101 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:28.574407101 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:28.577981949 CEST	587	62448	162.144.12.100	192.168.2.4
Aug 1, 2024 06:09:28.578069925 CEST	62448	587	192.168.2.4	162.144.12.100
Aug 1, 2024 06:09:28.579292059 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:28.579350948 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:28.579396963 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:28.584222078 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:28.588021994 CEST	587	49837	192.185.32.240	192.168.2.4
Aug 1, 2024 06:09:28.588076115 CEST	587	49837	192.185.32.240	192.168.2.4
Aug 1, 2024 06:09:28.588112116 CEST	587	49837	192.185.32.240	192.168.2.4
Aug 1, 2024 06:09:28.588134050 CEST	49837	587	192.168.2.4	192.185.32.240
Aug 1, 2024 06:09:28.588361025 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:28.593158960 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:28.593214035 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:28.593241930 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:28.630290985 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:28.630325079 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:28.630378008 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:28.630409956 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:28.630439997 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:28.630480051 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:28.630486012 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:28.630512953 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:28.630547047 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:28.630568027 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:28.630579948 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:28.630633116 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:28.630805969 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:28.630856991 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:28.630887032 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:28.630908966 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:28.630912066 CEST	49841	587	192.168.2.4	190.105.202.10
Aug 1, 2024 06:09:28.630918980 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:28.630956888 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:28.630966902 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:28.630985975 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:28.631006002 CEST	49834	587	192.168.2.4	162.241.62.39
Aug 1, 2024 06:09:28.631042004 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:28.631077051 CEST	49840	587	192.168.2.4	192.185.213.51
Aug 1, 2024 06:09:28.631165028 CEST	49842	587	192.168.2.4	13.250.88.201
Aug 1, 2024 06:09:28.631251097 CEST	49817	587	192.168.2.4	13.250.88.201
Aug 1, 2024 06:09:28.631335974 CEST	49818	587	192.168.2.4	103.86.139.86
Aug 1, 2024 06:09:28.631499052 CEST	49839	587	192.168.2.4	192.198.192.27
Aug 1, 2024 06:09:28.631500006 CEST	49835	587	192.168.2.4	84.2.43.67
Aug 1, 2024 06:09:28.631583929 CEST	49821	587	192.168.2.4	209.71.212.26
Aug 1, 2024 06:09:28.631668091 CEST	49821	587	192.168.2.4	209.71.212.26
Aug 1, 2024 06:09:28.633037090 CEST	62449	587	192.168.2.4	62.149.157.154
Aug 1, 2024 06:09:28.633729935 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:28.633759022 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:28.633810997 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:28.633824110 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:28.633845091 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:28.633877039 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:28.633882046 CEST	49821	587	192.168.2.4	209.71.212.26
Aug 1, 2024 06:09:28.633896112 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:28.633975029 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:28.634027958 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:28.634038925 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:28.634057999 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:28.634109020 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:28.634109974 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:28.634141922 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:28.634195089 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:28.634538889 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:28.634588957 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:28.634624004 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:28.634643078 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:28.634654999 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:28.634690046 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:28.634705067 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:28.636174917 CEST	587	49841	190.105.202.10	192.168.2.4
Aug 1, 2024 06:09:28.636203051 CEST	587	49834	162.241.62.39	192.168.2.4
Aug 1, 2024 06:09:28.636230946 CEST	587	49840	192.185.213.51	192.168.2.4
Aug 1, 2024 06:09:28.636259079 CEST	587	49842	13.250.88.201	192.168.2.4
Aug 1, 2024 06:09:28.636286020 CEST	587	49817	13.250.88.201	192.168.2.4
Aug 1, 2024 06:09:28.636313915 CEST	587	49818	103.86.139.86	192.168.2.4
Aug 1, 2024 06:09:28.636363029 CEST	587	49839	192.198.192.27	192.168.2.4
Aug 1, 2024 06:09:28.636390924 CEST	587	49835	84.2.43.67	192.168.2.4
Aug 1, 2024 06:09:28.636471987 CEST	587	49821	209.71.212.26	192.168.2.4
Aug 1, 2024 06:09:28.636538982 CEST	49821	587	192.168.2.4	209.71.212.26
Aug 1, 2024 06:09:28.636545897 CEST	587	49821	209.71.212.26	192.168.2.4
Aug 1, 2024 06:09:28.636574030 CEST	587	49821	209.71.212.26	192.168.2.4
Aug 1, 2024 06:09:28.636600018 CEST	587	49821	209.71.212.26	192.168.2.4
Aug 1, 2024 06:09:28.636603117 CEST	49821	587	192.168.2.4	209.71.212.26
Aug 1, 2024 06:09:28.636636019 CEST	587	49821	209.71.212.26	192.168.2.4
Aug 1, 2024 06:09:28.636639118 CEST	49821	587	192.168.2.4	209.71.212.26
Aug 1, 2024 06:09:28.636650085 CEST	49821	587	192.168.2.4	209.71.212.26
Aug 1, 2024 06:09:28.636681080 CEST	49821	587	192.168.2.4	209.71.212.26
Aug 1, 2024 06:09:28.636683941 CEST	587	49821	209.71.212.26	192.168.2.4
Aug 1, 2024 06:09:28.636790991 CEST	587	49821	209.71.212.26	192.168.2.4
Aug 1, 2024 06:09:28.636817932 CEST	587	49821	209.71.212.26	192.168.2.4
Aug 1, 2024 06:09:28.637407064 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:28.637434959 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:28.637464046 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:28.637856007 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:28.637903929 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:28.637908936 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:28.637938023 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:28.637984037 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:28.637989998 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:28.638024092 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:28.638070107 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:28.638077021 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:28.638108015 CEST	587	62449	62.149.157.154	192.168.2.4
Aug 1, 2024 06:09:28.638159037 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:28.638176918 CEST	62449	587	192.168.2.4	62.149.157.154
Aug 1, 2024 06:09:28.638197899 CEST	49837	587	192.168.2.4	192.185.32.240
Aug 1, 2024 06:09:28.638209105 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:28.638210058 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:28.638242006 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:28.638273954 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:28.638289928 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:28.638309956 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:28.638323069 CEST	49821	587	192.168.2.4	209.71.212.26
Aug 1, 2024 06:09:28.638345003 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:28.638361931 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:28.638379097 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:28.638381004 CEST	49821	587	192.168.2.4	209.71.212.26
Aug 1, 2024 06:09:28.638411999 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:28.638422966 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:28.638667107 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:28.638720989 CEST	587	49821	209.71.212.26	192.168.2.4
Aug 1, 2024 06:09:28.638780117 CEST	49821	587	192.168.2.4	209.71.212.26
Aug 1, 2024 06:09:28.638998985 CEST	587	49821	209.71.212.26	192.168.2.4
Aug 1, 2024 06:09:28.639025927 CEST	587	49821	209.71.212.26	192.168.2.4
Aug 1, 2024 06:09:28.639065027 CEST	49821	587	192.168.2.4	209.71.212.26
Aug 1, 2024 06:09:28.639086962 CEST	49821	587	192.168.2.4	209.71.212.26
Aug 1, 2024 06:09:28.641221046 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:28.641249895 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:28.641289949 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:28.641314030 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:28.641696930 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:28.641724110 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:28.641761065 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:28.641776085 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:28.641786098 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:28.641803980 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:28.641829014 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:28.641850948 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:28.641855955 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:28.641906023 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:28.641908884 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:28.641937017 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:28.641964912 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:28.641968966 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:28.641988039 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:28.642016888 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:28.642018080 CEST	587	49821	209.71.212.26	192.168.2.4
Aug 1, 2024 06:09:28.642047882 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:28.642081022 CEST	49821	587	192.168.2.4	209.71.212.26
Aug 1, 2024 06:09:28.642098904 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:28.642100096 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:28.642133951 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:28.642147064 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:28.642160892 CEST	587	49821	209.71.212.26	192.168.2.4
Aug 1, 2024 06:09:28.642210007 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:28.642214060 CEST	49821	587	192.168.2.4	209.71.212.26
Aug 1, 2024 06:09:28.642241955 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:28.642262936 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:28.642268896 CEST	587	49821	209.71.212.26	192.168.2.4
Aug 1, 2024 06:09:28.642294884 CEST	587	49821	209.71.212.26	192.168.2.4
Aug 1, 2024 06:09:28.642319918 CEST	49821	587	192.168.2.4	209.71.212.26
Aug 1, 2024 06:09:28.642327070 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:28.642363071 CEST	49821	587	192.168.2.4	209.71.212.26
Aug 1, 2024 06:09:28.642362118 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:28.642394066 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:28.642400026 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:28.642422915 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:28.642426014 CEST	587	49821	209.71.212.26	192.168.2.4
Aug 1, 2024 06:09:28.642452955 CEST	587	49821	209.71.212.26	192.168.2.4
Aug 1, 2024 06:09:28.642457962 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:28.642478943 CEST	587	49821	209.71.212.26	192.168.2.4
Aug 1, 2024 06:09:28.642486095 CEST	49821	587	192.168.2.4	209.71.212.26
Aug 1, 2024 06:09:28.642508030 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:28.642517090 CEST	49821	587	192.168.2.4	209.71.212.26
Aug 1, 2024 06:09:28.642540932 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:28.642546892 CEST	49821	587	192.168.2.4	209.71.212.26
Aug 1, 2024 06:09:28.642621040 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:28.642659903 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:28.643840075 CEST	587	49821	209.71.212.26	192.168.2.4
Aug 1, 2024 06:09:28.643940926 CEST	587	49821	209.71.212.26	192.168.2.4
Aug 1, 2024 06:09:28.645682096 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:28.645709991 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:28.645759106 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:28.645766973 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:28.645819902 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:28.645850897 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:28.645868063 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:28.645884037 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:28.645916939 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:28.645931959 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:28.645951986 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:28.645997047 CEST	49821	587	192.168.2.4	209.71.212.26
Aug 1, 2024 06:09:28.645997047 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:28.646003008 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:28.646044970 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:28.646094084 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:28.646096945 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:28.646148920 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:28.646176100 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:28.646192074 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:28.646199942 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:28.646207094 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:28.646223068 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:28.646234035 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:28.646250010 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:28.646269083 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:28.646274090 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:28.646306038 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:28.646384954 CEST	49821	587	192.168.2.4	209.71.212.26
Aug 1, 2024 06:09:28.646550894 CEST	49821	587	192.168.2.4	209.71.212.26
Aug 1, 2024 06:09:28.646677971 CEST	49821	587	192.168.2.4	209.71.212.26
Aug 1, 2024 06:09:28.647509098 CEST	587	49821	209.71.212.26	192.168.2.4
Aug 1, 2024 06:09:28.647722006 CEST	587	49821	209.71.212.26	192.168.2.4
Aug 1, 2024 06:09:28.647866964 CEST	587	49821	209.71.212.26	192.168.2.4
Aug 1, 2024 06:09:28.647880077 CEST	587	49821	209.71.212.26	192.168.2.4
Aug 1, 2024 06:09:28.647895098 CEST	587	49821	209.71.212.26	192.168.2.4
Aug 1, 2024 06:09:28.647970915 CEST	587	49821	209.71.212.26	192.168.2.4
Aug 1, 2024 06:09:28.647983074 CEST	587	49821	209.71.212.26	192.168.2.4
Aug 1, 2024 06:09:28.648922920 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:28.648936033 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:28.648988008 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:28.649089098 CEST	49821	587	192.168.2.4	209.71.212.26
Aug 1, 2024 06:09:28.651134014 CEST	587	49821	209.71.212.26	192.168.2.4
Aug 1, 2024 06:09:28.651367903 CEST	587	49821	209.71.212.26	192.168.2.4
Aug 1, 2024 06:09:28.651516914 CEST	587	49821	209.71.212.26	192.168.2.4
Aug 1, 2024 06:09:28.651529074 CEST	587	49821	209.71.212.26	192.168.2.4
Aug 1, 2024 06:09:28.653436899 CEST	587	49828	178.251.28.102	192.168.2.4
Aug 1, 2024 06:09:28.653753996 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:28.653850079 CEST	587	49821	209.71.212.26	192.168.2.4
Aug 1, 2024 06:09:28.653920889 CEST	587	49821	209.71.212.26	192.168.2.4
Aug 1, 2024 06:09:28.653934002 CEST	587	49821	209.71.212.26	192.168.2.4
Aug 1, 2024 06:09:28.653945923 CEST	587	49821	209.71.212.26	192.168.2.4
Aug 1, 2024 06:09:28.653973103 CEST	587	49821	209.71.212.26	192.168.2.4
Aug 1, 2024 06:09:28.653985023 CEST	587	49821	209.71.212.26	192.168.2.4
Aug 1, 2024 06:09:28.653999090 CEST	587	49821	209.71.212.26	192.168.2.4
Aug 1, 2024 06:09:28.654110909 CEST	587	49821	209.71.212.26	192.168.2.4
Aug 1, 2024 06:09:28.654124022 CEST	587	49821	209.71.212.26	192.168.2.4
Aug 1, 2024 06:09:28.674989939 CEST	587	49838	212.91.113.96	192.168.2.4
Aug 1, 2024 06:09:28.675854921 CEST	587	49829	191.252.112.195	192.168.2.4
Aug 1, 2024 06:09:28.678642035 CEST	587	49776	164.52.146.15	192.168.2.4
Aug 1, 2024 06:09:28.682528973 CEST	587	49827	13.250.88.201	192.168.2.4
Aug 1, 2024 06:09:28.700690031 CEST	49828	587	192.168.2.4	178.251.28.102
Aug 1, 2024 06:09:28.704370022 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:28.704477072 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:28.709325075 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:28.715342045 CEST	49838	587	192.168.2.4	212.91.113.96
Aug 1, 2024 06:09:28.718317032 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:28.718473911 CEST	49821	587	192.168.2.4	209.71.212.26
Aug 1, 2024 06:09:28.723380089 CEST	587	49821	209.71.212.26	192.168.2.4
Aug 1, 2024 06:09:28.728966951 CEST	587	49826	37.120.193.124	192.168.2.4
Aug 1, 2024 06:09:28.729226112 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:28.730992079 CEST	49829	587	192.168.2.4	191.252.112.195
Aug 1, 2024 06:09:28.731035948 CEST	49776	587	192.168.2.4	164.52.146.15
Aug 1, 2024 06:09:28.731035948 CEST	49827	587	192.168.2.4	13.250.88.201
Aug 1, 2024 06:09:28.747111082 CEST	587	49834	162.241.62.39	192.168.2.4
Aug 1, 2024 06:09:28.749574900 CEST	587	49840	192.185.213.51	192.168.2.4
Aug 1, 2024 06:09:28.774873018 CEST	587	49825	31.179.210.222	192.168.2.4
Aug 1, 2024 06:09:28.776326895 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:28.776498079 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:28.777853966 CEST	49826	587	192.168.2.4	37.120.193.124
Aug 1, 2024 06:09:28.781596899 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:28.781680107 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:28.786583900 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:28.788012981 CEST	587	49839	192.198.192.27	192.168.2.4
Aug 1, 2024 06:09:28.788242102 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:28.793061018 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:28.793479919 CEST	49834	587	192.168.2.4	162.241.62.39
Aug 1, 2024 06:09:28.796111107 CEST	49840	587	192.168.2.4	192.185.213.51
Aug 1, 2024 06:09:28.818372965 CEST	587	49832	139.95.7.216	192.168.2.4
Aug 1, 2024 06:09:28.818403006 CEST	587	49832	139.95.7.216	192.168.2.4
Aug 1, 2024 06:09:28.818427086 CEST	587	49832	139.95.7.216	192.168.2.4
Aug 1, 2024 06:09:28.818444014 CEST	587	49832	139.95.7.216	192.168.2.4
Aug 1, 2024 06:09:28.818464041 CEST	587	49832	139.95.7.216	192.168.2.4
Aug 1, 2024 06:09:28.818607092 CEST	49832	587	192.168.2.4	139.95.7.216
Aug 1, 2024 06:09:28.818883896 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:28.819940090 CEST	587	49819	103.110.129.117	192.168.2.4
Aug 1, 2024 06:09:28.821094990 CEST	587	49833	103.15.48.10	192.168.2.4
Aug 1, 2024 06:09:28.823683977 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:28.823743105 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:28.823765039 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:28.823775053 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:28.823894024 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:28.823921919 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:28.824745893 CEST	49825	587	192.168.2.4	31.179.210.222
Aug 1, 2024 06:09:28.825268984 CEST	587	49835	84.2.43.67	192.168.2.4
Aug 1, 2024 06:09:28.825298071 CEST	587	49835	84.2.43.67	192.168.2.4
Aug 1, 2024 06:09:28.825349092 CEST	587	49835	84.2.43.67	192.168.2.4
Aug 1, 2024 06:09:28.825381994 CEST	49835	587	192.168.2.4	84.2.43.67
Aug 1, 2024 06:09:28.825386047 CEST	587	49835	84.2.43.67	192.168.2.4
Aug 1, 2024 06:09:28.825416088 CEST	587	49835	84.2.43.67	192.168.2.4
Aug 1, 2024 06:09:28.825442076 CEST	49835	587	192.168.2.4	84.2.43.67
Aug 1, 2024 06:09:28.826111078 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:28.828552008 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:28.830966949 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:28.831017971 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:28.831043959 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:28.831135035 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:28.832010984 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:28.832248926 CEST	49822	587	192.168.2.4	191.252.112.194
Aug 1, 2024 06:09:28.832432032 CEST	49774	587	192.168.2.4	15.235.118.229
Aug 1, 2024 06:09:28.832556009 CEST	49837	587	192.168.2.4	192.185.32.240
Aug 1, 2024 06:09:28.832721949 CEST	49830	587	192.168.2.4	210.116.104.65
Aug 1, 2024 06:09:28.837125063 CEST	587	49822	191.252.112.194	192.168.2.4
Aug 1, 2024 06:09:28.837234020 CEST	587	49774	15.235.118.229	192.168.2.4
Aug 1, 2024 06:09:28.837376118 CEST	587	49837	192.185.32.240	192.168.2.4
Aug 1, 2024 06:09:28.837501049 CEST	587	49830	210.116.104.65	192.168.2.4
Aug 1, 2024 06:09:28.840389013 CEST	49839	587	192.168.2.4	192.198.192.27
Aug 1, 2024 06:09:28.853439093 CEST	62450	587	192.168.2.4	162.241.61.138
Aug 1, 2024 06:09:28.858218908 CEST	587	62450	162.241.61.138	192.168.2.4
Aug 1, 2024 06:09:28.858309031 CEST	62450	587	192.168.2.4	162.241.61.138
Aug 1, 2024 06:09:28.858448029 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:28.871222973 CEST	587	49841	190.105.202.10	192.168.2.4
Aug 1, 2024 06:09:28.871567965 CEST	49819	587	192.168.2.4	103.110.129.117
Aug 1, 2024 06:09:28.872564077 CEST	49833	587	192.168.2.4	103.15.48.10
Aug 1, 2024 06:09:28.872678995 CEST	49835	587	192.168.2.4	84.2.43.67
Aug 1, 2024 06:09:28.904301882 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:28.904403925 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:28.909527063 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:28.915559053 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:28.915792942 CEST	49828	587	192.168.2.4	178.251.28.102
Aug 1, 2024 06:09:28.918474913 CEST	49841	587	192.168.2.4	190.105.202.10
Aug 1, 2024 06:09:28.920631886 CEST	587	49828	178.251.28.102	192.168.2.4
Aug 1, 2024 06:09:28.926512003 CEST	587	49835	84.2.43.67	192.168.2.4
Aug 1, 2024 06:09:28.926810026 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:28.935691118 CEST	587	49774	15.235.118.229	192.168.2.4
Aug 1, 2024 06:09:28.939224005 CEST	587	62447	77.79.88.19	192.168.2.4
Aug 1, 2024 06:09:28.945904970 CEST	587	49837	192.185.32.240	192.168.2.4
Aug 1, 2024 06:09:28.972337008 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:28.972394943 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:28.975681067 CEST	587	49820	13.250.88.201	192.168.2.4
Aug 1, 2024 06:09:28.977211952 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:28.977273941 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:28.980963945 CEST	49835	587	192.168.2.4	84.2.43.67
Aug 1, 2024 06:09:28.980978012 CEST	49774	587	192.168.2.4	15.235.118.229
Aug 1, 2024 06:09:28.980988026 CEST	62447	587	192.168.2.4	77.79.88.19
Aug 1, 2024 06:09:28.982258081 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:28.982616901 CEST	587	49821	209.71.212.26	192.168.2.4
Aug 1, 2024 06:09:28.982920885 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:28.987721920 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:28.996439934 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:28.996576071 CEST	49837	587	192.168.2.4	192.185.32.240
Aug 1, 2024 06:09:28.999058962 CEST	49829	587	192.168.2.4	191.252.112.195
Aug 1, 2024 06:09:28.999109030 CEST	587	49844	89.42.218.226	192.168.2.4
Aug 1, 2024 06:09:28.999192953 CEST	49838	587	192.168.2.4	212.91.113.96
Aug 1, 2024 06:09:28.999310017 CEST	49826	587	192.168.2.4	37.120.193.124
Aug 1, 2024 06:09:28.999423027 CEST	49827	587	192.168.2.4	13.250.88.201
Aug 1, 2024 06:09:28.999492884 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:29.002108097 CEST	62451	587	192.168.2.4	13.250.88.201
Aug 1, 2024 06:09:29.003979921 CEST	587	49829	191.252.112.195	192.168.2.4
Aug 1, 2024 06:09:29.004012108 CEST	587	49838	212.91.113.96	192.168.2.4
Aug 1, 2024 06:09:29.004085064 CEST	587	49826	37.120.193.124	192.168.2.4
Aug 1, 2024 06:09:29.004237890 CEST	587	49827	13.250.88.201	192.168.2.4
Aug 1, 2024 06:09:29.007409096 CEST	587	62451	13.250.88.201	192.168.2.4
Aug 1, 2024 06:09:29.007491112 CEST	62451	587	192.168.2.4	13.250.88.201
Aug 1, 2024 06:09:29.012959957 CEST	49776	587	192.168.2.4	164.52.146.15
Aug 1, 2024 06:09:29.018197060 CEST	587	49776	164.52.146.15	192.168.2.4
Aug 1, 2024 06:09:29.018249989 CEST	49776	587	192.168.2.4	164.52.146.15
Aug 1, 2024 06:09:29.027842999 CEST	49821	587	192.168.2.4	209.71.212.26
Aug 1, 2024 06:09:29.027842999 CEST	49820	587	192.168.2.4	13.250.88.201
Aug 1, 2024 06:09:29.037286997 CEST	587	49817	13.250.88.201	192.168.2.4
Aug 1, 2024 06:09:29.043448925 CEST	49844	587	192.168.2.4	89.42.218.226
Aug 1, 2024 06:09:29.046780109 CEST	587	49822	191.252.112.194	192.168.2.4
Aug 1, 2024 06:09:29.048321009 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:29.048433065 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:29.053220034 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:29.077096939 CEST	587	62446	89.236.174.10	192.168.2.4
Aug 1, 2024 06:09:29.077502966 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:29.082691908 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:29.090507984 CEST	49817	587	192.168.2.4	13.250.88.201
Aug 1, 2024 06:09:29.090511084 CEST	49822	587	192.168.2.4	191.252.112.194
Aug 1, 2024 06:09:29.091298103 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:29.092358112 CEST	49834	587	192.168.2.4	162.241.62.39
Aug 1, 2024 06:09:29.092466116 CEST	49825	587	192.168.2.4	31.179.210.222
Aug 1, 2024 06:09:29.092592955 CEST	49840	587	192.168.2.4	192.185.213.51
Aug 1, 2024 06:09:29.092626095 CEST	49839	587	192.168.2.4	192.198.192.27
Aug 1, 2024 06:09:29.092679024 CEST	49833	587	192.168.2.4	103.15.48.10
Aug 1, 2024 06:09:29.092753887 CEST	49819	587	192.168.2.4	103.110.129.117
Aug 1, 2024 06:09:29.092829943 CEST	49832	587	192.168.2.4	139.95.7.216
Aug 1, 2024 06:09:29.097233057 CEST	587	49834	162.241.62.39	192.168.2.4
Aug 1, 2024 06:09:29.097317934 CEST	587	49825	31.179.210.222	192.168.2.4
Aug 1, 2024 06:09:29.097352982 CEST	587	49840	192.185.213.51	192.168.2.4
Aug 1, 2024 06:09:29.097404003 CEST	587	49839	192.198.192.27	192.168.2.4
Aug 1, 2024 06:09:29.097573042 CEST	587	49833	103.15.48.10	192.168.2.4
Aug 1, 2024 06:09:29.097603083 CEST	587	49819	103.110.129.117	192.168.2.4
Aug 1, 2024 06:09:29.097692013 CEST	587	49832	139.95.7.216	192.168.2.4
Aug 1, 2024 06:09:29.103848934 CEST	587	49828	178.251.28.102	192.168.2.4
Aug 1, 2024 06:09:29.104655981 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:29.121622086 CEST	62446	587	192.168.2.4	89.236.174.10
Aug 1, 2024 06:09:29.152287960 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:29.152872086 CEST	49828	587	192.168.2.4	178.251.28.102
Aug 1, 2024 06:09:29.154556036 CEST	587	49830	210.116.104.65	192.168.2.4
Aug 1, 2024 06:09:29.154767990 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:29.158274889 CEST	587	49842	13.250.88.201	192.168.2.4
Aug 1, 2024 06:09:29.159535885 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:29.159606934 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:29.164351940 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:29.169631004 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:29.169797897 CEST	49841	587	192.168.2.4	190.105.202.10
Aug 1, 2024 06:09:29.174619913 CEST	587	49841	190.105.202.10	192.168.2.4
Aug 1, 2024 06:09:29.199029922 CEST	587	62448	162.144.12.100	192.168.2.4
Aug 1, 2024 06:09:29.199502945 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:29.199726105 CEST	49830	587	192.168.2.4	210.116.104.65
Aug 1, 2024 06:09:29.200118065 CEST	49842	587	192.168.2.4	13.250.88.201
Aug 1, 2024 06:09:29.203815937 CEST	62452	587	192.168.2.4	74.202.139.99
Aug 1, 2024 06:09:29.205586910 CEST	587	49838	212.91.113.96	192.168.2.4
Aug 1, 2024 06:09:29.205641985 CEST	587	49838	212.91.113.96	192.168.2.4
Aug 1, 2024 06:09:29.205677986 CEST	587	49838	212.91.113.96	192.168.2.4
Aug 1, 2024 06:09:29.205696106 CEST	49838	587	192.168.2.4	212.91.113.96
Aug 1, 2024 06:09:29.205714941 CEST	587	49838	212.91.113.96	192.168.2.4
Aug 1, 2024 06:09:29.205773115 CEST	49838	587	192.168.2.4	212.91.113.96
Aug 1, 2024 06:09:29.205935955 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:29.205935955 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:29.206300020 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:29.208611965 CEST	587	62452	74.202.139.99	192.168.2.4
Aug 1, 2024 06:09:29.208734989 CEST	62452	587	192.168.2.4	74.202.139.99
Aug 1, 2024 06:09:29.210756063 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:29.210807085 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:29.210824013 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:29.211213112 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:29.215421915 CEST	587	49834	162.241.62.39	192.168.2.4
Aug 1, 2024 06:09:29.223757029 CEST	587	49829	191.252.112.195	192.168.2.4
Aug 1, 2024 06:09:29.230170965 CEST	53	62445	1.1.1.1	192.168.2.4
Aug 1, 2024 06:09:29.230952978 CEST	587	62449	62.149.157.154	192.168.2.4
Aug 1, 2024 06:09:29.231021881 CEST	587	49840	192.185.213.51	192.168.2.4
Aug 1, 2024 06:09:29.231075048 CEST	587	49840	192.185.213.51	192.168.2.4
Aug 1, 2024 06:09:29.231106043 CEST	587	49840	192.185.213.51	192.168.2.4
Aug 1, 2024 06:09:29.231136084 CEST	49840	587	192.168.2.4	192.185.213.51
Aug 1, 2024 06:09:29.231138945 CEST	587	49840	192.185.213.51	192.168.2.4
Aug 1, 2024 06:09:29.231190920 CEST	49840	587	192.168.2.4	192.185.213.51
Aug 1, 2024 06:09:29.232135057 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:29.232367039 CEST	62445	53	192.168.2.4	1.1.1.1
Aug 1, 2024 06:09:29.232526064 CEST	62453	587	192.168.2.4	191.252.112.195
Aug 1, 2024 06:09:29.237061977 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:29.237092018 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:29.237334013 CEST	587	62453	191.252.112.195	192.168.2.4
Aug 1, 2024 06:09:29.237427950 CEST	62453	587	192.168.2.4	191.252.112.195
Aug 1, 2024 06:09:29.237493038 CEST	53	62445	1.1.1.1	192.168.2.4
Aug 1, 2024 06:09:29.237545967 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:29.240123034 CEST	62445	53	192.168.2.4	1.1.1.1
Aug 1, 2024 06:09:29.246459961 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:29.246675968 CEST	62448	587	192.168.2.4	162.144.12.100
Aug 1, 2024 06:09:29.248392105 CEST	62447	587	192.168.2.4	77.79.88.19
Aug 1, 2024 06:09:29.248497009 CEST	49820	587	192.168.2.4	13.250.88.201
Aug 1, 2024 06:09:29.248609066 CEST	49837	587	192.168.2.4	192.185.32.240
Aug 1, 2024 06:09:29.249150038 CEST	49835	587	192.168.2.4	84.2.43.67
Aug 1, 2024 06:09:29.253376007 CEST	587	62447	77.79.88.19	192.168.2.4
Aug 1, 2024 06:09:29.253390074 CEST	587	49820	13.250.88.201	192.168.2.4
Aug 1, 2024 06:09:29.253401995 CEST	587	49837	192.185.32.240	192.168.2.4
Aug 1, 2024 06:09:29.253940105 CEST	587	49835	84.2.43.67	192.168.2.4
Aug 1, 2024 06:09:29.258397102 CEST	587	49826	37.120.193.124	192.168.2.4
Aug 1, 2024 06:09:29.258708000 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:29.262247086 CEST	49774	587	192.168.2.4	15.235.118.229
Aug 1, 2024 06:09:29.262377024 CEST	49834	587	192.168.2.4	162.241.62.39
Aug 1, 2024 06:09:29.266750097 CEST	587	49839	192.198.192.27	192.168.2.4
Aug 1, 2024 06:09:29.266766071 CEST	587	49839	192.198.192.27	192.168.2.4
Aug 1, 2024 06:09:29.266839027 CEST	49839	587	192.168.2.4	192.198.192.27
Aug 1, 2024 06:09:29.266974926 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:29.267520905 CEST	587	49774	15.235.118.229	192.168.2.4
Aug 1, 2024 06:09:29.267580986 CEST	49774	587	192.168.2.4	15.235.118.229
Aug 1, 2024 06:09:29.271732092 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:29.273699045 CEST	587	49817	13.250.88.201	192.168.2.4
Aug 1, 2024 06:09:29.273772955 CEST	49817	587	192.168.2.4	13.250.88.201
Aug 1, 2024 06:09:29.273915052 CEST	49817	587	192.168.2.4	13.250.88.201
Aug 1, 2024 06:09:29.277874947 CEST	49829	587	192.168.2.4	191.252.112.195
Aug 1, 2024 06:09:29.278332949 CEST	62449	587	192.168.2.4	62.149.157.154
Aug 1, 2024 06:09:29.278739929 CEST	587	49817	13.250.88.201	192.168.2.4
Aug 1, 2024 06:09:29.292602062 CEST	62454	587	192.168.2.4	23.81.68.43
Aug 1, 2024 06:09:29.297466040 CEST	587	62454	23.81.68.43	192.168.2.4
Aug 1, 2024 06:09:29.297565937 CEST	62454	587	192.168.2.4	23.81.68.43
Aug 1, 2024 06:09:29.298091888 CEST	587	49838	212.91.113.96	192.168.2.4
Aug 1, 2024 06:09:29.309077024 CEST	49826	587	192.168.2.4	37.120.193.124
Aug 1, 2024 06:09:29.312370062 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:29.312468052 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:29.317333937 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:29.318499088 CEST	587	49825	31.179.210.222	192.168.2.4
Aug 1, 2024 06:09:29.318716049 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:29.323514938 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:29.323939085 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:29.324342966 CEST	49844	587	192.168.2.4	89.42.218.226
Aug 1, 2024 06:09:29.324424982 CEST	49822	587	192.168.2.4	191.252.112.194
Aug 1, 2024 06:09:29.326999903 CEST	62455	587	192.168.2.4	209.71.212.26
Aug 1, 2024 06:09:29.327805996 CEST	587	49827	13.250.88.201	192.168.2.4
Aug 1, 2024 06:09:29.327994108 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:29.329119921 CEST	587	49844	89.42.218.226	192.168.2.4
Aug 1, 2024 06:09:29.329174042 CEST	587	49822	191.252.112.194	192.168.2.4
Aug 1, 2024 06:09:29.331796885 CEST	587	62455	209.71.212.26	192.168.2.4
Aug 1, 2024 06:09:29.331871986 CEST	62455	587	192.168.2.4	209.71.212.26
Aug 1, 2024 06:09:29.340328932 CEST	49838	587	192.168.2.4	212.91.113.96
Aug 1, 2024 06:09:29.362457991 CEST	587	49837	192.185.32.240	192.168.2.4
Aug 1, 2024 06:09:29.363913059 CEST	587	62450	162.241.61.138	192.168.2.4
Aug 1, 2024 06:09:29.371613026 CEST	49825	587	192.168.2.4	31.179.210.222
Aug 1, 2024 06:09:29.371691942 CEST	49827	587	192.168.2.4	13.250.88.201
Aug 1, 2024 06:09:29.376427889 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:29.384385109 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:29.389307022 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:29.402538061 CEST	587	49841	190.105.202.10	192.168.2.4
Aug 1, 2024 06:09:29.402838945 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:29.404118061 CEST	49837	587	192.168.2.4	192.185.32.240
Aug 1, 2024 06:09:29.404257059 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:29.404896975 CEST	62446	587	192.168.2.4	89.236.174.10
Aug 1, 2024 06:09:29.404964924 CEST	49828	587	192.168.2.4	178.251.28.102
Aug 1, 2024 06:09:29.405054092 CEST	49842	587	192.168.2.4	13.250.88.201
Aug 1, 2024 06:09:29.405158043 CEST	62448	587	192.168.2.4	162.144.12.100
Aug 1, 2024 06:09:29.407388926 CEST	62456	587	192.168.2.4	18.236.21.232
Aug 1, 2024 06:09:29.409693956 CEST	587	62446	89.236.174.10	192.168.2.4
Aug 1, 2024 06:09:29.409749985 CEST	587	49828	178.251.28.102	192.168.2.4
Aug 1, 2024 06:09:29.409784079 CEST	587	49842	13.250.88.201	192.168.2.4
Aug 1, 2024 06:09:29.410039902 CEST	587	62448	162.144.12.100	192.168.2.4
Aug 1, 2024 06:09:29.412239075 CEST	587	62456	18.236.21.232	192.168.2.4
Aug 1, 2024 06:09:29.412321091 CEST	62456	587	192.168.2.4	18.236.21.232
Aug 1, 2024 06:09:29.418463945 CEST	62450	587	192.168.2.4	162.241.61.138
Aug 1, 2024 06:09:29.426655054 CEST	587	49830	210.116.104.65	192.168.2.4
Aug 1, 2024 06:09:29.443615913 CEST	587	49835	84.2.43.67	192.168.2.4
Aug 1, 2024 06:09:29.448774099 CEST	587	49832	139.95.7.216	192.168.2.4
Aug 1, 2024 06:09:29.449717999 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:29.452281952 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:29.452339888 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:29.456392050 CEST	587	49819	103.110.129.117	192.168.2.4
Aug 1, 2024 06:09:29.457093954 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:29.457274914 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:29.458533049 CEST	49841	587	192.168.2.4	190.105.202.10
Aug 1, 2024 06:09:29.462064981 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:29.462333918 CEST	587	49833	103.15.48.10	192.168.2.4
Aug 1, 2024 06:09:29.462383032 CEST	587	49833	103.15.48.10	192.168.2.4
Aug 1, 2024 06:09:29.462398052 CEST	587	49833	103.15.48.10	192.168.2.4
Aug 1, 2024 06:09:29.462447882 CEST	587	49833	103.15.48.10	192.168.2.4
Aug 1, 2024 06:09:29.462451935 CEST	49833	587	192.168.2.4	103.15.48.10
Aug 1, 2024 06:09:29.462461948 CEST	587	49833	103.15.48.10	192.168.2.4
Aug 1, 2024 06:09:29.462500095 CEST	49833	587	192.168.2.4	103.15.48.10
Aug 1, 2024 06:09:29.462697029 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:29.467567921 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:29.467613935 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:29.467627048 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:29.467642069 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:29.471692085 CEST	587	62447	77.79.88.19	192.168.2.4
Aug 1, 2024 06:09:29.471883059 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:29.476650953 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:29.480933905 CEST	49830	587	192.168.2.4	210.116.104.65
Aug 1, 2024 06:09:29.496582985 CEST	49819	587	192.168.2.4	103.110.129.117
Aug 1, 2024 06:09:29.496675968 CEST	49835	587	192.168.2.4	84.2.43.67
Aug 1, 2024 06:09:29.496675968 CEST	49832	587	192.168.2.4	139.95.7.216
Aug 1, 2024 06:09:29.512233019 CEST	49833	587	192.168.2.4	103.15.48.10
Aug 1, 2024 06:09:29.512245893 CEST	62447	587	192.168.2.4	77.79.88.19
Aug 1, 2024 06:09:29.518666029 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:29.518944979 CEST	49829	587	192.168.2.4	191.252.112.195
Aug 1, 2024 06:09:29.519042015 CEST	62449	587	192.168.2.4	62.149.157.154
Aug 1, 2024 06:09:29.519153118 CEST	49834	587	192.168.2.4	162.241.62.39
Aug 1, 2024 06:09:29.519222021 CEST	49826	587	192.168.2.4	37.120.193.124
Aug 1, 2024 06:09:29.519309044 CEST	49840	587	192.168.2.4	192.185.213.51
Aug 1, 2024 06:09:29.519360065 CEST	587	49760	64.140.165.234	192.168.2.4
Aug 1, 2024 06:09:29.519427061 CEST	49839	587	192.168.2.4	192.198.192.27
Aug 1, 2024 06:09:29.519573927 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:29.523915052 CEST	587	49829	191.252.112.195	192.168.2.4
Aug 1, 2024 06:09:29.523947954 CEST	587	62449	62.149.157.154	192.168.2.4
Aug 1, 2024 06:09:29.524002075 CEST	587	49834	162.241.62.39	192.168.2.4
Aug 1, 2024 06:09:29.524029970 CEST	587	49826	37.120.193.124	192.168.2.4
Aug 1, 2024 06:09:29.524126053 CEST	587	49840	192.185.213.51	192.168.2.4
Aug 1, 2024 06:09:29.524179935 CEST	587	49839	192.198.192.27	192.168.2.4
Aug 1, 2024 06:09:29.524360895 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:29.533835888 CEST	587	49844	89.42.218.226	192.168.2.4
Aug 1, 2024 06:09:29.534039974 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:29.538943052 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:29.542809963 CEST	587	49822	191.252.112.194	192.168.2.4
Aug 1, 2024 06:09:29.543036938 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:29.547859907 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:29.550628901 CEST	587	49833	103.15.48.10	192.168.2.4
Aug 1, 2024 06:09:29.550822973 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:29.555567980 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:29.559102058 CEST	49760	587	192.168.2.4	64.140.165.234
Aug 1, 2024 06:09:29.560074091 CEST	587	62448	162.144.12.100	192.168.2.4
Aug 1, 2024 06:09:29.560484886 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:29.564230919 CEST	62457	587	192.168.2.4	192.254.225.239
Aug 1, 2024 06:09:29.565284014 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:29.569031000 CEST	587	62457	192.254.225.239	192.168.2.4
Aug 1, 2024 06:09:29.569089890 CEST	62457	587	192.168.2.4	192.254.225.239
Aug 1, 2024 06:09:29.569252968 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:29.574450016 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:29.574687958 CEST	49844	587	192.168.2.4	89.42.218.226
Aug 1, 2024 06:09:29.585022926 CEST	587	49828	178.251.28.102	192.168.2.4
Aug 1, 2024 06:09:29.585231066 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:29.585550070 CEST	587	49828	178.251.28.102	192.168.2.4
Aug 1, 2024 06:09:29.585630894 CEST	49828	587	192.168.2.4	178.251.28.102
Aug 1, 2024 06:09:29.585699081 CEST	49828	587	192.168.2.4	178.251.28.102
Aug 1, 2024 06:09:29.590107918 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:29.590158939 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:29.590315104 CEST	49833	587	192.168.2.4	103.15.48.10
Aug 1, 2024 06:09:29.590408087 CEST	49822	587	192.168.2.4	191.252.112.194
Aug 1, 2024 06:09:29.590503931 CEST	587	49828	178.251.28.102	192.168.2.4
Aug 1, 2024 06:09:29.594893932 CEST	587	49835	84.2.43.67	192.168.2.4
Aug 1, 2024 06:09:29.594969034 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:29.595118999 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:29.600193977 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:29.600342035 CEST	587	62446	89.236.174.10	192.168.2.4
Aug 1, 2024 06:09:29.600542068 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:29.605406046 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:29.605942965 CEST	62448	587	192.168.2.4	162.144.12.100
Aug 1, 2024 06:09:29.627286911 CEST	587	49820	13.250.88.201	192.168.2.4
Aug 1, 2024 06:09:29.627594948 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:29.632531881 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:29.634821892 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:29.635289907 CEST	587	49840	192.185.213.51	192.168.2.4
Aug 1, 2024 06:09:29.635329962 CEST	49838	587	192.168.2.4	212.91.113.96
Aug 1, 2024 06:09:29.635433912 CEST	49827	587	192.168.2.4	13.250.88.201
Aug 1, 2024 06:09:29.635736942 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:29.635766983 CEST	49837	587	192.168.2.4	192.185.32.240
Aug 1, 2024 06:09:29.635849953 CEST	62450	587	192.168.2.4	162.241.61.138
Aug 1, 2024 06:09:29.635929108 CEST	49841	587	192.168.2.4	190.105.202.10
Aug 1, 2024 06:09:29.637188911 CEST	49835	587	192.168.2.4	84.2.43.67
Aug 1, 2024 06:09:29.638417959 CEST	62458	587	192.168.2.4	13.250.88.201
Aug 1, 2024 06:09:29.640137911 CEST	587	49838	212.91.113.96	192.168.2.4
Aug 1, 2024 06:09:29.640219927 CEST	49838	587	192.168.2.4	212.91.113.96
Aug 1, 2024 06:09:29.640240908 CEST	587	49827	13.250.88.201	192.168.2.4
Aug 1, 2024 06:09:29.640532970 CEST	587	49837	192.185.32.240	192.168.2.4
Aug 1, 2024 06:09:29.640602112 CEST	587	62450	162.241.61.138	192.168.2.4
Aug 1, 2024 06:09:29.640686989 CEST	587	49841	190.105.202.10	192.168.2.4
Aug 1, 2024 06:09:29.643501997 CEST	587	62458	13.250.88.201	192.168.2.4
Aug 1, 2024 06:09:29.643578053 CEST	62458	587	192.168.2.4	13.250.88.201
Aug 1, 2024 06:09:29.644958973 CEST	587	49838	212.91.113.96	192.168.2.4
Aug 1, 2024 06:09:29.652827024 CEST	62446	587	192.168.2.4	89.236.174.10
Aug 1, 2024 06:09:29.667721987 CEST	62459	587	192.168.2.4	195.238.20.30
Aug 1, 2024 06:09:29.668462038 CEST	49820	587	192.168.2.4	13.250.88.201
Aug 1, 2024 06:09:29.672548056 CEST	587	62459	195.238.20.30	192.168.2.4
Aug 1, 2024 06:09:29.672633886 CEST	62459	587	192.168.2.4	195.238.20.30
Aug 1, 2024 06:09:29.674401045 CEST	587	49839	192.198.192.27	192.168.2.4
Aug 1, 2024 06:09:29.684087992 CEST	49840	587	192.168.2.4	192.185.213.51
Aug 1, 2024 06:09:29.684287071 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:29.684360981 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:29.689266920 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:29.715342999 CEST	49839	587	192.168.2.4	192.198.192.27
Aug 1, 2024 06:09:29.719432116 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:29.719614029 CEST	49819	587	192.168.2.4	103.110.129.117
Aug 1, 2024 06:09:29.719690084 CEST	49832	587	192.168.2.4	139.95.7.216
Aug 1, 2024 06:09:29.719779015 CEST	49830	587	192.168.2.4	210.116.104.65
Aug 1, 2024 06:09:29.719885111 CEST	62447	587	192.168.2.4	77.79.88.19
Aug 1, 2024 06:09:29.722879887 CEST	587	62449	62.149.157.154	192.168.2.4
Aug 1, 2024 06:09:29.723069906 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:29.724431992 CEST	587	49819	103.110.129.117	192.168.2.4
Aug 1, 2024 06:09:29.724461079 CEST	587	49832	139.95.7.216	192.168.2.4
Aug 1, 2024 06:09:29.724514008 CEST	587	49830	210.116.104.65	192.168.2.4
Aug 1, 2024 06:09:29.724679947 CEST	587	62447	77.79.88.19	192.168.2.4
Aug 1, 2024 06:09:29.727696896 CEST	587	49829	191.252.112.195	192.168.2.4
Aug 1, 2024 06:09:29.749067068 CEST	587	49837	192.185.32.240	192.168.2.4
Aug 1, 2024 06:09:29.749641895 CEST	587	62450	162.241.61.138	192.168.2.4
Aug 1, 2024 06:09:29.749667883 CEST	587	49842	13.250.88.201	192.168.2.4
Aug 1, 2024 06:09:29.772337914 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:29.772535086 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:29.774609089 CEST	587	49747	200.90.133.79	192.168.2.4
Aug 1, 2024 06:09:29.777373075 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:29.777441025 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:29.777834892 CEST	62449	587	192.168.2.4	62.149.157.154
Aug 1, 2024 06:09:29.780122042 CEST	49829	587	192.168.2.4	191.252.112.195
Aug 1, 2024 06:09:29.782234907 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:29.782881021 CEST	587	62452	74.202.139.99	192.168.2.4
Aug 1, 2024 06:09:29.783092022 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:29.788331985 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:29.793487072 CEST	49837	587	192.168.2.4	192.185.32.240
Aug 1, 2024 06:09:29.793535948 CEST	62450	587	192.168.2.4	162.241.61.138
Aug 1, 2024 06:09:29.793535948 CEST	49842	587	192.168.2.4	13.250.88.201
Aug 1, 2024 06:09:29.802804947 CEST	587	62454	23.81.68.43	192.168.2.4
Aug 1, 2024 06:09:29.803391933 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:29.808319092 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:29.814796925 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:29.814954042 CEST	49844	587	192.168.2.4	89.42.218.226
Aug 1, 2024 06:09:29.815049887 CEST	49760	587	192.168.2.4	64.140.165.234
Aug 1, 2024 06:09:29.815123081 CEST	62448	587	192.168.2.4	162.144.12.100
Aug 1, 2024 06:09:29.815208912 CEST	49833	587	192.168.2.4	103.15.48.10
Aug 1, 2024 06:09:29.819792986 CEST	587	49844	89.42.218.226	192.168.2.4
Aug 1, 2024 06:09:29.819894075 CEST	587	49760	64.140.165.234	192.168.2.4
Aug 1, 2024 06:09:29.819927931 CEST	587	62448	162.144.12.100	192.168.2.4
Aug 1, 2024 06:09:29.820059061 CEST	587	49833	103.15.48.10	192.168.2.4
Aug 1, 2024 06:09:29.824707985 CEST	49747	587	192.168.2.4	200.90.133.79
Aug 1, 2024 06:09:29.825905085 CEST	62452	587	192.168.2.4	74.202.139.99
Aug 1, 2024 06:09:29.841029882 CEST	587	49838	212.91.113.96	192.168.2.4
Aug 1, 2024 06:09:29.842117071 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:29.846437931 CEST	587	49820	13.250.88.201	192.168.2.4
Aug 1, 2024 06:09:29.846510887 CEST	49820	587	192.168.2.4	13.250.88.201
Aug 1, 2024 06:09:29.846590996 CEST	49820	587	192.168.2.4	13.250.88.201
Aug 1, 2024 06:09:29.851432085 CEST	587	49820	13.250.88.201	192.168.2.4
Aug 1, 2024 06:09:29.854389906 CEST	587	62455	209.71.212.26	192.168.2.4
Aug 1, 2024 06:09:29.855978012 CEST	62454	587	192.168.2.4	23.81.68.43
Aug 1, 2024 06:09:29.875248909 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:29.875328064 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:29.876127005 CEST	49835	587	192.168.2.4	84.2.43.67
Aug 1, 2024 06:09:29.876349926 CEST	62446	587	192.168.2.4	89.236.174.10
Aug 1, 2024 06:09:29.876595020 CEST	49840	587	192.168.2.4	192.185.213.51
Aug 1, 2024 06:09:29.877940893 CEST	62460	587	192.168.2.4	13.250.88.201
Aug 1, 2024 06:09:29.880949974 CEST	587	49835	84.2.43.67	192.168.2.4
Aug 1, 2024 06:09:29.881119967 CEST	587	62446	89.236.174.10	192.168.2.4
Aug 1, 2024 06:09:29.881509066 CEST	587	49840	192.185.213.51	192.168.2.4
Aug 1, 2024 06:09:29.882760048 CEST	587	62460	13.250.88.201	192.168.2.4
Aug 1, 2024 06:09:29.882831097 CEST	62460	587	192.168.2.4	13.250.88.201
Aug 1, 2024 06:09:29.887202024 CEST	49838	587	192.168.2.4	212.91.113.96
Aug 1, 2024 06:09:29.893615007 CEST	587	49841	190.105.202.10	192.168.2.4
Aug 1, 2024 06:09:29.893672943 CEST	587	49841	190.105.202.10	192.168.2.4
Aug 1, 2024 06:09:29.893708944 CEST	587	49841	190.105.202.10	192.168.2.4
Aug 1, 2024 06:09:29.893729925 CEST	49841	587	192.168.2.4	190.105.202.10
Aug 1, 2024 06:09:29.893874884 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:29.898725986 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:29.898755074 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:29.898821115 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:29.902844906 CEST	62455	587	192.168.2.4	209.71.212.26
Aug 1, 2024 06:09:29.910914898 CEST	587	62451	13.250.88.201	192.168.2.4
Aug 1, 2024 06:09:29.934088945 CEST	49841	587	192.168.2.4	190.105.202.10
Aug 1, 2024 06:09:29.942565918 CEST	587	62447	77.79.88.19	192.168.2.4
Aug 1, 2024 06:09:29.948389053 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:29.948455095 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:29.948920012 CEST	587	49838	212.91.113.96	192.168.2.4
Aug 1, 2024 06:09:29.953306913 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:29.953370094 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:29.958120108 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:29.965325117 CEST	62451	587	192.168.2.4	13.250.88.201
Aug 1, 2024 06:09:29.967293024 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:29.967430115 CEST	49839	587	192.168.2.4	192.198.192.27
Aug 1, 2024 06:09:29.967973948 CEST	62449	587	192.168.2.4	62.149.157.154
Aug 1, 2024 06:09:29.968058109 CEST	49837	587	192.168.2.4	192.185.32.240
Aug 1, 2024 06:09:29.968152046 CEST	49829	587	192.168.2.4	191.252.112.195
Aug 1, 2024 06:09:29.968241930 CEST	62450	587	192.168.2.4	162.241.61.138
Aug 1, 2024 06:09:29.968302965 CEST	49842	587	192.168.2.4	13.250.88.201
Aug 1, 2024 06:09:29.969016075 CEST	62461	587	192.168.2.4	94.169.2.35
Aug 1, 2024 06:09:29.972338915 CEST	587	49839	192.198.192.27	192.168.2.4
Aug 1, 2024 06:09:29.972445011 CEST	587	62448	162.144.12.100	192.168.2.4
Aug 1, 2024 06:09:29.972639084 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:29.972723961 CEST	587	62449	62.149.157.154	192.168.2.4
Aug 1, 2024 06:09:29.972800970 CEST	587	49837	192.185.32.240	192.168.2.4
Aug 1, 2024 06:09:29.972915888 CEST	587	49829	191.252.112.195	192.168.2.4
Aug 1, 2024 06:09:29.973063946 CEST	587	62450	162.241.61.138	192.168.2.4
Aug 1, 2024 06:09:29.973093033 CEST	587	49842	13.250.88.201	192.168.2.4
Aug 1, 2024 06:09:29.973804951 CEST	587	62461	94.169.2.35	192.168.2.4
Aug 1, 2024 06:09:29.973881006 CEST	62461	587	192.168.2.4	94.169.2.35
Aug 1, 2024 06:09:29.974781036 CEST	587	49760	64.140.165.234	192.168.2.4
Aug 1, 2024 06:09:29.984404087 CEST	62462	587	192.168.2.4	195.216.236.113
Aug 1, 2024 06:09:29.989229918 CEST	587	62462	195.216.236.113	192.168.2.4
Aug 1, 2024 06:09:29.989300966 CEST	62462	587	192.168.2.4	195.216.236.113
Aug 1, 2024 06:09:29.992213011 CEST	587	49840	192.185.213.51	192.168.2.4
Aug 1, 2024 06:09:29.996563911 CEST	62447	587	192.168.2.4	77.79.88.19
Aug 1, 2024 06:09:29.997720957 CEST	49838	587	192.168.2.4	212.91.113.96
Aug 1, 2024 06:09:30.013469934 CEST	62448	587	192.168.2.4	162.144.12.100
Aug 1, 2024 06:09:30.020354986 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:30.020420074 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:30.025347948 CEST	587	62453	191.252.112.195	192.168.2.4
Aug 1, 2024 06:09:30.025377989 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:30.025541067 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:30.025782108 CEST	587	49844	89.42.218.226	192.168.2.4
Aug 1, 2024 06:09:30.027817965 CEST	49760	587	192.168.2.4	64.140.165.234
Aug 1, 2024 06:09:30.030764103 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:30.030816078 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:30.035861015 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:30.041430950 CEST	587	49830	210.116.104.65	192.168.2.4
Aug 1, 2024 06:09:30.041656971 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:30.043431044 CEST	49840	587	192.168.2.4	192.185.213.51
Aug 1, 2024 06:09:30.046463013 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:30.064223051 CEST	587	49827	13.250.88.201	192.168.2.4
Aug 1, 2024 06:09:30.064459085 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:30.065665960 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:30.065886974 CEST	62454	587	192.168.2.4	23.81.68.43
Aug 1, 2024 06:09:30.065962076 CEST	62452	587	192.168.2.4	74.202.139.99
Aug 1, 2024 06:09:30.068830013 CEST	587	49832	139.95.7.216	192.168.2.4
Aug 1, 2024 06:09:30.069596052 CEST	587	49835	84.2.43.67	192.168.2.4
Aug 1, 2024 06:09:30.070754051 CEST	587	62454	23.81.68.43	192.168.2.4
Aug 1, 2024 06:09:30.070768118 CEST	587	62452	74.202.139.99	192.168.2.4
Aug 1, 2024 06:09:30.072025061 CEST	587	62446	89.236.174.10	192.168.2.4
Aug 1, 2024 06:09:30.074695110 CEST	62453	587	192.168.2.4	191.252.112.195
Aug 1, 2024 06:09:30.074764013 CEST	49844	587	192.168.2.4	89.42.218.226
Aug 1, 2024 06:09:30.075783014 CEST	49747	587	192.168.2.4	200.90.133.79
Aug 1, 2024 06:09:30.082159996 CEST	587	49747	200.90.133.79	192.168.2.4
Aug 1, 2024 06:09:30.082231998 CEST	49747	587	192.168.2.4	200.90.133.79
Aug 1, 2024 06:09:30.083744049 CEST	587	62450	162.241.61.138	192.168.2.4
Aug 1, 2024 06:09:30.090336084 CEST	49830	587	192.168.2.4	210.116.104.65
Aug 1, 2024 06:09:30.105947971 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:30.105950117 CEST	49827	587	192.168.2.4	13.250.88.201
Aug 1, 2024 06:09:30.112323046 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:30.112381935 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:30.117202997 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:30.121624947 CEST	49832	587	192.168.2.4	139.95.7.216
Aug 1, 2024 06:09:30.121654987 CEST	49835	587	192.168.2.4	84.2.43.67
Aug 1, 2024 06:09:30.121654987 CEST	62446	587	192.168.2.4	89.236.174.10
Aug 1, 2024 06:09:30.122555971 CEST	587	49839	192.198.192.27	192.168.2.4
Aug 1, 2024 06:09:30.124233007 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:30.129050970 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:30.137186050 CEST	62450	587	192.168.2.4	162.241.61.138
Aug 1, 2024 06:09:30.156116962 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:30.156282902 CEST	62455	587	192.168.2.4	209.71.212.26
Aug 1, 2024 06:09:30.156636953 CEST	49841	587	192.168.2.4	190.105.202.10
Aug 1, 2024 06:09:30.159084082 CEST	62463	587	192.168.2.4	13.250.88.201
Aug 1, 2024 06:09:30.161021948 CEST	587	62455	209.71.212.26	192.168.2.4
Aug 1, 2024 06:09:30.161753893 CEST	587	49841	190.105.202.10	192.168.2.4
Aug 1, 2024 06:09:30.163813114 CEST	587	62463	13.250.88.201	192.168.2.4
Aug 1, 2024 06:09:30.163882971 CEST	62463	587	192.168.2.4	13.250.88.201
Aug 1, 2024 06:09:30.164071083 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:30.164163113 CEST	587	62454	23.81.68.43	192.168.2.4
Aug 1, 2024 06:09:30.168451071 CEST	49839	587	192.168.2.4	192.198.192.27
Aug 1, 2024 06:09:30.169308901 CEST	587	49833	103.15.48.10	192.168.2.4
Aug 1, 2024 06:09:30.171490908 CEST	587	62449	62.149.157.154	192.168.2.4
Aug 1, 2024 06:09:30.180407047 CEST	587	49829	191.252.112.195	192.168.2.4
Aug 1, 2024 06:09:30.189275980 CEST	587	62457	192.254.225.239	192.168.2.4
Aug 1, 2024 06:09:30.212356091 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:30.215353012 CEST	62454	587	192.168.2.4	23.81.68.43
Aug 1, 2024 06:09:30.215361118 CEST	49833	587	192.168.2.4	103.15.48.10
Aug 1, 2024 06:09:30.215361118 CEST	62449	587	192.168.2.4	62.149.157.154
Aug 1, 2024 06:09:30.215379000 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:30.218683958 CEST	587	49768	103.5.50.24	192.168.2.4
Aug 1, 2024 06:09:30.220247984 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:30.224144936 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:30.229059935 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:30.230937958 CEST	49829	587	192.168.2.4	191.252.112.195
Aug 1, 2024 06:09:30.236740112 CEST	62464	587	192.168.2.4	160.13.60.151
Aug 1, 2024 06:09:30.236898899 CEST	587	62452	74.202.139.99	192.168.2.4
Aug 1, 2024 06:09:30.237066031 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:30.241535902 CEST	587	62464	160.13.60.151	192.168.2.4
Aug 1, 2024 06:09:30.241877079 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:30.241952896 CEST	62464	587	192.168.2.4	160.13.60.151
Aug 1, 2024 06:09:30.242094994 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:30.246557951 CEST	62457	587	192.168.2.4	192.254.225.239
Aug 1, 2024 06:09:30.247255087 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:30.256181955 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:30.260520935 CEST	62451	587	192.168.2.4	13.250.88.201
Aug 1, 2024 06:09:30.260596991 CEST	49838	587	192.168.2.4	212.91.113.96
Aug 1, 2024 06:09:30.260691881 CEST	62447	587	192.168.2.4	77.79.88.19
Aug 1, 2024 06:09:30.260767937 CEST	62448	587	192.168.2.4	162.144.12.100
Aug 1, 2024 06:09:30.262198925 CEST	49768	587	192.168.2.4	103.5.50.24
Aug 1, 2024 06:09:30.265300035 CEST	587	62451	13.250.88.201	192.168.2.4
Aug 1, 2024 06:09:30.265388966 CEST	587	49838	212.91.113.96	192.168.2.4
Aug 1, 2024 06:09:30.265492916 CEST	587	62447	77.79.88.19	192.168.2.4
Aug 1, 2024 06:09:30.265563965 CEST	587	62448	162.144.12.100	192.168.2.4
Aug 1, 2024 06:09:30.277826071 CEST	62452	587	192.168.2.4	74.202.139.99
Aug 1, 2024 06:09:30.288589954 CEST	62465	587	192.168.2.4	216.241.20.212
Aug 1, 2024 06:09:30.290604115 CEST	587	62455	209.71.212.26	192.168.2.4
Aug 1, 2024 06:09:30.290803909 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:30.293448925 CEST	587	62465	216.241.20.212	192.168.2.4
Aug 1, 2024 06:09:30.293524027 CEST	62465	587	192.168.2.4	216.241.20.212
Aug 1, 2024 06:09:30.307346106 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:30.307429075 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:30.307562113 CEST	62453	587	192.168.2.4	191.252.112.195
Aug 1, 2024 06:09:30.307684898 CEST	49840	587	192.168.2.4	192.185.213.51
Aug 1, 2024 06:09:30.307766914 CEST	49830	587	192.168.2.4	210.116.104.65
Aug 1, 2024 06:09:30.307861090 CEST	49844	587	192.168.2.4	89.42.218.226
Aug 1, 2024 06:09:30.309585094 CEST	49760	587	192.168.2.4	64.140.165.234
Aug 1, 2024 06:09:30.312437057 CEST	587	62453	191.252.112.195	192.168.2.4
Aug 1, 2024 06:09:30.312450886 CEST	587	49840	192.185.213.51	192.168.2.4
Aug 1, 2024 06:09:30.312490940 CEST	587	49830	210.116.104.65	192.168.2.4
Aug 1, 2024 06:09:30.312602043 CEST	587	49844	89.42.218.226	192.168.2.4
Aug 1, 2024 06:09:30.330996990 CEST	587	49760	64.140.165.234	192.168.2.4
Aug 1, 2024 06:09:30.331089020 CEST	49760	587	192.168.2.4	64.140.165.234
Aug 1, 2024 06:09:30.332307100 CEST	587	49842	13.250.88.201	192.168.2.4
Aug 1, 2024 06:09:30.332345009 CEST	587	49842	13.250.88.201	192.168.2.4
Aug 1, 2024 06:09:30.332360029 CEST	587	49842	13.250.88.201	192.168.2.4
Aug 1, 2024 06:09:30.332407951 CEST	49842	587	192.168.2.4	13.250.88.201
Aug 1, 2024 06:09:30.332583904 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:30.332727909 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:30.337307930 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:30.337481976 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:30.340291023 CEST	62455	587	192.168.2.4	209.71.212.26
Aug 1, 2024 06:09:30.380302906 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:30.387711048 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:30.387726068 CEST	587	49841	190.105.202.10	192.168.2.4
Aug 1, 2024 06:09:30.388477087 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:30.389081001 CEST	49827	587	192.168.2.4	13.250.88.201
Aug 1, 2024 06:09:30.389168024 CEST	49835	587	192.168.2.4	84.2.43.67
Aug 1, 2024 06:09:30.389245987 CEST	49832	587	192.168.2.4	139.95.7.216
Aug 1, 2024 06:09:30.389337063 CEST	49839	587	192.168.2.4	192.198.192.27
Aug 1, 2024 06:09:30.389415026 CEST	62450	587	192.168.2.4	162.241.61.138
Aug 1, 2024 06:09:30.389499903 CEST	62446	587	192.168.2.4	89.236.174.10
Aug 1, 2024 06:09:30.393279076 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:30.393862963 CEST	587	49827	13.250.88.201	192.168.2.4
Aug 1, 2024 06:09:30.394160986 CEST	587	49835	84.2.43.67	192.168.2.4
Aug 1, 2024 06:09:30.394174099 CEST	587	49832	139.95.7.216	192.168.2.4
Aug 1, 2024 06:09:30.394186974 CEST	587	49839	192.198.192.27	192.168.2.4
Aug 1, 2024 06:09:30.394211054 CEST	587	62450	162.241.61.138	192.168.2.4
Aug 1, 2024 06:09:30.394223928 CEST	587	62446	89.236.174.10	192.168.2.4
Aug 1, 2024 06:09:30.403726101 CEST	587	49790	192.185.177.117	192.168.2.4
Aug 1, 2024 06:09:30.403954983 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:30.408777952 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:30.419250011 CEST	587	49842	13.250.88.201	192.168.2.4
Aug 1, 2024 06:09:30.419264078 CEST	587	49842	13.250.88.201	192.168.2.4
Aug 1, 2024 06:09:30.419317961 CEST	49842	587	192.168.2.4	13.250.88.201
Aug 1, 2024 06:09:30.419650078 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:30.424387932 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:30.424515009 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:30.424634933 CEST	62466	587	192.168.2.4	91.227.123.130
Aug 1, 2024 06:09:30.429369926 CEST	587	62466	91.227.123.130	192.168.2.4
Aug 1, 2024 06:09:30.430849075 CEST	587	62448	162.144.12.100	192.168.2.4
Aug 1, 2024 06:09:30.430902958 CEST	587	62448	162.144.12.100	192.168.2.4
Aug 1, 2024 06:09:30.430922985 CEST	62466	587	192.168.2.4	91.227.123.130
Aug 1, 2024 06:09:30.430922985 CEST	587	62448	162.144.12.100	192.168.2.4
Aug 1, 2024 06:09:30.430938959 CEST	587	62448	162.144.12.100	192.168.2.4
Aug 1, 2024 06:09:30.430958986 CEST	62448	587	192.168.2.4	162.144.12.100
Aug 1, 2024 06:09:30.431050062 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:30.431050062 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:30.431071997 CEST	62448	587	192.168.2.4	162.144.12.100
Aug 1, 2024 06:09:30.431260109 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:30.434045076 CEST	49841	587	192.168.2.4	190.105.202.10
Aug 1, 2024 06:09:30.435786009 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:30.436176062 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:30.436187983 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:30.439450026 CEST	587	49840	192.185.213.51	192.168.2.4
Aug 1, 2024 06:09:30.440326929 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:30.445318937 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:30.449717045 CEST	49790	587	192.168.2.4	192.185.177.117
Aug 1, 2024 06:09:30.467659950 CEST	587	49838	212.91.113.96	192.168.2.4
Aug 1, 2024 06:09:30.467746973 CEST	587	49838	212.91.113.96	192.168.2.4
Aug 1, 2024 06:09:30.467892885 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:30.467921972 CEST	49838	587	192.168.2.4	212.91.113.96
Aug 1, 2024 06:09:30.468039036 CEST	49838	587	192.168.2.4	212.91.113.96
Aug 1, 2024 06:09:30.472664118 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:30.472795963 CEST	587	49838	212.91.113.96	192.168.2.4
Aug 1, 2024 06:09:30.472877979 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:30.477667093 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:30.479264975 CEST	587	49818	103.86.139.86	192.168.2.4
Aug 1, 2024 06:09:30.480091095 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:30.480304003 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:30.480954885 CEST	49840	587	192.168.2.4	192.185.213.51
Aug 1, 2024 06:09:30.485204935 CEST	587	62447	77.79.88.19	192.168.2.4
Aug 1, 2024 06:09:30.485251904 CEST	587	62447	77.79.88.19	192.168.2.4
Aug 1, 2024 06:09:30.485268116 CEST	587	62447	77.79.88.19	192.168.2.4
Aug 1, 2024 06:09:30.485308886 CEST	587	62447	77.79.88.19	192.168.2.4
Aug 1, 2024 06:09:30.485330105 CEST	62447	587	192.168.2.4	77.79.88.19
Aug 1, 2024 06:09:30.485405922 CEST	62447	587	192.168.2.4	77.79.88.19
Aug 1, 2024 06:09:30.485440969 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:30.485440969 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:30.485618114 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:30.486197948 CEST	587	62447	77.79.88.19	192.168.2.4
Aug 1, 2024 06:09:30.486212969 CEST	587	62447	77.79.88.19	192.168.2.4
Aug 1, 2024 06:09:30.486272097 CEST	62447	587	192.168.2.4	77.79.88.19
Aug 1, 2024 06:09:30.486368895 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:30.490235090 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:30.490349054 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:30.490518093 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:30.491255999 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:30.518047094 CEST	587	62450	162.241.61.138	192.168.2.4
Aug 1, 2024 06:09:30.518062115 CEST	587	62450	162.241.61.138	192.168.2.4
Aug 1, 2024 06:09:30.518078089 CEST	587	62450	162.241.61.138	192.168.2.4
Aug 1, 2024 06:09:30.518095016 CEST	587	62450	162.241.61.138	192.168.2.4
Aug 1, 2024 06:09:30.518119097 CEST	62450	587	192.168.2.4	162.241.61.138
Aug 1, 2024 06:09:30.518155098 CEST	62450	587	192.168.2.4	162.241.61.138
Aug 1, 2024 06:09:30.518265963 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:30.523045063 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:30.524163008 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:30.527822971 CEST	49818	587	192.168.2.4	103.86.139.86
Aug 1, 2024 06:09:30.528927088 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:30.530673027 CEST	587	62453	191.252.112.195	192.168.2.4
Aug 1, 2024 06:09:30.530862093 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:30.543831110 CEST	587	49839	192.198.192.27	192.168.2.4
Aug 1, 2024 06:09:30.545304060 CEST	587	62458	13.250.88.201	192.168.2.4
Aug 1, 2024 06:09:30.547554016 CEST	587	49844	89.42.218.226	192.168.2.4
Aug 1, 2024 06:09:30.547583103 CEST	587	49844	89.42.218.226	192.168.2.4
Aug 1, 2024 06:09:30.547595978 CEST	587	49844	89.42.218.226	192.168.2.4
Aug 1, 2024 06:09:30.547612906 CEST	587	49844	89.42.218.226	192.168.2.4
Aug 1, 2024 06:09:30.547646999 CEST	49844	587	192.168.2.4	89.42.218.226
Aug 1, 2024 06:09:30.547656059 CEST	49844	587	192.168.2.4	89.42.218.226
Aug 1, 2024 06:09:30.547822952 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:30.552732944 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:30.552746058 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:30.553482056 CEST	587	62459	195.238.20.30	192.168.2.4
Aug 1, 2024 06:09:30.556271076 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:30.559585094 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:30.560348988 CEST	62454	587	192.168.2.4	23.81.68.43
Aug 1, 2024 06:09:30.560419083 CEST	49833	587	192.168.2.4	103.15.48.10
Aug 1, 2024 06:09:30.560498953 CEST	49768	587	192.168.2.4	103.5.50.24
Aug 1, 2024 06:09:30.560576916 CEST	62452	587	192.168.2.4	74.202.139.99
Aug 1, 2024 06:09:30.560656071 CEST	62457	587	192.168.2.4	192.254.225.239
Aug 1, 2024 06:09:30.560739994 CEST	62449	587	192.168.2.4	62.149.157.154
Aug 1, 2024 06:09:30.560815096 CEST	62455	587	192.168.2.4	209.71.212.26
Aug 1, 2024 06:09:30.565083027 CEST	587	62454	23.81.68.43	192.168.2.4
Aug 1, 2024 06:09:30.565195084 CEST	587	49833	103.15.48.10	192.168.2.4
Aug 1, 2024 06:09:30.565229893 CEST	587	49768	103.5.50.24	192.168.2.4
Aug 1, 2024 06:09:30.565329075 CEST	587	62452	74.202.139.99	192.168.2.4
Aug 1, 2024 06:09:30.565373898 CEST	587	62457	192.254.225.239	192.168.2.4
Aug 1, 2024 06:09:30.565491915 CEST	587	62449	62.149.157.154	192.168.2.4
Aug 1, 2024 06:09:30.565586090 CEST	587	62455	209.71.212.26	192.168.2.4
Aug 1, 2024 06:09:30.574678898 CEST	62453	587	192.168.2.4	191.252.112.195
Aug 1, 2024 06:09:30.584646940 CEST	587	62446	89.236.174.10	192.168.2.4
Aug 1, 2024 06:09:30.600280046 CEST	62458	587	192.168.2.4	13.250.88.201
Aug 1, 2024 06:09:30.600285053 CEST	49839	587	192.168.2.4	192.198.192.27
Aug 1, 2024 06:09:30.600285053 CEST	62459	587	192.168.2.4	195.238.20.30
Aug 1, 2024 06:09:30.604269028 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:30.605909109 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:30.605931044 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:30.610755920 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:30.618979931 CEST	587	62451	13.250.88.201	192.168.2.4
Aug 1, 2024 06:09:30.620311975 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:30.625118017 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:30.637196064 CEST	62446	587	192.168.2.4	89.236.174.10
Aug 1, 2024 06:09:30.639717102 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:30.640243053 CEST	49841	587	192.168.2.4	190.105.202.10
Aug 1, 2024 06:09:30.640325069 CEST	49790	587	192.168.2.4	192.185.177.117
Aug 1, 2024 06:09:30.640414953 CEST	49842	587	192.168.2.4	13.250.88.201
Aug 1, 2024 06:09:30.645015955 CEST	587	49841	190.105.202.10	192.168.2.4
Aug 1, 2024 06:09:30.645030022 CEST	587	49790	192.185.177.117	192.168.2.4
Aug 1, 2024 06:09:30.645112038 CEST	587	49842	13.250.88.201	192.168.2.4
Aug 1, 2024 06:09:30.658582926 CEST	587	62454	23.81.68.43	192.168.2.4
Aug 1, 2024 06:09:30.659879923 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:30.668437004 CEST	62451	587	192.168.2.4	13.250.88.201
Aug 1, 2024 06:09:30.679568052 CEST	62467	587	192.168.2.4	74.48.172.146
Aug 1, 2024 06:09:30.684375048 CEST	587	62467	74.48.172.146	192.168.2.4
Aug 1, 2024 06:09:30.684469938 CEST	62467	587	192.168.2.4	74.48.172.146
Aug 1, 2024 06:09:30.685566902 CEST	587	62455	209.71.212.26	192.168.2.4
Aug 1, 2024 06:09:30.699706078 CEST	62454	587	192.168.2.4	23.81.68.43
Aug 1, 2024 06:09:30.709348917 CEST	587	62461	94.169.2.35	192.168.2.4
Aug 1, 2024 06:09:30.711954117 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:30.712014914 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:30.712353945 CEST	49840	587	192.168.2.4	192.185.213.51
Aug 1, 2024 06:09:30.712455988 CEST	62448	587	192.168.2.4	162.144.12.100
Aug 1, 2024 06:09:30.712527990 CEST	49818	587	192.168.2.4	103.86.139.86
Aug 1, 2024 06:09:30.712621927 CEST	62447	587	192.168.2.4	77.79.88.19
Aug 1, 2024 06:09:30.717072964 CEST	587	49840	192.185.213.51	192.168.2.4
Aug 1, 2024 06:09:30.717231989 CEST	587	62448	162.144.12.100	192.168.2.4
Aug 1, 2024 06:09:30.717247009 CEST	587	49818	103.86.139.86	192.168.2.4
Aug 1, 2024 06:09:30.717367887 CEST	587	62447	77.79.88.19	192.168.2.4
Aug 1, 2024 06:09:30.720679998 CEST	587	62457	192.254.225.239	192.168.2.4
Aug 1, 2024 06:09:30.730914116 CEST	62455	587	192.168.2.4	209.71.212.26
Aug 1, 2024 06:09:30.730956078 CEST	587	62452	74.202.139.99	192.168.2.4
Aug 1, 2024 06:09:30.738497019 CEST	587	49832	139.95.7.216	192.168.2.4
Aug 1, 2024 06:09:30.743788958 CEST	587	49827	13.250.88.201	192.168.2.4
Aug 1, 2024 06:09:30.753998995 CEST	587	49790	192.185.177.117	192.168.2.4
Aug 1, 2024 06:09:30.762195110 CEST	62461	587	192.168.2.4	94.169.2.35
Aug 1, 2024 06:09:30.764122963 CEST	62457	587	192.168.2.4	192.254.225.239
Aug 1, 2024 06:09:30.764307976 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:30.764379025 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:30.769113064 CEST	587	62449	62.149.157.154	192.168.2.4
Aug 1, 2024 06:09:30.769171953 CEST	587	62449	62.149.157.154	192.168.2.4
Aug 1, 2024 06:09:30.769188881 CEST	587	62449	62.149.157.154	192.168.2.4
Aug 1, 2024 06:09:30.769234896 CEST	62449	587	192.168.2.4	62.149.157.154
Aug 1, 2024 06:09:30.769251108 CEST	587	62449	62.149.157.154	192.168.2.4
Aug 1, 2024 06:09:30.769264936 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:30.769288063 CEST	62449	587	192.168.2.4	62.149.157.154
Aug 1, 2024 06:09:30.769373894 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:30.769373894 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:30.769555092 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:30.774118900 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:30.774127007 CEST	62452	587	192.168.2.4	74.202.139.99
Aug 1, 2024 06:09:30.774171114 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:30.774200916 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:30.774334908 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:30.774432898 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:30.781589985 CEST	587	49826	37.120.193.124	192.168.2.4
Aug 1, 2024 06:09:30.781841040 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:30.786649942 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:30.793426991 CEST	49832	587	192.168.2.4	139.95.7.216
Aug 1, 2024 06:09:30.793447971 CEST	49827	587	192.168.2.4	13.250.88.201
Aug 1, 2024 06:09:30.803734064 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:30.804253101 CEST	62453	587	192.168.2.4	191.252.112.195
Aug 1, 2024 06:09:30.804343939 CEST	62450	587	192.168.2.4	162.241.61.138
Aug 1, 2024 06:09:30.804434061 CEST	49839	587	192.168.2.4	192.198.192.27
Aug 1, 2024 06:09:30.804514885 CEST	62458	587	192.168.2.4	13.250.88.201
Aug 1, 2024 06:09:30.804585934 CEST	62459	587	192.168.2.4	195.238.20.30
Aug 1, 2024 06:09:30.804660082 CEST	49844	587	192.168.2.4	89.42.218.226
Aug 1, 2024 06:09:30.808588028 CEST	587	62460	13.250.88.201	192.168.2.4
Aug 1, 2024 06:09:30.809102058 CEST	49790	587	192.168.2.4	192.185.177.117
Aug 1, 2024 06:09:30.809127092 CEST	587	62453	191.252.112.195	192.168.2.4
Aug 1, 2024 06:09:30.809140921 CEST	587	62450	162.241.61.138	192.168.2.4
Aug 1, 2024 06:09:30.809153080 CEST	587	49839	192.198.192.27	192.168.2.4
Aug 1, 2024 06:09:30.809214115 CEST	587	62458	13.250.88.201	192.168.2.4
Aug 1, 2024 06:09:30.809294939 CEST	587	62459	195.238.20.30	192.168.2.4
Aug 1, 2024 06:09:30.809370995 CEST	587	49844	89.42.218.226	192.168.2.4
Aug 1, 2024 06:09:30.810883045 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:30.824701071 CEST	49826	587	192.168.2.4	37.120.193.124
Aug 1, 2024 06:09:30.855937004 CEST	62460	587	192.168.2.4	13.250.88.201
Aug 1, 2024 06:09:30.856441975 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:30.866993904 CEST	587	62448	162.144.12.100	192.168.2.4
Aug 1, 2024 06:09:30.868381023 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:30.872771025 CEST	587	49841	190.105.202.10	192.168.2.4
Aug 1, 2024 06:09:30.873224020 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:30.874475956 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:30.876419067 CEST	62468	587	192.168.2.4	169.239.218.57
Aug 1, 2024 06:09:30.879286051 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:30.881230116 CEST	587	62468	169.239.218.57	192.168.2.4
Aug 1, 2024 06:09:30.884174109 CEST	62468	587	192.168.2.4	169.239.218.57
Aug 1, 2024 06:09:30.884330034 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:30.889349937 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:30.907373905 CEST	587	49768	103.5.50.24	192.168.2.4
Aug 1, 2024 06:09:30.907557011 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:30.912355900 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:30.913419008 CEST	587	49833	103.15.48.10	192.168.2.4
Aug 1, 2024 06:09:30.913590908 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:30.917011976 CEST	587	62450	162.241.61.138	192.168.2.4
Aug 1, 2024 06:09:30.917351961 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:30.917409897 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:30.917510033 CEST	62446	587	192.168.2.4	89.236.174.10
Aug 1, 2024 06:09:30.917661905 CEST	62451	587	192.168.2.4	13.250.88.201
Aug 1, 2024 06:09:30.917753935 CEST	62454	587	192.168.2.4	23.81.68.43
Aug 1, 2024 06:09:30.918427944 CEST	49841	587	192.168.2.4	190.105.202.10
Aug 1, 2024 06:09:30.918442011 CEST	62448	587	192.168.2.4	162.144.12.100
Aug 1, 2024 06:09:30.922188997 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:30.922214985 CEST	587	62446	89.236.174.10	192.168.2.4
Aug 1, 2024 06:09:30.922275066 CEST	62446	587	192.168.2.4	89.236.174.10
Aug 1, 2024 06:09:30.922346115 CEST	587	62451	13.250.88.201	192.168.2.4
Aug 1, 2024 06:09:30.922507048 CEST	587	62454	23.81.68.43	192.168.2.4
Aug 1, 2024 06:09:30.927001953 CEST	587	62446	89.236.174.10	192.168.2.4
Aug 1, 2024 06:09:30.935717106 CEST	587	62447	77.79.88.19	192.168.2.4
Aug 1, 2024 06:09:30.935918093 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:30.949702978 CEST	49768	587	192.168.2.4	103.5.50.24
Aug 1, 2024 06:09:30.958209991 CEST	587	49827	13.250.88.201	192.168.2.4
Aug 1, 2024 06:09:30.958278894 CEST	49827	587	192.168.2.4	13.250.88.201
Aug 1, 2024 06:09:30.958344936 CEST	49827	587	192.168.2.4	13.250.88.201
Aug 1, 2024 06:09:30.963052988 CEST	587	49827	13.250.88.201	192.168.2.4
Aug 1, 2024 06:09:30.965321064 CEST	62450	587	192.168.2.4	162.241.61.138
Aug 1, 2024 06:09:30.965322971 CEST	49833	587	192.168.2.4	103.15.48.10
Aug 1, 2024 06:09:30.977900028 CEST	587	49842	13.250.88.201	192.168.2.4
Aug 1, 2024 06:09:30.979830027 CEST	587	49839	192.198.192.27	192.168.2.4
Aug 1, 2024 06:09:30.980932951 CEST	62447	587	192.168.2.4	77.79.88.19
Aug 1, 2024 06:09:30.984288931 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:30.988162041 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:30.992477894 CEST	587	62459	195.238.20.30	192.168.2.4
Aug 1, 2024 06:09:30.992940903 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:30.993174076 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:30.998024940 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:30.999284983 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:30.999800920 CEST	62461	587	192.168.2.4	94.169.2.35
Aug 1, 2024 06:09:30.999861002 CEST	62452	587	192.168.2.4	74.202.139.99
Aug 1, 2024 06:09:30.999941111 CEST	49832	587	192.168.2.4	139.95.7.216
Aug 1, 2024 06:09:31.000010014 CEST	62457	587	192.168.2.4	192.254.225.239
Aug 1, 2024 06:09:31.000113964 CEST	62455	587	192.168.2.4	209.71.212.26
Aug 1, 2024 06:09:31.000184059 CEST	62449	587	192.168.2.4	62.149.157.154
Aug 1, 2024 06:09:31.001158953 CEST	62469	587	192.168.2.4	160.13.60.151
Aug 1, 2024 06:09:31.004595041 CEST	587	62461	94.169.2.35	192.168.2.4
Aug 1, 2024 06:09:31.004630089 CEST	587	62452	74.202.139.99	192.168.2.4
Aug 1, 2024 06:09:31.004702091 CEST	587	49832	139.95.7.216	192.168.2.4
Aug 1, 2024 06:09:31.004914999 CEST	587	62457	192.254.225.239	192.168.2.4
Aug 1, 2024 06:09:31.004928112 CEST	587	62455	209.71.212.26	192.168.2.4
Aug 1, 2024 06:09:31.005402088 CEST	587	62449	62.149.157.154	192.168.2.4
Aug 1, 2024 06:09:31.005969048 CEST	587	62469	160.13.60.151	192.168.2.4
Aug 1, 2024 06:09:31.006047010 CEST	62469	587	192.168.2.4	160.13.60.151
Aug 1, 2024 06:09:31.006175041 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:31.012137890 CEST	587	62453	191.252.112.195	192.168.2.4
Aug 1, 2024 06:09:31.012494087 CEST	49790	587	192.168.2.4	192.185.177.117
Aug 1, 2024 06:09:31.014121056 CEST	587	49844	89.42.218.226	192.168.2.4
Aug 1, 2024 06:09:31.016809940 CEST	587	62463	13.250.88.201	192.168.2.4
Aug 1, 2024 06:09:31.017539978 CEST	587	49790	192.185.177.117	192.168.2.4
Aug 1, 2024 06:09:31.017606020 CEST	49790	587	192.168.2.4	192.185.177.117
Aug 1, 2024 06:09:31.018537998 CEST	587	62454	23.81.68.43	192.168.2.4
Aug 1, 2024 06:09:31.018659115 CEST	587	62454	23.81.68.43	192.168.2.4
Aug 1, 2024 06:09:31.018672943 CEST	587	62454	23.81.68.43	192.168.2.4
Aug 1, 2024 06:09:31.018688917 CEST	587	62454	23.81.68.43	192.168.2.4
Aug 1, 2024 06:09:31.018727064 CEST	62454	587	192.168.2.4	23.81.68.43
Aug 1, 2024 06:09:31.018758059 CEST	62454	587	192.168.2.4	23.81.68.43
Aug 1, 2024 06:09:31.018892050 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:31.023658991 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:31.023672104 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:31.027796984 CEST	49842	587	192.168.2.4	13.250.88.201
Aug 1, 2024 06:09:31.028167963 CEST	49839	587	192.168.2.4	192.198.192.27
Aug 1, 2024 06:09:31.034954071 CEST	587	62464	160.13.60.151	192.168.2.4
Aug 1, 2024 06:09:31.043430090 CEST	62459	587	192.168.2.4	195.238.20.30
Aug 1, 2024 06:09:31.056957960 CEST	587	49818	103.86.139.86	192.168.2.4
Aug 1, 2024 06:09:31.057079077 CEST	587	49818	103.86.139.86	192.168.2.4
Aug 1, 2024 06:09:31.057284117 CEST	49818	587	192.168.2.4	103.86.139.86
Aug 1, 2024 06:09:31.057356119 CEST	49818	587	192.168.2.4	103.86.139.86
Aug 1, 2024 06:09:31.059056997 CEST	62453	587	192.168.2.4	191.252.112.195
Aug 1, 2024 06:09:31.059061050 CEST	62463	587	192.168.2.4	13.250.88.201
Aug 1, 2024 06:09:31.060127974 CEST	49844	587	192.168.2.4	89.42.218.226
Aug 1, 2024 06:09:31.062072992 CEST	587	49818	103.86.139.86	192.168.2.4
Aug 1, 2024 06:09:31.064254999 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:31.064313889 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:31.069195986 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:31.079267979 CEST	62470	587	192.168.2.4	37.120.193.124
Aug 1, 2024 06:09:31.079905033 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:31.080051899 CEST	49826	587	192.168.2.4	37.120.193.124
Aug 1, 2024 06:09:31.080164909 CEST	62460	587	192.168.2.4	13.250.88.201
Aug 1, 2024 06:09:31.084048986 CEST	587	62470	37.120.193.124	192.168.2.4
Aug 1, 2024 06:09:31.084127903 CEST	62470	587	192.168.2.4	37.120.193.124
Aug 1, 2024 06:09:31.084233999 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:31.084775925 CEST	587	49826	37.120.193.124	192.168.2.4
Aug 1, 2024 06:09:31.084872961 CEST	587	62460	13.250.88.201	192.168.2.4
Aug 1, 2024 06:09:31.090322971 CEST	62464	587	192.168.2.4	160.13.60.151
Aug 1, 2024 06:09:31.128318071 CEST	587	62455	209.71.212.26	192.168.2.4
Aug 1, 2024 06:09:31.128386021 CEST	587	62455	209.71.212.26	192.168.2.4
Aug 1, 2024 06:09:31.128401995 CEST	587	62455	209.71.212.26	192.168.2.4
Aug 1, 2024 06:09:31.128448963 CEST	587	62455	209.71.212.26	192.168.2.4
Aug 1, 2024 06:09:31.128513098 CEST	62455	587	192.168.2.4	209.71.212.26
Aug 1, 2024 06:09:31.128581047 CEST	62455	587	192.168.2.4	209.71.212.26
Aug 1, 2024 06:09:31.128736019 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:31.133534908 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:31.133548021 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:31.163352013 CEST	587	62457	192.254.225.239	192.168.2.4
Aug 1, 2024 06:09:31.172497034 CEST	587	62452	74.202.139.99	192.168.2.4
Aug 1, 2024 06:09:31.176284075 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:31.176354885 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:31.176422119 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:31.176599026 CEST	62448	587	192.168.2.4	162.144.12.100
Aug 1, 2024 06:09:31.176728964 CEST	49841	587	192.168.2.4	190.105.202.10
Aug 1, 2024 06:09:31.181210041 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:31.181346893 CEST	587	62448	162.144.12.100	192.168.2.4
Aug 1, 2024 06:09:31.181452036 CEST	587	49841	190.105.202.10	192.168.2.4
Aug 1, 2024 06:09:31.187952995 CEST	587	62461	94.169.2.35	192.168.2.4
Aug 1, 2024 06:09:31.188178062 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:31.192965031 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:31.205239058 CEST	587	62449	62.149.157.154	192.168.2.4
Aug 1, 2024 06:09:31.205517054 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:31.210302114 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:31.215341091 CEST	62457	587	192.168.2.4	192.254.225.239
Aug 1, 2024 06:09:31.216231108 CEST	62452	587	192.168.2.4	74.202.139.99
Aug 1, 2024 06:09:31.231162071 CEST	62461	587	192.168.2.4	94.169.2.35
Aug 1, 2024 06:09:31.239989042 CEST	587	62467	74.48.172.146	192.168.2.4
Aug 1, 2024 06:09:31.240442991 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:31.245243073 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:31.246654034 CEST	62449	587	192.168.2.4	62.149.157.154
Aug 1, 2024 06:09:31.251231909 CEST	587	62451	13.250.88.201	192.168.2.4
Aug 1, 2024 06:09:31.251497030 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:31.256256104 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:31.264519930 CEST	587	62446	89.236.174.10	192.168.2.4
Aug 1, 2024 06:09:31.264547110 CEST	587	62446	89.236.174.10	192.168.2.4
Aug 1, 2024 06:09:31.264563084 CEST	587	62446	89.236.174.10	192.168.2.4
Aug 1, 2024 06:09:31.264707088 CEST	62446	587	192.168.2.4	89.236.174.10
Aug 1, 2024 06:09:31.264858007 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:31.269679070 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:31.269692898 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:31.269706964 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:31.270879984 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:31.271465063 CEST	49833	587	192.168.2.4	103.15.48.10
Aug 1, 2024 06:09:31.271584034 CEST	62450	587	192.168.2.4	162.241.61.138
Aug 1, 2024 06:09:31.271742105 CEST	62447	587	192.168.2.4	77.79.88.19
Aug 1, 2024 06:09:31.271845102 CEST	49839	587	192.168.2.4	192.198.192.27
Aug 1, 2024 06:09:31.271948099 CEST	62463	587	192.168.2.4	13.250.88.201
Aug 1, 2024 06:09:31.272063017 CEST	49842	587	192.168.2.4	13.250.88.201
Aug 1, 2024 06:09:31.272171021 CEST	49844	587	192.168.2.4	89.42.218.226
Aug 1, 2024 06:09:31.272300005 CEST	62459	587	192.168.2.4	195.238.20.30
Aug 1, 2024 06:09:31.272413015 CEST	62453	587	192.168.2.4	191.252.112.195
Aug 1, 2024 06:09:31.272531033 CEST	62464	587	192.168.2.4	160.13.60.151
Aug 1, 2024 06:09:31.272648096 CEST	62454	587	192.168.2.4	23.81.68.43
Aug 1, 2024 06:09:31.276206017 CEST	587	49833	103.15.48.10	192.168.2.4
Aug 1, 2024 06:09:31.276365995 CEST	587	62450	162.241.61.138	192.168.2.4
Aug 1, 2024 06:09:31.276467085 CEST	587	62447	77.79.88.19	192.168.2.4
Aug 1, 2024 06:09:31.276531935 CEST	587	49834	162.241.62.39	192.168.2.4
Aug 1, 2024 06:09:31.276580095 CEST	587	49839	192.198.192.27	192.168.2.4
Aug 1, 2024 06:09:31.276702881 CEST	587	62463	13.250.88.201	192.168.2.4
Aug 1, 2024 06:09:31.276788950 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:31.276801109 CEST	587	49842	13.250.88.201	192.168.2.4
Aug 1, 2024 06:09:31.276838064 CEST	587	49844	89.42.218.226	192.168.2.4
Aug 1, 2024 06:09:31.276985884 CEST	587	62459	195.238.20.30	192.168.2.4
Aug 1, 2024 06:09:31.277116060 CEST	587	62453	191.252.112.195	192.168.2.4
Aug 1, 2024 06:09:31.277283907 CEST	587	62464	160.13.60.151	192.168.2.4
Aug 1, 2024 06:09:31.277376890 CEST	587	62454	23.81.68.43	192.168.2.4
Aug 1, 2024 06:09:31.277446032 CEST	62454	587	192.168.2.4	23.81.68.43
Aug 1, 2024 06:09:31.278034925 CEST	587	49802	108.167.180.142	192.168.2.4
Aug 1, 2024 06:09:31.278786898 CEST	49768	587	192.168.2.4	103.5.50.24
Aug 1, 2024 06:09:31.282210112 CEST	587	62454	23.81.68.43	192.168.2.4
Aug 1, 2024 06:09:31.283812046 CEST	587	49768	103.5.50.24	192.168.2.4
Aug 1, 2024 06:09:31.283880949 CEST	49768	587	192.168.2.4	103.5.50.24
Aug 1, 2024 06:09:31.293515921 CEST	62467	587	192.168.2.4	74.48.172.146
Aug 1, 2024 06:09:31.293827057 CEST	62451	587	192.168.2.4	13.250.88.201
Aug 1, 2024 06:09:31.309109926 CEST	62446	587	192.168.2.4	89.236.174.10
Aug 1, 2024 06:09:31.324713945 CEST	49834	587	192.168.2.4	162.241.62.39
Aug 1, 2024 06:09:31.324794054 CEST	49802	587	192.168.2.4	108.167.180.142
Aug 1, 2024 06:09:31.326333046 CEST	587	62466	91.227.123.130	192.168.2.4
Aug 1, 2024 06:09:31.328260899 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:31.328319073 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:31.330509901 CEST	587	62448	162.144.12.100	192.168.2.4
Aug 1, 2024 06:09:31.332758904 CEST	587	62458	13.250.88.201	192.168.2.4
Aug 1, 2024 06:09:31.333128929 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:31.333199978 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:31.333403111 CEST	62471	587	192.168.2.4	202.61.232.132
Aug 1, 2024 06:09:31.337970018 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:31.338205099 CEST	587	62471	202.61.232.132	192.168.2.4
Aug 1, 2024 06:09:31.338289022 CEST	62471	587	192.168.2.4	202.61.232.132
Aug 1, 2024 06:09:31.338442087 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:31.343620062 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:31.356214046 CEST	587	49826	37.120.193.124	192.168.2.4
Aug 1, 2024 06:09:31.356575012 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:31.356729031 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:31.357378960 CEST	62455	587	192.168.2.4	209.71.212.26
Aug 1, 2024 06:09:31.362123966 CEST	587	62455	209.71.212.26	192.168.2.4
Aug 1, 2024 06:09:31.370954990 CEST	587	62454	23.81.68.43	192.168.2.4
Aug 1, 2024 06:09:31.371572971 CEST	62466	587	192.168.2.4	91.227.123.130
Aug 1, 2024 06:09:31.371589899 CEST	62448	587	192.168.2.4	162.144.12.100
Aug 1, 2024 06:09:31.383757114 CEST	587	62450	162.241.61.138	192.168.2.4
Aug 1, 2024 06:09:31.387231112 CEST	62458	587	192.168.2.4	13.250.88.201
Aug 1, 2024 06:09:31.402827024 CEST	49826	587	192.168.2.4	37.120.193.124
Aug 1, 2024 06:09:31.402837992 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:31.404337883 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:31.404398918 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:31.406166077 CEST	587	49841	190.105.202.10	192.168.2.4
Aug 1, 2024 06:09:31.409213066 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:31.409302950 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:31.414243937 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:31.418464899 CEST	62454	587	192.168.2.4	23.81.68.43
Aug 1, 2024 06:09:31.426229000 CEST	587	49839	192.198.192.27	192.168.2.4
Aug 1, 2024 06:09:31.426426888 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:31.431307077 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:31.434123039 CEST	62450	587	192.168.2.4	162.241.61.138
Aug 1, 2024 06:09:31.441730976 CEST	587	62460	13.250.88.201	192.168.2.4
Aug 1, 2024 06:09:31.442076921 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:31.446954966 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:31.448376894 CEST	4738	49731	185.43.220.45	192.168.2.4
Aug 1, 2024 06:09:31.448545933 CEST	62452	587	192.168.2.4	74.202.139.99
Aug 1, 2024 06:09:31.448623896 CEST	62457	587	192.168.2.4	192.254.225.239
Aug 1, 2024 06:09:31.448700905 CEST	62461	587	192.168.2.4	94.169.2.35
Aug 1, 2024 06:09:31.448784113 CEST	62449	587	192.168.2.4	62.149.157.154
Aug 1, 2024 06:09:31.449464083 CEST	587	49832	139.95.7.216	192.168.2.4
Aug 1, 2024 06:09:31.449687958 CEST	587	49832	139.95.7.216	192.168.2.4
Aug 1, 2024 06:09:31.449721098 CEST	49841	587	192.168.2.4	190.105.202.10
Aug 1, 2024 06:09:31.449722052 CEST	587	49832	139.95.7.216	192.168.2.4
Aug 1, 2024 06:09:31.449749947 CEST	49832	587	192.168.2.4	139.95.7.216
Aug 1, 2024 06:09:31.449768066 CEST	49832	587	192.168.2.4	139.95.7.216
Aug 1, 2024 06:09:31.450351954 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:31.450406075 CEST	587	62465	216.241.20.212	192.168.2.4
Aug 1, 2024 06:09:31.451839924 CEST	49832	587	192.168.2.4	139.95.7.216
Aug 1, 2024 06:09:31.453322887 CEST	587	62452	74.202.139.99	192.168.2.4
Aug 1, 2024 06:09:31.453382969 CEST	587	62457	192.254.225.239	192.168.2.4
Aug 1, 2024 06:09:31.453516006 CEST	587	62461	94.169.2.35	192.168.2.4
Aug 1, 2024 06:09:31.453638077 CEST	587	62449	62.149.157.154	192.168.2.4
Aug 1, 2024 06:09:31.456583977 CEST	587	49832	139.95.7.216	192.168.2.4
Aug 1, 2024 06:09:31.459633112 CEST	587	62459	195.238.20.30	192.168.2.4
Aug 1, 2024 06:09:31.461160898 CEST	587	62454	23.81.68.43	192.168.2.4
Aug 1, 2024 06:09:31.480984926 CEST	49839	587	192.168.2.4	192.198.192.27
Aug 1, 2024 06:09:31.481359005 CEST	587	49844	89.42.218.226	192.168.2.4
Aug 1, 2024 06:09:31.482247114 CEST	587	49819	103.110.129.117	192.168.2.4
Aug 1, 2024 06:09:31.482337952 CEST	587	62455	209.71.212.26	192.168.2.4
Aug 1, 2024 06:09:31.483547926 CEST	587	62453	191.252.112.195	192.168.2.4
Aug 1, 2024 06:09:31.483603001 CEST	587	62453	191.252.112.195	192.168.2.4
Aug 1, 2024 06:09:31.483632088 CEST	587	62453	191.252.112.195	192.168.2.4
Aug 1, 2024 06:09:31.483671904 CEST	62453	587	192.168.2.4	191.252.112.195
Aug 1, 2024 06:09:31.483686924 CEST	587	62453	191.252.112.195	192.168.2.4
Aug 1, 2024 06:09:31.483716965 CEST	587	62453	191.252.112.195	192.168.2.4
Aug 1, 2024 06:09:31.483742952 CEST	62453	587	192.168.2.4	191.252.112.195
Aug 1, 2024 06:09:31.483942986 CEST	49731	4738	192.168.2.4	185.43.220.45
Aug 1, 2024 06:09:31.484256029 CEST	49731	4738	192.168.2.4	185.43.220.45

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Aug 1, 2024 06:09:01.361061096 CEST	192.168.2.4	1.1.1.1	0x97a7	Standard query (0)	claywyaeropumps.com	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:09.107528925 CEST	192.168.2.4	1.1.1.1	0xcdc5	Standard query (0)	rofe.ao	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:09.304893017 CEST	192.168.2.4	1.1.1.1	0x37e4	Standard query (0)	smtp.distribon.com	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:09.434907913 CEST	192.168.2.4	1.1.1.1	0x4eea	Standard query (0)	smtp.singnet.com.sg	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:09.669923067 CEST	192.168.2.4	1.1.1.1	0x1bca	Standard query (0)	mail.almkana.com	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:09.794377089 CEST	192.168.2.4	1.1.1.1	0x4f5	Standard query (0)	mail.staff.gunadarma.ac.id	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:09.923007965 CEST	192.168.2.4	1.1.1.1	0xe5cc	Standard query (0)	mail.century21.com.ve	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:10.043636084 CEST	192.168.2.4	1.1.1.1	0x27b0	Standard query (0)	smtp.ipatrimoniales.com	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:10.185750961 CEST	192.168.2.4	1.1.1.1	0xeb44	Standard query (0)	mail.midwich-cuckoos.co.uk	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:10.293595076 CEST	192.168.2.4	1.1.1.1	0x37e4	Standard query (0)	smtp.distribon.com	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:10.316778898 CEST	192.168.2.4	1.1.1.1	0xe777	Standard query (0)	smtp.freemail.hu	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:10.519172907 CEST	192.168.2.4	1.1.1.1	0x1435	Standard query (0)	skydutravel.com	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:10.653707027 CEST	192.168.2.4	1.1.1.1	0xda3c	Standard query (0)	mail.inovasi.com.my	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:10.834300041 CEST	192.168.2.4	1.1.1.1	0x938d	Standard query (0)	mail.gofrosystems.com	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:11.260957956 CEST	192.168.2.4	1.1.1.1	0x359c	Standard query (0)	smtp.frontiernet.net	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:11.263679028 CEST	192.168.2.4	1.1.1.1	0x3a98	Standard query (0)	smtp.cpdistributor.com	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:11.321970940 CEST	192.168.2.4	1.1.1.1	0x37e4	Standard query (0)	smtp.distribon.com	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:11.664946079 CEST	192.168.2.4	1.1.1.1	0x4870	Standard query (0)	smtp.ic24.net	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:11.727519989 CEST	192.168.2.4	1.1.1.1	0x7afe	Standard query (0)	ecogreentech.co.in	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:11.780141115 CEST	192.168.2.4	1.1.1.1	0x7665	Standard query (0)	mx.oradomail.com	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:11.887825012 CEST	192.168.2.4	1.1.1.1	0x3594	Standard query (0)	smtp.cableonda.net	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:12.061569929 CEST	192.168.2.4	1.1.1.1	0x47be	Standard query (0)	cehni.org	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:12.422502041 CEST	192.168.2.4	1.1.1.1	0x1c14	Standard query (0)	smtp.cg.em-net.ne.jp	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:12.717098951 CEST	192.168.2.4	1.1.1.1	0x4369	Standard query (0)	smtp.metrocast.net	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:12.896811962 CEST	192.168.2.4	1.1.1.1	0x71be	Standard query (0)	mail.wavesmail.xyz	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:12.897105932 CEST	192.168.2.4	1.1.1.1	0x43d7	Standard query (0)	mail.usiu.ac.ke	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:13.089976072 CEST	192.168.2.4	1.1.1.1	0x9159	Standard query (0)	mail.hdimpressoras.com.br	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:13.308873892 CEST	192.168.2.4	1.1.1.1	0xc69a	Standard query (0)	smtp.iprimus.com.au	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:13.326740980 CEST	192.168.2.4	1.1.1.1	0x37e4	Standard query (0)	smtp.distribon.com	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:13.588186979 CEST	192.168.2.4	1.1.1.1	0xd0c	Standard query (0)	smtp.mediacombb.net	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:13.588568926 CEST	192.168.2.4	1.1.1.1	0x956	Standard query (0)	smtp.frontier.com	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:13.589433908 CEST	192.168.2.4	1.1.1.1	0x4ef7	Standard query (0)	_dc-mx.72265b24d205.kanserimmunoterapisidernegi.com	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:13.753875971 CEST	192.168.2.4	1.1.1.1	0xe9a8	Standard query (0)	smtp.mapalus.com	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:13.889199972 CEST	192.168.2.4	1.1.1.1	0x253	Standard query (0)	mail.burhanreklam.com	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:14.330054045 CEST	192.168.2.4	1.1.1.1	0xd02c	Standard query (0)	smtp.bps.go.id	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:14.331861973 CEST	192.168.2.4	1.1.1.1	0x5bd1	Standard query (0)	ugelcondorcanqui.gob.pe	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:14.428215027 CEST	192.168.2.4	1.1.1.1	0x3d3b	Standard query (0)	noorsalim.co.id	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:14.551084042 CEST	192.168.2.4	1.1.1.1	0x8030	Standard query (0)	smtp.bp2mi.go.id	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:14.747800112 CEST	192.168.2.4	1.1.1.1	0xba11	Standard query (0)	smtp.aqualuxinc.com	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:15.368868113 CEST	192.168.2.4	1.1.1.1	0x19a	Standard query (0)	smtp.impresavaleriani.com	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:15.368957043 CEST	192.168.2.4	1.1.1.1	0x73a9	Standard query (0)	mail.ianjohns.co.uk	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:15.748903990 CEST	192.168.2.4	1.1.1.1	0x61e4	Standard query (0)	smtp.espetoflex.com.br	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:15.749957085 CEST	192.168.2.4	1.1.1.1	0xb578	Standard query (0)	autoart.world	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:16.004251957 CEST	192.168.2.4	1.1.1.1	0x79c1	Standard query (0)	smtp.stofanet.dk	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:16.004465103 CEST	192.168.2.4	1.1.1.1	0x69c5	Standard query (0)	triangle-m.com	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:16.386264086 CEST	192.168.2.4	1.1.1.1	0xef60	Standard query (0)	smtp.madasafish.com	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:16.388947964 CEST	192.168.2.4	1.1.1.1	0x761f	Standard query (0)	mail.student.pens.ac.id	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:16.648879051 CEST	192.168.2.4	1.1.1.1	0xff38	Standard query (0)	smtp.upcpoczta.pl	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:16.762963057 CEST	192.168.2.4	1.1.1.1	0x61e4	Standard query (0)	smtp.espetoflex.com.br	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:17.136234999 CEST	192.168.2.4	1.1.1.1	0xe91a	Standard query (0)	smtp.telenet.be	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:17.247997999 CEST	192.168.2.4	1.1.1.1	0xb0fe	Standard query (0)	vrt.ovh	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:17.573668957 CEST	192.168.2.4	1.1.1.1	0xb5a6	Standard query (0)	smtp.nb.sympatico.ca	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:17.576217890 CEST	192.168.2.4	1.1.1.1	0x4ef9	Standard query (0)	orion-serv.ovh	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:17.763755083 CEST	192.168.2.4	1.1.1.1	0x61e4	Standard query (0)	smtp.espetoflex.com.br	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:17.905668020 CEST	192.168.2.4	1.1.1.1	0x394a	Standard query (0)	mail.vitelcom.net	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:17.906083107 CEST	192.168.2.4	1.1.1.1	0x38e2	Standard query (0)	patioraiz.com.br	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:17.908324003 CEST	192.168.2.4	1.1.1.1	0x88dc	Standard query (0)	smtp.ac.em-net.ne.jp	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:18.641659021 CEST	192.168.2.4	1.1.1.1	0xbbf	Standard query (0)	verenasportsfit.com	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:19.147823095 CEST	192.168.2.4	1.1.1.1	0x9885	Standard query (0)	smtp.pandora.be	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:19.493374109 CEST	192.168.2.4	1.1.1.1	0x8f3c	Standard query (0)	thewebfactory.us	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:19.553766966 CEST	192.168.2.4	1.1.1.1	0x6b6c	Standard query (0)	sammancontracting.com	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:19.915688992 CEST	192.168.2.4	1.1.1.1	0xa11c	Standard query (0)	voobie.com	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:19.916898966 CEST	192.168.2.4	1.1.1.1	0xeebc	Standard query (0)	smtp.af.em-net.ne.jp	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:20.143894911 CEST	192.168.2.4	1.1.1.1	0x5e26	Standard query (0)	sigsoconsultores.com	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:20.577313900 CEST	192.168.2.4	1.1.1.1	0x975d	Standard query (0)	mail.trackerlogistica.com.br	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:20.578808069 CEST	192.168.2.4	1.1.1.1	0xfc0d	Standard query (0)	smtp.kiwi-web.ch	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:20.845992088 CEST	192.168.2.4	1.1.1.1	0xf283	Standard query (0)	smtp.lissrl.com	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:21.313843966 CEST	192.168.2.4	1.1.1.1	0xf509	Standard query (0)	smtp.aw.em-net.ne.jp	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:21.576044083 CEST	192.168.2.4	1.1.1.1	0x975d	Standard query (0)	mail.trackerlogistica.com.br	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:21.661669970 CEST	192.168.2.4	1.1.1.1	0x4336	Standard query (0)	smtp3-rdslink.rcs-rds.ro	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:21.952971935 CEST	192.168.2.4	1.1.1.1	0xdae	Standard query (0)	ms5.url.com.tw	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:21.954200983 CEST	192.168.2.4	1.1.1.1	0xdd73	Standard query (0)	smtp.massagioconda.com	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:22.337652922 CEST	192.168.2.4	1.1.1.1	0xf809	Standard query (0)	mail.magelangkota.go.id	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:22.382169962 CEST	192.168.2.4	1.1.1.1	0xf31f	Standard query (0)	smtp.jeff-bhv.de	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:22.578907967 CEST	192.168.2.4	1.1.1.1	0x975d	Standard query (0)	mail.trackerlogistica.com.br	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:22.660772085 CEST	192.168.2.4	1.1.1.1	0xf892	Standard query (0)	smtp.start.psi.br	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:23.108089924 CEST	192.168.2.4	1.1.1.1	0x9cdf	Standard query (0)	pro17.emailserver.vn	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:23.641253948 CEST	192.168.2.4	1.1.1.1	0x9a5	Standard query (0)	cashamericatoday.com	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:23.717418909 CEST	192.168.2.4	1.1.1.1	0x4cd0	Standard query (0)	stu.univ-saida.dz	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:24.085566998 CEST	192.168.2.4	1.1.1.1	0x4411	Standard query (0)	mail.airmail.cc	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:24.085812092 CEST	192.168.2.4	1.1.1.1	0xc4f0	Standard query (0)	poczta.oirpwarszawa.pl	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:24.086708069 CEST	192.168.2.4	1.1.1.1	0x2305	Standard query (0)	queenpuppy.co.kr	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:24.456274033 CEST	192.168.2.4	1.1.1.1	0x47c6	Standard query (0)	knaagdierenhotel.nl	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:24.592147112 CEST	192.168.2.4	1.1.1.1	0x975d	Standard query (0)	mail.trackerlogistica.com.br	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:25.398780107 CEST	192.168.2.4	1.1.1.1	0xe165	Standard query (0)	jardininfantilsmilingkidsnorte.com	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:25.904021025 CEST	192.168.2.4	1.1.1.1	0xc6ee	Standard query (0)	mail.ifcolaboradores.com	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:25.983817101 CEST	192.168.2.4	1.1.1.1	0xb261	Standard query (0)	hzmx01.mxmail.netease.com	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:25.984417915 CEST	192.168.2.4	1.1.1.1	0x730f	Standard query (0)	host06.emailserver.vn	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:26.353940010 CEST	192.168.2.4	1.1.1.1	0xcf29	Standard query (0)	mail.anydoor.eu.org	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:26.723772049 CEST	192.168.2.4	1.1.1.1	0x3de3	Standard query (0)	mail.nychousecleaners.net	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:26.723772049 CEST	192.168.2.4	1.1.1.1	0x52f1	Standard query (0)	mail.a1net.hr	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:26.922393084 CEST	192.168.2.4	1.1.1.1	0xfd4	Standard query (0)	autoforcenepal.com	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:27.069884062 CEST	192.168.2.4	1.1.1.1	0x9839	Standard query (0)	flyview.com.br	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:27.158198118 CEST	192.168.2.4	1.1.1.1	0xcca5	Standard query (0)	smtp.andradelogistica.com.br	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:27.421494007 CEST	192.168.2.4	1.1.1.1	0x65eb	Standard query (0)	smtp.blueroom.com.ar	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:27.836860895 CEST	192.168.2.4	1.1.1.1	0x345a	Standard query (0)	dpa-legal.com	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:28.153620005 CEST	192.168.2.4	1.1.1.1	0xcca5	Standard query (0)	smtp.andradelogistica.com.br	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:28.159638882 CEST	192.168.2.4	1.1.1.1	0x31bb	Standard query (0)	smtp.quickline.com	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:28.160115957 CEST	192.168.2.4	1.1.1.1	0x333	Standard query (0)	mail.dener.com	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:28.165462971 CEST	192.168.2.4	1.1.1.1	0x1	Standard query (0)	smtp.andradelogistica.com.br	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:28.252419949 CEST	192.168.2.4	1.1.1.1	0x2251	Standard query (0)	mail.tradejournal.co	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:28.569365978 CEST	192.168.2.4	1.1.1.1	0x8e55	Standard query (0)	smtp.coqui.net	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:28.591304064 CEST	192.168.2.4	1.1.1.1	0x975d	Standard query (0)	mail.trackerlogistica.com.br	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:28.632736921 CEST	192.168.2.4	1.1.1.1	0xfd8	Standard query (0)	emjoy.com.co	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:29.249511957 CEST	192.168.2.4	1.1.1.1	0x6a93	Standard query (0)	bergopakademie.com	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:29.250592947 CEST	192.168.2.4	1.1.1.1	0xf82f	Standard query (0)	smtp.kingstair.com	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:29.638493061 CEST	192.168.2.4	1.1.1.1	0x7860	Standard query (0)	smtp.skynet.be	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:29.639292955 CEST	192.168.2.4	1.1.1.1	0x7e45	Standard query (0)	smtp.ah.em-net.ne.jp	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:29.877252102 CEST	192.168.2.4	1.1.1.1	0x7adf	Standard query (0)	mail.zb.lv	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:30.261405945 CEST	192.168.2.4	1.1.1.1	0x328a	Standard query (0)	aventurasdealtura.cl	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:30.389786959 CEST	192.168.2.4	1.1.1.1	0x4727	Standard query (0)	emp3shop.unixstorm.org	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:30.482076883 CEST	192.168.2.4	1.1.1.1	0xf751	Standard query (0)	runridedive.com	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:30.641083002 CEST	192.168.2.4	1.1.1.1	0x1752	Standard query (0)	mail.cfnats.com.au	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:31.000721931 CEST	192.168.2.4	1.1.1.1	0x4a4a	Standard query (0)	mail.horsefucker.org	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:31.272738934 CEST	192.168.2.4	1.1.1.1	0x5d0e	Standard query (0)	mail.itfuerkinder.de	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:31.655369043 CEST	192.168.2.4	1.1.1.1	0x2cee	Standard query (0)	smtp.legendsnorcal.com	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:31.815999031 CEST	192.168.2.4	1.1.1.1	0x2c77	Standard query (0)	smtp.modicamotos.com.ar	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:32.337640047 CEST	192.168.2.4	1.1.1.1	0x74ff	Standard query (0)	orbit360bd.com	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:32.616697073 CEST	192.168.2.4	1.1.1.1	0x2cf0	Standard query (0)	iotecelectronic.cl	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:32.725617886 CEST	192.168.2.4	1.1.1.1	0x9ee6	Standard query (0)	smtp.people.net.au	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:32.825841904 CEST	192.168.2.4	1.1.1.1	0x2c77	Standard query (0)	smtp.modicamotos.com.ar	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:32.892020941 CEST	192.168.2.4	1.1.1.1	0x920e	Standard query (0)	vivaxnet.com.br	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:33.088354111 CEST	192.168.2.4	1.1.1.1	0x91b0	Standard query (0)	smtp-in-01.systailor.fr	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:33.283520937 CEST	192.168.2.4	1.1.1.1	0x4c50	Standard query (0)	bsotr.or.id	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:33.576859951 CEST	192.168.2.4	1.1.1.1	0xae8	Standard query (0)	inoveservices.com.br	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:34.109584093 CEST	192.168.2.4	1.1.1.1	0x1e98	Standard query (0)	mail.destroyannoy.com	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:34.278949022 CEST	192.168.2.4	1.1.1.1	0x4c50	Standard query (0)	bsotr.or.id	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:34.671195984 CEST	192.168.2.4	1.1.1.1	0xaaaf	Standard query (0)	warmadewa.ac.id	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:34.744247913 CEST	192.168.2.4	1.1.1.1	0xe69b	Standard query (0)	smtp.rr.em-net.ne.jp	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:34.908451080 CEST	192.168.2.4	1.1.1.1	0x44e2	Standard query (0)	qipoo.pe	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:35.219408989 CEST	192.168.2.4	1.1.1.1	0x30a0	Standard query (0)	smtp.ag.em-net.ne.jp	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:35.688180923 CEST	192.168.2.4	1.1.1.1	0x2c82	Standard query (0)	mail.vip.hr	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:36.023682117 CEST	192.168.2.4	1.1.1.1	0x1698	Standard query (0)	mail.laotel.com	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:36.286747932 CEST	192.168.2.4	1.1.1.1	0x30b0	Standard query (0)	learnally.info	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:36.468053102 CEST	192.168.2.4	1.1.1.1	0xb3dc	Standard query (0)	mail.urincho.mx	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:37.163228989 CEST	192.168.2.4	1.1.1.1	0xf55b	Standard query (0)	uniquenetworkbd.com	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:37.166982889 CEST	192.168.2.4	1.1.1.1	0xd3dd	Standard query (0)	fiftyone.com.ar	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:37.433820009 CEST	192.168.2.4	1.1.1.1	0x5bbc	Standard query (0)	smtp.italcard.net	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:37.658267975 CEST	192.168.2.4	1.1.1.1	0x102d	Standard query (0)	smtp.audreymakeup.com.br	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:37.659688950 CEST	192.168.2.4	1.1.1.1	0x1b34	Standard query (0)	smartecosolutions.ma	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:37.937841892 CEST	192.168.2.4	1.1.1.1	0xada9	Standard query (0)	mail.247post.vn	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:38.208719969 CEST	192.168.2.4	1.1.1.1	0x97f	Standard query (0)	sebastianschool.org	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:38.667337894 CEST	192.168.2.4	1.1.1.1	0x8f5e	Standard query (0)	mail.truzt.in	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:38.951006889 CEST	192.168.2.4	1.1.1.1	0xada9	Standard query (0)	mail.247post.vn	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:39.333257914 CEST	192.168.2.4	1.1.1.1	0xcdfa	Standard query (0)	swiftukrecruitment.com	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:39.955262899 CEST	192.168.2.4	1.1.1.1	0xb0ca	Standard query (0)	smtp.svgjpr.org	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:40.086829901 CEST	192.168.2.4	1.1.1.1	0x25fa	Standard query (0)	mail.strawberryadvertising.com	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:40.128599882 CEST	192.168.2.4	1.1.1.1	0xeddf	Standard query (0)	mail.trabzonturkuazosgb.com	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:40.494878054 CEST	192.168.2.4	1.1.1.1	0x6b63	Standard query (0)	mail.primus.com.au	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:41.049761057 CEST	192.168.2.4	1.1.1.1	0xe8ba	Standard query (0)	umt.ac.id	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:41.543423891 CEST	192.168.2.4	1.1.1.1	0x465a	Standard query (0)	mail.o-guitars.com	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:42.155635118 CEST	192.168.2.4	1.1.1.1	0x9939	Standard query (0)	mail.enfaltekstil.com	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:42.485626936 CEST	192.168.2.4	1.1.1.1	0x87fe	Standard query (0)	smtp.iinet.net.au	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:42.487003088 CEST	192.168.2.4	1.1.1.1	0xe986	Standard query (0)	earthlink.net	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:42.588188887 CEST	192.168.2.4	1.1.1.1	0x2d99	Standard query (0)	ctdelco.org	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:42.664798975 CEST	192.168.2.4	1.1.1.1	0x852d	Standard query (0)	out.ambrozoom3d.com	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:42.665507078 CEST	192.168.2.4	1.1.1.1	0xefdd	Standard query (0)	arayazilim.com	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:42.666112900 CEST	192.168.2.4	1.1.1.1	0xe584	Standard query (0)	ultimatefreedom.com	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:42.706218958 CEST	192.168.2.4	1.1.1.1	0xa0fe	Standard query (0)	smtp.cellulopoli.it	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:42.707875967 CEST	192.168.2.4	1.1.1.1	0xaa16	Standard query (0)	ybb.ne.jp	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:42.707891941 CEST	192.168.2.4	1.1.1.1	0xbd4e	Standard query (0)	mail.woodsville-florist.com	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:42.709223032 CEST	192.168.2.4	1.1.1.1	0x2e0	Standard query (0)	smtp.agentpersuasion.co.uk	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:42.790019989 CEST	192.168.2.4	1.1.1.1	0x71bf	Standard query (0)	securesmtp.templesfinancial.co.uk	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:42.913183928 CEST	192.168.2.4	1.1.1.1	0xe365	Standard query (0)	mail.capitalshoppingpark.co.uk	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:43.031260014 CEST	192.168.2.4	1.1.1.1	0x6525	Standard query (0)	smtp.inwind.it	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:43.032077074 CEST	192.168.2.4	1.1.1.1	0x2d9d	Standard query (0)	mail.duckface.co.uk	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:43.033881903 CEST	192.168.2.4	1.1.1.1	0x9386	Standard query (0)	mail.arditex.com	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:43.113274097 CEST	192.168.2.4	1.1.1.1	0xb437	Standard query (0)	edu.ota-school.ed.jp	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:43.297483921 CEST	192.168.2.4	1.1.1.1	0x5d0b	Standard query (0)	mail.scotomasyon.com	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:43.297782898 CEST	192.168.2.4	1.1.1.1	0xb6ce	Standard query (0)	out.gotbabysigns.com	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:43.361176968 CEST	192.168.2.4	1.1.1.1	0x4b31	Standard query (0)	uqac-ca.mail.protection.outlook.com	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:43.442034960 CEST	192.168.2.4	1.1.1.1	0x3110	Standard query (0)	connectthink.com	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:43.442455053 CEST	192.168.2.4	1.1.1.1	0x7f69	Standard query (0)	minos.ocn.ne.jp	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:43.547770023 CEST	192.168.2.4	1.1.1.1	0x16b8	Standard query (0)	secure.hph.com	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:43.549030066 CEST	192.168.2.4	1.1.1.1	0x398c	Standard query (0)	cableone.net	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:43.682722092 CEST	192.168.2.4	1.1.1.1	0x960b	Standard query (0)	uwo-ca.mail.protection.outlook.com	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:43.752592087 CEST	192.168.2.4	1.1.1.1	0xdccb	Standard query (0)	smtp.frontiernet.net	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:43.828975916 CEST	192.168.2.4	1.1.1.1	0xfe8e	Standard query (0)	mail.veroling.com	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:43.829729080 CEST	192.168.2.4	1.1.1.1	0x3ce2	Standard query (0)	securesmtp.educati.com.ch	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:43.830660105 CEST	192.168.2.4	1.1.1.1	0xeb34	Standard query (0)	smtp.virgilio.it	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:43.953047037 CEST	192.168.2.4	1.1.1.1	0xbace	Standard query (0)	securesmtp.dinamiknegocios.com	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:43.953186035 CEST	192.168.2.4	1.1.1.1	0x1963	Standard query (0)	tomkadlec.com	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:43.954080105 CEST	192.168.2.4	1.1.1.1	0xfcde	Standard query (0)	smtp.centurylink.net	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:43.954384089 CEST	192.168.2.4	1.1.1.1	0xf062	Standard query (0)	jgstream.com	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:43.954730988 CEST	192.168.2.4	1.1.1.1	0x7b5b	Standard query (0)	securesmtp.assocbuyers.com	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:43.955409050 CEST	192.168.2.4	1.1.1.1	0x1320	Standard query (0)	mail.myrabeatriz.minemailin	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:43.955804110 CEST	192.168.2.4	1.1.1.1	0xa19c	Standard query (0)	securesmtp.spaniennachmass.de	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:44.036298037 CEST	192.168.2.4	1.1.1.1	0x7009	Standard query (0)	secure.clerk.com	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:44.115809917 CEST	192.168.2.4	1.1.1.1	0xeecb	Standard query (0)	alt1.aspmx.l.google.com	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:44.116468906 CEST	192.168.2.4	1.1.1.1	0x6eb2	Standard query (0)	mx.stackmail.com	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:44.116869926 CEST	192.168.2.4	1.1.1.1	0xe331	Standard query (0)	mx-cluster-ca01.hornetsecurity.com	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:44.203411102 CEST	192.168.2.4	1.1.1.1	0xc639	Standard query (0)	lisaallaninteriordesign.co.uk	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:44.273066998 CEST	192.168.2.4	1.1.1.1	0xdad0	Standard query (0)	smtp.edandjuliereed.com	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:44.273900032 CEST	192.168.2.4	1.1.1.1	0x2b3c	Standard query (0)	keshlazer.uz	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:44.274596930 CEST	192.168.2.4	1.1.1.1	0x4ffc	Standard query (0)	securesmtp.1tvmv.onmicrosoft.com	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:44.275224924 CEST	192.168.2.4	1.1.1.1	0xaebd	Standard query (0)	kao-co-jp.mail.protection.outlook.com	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:44.456259966 CEST	192.168.2.4	1.1.1.1	0xf093	Standard query (0)	hct-ac-ae.mail.protection.outlook.com	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:44.457123995 CEST	192.168.2.4	1.1.1.1	0x68c3	Standard query (0)	alt4.aspmx.l.google.com	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:44.531419992 CEST	192.168.2.4	1.1.1.1	0xa70d	Standard query (0)	securesmtp.internacional.ch	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:44.640645027 CEST	192.168.2.4	1.1.1.1	0xc7b3	Standard query (0)	mail.nl-guitar.com	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:44.641043901 CEST	192.168.2.4	1.1.1.1	0xea81	Standard query (0)	mail.magazinelojao.com.br	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:44.641043901 CEST	192.168.2.4	1.1.1.1	0x8f1d	Standard query (0)	out.hff.dhdf	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:44.641097069 CEST	192.168.2.4	1.1.1.1	0xca3f	Standard query (0)	smtp.email.it	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:44.719949961 CEST	192.168.2.4	1.1.1.1	0x7237	Standard query (0)	h1realestate.com.au	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:44.720031977 CEST	192.168.2.4	1.1.1.1	0x19b0	Standard query (0)	smtp.metropei.com	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:44.720443964 CEST	192.168.2.4	1.1.1.1	0x450a	Standard query (0)	secure.grace-academy.org.uk	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:44.804250956 CEST	192.168.2.4	1.1.1.1	0x878	Standard query (0)	mta.auchanbox.fr	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:44.804824114 CEST	192.168.2.4	1.1.1.1	0xad92	Standard query (0)	smtp.aaofoo.com	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:44.805306911 CEST	192.168.2.4	1.1.1.1	0x12fb	Standard query (0)	aspmx.l.google.com	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:44.983021021 CEST	192.168.2.4	1.1.1.1	0x2ac0	Standard query (0)	securesmtp.go-donkeys.net	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:45.068682909 CEST	192.168.2.4	1.1.1.1	0xc1f2	Standard query (0)	hzmx02.mxmail.netease.com	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:45.069077969 CEST	192.168.2.4	1.1.1.1	0x25fc	Standard query (0)	smtp.netime.cn	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:45.070048094 CEST	192.168.2.4	1.1.1.1	0x86dc	Standard query (0)	out.shiatzu.dk	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:45.149795055 CEST	192.168.2.4	1.1.1.1	0xc484	Standard query (0)	secure.visualillusion.com.mx	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:45.239634991 CEST	192.168.2.4	1.1.1.1	0x45bb	Standard query (0)	mail.mirerotravel.com	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:45.239967108 CEST	192.168.2.4	1.1.1.1	0x1119	Standard query (0)	inter7.jp	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:45.240226030 CEST	192.168.2.4	1.1.1.1	0xf224	Standard query (0)	secure.lakshmis.net	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:45.318964958 CEST	192.168.2.4	1.1.1.1	0x7680	Standard query (0)	chapingo.mx	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:45.406091928 CEST	192.168.2.4	1.1.1.1	0xa2e5	Standard query (0)	mail.blacksheepparts.com	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:45.407053947 CEST	192.168.2.4	1.1.1.1	0x696d	Standard query (0)	rogers.com	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:45.407203913 CEST	192.168.2.4	1.1.1.1	0x217a	Standard query (0)	hgf.fi	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:45.407660007 CEST	192.168.2.4	1.1.1.1	0xfa23	Standard query (0)	mx1r.nbp.pl	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:45.407704115 CEST	192.168.2.4	1.1.1.1	0xf5c9	Standard query (0)	hikmetaslan.com.tr	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:45.500350952 CEST	192.168.2.4	1.1.1.1	0x4ff2	Standard query (0)	zing.vn	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:45.565749884 CEST	192.168.2.4	1.1.1.1	0x472d	Standard query (0)	secure.ahelpinghandrenovations.ca	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:45.566375017 CEST	192.168.2.4	1.1.1.1	0x8792	Standard query (0)	mail.hot.ee	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:45.566946983 CEST	192.168.2.4	1.1.1.1	0xa0b6	Standard query (0)	telefonica.net	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:45.567270041 CEST	192.168.2.4	1.1.1.1	0xeb43	Standard query (0)	mail.feutrie.com	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:45.656033993 CEST	192.168.2.4	1.1.1.1	0xb47d	Standard query (0)	smtp.netzero.net	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:45.656130075 CEST	192.168.2.4	1.1.1.1	0xe21b	Standard query (0)	mail.terracotta.com.my	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:45.757663012 CEST	192.168.2.4	1.1.1.1	0xa569	Standard query (0)	secure.mwfurniture.vn	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:45.758119106 CEST	192.168.2.4	1.1.1.1	0xb5fd	Standard query (0)	smtp.ig.com.br	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:45.758377075 CEST	192.168.2.4	1.1.1.1	0x872d	Standard query (0)	hasajans.com	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:45.758522987 CEST	192.168.2.4	1.1.1.1	0xa706	Standard query (0)	mail.thebfagency.com	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:45.758716106 CEST	192.168.2.4	1.1.1.1	0xba8f	Standard query (0)	shared55.accountservergroup.com	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:45.807356119 CEST	192.168.2.4	1.1.1.1	0xf9b9	Standard query (0)	mail.smilliesbulgaria.co.uk	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:45.807670116 CEST	192.168.2.4	1.1.1.1	0x9168	Standard query (0)	us-smtp-inbound-1.mimecast.com	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:45.898994923 CEST	192.168.2.4	1.1.1.1	0xff08	Standard query (0)	smtp.dckits.co.uk	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:45.899446964 CEST	192.168.2.4	1.1.1.1	0x3	Standard query (0)	infomaticaacademy.com	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:45.995846987 CEST	192.168.2.4	1.1.1.1	0x2996	Standard query (0)	smtp.bestknowledgeonline.com	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:45.996342897 CEST	192.168.2.4	1.1.1.1	0xf850	Standard query (0)	smtp.me.com	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:45.999531031 CEST	192.168.2.4	1.1.1.1	0xbba7	Standard query (0)	iaplconsulting.com	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:45.999555111 CEST	192.168.2.4	1.1.1.1	0x834e	Standard query (0)	docomo.ne.jp	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:46.156691074 CEST	192.168.2.4	1.1.1.1	0x54e8	Standard query (0)	mail.xplornet.com	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:46.157016039 CEST	192.168.2.4	1.1.1.1	0xe052	Standard query (0)	legados.net	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:46.157355070 CEST	192.168.2.4	1.1.1.1	0xe01a	Standard query (0)	out.uqam.ca	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:46.232446909 CEST	192.168.2.4	1.1.1.1	0x45bb	Standard query (0)	mail.mirerotravel.com	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:46.248878956 CEST	192.168.2.4	1.1.1.1	0x166e	Standard query (0)	aceroofingsydney-com-au.mail.protection.outlook.com	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:46.248929024 CEST	192.168.2.4	1.1.1.1	0x3ae2	Standard query (0)	securesmtp.amorepediatria.com.br	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:46.338479996 CEST	192.168.2.4	1.1.1.1	0x6c3d	Standard query (0)	abv.bg	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:46.338871002 CEST	192.168.2.4	1.1.1.1	0x76bc	Standard query (0)	t3a-consulting.com	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:46.339209080 CEST	192.168.2.4	1.1.1.1	0x9e4e	Standard query (0)	smtp.redpine.net	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:46.339462042 CEST	192.168.2.4	1.1.1.1	0xea6e	Standard query (0)	blindo.com.au	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:46.339857101 CEST	192.168.2.4	1.1.1.1	0x1a45	Standard query (0)	mail.optonline.net	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:46.340240955 CEST	192.168.2.4	1.1.1.1	0xade1	Standard query (0)	masumi7310.takayuki46.gomailxyz.space	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:46.354695082 CEST	192.168.2.4	1.1.1.1	0x7a22	Standard query (0)	mail.szef.cn	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:46.397676945 CEST	192.168.2.4	1.1.1.1	0x6143	Standard query (0)	vabazar.com	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:46.489790916 CEST	192.168.2.4	1.1.1.1	0x44c1	Standard query (0)	mail.comcat.net	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:46.490531921 CEST	192.168.2.4	1.1.1.1	0x1a8	Standard query (0)	out.jamzhome.com	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:46.490915060 CEST	192.168.2.4	1.1.1.1	0xe9b4	Standard query (0)	mail.mexicanpharmacy.com.mx	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:46.561722040 CEST	192.168.2.4	1.1.1.1	0xb98f	Standard query (0)	smtp.ct.em-net.ne.jp	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:46.562349081 CEST	192.168.2.4	1.1.1.1	0xb203	Standard query (0)	mail.tize.es	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:46.657280922 CEST	192.168.2.4	1.1.1.1	0x2597	Standard query (0)	mail.net.sa	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:46.657716036 CEST	192.168.2.4	1.1.1.1	0x5459	Standard query (0)	secure.mrcash.es	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:46.721626043 CEST	192.168.2.4	1.1.1.1	0xaf2a	Standard query (0)	guruku.id	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:46.726686001 CEST	192.168.2.4	1.1.1.1	0x9f15	Standard query (0)	securesmtp.medouhui.com	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:46.727004051 CEST	192.168.2.4	1.1.1.1	0x3b5a	Standard query (0)	nucleobase.com.br	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:46.727297068 CEST	192.168.2.4	1.1.1.1	0x8555	Standard query (0)	secure.sexyjeans.com.mx	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:46.877831936 CEST	192.168.2.4	1.1.1.1	0x4f54	Standard query (0)	smtp.white-angel.co.uk	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:46.878142118 CEST	192.168.2.4	1.1.1.1	0xc2c5	Standard query (0)	mail.shivaywebsolution.com	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:46.878489971 CEST	192.168.2.4	1.1.1.1	0x41f0	Standard query (0)	smtp.agate.plala.or.jp	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:46.964804888 CEST	192.168.2.4	1.1.1.1	0x2909	Standard query (0)	talk21.com	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:47.034893036 CEST	192.168.2.4	1.1.1.1	0x1047	Standard query (0)	linshiyouxiang.net	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:47.035268068 CEST	192.168.2.4	1.1.1.1	0x6701	Standard query (0)	smtp.3pprogetti.it	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:47.111495972 CEST	192.168.2.4	1.1.1.1	0x691d	Standard query (0)	mail.alifrim.com	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:47.112133026 CEST	192.168.2.4	1.1.1.1	0xc60a	Standard query (0)	mail.i.ua	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:47.112423897 CEST	192.168.2.4	1.1.1.1	0x66ee	Standard query (0)	mail.carpet-culture.com	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:47.112653971 CEST	192.168.2.4	1.1.1.1	0xfabb	Standard query (0)	i.softbank.jp	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:47.209552050 CEST	192.168.2.4	1.1.1.1	0x87e8	Standard query (0)	segametaleng.sk	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:47.209830999 CEST	192.168.2.4	1.1.1.1	0xae34	Standard query (0)	out.irb.co.in	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:47.210215092 CEST	192.168.2.4	1.1.1.1	0xc334	Standard query (0)	securesmtp.ravallielectric.com	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:47.289674997 CEST	192.168.2.4	1.1.1.1	0x107f	Standard query (0)	secure.nuevaescuela.net	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:47.292462111 CEST	192.168.2.4	1.1.1.1	0x82b9	Standard query (0)	glaube.de	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:47.359340906 CEST	192.168.2.4	1.1.1.1	0x7a22	Standard query (0)	mail.szef.cn	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:47.392018080 CEST	192.168.2.4	1.1.1.1	0x4597	Standard query (0)	aleetel.com	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:47.392018080 CEST	192.168.2.4	1.1.1.1	0x3e82	Standard query (0)	telekom.de	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:47.474014044 CEST	192.168.2.4	1.1.1.1	0xb4a8	Standard query (0)	securesmtp.dcsev.com	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:47.474447966 CEST	192.168.2.4	1.1.1.1	0x7417	Standard query (0)	securesmtp.unicem.onmicrosoft.com	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:47.475179911 CEST	192.168.2.4	1.1.1.1	0x9181	Standard query (0)	securesmtp.ftschool.org	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:47.548710108 CEST	192.168.2.4	1.1.1.1	0x3e1a	Standard query (0)	out.flash.net	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:47.549065113 CEST	192.168.2.4	1.1.1.1	0xf747	Standard query (0)	out.caledonian.ac.uk	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:47.549345016 CEST	192.168.2.4	1.1.1.1	0x16c8	Standard query (0)	softbank.ne.jp	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:47.627300024 CEST	192.168.2.4	1.1.1.1	0xa0f5	Standard query (0)	stai-tangho.ac.id	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:47.627588987 CEST	192.168.2.4	1.1.1.1	0x2a46	Standard query (0)	secure.blackpoolcab.org.uk	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:47.627877951 CEST	192.168.2.4	1.1.1.1	0xefd5	Standard query (0)	smtp.ondata.com.br	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:47.627896070 CEST	192.168.2.4	1.1.1.1	0xa9dd	Standard query (0)	secure.glurakboard.de	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:47.786106110 CEST	192.168.2.4	1.1.1.1	0xc32c	Standard query (0)	smtp.falguiere36.org	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:47.874135971 CEST	192.168.2.4	1.1.1.1	0xb6ec	Standard query (0)	smtp.e-ling.it	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:47.874460936 CEST	192.168.2.4	1.1.1.1	0x282	Standard query (0)	smtp.aeserpa.pt	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:47.874738932 CEST	192.168.2.4	1.1.1.1	0x19da	Standard query (0)	rlrestaurants.com	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:47.874998093 CEST	192.168.2.4	1.1.1.1	0x1b6c	Standard query (0)	mail.marsdevelopers.in	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:47.875802994 CEST	192.168.2.4	1.1.1.1	0x44d	Standard query (0)	smtp.nifty.com	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:47.876040936 CEST	192.168.2.4	1.1.1.1	0xabc7	Standard query (0)	secure.harrison.co.th	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:47.960556984 CEST	192.168.2.4	1.1.1.1	0x2e64	Standard query (0)	alphaflight.com.au	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:48.067218065 CEST	192.168.2.4	1.1.1.1	0x16a0	Standard query (0)	vodafone.es	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:48.067547083 CEST	192.168.2.4	1.1.1.1	0x1ae0	Standard query (0)	sympatico.ca	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:48.067816973 CEST	192.168.2.4	1.1.1.1	0x143f	Standard query (0)	kolkzicht.nl	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:48.068089962 CEST	192.168.2.4	1.1.1.1	0xacda	Standard query (0)	ribbonbox.co.uk	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:48.132627010 CEST	192.168.2.4	1.1.1.1	0x2cb4	Standard query (0)	smtp.bbsyd.dk	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:48.132694006 CEST	192.168.2.4	1.1.1.1	0x3ac2	Standard query (0)	securesmtp.cobmk.com	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:48.132956028 CEST	192.168.2.4	1.1.1.1	0x439a	Standard query (0)	smtp.totem-experience.com	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:48.133012056 CEST	192.168.2.4	1.1.1.1	0x6b7	Standard query (0)	tecmedia-neuss.de	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:48.133254051 CEST	192.168.2.4	1.1.1.1	0xbe32	Standard query (0)	smtpin1.euskalnet.net	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:48.133318901 CEST	192.168.2.4	1.1.1.1	0xc4d2	Standard query (0)	smtp.perfiltec.com	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:48.133595943 CEST	192.168.2.4	1.1.1.1	0x91a5	Standard query (0)	mercefly.com	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:48.233987093 CEST	192.168.2.4	1.1.1.1	0xc667	Standard query (0)	gdavey31.fsnet.co.uk	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:48.323523998 CEST	192.168.2.4	1.1.1.1	0xd196	Standard query (0)	out.crooks.me.uk	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:48.323940039 CEST	192.168.2.4	1.1.1.1	0xd79e	Standard query (0)	smtp.cpdistributor.com	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:48.360449076 CEST	192.168.2.4	1.1.1.1	0x7a22	Standard query (0)	mail.szef.cn	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:48.394948006 CEST	192.168.2.4	1.1.1.1	0x7673	Standard query (0)	securesmtp.alnaec.com	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:48.395359993 CEST	192.168.2.4	1.1.1.1	0xb8ae	Standard query (0)	mail.agenzialacasa.it	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:48.396030903 CEST	192.168.2.4	1.1.1.1	0x238c	Standard query (0)	booko.com.cn	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:48.489753008 CEST	192.168.2.4	1.1.1.1	0x49b0	Standard query (0)	alt2.aspmx.l.google.com	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:48.574456930 CEST	192.168.2.4	1.1.1.1	0x8d06	Standard query (0)	mail.bvrautomotive.co.uk	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:48.581942081 CEST	192.168.2.4	1.1.1.1	0xace3	Standard query (0)	peters.at	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:48.582994938 CEST	192.168.2.4	1.1.1.1	0xdb24	Standard query (0)	mail.aec.institute	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:48.583487034 CEST	192.168.2.4	1.1.1.1	0xf9f6	Standard query (0)	mx.breakthur.com	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:48.602107048 CEST	192.168.2.4	1.1.1.1	0x1	Standard query (0)	mail.aec.institute	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:48.740932941 CEST	192.168.2.4	1.1.1.1	0xa6fd	Standard query (0)	smtp.comporium.net	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:48.800837994 CEST	192.168.2.4	1.1.1.1	0x901b	Standard query (0)	pochta.ua	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:48.801253080 CEST	192.168.2.4	1.1.1.1	0xfdda	Standard query (0)	smtp.jcom.zaq.ne.jp	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:48.802010059 CEST	192.168.2.4	1.1.1.1	0xdb72	Standard query (0)	epost.de	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:48.803371906 CEST	192.168.2.4	1.1.1.1	0x929b	Standard query (0)	out.passportbmw.com	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:48.924393892 CEST	192.168.2.4	1.1.1.1	0x967	Standard query (0)	smtp.excite.co.jp	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:48.924747944 CEST	192.168.2.4	1.1.1.1	0x5985	Standard query (0)	mxb.mailgun.org	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:49.011348009 CEST	192.168.2.4	1.1.1.1	0xb45a	Standard query (0)	schlossers.de	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:49.049612045 CEST	192.168.2.4	1.1.1.1	0x4844	Standard query (0)	mx.netz12.de	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:49.050435066 CEST	192.168.2.4	1.1.1.1	0xd154	Standard query (0)	bw-deloitte.com	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:49.051503897 CEST	192.168.2.4	1.1.1.1	0xb250	Standard query (0)	box.ua	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:49.051820993 CEST	192.168.2.4	1.1.1.1	0xe227	Standard query (0)	intranet.com.ng	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:49.051918030 CEST	192.168.2.4	1.1.1.1	0xd2e1	Standard query (0)	smtp.eresmas.net	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:49.052247047 CEST	192.168.2.4	1.1.1.1	0xe5d3	Standard query (0)	marketplace.amazon.co.uk	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:49.135936975 CEST	192.168.2.4	1.1.1.1	0xe9de	Standard query (0)	smtp.bbox.fr	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:49.136507034 CEST	192.168.2.4	1.1.1.1	0x9220	Standard query (0)	mail.nademacorporation.com	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:49.136784077 CEST	192.168.2.4	1.1.1.1	0xf686	Standard query (0)	ybb.ne.jp	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:49.140876055 CEST	192.168.2.4	1.1.1.1	0x285	Standard query (0)	groupxlyrics.cn	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:49.205813885 CEST	192.168.2.4	1.1.1.1	0x42dc	Standard query (0)	noos.fr	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:49.361852884 CEST	192.168.2.4	1.1.1.1	0x6f10	Standard query (0)	rosseti.eu	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:49.362286091 CEST	192.168.2.4	1.1.1.1	0x8ac5	Standard query (0)	securesmtp.conveyors.co.uk	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:49.362696886 CEST	192.168.2.4	1.1.1.1	0xa4b5	Standard query (0)	mail.grupodosdemayo.com.pe	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:49.363240004 CEST	192.168.2.4	1.1.1.1	0x4c56	Standard query (0)	optusnet.com.au	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:49.460565090 CEST	192.168.2.4	1.1.1.1	0xc1b7	Standard query (0)	mail.jennjenn.net	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:49.461045027 CEST	192.168.2.4	1.1.1.1	0xcc06	Standard query (0)	radical-resource.co.uk	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:49.550143003 CEST	192.168.2.4	1.1.1.1	0x313	Standard query (0)	telia.com	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:49.550662994 CEST	192.168.2.4	1.1.1.1	0xdc04	Standard query (0)	securesmtp.muscmyanmar.com	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:49.610505104 CEST	192.168.2.4	1.1.1.1	0x5f20	Standard query (0)	smtp.cogeco.ca	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:49.736924887 CEST	192.168.2.4	1.1.1.1	0xc726	Standard query (0)	tianya.cn	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:49.736968994 CEST	192.168.2.4	1.1.1.1	0x37e0	Standard query (0)	comhem-se.mail.protection.outlook.com	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:49.737464905 CEST	192.168.2.4	1.1.1.1	0xac18	Standard query (0)	alt4.aspmx.l.google.com	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:49.737512112 CEST	192.168.2.4	1.1.1.1	0xe8cf	Standard query (0)	secure.thebookbus.org	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:49.812649965 CEST	192.168.2.4	1.1.1.1	0x63fa	Standard query (0)	zilladog.net	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:49.813039064 CEST	192.168.2.4	1.1.1.1	0x4433	Standard query (0)	unhfree.net	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:49.875724077 CEST	192.168.2.4	1.1.1.1	0xe252	Standard query (0)	securesmtp.therogueagency.com	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:49.876563072 CEST	192.168.2.4	1.1.1.1	0x5a03	Standard query (0)	gaelsong.com	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:50.142956972 CEST	192.168.2.4	1.1.1.1	0x2101	Standard query (0)	secure.apgservices.co.uk	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:50.314759016 CEST	192.168.2.4	1.1.1.1	0xf66a	Standard query (0)	qxorpe.com	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:50.315900087 CEST	192.168.2.4	1.1.1.1	0xf175	Standard query (0)	smtp.vodafone.de	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:50.316276073 CEST	192.168.2.4	1.1.1.1	0x5412	Standard query (0)	cantv.net	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:50.374715090 CEST	192.168.2.4	1.1.1.1	0x7a22	Standard query (0)	mail.szef.cn	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:50.374737024 CEST	192.168.2.4	1.1.1.1	0x4c56	Standard query (0)	optusnet.com.au	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:50.408381939 CEST	192.168.2.4	1.1.1.1	0xd464	Standard query (0)	eircom.net	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:50.409149885 CEST	192.168.2.4	1.1.1.1	0xce9f	Standard query (0)	secure.svmcards.co.uk	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:50.457927942 CEST	192.168.2.4	1.1.1.1	0xf28f	Standard query (0)	smtp.frontier.com	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:50.551249981 CEST	192.168.2.4	1.1.1.1	0xe4fb	Standard query (0)	securesmtp.unleashedpremium.com	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:50.551475048 CEST	192.168.2.4	1.1.1.1	0x222a	Standard query (0)	smtp.alunos.ipca.pt	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:50.632303953 CEST	192.168.2.4	1.1.1.1	0xc8b9	Standard query (0)	secure.rwern.com.br	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:50.632725954 CEST	192.168.2.4	1.1.1.1	0xc937	Standard query (0)	secure.jmanagersd.com	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:50.633117914 CEST	192.168.2.4	1.1.1.1	0x2ffd	Standard query (0)	mail.gmbol.cem	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:50.633682013 CEST	192.168.2.4	1.1.1.1	0x53cd	Standard query (0)	securesmtp.superfoods.com.cy	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:50.634131908 CEST	192.168.2.4	1.1.1.1	0xd5b9	Standard query (0)	mail.campus.uniurb.it	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:50.705852985 CEST	192.168.2.4	1.1.1.1	0x1ca	Standard query (0)	e-mds.com	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:50.769849062 CEST	192.168.2.4	1.1.1.1	0x929d	Standard query (0)	aspenfilm.org	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:50.770277977 CEST	192.168.2.4	1.1.1.1	0xba7c	Standard query (0)	stmi.hu	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:50.770668030 CEST	192.168.2.4	1.1.1.1	0x58d9	Standard query (0)	mail.tsn-369.com	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:50.771178007 CEST	192.168.2.4	1.1.1.1	0x6da6	Standard query (0)	smtp.shaw.ca	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:50.862715006 CEST	192.168.2.4	1.1.1.1	0xae80	Standard query (0)	out.542nm0ee35.com	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:50.940254927 CEST	192.168.2.4	1.1.1.1	0xe89a	Standard query (0)	webbep.nl	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:50.940413952 CEST	192.168.2.4	1.1.1.1	0x3bdc	Standard query (0)	smtp.iiseuganeo.cloud	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:50.942012072 CEST	192.168.2.4	1.1.1.1	0x9727	Standard query (0)	smtp.sherwin-williams.com	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:51.035254002 CEST	192.168.2.4	1.1.1.1	0x2a1e	Standard query (0)	smtp.pixell.fr	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:51.036278963 CEST	192.168.2.4	1.1.1.1	0x827	Standard query (0)	out.hurriyet.co	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:51.113584042 CEST	192.168.2.4	1.1.1.1	0xfb67	Standard query (0)	curo.dk	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:51.173196077 CEST	192.168.2.4	1.1.1.1	0xa630	Standard query (0)	pobox.sk	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:51.173763037 CEST	192.168.2.4	1.1.1.1	0x53d5	Standard query (0)	students.bcsdmi.com	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:51.174232960 CEST	192.168.2.4	1.1.1.1	0xba1a	Standard query (0)	mail.goo.ne.jp	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:51.174576998 CEST	192.168.2.4	1.1.1.1	0xa6a3	Standard query (0)	out.web.jp	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:51.255989075 CEST	192.168.2.4	1.1.1.1	0xd877	Standard query (0)	opusradio.com	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:51.334033012 CEST	192.168.2.4	1.1.1.1	0x6f3e	Standard query (0)	securesmtp.nuovaedart.it	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:51.334436893 CEST	192.168.2.4	1.1.1.1	0x4c81	Standard query (0)	xtra.co.nz	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:51.426465034 CEST	192.168.2.4	1.1.1.1	0xae1a	Standard query (0)	out.sunrisecoal.com	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:51.426848888 CEST	192.168.2.4	1.1.1.1	0xab6d	Standard query (0)	out.it.schindler.com	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:51.427213907 CEST	192.168.2.4	1.1.1.1	0xb23	Standard query (0)	mail.wps-sys.com	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:51.427561045 CEST	192.168.2.4	1.1.1.1	0x1382	Standard query (0)	mail.gate9productions.com	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:51.505889893 CEST	192.168.2.4	1.1.1.1	0xc6d	Standard query (0)	secure.evidence-room.net	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:51.517143965 CEST	192.168.2.4	1.1.1.1	0xd0bc	Standard query (0)	secure.kinneone.de	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:51.517731905 CEST	192.168.2.4	1.1.1.1	0x39e0	Standard query (0)	securesmtp.crg390.com	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:51.585213900 CEST	192.168.2.4	1.1.1.1	0xc7e5	Standard query (0)	mail.personalizateya.com	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:51.585534096 CEST	192.168.2.4	1.1.1.1	0xb6cc	Standard query (0)	midi-hits.com	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:51.640358925 CEST	192.168.2.4	1.1.1.1	0xc8b9	Standard query (0)	secure.rwern.com.br	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:51.647670984 CEST	192.168.2.4	1.1.1.1	0x929e	Standard query (0)	zigpropaganda.com.br	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:51.649163961 CEST	192.168.2.4	1.1.1.1	0x16fd	Standard query (0)	mail.domotec.cl	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:51.649445057 CEST	192.168.2.4	1.1.1.1	0xa9d6	Standard query (0)	smtp.fbv.gcc	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:51.726349115 CEST	192.168.2.4	1.1.1.1	0xc3c4	Standard query (0)	out.hiddentalent.org.uk	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:51.734905958 CEST	192.168.2.4	1.1.1.1	0xbd28	Standard query (0)	smtp.commanderlake.net	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:51.735204935 CEST	192.168.2.4	1.1.1.1	0xc3a7	Standard query (0)	mx01.ionos.fr	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:51.735580921 CEST	192.168.2.4	1.1.1.1	0x441f	Standard query (0)	bol.combr	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:51.877893925 CEST	192.168.2.4	1.1.1.1	0xd199	Standard query (0)	smtp.mtaonline.net	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:51.878242016 CEST	192.168.2.4	1.1.1.1	0x655d	Standard query (0)	smtp.3jmporxvku.com	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:51.947207928 CEST	192.168.2.4	1.1.1.1	0x65c8	Standard query (0)	smtp.adam.com.au	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:51.947510958 CEST	192.168.2.4	1.1.1.1	0x15bb	Standard query (0)	telefonica.net	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:51.947779894 CEST	192.168.2.4	1.1.1.1	0x7b7f	Standard query (0)	smtp.houstonis.org	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:51.948045015 CEST	192.168.2.4	1.1.1.1	0x7125	Standard query (0)	secure.kingham.oxon.sch.uk	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:52.030349970 CEST	192.168.2.4	1.1.1.1	0xfc6e	Standard query (0)	smtp.ceuma.com.br	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:52.030690908 CEST	192.168.2.4	1.1.1.1	0x91ed	Standard query (0)	omigosh.com	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:52.030920029 CEST	192.168.2.4	1.1.1.1	0xf66b	Standard query (0)	securesmtp.oceanhotels.net	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:52.031188965 CEST	192.168.2.4	1.1.1.1	0x3d4e	Standard query (0)	ASPMX3.GOOGLEMAIL.COM	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:52.046271086 CEST	192.168.2.4	1.1.1.1	0x2a1e	Standard query (0)	smtp.pixell.fr	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:52.130449057 CEST	192.168.2.4	1.1.1.1	0xdd17	Standard query (0)	moldtechsoftware.com	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:52.130728960 CEST	192.168.2.4	1.1.1.1	0xf3db	Standard query (0)	mx2.ua.fm	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:52.131014109 CEST	192.168.2.4	1.1.1.1	0x4ef6	Standard query (0)	mail.bc-ig.k12.ia.us	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:52.131064892 CEST	192.168.2.4	1.1.1.1	0x317d	Standard query (0)	spool.mail.gandi.net	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:52.233880997 CEST	192.168.2.4	1.1.1.1	0xc17	Standard query (0)	gunchu.co.jp	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:52.233933926 CEST	192.168.2.4	1.1.1.1	0x7542	Standard query (0)	mail.espiritosantoib.co.uk	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:52.332464933 CEST	192.168.2.4	1.1.1.1	0xdd98	Standard query (0)	smtp.primehome.com	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:52.393970966 CEST	192.168.2.4	1.1.1.1	0x740d	Standard query (0)	mail.alindeco.com	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:52.395889997 CEST	192.168.2.4	1.1.1.1	0x3ff0	Standard query (0)	smtp.nb.sympatico.ca	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:52.396552086 CEST	192.168.2.4	1.1.1.1	0x49c5	Standard query (0)	secure.webgirl.com	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:52.396775007 CEST	192.168.2.4	1.1.1.1	0x1c28	Standard query (0)	anarosenberg.com	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:52.477412939 CEST	192.168.2.4	1.1.1.1	0x68d6	Standard query (0)	smtp.bestbasketballshoereview.com	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:52.478480101 CEST	192.168.2.4	1.1.1.1	0x62a7	Standard query (0)	smtp.ziggo.nl	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:52.478555918 CEST	192.168.2.4	1.1.1.1	0x7a09	Standard query (0)	securesmtp.hologic.it	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:52.580369949 CEST	192.168.2.4	1.1.1.1	0x69fc	Standard query (0)	i.softbank.jp	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:52.580646992 CEST	192.168.2.4	1.1.1.1	0x14c3	Standard query (0)	securesmtp.terrace.co.jp	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:52.594610929 CEST	192.168.2.4	1.1.1.1	0x1	Standard query (0)	i.softbank.jp	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:52.641315937 CEST	192.168.2.4	1.1.1.1	0xc8b9	Standard query (0)	secure.rwern.com.br	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:52.705508947 CEST	192.168.2.4	1.1.1.1	0x92bd	Standard query (0)	mx.yandex.net	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:52.705873966 CEST	192.168.2.4	1.1.1.1	0x3ff0	Standard query (0)	secure.ltam.co.uk	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:52.706597090 CEST	192.168.2.4	1.1.1.1	0x1729	Standard query (0)	comcast.com	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:52.707237005 CEST	192.168.2.4	1.1.1.1	0xc51b	Standard query (0)	us-smtp-inbound-2.mimecast.com	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:52.789951086 CEST	192.168.2.4	1.1.1.1	0x59a2	Standard query (0)	smtp.wildwood555.fsnet.co.uk	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:52.882272959 CEST	192.168.2.4	1.1.1.1	0x2cdf	Standard query (0)	mail.i-bionic.com	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:52.883730888 CEST	192.168.2.4	1.1.1.1	0xae5c	Standard query (0)	securesmtp.inter-sign.dk	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:52.964232922 CEST	192.168.2.4	1.1.1.1	0x5778	Standard query (0)	securesmtp.novadan.com.tr	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:52.964693069 CEST	192.168.2.4	1.1.1.1	0x2c7a	Standard query (0)	secure.myfabulousva.com	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:53.113358974 CEST	192.168.2.4	1.1.1.1	0xb62	Standard query (0)	out.dstv.com	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:53.113789082 CEST	192.168.2.4	1.1.1.1	0xff49	Standard query (0)	sky.com	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:53.114165068 CEST	192.168.2.4	1.1.1.1	0x2ec3	Standard query (0)	secure.shootershill.ac.uk	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:53.114738941 CEST	192.168.2.4	1.1.1.1	0x1edf	Standard query (0)	vfe.watchit.com	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:53.207464933 CEST	192.168.2.4	1.1.1.1	0x5726	Standard query (0)	finaccess.mx	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:53.267261982 CEST	192.168.2.4	1.1.1.1	0x5a9a	Standard query (0)	out.ingve.net	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:53.267765045 CEST	192.168.2.4	1.1.1.1	0x17b4	Standard query (0)	teletu.it	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:53.268266916 CEST	192.168.2.4	1.1.1.1	0xcb2a	Standard query (0)	hautesaintonge-fr.mail.protection.outlook.com	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:53.360379934 CEST	192.168.2.4	1.1.1.1	0x39b2	Standard query (0)	out.projectorava.sk	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:53.423373938 CEST	192.168.2.4	1.1.1.1	0xa9d	Standard query (0)	out.perlundpartner.de	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:53.423630953 CEST	192.168.2.4	1.1.1.1	0x6e5	Standard query (0)	mx2.niagahoster.co.id	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:53.520453930 CEST	192.168.2.4	1.1.1.1	0x75e9	Standard query (0)	secure.lionor.fr	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:53.522792101 CEST	192.168.2.4	1.1.1.1	0xa34f	Standard query (0)	bnn.go.id	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:53.523677111 CEST	192.168.2.4	1.1.1.1	0x897f	Standard query (0)	boldin.com.br	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:53.587600946 CEST	192.168.2.4	1.1.1.1	0x14c3	Standard query (0)	securesmtp.terrace.co.jp	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:53.668509007 CEST	192.168.2.4	1.1.1.1	0x8e15	Standard query (0)	mail.clique.uk.com	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:53.740709066 CEST	192.168.2.4	1.1.1.1	0x20a9	Standard query (0)	mxl.mundo-r.com	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:53.741239071 CEST	192.168.2.4	1.1.1.1	0x2b3f	Standard query (0)	secure.walktheroom.com	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:53.741375923 CEST	192.168.2.4	1.1.1.1	0xa217	Standard query (0)	bandpcompanies.com	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:53.832806110 CEST	192.168.2.4	1.1.1.1	0x89ec	Standard query (0)	mail.simail.it	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:53.832954884 CEST	192.168.2.4	1.1.1.1	0x8822	Standard query (0)	securesmtp.iescotesbaixes.org	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:53.925436020 CEST	192.168.2.4	1.1.1.1	0x9a04	Standard query (0)	smtp.iprimus.com.au	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:53.925720930 CEST	192.168.2.4	1.1.1.1	0xfe8f	Standard query (0)	out.leinefelde.org	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:53.980844021 CEST	192.168.2.4	1.1.1.1	0xe111	Standard query (0)	inbound-smtp.us-east-1.amazonaws.com	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:53.983829975 CEST	192.168.2.4	1.1.1.1	0xd08b	Standard query (0)	evolve27.com	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:53.984112978 CEST	192.168.2.4	1.1.1.1	0x8c88	Standard query (0)	openmailbox.org	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:53.984412909 CEST	192.168.2.4	1.1.1.1	0xa9a3	Standard query (0)	sify.com	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:54.070024967 CEST	192.168.2.4	1.1.1.1	0x6a1f	Standard query (0)	securesmtp.sigaint.org	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:54.145348072 CEST	192.168.2.4	1.1.1.1	0x5fee	Standard query (0)	guruku.id	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:54.146037102 CEST	192.168.2.4	1.1.1.1	0x6b97	Standard query (0)	secure.keynet.it	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:54.146303892 CEST	192.168.2.4	1.1.1.1	0xad65	Standard query (0)	mail.lotfibentifour.site11.com	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:54.146724939 CEST	192.168.2.4	1.1.1.1	0x77df	Standard query (0)	mail.geopec.it	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:54.229068995 CEST	192.168.2.4	1.1.1.1	0xa739	Standard query (0)	secure.ruby.ocn.ne.jp	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:54.229444981 CEST	192.168.2.4	1.1.1.1	0x24e8	Standard query (0)	smtp.ae.em-net.ne.jp	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:54.366115093 CEST	192.168.2.4	1.1.1.1	0xc388	Standard query (0)	one.lt	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:54.366771936 CEST	192.168.2.4	1.1.1.1	0xb76	Standard query (0)	mail.lgov.hu	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:54.367436886 CEST	192.168.2.4	1.1.1.1	0x85a5	Standard query (0)	aplprinter.com	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:54.368330956 CEST	192.168.2.4	1.1.1.1	0x4952	Standard query (0)	smtp.allin1solutions.com.pk	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:54.377461910 CEST	192.168.2.4	1.1.1.1	0xcb84	Standard query (0)	ifrance.com	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:54.378513098 CEST	192.168.2.4	1.1.1.1	0xc0c2	Standard query (0)	smtp.yao.com	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:54.501204967 CEST	192.168.2.4	1.1.1.1	0x7bcc	Standard query (0)	securesmtp.zoomecx.com	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:54.501591921 CEST	192.168.2.4	1.1.1.1	0xed9f	Standard query (0)	temporary-mail.net	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:54.526433945 CEST	192.168.2.4	1.1.1.1	0x8f25	Standard query (0)	secure.republicpro.com	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:54.656339884 CEST	192.168.2.4	1.1.1.1	0xc8b9	Standard query (0)	secure.rwern.com.br	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:54.698561907 CEST	192.168.2.4	1.1.1.1	0x250b	Standard query (0)	genexport.mx	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:54.720211029 CEST	192.168.2.4	1.1.1.1	0x58d	Standard query (0)	voytacha.hu	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:54.720587969 CEST	192.168.2.4	1.1.1.1	0xaf75	Standard query (0)	mail.seniorlife.it	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:54.720772982 CEST	192.168.2.4	1.1.1.1	0x3be7	Standard query (0)	smtp.dfwair.net	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:54.725667000 CEST	192.168.2.4	1.1.1.1	0xd1d1	Standard query (0)	smtp.q.com	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:54.787951946 CEST	192.168.2.4	1.1.1.1	0xdb80	Standard query (0)	inboxsky.com	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:54.880237103 CEST	192.168.2.4	1.1.1.1	0x48d9	Standard query (0)	mail.boxercleaning.co.uk	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:54.964301109 CEST	192.168.2.4	1.1.1.1	0x6639	Standard query (0)	secure.lateral.co.tz	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:54.964607000 CEST	192.168.2.4	1.1.1.1	0x84cb	Standard query (0)	smtp.atomicnetworks.eu	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:54.964865923 CEST	192.168.2.4	1.1.1.1	0x7237	Standard query (0)	smtp.sbcompany.net	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:55.039207935 CEST	192.168.2.4	1.1.1.1	0xa213	Standard query (0)	mx1.mirohost.net	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:55.114439011 CEST	192.168.2.4	1.1.1.1	0x63e1	Standard query (0)	securesmtp.apcb.co.th	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:55.114670992 CEST	192.168.2.4	1.1.1.1	0xf5dc	Standard query (0)	tesco.net	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:55.369757891 CEST	192.168.2.4	1.1.1.1	0x61b2	Standard query (0)	pep4teens.de	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:55.370068073 CEST	192.168.2.4	1.1.1.1	0xd6af	Standard query (0)	d69402a.ess.barracudanetworks.com	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:55.370347023 CEST	192.168.2.4	1.1.1.1	0xf647	Standard query (0)	smtp.robertsrose.co.uk	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:55.379857063 CEST	192.168.2.4	1.1.1.1	0xc0c2	Standard query (0)	smtp.yao.com	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:55.443877935 CEST	192.168.2.4	1.1.1.1	0xc343	Standard query (0)	out.h4xx0r.de	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:55.443977118 CEST	192.168.2.4	1.1.1.1	0x8864	Standard query (0)	secure.webrecruit.co.uk	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:55.531703949 CEST	192.168.2.4	1.1.1.1	0x44d9	Standard query (0)	out.actionwise.co.za	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:55.734874964 CEST	192.168.2.4	1.1.1.1	0x28ab	Standard query (0)	fabricanteslac.com.co	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:55.735064983 CEST	192.168.2.4	1.1.1.1	0x9f55	Standard query (0)	smtp.30500.fr	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:55.817864895 CEST	192.168.2.4	1.1.1.1	0xb70b	Standard query (0)	smtp.vianet.ca	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:55.818182945 CEST	192.168.2.4	1.1.1.1	0x8963	Standard query (0)	securesmtp.xala.dk	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:55.980957985 CEST	192.168.2.4	1.1.1.1	0xe25	Standard query (0)	elplan.co	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:55.980957985 CEST	192.168.2.4	1.1.1.1	0xc9d	Standard query (0)	mail.manuplus.co.uk	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:56.152018070 CEST	192.168.2.4	1.1.1.1	0xda87	Standard query (0)	psci.net	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:56.256809950 CEST	192.168.2.4	1.1.1.1	0x4d7f	Standard query (0)	oi.com.br	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:56.257128000 CEST	192.168.2.4	1.1.1.1	0x51c5	Standard query (0)	out.theamazingdipcompany.com	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:56.338329077 CEST	192.168.2.4	1.1.1.1	0xfb90	Standard query (0)	secure.panoramica.co.uk	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:56.389519930 CEST	192.168.2.4	1.1.1.1	0xc0c2	Standard query (0)	smtp.yao.com	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:56.444906950 CEST	192.168.2.4	1.1.1.1	0x88fb	Standard query (0)	infoseek.jp	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:56.445360899 CEST	192.168.2.4	1.1.1.1	0x94d8	Standard query (0)	out.alanatricia.co.uk	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:56.688061953 CEST	192.168.2.4	1.1.1.1	0xd3f2	Standard query (0)	mail2.mail-vert.fr	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:56.688462973 CEST	192.168.2.4	1.1.1.1	0x57d8	Standard query (0)	whitneytx.net	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:56.688695908 CEST	192.168.2.4	1.1.1.1	0xf23a	Standard query (0)	securesmtp.straussdaly.co.za	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:56.688777924 CEST	192.168.2.4	1.1.1.1	0x7b29	Standard query (0)	hannesc.com	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:56.689168930 CEST	192.168.2.4	1.1.1.1	0x95a5	Standard query (0)	mail.studiad.com	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:57.009181976 CEST	192.168.2.4	1.1.1.1	0x65b8	Standard query (0)	acerlormittalsa.com	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:57.009728909 CEST	192.168.2.4	1.1.1.1	0xa372	Standard query (0)	securesmtp.compass-at.com	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:57.010298967 CEST	192.168.2.4	1.1.1.1	0x3159	Standard query (0)	mail.nexgo.de	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:57.066472054 CEST	192.168.2.4	1.1.1.1	0x3726	Standard query (0)	smtp.stearns.com	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:57.067596912 CEST	192.168.2.4	1.1.1.1	0xab66	Standard query (0)	mail.cdonova.mx	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:57.068466902 CEST	192.168.2.4	1.1.1.1	0x16cc	Standard query (0)	mynet.com	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:57.068886042 CEST	192.168.2.4	1.1.1.1	0x2555	Standard query (0)	out.pooleng.it	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:57.298224926 CEST	192.168.2.4	1.1.1.1	0x1584	Standard query (0)	smtp.guadalupe-whiteheadbetingbonus.info	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:57.390952110 CEST	192.168.2.4	1.1.1.1	0x6da3	Standard query (0)	mail.nigge.rs	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:57.391911030 CEST	192.168.2.4	1.1.1.1	0xb887	Standard query (0)	ilfalegname.eu	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:57.391989946 CEST	192.168.2.4	1.1.1.1	0x3fcd	Standard query (0)	smtp.mymts.net	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:57.392291069 CEST	192.168.2.4	1.1.1.1	0xac4a	Standard query (0)	mail.clock.ocn.ne.jp	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:57.467910051 CEST	192.168.2.4	1.1.1.1	0x39cc	Standard query (0)	mail.nukador.xyz	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:57.721991062 CEST	192.168.2.4	1.1.1.1	0xc9fc	Standard query (0)	mail.orvwbc.org	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:57.866065979 CEST	192.168.2.4	1.1.1.1	0x14e6	Standard query (0)	sysram.com	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:57.866374969 CEST	192.168.2.4	1.1.1.1	0xd72f	Standard query (0)	i.softbank.jp	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:57.952675104 CEST	192.168.2.4	1.1.1.1	0x8bde	Standard query (0)	us2.mx2.mailhostbox.com	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:57.953026056 CEST	192.168.2.4	1.1.1.1	0x6e2d	Standard query (0)	mail.bresnan.net	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:57.953331947 CEST	192.168.2.4	1.1.1.1	0x6409	Standard query (0)	secure.therucksack.net	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:57.953684092 CEST	192.168.2.4	1.1.1.1	0xc79e	Standard query (0)	smtp.ugr.es	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:57.953811884 CEST	192.168.2.4	1.1.1.1	0x8e5c	Standard query (0)	wingonline.net	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:58.047720909 CEST	192.168.2.4	1.1.1.1	0x8cdc	Standard query (0)	mail.ism-dortmund.de	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:58.145416021 CEST	192.168.2.4	1.1.1.1	0x823e	Standard query (0)	smtp.sifree.it	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:58.234381914 CEST	192.168.2.4	1.1.1.1	0x48fe	Standard query (0)	smtp.333.net	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:58.390053034 CEST	192.168.2.4	1.1.1.1	0xc0c2	Standard query (0)	smtp.yao.com	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:58.391361952 CEST	192.168.2.4	1.1.1.1	0xb060	Standard query (0)	alt3.aspmx.l.google.com	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:58.391822100 CEST	192.168.2.4	1.1.1.1	0x3200	Standard query (0)	extremeestates.com	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:58.460577011 CEST	192.168.2.4	1.1.1.1	0x7709	Standard query (0)	secure.federiclismo.it	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:58.551860094 CEST	192.168.2.4	1.1.1.1	0x3fd	Standard query (0)	securesmtp.youwinmedia.es	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:58.552167892 CEST	192.168.2.4	1.1.1.1	0xcc66	Standard query (0)	out.backus.it	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:58.552577972 CEST	192.168.2.4	1.1.1.1	0xfc38	Standard query (0)	mail.kpdrm.com.my	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:58.552886963 CEST	192.168.2.4	1.1.1.1	0xc61c	Standard query (0)	taalim.ma	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:58.614835024 CEST	192.168.2.4	1.1.1.1	0x267f	Standard query (0)	mail.iqvia.com	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:58.615405083 CEST	192.168.2.4	1.1.1.1	0x4bf1	Standard query (0)	mail.tipton.st	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:58.912739992 CEST	192.168.2.4	1.1.1.1	0x2f63	Standard query (0)	cjuqnd.com	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:58.913191080 CEST	192.168.2.4	1.1.1.1	0x4b54	Standard query (0)	securesmtp.moore25.karoo.co.uk	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:58.913497925 CEST	192.168.2.4	1.1.1.1	0x563d	Standard query (0)	smtp.casiglianiassicurazioni.it	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:58.914433002 CEST	192.168.2.4	1.1.1.1	0xd7c7	Standard query (0)	mx02.earthlink-vadesecure.net	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:59.129295111 CEST	192.168.2.4	1.1.1.1	0x5f6c	Standard query (0)	secure.jmweb.site	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:59.129427910 CEST	192.168.2.4	1.1.1.1	0xcb6b	Standard query (0)	secure.greenincomeltd.org	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:59.129607916 CEST	192.168.2.4	1.1.1.1	0x6337	Standard query (0)	securesmtp.stefaniacostruzioni.it	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:59.210218906 CEST	192.168.2.4	1.1.1.1	0x25b1	Standard query (0)	mail.atlanticbb.net	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:59.210621119 CEST	192.168.2.4	1.1.1.1	0x66a1	Standard query (0)	gmil.com	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:59.300192118 CEST	192.168.2.4	1.1.1.1	0x5575	Standard query (0)	smtp.secureserver.net	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:59.300192118 CEST	192.168.2.4	1.1.1.1	0xbc80	Standard query (0)	alt2.us.email.fireeyecloud.com	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:59.305892944 CEST	192.168.2.4	1.1.1.1	0x238a	Standard query (0)	mail.dreklam.com	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:59.473690987 CEST	192.168.2.4	1.1.1.1	0xc8ea	Standard query (0)	mailstore1.secureserver.net	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:59.473824024 CEST	192.168.2.4	1.1.1.1	0x30bf	Standard query (0)	out.caremedicsgroup.com	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:59.558908939 CEST	192.168.2.4	1.1.1.1	0x2e50	Standard query (0)	mail.evergreenmetal.it	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:59.562673092 CEST	192.168.2.4	1.1.1.1	0x6359	Standard query (0)	owcu.cn	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:59.641602039 CEST	192.168.2.4	1.1.1.1	0xd904	Standard query (0)	vdn.ca	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:59.642144918 CEST	192.168.2.4	1.1.1.1	0xe96	Standard query (0)	smtp.knid.nl	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:59.642514944 CEST	192.168.2.4	1.1.1.1	0x4ac2	Standard query (0)	nelco.lk	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:59.754282951 CEST	192.168.2.4	1.1.1.1	0x5b36	Standard query (0)	out.aarete.co.uj	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:59.754515886 CEST	192.168.2.4	1.1.1.1	0x3766	Standard query (0)	mail.interdat.co.uk	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:59.828017950 CEST	192.168.2.4	1.1.1.1	0xc750	Standard query (0)	smtp.mvtel.net	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:59.906632900 CEST	192.168.2.4	1.1.1.1	0xfbc3	Standard query (0)	securesmtp.binggeli.dk	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:59.906958103 CEST	192.168.2.4	1.1.1.1	0x1c5e	Standard query (0)	mail.fdgf3.fr	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:59.992835999 CEST	192.168.2.4	1.1.1.1	0xbfd6	Standard query (0)	smtp.edu.xunta.es	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:59.993297100 CEST	192.168.2.4	1.1.1.1	0x3254	Standard query (0)	ltvz38.tank.jp	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:00.100378036 CEST	192.168.2.4	1.1.1.1	0x13d3	Standard query (0)	xmobs.com	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:00.100912094 CEST	192.168.2.4	1.1.1.1	0x8dcf	Standard query (0)	secure.deltapro.com.br	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:00.203687906 CEST	192.168.2.4	1.1.1.1	0x8a03	Standard query (0)	mail.ruzkmooecl.com	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:00.453759909 CEST	192.168.2.4	1.1.1.1	0xcb05	Standard query (0)	smtp.financemoneyonline.in	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:00.454171896 CEST	192.168.2.4	1.1.1.1	0xbdbd	Standard query (0)	out.im2sexy.net	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:00.454945087 CEST	192.168.2.4	1.1.1.1	0xec4f	Standard query (0)	smtp.blackfoot.net	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:00.455230951 CEST	192.168.2.4	1.1.1.1	0xa89d	Standard query (0)	smtp.massofisioterapistaariannalonghi.it	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:00.455516100 CEST	192.168.2.4	1.1.1.1	0x40c4	Standard query (0)	mail.pro-fengenharia.com.br	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:00.455775023 CEST	192.168.2.4	1.1.1.1	0xcc47	Standard query (0)	securesmtp.grandviewschool.ca	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:00.455964088 CEST	192.168.2.4	1.1.1.1	0x6bfd	Standard query (0)	out.aandmsolutions.co.uk	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:00.463795900 CEST	192.168.2.4	1.1.1.1	0xc16c	Standard query (0)	out.francetv.fr	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:00.464452982 CEST	192.168.2.4	1.1.1.1	0x5994	Standard query (0)	mail.scarlet.be	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:00.562561035 CEST	192.168.2.4	1.1.1.1	0x4815	Standard query (0)	securesmtp.webhostranker.com.mx	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:00.563194036 CEST	192.168.2.4	1.1.1.1	0x1d7e	Standard query (0)	out.arh.grampian.scot.nhs.uk	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:00.651720047 CEST	192.168.2.4	1.1.1.1	0x746b	Standard query (0)	secure.alpenshapes.com	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:00.652180910 CEST	192.168.2.4	1.1.1.1	0xabfc	Standard query (0)	securesmtp.iatselocal720.com	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:00.652724028 CEST	192.168.2.4	1.1.1.1	0x6dae	Standard query (0)	mx.armstrong.syn-alias.com	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:00.738451004 CEST	192.168.2.4	1.1.1.1	0x85	Standard query (0)	mail.goodvibesdiving.com	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:00.739047050 CEST	192.168.2.4	1.1.1.1	0x5f99	Standard query (0)	tianya.cn	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:00.739346981 CEST	192.168.2.4	1.1.1.1	0x9bd2	Standard query (0)	mail.planet.nl	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:00.882110119 CEST	192.168.2.4	1.1.1.1	0xa2df	Standard query (0)	access.k12.wv.us	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:00.969129086 CEST	192.168.2.4	1.1.1.1	0xd3c8	Standard query (0)	securesmtp.lokmarket.com	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:01.047382116 CEST	192.168.2.4	1.1.1.1	0x618e	Standard query (0)	walla.com	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:01.048121929 CEST	192.168.2.4	1.1.1.1	0x42f3	Standard query (0)	secure.atloffice.co.uk	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:01.147897005 CEST	192.168.2.4	1.1.1.1	0x6d61	Standard query (0)	nhs.net	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:01.148442030 CEST	192.168.2.4	1.1.1.1	0xcddc	Standard query (0)	out.marocelectronique.com	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:01.204566002 CEST	192.168.2.4	1.1.1.1	0xe61e	Standard query (0)	smtp.skynet.be	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:01.281815052 CEST	192.168.2.4	1.1.1.1	0x5dbf	Standard query (0)	secure.hrad.it	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:01.282314062 CEST	192.168.2.4	1.1.1.1	0x3bb3	Standard query (0)	mail.idea.rs	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:01.363383055 CEST	192.168.2.4	1.1.1.1	0xfe84	Standard query (0)	secure.vansan.com.tr	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:01.364212036 CEST	192.168.2.4	1.1.1.1	0x1ad0	Standard query (0)	cluster6a.us.messagelabs.com	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:01.364237070 CEST	192.168.2.4	1.1.1.1	0xa55a	Standard query (0)	ninjajumper.online	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:01.443393946 CEST	192.168.2.4	1.1.1.1	0x298c	Standard query (0)	ethermail.io	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:01.443713903 CEST	192.168.2.4	1.1.1.1	0x58a	Standard query (0)	passwordtechnology.com	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:01.444004059 CEST	192.168.2.4	1.1.1.1	0xf662	Standard query (0)	ybb.ne.jp	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:01.534470081 CEST	192.168.2.4	1.1.1.1	0xf2a4	Standard query (0)	mail.hambakeradams.co.uk	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:01.613612890 CEST	192.168.2.4	1.1.1.1	0x5421	Standard query (0)	pmk-bd.org	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:01.614211082 CEST	192.168.2.4	1.1.1.1	0x69f5	Standard query (0)	hcmp.co.kr	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:01.614717960 CEST	192.168.2.4	1.1.1.1	0xbc15	Standard query (0)	secure.gitnet.co.za	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:01.614833117 CEST	192.168.2.4	1.1.1.1	0xd0da	Standard query (0)	mail.morrisbb.net	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:01.694473028 CEST	192.168.2.4	1.1.1.1	0x5514	Standard query (0)	netflix.com	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:01.694892883 CEST	192.168.2.4	1.1.1.1	0xe40d	Standard query (0)	xcenda.com	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:01.812871933 CEST	192.168.2.4	1.1.1.1	0xd10a	Standard query (0)	standish.co.uk	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:01.813545942 CEST	192.168.2.4	1.1.1.1	0x9d83	Standard query (0)	is7vikings.org	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:01.814485073 CEST	192.168.2.4	1.1.1.1	0x8dd	Standard query (0)	smtp.thefreelens.com	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:01.864769936 CEST	192.168.2.4	1.1.1.1	0xd119	Standard query (0)	meta.ua	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:01.865088940 CEST	192.168.2.4	1.1.1.1	0xf819	Standard query (0)	securesmtp.ncdainfo.com	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:01.865401030 CEST	192.168.2.4	1.1.1.1	0xa840	Standard query (0)	mx3-prod.edatasource.com	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:02.017762899 CEST	192.168.2.4	1.1.1.1	0x707a	Standard query (0)	mail.optimum.net	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:02.117156982 CEST	192.168.2.4	1.1.1.1	0x53f1	Standard query (0)	mail.taku.nl	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:02.117402077 CEST	192.168.2.4	1.1.1.1	0x9117	Standard query (0)	secure.graphicallsolution.com	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:02.188869953 CEST	192.168.2.4	1.1.1.1	0x2b77	Standard query (0)	smtp.centrum.cz	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:02.188994884 CEST	192.168.2.4	1.1.1.1	0xed0a	Standard query (0)	smtp.ss.em-net.ne.jp	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:02.189260960 CEST	192.168.2.4	1.1.1.1	0xdd44	Standard query (0)	carrascocarservice.com.uy	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:02.189353943 CEST	192.168.2.4	1.1.1.1	0xcdba	Standard query (0)	tele2.fr	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:02.475435972 CEST	192.168.2.4	1.1.1.1	0x89b0	Standard query (0)	out.hityy.com	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:02.555855989 CEST	192.168.2.4	1.1.1.1	0xb3a9	Standard query (0)	mail.cacaepesca.com.br	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:02.651870012 CEST	192.168.2.4	1.1.1.1	0xde43	Standard query (0)	cheapnet.it	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:03.079515934 CEST	192.168.2.4	1.1.1.1	0x762d	Standard query (0)	out.rmsautomacao.com	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:03.079515934 CEST	192.168.2.4	1.1.1.1	0x385	Standard query (0)	alt4.aspmx.l.google.com	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:03.079864979 CEST	192.168.2.4	1.1.1.1	0x7d1	Standard query (0)	smtp.cfa.org.uk	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:03.080679893 CEST	192.168.2.4	1.1.1.1	0x9898	Standard query (0)	pfb-de.mail.protection.outlook.com	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:03.080940962 CEST	192.168.2.4	1.1.1.1	0x6c10	Standard query (0)	mail.cncfg.com	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:03.081762075 CEST	192.168.2.4	1.1.1.1	0x56af	Standard query (0)	centroanagarcia.com	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:03.082079887 CEST	192.168.2.4	1.1.1.1	0xf95c	Standard query (0)	smtp.mynewcaneyisd.org	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:03.082222939 CEST	192.168.2.4	1.1.1.1	0x23a1	Standard query (0)	minister.com	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:03.082422018 CEST	192.168.2.4	1.1.1.1	0xba89	Standard query (0)	mail.iowatelecom.net	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:03.082709074 CEST	192.168.2.4	1.1.1.1	0x8092	Standard query (0)	out.mediacreationagency.com	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:03.127469063 CEST	192.168.2.4	1.1.1.1	0x9903	Standard query (0)	telusplanet.net	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:03.127732992 CEST	192.168.2.4	1.1.1.1	0x6584	Standard query (0)	hilarious.com	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:03.603321075 CEST	192.168.2.4	1.1.1.1	0xcc8b	Standard query (0)	piford.com	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:03.603763103 CEST	192.168.2.4	1.1.1.1	0xfd96	Standard query (0)	secure.psiek.com	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:03.603801012 CEST	192.168.2.4	1.1.1.1	0x85bc	Standard query (0)	unclefluffy.com	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:03.604280949 CEST	192.168.2.4	1.1.1.1	0xc12b	Standard query (0)	tamakoshi.jp	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:03.604600906 CEST	192.168.2.4	1.1.1.1	0x4673	Standard query (0)	powerencry.com	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:03.605246067 CEST	192.168.2.4	1.1.1.1	0xb0cf	Standard query (0)	upcmail.nl	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:03.608508110 CEST	192.168.2.4	1.1.1.1	0xad91	Standard query (0)	mail.10enmeer.nl	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:03.608967066 CEST	192.168.2.4	1.1.1.1	0xe87b	Standard query (0)	smtp.tmsbioscience.com	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:03.609504938 CEST	192.168.2.4	1.1.1.1	0xf091	Standard query (0)	mx.lycos.es.cust.b.hostedemail.com	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:03.609575033 CEST	192.168.2.4	1.1.1.1	0xb3a9	Standard query (0)	mail.cacaepesca.com.br	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:03.609692097 CEST	192.168.2.4	1.1.1.1	0x10c8	Standard query (0)	marketplace.amazon.co.uk	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:03.741216898 CEST	192.168.2.4	1.1.1.1	0x31c1	Standard query (0)	discovernet.net	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:03.876153946 CEST	192.168.2.4	1.1.1.1	0xb7c5	Standard query (0)	secure.scy.cn	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:03.969485044 CEST	192.168.2.4	1.1.1.1	0x5152	Standard query (0)	out.jemersoft.com	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:03.969502926 CEST	192.168.2.4	1.1.1.1	0xbf2a	Standard query (0)	smtp.1und1.de	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:04.598253012 CEST	192.168.2.4	1.1.1.1	0xcc8b	Standard query (0)	piford.com	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:04.598319054 CEST	192.168.2.4	1.1.1.1	0xc12b	Standard query (0)	tamakoshi.jp	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:04.902472973 CEST	192.168.2.4	1.1.1.1	0xb7c5	Standard query (0)	secure.scy.cn	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:05.127871990 CEST	192.168.2.4	1.1.1.1	0x8ed6	Standard query (0)	ocn-fc-r-01.ocn.ad.jp	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:05.129151106 CEST	192.168.2.4	1.1.1.1	0xf155	Standard query (0)	securesmtp.qhbztb.com	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:05.129195929 CEST	192.168.2.4	1.1.1.1	0x8e02	Standard query (0)	out.spdabie2020.onmicrosoft.com	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:05.129455090 CEST	192.168.2.4	1.1.1.1	0xd5c1	Standard query (0)	securesmtp.contarinivini.it	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:05.129689932 CEST	192.168.2.4	1.1.1.1	0x3b2b	Standard query (0)	mail.asbestobv.cl	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:05.129971981 CEST	192.168.2.4	1.1.1.1	0xb592	Standard query (0)	smtp.sturm.de	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:05.130230904 CEST	192.168.2.4	1.1.1.1	0x8336	Standard query (0)	mail.perillup.com	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:05.130898952 CEST	192.168.2.4	1.1.1.1	0xb95b	Standard query (0)	mail.continentalrecords.co.uk	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:05.131261110 CEST	192.168.2.4	1.1.1.1	0xd2cc	Standard query (0)	smtp.hccnet.nl	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:05.499682903 CEST	192.168.2.4	1.1.1.1	0xfd93	Standard query (0)	smtp.jatengpintar.id	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:05.584969044 CEST	192.168.2.4	1.1.1.1	0xd23a	Standard query (0)	districtprinting.com	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:05.585967064 CEST	192.168.2.4	1.1.1.1	0xffde	Standard query (0)	out.microgen.co.uk	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:05.661616087 CEST	192.168.2.4	1.1.1.1	0x3c72	Standard query (0)	out.missteenbaguio.org	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:05.662278891 CEST	192.168.2.4	1.1.1.1	0xb340	Standard query (0)	out.myspacekills.com	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:05.662724972 CEST	192.168.2.4	1.1.1.1	0xbcb6	Standard query (0)	smtp.johanneswolf.co.uk	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:05.663295984 CEST	192.168.2.4	1.1.1.1	0x1150	Standard query (0)	securesmtp.ensba.fr	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:05.737083912 CEST	192.168.2.4	1.1.1.1	0x7970	Standard query (0)	securesmtp.webgirl.com	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:05.737910032 CEST	192.168.2.4	1.1.1.1	0x9a0f	Standard query (0)	out.dream.com	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:05.820624113 CEST	192.168.2.4	1.1.1.1	0x5fc0	Standard query (0)	secure.ozelcenazehizmetlerim.com	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:05.821387053 CEST	192.168.2.4	1.1.1.1	0x2f33	Standard query (0)	smtp.cadcom.net	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:05.908890009 CEST	192.168.2.4	1.1.1.1	0xb7c5	Standard query (0)	secure.scy.cn	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:05.937501907 CEST	192.168.2.4	1.1.1.1	0x62fc	Standard query (0)	telemedbr.com.br	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:05.937580109 CEST	192.168.2.4	1.1.1.1	0x71a3	Standard query (0)	out.co.uk	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:05.992264032 CEST	192.168.2.4	1.1.1.1	0xecc7	Standard query (0)	secure.libre.fr	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:05.992578030 CEST	192.168.2.4	1.1.1.1	0xcb85	Standard query (0)	out.gspainters.com.au	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:06.254962921 CEST	192.168.2.4	1.1.1.1	0x59fb	Standard query (0)	out.delusionmfg.com	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:06.255808115 CEST	192.168.2.4	1.1.1.1	0x764f	Standard query (0)	marketplace.amazon.de	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:06.256089926 CEST	192.168.2.4	1.1.1.1	0xe3c8	Standard query (0)	softbank.ne.jp	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:06.256767035 CEST	192.168.2.4	1.1.1.1	0xf50	Standard query (0)	mx1.mail.ovh.net	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:06.257028103 CEST	192.168.2.4	1.1.1.1	0xadb3	Standard query (0)	saarbourgdesign-de.mail.protection.outlook.com	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:06.257272005 CEST	192.168.2.4	1.1.1.1	0xb172	Standard query (0)	secure.liangruan.com	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:06.257527113 CEST	192.168.2.4	1.1.1.1	0xa0cf	Standard query (0)	out.rpmphoto.co.uk	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:06.329446077 CEST	192.168.2.4	1.1.1.1	0xf2d2	Standard query (0)	swbell.net	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:06.422509909 CEST	192.168.2.4	1.1.1.1	0xe195	Standard query (0)	secure.de.de	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:06.422821999 CEST	192.168.2.4	1.1.1.1	0x7aea	Standard query (0)	seanet.ro	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:06.422951937 CEST	192.168.2.4	1.1.1.1	0x9e7	Standard query (0)	hackveda.in	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:06.652270079 CEST	192.168.2.4	1.1.1.1	0x71e7	Standard query (0)	mail.thevillacollection.co.uk	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:06.652590036 CEST	192.168.2.4	1.1.1.1	0x403	Standard query (0)	mail.movistar.es	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:06.656539917 CEST	192.168.2.4	1.1.1.1	0x6a20	Standard query (0)	persianmail.net	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:06.656780005 CEST	192.168.2.4	1.1.1.1	0x8f88	Standard query (0)	mx1-dk.centerasecurity.dk	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:06.750307083 CEST	192.168.2.4	1.1.1.1	0x4304	Standard query (0)	smtp.grupoondas.com.br	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:06.805322886 CEST	192.168.2.4	1.1.1.1	0xd6cd	Standard query (0)	smtp.chclzq.com	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:06.805679083 CEST	192.168.2.4	1.1.1.1	0xe329	Standard query (0)	mail.universitadipavia.it	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:06.897555113 CEST	192.168.2.4	1.1.1.1	0x9898	Standard query (0)	secure.banklemi.co.il	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:06.897867918 CEST	192.168.2.4	1.1.1.1	0x57a8	Standard query (0)	out.ecotec.org.uk	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:06.898145914 CEST	192.168.2.4	1.1.1.1	0x8f1f	Standard query (0)	out.escot.ma	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:06.985524893 CEST	192.168.2.4	1.1.1.1	0x8c9f	Standard query (0)	iec.grupo-empresarial.net	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:06.985846996 CEST	192.168.2.4	1.1.1.1	0xa3bd	Standard query (0)	secure.daydream.tm.fr	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:07.057210922 CEST	192.168.2.4	1.1.1.1	0x6a1e	Standard query (0)	secure.37.tr	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:07.057497025 CEST	192.168.2.4	1.1.1.1	0x4df9	Standard query (0)	mosblech-brill.de	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:07.181924105 CEST	192.168.2.4	1.1.1.1	0xa515	Standard query (0)	liebens.co.za	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:07.182207108 CEST	192.168.2.4	1.1.1.1	0x556c	Standard query (0)	creativesalem.com	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:07.313013077 CEST	192.168.2.4	1.1.1.1	0x7f40	Standard query (0)	out.ffwushu.fr	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:07.313460112 CEST	192.168.2.4	1.1.1.1	0x957d	Standard query (0)	smtp.sasinformatica.it	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:07.393843889 CEST	192.168.2.4	1.1.1.1	0xf2be	Standard query (0)	mail.laradio1045.com	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:07.394293070 CEST	192.168.2.4	1.1.1.1	0x4569	Standard query (0)	smtp.netsync.net	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:07.394663095 CEST	192.168.2.4	1.1.1.1	0x99ca	Standard query (0)	mail.dk	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:07.475537062 CEST	192.168.2.4	1.1.1.1	0xf636	Standard query (0)	modulonet.fr	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:07.475749016 CEST	192.168.2.4	1.1.1.1	0x5cb0	Standard query (0)	securesmtp.liberalarts.productions	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:07.475873947 CEST	192.168.2.4	1.1.1.1	0xf0b9	Standard query (0)	mail.abusedwoman.org	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:07.476217985 CEST	192.168.2.4	1.1.1.1	0x2967	Standard query (0)	mail.britconsult.com.br	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:07.476567984 CEST	192.168.2.4	1.1.1.1	0xe39c	Standard query (0)	4tcontratistas.pe	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:07.549881935 CEST	192.168.2.4	1.1.1.1	0x551	Standard query (0)	mailspirit.info	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:07.550298929 CEST	192.168.2.4	1.1.1.1	0x46c0	Standard query (0)	out.starsandstripesmgmt.co	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:07.550784111 CEST	192.168.2.4	1.1.1.1	0x6b8b	Standard query (0)	out.champagneconstructioninc.com	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:07.551244974 CEST	192.168.2.4	1.1.1.1	0x7934	Standard query (0)	mail.westmorelandtransit.com	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:07.551453114 CEST	192.168.2.4	1.1.1.1	0x5b19	Standard query (0)	out.nicolehatley.com	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:07.724047899 CEST	192.168.2.4	1.1.1.1	0x6a2	Standard query (0)	securesmtp.aussieadrenaline.com	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:07.724601030 CEST	192.168.2.4	1.1.1.1	0xd0bd	Standard query (0)	out.netntt.fr	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:07.724893093 CEST	192.168.2.4	1.1.1.1	0xcadf	Standard query (0)	sprintpcs.com	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:08.277066946 CEST	192.168.2.4	1.1.1.1	0x4a22	Standard query (0)	i.softbank.jp	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:08.306977987 CEST	192.168.2.4	1.1.1.1	0xc415	Standard query (0)	out.supereva.it	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:08.322781086 CEST	192.168.2.4	1.1.1.1	0xfd1c	Standard query (0)	mail.physiqueprideosaka.com	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:08.363987923 CEST	192.168.2.4	1.1.1.1	0xb2fe	Standard query (0)	secure.ccdis1.org	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:08.375957012 CEST	192.168.2.4	1.1.1.1	0x8e92	Standard query (0)	out.robertwalkerphotographer.biz	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:08.376148939 CEST	192.168.2.4	1.1.1.1	0x908e	Standard query (0)	out.etu.upmc.fr	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:08.376254082 CEST	192.168.2.4	1.1.1.1	0x7f40	Standard query (0)	out.ffwushu.fr	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:08.376419067 CEST	192.168.2.4	1.1.1.1	0xf181	Standard query (0)	newhorizonadventures.net	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:08.376595020 CEST	192.168.2.4	1.1.1.1	0x2e05	Standard query (0)	smtp.mowisp.net	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:08.377394915 CEST	192.168.2.4	1.1.1.1	0xe0a2	Standard query (0)	mail.diamant-eventservice.de	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:08.377830982 CEST	192.168.2.4	1.1.1.1	0x8e42	Standard query (0)	secure.otto-oppermann.de	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:08.378083944 CEST	192.168.2.4	1.1.1.1	0x44c3	Standard query (0)	mail.vivaconstrucoes.com.br	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:08.378103018 CEST	192.168.2.4	1.1.1.1	0x6873	Standard query (0)	out.pharmacie-annecy-74.fr	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:08.397248983 CEST	192.168.2.4	1.1.1.1	0x93ba	Standard query (0)	secure.cfb.de	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:08.398046970 CEST	192.168.2.4	1.1.1.1	0x90ee	Standard query (0)	smtpav2.hosteam.fr	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:08.431483030 CEST	192.168.2.4	1.1.1.1	0x109b	Standard query (0)	smtp.cm-tresura.ch	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:08.442841053 CEST	192.168.2.4	1.1.1.1	0xa0bc	Standard query (0)	kurnaz.com.tr	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:08.589258909 CEST	192.168.2.4	1.1.1.1	0xae74	Standard query (0)	xsp.mx	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:08.753670931 CEST	192.168.2.4	1.1.1.1	0xd8d7	Standard query (0)	mdc-west.mx.a.cloudfilter.net	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:08.754380941 CEST	192.168.2.4	1.1.1.1	0xb84d	Standard query (0)	secure.hrpvjeyou.com	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:08.861897945 CEST	192.168.2.4	1.1.1.1	0xcf25	Standard query (0)	ukraves.co.uk	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:08.862334013 CEST	192.168.2.4	1.1.1.1	0x79e0	Standard query (0)	telkomsa.net	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:08.862870932 CEST	192.168.2.4	1.1.1.1	0x605a	Standard query (0)	smtp.hypersec.com.br	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:08.863210917 CEST	192.168.2.4	1.1.1.1	0x76f6	Standard query (0)	mail.uwaterloo.ca	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:09.080094099 CEST	192.168.2.4	1.1.1.1	0x56a7	Standard query (0)	securesmtp.mmdfdmf.sdfdsfds	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:09.080358028 CEST	192.168.2.4	1.1.1.1	0x22e3	Standard query (0)	smtp.online.nl	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:09.080446959 CEST	192.168.2.4	1.1.1.1	0x3992	Standard query (0)	securesmtp.ttnonferrous.co.uk	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:09.080724955 CEST	192.168.2.4	1.1.1.1	0x8d17	Standard query (0)	mail.veritech.mn	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:09.080866098 CEST	192.168.2.4	1.1.1.1	0xfdfb	Standard query (0)	pandawajayasteel.co.id	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:09.081399918 CEST	192.168.2.4	1.1.1.1	0xb47b	Standard query (0)	mx02.5ax.org	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:09.157876015 CEST	192.168.2.4	1.1.1.1	0x726d	Standard query (0)	securesmtp.hpsd.school	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:09.158171892 CEST	192.168.2.4	1.1.1.1	0x6091	Standard query (0)	myway.com	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:09.158425093 CEST	192.168.2.4	1.1.1.1	0x2599	Standard query (0)	mail.toidymat.com	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:09.158675909 CEST	192.168.2.4	1.1.1.1	0xaf4a	Standard query (0)	mail.qarea.com	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:09.238661051 CEST	192.168.2.4	1.1.1.1	0x867	Standard query (0)	secure.h9cgeu4qd4.com	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:09.238770008 CEST	192.168.2.4	1.1.1.1	0x3f39	Standard query (0)	dr.com	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:09.239016056 CEST	192.168.2.4	1.1.1.1	0x971b	Standard query (0)	securesmtp.asketutors.com	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:09.320472956 CEST	192.168.2.4	1.1.1.1	0x40fe	Standard query (0)	smtp.reach-suppport.co.uk	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:09.396641016 CEST	192.168.2.4	1.1.1.1	0x7f40	Standard query (0)	out.ffwushu.fr	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:09.470366955 CEST	192.168.2.4	1.1.1.1	0x1b80	Standard query (0)	sicsacperu.net	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:09.471647024 CEST	192.168.2.4	1.1.1.1	0xa755	Standard query (0)	secure.lutheran-hosp.com	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:09.472090006 CEST	192.168.2.4	1.1.1.1	0xde29	Standard query (0)	smtp.agenziarecasa.it	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:09.649352074 CEST	192.168.2.4	1.1.1.1	0x360c	Standard query (0)	brtph7ee.bnr.ca	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:09.650305986 CEST	192.168.2.4	1.1.1.1	0x19ba	Standard query (0)	smtp.uni-greifswald.de	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:09.743094921 CEST	192.168.2.4	1.1.1.1	0xf9e4	Standard query (0)	out.rj-architecture.fr	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:09.743920088 CEST	192.168.2.4	1.1.1.1	0x447d	Standard query (0)	smtp.theboobyhatch.org	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:09.744777918 CEST	192.168.2.4	1.1.1.1	0xbfc2	Standard query (0)	tbcevents.pt	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:09.768501997 CEST	192.168.2.4	1.1.1.1	0x9e73	Standard query (0)	wyrral.com	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:09.768687010 CEST	192.168.2.4	1.1.1.1	0xa14a	Standard query (0)	icrservices.com	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:09.894721031 CEST	192.168.2.4	1.1.1.1	0xf381	Standard query (0)	mail.tech181.com	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:09.895261049 CEST	192.168.2.4	1.1.1.1	0x610a	Standard query (0)	smtp.jewsforjesus.org.uk	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:09.895365000 CEST	192.168.2.4	1.1.1.1	0xd0b9	Standard query (0)	mail.mpeekel.nl	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:09.895857096 CEST	192.168.2.4	1.1.1.1	0xd61b	Standard query (0)	plues.co.jp	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:09.960848093 CEST	192.168.2.4	1.1.1.1	0x3cfc	Standard query (0)	smtp.iprimus.com.au	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:10.052376032 CEST	192.168.2.4	1.1.1.1	0x1d84	Standard query (0)	arranz.net	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:10.078054905 CEST	192.168.2.4	1.1.1.1	0xfdfb	Standard query (0)	pandawajayasteel.co.id	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:10.127928019 CEST	192.168.2.4	1.1.1.1	0x322e	Standard query (0)	site1.smtp.exch580.serverdata.net	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:10.128384113 CEST	192.168.2.4	1.1.1.1	0xe073	Standard query (0)	smtp.singnet.com.sg	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:10.128676891 CEST	192.168.2.4	1.1.1.1	0x498e	Standard query (0)	lunata.in	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:10.212311983 CEST	192.168.2.4	1.1.1.1	0x1800	Standard query (0)	mail.d1.dion.ne.jp	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:10.212702990 CEST	192.168.2.4	1.1.1.1	0xa8a6	Standard query (0)	agrisharing.com	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:10.277156115 CEST	192.168.2.4	1.1.1.1	0x61f0	Standard query (0)	out.nento.com	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:10.381499052 CEST	192.168.2.4	1.1.1.1	0x21cd	Standard query (0)	mail.bdboxoffice.com	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:10.473850012 CEST	192.168.2.4	1.1.1.1	0xb2a1	Standard query (0)	out.macanders.fr	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:10.474577904 CEST	192.168.2.4	1.1.1.1	0xe976	Standard query (0)	mail.bitcorecoin.com	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:10.956063986 CEST	192.168.2.4	1.1.1.1	0xaa4	Standard query (0)	nate.com	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:10.956286907 CEST	192.168.2.4	1.1.1.1	0x6363	Standard query (0)	mail.carstuning.com	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:10.960206985 CEST	192.168.2.4	1.1.1.1	0x8729	Standard query (0)	yaho.de	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:10.960515976 CEST	192.168.2.4	1.1.1.1	0xd0b1	Standard query (0)	mail.octamais.com.br	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:10.960788012 CEST	192.168.2.4	1.1.1.1	0x56f7	Standard query (0)	mail.best.net.pl	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:10.961354971 CEST	192.168.2.4	1.1.1.1	0x2a1b	Standard query (0)	jasmine.ocn.ne.jp	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:10.962599039 CEST	192.168.2.4	1.1.1.1	0x4ada	Standard query (0)	mail.maderasanblas.com.ar	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:11.082640886 CEST	192.168.2.4	1.1.1.1	0xa6f5	Standard query (0)	citrus.ocn.ne.jp	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:11.380963087 CEST	192.168.2.4	1.1.1.1	0x5b8d	Standard query (0)	secure.juanaspagodas.com	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:11.381325960 CEST	192.168.2.4	1.1.1.1	0xd388	Standard query (0)	smtp.christinapeace.com	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:11.381635904 CEST	192.168.2.4	1.1.1.1	0xa33d	Standard query (0)	ybb.ne.jp	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:11.381920099 CEST	192.168.2.4	1.1.1.1	0x441e	Standard query (0)	mail.chincherini.com	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:11.657253981 CEST	192.168.2.4	1.1.1.1	0x69f3	Standard query (0)	_dc-mx.374b7b1c2704.ssbresidence.com	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:11.657572985 CEST	192.168.2.4	1.1.1.1	0xeb0b	Standard query (0)	smtp.figueroa-james.com	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:11.657634020 CEST	192.168.2.4	1.1.1.1	0x76d1	Standard query (0)	out.avluk.co.uk	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:11.730403900 CEST	192.168.2.4	1.1.1.1	0xdde5	Standard query (0)	out.ancrd.com	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:11.819488049 CEST	192.168.2.4	1.1.1.1	0x5ef5	Standard query (0)	secure.expertbuyer.co.uk	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:11.819848061 CEST	192.168.2.4	1.1.1.1	0xd8d4	Standard query (0)	ltmcis.ro	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:11.820075035 CEST	192.168.2.4	1.1.1.1	0xb60e	Standard query (0)	securesmtp.honget.dk	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:11.967804909 CEST	192.168.2.4	1.1.1.1	0xd0b1	Standard query (0)	mail.octamais.com.br	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:11.990957975 CEST	192.168.2.4	1.1.1.1	0x6a0	Standard query (0)	smtp.telecapri.it	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:12.083420038 CEST	192.168.2.4	1.1.1.1	0x6216	Standard query (0)	secure.mathes-family.de	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:12.083722115 CEST	192.168.2.4	1.1.1.1	0xbc1b	Standard query (0)	smtp.stonewall.org.uk	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:12.083981991 CEST	192.168.2.4	1.1.1.1	0x569d	Standard query (0)	mail.friesenkrone.de	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:12.084238052 CEST	192.168.2.4	1.1.1.1	0x218c	Standard query (0)	smtp.cs.com	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:12.174225092 CEST	192.168.2.4	1.1.1.1	0x6726	Standard query (0)	grupokervo.com.mx	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:12.174448013 CEST	192.168.2.4	1.1.1.1	0x8eed	Standard query (0)	mail.reverberations.co.uk	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:12.174746037 CEST	192.168.2.4	1.1.1.1	0xee36	Standard query (0)	unno.ca	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:12.516305923 CEST	192.168.2.4	1.1.1.1	0x8d98	Standard query (0)	smtp.projekto.it	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:12.516666889 CEST	192.168.2.4	1.1.1.1	0xf8df	Standard query (0)	out.dnapr.co	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:12.516974926 CEST	192.168.2.4	1.1.1.1	0x3f88	Standard query (0)	mail.mckesson.com	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:12.609052896 CEST	192.168.2.4	1.1.1.1	0x6775	Standard query (0)	securesmtp.jungclaus.dk	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:12.609396935 CEST	192.168.2.4	1.1.1.1	0xf7d0	Standard query (0)	mail.fabn.net	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:12.609756947 CEST	192.168.2.4	1.1.1.1	0x30b3	Standard query (0)	mx.abcnetworkingu.pl	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:12.703557014 CEST	192.168.2.4	1.1.1.1	0xa2ca	Standard query (0)	out.kalaheoschool.k	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:12.704679012 CEST	192.168.2.4	1.1.1.1	0x8af8	Standard query (0)	securesmtp.mybce.catholic.com.au	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:12.705251932 CEST	192.168.2.4	1.1.1.1	0x9265	Standard query (0)	smtp.euroaffiliati.com	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:12.705693960 CEST	192.168.2.4	1.1.1.1	0xd40	Standard query (0)	room.ocn.ne.jp	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:12.705827951 CEST	192.168.2.4	1.1.1.1	0xfc54	Standard query (0)	mail.kanwhizztimes.com	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:12.706136942 CEST	192.168.2.4	1.1.1.1	0x236e	Standard query (0)	smtp.infonie.fr	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:12.718358040 CEST	192.168.2.4	1.1.1.1	0x1	Standard query (0)	mail.kanwhizztimes.com	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:12.808804035 CEST	192.168.2.4	1.1.1.1	0x1a97	Standard query (0)	cityoflondonschool.org.uk	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:12.808857918 CEST	192.168.2.4	1.1.1.1	0xf7ce	Standard query (0)	securesmtp.techgen.mx	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:12.877352953 CEST	192.168.2.4	1.1.1.1	0x7451	Standard query (0)	smtp.bex.net	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:12.878101110 CEST	192.168.2.4	1.1.1.1	0x1426	Standard query (0)	mail.abkronen.dk	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:12.878438950 CEST	192.168.2.4	1.1.1.1	0x99ed	Standard query (0)	tmr.com.au	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:12.969917059 CEST	192.168.2.4	1.1.1.1	0xd0b1	Standard query (0)	mail.octamais.com.br	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:13.050021887 CEST	192.168.2.4	1.1.1.1	0x1227	Standard query (0)	newcastle.ac.uk	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:13.272440910 CEST	192.168.2.4	1.1.1.1	0xa2fb	Standard query (0)	mail.kota.pl.us	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:13.272735119 CEST	192.168.2.4	1.1.1.1	0x6b86	Standard query (0)	smtp.shaw.ca	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:13.272965908 CEST	192.168.2.4	1.1.1.1	0xefd9	Standard query (0)	smtp.proctor.net	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:13.273061037 CEST	192.168.2.4	1.1.1.1	0xe90b	Standard query (0)	mail.mencucci.it	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:13.382637024 CEST	192.168.2.4	1.1.1.1	0xc5f4	Standard query (0)	secure.mhivwacd.com	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:13.516412973 CEST	192.168.2.4	1.1.1.1	0x840f	Standard query (0)	mail.ennergia.com.br	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:13.755244017 CEST	192.168.2.4	1.1.1.1	0xc3bf	Standard query (0)	primataeletronica.com.br	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:13.755373955 CEST	192.168.2.4	1.1.1.1	0xd278	Standard query (0)	secure.webflink.de	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:13.914442062 CEST	192.168.2.4	1.1.1.1	0x37a5	Standard query (0)	mail.courts.state.va.us	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:14.010663033 CEST	192.168.2.4	1.1.1.1	0xc16e	Standard query (0)	aspmx2.googlemail.com	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:14.116548061 CEST	192.168.2.4	1.1.1.1	0xa106	Standard query (0)	mx01.ionos.de	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:14.116789103 CEST	192.168.2.4	1.1.1.1	0xe19b	Standard query (0)	smtp.primeportugaltours.pt	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:14.159414053 CEST	192.168.2.4	1.1.1.1	0xa0e	Standard query (0)	noos.fr	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:14.160415888 CEST	192.168.2.4	1.1.1.1	0x6997	Standard query (0)	jingdong1212.cn	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:14.283499002 CEST	192.168.2.4	1.1.1.1	0x456f	Standard query (0)	smtp.azet.sk	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:14.317455053 CEST	192.168.2.4	1.1.1.1	0xa6e9	Standard query (0)	smtp.clear.net	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:14.473042965 CEST	192.168.2.4	1.1.1.1	0x7965	Standard query (0)	mail.getitatglobal.co.uk	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:14.473505974 CEST	192.168.2.4	1.1.1.1	0x8383	Standard query (0)	profimarkt.pl	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:14.473823071 CEST	192.168.2.4	1.1.1.1	0xd6c6	Standard query (0)	mail.esh3.cf	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:14.510610104 CEST	192.168.2.4	1.1.1.1	0xb821	Standard query (0)	mail.bg	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:14.650377035 CEST	192.168.2.4	1.1.1.1	0xb78c	Standard query (0)	smtp.unwired.com.au	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:14.983350992 CEST	192.168.2.4	1.1.1.1	0xd0b1	Standard query (0)	mail.octamais.com.br	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:15.119657040 CEST	192.168.2.4	1.1.1.1	0x8bbc	Standard query (0)	tele2.at	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:15.194214106 CEST	192.168.2.4	1.1.1.1	0xb99c	Standard query (0)	skilltank.de	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:15.194474936 CEST	192.168.2.4	1.1.1.1	0x5c43	Standard query (0)	telefonica.net	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:15.351417065 CEST	192.168.2.4	1.1.1.1	0xaf05	Standard query (0)	secure.servitelsa.cl	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:15.352092028 CEST	192.168.2.4	1.1.1.1	0xd2f8	Standard query (0)	mail.arabellacountryhouse.com.au	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:15.524281979 CEST	192.168.2.4	1.1.1.1	0xb988	Standard query (0)	out.pitti.de	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:15.641396046 CEST	192.168.2.4	1.1.1.1	0x833f	Standard query (0)	securesmtp.itw.com	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:15.641396046 CEST	192.168.2.4	1.1.1.1	0x1939	Standard query (0)	smtp.highland.net	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:15.641736984 CEST	192.168.2.4	1.1.1.1	0xf8f4	Standard query (0)	grupoartplus.com.br	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:15.658217907 CEST	192.168.2.4	1.1.1.1	0xd805	Standard query (0)	rhine.is.ed.ac.uk	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:15.658643961 CEST	192.168.2.4	1.1.1.1	0x45d	Standard query (0)	te.net.ua	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:15.671725988 CEST	192.168.2.4	1.1.1.1	0x6512	Standard query (0)	smtp.rendercube.co.uk	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:15.736660957 CEST	192.168.2.4	1.1.1.1	0x2895	Standard query (0)	smtp.flyingtigeritalia.com	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:15.736680984 CEST	192.168.2.4	1.1.1.1	0x6dea	Standard query (0)	securesmtp.posthaus.com.br	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:15.814205885 CEST	192.168.2.4	1.1.1.1	0xb662	Standard query (0)	smtp.ezweb.ne.jp	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:15.883050919 CEST	192.168.2.4	1.1.1.1	0xb094	Standard query (0)	wadoo.co.jp	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:15.883419037 CEST	192.168.2.4	1.1.1.1	0xc449	Standard query (0)	eu-smtp-inbound-2.mimecast.com	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:15.883711100 CEST	192.168.2.4	1.1.1.1	0xd596	Standard query (0)	smtp.vestigium.net	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:15.883991957 CEST	192.168.2.4	1.1.1.1	0x3c79	Standard query (0)	mail.danfoss-bauer.de	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:15.974030018 CEST	192.168.2.4	1.1.1.1	0xf9b3	Standard query (0)	mail.professionalneon.com	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:16.093628883 CEST	192.168.2.4	1.1.1.1	0x23b1	Standard query (0)	out.frequencycoffee.co	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:16.093949080 CEST	192.168.2.4	1.1.1.1	0xcaf9	Standard query (0)	upcmail.hu	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:16.094237089 CEST	192.168.2.4	1.1.1.1	0xcc37	Standard query (0)	mx3.pub.mailpod8-cph3.one.com	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:16.094494104 CEST	192.168.2.4	1.1.1.1	0xaa5b	Standard query (0)	mail.rcn.com	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:16.156341076 CEST	192.168.2.4	1.1.1.1	0xc4b9	Standard query (0)	kosmetika-pro.in.ua	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:16.163921118 CEST	192.168.2.4	1.1.1.1	0x9b20	Standard query (0)	securesmtp.wmsolicitors.com	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:16.333570004 CEST	192.168.2.4	1.1.1.1	0xb7eb	Standard query (0)	securesmtp.amavir.es	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:16.336210966 CEST	192.168.2.4	1.1.1.1	0x5a05	Standard query (0)	peoplepc.com	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:16.531651020 CEST	192.168.2.4	1.1.1.1	0xc276	Standard query (0)	out.apost.plala.or.jp	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:16.532731056 CEST	192.168.2.4	1.1.1.1	0x68e0	Standard query (0)	mail.rub.de	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:16.781975985 CEST	192.168.2.4	1.1.1.1	0x1a33	Standard query (0)	d333211.b.ess.de.barracudanetworks.com	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:16.782157898 CEST	192.168.2.4	1.1.1.1	0x1c4d	Standard query (0)	securesmtp.tjmg.jus.br	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:16.782531023 CEST	192.168.2.4	1.1.1.1	0x4a54	Standard query (0)	mail.tanahbumbukab.go.id	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:16.861884117 CEST	192.168.2.4	1.1.1.1	0x4bde	Standard query (0)	ypa-ltd.co.uk	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:17.022160053 CEST	192.168.2.4	1.1.1.1	0xa788	Standard query (0)	ottawa.ca	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:17.022197962 CEST	192.168.2.4	1.1.1.1	0x9f0a	Standard query (0)	alt2.aspmx.l.google.com	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:17.210222960 CEST	192.168.2.4	1.1.1.1	0xaab9	Standard query (0)	mx2.nz.smxemail.com	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:17.298953056 CEST	192.168.2.4	1.1.1.1	0x9e82	Standard query (0)	out.accesosdemadrid.es	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:17.299447060 CEST	192.168.2.4	1.1.1.1	0x2f1f	Standard query (0)	mail.leonardo.it	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:17.453346968 CEST	192.168.2.4	1.1.1.1	0x1fb5	Standard query (0)	smtp.grupodiestra.com	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:17.454246998 CEST	192.168.2.4	1.1.1.1	0xd6a2	Standard query (0)	hcmp.co.kr	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:17.454849958 CEST	192.168.2.4	1.1.1.1	0x97ed	Standard query (0)	mail.geopec.it	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:17.572809935 CEST	192.168.2.4	1.1.1.1	0x1272	Standard query (0)	smtp.melitoitalia.it	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:17.573340893 CEST	192.168.2.4	1.1.1.1	0xf37f	Standard query (0)	secure.chambershotel.com	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:17.828402042 CEST	192.168.2.4	1.1.1.1	0xcb89	Standard query (0)	mail.myrigs.fr	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:17.876971960 CEST	192.168.2.4	1.1.1.1	0x1edb	Standard query (0)	secure.davestrus.com	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:17.877396107 CEST	192.168.2.4	1.1.1.1	0x94ab	Standard query (0)	smtp.marquette.com	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:17.878422976 CEST	192.168.2.4	1.1.1.1	0xfc3b	Standard query (0)	smtp.hart.ca.k12.us	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:18.016973019 CEST	192.168.2.4	1.1.1.1	0x4aa4	Standard query (0)	smtp.nwytg.net	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:18.277395964 CEST	192.168.2.4	1.1.1.1	0xee76	Standard query (0)	mail.tomsawyer.org.uk	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:18.277875900 CEST	192.168.2.4	1.1.1.1	0xd055	Standard query (0)	out.seripap.com	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:18.281234980 CEST	192.168.2.4	1.1.1.1	0xf2f0	Standard query (0)	softbank.ne.jp	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:18.467946053 CEST	192.168.2.4	1.1.1.1	0xd6a2	Standard query (0)	hcmp.co.kr	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:18.985145092 CEST	192.168.2.4	1.1.1.1	0xd0b1	Standard query (0)	mail.octamais.com.br	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:19.298082113 CEST	192.168.2.4	1.1.1.1	0xf2f0	Standard query (0)	softbank.ne.jp	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:19.398667097 CEST	192.168.2.4	1.1.1.1	0xd4b2	Standard query (0)	smtp.alesi.cz	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:19.400226116 CEST	192.168.2.4	1.1.1.1	0x32a8	Standard query (0)	smtp.hottie.de	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:19.400310993 CEST	192.168.2.4	1.1.1.1	0xed86	Standard query (0)	mail.darklotus.xyz	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:19.400624037 CEST	192.168.2.4	1.1.1.1	0xb36	Standard query (0)	smtp.epix.net	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:19.400911093 CEST	192.168.2.4	1.1.1.1	0xc15d	Standard query (0)	smtp.cruzeirothailand.com	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:19.401205063 CEST	192.168.2.4	1.1.1.1	0x2cc9	Standard query (0)	brturbo.com.br	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:19.401400089 CEST	192.168.2.4	1.1.1.1	0x910a	Standard query (0)	securesmtp.albano.net	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:19.401499033 CEST	192.168.2.4	1.1.1.1	0x3d83	Standard query (0)	out.xpdr.org	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:19.401901960 CEST	192.168.2.4	1.1.1.1	0xd265	Standard query (0)	i.softbank.jp	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:19.402442932 CEST	192.168.2.4	1.1.1.1	0xa6af	Standard query (0)	mx.plala.or.jp	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:19.582946062 CEST	192.168.2.4	1.1.1.1	0xb33	Standard query (0)	mail.grandtours.co.kr	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:19.673966885 CEST	192.168.2.4	1.1.1.1	0xb66a	Standard query (0)	smtp.manx.net	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:19.755350113 CEST	192.168.2.4	1.1.1.1	0xd664	Standard query (0)	out.co.uk	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:19.829704046 CEST	192.168.2.4	1.1.1.1	0x6f97	Standard query (0)	secure.slice2slice.com	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:19.830156088 CEST	192.168.2.4	1.1.1.1	0x8a0c	Standard query (0)	mail.mycosmos.gr	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:19.921715021 CEST	192.168.2.4	1.1.1.1	0x6c10	Standard query (0)	us.army.mil	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:19.933650970 CEST	192.168.2.4	1.1.1.1	0x1	Standard query (0)	us.army.mil	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:20.035331964 CEST	192.168.2.4	1.1.1.1	0x105a	Standard query (0)	secure.wilsonsolutions.co.uk	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:20.072005987 CEST	192.168.2.4	1.1.1.1	0x4cb4	Standard query (0)	smtp.zum-stargard.pl	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:20.072345972 CEST	192.168.2.4	1.1.1.1	0x365d	Standard query (0)	out.capital.co.kr	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:20.188463926 CEST	192.168.2.4	1.1.1.1	0x41d9	Standard query (0)	out.zbookusa.us	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:20.189426899 CEST	192.168.2.4	1.1.1.1	0xa6c7	Standard query (0)	multinet.dp.ua	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:20.265789986 CEST	192.168.2.4	1.1.1.1	0xdbe3	Standard query (0)	mail.wanderlustholidaydeals.co.uk	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:20.266940117 CEST	192.168.2.4	1.1.1.1	0x54d1	Standard query (0)	out.eresmas.com	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:20.347944021 CEST	192.168.2.4	1.1.1.1	0x3fe2	Standard query (0)	secure.prometals.net	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:20.348546982 CEST	192.168.2.4	1.1.1.1	0xaca8	Standard query (0)	smtp.amcco.co.jp	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:20.537247896 CEST	192.168.2.4	1.1.1.1	0xb14b	Standard query (0)	solvixtech.com	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:20.613480091 CEST	192.168.2.4	1.1.1.1	0x7427	Standard query (0)	cpost.plala.or.jp	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:20.613909006 CEST	192.168.2.4	1.1.1.1	0x87ab	Standard query (0)	cdtm.de	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:20.614232063 CEST	192.168.2.4	1.1.1.1	0xf638	Standard query (0)	emahlaw.com	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:20.728348017 CEST	192.168.2.4	1.1.1.1	0xf768	Standard query (0)	mail.123.com	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:20.880009890 CEST	192.168.2.4	1.1.1.1	0x8f34	Standard query (0)	secure.sbbnet.dk	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:20.880451918 CEST	192.168.2.4	1.1.1.1	0x6215	Standard query (0)	mx3.fuse.net	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:20.964553118 CEST	192.168.2.4	1.1.1.1	0x4f10	Standard query (0)	celasa.com.gt	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:20.965301037 CEST	192.168.2.4	1.1.1.1	0xd05b	Standard query (0)	smtp.welho.com	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:20.965358019 CEST	192.168.2.4	1.1.1.1	0xf374	Standard query (0)	deglaperu.com	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:20.969213009 CEST	192.168.2.4	1.1.1.1	0x6f8c	Standard query (0)	smtp.iphone4.fr	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:20.969624996 CEST	192.168.2.4	1.1.1.1	0xdab1	Standard query (0)	smtp.intergga.ch	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:21.213490963 CEST	192.168.2.4	1.1.1.1	0x90f7	Standard query (0)	securesmtp.colweytec.com.pe	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:21.214117050 CEST	192.168.2.4	1.1.1.1	0x398d	Standard query (0)	paradiseproperties.net	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:21.222888947 CEST	192.168.2.4	1.1.1.1	0xef9b	Standard query (0)	smtp.londonbasement.co.uk	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:21.235421896 CEST	192.168.2.4	1.1.1.1	0x356d	Standard query (0)	emailsl.com	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:21.236974001 CEST	192.168.2.4	1.1.1.1	0xfffd	Standard query (0)	mail.zetaelectric.cl	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:21.383013964 CEST	192.168.2.4	1.1.1.1	0xa746	Standard query (0)	smtp.hb.tp1.jp	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:21.383482933 CEST	192.168.2.4	1.1.1.1	0x5268	Standard query (0)	smtp.electrochemical.net	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:21.383840084 CEST	192.168.2.4	1.1.1.1	0xabac	Standard query (0)	mx00.ionos.de	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:21.480782032 CEST	192.168.2.4	1.1.1.1	0xf5b9	Standard query (0)	av2.gbredes.com	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:21.484406948 CEST	192.168.2.4	1.1.1.1	0x1270	Standard query (0)	keybrainstech.com	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:21.485235929 CEST	192.168.2.4	1.1.1.1	0x6f43	Standard query (0)	smtp.toucansurf.com	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:21.485780001 CEST	192.168.2.4	1.1.1.1	0xd185	Standard query (0)	truegamerz.net	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:21.563466072 CEST	192.168.2.4	1.1.1.1	0x18a5	Standard query (0)	securesmtp.lautogrillo.it	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:21.640638113 CEST	192.168.2.4	1.1.1.1	0x1d4b	Standard query (0)	securesmtp.ccfstore.com	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:21.722573996 CEST	192.168.2.4	1.1.1.1	0xd853	Standard query (0)	noos.fr	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:21.722875118 CEST	192.168.2.4	1.1.1.1	0xc13a	Standard query (0)	smtp-in.iomartmail.com	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:21.723195076 CEST	192.168.2.4	1.1.1.1	0xa7f	Standard query (0)	hirvahr.com	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:21.884726048 CEST	192.168.2.4	1.1.1.1	0x60c3	Standard query (0)	fcetasaba-edu.ng	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:21.884917974 CEST	192.168.2.4	1.1.1.1	0xaac6	Standard query (0)	mail.sharonwicks.com	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:21.968890905 CEST	192.168.2.4	1.1.1.1	0xd7fc	Standard query (0)	mail.heartlight.org	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:22.005264044 CEST	192.168.2.4	1.1.1.1	0x7369	Standard query (0)	smtp.reyzen.com	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:22.005888939 CEST	192.168.2.4	1.1.1.1	0x77b2	Standard query (0)	smtp.corp.santander.pt	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:22.006355047 CEST	192.168.2.4	1.1.1.1	0xe805	Standard query (0)	out.deepduck.de	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:22.006851912 CEST	192.168.2.4	1.1.1.1	0xf3da	Standard query (0)	securesmtp.techelm-tech.com	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:22.011821985 CEST	192.168.2.4	1.1.1.1	0xc46c	Standard query (0)	out.ventas.fincamex.com.mx	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:22.296205044 CEST	192.168.2.4	1.1.1.1	0x6531	Standard query (0)	smtp.citromail.hu	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:22.296331882 CEST	192.168.2.4	1.1.1.1	0x6b22	Standard query (0)	securesmtp.hansgrohe.de	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:22.296643972 CEST	192.168.2.4	1.1.1.1	0x171f	Standard query (0)	autograf.pl	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:22.447911024 CEST	192.168.2.4	1.1.1.1	0x6669	Standard query (0)	smtp.riversideartmuseum.org	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:22.524174929 CEST	192.168.2.4	1.1.1.1	0x5864	Standard query (0)	smtp.tfsbrokers.com	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:22.524446011 CEST	192.168.2.4	1.1.1.1	0x3736	Standard query (0)	continental-corporation.com	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:22.524668932 CEST	192.168.2.4	1.1.1.1	0x4803	Standard query (0)	securesmtp.dckane.com	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:22.524898052 CEST	192.168.2.4	1.1.1.1	0xe823	Standard query (0)	securesmtp.russoandsontactical.com	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:22.525115967 CEST	192.168.2.4	1.1.1.1	0xfedc	Standard query (0)	out.gold-travel-designer.com	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:22.525342941 CEST	192.168.2.4	1.1.1.1	0x80dc	Standard query (0)	mail.email.pl	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:22.641655922 CEST	192.168.2.4	1.1.1.1	0x257c	Standard query (0)	out.pfu.fujitsu.com	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:22.728770971 CEST	192.168.2.4	1.1.1.1	0xb067	Standard query (0)	mail.the-beach.net	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:22.805798054 CEST	192.168.2.4	1.1.1.1	0x73c1	Standard query (0)	turk.net	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:22.806632042 CEST	192.168.2.4	1.1.1.1	0x50	Standard query (0)	out.i.sotbank.jp	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:22.807090044 CEST	192.168.2.4	1.1.1.1	0x7ed1	Standard query (0)	secure.fusaal.de	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:22.883251905 CEST	192.168.2.4	1.1.1.1	0x2870	Standard query (0)	out.ccfritsch.de	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:23.000411034 CEST	192.168.2.4	1.1.1.1	0x286b	Standard query (0)	mail.rm-plaza-heibronn.de	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:23.048259974 CEST	192.168.2.4	1.1.1.1	0x6525	Standard query (0)	smtp.imgpharma.com	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:23.136234045 CEST	192.168.2.4	1.1.1.1	0x93ce	Standard query (0)	out.hanmir.com	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:23.140831947 CEST	192.168.2.4	1.1.1.1	0x2e4b	Standard query (0)	ethiodigital.net	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:23.313020945 CEST	192.168.2.4	1.1.1.1	0x1c20	Standard query (0)	secure.spdlutowo.pl	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:23.360186100 CEST	192.168.2.4	1.1.1.1	0x7c7d	Standard query (0)	mail.flowdigital.marketing	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:23.360723972 CEST	192.168.2.4	1.1.1.1	0x5a8a	Standard query (0)	jahn.us	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:23.361028910 CEST	192.168.2.4	1.1.1.1	0xd9ab	Standard query (0)	smtp.okulmix.net	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:23.361685038 CEST	192.168.2.4	1.1.1.1	0x48dd	Standard query (0)	cvcmetalplastik.com	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:23.361785889 CEST	192.168.2.4	1.1.1.1	0xeb6f	Standard query (0)	securesmtp.nwblwi.voip.tds.net	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:23.362011909 CEST	192.168.2.4	1.1.1.1	0xeef5	Standard query (0)	secure.ceskedivky.info	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:23.484117985 CEST	192.168.2.4	1.1.1.1	0x4e	Standard query (0)	secure.kogames.com	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:23.565732956 CEST	192.168.2.4	1.1.1.1	0x61da	Standard query (0)	smtp.meriggialessandra.191.it	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:23.566144943 CEST	192.168.2.4	1.1.1.1	0xae58	Standard query (0)	out.afloreslaw.com	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:23.658895016 CEST	192.168.2.4	1.1.1.1	0x3d57	Standard query (0)	securesmtp.cotswoldbarristers.co.uk	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:23.742204905 CEST	192.168.2.4	1.1.1.1	0xa5bc	Standard query (0)	securesmtp.ieladeinu.org.ar	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:23.742923975 CEST	192.168.2.4	1.1.1.1	0xd871	Standard query (0)	toymaster.com.br	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:23.743264914 CEST	192.168.2.4	1.1.1.1	0xb952	Standard query (0)	mx.generic-isp.com	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:23.743503094 CEST	192.168.2.4	1.1.1.1	0x7ee8	Standard query (0)	smtp.nb.sympatico.ca	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:24.003196001 CEST	192.168.2.4	1.1.1.1	0x5f0f	Standard query (0)	out.eezi.net.au	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:24.003606081 CEST	192.168.2.4	1.1.1.1	0x9a2c	Standard query (0)	titusgpandi.hu	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:24.085223913 CEST	192.168.2.4	1.1.1.1	0xb984	Standard query (0)	tallerduff.com	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:24.085920095 CEST	192.168.2.4	1.1.1.1	0x4354	Standard query (0)	tianya.cn	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:24.242496967 CEST	192.168.2.4	1.1.1.1	0x47f4	Standard query (0)	smtp.eikenreform.co.jp	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:24.242785931 CEST	192.168.2.4	1.1.1.1	0xad05	Standard query (0)	securesmtp.slmsinc.net	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:24.406646013 CEST	192.168.2.4	1.1.1.1	0xdcd4	Standard query (0)	ybb.ne.jp	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:24.406892061 CEST	192.168.2.4	1.1.1.1	0x9a45	Standard query (0)	out.goproforma.com	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:24.499952078 CEST	192.168.2.4	1.1.1.1	0xb399	Standard query (0)	jingdong919.cn	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:24.500194073 CEST	192.168.2.4	1.1.1.1	0x104b	Standard query (0)	out.cggs.acteduau	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:24.593410015 CEST	192.168.2.4	1.1.1.1	0x79e1	Standard query (0)	telefonica.net	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:24.594204903 CEST	192.168.2.4	1.1.1.1	0x60fc	Standard query (0)	stlukesprimary-co-uk.mail.protection.outlook.com	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:24.798924923 CEST	192.168.2.4	1.1.1.1	0xa505	Standard query (0)	ma.medias.ne.jp	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:24.799242020 CEST	192.168.2.4	1.1.1.1	0x9c8e	Standard query (0)	out.mtrace.org	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:24.799513102 CEST	192.168.2.4	1.1.1.1	0x6701	Standard query (0)	taalim.ma	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:24.799918890 CEST	192.168.2.4	1.1.1.1	0xd6d4	Standard query (0)	mail.inbox.lt	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:24.800276041 CEST	192.168.2.4	1.1.1.1	0xf37	Standard query (0)	mail.tradexpress.com.br	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:24.800288916 CEST	192.168.2.4	1.1.1.1	0xe5ba	Standard query (0)	mail.tsusho.cz	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:25.052464008 CEST	192.168.2.4	1.1.1.1	0xcf67	Standard query (0)	securesmtp.cantex.net	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:25.052802086 CEST	192.168.2.4	1.1.1.1	0x8606	Standard query (0)	smtp.tpg.com.au	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:25.077305079 CEST	192.168.2.4	1.1.1.1	0x4354	Standard query (0)	tianya.cn	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:25.090367079 CEST	192.168.2.4	1.1.1.1	0x1	Standard query (0)	tianya.cn	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:25.177232981 CEST	192.168.2.4	1.1.1.1	0x9c2e	Standard query (0)	smtp.medsch.ucl.ac.uk	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:25.177953959 CEST	192.168.2.4	1.1.1.1	0x1c9a	Standard query (0)	andyc.demon.co.uk	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:25.178647995 CEST	192.168.2.4	1.1.1.1	0x6aa8	Standard query (0)	mx20.antispam.mailspamprotection.com	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:25.179049015 CEST	192.168.2.4	1.1.1.1	0x29d	Standard query (0)	smtp.yashi.org	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:25.180048943 CEST	192.168.2.4	1.1.1.1	0xe0c3	Standard query (0)	mx2.pub.mailpod2-cph3.one.com	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:25.180413961 CEST	192.168.2.4	1.1.1.1	0x39ea	Standard query (0)	purecustomsolutions.com	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:25.261673927 CEST	192.168.2.4	1.1.1.1	0x3e82	Standard query (0)	westallmedia.co.uk	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:25.262202024 CEST	192.168.2.4	1.1.1.1	0xf77e	Standard query (0)	mail.congeladoscordero.es	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:25.333386898 CEST	192.168.2.4	1.1.1.1	0x2227	Standard query (0)	smtp.psiagency.net	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:25.333714962 CEST	192.168.2.4	1.1.1.1	0x768c	Standard query (0)	smtp.hbuch.de	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:25.333976030 CEST	192.168.2.4	1.1.1.1	0x5708	Standard query (0)	asp12.mailinblack.com	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:25.422630072 CEST	192.168.2.4	1.1.1.1	0x8aae	Standard query (0)	smtp.embutidosabuelo.com	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:25.494411945 CEST	192.168.2.4	1.1.1.1	0x1c01	Standard query (0)	secure.woodschapelchurch.org	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:25.494693041 CEST	192.168.2.4	1.1.1.1	0x9172	Standard query (0)	mail.cors.co.kr	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:25.596040964 CEST	192.168.2.4	1.1.1.1	0xae5c	Standard query (0)	mail.g8vs.cl	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:25.596040964 CEST	192.168.2.4	1.1.1.1	0x505e	Standard query (0)	secure.odbskmb.cz	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:25.901575089 CEST	192.168.2.4	1.1.1.1	0xd3bb	Standard query (0)	out.rybeckfoundation.com	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:25.954817057 CEST	192.168.2.4	1.1.1.1	0x4bbb	Standard query (0)	hkis.org.hk	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:26.208690882 CEST	192.168.2.4	1.1.1.1	0x84f6	Standard query (0)	smtp.me.com	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:26.209588051 CEST	192.168.2.4	1.1.1.1	0xe3a2	Standard query (0)	pizzaitalia-re.de	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:26.297401905 CEST	192.168.2.4	1.1.1.1	0xcff3	Standard query (0)	out.boone.ca	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:26.380994081 CEST	192.168.2.4	1.1.1.1	0xfccb	Standard query (0)	secure.theadairs.co.uk	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:26.381068945 CEST	192.168.2.4	1.1.1.1	0x6bf7	Standard query (0)	vf-beratung.de	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:26.483690977 CEST	192.168.2.4	1.1.1.1	0x9172	Standard query (0)	mail.cors.co.kr	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:26.574060917 CEST	192.168.2.4	1.1.1.1	0xf951	Standard query (0)	smtp.otbstudios.com	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:26.617285013 CEST	192.168.2.4	1.1.1.1	0x4a4d	Standard query (0)	i.softbank.jp	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:26.760149002 CEST	192.168.2.4	1.1.1.1	0xd168	Standard query (0)	tinyworld.co.uk	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:26.760436058 CEST	192.168.2.4	1.1.1.1	0xb43c	Standard query (0)	leisurebuilding.co.uk	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:26.761085033 CEST	192.168.2.4	1.1.1.1	0x7573	Standard query (0)	mail.ingenierosdecadiz.es	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:26.943331003 CEST	192.168.2.4	1.1.1.1	0x9167	Standard query (0)	secure.nptgroup.com.au	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:26.944226980 CEST	192.168.2.4	1.1.1.1	0x2388	Standard query (0)	out.unitemediagroup.com	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:26.944626093 CEST	192.168.2.4	1.1.1.1	0xadc4	Standard query (0)	smtp.kron.com	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:35.152456045 CEST	192.168.2.4	1.1.1.1	0xec70	Standard query (0)	smtp.learnquickacademy.co.za	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:35.244415998 CEST	192.168.2.4	1.1.1.1	0xc5fe	Standard query (0)	mail.link.net	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:35.388222933 CEST	192.168.2.4	1.1.1.1	0x9112	Standard query (0)	sultengprov.go.id	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:35.586707115 CEST	192.168.2.4	1.1.1.1	0x251e	Standard query (0)	mail.cinel.com	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:35.923311949 CEST	192.168.2.4	1.1.1.1	0xf9d1	Standard query (0)	smtp.slingshot.co.nz	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:36.516321898 CEST	192.168.2.4	1.1.1.1	0x92f7	Standard query (0)	i.softbank.jp	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:36.753882885 CEST	192.168.2.4	1.1.1.1	0x8b71	Standard query (0)	apartmentmgr.com	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:36.943331003 CEST	192.168.2.4	1.1.1.1	0xdaa	Standard query (0)	mail.helixbj.com	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:37.338032961 CEST	192.168.2.4	1.1.1.1	0x4462	Standard query (0)	mail.aruba.it	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:37.812890053 CEST	192.168.2.4	1.1.1.1	0x3e3e	Standard query (0)	arabshadows.com	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:38.014250040 CEST	192.168.2.4	1.1.1.1	0x2689	Standard query (0)	smtp.frontier.com	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:38.300709009 CEST	192.168.2.4	1.1.1.1	0xb91	Standard query (0)	smtp.montenge.com.br	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:39.028980970 CEST	192.168.2.4	1.1.1.1	0xf1a1	Standard query (0)	smtp.tapsigroup.com	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:39.029292107 CEST	192.168.2.4	1.1.1.1	0x262a	Standard query (0)	mail.estacion13diciembre.com	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:39.309669018 CEST	192.168.2.4	1.1.1.1	0xb91	Standard query (0)	smtp.montenge.com.br	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:39.329999924 CEST	192.168.2.4	1.1.1.1	0x5e43	Standard query (0)	codconsultants.com	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:39.330444098 CEST	192.168.2.4	1.1.1.1	0x1a68	Standard query (0)	mx01-brz.echolabs.net	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:39.944447994 CEST	192.168.2.4	1.1.1.1	0x793d	Standard query (0)	smtp.lineone.net	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:40.040235043 CEST	192.168.2.4	1.1.1.1	0xc6f2	Standard query (0)	mail.ut.ac.ir	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:40.298736095 CEST	192.168.2.4	1.1.1.1	0xeeaf	Standard query (0)	smtp.maronesicasaecia.com	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:40.713836908 CEST	192.168.2.4	1.1.1.1	0x2d8e	Standard query (0)	smtp.progestionchile.com	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:40.869995117 CEST	192.168.2.4	1.1.1.1	0xdc86	Standard query (0)	akkayabuz.com	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:41.139128923 CEST	192.168.2.4	1.1.1.1	0x54a5	Standard query (0)	devlyn.com.mx	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:41.445678949 CEST	192.168.2.4	1.1.1.1	0xf6b8	Standard query (0)	conacero.com.ec	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:41.545294046 CEST	192.168.2.4	1.1.1.1	0x4839	Standard query (0)	i.softbank.jp	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:41.981785059 CEST	192.168.2.4	1.1.1.1	0x4cc2	Standard query (0)	smtp.cajac.it	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:42.364038944 CEST	192.168.2.4	1.1.1.1	0xa9c7	Standard query (0)	smtp.iprimus.com.au	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:42.445946932 CEST	192.168.2.4	1.1.1.1	0xc73e	Standard query (0)	dhd.mx	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:42.645041943 CEST	192.168.2.4	1.1.1.1	0x7129	Standard query (0)	mail.einsauto.co.kr	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:43.054615974 CEST	192.168.2.4	1.1.1.1	0x45e9	Standard query (0)	mail.wedo.dz	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:43.146446943 CEST	192.168.2.4	1.1.1.1	0x3c37	Standard query (0)	mail.jena-nabytekk.cz	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:43.146866083 CEST	192.168.2.4	1.1.1.1	0xb6f8	Standard query (0)	innowa-development.pl	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:43.348445892 CEST	192.168.2.4	1.1.1.1	0x81d1	Standard query (0)	mail.usawastemanagement.com	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:43.413158894 CEST	192.168.2.4	1.1.1.1	0x72f5	Standard query (0)	titterfamily.net	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:43.653948069 CEST	192.168.2.4	1.1.1.1	0x7129	Standard query (0)	mail.einsauto.co.kr	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:43.736402035 CEST	192.168.2.4	1.1.1.1	0x588e	Standard query (0)	ecohouse.ge	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:44.109713078 CEST	192.168.2.4	1.1.1.1	0xe5a	Standard query (0)	iis-berlin.de	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:44.234745026 CEST	192.168.2.4	1.1.1.1	0xab94	Standard query (0)	smtp.sbmkwitnaca.waw.pl	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:44.539016008 CEST	192.168.2.4	1.1.1.1	0x6cb4	Standard query (0)	rinzainstruments.com	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:44.714003086 CEST	192.168.2.4	1.1.1.1	0xa217	Standard query (0)	mail.connectiongroup.ae	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:44.955172062 CEST	192.168.2.4	1.1.1.1	0x3792	Standard query (0)	out.sjuaq.com	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:44.955229998 CEST	192.168.2.4	1.1.1.1	0x7b99	Standard query (0)	smtp.uvic.ca	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:45.016777039 CEST	192.168.2.4	1.1.1.1	0xf141	Standard query (0)	smtp.hottlookin.com	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:45.086289883 CEST	192.168.2.4	1.1.1.1	0x5ab5	Standard query (0)	smtp.hawaiiantel.net	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:45.086646080 CEST	192.168.2.4	1.1.1.1	0xa2a2	Standard query (0)	smtp.connecttime.net	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:45.408844948 CEST	192.168.2.4	1.1.1.1	0x3911	Standard query (0)	out.advmktg.net	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:45.409221888 CEST	192.168.2.4	1.1.1.1	0xb0e1	Standard query (0)	out.micron.com	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:45.461157084 CEST	192.168.2.4	1.1.1.1	0x773	Standard query (0)	nike.eonet.ne.jp	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:45.461493969 CEST	192.168.2.4	1.1.1.1	0x2a9b	Standard query (0)	smtp.mediacat.ne.jp	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:45.613214016 CEST	192.168.2.4	1.1.1.1	0x58ed	Standard query (0)	secure.ossconsulting.co.in	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:45.689723969 CEST	192.168.2.4	1.1.1.1	0x9f60	Standard query (0)	noos.fr	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:45.766464949 CEST	192.168.2.4	1.1.1.1	0xa4e6	Standard query (0)	mx01.hornetsecurity.com	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:45.766807079 CEST	192.168.2.4	1.1.1.1	0xaac8	Standard query (0)	mail.iscope.media	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:45.767105103 CEST	192.168.2.4	1.1.1.1	0x865d	Standard query (0)	unikamsolutions.com	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:45.767400980 CEST	192.168.2.4	1.1.1.1	0xde12	Standard query (0)	out.nrrafwps.com	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:45.932527065 CEST	192.168.2.4	1.1.1.1	0x9170	Standard query (0)	securesmtp.comune.at	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:45.932818890 CEST	192.168.2.4	1.1.1.1	0x7c6c	Standard query (0)	mail.moimstone.com	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:46.005325079 CEST	192.168.2.4	1.1.1.1	0xd0c0	Standard query (0)	mail.europe.com	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:46.120218039 CEST	192.168.2.4	1.1.1.1	0xb104	Standard query (0)	securesmtp.viettel.com.vn	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:46.120727062 CEST	192.168.2.4	1.1.1.1	0xa2dc	Standard query (0)	mail.syimpatico.ca	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:46.217750072 CEST	192.168.2.4	1.1.1.1	0xe706	Standard query (0)	mail.terre.it	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:46.217926025 CEST	192.168.2.4	1.1.1.1	0xb429	Standard query (0)	smtp.mediacombb.net	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:46.276321888 CEST	192.168.2.4	1.1.1.1	0xc7b3	Standard query (0)	post.pl	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:46.365303040 CEST	192.168.2.4	1.1.1.1	0xc9cb	Standard query (0)	secure.sefaz.al.gov.br	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:46.442742109 CEST	192.168.2.4	1.1.1.1	0x14cf	Standard query (0)	csf-ne.jp	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:46.443053007 CEST	192.168.2.4	1.1.1.1	0x6e11	Standard query (0)	ertu-org.p20.mxthunder.net	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:46.509792089 CEST	192.168.2.4	1.1.1.1	0x4157	Standard query (0)	smtp.coweb.jp	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:46.583930016 CEST	192.168.2.4	1.1.1.1	0x2e64	Standard query (0)	secure.privatemoe.ae	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:46.585093975 CEST	192.168.2.4	1.1.1.1	0xa8b9	Standard query (0)	mail.versatiletechno.com	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:46.585845947 CEST	192.168.2.4	1.1.1.1	0xca64	Standard query (0)	secure.ya.hoo.com.vn	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:46.678392887 CEST	192.168.2.4	1.1.1.1	0xef6c	Standard query (0)	secure.euglia.net	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:46.737946033 CEST	192.168.2.4	1.1.1.1	0x12e0	Standard query (0)	smtp.ldnl.com	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:46.738240957 CEST	192.168.2.4	1.1.1.1	0x2578	Standard query (0)	i.softbank.jp	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:46.738539934 CEST	192.168.2.4	1.1.1.1	0x9381	Standard query (0)	out.thirsty-duck.com	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:46.738807917 CEST	192.168.2.4	1.1.1.1	0xeb76	Standard query (0)	secure.drolatic.com	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:47.007291079 CEST	192.168.2.4	1.1.1.1	0x6c91	Standard query (0)	mail.optonline.net	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:47.007397890 CEST	192.168.2.4	1.1.1.1	0xd10b	Standard query (0)	smtp.cwgsy.net	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:47.007886887 CEST	192.168.2.4	1.1.1.1	0x3575	Standard query (0)	smtp.sasktel.net	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:47.007920027 CEST	192.168.2.4	1.1.1.1	0xda72	Standard query (0)	mojah.net	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:47.038892031 CEST	192.168.2.4	1.1.1.1	0x884e	Standard query (0)	fsmail.net	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:47.039583921 CEST	192.168.2.4	1.1.1.1	0xdc2c	Standard query (0)	smtp.ultrafrutasdemexico.com	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:47.140033007 CEST	192.168.2.4	1.1.1.1	0xd85d	Standard query (0)	smtp.frontiernet.net	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:47.266504049 CEST	192.168.2.4	1.1.1.1	0xeb31	Standard query (0)	mail.bellapelli.com	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:47.267462969 CEST	192.168.2.4	1.1.1.1	0xa3	Standard query (0)	mail.unitn.it	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:47.267776966 CEST	192.168.2.4	1.1.1.1	0xdb	Standard query (0)	out.tiscali.de	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:47.268069029 CEST	192.168.2.4	1.1.1.1	0xfcf9	Standard query (0)	dragg.net	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:47.268338919 CEST	192.168.2.4	1.1.1.1	0xaddc	Standard query (0)	smtp.policiadelaciudad.gob.ar	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:47.268615007 CEST	192.168.2.4	1.1.1.1	0xc45d	Standard query (0)	geotekautomation.com.tr	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:47.268903017 CEST	192.168.2.4	1.1.1.1	0x6da1	Standard query (0)	excite.com	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:47.269073009 CEST	192.168.2.4	1.1.1.1	0xa8fa	Standard query (0)	telefonica.net	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:47.269188881 CEST	192.168.2.4	1.1.1.1	0x9c85	Standard query (0)	securesmtp.lovcorlogisticsllc.com	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:47.351238966 CEST	192.168.2.4	1.1.1.1	0x265e	Standard query (0)	out.musictechsites.co.uk	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:47.359494925 CEST	192.168.2.4	1.1.1.1	0xbbfe	Standard query (0)	mail.ccipersonnel.co.uk	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:47.501534939 CEST	192.168.2.4	1.1.1.1	0xfbbf	Standard query (0)	out.hajes.org	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:47.505290031 CEST	192.168.2.4	1.1.1.1	0xb14e	Standard query (0)	mail.fr	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:47.505916119 CEST	192.168.2.4	1.1.1.1	0x7755	Standard query (0)	mail.vakarm.net	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:47.692054987 CEST	192.168.2.4	1.1.1.1	0x25d7	Standard query (0)	smtp.skynet.be	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:47.694241047 CEST	192.168.2.4	1.1.1.1	0x1409	Standard query (0)	smtp.autograf.fr	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:47.694417000 CEST	192.168.2.4	1.1.1.1	0x678b	Standard query (0)	smtp.hotellamarck.com	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:47.749974012 CEST	192.168.2.4	1.1.1.1	0xf66f	Standard query (0)	secure.542nm0ee35.com	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:47.750926971 CEST	192.168.2.4	1.1.1.1	0x7ca6	Standard query (0)	mx1.forwardemail.net	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:47.843323946 CEST	192.168.2.4	1.1.1.1	0xa224	Standard query (0)	smtp.tds.net	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:47.843962908 CEST	192.168.2.4	1.1.1.1	0xf83a	Standard query (0)	securesmtp.copanama.com	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:47.996017933 CEST	192.168.2.4	1.1.1.1	0xe5	Standard query (0)	smtp.plslaton.com	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:47.996121883 CEST	192.168.2.4	1.1.1.1	0x9fc8	Standard query (0)	mail.alchemisttechme.com	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:47.996556044 CEST	192.168.2.4	1.1.1.1	0x8445	Standard query (0)	bluemail.ch	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:47.996656895 CEST	192.168.2.4	1.1.1.1	0x8029	Standard query (0)	smtp.k-net.fr	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:48.008707047 CEST	192.168.2.4	1.1.1.1	0x1	Standard query (0)	smtp.k-net.fr	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:48.032768011 CEST	192.168.2.4	1.1.1.1	0x89b9	Standard query (0)	chillisc.com.br	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:48.034750938 CEST	192.168.2.4	1.1.1.1	0x7f53	Standard query (0)	secure.emc.com	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:48.035093069 CEST	192.168.2.4	1.1.1.1	0x739d	Standard query (0)	smtp.dutyandduty.com	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:48.035259008 CEST	192.168.2.4	1.1.1.1	0xc7b6	Standard query (0)	out.umc.ua	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:48.035598040 CEST	192.168.2.4	1.1.1.1	0x90ad	Standard query (0)	out.wlanteknik.se	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:48.035708904 CEST	192.168.2.4	1.1.1.1	0x91ff	Standard query (0)	secure.midcountytravel.com	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:48.128602028 CEST	192.168.2.4	1.1.1.1	0xbfb6	Standard query (0)	tianya.cn	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:48.128725052 CEST	192.168.2.4	1.1.1.1	0xd00f	Standard query (0)	burnley.gov.uk	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:48.217897892 CEST	192.168.2.4	1.1.1.1	0x2bb3	Standard query (0)	aoo.co.jp	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:48.218646049 CEST	192.168.2.4	1.1.1.1	0x3763	Standard query (0)	mail.ngawikab.go.id	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:48.219083071 CEST	192.168.2.4	1.1.1.1	0xded8	Standard query (0)	out.notifyvisitors.com	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:48.219144106 CEST	192.168.2.4	1.1.1.1	0xcbf3	Standard query (0)	mail.eastcom.ne.jp	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:48.264496088 CEST	192.168.2.4	1.1.1.1	0x90a2	Standard query (0)	smtp.mopedladen.de	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:48.265116930 CEST	192.168.2.4	1.1.1.1	0xcd65	Standard query (0)	smtp.thinkmp.mx	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:48.265175104 CEST	192.168.2.4	1.1.1.1	0x4f3c	Standard query (0)	securesmtp.ual.es	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:48.334717989 CEST	192.168.2.4	1.1.1.1	0x38f6	Standard query (0)	smtp.shaw.ca	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:48.335067034 CEST	192.168.2.4	1.1.1.1	0x8d4a	Standard query (0)	fallbackmx.spamexperts.eu	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:48.348108053 CEST	192.168.2.4	1.1.1.1	0xb041	Standard query (0)	dormerhouse.fsnet.co.uk	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:48.432120085 CEST	192.168.2.4	1.1.1.1	0x49d0	Standard query (0)	mail.paicho.com	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:48.641462088 CEST	192.168.2.4	1.1.1.1	0xcd3f	Standard query (0)	securesmtp.jamesons-solicitors.co.uk	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:48.641769886 CEST	192.168.2.4	1.1.1.1	0xdda	Standard query (0)	out.longoweb.it	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:48.733403921 CEST	192.168.2.4	1.1.1.1	0xea28	Standard query (0)	maxial.org	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:48.733676910 CEST	192.168.2.4	1.1.1.1	0xe1c4	Standard query (0)	superschwalm.com.br	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:48.734091997 CEST	192.168.2.4	1.1.1.1	0x8350	Standard query (0)	smtp.towebs.com	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:48.796189070 CEST	192.168.2.4	1.1.1.1	0x9be9	Standard query (0)	out.polycabos.com.br	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:48.796495914 CEST	192.168.2.4	1.1.1.1	0xb835	Standard query (0)	out.hgh.kjjk	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:48.796792030 CEST	192.168.2.4	1.1.1.1	0x1c12	Standard query (0)	secure.intrada.de	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:48.797102928 CEST	192.168.2.4	1.1.1.1	0x50bb	Standard query (0)	smtp.stny.r.com	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:48.995023012 CEST	192.168.2.4	1.1.1.1	0xf89a	Standard query (0)	secure.sandlin.com	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:48.995610952 CEST	192.168.2.4	1.1.1.1	0xc42b	Standard query (0)	secure.tatacoffe.com	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:48.995918036 CEST	192.168.2.4	1.1.1.1	0xcd3f	Standard query (0)	semenov.de	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:48.996241093 CEST	192.168.2.4	1.1.1.1	0xe28e	Standard query (0)	hansensauto.dk	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:49.046323061 CEST	192.168.2.4	1.1.1.1	0x1a25	Standard query (0)	mail.laposte.fr	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:49.047348976 CEST	192.168.2.4	1.1.1.1	0x7fad	Standard query (0)	vonrocko.com	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:49.144382000 CEST	192.168.2.4	1.1.1.1	0xa65e	Standard query (0)	secure.easterbrookhome.fsnet.co.uk	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:49.220102072 CEST	192.168.2.4	1.1.1.1	0xad4a	Standard query (0)	out.didactika.it	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:49.220374107 CEST	192.168.2.4	1.1.1.1	0xd9ac	Standard query (0)	smtp.kk.em-net.ne.jp	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:49.220622063 CEST	192.168.2.4	1.1.1.1	0xe88c	Standard query (0)	smtp.jcom.home.ne.jp	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:49.297492027 CEST	192.168.2.4	1.1.1.1	0x8830	Standard query (0)	mail.poolhousevets.co.uk	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:49.297697067 CEST	192.168.2.4	1.1.1.1	0x17d4	Standard query (0)	out.radiotropical.nl	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:49.393774033 CEST	192.168.2.4	1.1.1.1	0x1bde	Standard query (0)	medcommunications.ca	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:49.393774033 CEST	192.168.2.4	1.1.1.1	0xaa09	Standard query (0)	rogers.com	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:49.437326908 CEST	192.168.2.4	1.1.1.1	0x3495	Standard query (0)	securesmtp.shapesandforms.tv	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:49.437931061 CEST	192.168.2.4	1.1.1.1	0x9eaf	Standard query (0)	secure.specus.lt	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:49.589497089 CEST	192.168.2.4	1.1.1.1	0xb99f	Standard query (0)	universaluniform.co.uk	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:49.589808941 CEST	192.168.2.4	1.1.1.1	0x6166	Standard query (0)	mail.upnet.gr	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:49.590064049 CEST	192.168.2.4	1.1.1.1	0x2580	Standard query (0)	mail.telltaletravel.co.uk	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:49.590332031 CEST	192.168.2.4	1.1.1.1	0xe765	Standard query (0)	mailspirit.info	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:49.591943026 CEST	192.168.2.4	1.1.1.1	0x4524	Standard query (0)	smtp.espeholt.dk	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:49.592025042 CEST	192.168.2.4	1.1.1.1	0xf53f	Standard query (0)	securesmtp.grizzet.com	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:49.693389893 CEST	192.168.2.4	1.1.1.1	0x9a3a	Standard query (0)	smtp.wtaengenhariaeletrica.com.br	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:49.693732023 CEST	192.168.2.4	1.1.1.1	0xec95	Standard query (0)	smtp.trevine.co.za	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:49.694024086 CEST	192.168.2.4	1.1.1.1	0x384c	Standard query (0)	mail.univ-lille2.fr	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:49.694324017 CEST	192.168.2.4	1.1.1.1	0x62a7	Standard query (0)	janelagrande-pt.mail.protection.outlook.com	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:49.694586039 CEST	192.168.2.4	1.1.1.1	0xe7a0	Standard query (0)	secure.siembrafeliz.com.ar	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:49.812330961 CEST	192.168.2.4	1.1.1.1	0x327c	Standard query (0)	htech.pk	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:49.812526941 CEST	192.168.2.4	1.1.1.1	0x4128	Standard query (0)	mail.json.cl	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:49.812836885 CEST	192.168.2.4	1.1.1.1	0x7812	Standard query (0)	mx10.antispam.mailspamprotection.com	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:49.900374889 CEST	192.168.2.4	1.1.1.1	0x8a67	Standard query (0)	linkxp.com.br	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:49.900644064 CEST	192.168.2.4	1.1.1.1	0x30e8	Standard query (0)	mx1.improvmx.com	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:49.996510983 CEST	192.168.2.4	1.1.1.1	0x519f	Standard query (0)	out.web.jp	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:49.999598026 CEST	192.168.2.4	1.1.1.1	0x2c4d	Standard query (0)	securesmtp.robertofranco.ro	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:50.064451933 CEST	192.168.2.4	1.1.1.1	0x33b3	Standard query (0)	smtp.55mail.jp	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:50.066375971 CEST	192.168.2.4	1.1.1.1	0x93be	Standard query (0)	out.engsystems.co.za	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:50.212272882 CEST	192.168.2.4	1.1.1.1	0x3e2	Standard query (0)	out.online.ua	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:50.212733984 CEST	192.168.2.4	1.1.1.1	0xf79d	Standard query (0)	smtp.alec.com.au	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:50.344450951 CEST	192.168.2.4	1.1.1.1	0xbe51	Standard query (0)	smtp.medievisti.it	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:50.344573021 CEST	192.168.2.4	1.1.1.1	0xf28b	Standard query (0)	walla.co.il	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:50.439167976 CEST	192.168.2.4	1.1.1.1	0x5d43	Standard query (0)	smtp.valentines.net	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:50.439935923 CEST	192.168.2.4	1.1.1.1	0xe37b	Standard query (0)	mail.aussiebroadband.com.au	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:50.547045946 CEST	192.168.2.4	1.1.1.1	0xea39	Standard query (0)	data-affinity.com	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:50.547087908 CEST	192.168.2.4	1.1.1.1	0x9b4b	Standard query (0)	ybb.ne.jp	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:50.624640942 CEST	192.168.2.4	1.1.1.1	0xb658	Standard query (0)	securesmtp.onlinebizsoft.com	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:50.686122894 CEST	192.168.2.4	1.1.1.1	0x9a3a	Standard query (0)	smtp.wtaengenhariaeletrica.com.br	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:50.705020905 CEST	192.168.2.4	1.1.1.1	0xaf6c	Standard query (0)	out.thomson.co.uk	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:50.907855034 CEST	192.168.2.4	1.1.1.1	0x4b82	Standard query (0)	mail.immacolataitv.it	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:50.908174038 CEST	192.168.2.4	1.1.1.1	0x1c74	Standard query (0)	out.wipro.com	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:51.095288038 CEST	192.168.2.4	1.1.1.1	0xcd44	Standard query (0)	out.skotnicki.it	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:51.096946001 CEST	192.168.2.4	1.1.1.1	0x7f01	Standard query (0)	smtp.pre-stige.com.mx	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:51.097562075 CEST	192.168.2.4	1.1.1.1	0xa856	Standard query (0)	smtp.qemcrdmg.com	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:51.230701923 CEST	192.168.2.4	1.1.1.1	0xc302	Standard query (0)	mx10.se.isp-net.nl	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:51.230880022 CEST	192.168.2.4	1.1.1.1	0xcadf	Standard query (0)	softbank.ne.jp	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:51.409414053 CEST	192.168.2.4	1.1.1.1	0xdd48	Standard query (0)	smtp.netzero.com	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:51.410449028 CEST	192.168.2.4	1.1.1.1	0xad8b	Standard query (0)	bigpoint.acc	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:51.411178112 CEST	192.168.2.4	1.1.1.1	0xacf7	Standard query (0)	mail.dartheads.com	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:51.490678072 CEST	192.168.2.4	1.1.1.1	0x9c4a	Standard query (0)	etapanet.net	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:51.491020918 CEST	192.168.2.4	1.1.1.1	0x1103	Standard query (0)	smtp.creativechallenge.co.uk	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:51.645864964 CEST	192.168.2.4	1.1.1.1	0x7f69	Standard query (0)	out.demoney.org	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:51.647165060 CEST	192.168.2.4	1.1.1.1	0xde32	Standard query (0)	zet.zero.com	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:51.647474051 CEST	192.168.2.4	1.1.1.1	0xde0	Standard query (0)	out.springersjewelers.com	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:51.686448097 CEST	192.168.2.4	1.1.1.1	0x9a3a	Standard query (0)	smtp.wtaengenhariaeletrica.com.br	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:51.742676973 CEST	192.168.2.4	1.1.1.1	0xb5f4	Standard query (0)	smtp.studiozoppini.com	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:51.742870092 CEST	192.168.2.4	1.1.1.1	0x5572	Standard query (0)	secure.jacziesmer.com	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:51.743227959 CEST	192.168.2.4	1.1.1.1	0xfb0d	Standard query (0)	navy.mil	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:51.799700022 CEST	192.168.2.4	1.1.1.1	0x1df2	Standard query (0)	smtp.maskatel.net	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:51.800586939 CEST	192.168.2.4	1.1.1.1	0xb987	Standard query (0)	smtp.sediex.com.ar	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:51.800904989 CEST	192.168.2.4	1.1.1.1	0xada9	Standard query (0)	smtp.bellaliant.net	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:51.801033020 CEST	192.168.2.4	1.1.1.1	0xf24d	Standard query (0)	mail.direcone.com	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:51.801213980 CEST	192.168.2.4	1.1.1.1	0x2ff1	Standard query (0)	secure.wmconnect.com	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:51.801369905 CEST	192.168.2.4	1.1.1.1	0xac68	Standard query (0)	mail.voliacable.com	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:51.874475002 CEST	192.168.2.4	1.1.1.1	0x5ab7	Standard query (0)	securesmtp.dunnva.com	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:52.025193930 CEST	192.168.2.4	1.1.1.1	0xf280	Standard query (0)	starporcelainbd-com.mail.protection.outlook.com	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:52.025536060 CEST	192.168.2.4	1.1.1.1	0x218e	Standard query (0)	out.easttlink.ca	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:52.026947975 CEST	192.168.2.4	1.1.1.1	0xf4fa	Standard query (0)	staffershr.com	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:52.218030930 CEST	192.168.2.4	1.1.1.1	0xc302	Standard query (0)	mx10.se.isp-net.nl	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:52.238305092 CEST	192.168.2.4	1.1.1.1	0x2487	Standard query (0)	praco.in	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:52.239454985 CEST	192.168.2.4	1.1.1.1	0xf9a	Standard query (0)	in.mx.ifl.net	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:52.240231037 CEST	192.168.2.4	1.1.1.1	0x4020	Standard query (0)	mail.simnet.is	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:52.240590096 CEST	192.168.2.4	1.1.1.1	0xf059	Standard query (0)	i.softbank.jp	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:52.321933985 CEST	192.168.2.4	1.1.1.1	0xad22	Standard query (0)	sman7ptk.sch.id	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:52.382858038 CEST	192.168.2.4	1.1.1.1	0xab72	Standard query (0)	arnet.com.ar	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:52.383914948 CEST	192.168.2.4	1.1.1.1	0xb93d	Standard query (0)	smtp.hotkey.net.au	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:52.470130920 CEST	192.168.2.4	1.1.1.1	0x9b2f	Standard query (0)	secure.werbeform-display.de	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:52.537623882 CEST	192.168.2.4	1.1.1.1	0x72e1	Standard query (0)	smtp.jobs.fr	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:52.538340092 CEST	192.168.2.4	1.1.1.1	0x858e	Standard query (0)	smtp.aforna.com	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:52.609127998 CEST	192.168.2.4	1.1.1.1	0x2e8c	Standard query (0)	smtp.gamil.com	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:52.609277964 CEST	192.168.2.4	1.1.1.1	0xf1a5	Standard query (0)	education.nsw.gov.au	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:52.686939955 CEST	192.168.2.4	1.1.1.1	0x79c6	Standard query (0)	mail.register.it	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:52.769010067 CEST	192.168.2.4	1.1.1.1	0x2584	Standard query (0)	securesmtp.felixlasitschka.de	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:52.769351959 CEST	192.168.2.4	1.1.1.1	0xd9ca	Standard query (0)	mail.sreindia.in	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:52.770131111 CEST	192.168.2.4	1.1.1.1	0x50a2	Standard query (0)	smtp.changeyourlifechallenge.org	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:52.838830948 CEST	192.168.2.4	1.1.1.1	0x304e	Standard query (0)	securesmtp.rnhnyl.com	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:52.922597885 CEST	192.168.2.4	1.1.1.1	0xfa8b	Standard query (0)	out.df.estudante.senai.com	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:52.922895908 CEST	192.168.2.4	1.1.1.1	0x3248	Standard query (0)	out.cristex.co.uk	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:52.995341063 CEST	192.168.2.4	1.1.1.1	0x222c	Standard query (0)	britolia.com	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:52.995410919 CEST	192.168.2.4	1.1.1.1	0xa57f	Standard query (0)	clesa.it	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:52.995673895 CEST	192.168.2.4	1.1.1.1	0xb52b	Standard query (0)	aon.at	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:52.995750904 CEST	192.168.2.4	1.1.1.1	0x69af	Standard query (0)	smtp.foxvalley.net	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:53.136955976 CEST	192.168.2.4	1.1.1.1	0x4b69	Standard query (0)	viedam-com.mail.protection.outlook.com	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:53.147815943 CEST	192.168.2.4	1.1.1.1	0x8150	Standard query (0)	securesmtp.hm44.fslife.co.uk	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:53.147918940 CEST	192.168.2.4	1.1.1.1	0x4cf0	Standard query (0)	out.siouxplating.com	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:53.148302078 CEST	192.168.2.4	1.1.1.1	0xef2	Standard query (0)	secure.chryssopoulos.de	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:53.223460913 CEST	192.168.2.4	1.1.1.1	0x8985	Standard query (0)	securesmtp.doma9uog45.com	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:53.233278990 CEST	192.168.2.4	1.1.1.1	0xc302	Standard query (0)	mx10.se.isp-net.nl	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:53.268457890 CEST	192.168.2.4	1.1.1.1	0x492e	Standard query (0)	out.sotaysuckhoe.wiki	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:53.269018888 CEST	192.168.2.4	1.1.1.1	0x3963	Standard query (0)	supertecreset.com	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:53.269331932 CEST	192.168.2.4	1.1.1.1	0xa6c1	Standard query (0)	entertek.net	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:53.317257881 CEST	192.168.2.4	1.1.1.1	0x64c1	Standard query (0)	mail.hostlike.pro	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:53.317579031 CEST	192.168.2.4	1.1.1.1	0xc89d	Standard query (0)	mail.mccconstrucoes.com.br	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:53.359133959 CEST	192.168.2.4	1.1.1.1	0xd6bf	Standard query (0)	zynga.com	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:53.455836058 CEST	192.168.2.4	1.1.1.1	0x8697	Standard query (0)	mail.grupoambientalbrasil.com.br	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:53.507975101 CEST	192.168.2.4	1.1.1.1	0xe210	Standard query (0)	out.datingfrance.fr	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:53.508296967 CEST	192.168.2.4	1.1.1.1	0x9e3d	Standard query (0)	velsen5.nl	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:53.509196043 CEST	192.168.2.4	1.1.1.1	0x85d	Standard query (0)	tele2.it	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:53.509767056 CEST	192.168.2.4	1.1.1.1	0x5dde	Standard query (0)	out.coccinet.com	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:53.510828972 CEST	192.168.2.4	1.1.1.1	0xee63	Standard query (0)	yaho.com	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:53.531591892 CEST	192.168.2.4	1.1.1.1	0x1	Standard query (0)	tele2.it	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:53.539920092 CEST	192.168.2.4	1.1.1.1	0xfd14	Standard query (0)	mx.giochi0.it	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:53.542674065 CEST	192.168.2.4	1.1.1.1	0xb53f	Standard query (0)	smtp.telfort.nl	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:53.554697990 CEST	192.168.2.4	1.1.1.1	0xa999	Standard query (0)	mail.korreoweb.com	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:53.599422932 CEST	192.168.2.4	1.1.1.1	0xb3e2	Standard query (0)	smtp.satelitnatechnika.sk	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:53.689080954 CEST	192.168.2.4	1.1.1.1	0x9a3a	Standard query (0)	smtp.wtaengenhariaeletrica.com.br	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:53.697556973 CEST	192.168.2.4	1.1.1.1	0x87a5	Standard query (0)	smtp.mybne.catholiceduau	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:53.697746038 CEST	192.168.2.4	1.1.1.1	0x46bd	Standard query (0)	smtp.ncs-co.jp	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:53.698261976 CEST	192.168.2.4	1.1.1.1	0x2eb5	Standard query (0)	mail.cesfamdalcahue.cl	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:53.698453903 CEST	192.168.2.4	1.1.1.1	0x1895	Standard query (0)	smtp.vodafone.de	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:53.786209106 CEST	192.168.2.4	1.1.1.1	0xde37	Standard query (0)	securesmtp.huascarancertificaciones.com	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:53.786541939 CEST	192.168.2.4	1.1.1.1	0x66b7	Standard query (0)	amazing-herb.com	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:53.787107944 CEST	192.168.2.4	1.1.1.1	0x2623	Standard query (0)	securesmtp.robert-lamont.co.uk	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:53.787400007 CEST	192.168.2.4	1.1.1.1	0x5c8b	Standard query (0)	out.gwentmusic.net	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:53.875452042 CEST	192.168.2.4	1.1.1.1	0x8a35	Standard query (0)	foxboxup.com	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:53.876374006 CEST	192.168.2.4	1.1.1.1	0x345	Standard query (0)	mail.rpcc.com.br	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:53.876413107 CEST	192.168.2.4	1.1.1.1	0xe2fe	Standard query (0)	alkharafa.com	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:53.882656097 CEST	192.168.2.4	1.1.1.1	0xb635	Standard query (0)	mail.njoyinvesting.com.mx	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:53.889786005 CEST	192.168.2.4	1.1.1.1	0xaab0	Standard query (0)	caricature-co-uk.mail.protection.outlook.com	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:53.943247080 CEST	192.168.2.4	1.1.1.1	0xf2c9	Standard query (0)	secure.drramyalanany.com	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:54.033668995 CEST	192.168.2.4	1.1.1.1	0x1e54	Standard query (0)	noos.fr	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:54.086297989 CEST	192.168.2.4	1.1.1.1	0xfdf2	Standard query (0)	mail.dragonfoods.com.mx	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:54.086720943 CEST	192.168.2.4	1.1.1.1	0xcf64	Standard query (0)	out.toon.beach.com	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:54.180773020 CEST	192.168.2.4	1.1.1.1	0x6f3c	Standard query (0)	smtp.nb.sympatico.ca	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:54.181529999 CEST	192.168.2.4	1.1.1.1	0xa36	Standard query (0)	mail.pharmacysystems.com	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:54.284892082 CEST	192.168.2.4	1.1.1.1	0x4c9c	Standard query (0)	telefonica.net	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:54.285608053 CEST	192.168.2.4	1.1.1.1	0x2ef5	Standard query (0)	mail.gallant.ca	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:54.286000967 CEST	192.168.2.4	1.1.1.1	0x2aa4	Standard query (0)	smtp.escolamondrian.com.br	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:54.286067963 CEST	192.168.2.4	1.1.1.1	0xb53a	Standard query (0)	heatons.co.uk	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:54.510647058 CEST	192.168.2.4	1.1.1.1	0xb93e	Standard query (0)	mail.56mb.co.uk	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:54.510965109 CEST	192.168.2.4	1.1.1.1	0xe092	Standard query (0)	mail.czarymary.pl	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:54.605305910 CEST	192.168.2.4	1.1.1.1	0x37cc	Standard query (0)	smtp.bps.go.id	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:54.605775118 CEST	192.168.2.4	1.1.1.1	0xac7d	Standard query (0)	smtp.markcomm.com.mx	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:54.605918884 CEST	192.168.2.4	1.1.1.1	0xd81d	Standard query (0)	out.pop.com.br	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:54.608408928 CEST	192.168.2.4	1.1.1.1	0xdf65	Standard query (0)	mx01.schlund.de	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:54.682148933 CEST	192.168.2.4	1.1.1.1	0xac66	Standard query (0)	mx19b.antispameurope.com	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:54.682471991 CEST	192.168.2.4	1.1.1.1	0x5c44	Standard query (0)	secure.yhoo.com	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:54.750838041 CEST	192.168.2.4	1.1.1.1	0x78c1	Standard query (0)	mx.progiftstore.org	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:54.751701117 CEST	192.168.2.4	1.1.1.1	0x7691	Standard query (0)	wacky.vip.co.jp	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:54.795906067 CEST	192.168.2.4	1.1.1.1	0x66b7	Standard query (0)	amazing-herb.com	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:54.866962910 CEST	192.168.2.4	1.1.1.1	0x2fe2	Standard query (0)	smtp.kalbarprov.go.id	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:54.867245913 CEST	192.168.2.4	1.1.1.1	0x9873	Standard query (0)	securesmtp.rbrinformatica.com.br	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:54.889851093 CEST	192.168.2.4	1.1.1.1	0x8a35	Standard query (0)	foxboxup.com	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:55.023109913 CEST	192.168.2.4	1.1.1.1	0xe69e	Standard query (0)	secure.vakiparta.net	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:55.093911886 CEST	192.168.2.4	1.1.1.1	0xe85	Standard query (0)	horsetalksa.co.za	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:55.094032049 CEST	192.168.2.4	1.1.1.1	0xb65a	Standard query (0)	smtp.farmaciaditullio.it	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:55.094379902 CEST	192.168.2.4	1.1.1.1	0x14dd	Standard query (0)	mail.plataforma20.com	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:55.392091036 CEST	192.168.2.4	1.1.1.1	0xadaf	Standard query (0)	smtp.mynet.net	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:55.470925093 CEST	192.168.2.4	1.1.1.1	0x6ce9	Standard query (0)	out.venturalink.net	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:55.557348013 CEST	192.168.2.4	1.1.1.1	0x46c4	Standard query (0)	securesmtp.geromiller.de	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:55.603732109 CEST	192.168.2.4	1.1.1.1	0x3da4	Standard query (0)	smtp.opinedms.com	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:55.604079008 CEST	192.168.2.4	1.1.1.1	0x5ef7	Standard query (0)	out.ntlworld.co.uk	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:55.604697943 CEST	192.168.2.4	1.1.1.1	0xefb5	Standard query (0)	out.bittner-edv-beratung.de	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:55.604957104 CEST	192.168.2.4	1.1.1.1	0x7c69	Standard query (0)	smtp.kwlugeppec.com	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:55.605854034 CEST	192.168.2.4	1.1.1.1	0x5b00	Standard query (0)	secure.reflectionsinbinary.com	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:55.676316023 CEST	192.168.2.4	1.1.1.1	0xed86	Standard query (0)	mail.schwiegk.de	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:55.772243977 CEST	192.168.2.4	1.1.1.1	0x9c19	Standard query (0)	smtp.eduardozuna.net	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:55.772639036 CEST	192.168.2.4	1.1.1.1	0x27d4	Standard query (0)	mail.whitewolf.de	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:55.867537022 CEST	192.168.2.4	1.1.1.1	0x8687	Standard query (0)	mail.dejazzd.com	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:55.892024994 CEST	192.168.2.4	1.1.1.1	0x8a35	Standard query (0)	foxboxup.com	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:55.957206011 CEST	192.168.2.4	1.1.1.1	0x1e6e	Standard query (0)	secure.computertechnology.es	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:55.957545042 CEST	192.168.2.4	1.1.1.1	0x715f	Standard query (0)	smtp.solucaoengma.com.br	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:55.957920074 CEST	192.168.2.4	1.1.1.1	0x1707	Standard query (0)	smtp.htw-saarland.de	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:56.028017044 CEST	192.168.2.4	1.1.1.1	0xe100	Standard query (0)	secure.rpp.de	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:56.159475088 CEST	192.168.2.4	1.1.1.1	0xa919	Standard query (0)	out.francanet.com.br	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:56.159548044 CEST	192.168.2.4	1.1.1.1	0xec64	Standard query (0)	smtp.anuvarthh.com	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:56.159768105 CEST	192.168.2.4	1.1.1.1	0x1321	Standard query (0)	smtp.aei.ca	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:56.160037994 CEST	192.168.2.4	1.1.1.1	0x7811	Standard query (0)	smtp.iteminfo.fr	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:56.213901043 CEST	192.168.2.4	1.1.1.1	0xf94b	Standard query (0)	monster.com	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:56.214659929 CEST	192.168.2.4	1.1.1.1	0x6de0	Standard query (0)	smtp.me.com	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:56.292629957 CEST	192.168.2.4	1.1.1.1	0xec65	Standard query (0)	out.dishmail.net	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:56.533407927 CEST	192.168.2.4	1.1.1.1	0x51b3	Standard query (0)	mail.qreon.de	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:56.534323931 CEST	192.168.2.4	1.1.1.1	0xbf16	Standard query (0)	grifoolmos.pe	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:56.534399986 CEST	192.168.2.4	1.1.1.1	0x390f	Standard query (0)	smtp.hotellamarck.com	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:56.534816027 CEST	192.168.2.4	1.1.1.1	0xceca	Standard query (0)	frontdoor.pr.hu	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:56.628297091 CEST	192.168.2.4	1.1.1.1	0x8e35	Standard query (0)	headwhack.com	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:56.629096031 CEST	192.168.2.4	1.1.1.1	0x8c6	Standard query (0)	smtp.milmotors.it	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:56.629204035 CEST	192.168.2.4	1.1.1.1	0x48c2	Standard query (0)	regalo.br	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:57.161834955 CEST	192.168.2.4	1.1.1.1	0x5680	Standard query (0)	levenmintsocialinvestments.com	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:57.164613008 CEST	192.168.2.4	1.1.1.1	0x57e6	Standard query (0)	cobaltsafes.com	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:57.164891005 CEST	192.168.2.4	1.1.1.1	0xd41e	Standard query (0)	therfcgroup.com	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:57.164975882 CEST	192.168.2.4	1.1.1.1	0xb47	Standard query (0)	out.gs-heinrich.de	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:57.165596962 CEST	192.168.2.4	1.1.1.1	0x8f6d	Standard query (0)	out.cbe45.fr	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:57.395340919 CEST	192.168.2.4	1.1.1.1	0xd15c	Standard query (0)	tmas.net	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:57.633553982 CEST	192.168.2.4	1.1.1.1	0xee05	Standard query (0)	ybb.ne.jp	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:57.729847908 CEST	192.168.2.4	1.1.1.1	0xab97	Standard query (0)	smtp.marioreis.ca	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:57.827902079 CEST	192.168.2.4	1.1.1.1	0x1367	Standard query (0)	out.alunos.estacio.br	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:57.828269958 CEST	192.168.2.4	1.1.1.1	0x6853	Standard query (0)	smtp.idtsearch.com	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:57.905740023 CEST	192.168.2.4	1.1.1.1	0x8a35	Standard query (0)	foxboxup.com	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:57.906649113 CEST	192.168.2.4	1.1.1.1	0xfdb5	Standard query (0)	smtp.totalise.co.uk	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:57.907135963 CEST	192.168.2.4	1.1.1.1	0xb7ff	Standard query (0)	smtp.cc-inc.org	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:57.980921984 CEST	192.168.2.4	1.1.1.1	0xb107	Standard query (0)	mx01.kundenserver.de	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:57.983498096 CEST	192.168.2.4	1.1.1.1	0x9f75	Standard query (0)	secure.tiptopclean.eu	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:57.984361887 CEST	192.168.2.4	1.1.1.1	0xd1ab	Standard query (0)	secure.a2plus.pt	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:58.069390059 CEST	192.168.2.4	1.1.1.1	0xa7f3	Standard query (0)	mx2.pub.mailpod11-cph3.one.com	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:58.069680929 CEST	192.168.2.4	1.1.1.1	0x5710	Standard query (0)	smtp.acsalaska.net	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:58.155802965 CEST	192.168.2.4	1.1.1.1	0xf9d0	Standard query (0)	icrar.org	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:58.289727926 CEST	192.168.2.4	1.1.1.1	0x3075	Standard query (0)	abogadosanfernando.cl	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:58.290406942 CEST	192.168.2.4	1.1.1.1	0x2a01	Standard query (0)	smtp.executive-pet-services.com	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:58.359354019 CEST	192.168.2.4	1.1.1.1	0x5b1	Standard query (0)	smtp.univ-ubs.fr	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:58.359633923 CEST	192.168.2.4	1.1.1.1	0x9362	Standard query (0)	mail.capitallendingsolutions.com	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:58.359911919 CEST	192.168.2.4	1.1.1.1	0x9b74	Standard query (0)	iousm.cn	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:58.360264063 CEST	192.168.2.4	1.1.1.1	0x1d53	Standard query (0)	wallstreetmkt.com	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:58.455317020 CEST	192.168.2.4	1.1.1.1	0x886f	Standard query (0)	out.oneplusmexico.com	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:58.455571890 CEST	192.168.2.4	1.1.1.1	0x9fa4	Standard query (0)	smtp.raspinispa.it	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:58.455812931 CEST	192.168.2.4	1.1.1.1	0xdff9	Standard query (0)	mail.beynat.com.fr	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:58.456083059 CEST	192.168.2.4	1.1.1.1	0x1e0b	Standard query (0)	starservice.com.ua	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:58.456365108 CEST	192.168.2.4	1.1.1.1	0x1f52	Standard query (0)	clearwire.net	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:58.727232933 CEST	192.168.2.4	1.1.1.1	0x2342	Standard query (0)	btinternet.co.uk	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:58.727406025 CEST	192.168.2.4	1.1.1.1	0x806d	Standard query (0)	mx2-eu1.ppe-hosted.com	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:58.727478027 CEST	192.168.2.4	1.1.1.1	0x69a3	Standard query (0)	mx3.pub.mailpod2-cph3.one.com	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:58.745259047 CEST	192.168.2.4	1.1.1.1	0xa869	Standard query (0)	smtp.ievaran.ir	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:58.745630026 CEST	192.168.2.4	1.1.1.1	0x6e32	Standard query (0)	stirlinghotel-com-au.mail.protection.outlook.com	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:58.746099949 CEST	192.168.2.4	1.1.1.1	0xa6ae	Standard query (0)	partshanger.com	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:58.844261885 CEST	192.168.2.4	1.1.1.1	0xb601	Standard query (0)	in.com	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:58.844563007 CEST	192.168.2.4	1.1.1.1	0xbe90	Standard query (0)	tommyribbers.nl	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:58.844765902 CEST	192.168.2.4	1.1.1.1	0xd222	Standard query (0)	out.suscom.net	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:58.925254107 CEST	192.168.2.4	1.1.1.1	0xc2ba	Standard query (0)	out.usagencies.com	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:58.925868988 CEST	192.168.2.4	1.1.1.1	0x7040	Standard query (0)	mail.southern-redfern.co.uk	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:59.000750065 CEST	192.168.2.4	1.1.1.1	0xf6b1	Standard query (0)	kn11536-mail01.aixit.com	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:59.079328060 CEST	192.168.2.4	1.1.1.1	0xcb2	Standard query (0)	securesmtp.gaom.com	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:59.166553974 CEST	192.168.2.4	1.1.1.1	0xd1fb	Standard query (0)	mail.duckpro.xyz	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:59.261866093 CEST	192.168.2.4	1.1.1.1	0xef80	Standard query (0)	smtp.flipssl.com	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:59.265839100 CEST	192.168.2.4	1.1.1.1	0x44ab	Standard query (0)	yapaytech.com	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:59.309227943 CEST	192.168.2.4	1.1.1.1	0xbc38	Standard query (0)	tianya.cn	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:59.312155962 CEST	192.168.2.4	1.1.1.1	0xf0f5	Standard query (0)	securesmtp.essex.gov.uk	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:59.360318899 CEST	192.168.2.4	1.1.1.1	0x29f3	Standard query (0)	mail.elarabyofficeeg.com	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:59.503340006 CEST	192.168.2.4	1.1.1.1	0x2739	Standard query (0)	mail.tps501.org	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:59.517708063 CEST	192.168.2.4	1.1.1.1	0x6d5	Standard query (0)	smtp.bei-schlegels.de	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:59.681016922 CEST	192.168.2.4	1.1.1.1	0x9f10	Standard query (0)	smtp.buckeyeexpress.com	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:59.682115078 CEST	192.168.2.4	1.1.1.1	0x1c69	Standard query (0)	inditec.com.br	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:59.781878948 CEST	192.168.2.4	1.1.1.1	0x231a	Standard query (0)	smtp.uda.com	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:59.782021046 CEST	192.168.2.4	1.1.1.1	0xedd3	Standard query (0)	secure.dutchieguy.ca	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:59.939249039 CEST	192.168.2.4	1.1.1.1	0x9389	Standard query (0)	smtp.firenze.it	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:59.940691948 CEST	192.168.2.4	1.1.1.1	0x25cf	Standard query (0)	securesmtp.heffron.com.au	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:11:00.096992970 CEST	192.168.2.4	1.1.1.1	0xea9b	Standard query (0)	omkartech.online	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:11:00.220964909 CEST	192.168.2.4	1.1.1.1	0x6f44	Standard query (0)	smtp.ehinger-schwarz.de	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:11:00.221261978 CEST	192.168.2.4	1.1.1.1	0xfcdd	Standard query (0)	secure.moretzmarketing.com	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:11:00.221594095 CEST	192.168.2.4	1.1.1.1	0xbbdc	Standard query (0)	securesmtp.mediascript.com	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:11:00.221873045 CEST	192.168.2.4	1.1.1.1	0x34f8	Standard query (0)	coral.ocn.ne.jp	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:11:00.298780918 CEST	192.168.2.4	1.1.1.1	0xc419	Standard query (0)	smtp.tps.co.id	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:11:00.393384933 CEST	192.168.2.4	1.1.1.1	0x2497	Standard query (0)	i.softbank.jp	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:11:00.525932074 CEST	192.168.2.4	1.1.1.1	0x6253	Standard query (0)	smtp.riptoo.com	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:11:00.719336033 CEST	192.168.2.4	1.1.1.1	0x9762	Standard query (0)	secure.hopla.fr	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:11:00.844413996 CEST	192.168.2.4	1.1.1.1	0xfeb5	Standard query (0)	mail.grupoafline.com.br	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:11:00.846232891 CEST	192.168.2.4	1.1.1.1	0x5b71	Standard query (0)	baronsestates.com	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:11:00.846709967 CEST	192.168.2.4	1.1.1.1	0xc337	Standard query (0)	securesmtp.chxjcnbtlanr.fr	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:11:00.847100019 CEST	192.168.2.4	1.1.1.1	0xe879	Standard query (0)	out.selasdugouessant.fr	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:11:00.847444057 CEST	192.168.2.4	1.1.1.1	0xda4b	Standard query (0)	mx2.zoho.com	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:11:01.079855919 CEST	192.168.2.4	1.1.1.1	0xc4c4	Standard query (0)	protech-algerie.com	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:11:01.080826998 CEST	192.168.2.4	1.1.1.1	0x11d2	Standard query (0)	kingstonholdings.com	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:11:01.163978100 CEST	192.168.2.4	1.1.1.1	0xe787	Standard query (0)	smtp.supercable.es	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:11:01.164683104 CEST	192.168.2.4	1.1.1.1	0xa65	Standard query (0)	smtp.onlineaffe.de	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:11:01.257457018 CEST	192.168.2.4	1.1.1.1	0x7981	Standard query (0)	mail.pvlearnerss.net	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:11:01.257769108 CEST	192.168.2.4	1.1.1.1	0x56d7	Standard query (0)	surgeib1.nova.es	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:11:01.312350035 CEST	192.168.2.4	1.1.1.1	0xc419	Standard query (0)	smtp.tps.co.id	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:11:01.408137083 CEST	192.168.2.4	1.1.1.1	0xa3e5	Standard query (0)	_dc-mx.410986632b22.brownielabs.pe	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:11:01.598933935 CEST	192.168.2.4	1.1.1.1	0xf51b	Standard query (0)	smtp.xs4all.nl	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:11:01.599509001 CEST	192.168.2.4	1.1.1.1	0x3ec8	Standard query (0)	smtp.ymlaenceredigion.org.uk	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:11:01.650003910 CEST	192.168.2.4	1.1.1.1	0x6da1	Standard query (0)	mail.netaporter.pl	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:11:01.651026011 CEST	192.168.2.4	1.1.1.1	0xb3a6	Standard query (0)	securesmtp.urdisc.com.ua	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:11:02.947933912 CEST	192.168.2.4	1.1.1.1	0xe530	Standard query (0)	out.zjnobx.com	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:11:02.948268890 CEST	192.168.2.4	1.1.1.1	0x4831	Standard query (0)	mail.michaeljamesdesign.co.uk	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:11:02.949248075 CEST	192.168.2.4	1.1.1.1	0x9b8c	Standard query (0)	mail.eatel.net	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:11:02.956307888 CEST	192.168.2.4	1.1.1.1	0xcf6f	Standard query (0)	securesmtp.rewe-touristik.com	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:11:02.956672907 CEST	192.168.2.4	1.1.1.1	0x53b5	Standard query (0)	mail.thegarciafamily.co.uk	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:11:02.957037926 CEST	192.168.2.4	1.1.1.1	0x2a03	Standard query (0)	smtp.mstorrie.fsnet.co.uk	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:11:03.815881968 CEST	192.168.2.4	1.1.1.1	0x272a	Standard query (0)	mail.itrs.net.br	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:11:03.906455994 CEST	192.168.2.4	1.1.1.1	0x2e37	Standard query (0)	mx1.mail.uk.easynet.net	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:11:03.906744957 CEST	192.168.2.4	1.1.1.1	0xdaf6	Standard query (0)	securesmtp.cafrance.com	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:11:03.922236919 CEST	192.168.2.4	1.1.1.1	0xa338	Standard query (0)	out.flingenieros.com	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:11:03.932769060 CEST	192.168.2.4	1.1.1.1	0x998d	Standard query (0)	secure.migato.ga	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:11:03.992824078 CEST	192.168.2.4	1.1.1.1	0x90d2	Standard query (0)	securesmtp.noneonsjajjdfjfujucjc.com	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:11:04.082645893 CEST	192.168.2.4	1.1.1.1	0x3df3	Standard query (0)	secure.uqtr.ca	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:11:04.125768900 CEST	192.168.2.4	1.1.1.1	0x4a02	Standard query (0)	smtp.hkpearl.com.hk	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:11:04.125888109 CEST	192.168.2.4	1.1.1.1	0xb472	Standard query (0)	smtp.studiodenapoli.com	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:11:04.126226902 CEST	192.168.2.4	1.1.1.1	0x3ece	Standard query (0)	mail.ddyldm.com	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:11:04.193161964 CEST	192.168.2.4	1.1.1.1	0x5cb0	Standard query (0)	ahqua.co.uk	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:11:04.273325920 CEST	192.168.2.4	1.1.1.1	0xb8fc	Standard query (0)	secure.quisumbingtorres.com	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:11:04.274354935 CEST	192.168.2.4	1.1.1.1	0x2cb4	Standard query (0)	smtp.163.net	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:11:04.352443933 CEST	192.168.2.4	1.1.1.1	0xead5	Standard query (0)	disciplesofmercy.co.ke	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:11:04.443989992 CEST	192.168.2.4	1.1.1.1	0xca1	Standard query (0)	smtp.essvideo.com	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:11:04.445044994 CEST	192.168.2.4	1.1.1.1	0xc01e	Standard query (0)	secure.da-raiders.de	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:11:04.445064068 CEST	192.168.2.4	1.1.1.1	0xe1af	Standard query (0)	hsc25.navy.mil	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:11:04.445413113 CEST	192.168.2.4	1.1.1.1	0xd3ee	Standard query (0)	relix.cl	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:11:04.445583105 CEST	192.168.2.4	1.1.1.1	0x4d6a	Standard query (0)	mail.lantic.net	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:11:04.458458900 CEST	192.168.2.4	1.1.1.1	0x1	Standard query (0)	hsc25.navy.mil	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:11:04.526087999 CEST	192.168.2.4	1.1.1.1	0xd43f	Standard query (0)	smtp.asilonidoilbiberon.it	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:11:04.526488066 CEST	192.168.2.4	1.1.1.1	0x593e	Standard query (0)	out.lbguk.net	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:11:04.526539087 CEST	192.168.2.4	1.1.1.1	0x5f5e	Standard query (0)	smtp.sweetybunny.com	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:11:04.526779890 CEST	192.168.2.4	1.1.1.1	0x7730	Standard query (0)	austineng.com	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:11:04.526909113 CEST	192.168.2.4	1.1.1.1	0xa473	Standard query (0)	mail.zsolen.ro	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:11:04.593565941 CEST	192.168.2.4	1.1.1.1	0x795	Standard query (0)	mail.alternativeplastics.com.au	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:11:04.593784094 CEST	192.168.2.4	1.1.1.1	0x8671	Standard query (0)	votre-webmaster.com	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:11:04.652133942 CEST	192.168.2.4	1.1.1.1	0x2fb6	Standard query (0)	smtp.shaw.ca	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:11:04.652403116 CEST	192.168.2.4	1.1.1.1	0x2b79	Standard query (0)	smtp.baech.dk	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:11:04.695095062 CEST	192.168.2.4	1.1.1.1	0xff12	Standard query (0)	smtp.infinito.it	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:11:04.785280943 CEST	192.168.2.4	1.1.1.1	0xb7b0	Standard query (0)	proofpoint5.sfu.ca	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:11:04.785573006 CEST	192.168.2.4	1.1.1.1	0x9583	Standard query (0)	smtp.qit.ne.jp	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:11:04.785850048 CEST	192.168.2.4	1.1.1.1	0x62b9	Standard query (0)	out.crossfitworks.com	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:11:04.786168098 CEST	192.168.2.4	1.1.1.1	0xc494	Standard query (0)	nntc-mx.email-protect.gosecure.net	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:11:04.921495914 CEST	192.168.2.4	1.1.1.1	0x9e8e	Standard query (0)	securesmtp.itsrebecca.com	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:11:04.991127014 CEST	192.168.2.4	1.1.1.1	0xac13	Standard query (0)	sencard.com.tr	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:11:04.991702080 CEST	192.168.2.4	1.1.1.1	0xc53b	Standard query (0)	harcdb.co.uk	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:11:04.991966963 CEST	192.168.2.4	1.1.1.1	0x86d9	Standard query (0)	smtp.vipchristianlouboutindiscount.com	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:11:05.139802933 CEST	192.168.2.4	1.1.1.1	0x4a02	Standard query (0)	smtp.hkpearl.com.hk	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:11:05.157769918 CEST	192.168.2.4	1.1.1.1	0x7af6	Standard query (0)	hw.ac.uk	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:11:05.158346891 CEST	192.168.2.4	1.1.1.1	0x59d2	Standard query (0)	clickconsulting.online	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:11:05.158773899 CEST	192.168.2.4	1.1.1.1	0x63d9	Standard query (0)	mail.freenetname.co.uk	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:11:05.158951044 CEST	192.168.2.4	1.1.1.1	0x784f	Standard query (0)	mail.dskbangladesh.org	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:11:05.159360886 CEST	192.168.2.4	1.1.1.1	0xaf58	Standard query (0)	out.zpost.plala.or.jp	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:11:05.528069973 CEST	192.168.2.4	1.1.1.1	0x7730	Standard query (0)	austineng.com	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:11:06.874476910 CEST	192.168.2.4	1.1.1.1	0x47a5	Standard query (0)	sulayici.com	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:11:06.875255108 CEST	192.168.2.4	1.1.1.1	0x5fd8	Standard query (0)	smtp.com.br	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:11:06.876334906 CEST	192.168.2.4	1.1.1.1	0xe94d	Standard query (0)	listerassociates.co.uk	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:11:06.880614042 CEST	192.168.2.4	1.1.1.1	0xbd69	Standard query (0)	mail.sncf.fr	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:11:06.881170988 CEST	192.168.2.4	1.1.1.1	0xca3	Standard query (0)	out.whitneytx.net	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:11:06.891804934 CEST	192.168.2.4	1.1.1.1	0xb0ce	Standard query (0)	georg-ackermann-schule.de	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:11:06.892079115 CEST	192.168.2.4	1.1.1.1	0xb893	Standard query (0)	securesmtp.kbvbredehorn.de	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:11:06.893573046 CEST	192.168.2.4	1.1.1.1	0xb8dc	Standard query (0)	wans.net	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:11:07.126780987 CEST	192.168.2.4	1.1.1.1	0xa52d	Standard query (0)	softbank.ne.jp	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:11:07.265410900 CEST	192.168.2.4	1.1.1.1	0xc435	Standard query (0)	nolahome.net	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:11:07.265794039 CEST	192.168.2.4	1.1.1.1	0x7c1c	Standard query (0)	securesmtp.helgahalkjaer.dk	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:11:07.266701937 CEST	192.168.2.4	1.1.1.1	0xfa03	Standard query (0)	modulonet.fr	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:11:07.269855022 CEST	192.168.2.4	1.1.1.1	0xb816	Standard query (0)	mail.vihchorus.org	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:11:07.270153046 CEST	192.168.2.4	1.1.1.1	0x24bb	Standard query (0)	_dc-mx.be643bbe8cb8.djstranger.com	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:11:07.359045029 CEST	192.168.2.4	1.1.1.1	0x7d07	Standard query (0)	out.amereytryerta.co.cc	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:11:07.359158039 CEST	192.168.2.4	1.1.1.1	0x20f3	Standard query (0)	smtp.aslogic.es	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:11:07.359352112 CEST	192.168.2.4	1.1.1.1	0xf623	Standard query (0)	hosting2366159.online.pro	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:11:07.468949080 CEST	192.168.2.4	1.1.1.1	0xf018	Standard query (0)	mail.1100du.com	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:11:07.469460964 CEST	192.168.2.4	1.1.1.1	0x1c24	Standard query (0)	securesmtp.clubinternet.fr	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:11:07.469480991 CEST	192.168.2.4	1.1.1.1	0x4d17	Standard query (0)	out.hogarcrea.net	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:11:07.469780922 CEST	192.168.2.4	1.1.1.1	0x3cf	Standard query (0)	tesco.net	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:11:07.470057011 CEST	192.168.2.4	1.1.1.1	0xcf07	Standard query (0)	mx.ertemaik.com	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:11:07.646609068 CEST	192.168.2.4	1.1.1.1	0xbe54	Standard query (0)	securesmtp.stanfordschool.co.uk	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:11:07.647593975 CEST	192.168.2.4	1.1.1.1	0xfd13	Standard query (0)	fycreation.com	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:11:07.647593975 CEST	192.168.2.4	1.1.1.1	0xd20b	Standard query (0)	fernexpo.com	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:11:07.647775888 CEST	192.168.2.4	1.1.1.1	0xfaff	Standard query (0)	mail.ctb.ne.jp	A (IP address)	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Aug 1, 2024 06:09:01.375186920 CEST	1.1.1.1	192.168.2.4	0x97a7	No error (0)	claywyaeropumps.com		185.43.220.45	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:09.389837980 CEST	1.1.1.1	192.168.2.4	0xcdc5	No error (0)	rofe.ao		185.197.194.250	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:09.643006086 CEST	1.1.1.1	192.168.2.4	0x4eea	No error (0)	smtp.singnet.com.sg	smtp.orchid.atmailcloud.com		CNAME (Canonical name)	IN (0x0001)	false
Aug 1, 2024 06:09:09.643006086 CEST	1.1.1.1	192.168.2.4	0x4eea	No error (0)	smtp.orchid.atmailcloud.com		13.250.88.201	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:09.643006086 CEST	1.1.1.1	192.168.2.4	0x4eea	No error (0)	smtp.orchid.atmailcloud.com		13.251.182.77	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:09.643006086 CEST	1.1.1.1	192.168.2.4	0x4eea	No error (0)	smtp.orchid.atmailcloud.com		13.251.216.156	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:10.003988981 CEST	1.1.1.1	192.168.2.4	0x1bca	No error (0)	mail.almkana.com		50.87.144.214	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:10.050883055 CEST	1.1.1.1	192.168.2.4	0x27b0	No error (0)	smtp.ipatrimoniales.com		217.76.146.62	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:10.106457949 CEST	1.1.1.1	192.168.2.4	0xe5cc	No error (0)	mail.century21.com.ve		52.32.228.196	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:10.153676987 CEST	1.1.1.1	192.168.2.4	0x4f5	No error (0)	mail.staff.gunadarma.ac.id		202.125.94.90	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:10.259224892 CEST	1.1.1.1	192.168.2.4	0xeb44	No error (0)	mail.midwich-cuckoos.co.uk	mail.ic24.net		CNAME (Canonical name)	IN (0x0001)	false
Aug 1, 2024 06:09:10.259224892 CEST	1.1.1.1	192.168.2.4	0xeb44	No error (0)	mail.ic24.net		212.159.8.236	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:10.259224892 CEST	1.1.1.1	192.168.2.4	0xeb44	No error (0)	mail.ic24.net		212.159.9.236	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:10.339570045 CEST	1.1.1.1	192.168.2.4	0xe777	No error (0)	smtp.freemail.hu		84.2.43.67	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:10.537497044 CEST	1.1.1.1	192.168.2.4	0x1435	No error (0)	skydutravel.com		162.241.219.179	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:11.041759968 CEST	1.1.1.1	192.168.2.4	0x938d	No error (0)	mail.gofrosystems.com		178.170.244.56	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:11.242405891 CEST	1.1.1.1	192.168.2.4	0xda3c	No error (0)	mail.inovasi.com.my		103.6.196.75	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:11.272598982 CEST	1.1.1.1	192.168.2.4	0x3a98	Name error (3)	smtp.cpdistributor.com	none	none	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:11.364142895 CEST	1.1.1.1	192.168.2.4	0x359c	No error (0)	smtp.frontiernet.net	relay.glb.frontiernet.net		CNAME (Canonical name)	IN (0x0001)	false
Aug 1, 2024 06:09:11.364142895 CEST	1.1.1.1	192.168.2.4	0x359c	No error (0)	relay.glb.frontiernet.net		199.224.64.206	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:11.761451960 CEST	1.1.1.1	192.168.2.4	0x4870	No error (0)	smtp.ic24.net		212.159.9.236	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:11.761451960 CEST	1.1.1.1	192.168.2.4	0x4870	No error (0)	smtp.ic24.net		212.159.8.236	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:11.870153904 CEST	1.1.1.1	192.168.2.4	0x7665	No error (0)	mx.oradomail.com		193.46.84.40	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:12.000752926 CEST	1.1.1.1	192.168.2.4	0x7afe	No error (0)	ecogreentech.co.in		103.92.235.45	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:12.050637960 CEST	1.1.1.1	192.168.2.4	0x3594	No error (0)	smtp.cableonda.net	mail.cableonda.net		CNAME (Canonical name)	IN (0x0001)	false
Aug 1, 2024 06:09:12.050637960 CEST	1.1.1.1	192.168.2.4	0x3594	No error (0)	mail.cableonda.net		200.90.133.79	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:12.095479012 CEST	1.1.1.1	192.168.2.4	0x47be	No error (0)	cehni.org		162.241.219.218	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:12.542370081 CEST	1.1.1.1	192.168.2.4	0x1c14	No error (0)	smtp.cg.em-net.ne.jp	tsunagu-smtp-v4.xspmail.jp		CNAME (Canonical name)	IN (0x0001)	false
Aug 1, 2024 06:09:12.542370081 CEST	1.1.1.1	192.168.2.4	0x1c14	No error (0)	tsunagu-smtp-v4.xspmail.jp		160.13.60.151	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:12.942121983 CEST	1.1.1.1	192.168.2.4	0x71be	No error (0)	mail.wavesmail.xyz		84.32.84.33	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:13.078217983 CEST	1.1.1.1	192.168.2.4	0x4369	No error (0)	smtp.metrocast.net	mail.fmc.echolabs.net		CNAME (Canonical name)	IN (0x0001)	false
Aug 1, 2024 06:09:13.078217983 CEST	1.1.1.1	192.168.2.4	0x4369	No error (0)	mail.fmc.echolabs.net		38.111.141.40	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:13.175611973 CEST	1.1.1.1	192.168.2.4	0x43d7	No error (0)	mail.usiu.ac.ke		41.204.183.54	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:13.175611973 CEST	1.1.1.1	192.168.2.4	0x43d7	No error (0)	mail.usiu.ac.ke		41.204.183.50	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:13.175611973 CEST	1.1.1.1	192.168.2.4	0x43d7	No error (0)	mail.usiu.ac.ke		41.204.183.51	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:13.358020067 CEST	1.1.1.1	192.168.2.4	0x9159	No error (0)	mail.hdimpressoras.com.br		50.116.87.178	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:13.595779896 CEST	1.1.1.1	192.168.2.4	0xd0c	No error (0)	smtp.mediacombb.net	mcc.smtp.a.cloudfilter.net		CNAME (Canonical name)	IN (0x0001)	false
Aug 1, 2024 06:09:13.595779896 CEST	1.1.1.1	192.168.2.4	0xd0c	No error (0)	mcc.smtp.a.cloudfilter.net		18.236.21.232	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:13.595779896 CEST	1.1.1.1	192.168.2.4	0xd0c	No error (0)	mcc.smtp.a.cloudfilter.net		35.175.55.215	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:13.595779896 CEST	1.1.1.1	192.168.2.4	0xd0c	No error (0)	mcc.smtp.a.cloudfilter.net		34.213.176.2	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:13.595779896 CEST	1.1.1.1	192.168.2.4	0xd0c	No error (0)	mcc.smtp.a.cloudfilter.net		35.172.131.32	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:13.627667904 CEST	1.1.1.1	192.168.2.4	0x4ef7	No error (0)	_dc-mx.72265b24d205.kanserimmunoterapisidernegi.com		93.89.226.87	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:13.715605974 CEST	1.1.1.1	192.168.2.4	0x956	No error (0)	smtp.frontier.com	relay-ftrcom.glb.frontiernet.net		CNAME (Canonical name)	IN (0x0001)	false
Aug 1, 2024 06:09:13.715605974 CEST	1.1.1.1	192.168.2.4	0x956	No error (0)	relay-ftrcom.glb.frontiernet.net		66.133.129.50	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:13.987834930 CEST	1.1.1.1	192.168.2.4	0x253	No error (0)	mail.burhanreklam.com		185.165.46.2	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:14.056360960 CEST	1.1.1.1	192.168.2.4	0xe9a8	No error (0)	smtp.mapalus.com		64.140.165.234	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:14.062992096 CEST	1.1.1.1	192.168.2.4	0xc69a	No error (0)	smtp.iprimus.com.au	smtp-ip.gtm.oss-core.net		CNAME (Canonical name)	IN (0x0001)	false
Aug 1, 2024 06:09:14.062992096 CEST	1.1.1.1	192.168.2.4	0xc69a	No error (0)	smtp-ip.gtm.oss-core.net		203.134.153.82	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:14.336991072 CEST	1.1.1.1	192.168.2.4	0xd02c	No error (0)	smtp.bps.go.id		203.123.60.51	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:14.336991072 CEST	1.1.1.1	192.168.2.4	0xd02c	No error (0)	smtp.bps.go.id		203.123.60.49	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:14.336991072 CEST	1.1.1.1	192.168.2.4	0xd02c	No error (0)	smtp.bps.go.id		203.123.60.48	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:14.336991072 CEST	1.1.1.1	192.168.2.4	0xd02c	No error (0)	smtp.bps.go.id		203.123.60.53	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:14.733649015 CEST	1.1.1.1	192.168.2.4	0x5bd1	No error (0)	ugelcondorcanqui.gob.pe		167.114.62.28	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:14.739367008 CEST	1.1.1.1	192.168.2.4	0x8030	No error (0)	smtp.bp2mi.go.id		103.170.105.14	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:14.761256933 CEST	1.1.1.1	192.168.2.4	0xba11	No error (0)	smtp.aqualuxinc.com	us2.smtp.mailhostbox.com		CNAME (Canonical name)	IN (0x0001)	false
Aug 1, 2024 06:09:14.761256933 CEST	1.1.1.1	192.168.2.4	0xba11	No error (0)	us2.smtp.mailhostbox.com		208.91.199.225	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:14.761256933 CEST	1.1.1.1	192.168.2.4	0xba11	No error (0)	us2.smtp.mailhostbox.com		208.91.199.223	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:14.761256933 CEST	1.1.1.1	192.168.2.4	0xba11	No error (0)	us2.smtp.mailhostbox.com		208.91.199.224	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:14.761256933 CEST	1.1.1.1	192.168.2.4	0xba11	No error (0)	us2.smtp.mailhostbox.com		208.91.198.143	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:14.804826021 CEST	1.1.1.1	192.168.2.4	0x37e4	No error (0)	smtp.distribon.com		190.105.202.10	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:14.804855108 CEST	1.1.1.1	192.168.2.4	0x37e4	No error (0)	smtp.distribon.com		190.105.202.10	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:14.804883003 CEST	1.1.1.1	192.168.2.4	0x37e4	No error (0)	smtp.distribon.com		190.105.202.10	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:14.804910898 CEST	1.1.1.1	192.168.2.4	0x37e4	No error (0)	smtp.distribon.com		190.105.202.10	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:15.024838924 CEST	1.1.1.1	192.168.2.4	0x3d3b	No error (0)	noorsalim.co.id		103.5.50.24	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:15.432374001 CEST	1.1.1.1	192.168.2.4	0x19a	No error (0)	smtp.impresavaleriani.com		62.149.157.154	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:15.439703941 CEST	1.1.1.1	192.168.2.4	0x73a9	No error (0)	mail.ianjohns.co.uk	mail.freenetname.co.uk		CNAME (Canonical name)	IN (0x0001)	false
Aug 1, 2024 06:09:15.439703941 CEST	1.1.1.1	192.168.2.4	0x73a9	No error (0)	mail.freenetname.co.uk		212.159.8.233	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:15.439703941 CEST	1.1.1.1	192.168.2.4	0x73a9	No error (0)	mail.freenetname.co.uk		212.159.9.233	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:16.027960062 CEST	1.1.1.1	192.168.2.4	0x79c1	No error (0)	smtp.stofanet.dk		212.10.10.65	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:16.137254000 CEST	1.1.1.1	192.168.2.4	0xb578	No error (0)	autoart.world		15.235.118.229	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:16.210587978 CEST	1.1.1.1	192.168.2.4	0x69c5	No error (0)	triangle-m.com		164.52.146.15	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:16.481945038 CEST	1.1.1.1	192.168.2.4	0xef60	No error (0)	smtp.madasafish.com		212.159.8.238	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:16.481945038 CEST	1.1.1.1	192.168.2.4	0xef60	No error (0)	smtp.madasafish.com		212.159.9.238	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:16.758606911 CEST	1.1.1.1	192.168.2.4	0xff38	No error (0)	smtp.upcpoczta.pl	smtp-upcpoczta-pl.cname.unified.services		CNAME (Canonical name)	IN (0x0001)	false
Aug 1, 2024 06:09:16.758606911 CEST	1.1.1.1	192.168.2.4	0xff38	No error (0)	smtp-upcpoczta-pl.cname.unified.services		94.169.2.35	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:16.760054111 CEST	1.1.1.1	192.168.2.4	0x761f	No error (0)	mail.student.pens.ac.id		202.9.85.53	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:17.159782887 CEST	1.1.1.1	192.168.2.4	0xe91a	No error (0)	smtp.telenet.be		195.130.132.10	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:17.159782887 CEST	1.1.1.1	192.168.2.4	0xe91a	No error (0)	smtp.telenet.be		195.130.132.11	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:17.321614027 CEST	1.1.1.1	192.168.2.4	0xb0fe	No error (0)	vrt.ovh		146.59.44.242	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:17.607228041 CEST	1.1.1.1	192.168.2.4	0x4ef9	No error (0)	orion-serv.ovh		62.210.246.119	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:17.814541101 CEST	1.1.1.1	192.168.2.4	0xb5a6	No error (0)	smtp.nb.sympatico.ca	smtp.bellaliant.net		CNAME (Canonical name)	IN (0x0001)	false
Aug 1, 2024 06:09:17.814541101 CEST	1.1.1.1	192.168.2.4	0xb5a6	No error (0)	smtp.bellaliant.net	smtp-aliant.bell.net		CNAME (Canonical name)	IN (0x0001)	false
Aug 1, 2024 06:09:17.814541101 CEST	1.1.1.1	192.168.2.4	0xb5a6	No error (0)	smtp-aliant.bell.net		209.71.212.26	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:17.958404064 CEST	1.1.1.1	192.168.2.4	0x88dc	No error (0)	smtp.ac.em-net.ne.jp	tsunagu-smtp-v4.xspmail.jp		CNAME (Canonical name)	IN (0x0001)	false
Aug 1, 2024 06:09:17.958404064 CEST	1.1.1.1	192.168.2.4	0x88dc	No error (0)	tsunagu-smtp-v4.xspmail.jp		160.13.60.151	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:18.014782906 CEST	1.1.1.1	192.168.2.4	0x61e4	No error (0)	smtp.espetoflex.com.br	pop.espetoflex.com.br		CNAME (Canonical name)	IN (0x0001)	false
Aug 1, 2024 06:09:18.014782906 CEST	1.1.1.1	192.168.2.4	0x61e4	No error (0)	pop.espetoflex.com.br	mail.ita.locamail.com.br		CNAME (Canonical name)	IN (0x0001)	false
Aug 1, 2024 06:09:18.014782906 CEST	1.1.1.1	192.168.2.4	0x61e4	No error (0)	mail.ita.locamail.com.br		191.252.112.195	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:18.014812946 CEST	1.1.1.1	192.168.2.4	0x61e4	No error (0)	smtp.espetoflex.com.br	pop.espetoflex.com.br		CNAME (Canonical name)	IN (0x0001)	false
Aug 1, 2024 06:09:18.014812946 CEST	1.1.1.1	192.168.2.4	0x61e4	No error (0)	pop.espetoflex.com.br	mail.ita.locamail.com.br		CNAME (Canonical name)	IN (0x0001)	false
Aug 1, 2024 06:09:18.014812946 CEST	1.1.1.1	192.168.2.4	0x61e4	No error (0)	mail.ita.locamail.com.br		191.252.112.195	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:18.014842033 CEST	1.1.1.1	192.168.2.4	0x61e4	No error (0)	smtp.espetoflex.com.br	pop.espetoflex.com.br		CNAME (Canonical name)	IN (0x0001)	false
Aug 1, 2024 06:09:18.014842033 CEST	1.1.1.1	192.168.2.4	0x61e4	No error (0)	pop.espetoflex.com.br	mail.ita.locamail.com.br		CNAME (Canonical name)	IN (0x0001)	false
Aug 1, 2024 06:09:18.014842033 CEST	1.1.1.1	192.168.2.4	0x61e4	No error (0)	mail.ita.locamail.com.br		191.252.112.195	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:18.222534895 CEST	1.1.1.1	192.168.2.4	0x394a	No error (0)	mail.vitelcom.net		66.248.160.85	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:18.255554914 CEST	1.1.1.1	192.168.2.4	0x38e2	No error (0)	patioraiz.com.br		192.185.177.117	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:18.781045914 CEST	1.1.1.1	192.168.2.4	0xbbf	No error (0)	verenasportsfit.com		51.89.247.113	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:19.206836939 CEST	1.1.1.1	192.168.2.4	0x9885	No error (0)	smtp.pandora.be	smtp.telenet.be		CNAME (Canonical name)	IN (0x0001)	false
Aug 1, 2024 06:09:19.206836939 CEST	1.1.1.1	192.168.2.4	0x9885	No error (0)	smtp.telenet.be		195.130.132.11	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:19.206836939 CEST	1.1.1.1	192.168.2.4	0x9885	No error (0)	smtp.telenet.be		195.130.132.10	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:19.504062891 CEST	1.1.1.1	192.168.2.4	0x8f3c	No error (0)	thewebfactory.us		198.54.120.144	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:19.815094948 CEST	1.1.1.1	192.168.2.4	0x6b6c	No error (0)	sammancontracting.com		165.140.69.186	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:20.172620058 CEST	1.1.1.1	192.168.2.4	0xa11c	No error (0)	voobie.com		108.167.180.142	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:20.323004007 CEST	1.1.1.1	192.168.2.4	0xeebc	No error (0)	smtp.af.em-net.ne.jp	tsunagu-smtp-v4.xspmail.jp		CNAME (Canonical name)	IN (0x0001)	false
Aug 1, 2024 06:09:20.323004007 CEST	1.1.1.1	192.168.2.4	0xeebc	No error (0)	tsunagu-smtp-v4.xspmail.jp		160.13.60.151	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:20.334620953 CEST	1.1.1.1	192.168.2.4	0x5e26	No error (0)	sigsoconsultores.com		144.217.158.194	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:20.633140087 CEST	1.1.1.1	192.168.2.4	0xfc0d	No error (0)	smtp.kiwi-web.ch	mail.infomaniak.ch		CNAME (Canonical name)	IN (0x0001)	false
Aug 1, 2024 06:09:20.633140087 CEST	1.1.1.1	192.168.2.4	0xfc0d	No error (0)	mail.infomaniak.ch		83.166.143.44	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:20.633140087 CEST	1.1.1.1	192.168.2.4	0xfc0d	No error (0)	mail.infomaniak.ch		83.166.143.45	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:20.889491081 CEST	1.1.1.1	192.168.2.4	0xf283	No error (0)	smtp.lissrl.com		62.149.128.200	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:20.889491081 CEST	1.1.1.1	192.168.2.4	0xf283	No error (0)	smtp.lissrl.com		62.149.128.201	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:20.889491081 CEST	1.1.1.1	192.168.2.4	0xf283	No error (0)	smtp.lissrl.com		62.149.128.203	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:20.889491081 CEST	1.1.1.1	192.168.2.4	0xf283	No error (0)	smtp.lissrl.com		62.149.128.202	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:21.355925083 CEST	1.1.1.1	192.168.2.4	0xf509	No error (0)	smtp.aw.em-net.ne.jp	tsunagu-smtp-v4.xspmail.jp		CNAME (Canonical name)	IN (0x0001)	false
Aug 1, 2024 06:09:21.355925083 CEST	1.1.1.1	192.168.2.4	0xf509	No error (0)	tsunagu-smtp-v4.xspmail.jp		160.13.60.151	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:21.670593977 CEST	1.1.1.1	192.168.2.4	0x4336	No error (0)	smtp3-rdslink.rcs-rds.ro		82.76.254.41	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:22.032392979 CEST	1.1.1.1	192.168.2.4	0xdd73	No error (0)	smtp.massagioconda.com		62.149.128.201	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:22.032392979 CEST	1.1.1.1	192.168.2.4	0xdd73	No error (0)	smtp.massagioconda.com		62.149.128.202	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:22.032392979 CEST	1.1.1.1	192.168.2.4	0xdd73	No error (0)	smtp.massagioconda.com		62.149.128.203	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:22.032392979 CEST	1.1.1.1	192.168.2.4	0xdd73	No error (0)	smtp.massagioconda.com		62.149.128.200	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:22.197046995 CEST	1.1.1.1	192.168.2.4	0xdae	No error (0)	ms5.url.com.tw		210.59.228.38	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:22.420663118 CEST	1.1.1.1	192.168.2.4	0xf31f	No error (0)	smtp.jeff-bhv.de	mailout.netbeat.de		CNAME (Canonical name)	IN (0x0001)	false
Aug 1, 2024 06:09:22.420663118 CEST	1.1.1.1	192.168.2.4	0xf31f	No error (0)	mailout.netbeat.de		83.243.58.138	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:22.957386971 CEST	1.1.1.1	192.168.2.4	0xf809	No error (0)	mail.magelangkota.go.id		103.86.139.86	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:23.117283106 CEST	1.1.1.1	192.168.2.4	0x9cdf	No error (0)	pro17.emailserver.vn		103.110.129.117	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:23.524435043 CEST	1.1.1.1	192.168.2.4	0xf892	No error (0)	smtp.start.psi.br	pop.start.psi.br		CNAME (Canonical name)	IN (0x0001)	false
Aug 1, 2024 06:09:23.524435043 CEST	1.1.1.1	192.168.2.4	0xf892	No error (0)	pop.start.psi.br	mail.ita.locaweb.com.br		CNAME (Canonical name)	IN (0x0001)	false
Aug 1, 2024 06:09:23.524435043 CEST	1.1.1.1	192.168.2.4	0xf892	No error (0)	mail.ita.locaweb.com.br		191.252.112.194	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:23.694446087 CEST	1.1.1.1	192.168.2.4	0x9a5	No error (0)	cashamericatoday.com		13.77.77.162	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:23.787638903 CEST	1.1.1.1	192.168.2.4	0x4cd0	No error (0)	stu.univ-saida.dz		41.110.190.122	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:24.117582083 CEST	1.1.1.1	192.168.2.4	0xc4f0	No error (0)	poczta.oirpwarszawa.pl		31.179.210.222	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:24.155914068 CEST	1.1.1.1	192.168.2.4	0x4411	No error (0)	mail.airmail.cc	mail.cock.li		CNAME (Canonical name)	IN (0x0001)	false
Aug 1, 2024 06:09:24.155914068 CEST	1.1.1.1	192.168.2.4	0x4411	No error (0)	mail.cock.li		37.120.193.124	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:24.493207932 CEST	1.1.1.1	192.168.2.4	0x47c6	No error (0)	knaagdierenhotel.nl		178.251.28.102	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:24.866826057 CEST	1.1.1.1	192.168.2.4	0x2305	No error (0)	queenpuppy.co.kr		210.116.104.65	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:25.990638018 CEST	1.1.1.1	192.168.2.4	0xb261	No error (0)	hzmx01.mxmail.netease.com		139.95.7.216	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:25.994081974 CEST	1.1.1.1	192.168.2.4	0x730f	No error (0)	host06.emailserver.vn		103.15.48.10	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:26.109769106 CEST	1.1.1.1	192.168.2.4	0xe165	Server failure (2)	jardininfantilsmilingkidsnorte.com	none	none	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:26.120233059 CEST	1.1.1.1	192.168.2.4	0xc6ee	No error (0)	mail.ifcolaboradores.com		162.241.62.39	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:26.412195921 CEST	1.1.1.1	192.168.2.4	0xcf29	No error (0)	mail.anydoor.eu.org	wh.bitc.eu.org		CNAME (Canonical name)	IN (0x0001)	false
Aug 1, 2024 06:09:26.412195921 CEST	1.1.1.1	192.168.2.4	0xcf29	No error (0)	wh.bitc.eu.org		111.175.54.98	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:26.737672091 CEST	1.1.1.1	192.168.2.4	0x3de3	No error (0)	mail.nychousecleaners.net		192.185.32.240	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:26.767026901 CEST	1.1.1.1	192.168.2.4	0x52f1	No error (0)	mail.a1net.hr		212.91.113.96	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:27.235982895 CEST	1.1.1.1	192.168.2.4	0xfd4	No error (0)	autoforcenepal.com		192.198.192.27	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:27.369971037 CEST	1.1.1.1	192.168.2.4	0x9839	No error (0)	flyview.com.br		192.185.213.51	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:27.428757906 CEST	1.1.1.1	192.168.2.4	0x65eb	No error (0)	smtp.blueroom.com.ar		190.105.202.10	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:27.918833971 CEST	1.1.1.1	192.168.2.4	0x345a	No error (0)	dpa-legal.com		89.42.218.226	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:28.167695999 CEST	1.1.1.1	192.168.2.4	0x31bb	No error (0)	smtp.quickline.com		89.236.174.10	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:28.304105043 CEST	1.1.1.1	192.168.2.4	0x333	No error (0)	mail.dener.com	proxy.uzmanposta.com		CNAME (Canonical name)	IN (0x0001)	false
Aug 1, 2024 06:09:28.304105043 CEST	1.1.1.1	192.168.2.4	0x333	No error (0)	proxy.uzmanposta.com		77.79.88.19	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:28.304105043 CEST	1.1.1.1	192.168.2.4	0x333	No error (0)	proxy.uzmanposta.com		77.79.88.18	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:28.304105043 CEST	1.1.1.1	192.168.2.4	0x333	No error (0)	proxy.uzmanposta.com		159.146.44.134	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:28.304105043 CEST	1.1.1.1	192.168.2.4	0x333	No error (0)	proxy.uzmanposta.com		77.92.139.213	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:28.304105043 CEST	1.1.1.1	192.168.2.4	0x333	No error (0)	proxy.uzmanposta.com		188.119.51.226	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:28.304105043 CEST	1.1.1.1	192.168.2.4	0x333	No error (0)	proxy.uzmanposta.com		188.132.148.228	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:28.551054955 CEST	1.1.1.1	192.168.2.4	0xcca5	No error (0)	smtp.andradelogistica.com.br	pop.andradelogistica.com.br		CNAME (Canonical name)	IN (0x0001)	false
Aug 1, 2024 06:09:28.551054955 CEST	1.1.1.1	192.168.2.4	0xcca5	No error (0)	pop.andradelogistica.com.br	mail.ita.locamail.com.br		CNAME (Canonical name)	IN (0x0001)	false
Aug 1, 2024 06:09:28.551054955 CEST	1.1.1.1	192.168.2.4	0xcca5	No error (0)	mail.ita.locamail.com.br		191.252.112.195	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:28.572464943 CEST	1.1.1.1	192.168.2.4	0x2251	No error (0)	mail.tradejournal.co		162.144.12.100	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:28.852436066 CEST	1.1.1.1	192.168.2.4	0xfd8	No error (0)	emjoy.com.co		162.241.61.138	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:29.202950954 CEST	1.1.1.1	192.168.2.4	0x8e55	No error (0)	smtp.coqui.net	smtp.coquinet.mail2world.com		CNAME (Canonical name)	IN (0x0001)	false
Aug 1, 2024 06:09:29.202950954 CEST	1.1.1.1	192.168.2.4	0x8e55	No error (0)	smtp.coquinet.mail2world.com	smtp.amfixed.mail2world.com		CNAME (Canonical name)	IN (0x0001)	false
Aug 1, 2024 06:09:29.202950954 CEST	1.1.1.1	192.168.2.4	0x8e55	No error (0)	smtp.amfixed.mail2world.com		74.202.139.99	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:29.230170965 CEST	1.1.1.1	192.168.2.4	0x1	No error (0)	smtp.andradelogistica.com.br	pop.andradelogistica.com.br		CNAME (Canonical name)	IN (0x0001)	false
Aug 1, 2024 06:09:29.230170965 CEST	1.1.1.1	192.168.2.4	0x1	No error (0)	pop.andradelogistica.com.br	mail.ita.locamail.com.br		CNAME (Canonical name)	IN (0x0001)	false
Aug 1, 2024 06:09:29.230170965 CEST	1.1.1.1	192.168.2.4	0x1	No error (0)	mail.ita.locamail.com.br		191.252.112.195	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:29.291512012 CEST	1.1.1.1	192.168.2.4	0xf82f	No error (0)	smtp.kingstair.com	smtp.kingstair.com.netsolmail.net		CNAME (Canonical name)	IN (0x0001)	false
Aug 1, 2024 06:09:29.291512012 CEST	1.1.1.1	192.168.2.4	0xf82f	No error (0)	smtp.kingstair.com.netsolmail.net	smtp.netsol.xion.oxcs.net		CNAME (Canonical name)	IN (0x0001)	false
Aug 1, 2024 06:09:29.291512012 CEST	1.1.1.1	192.168.2.4	0xf82f	No error (0)	smtp.netsol.xion.oxcs.net		23.81.68.43	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:29.563539028 CEST	1.1.1.1	192.168.2.4	0x6a93	No error (0)	bergopakademie.com		192.254.225.239	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:29.666986942 CEST	1.1.1.1	192.168.2.4	0x7860	No error (0)	smtp.skynet.be	relay.glb.proximus.be		CNAME (Canonical name)	IN (0x0001)	false
Aug 1, 2024 06:09:29.666986942 CEST	1.1.1.1	192.168.2.4	0x7860	No error (0)	relay.glb.proximus.be		195.238.20.30	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:29.983819962 CEST	1.1.1.1	192.168.2.4	0x7adf	No error (0)	mail.zb.lv		195.216.236.113	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:30.234283924 CEST	1.1.1.1	192.168.2.4	0x7e45	No error (0)	smtp.ah.em-net.ne.jp	tsunagu-smtp-v4.xspmail.jp		CNAME (Canonical name)	IN (0x0001)	false
Aug 1, 2024 06:09:30.234283924 CEST	1.1.1.1	192.168.2.4	0x7e45	No error (0)	tsunagu-smtp-v4.xspmail.jp		160.13.60.151	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:30.287895918 CEST	1.1.1.1	192.168.2.4	0x328a	No error (0)	aventurasdealtura.cl		216.241.20.212	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:30.420145988 CEST	1.1.1.1	192.168.2.4	0x4727	No error (0)	emp3shop.unixstorm.org		91.227.123.130	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:30.678888083 CEST	1.1.1.1	192.168.2.4	0x1752	No error (0)	mail.cfnats.com.au		74.48.172.146	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:30.875710964 CEST	1.1.1.1	192.168.2.4	0xf751	No error (0)	runridedive.com		169.239.218.57	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:31.078602076 CEST	1.1.1.1	192.168.2.4	0x4a4a	No error (0)	mail.horsefucker.org	mail.cock.li		CNAME (Canonical name)	IN (0x0001)	false
Aug 1, 2024 06:09:31.078602076 CEST	1.1.1.1	192.168.2.4	0x4a4a	No error (0)	mail.cock.li		37.120.193.124	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:31.332573891 CEST	1.1.1.1	192.168.2.4	0x5d0e	No error (0)	mail.itfuerkinder.de		202.61.232.132	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:31.981467009 CEST	1.1.1.1	192.168.2.4	0x2cee	No error (0)	smtp.legendsnorcal.com	smtp.legendsnorcal.com.netsolmail.net		CNAME (Canonical name)	IN (0x0001)	false
Aug 1, 2024 06:09:31.981467009 CEST	1.1.1.1	192.168.2.4	0x2cee	No error (0)	smtp.legendsnorcal.com.netsolmail.net	smtp.netsol.xion.oxcs.net		CNAME (Canonical name)	IN (0x0001)	false
Aug 1, 2024 06:09:31.981467009 CEST	1.1.1.1	192.168.2.4	0x2cee	No error (0)	smtp.netsol.xion.oxcs.net		23.81.68.43	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:32.391093016 CEST	1.1.1.1	192.168.2.4	0x74ff	No error (0)	orbit360bd.com		167.99.74.84	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:32.870311975 CEST	1.1.1.1	192.168.2.4	0x2cf0	No error (0)	iotecelectronic.cl		192.185.48.228	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:33.096725941 CEST	1.1.1.1	192.168.2.4	0x91b0	No error (0)	smtp-in-01.systailor.fr		185.236.1.56	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:33.247471094 CEST	1.1.1.1	192.168.2.4	0x9ee6	No error (0)	smtp.people.net.au	smtp.commander.net.au		CNAME (Canonical name)	IN (0x0001)	false
Aug 1, 2024 06:09:33.247471094 CEST	1.1.1.1	192.168.2.4	0x9ee6	No error (0)	smtp.commander.net.au		203.134.11.8	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:33.366539955 CEST	1.1.1.1	192.168.2.4	0x920e	No error (0)	vivaxnet.com.br		186.202.190.108	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:33.791997910 CEST	1.1.1.1	192.168.2.4	0x2c77	No error (0)	smtp.modicamotos.com.ar		190.105.202.10	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:33.792023897 CEST	1.1.1.1	192.168.2.4	0x2c77	No error (0)	smtp.modicamotos.com.ar		190.105.202.10	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:34.020471096 CEST	1.1.1.1	192.168.2.4	0xae8	No error (0)	inoveservices.com.br		177.234.159.146	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:34.139806986 CEST	1.1.1.1	192.168.2.4	0x1e98	No error (0)	mail.destroyannoy.com		199.223.255.174	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:34.407532930 CEST	1.1.1.1	192.168.2.4	0x4c50	No error (0)	bsotr.or.id		103.58.102.34	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:34.407603979 CEST	1.1.1.1	192.168.2.4	0x4c50	No error (0)	bsotr.or.id		103.58.102.34	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:34.681762934 CEST	1.1.1.1	192.168.2.4	0xaaaf	No error (0)	warmadewa.ac.id		103.131.51.93	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:35.188191891 CEST	1.1.1.1	192.168.2.4	0xe69b	No error (0)	smtp.rr.em-net.ne.jp	tsunagu-smtp-v4.xspmail.jp		CNAME (Canonical name)	IN (0x0001)	false
Aug 1, 2024 06:09:35.188191891 CEST	1.1.1.1	192.168.2.4	0xe69b	No error (0)	tsunagu-smtp-v4.xspmail.jp		160.13.60.151	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:35.226480961 CEST	1.1.1.1	192.168.2.4	0x30a0	No error (0)	smtp.ag.em-net.ne.jp	tsunagu-smtp-v4.xspmail.jp		CNAME (Canonical name)	IN (0x0001)	false
Aug 1, 2024 06:09:35.226480961 CEST	1.1.1.1	192.168.2.4	0x30a0	No error (0)	tsunagu-smtp-v4.xspmail.jp		160.13.60.151	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:35.493899107 CEST	1.1.1.1	192.168.2.4	0x44e2	No error (0)	qipoo.pe		162.55.131.89	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:35.696118116 CEST	1.1.1.1	192.168.2.4	0x2c82	No error (0)	mail.vip.hr		212.91.113.96	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:36.032480001 CEST	1.1.1.1	192.168.2.4	0x1698	No error (0)	mail.laotel.com		115.84.127.20	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:36.481801033 CEST	1.1.1.1	192.168.2.4	0x30b0	No error (0)	learnally.info		23.111.182.242	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:36.720421076 CEST	1.1.1.1	192.168.2.4	0xb3dc	No error (0)	mail.urincho.mx		69.49.241.65	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:37.507663965 CEST	1.1.1.1	192.168.2.4	0x5bbc	No error (0)	smtp.italcard.net		62.149.128.200	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:37.507663965 CEST	1.1.1.1	192.168.2.4	0x5bbc	No error (0)	smtp.italcard.net		62.149.128.203	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:37.507663965 CEST	1.1.1.1	192.168.2.4	0x5bbc	No error (0)	smtp.italcard.net		62.149.128.201	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:37.507663965 CEST	1.1.1.1	192.168.2.4	0x5bbc	No error (0)	smtp.italcard.net		62.149.128.202	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:37.545692921 CEST	1.1.1.1	192.168.2.4	0xd3dd	No error (0)	fiftyone.com.ar		158.106.138.119	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:37.759366989 CEST	1.1.1.1	192.168.2.4	0x1b34	No error (0)	smartecosolutions.ma		157.90.129.108	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:37.760740995 CEST	1.1.1.1	192.168.2.4	0xf55b	No error (0)	uniquenetworkbd.com		115.187.18.122	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:38.234877110 CEST	1.1.1.1	192.168.2.4	0x97f	No error (0)	sebastianschool.org		74.220.219.219	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:38.239743948 CEST	1.1.1.1	192.168.2.4	0x102d	No error (0)	smtp.audreymakeup.com.br	pop.audreymakeup.com.br		CNAME (Canonical name)	IN (0x0001)	false
Aug 1, 2024 06:09:38.239743948 CEST	1.1.1.1	192.168.2.4	0x102d	No error (0)	pop.audreymakeup.com.br	mail.ita.locaweb.com.br		CNAME (Canonical name)	IN (0x0001)	false
Aug 1, 2024 06:09:38.239743948 CEST	1.1.1.1	192.168.2.4	0x102d	No error (0)	mail.ita.locaweb.com.br		191.252.112.194	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:39.161720991 CEST	1.1.1.1	192.168.2.4	0x8f5e	No error (0)	mail.truzt.in		162.215.252.247	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:39.228564978 CEST	1.1.1.1	192.168.2.4	0xada9	No error (0)	mail.247post.vn	mail24403.maychuemail.com		CNAME (Canonical name)	IN (0x0001)	false
Aug 1, 2024 06:09:39.228564978 CEST	1.1.1.1	192.168.2.4	0xada9	No error (0)	mail24403.maychuemail.com		123.30.244.3	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:39.228576899 CEST	1.1.1.1	192.168.2.4	0xada9	No error (0)	mail.247post.vn	mail24403.maychuemail.com		CNAME (Canonical name)	IN (0x0001)	false
Aug 1, 2024 06:09:39.228576899 CEST	1.1.1.1	192.168.2.4	0xada9	No error (0)	mail24403.maychuemail.com		123.30.244.3	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:39.566879034 CEST	1.1.1.1	192.168.2.4	0xcdfa	No error (0)	swiftukrecruitment.com		173.199.153.170	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:40.122385979 CEST	1.1.1.1	192.168.2.4	0x25fa	No error (0)	mail.strawberryadvertising.com	mail.stackmail.com		CNAME (Canonical name)	IN (0x0001)	false
Aug 1, 2024 06:09:40.122385979 CEST	1.1.1.1	192.168.2.4	0x25fa	No error (0)	mail.stackmail.com		185.151.28.68	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:40.122385979 CEST	1.1.1.1	192.168.2.4	0x25fa	No error (0)	mail.stackmail.com		185.151.28.85	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:40.122385979 CEST	1.1.1.1	192.168.2.4	0x25fa	No error (0)	mail.stackmail.com		185.151.28.84	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:40.127651930 CEST	1.1.1.1	192.168.2.4	0xb0ca	No error (0)	smtp.svgjpr.org	us2.smtp.mailhostbox.com		CNAME (Canonical name)	IN (0x0001)	false
Aug 1, 2024 06:09:40.127651930 CEST	1.1.1.1	192.168.2.4	0xb0ca	No error (0)	us2.smtp.mailhostbox.com		208.91.199.224	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:40.127651930 CEST	1.1.1.1	192.168.2.4	0xb0ca	No error (0)	us2.smtp.mailhostbox.com		208.91.199.223	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:40.127651930 CEST	1.1.1.1	192.168.2.4	0xb0ca	No error (0)	us2.smtp.mailhostbox.com		208.91.198.143	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:40.127651930 CEST	1.1.1.1	192.168.2.4	0xb0ca	No error (0)	us2.smtp.mailhostbox.com		208.91.199.225	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:40.306950092 CEST	1.1.1.1	192.168.2.4	0xeddf	No error (0)	mail.trabzonturkuazosgb.com		93.89.226.88	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:40.502192974 CEST	1.1.1.1	192.168.2.4	0x6b63	No error (0)	mail.primus.com.au	mail.iprimus.com.au		CNAME (Canonical name)	IN (0x0001)	false
Aug 1, 2024 06:09:40.502192974 CEST	1.1.1.1	192.168.2.4	0x6b63	No error (0)	mail.iprimus.com.au	pop.iprimus.com.au		CNAME (Canonical name)	IN (0x0001)	false
Aug 1, 2024 06:09:40.502192974 CEST	1.1.1.1	192.168.2.4	0x6b63	No error (0)	pop.iprimus.com.au		203.134.11.3	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:41.497730970 CEST	1.1.1.1	192.168.2.4	0xe8ba	No error (0)	umt.ac.id		139.99.90.119	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:42.028963089 CEST	1.1.1.1	192.168.2.4	0x465a	No error (0)	mail.o-guitars.com		200.58.111.68	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:42.403981924 CEST	1.1.1.1	192.168.2.4	0x9939	No error (0)	mail.enfaltekstil.com	mx-out02.natrohost.com		CNAME (Canonical name)	IN (0x0001)	false
Aug 1, 2024 06:09:42.403981924 CEST	1.1.1.1	192.168.2.4	0x9939	No error (0)	mx-out02.natrohost.com		94.73.188.14	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:42.493604898 CEST	1.1.1.1	192.168.2.4	0xe986	No error (0)	earthlink.net		104.18.208.148	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:42.493604898 CEST	1.1.1.1	192.168.2.4	0xe986	No error (0)	earthlink.net		104.19.239.228	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:42.612051010 CEST	1.1.1.1	192.168.2.4	0x2d99	No error (0)	ctdelco.org		100.24.208.97	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:42.612051010 CEST	1.1.1.1	192.168.2.4	0x2d99	No error (0)	ctdelco.org		35.172.94.1	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:42.674263000 CEST	1.1.1.1	192.168.2.4	0x852d	Name error (3)	out.ambrozoom3d.com	none	none	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:42.678745985 CEST	1.1.1.1	192.168.2.4	0xe584	No error (0)	ultimatefreedom.com		146.148.75.211	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:42.717689991 CEST	1.1.1.1	192.168.2.4	0x2e0	No error (0)	smtp.agentpersuasion.co.uk		35.187.82.108	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:42.725800991 CEST	1.1.1.1	192.168.2.4	0xefdd	No error (0)	arayazilim.com		185.210.92.163	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:42.744144917 CEST	1.1.1.1	192.168.2.4	0xbd4e	No error (0)	mail.woodsville-florist.com		103.237.169.60	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:42.782218933 CEST	1.1.1.1	192.168.2.4	0xa0fe	No error (0)	smtp.cellulopoli.it	712936.parkingcrew.net		CNAME (Canonical name)	IN (0x0001)	false
Aug 1, 2024 06:09:42.782218933 CEST	1.1.1.1	192.168.2.4	0xa0fe	No error (0)	712936.parkingcrew.net		76.223.26.96	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:42.782218933 CEST	1.1.1.1	192.168.2.4	0xa0fe	No error (0)	712936.parkingcrew.net		13.248.148.254	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:42.799758911 CEST	1.1.1.1	192.168.2.4	0x71bf	Name error (3)	securesmtp.templesfinancial.co.uk	none	none	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:42.811954021 CEST	1.1.1.1	192.168.2.4	0x87fe	No error (0)	smtp.iinet.net.au	mail.iinet.net.au		CNAME (Canonical name)	IN (0x0001)	false
Aug 1, 2024 06:09:42.811954021 CEST	1.1.1.1	192.168.2.4	0x87fe	No error (0)	mail.iinet.net.au	sep-kakadu03.au-east.atmailcloud.com		CNAME (Canonical name)	IN (0x0001)	false
Aug 1, 2024 06:09:42.811954021 CEST	1.1.1.1	192.168.2.4	0x87fe	No error (0)	sep-kakadu03.au-east.atmailcloud.com		52.62.236.135	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:42.811954021 CEST	1.1.1.1	192.168.2.4	0x87fe	No error (0)	sep-kakadu03.au-east.atmailcloud.com		54.153.230.49	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:42.939496994 CEST	1.1.1.1	192.168.2.4	0xe365	Name error (3)	mail.capitalshoppingpark.co.uk	none	none	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:43.046739101 CEST	1.1.1.1	192.168.2.4	0x2d9d	Name error (3)	mail.duckface.co.uk	none	none	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:43.111169100 CEST	1.1.1.1	192.168.2.4	0x6525	No error (0)	smtp.inwind.it		213.209.1.147	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:43.194495916 CEST	1.1.1.1	192.168.2.4	0x9386	No error (0)	mail.arditex.com		37.247.121.163	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:43.307044029 CEST	1.1.1.1	192.168.2.4	0xb6ce	Name error (3)	out.gotbabysigns.com	none	none	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:43.396739960 CEST	1.1.1.1	192.168.2.4	0x4b31	No error (0)	uqac-ca.mail.protection.outlook.com		52.101.190.0	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:43.396739960 CEST	1.1.1.1	192.168.2.4	0x4b31	No error (0)	uqac-ca.mail.protection.outlook.com		52.101.192.0	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:43.396739960 CEST	1.1.1.1	192.168.2.4	0x4b31	No error (0)	uqac-ca.mail.protection.outlook.com		52.101.190.1	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:43.396739960 CEST	1.1.1.1	192.168.2.4	0x4b31	No error (0)	uqac-ca.mail.protection.outlook.com		52.101.190.2	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:43.402664900 CEST	1.1.1.1	192.168.2.4	0x5d0b	No error (0)	mail.scotomasyon.com		212.154.35.220	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:43.475455999 CEST	1.1.1.1	192.168.2.4	0x3110	No error (0)	connectthink.com		3.33.130.190	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:43.475455999 CEST	1.1.1.1	192.168.2.4	0x3110	No error (0)	connectthink.com		15.197.148.33	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:43.560226917 CEST	1.1.1.1	192.168.2.4	0x16b8	Name error (3)	secure.hph.com	none	none	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:43.698452950 CEST	1.1.1.1	192.168.2.4	0x398c	No error (0)	cableone.net		24.116.124.161	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:43.719654083 CEST	1.1.1.1	192.168.2.4	0x960b	No error (0)	uwo-ca.mail.protection.outlook.com		52.101.190.3	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:43.719654083 CEST	1.1.1.1	192.168.2.4	0x960b	No error (0)	uwo-ca.mail.protection.outlook.com		52.101.190.1	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:43.719654083 CEST	1.1.1.1	192.168.2.4	0x960b	No error (0)	uwo-ca.mail.protection.outlook.com		52.101.190.2	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:43.719654083 CEST	1.1.1.1	192.168.2.4	0x960b	No error (0)	uwo-ca.mail.protection.outlook.com		52.101.192.1	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:43.856034040 CEST	1.1.1.1	192.168.2.4	0xdccb	No error (0)	smtp.frontiernet.net	relay.glb.frontiernet.net		CNAME (Canonical name)	IN (0x0001)	false
Aug 1, 2024 06:09:43.856034040 CEST	1.1.1.1	192.168.2.4	0xdccb	No error (0)	relay.glb.frontiernet.net		66.133.129.10	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:43.857309103 CEST	1.1.1.1	192.168.2.4	0xfe8e	No error (0)	mail.veroling.com	ssl0.ovh.net		CNAME (Canonical name)	IN (0x0001)	false
Aug 1, 2024 06:09:43.857309103 CEST	1.1.1.1	192.168.2.4	0xfe8e	No error (0)	ssl0.ovh.net		193.70.18.144	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:43.872942924 CEST	1.1.1.1	192.168.2.4	0x3ce2	Name error (3)	securesmtp.educati.com.ch	none	none	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:43.911612988 CEST	1.1.1.1	192.168.2.4	0x7f69	No error (0)	minos.ocn.ne.jp		180.37.194.18	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:43.920475960 CEST	1.1.1.1	192.168.2.4	0xeb34	No error (0)	smtp.virgilio.it	out.virgilio.it		CNAME (Canonical name)	IN (0x0001)	false
Aug 1, 2024 06:09:43.920475960 CEST	1.1.1.1	192.168.2.4	0xeb34	No error (0)	out.virgilio.it		213.209.1.145	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:43.965328932 CEST	1.1.1.1	192.168.2.4	0xa19c	Name error (3)	securesmtp.spaniennachmass.de	none	none	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:43.965357065 CEST	1.1.1.1	192.168.2.4	0x1963	No error (0)	tomkadlec.com		104.17.37.150	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:43.965357065 CEST	1.1.1.1	192.168.2.4	0x1963	No error (0)	tomkadlec.com		104.17.40.150	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:43.965357065 CEST	1.1.1.1	192.168.2.4	0x1963	No error (0)	tomkadlec.com		104.17.38.150	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:43.965357065 CEST	1.1.1.1	192.168.2.4	0x1963	No error (0)	tomkadlec.com		104.17.41.150	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:43.965357065 CEST	1.1.1.1	192.168.2.4	0x1963	No error (0)	tomkadlec.com		104.17.39.150	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:43.969098091 CEST	1.1.1.1	192.168.2.4	0x7b5b	Name error (3)	securesmtp.assocbuyers.com	none	none	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:43.969403028 CEST	1.1.1.1	192.168.2.4	0x1320	Name error (3)	mail.myrabeatriz.minemailin	none	none	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:44.045751095 CEST	1.1.1.1	192.168.2.4	0x7009	Name error (3)	secure.clerk.com	none	none	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:44.123266935 CEST	1.1.1.1	192.168.2.4	0xeecb	No error (0)	alt1.aspmx.l.google.com		142.250.153.26	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:44.123552084 CEST	1.1.1.1	192.168.2.4	0x6eb2	No error (0)	mx.stackmail.com		185.151.28.67	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:44.124000072 CEST	1.1.1.1	192.168.2.4	0xe331	No error (0)	mx-cluster-ca01.hornetsecurity.com		108.163.133.231	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:44.124937057 CEST	1.1.1.1	192.168.2.4	0xbace	No error (0)	securesmtp.dinamiknegocios.com		66.81.203.133	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:44.124937057 CEST	1.1.1.1	192.168.2.4	0xbace	No error (0)	securesmtp.dinamiknegocios.com		66.81.203.198	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:44.124937057 CEST	1.1.1.1	192.168.2.4	0xbace	No error (0)	securesmtp.dinamiknegocios.com		66.81.203.8	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:44.143677950 CEST	1.1.1.1	192.168.2.4	0xf062	No error (0)	jgstream.com		46.105.189.131	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:44.296335936 CEST	1.1.1.1	192.168.2.4	0x4ffc	Name error (3)	securesmtp.1tvmv.onmicrosoft.com	none	none	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:44.308387995 CEST	1.1.1.1	192.168.2.4	0xdad0	No error (0)	smtp.edandjuliereed.com	smtpout.secureserver.net		CNAME (Canonical name)	IN (0x0001)	false
Aug 1, 2024 06:09:44.308387995 CEST	1.1.1.1	192.168.2.4	0xdad0	No error (0)	smtpout.secureserver.net	smtpout.vox.secureserver.net		CNAME (Canonical name)	IN (0x0001)	false
Aug 1, 2024 06:09:44.308387995 CEST	1.1.1.1	192.168.2.4	0xdad0	No error (0)	smtpout.vox.secureserver.net	smtpout.eu-sxb1.vox.secureserver.net		CNAME (Canonical name)	IN (0x0001)	false
Aug 1, 2024 06:09:44.308387995 CEST	1.1.1.1	192.168.2.4	0xdad0	No error (0)	smtpout.eu-sxb1.vox.secureserver.net		92.204.80.1	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:44.311531067 CEST	1.1.1.1	192.168.2.4	0xaebd	No error (0)	kao-co-jp.mail.protection.outlook.com		52.101.157.10	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:44.311531067 CEST	1.1.1.1	192.168.2.4	0xaebd	No error (0)	kao-co-jp.mail.protection.outlook.com		52.101.124.5	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:44.311531067 CEST	1.1.1.1	192.168.2.4	0xaebd	No error (0)	kao-co-jp.mail.protection.outlook.com		52.101.124.0	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:44.311531067 CEST	1.1.1.1	192.168.2.4	0xaebd	No error (0)	kao-co-jp.mail.protection.outlook.com		52.101.124.1	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:44.335829020 CEST	1.1.1.1	192.168.2.4	0xc639	No error (0)	lisaallaninteriordesign.co.uk		185.151.30.142	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:44.463808060 CEST	1.1.1.1	192.168.2.4	0x68c3	No error (0)	alt4.aspmx.l.google.com		74.125.200.26	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:44.492835045 CEST	1.1.1.1	192.168.2.4	0xf093	No error (0)	hct-ac-ae.mail.protection.outlook.com		52.101.68.25	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:44.492835045 CEST	1.1.1.1	192.168.2.4	0xf093	No error (0)	hct-ac-ae.mail.protection.outlook.com		52.101.73.4	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:44.492835045 CEST	1.1.1.1	192.168.2.4	0xf093	No error (0)	hct-ac-ae.mail.protection.outlook.com		52.101.68.39	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:44.492835045 CEST	1.1.1.1	192.168.2.4	0xf093	No error (0)	hct-ac-ae.mail.protection.outlook.com		52.101.73.24	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:44.545139074 CEST	1.1.1.1	192.168.2.4	0xa70d	Name error (3)	securesmtp.internacional.ch	none	none	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:44.573632956 CEST	1.1.1.1	192.168.2.4	0x2b3c	No error (0)	keshlazer.uz		5.182.26.16	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:44.650428057 CEST	1.1.1.1	192.168.2.4	0xca3f	No error (0)	smtp.email.it	smtp.dka.mailcore.net		CNAME (Canonical name)	IN (0x0001)	false
Aug 1, 2024 06:09:44.650428057 CEST	1.1.1.1	192.168.2.4	0xca3f	No error (0)	smtp.dka.mailcore.net		185.138.56.194	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:44.650428057 CEST	1.1.1.1	192.168.2.4	0xca3f	No error (0)	smtp.dka.mailcore.net		194.19.134.66	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:44.650505066 CEST	1.1.1.1	192.168.2.4	0x8f1d	Name error (3)	out.hff.dhdf	none	none	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:44.729027987 CEST	1.1.1.1	192.168.2.4	0x450a	Name error (3)	secure.grace-academy.org.uk	none	none	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:44.768415928 CEST	1.1.1.1	192.168.2.4	0xfcde	No error (0)	smtp.centurylink.net	mail.centurylink.net		CNAME (Canonical name)	IN (0x0001)	false
Aug 1, 2024 06:09:44.768415928 CEST	1.1.1.1	192.168.2.4	0xfcde	No error (0)	mail.centurylink.net	lumen.pangia.biz		CNAME (Canonical name)	IN (0x0001)	false
Aug 1, 2024 06:09:44.768415928 CEST	1.1.1.1	192.168.2.4	0xfcde	No error (0)	lumen.pangia.biz		209.67.129.100	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:44.785711050 CEST	1.1.1.1	192.168.2.4	0x19b0	No error (0)	smtp.metropei.com		34.174.16.149	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:44.813893080 CEST	1.1.1.1	192.168.2.4	0x12fb	No error (0)	aspmx.l.google.com		74.125.71.27	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:44.815179110 CEST	1.1.1.1	192.168.2.4	0x878	No error (0)	mta.auchanbox.fr		82.216.111.1	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:44.816294909 CEST	1.1.1.1	192.168.2.4	0xad92	Name error (3)	smtp.aaofoo.com	none	none	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:44.856678963 CEST	1.1.1.1	192.168.2.4	0xea81	No error (0)	mail.magazinelojao.com.br		162.241.203.160	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:44.995563984 CEST	1.1.1.1	192.168.2.4	0x2ac0	Name error (3)	securesmtp.go-donkeys.net	none	none	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:45.003371000 CEST	1.1.1.1	192.168.2.4	0xc7b3	No error (0)	mail.nl-guitar.com	mail.nl-guitar.com.netsolmail.net		CNAME (Canonical name)	IN (0x0001)	false
Aug 1, 2024 06:09:45.003371000 CEST	1.1.1.1	192.168.2.4	0xc7b3	No error (0)	mail.nl-guitar.com.netsolmail.net	http.netsol.xion.oxcs.net		CNAME (Canonical name)	IN (0x0001)	false
Aug 1, 2024 06:09:45.003371000 CEST	1.1.1.1	192.168.2.4	0xc7b3	No error (0)	http.netsol.xion.oxcs.net		23.81.68.43	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:45.019279003 CEST	1.1.1.1	192.168.2.4	0x7237	No error (0)	h1realestate.com.au		103.250.215.162	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:45.093149900 CEST	1.1.1.1	192.168.2.4	0xc1f2	No error (0)	hzmx02.mxmail.netease.com		103.129.255.240	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:45.093149900 CEST	1.1.1.1	192.168.2.4	0xc1f2	No error (0)	hzmx02.mxmail.netease.com		103.129.255.239	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:45.094979048 CEST	1.1.1.1	192.168.2.4	0x86dc	Name error (3)	out.shiatzu.dk	none	none	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:45.158246040 CEST	1.1.1.1	192.168.2.4	0xc484	Name error (3)	secure.visualillusion.com.mx	none	none	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:45.250916004 CEST	1.1.1.1	192.168.2.4	0xf224	Name error (3)	secure.lakshmis.net	none	none	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:45.415689945 CEST	1.1.1.1	192.168.2.4	0xfa23	No error (0)	mx1r.nbp.pl		195.85.196.53	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:45.422393084 CEST	1.1.1.1	192.168.2.4	0xa2e5	Name error (3)	mail.blacksheepparts.com	none	none	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:45.426569939 CEST	1.1.1.1	192.168.2.4	0x7680	No error (0)	chapingo.mx		50.31.176.150	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:45.456039906 CEST	1.1.1.1	192.168.2.4	0x217a	No error (0)	hgf.fi		159.89.3.109	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:45.507162094 CEST	1.1.1.1	192.168.2.4	0x696d	No error (0)	rogers.com		40.85.218.2	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:45.574271917 CEST	1.1.1.1	192.168.2.4	0x472d	Name error (3)	secure.ahelpinghandrenovations.ca	none	none	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:45.576394081 CEST	1.1.1.1	192.168.2.4	0x8792	No error (0)	mail.hot.ee	imap.dka.mailcore.net		CNAME (Canonical name)	IN (0x0001)	false
Aug 1, 2024 06:09:45.576394081 CEST	1.1.1.1	192.168.2.4	0x8792	No error (0)	imap.dka.mailcore.net		185.138.56.213	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:45.576394081 CEST	1.1.1.1	192.168.2.4	0x8792	No error (0)	imap.dka.mailcore.net		194.19.134.85	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:45.608407974 CEST	1.1.1.1	192.168.2.4	0xeb43	No error (0)	mail.feutrie.com	ssl0.ovh.net		CNAME (Canonical name)	IN (0x0001)	false
Aug 1, 2024 06:09:45.608407974 CEST	1.1.1.1	192.168.2.4	0xeb43	No error (0)	ssl0.ovh.net		193.70.18.144	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:45.665025949 CEST	1.1.1.1	192.168.2.4	0xe21b	No error (0)	mail.terracotta.com.my		118.107.203.31	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:45.702435970 CEST	1.1.1.1	192.168.2.4	0xf5c9	No error (0)	hikmetaslan.com.tr		89.252.178.177	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:45.710396051 CEST	1.1.1.1	192.168.2.4	0x1119	No error (0)	inter7.jp		202.172.28.128	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:45.720746040 CEST	1.1.1.1	192.168.2.4	0x4ff2	No error (0)	zing.vn		49.213.103.199	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:45.720746040 CEST	1.1.1.1	192.168.2.4	0x4ff2	No error (0)	zing.vn		49.213.103.198	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:45.765691996 CEST	1.1.1.1	192.168.2.4	0xb5fd	No error (0)	smtp.ig.com.br	smtp-ha.skymail.net.br		CNAME (Canonical name)	IN (0x0001)	false
Aug 1, 2024 06:09:45.765691996 CEST	1.1.1.1	192.168.2.4	0xb5fd	No error (0)	smtp-ha.skymail.net.br		168.0.132.203	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:45.776057005 CEST	1.1.1.1	192.168.2.4	0xb47d	No error (0)	smtp.netzero.net		64.136.52.44	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:45.776057005 CEST	1.1.1.1	192.168.2.4	0xb47d	No error (0)	smtp.netzero.net		64.136.44.44	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:45.780910969 CEST	1.1.1.1	192.168.2.4	0xa706	Name error (3)	mail.thebfagency.com	none	none	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:45.816282988 CEST	1.1.1.1	192.168.2.4	0xf9b9	Name error (3)	mail.smilliesbulgaria.co.uk	none	none	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:45.830493927 CEST	1.1.1.1	192.168.2.4	0x9168	No error (0)	us-smtp-inbound-1.mimecast.com		205.139.110.221	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:45.830493927 CEST	1.1.1.1	192.168.2.4	0x9168	No error (0)	us-smtp-inbound-1.mimecast.com		170.10.128.221	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:45.830493927 CEST	1.1.1.1	192.168.2.4	0x9168	No error (0)	us-smtp-inbound-1.mimecast.com		205.139.110.141	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:45.830493927 CEST	1.1.1.1	192.168.2.4	0x9168	No error (0)	us-smtp-inbound-1.mimecast.com		170.10.128.242	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:45.830493927 CEST	1.1.1.1	192.168.2.4	0x9168	No error (0)	us-smtp-inbound-1.mimecast.com		170.10.128.141	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:45.830493927 CEST	1.1.1.1	192.168.2.4	0x9168	No error (0)	us-smtp-inbound-1.mimecast.com		205.139.110.242	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:45.836277962 CEST	1.1.1.1	192.168.2.4	0x25fc	Name error (3)	smtp.netime.cn	none	none	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:45.890825987 CEST	1.1.1.1	192.168.2.4	0x872d	No error (0)	hasajans.com		94.199.206.110	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:45.920589924 CEST	1.1.1.1	192.168.2.4	0xba8f	No error (0)	shared55.accountservergroup.com		162.215.248.236	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:45.938555002 CEST	1.1.1.1	192.168.2.4	0xff08	Name error (3)	smtp.dckits.co.uk	none	none	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:46.005369902 CEST	1.1.1.1	192.168.2.4	0x3	No error (0)	infomaticaacademy.com		213.199.44.104	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:46.009015083 CEST	1.1.1.1	192.168.2.4	0x2996	Name error (3)	smtp.bestknowledgeonline.com	none	none	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:46.011929989 CEST	1.1.1.1	192.168.2.4	0xbba7	No error (0)	iaplconsulting.com		103.110.127.145	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:46.019946098 CEST	1.1.1.1	192.168.2.4	0xf850	No error (0)	smtp.me.com	smtp.me.com.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Aug 1, 2024 06:09:46.234249115 CEST	1.1.1.1	192.168.2.4	0xe052	No error (0)	legados.net		217.116.5.231	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:46.259232998 CEST	1.1.1.1	192.168.2.4	0xe01a	Name error (3)	out.uqam.ca	none	none	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:46.265044928 CEST	1.1.1.1	192.168.2.4	0x3ae2	Name error (3)	securesmtp.amorepediatria.com.br	none	none	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:46.283606052 CEST	1.1.1.1	192.168.2.4	0x166e	No error (0)	aceroofingsydney-com-au.mail.protection.outlook.com		52.101.149.1	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:46.283606052 CEST	1.1.1.1	192.168.2.4	0x166e	No error (0)	aceroofingsydney-com-au.mail.protection.outlook.com		52.101.149.9	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:46.283606052 CEST	1.1.1.1	192.168.2.4	0x166e	No error (0)	aceroofingsydney-com-au.mail.protection.outlook.com		52.101.151.5	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:46.283606052 CEST	1.1.1.1	192.168.2.4	0x166e	No error (0)	aceroofingsydney-com-au.mail.protection.outlook.com		52.101.151.0	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:46.347232103 CEST	1.1.1.1	192.168.2.4	0x1a45	No error (0)	mail.optonline.net	mail.altice.prod.cloud.openwave.ai		CNAME (Canonical name)	IN (0x0001)	false
Aug 1, 2024 06:09:46.347232103 CEST	1.1.1.1	192.168.2.4	0x1a45	No error (0)	mail.altice.prod.cloud.openwave.ai		65.20.63.172	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:46.357383013 CEST	1.1.1.1	192.168.2.4	0xade1	No error (0)	masumi7310.takayuki46.gomailxyz.space		138.201.138.240	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:46.371833086 CEST	1.1.1.1	192.168.2.4	0x9e4e	Name error (3)	smtp.redpine.net	none	none	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:46.373048067 CEST	1.1.1.1	192.168.2.4	0x6c3d	No error (0)	abv.bg		194.153.145.104	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:46.411587000 CEST	1.1.1.1	192.168.2.4	0x54e8	No error (0)	mail.xplornet.com	mail.xplornet.com.cust.a.hostedemail.com		CNAME (Canonical name)	IN (0x0001)	false
Aug 1, 2024 06:09:46.411587000 CEST	1.1.1.1	192.168.2.4	0x54e8	No error (0)	mail.xplornet.com.cust.a.hostedemail.com		216.40.42.170	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:46.425473928 CEST	1.1.1.1	192.168.2.4	0x76bc	No error (0)	t3a-consulting.com		185.199.220.72	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:46.490360022 CEST	1.1.1.1	192.168.2.4	0xea6e	No error (0)	blindo.com.au		104.21.22.20	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:46.490360022 CEST	1.1.1.1	192.168.2.4	0xea6e	No error (0)	blindo.com.au		172.67.202.8	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:46.499397039 CEST	1.1.1.1	192.168.2.4	0xe9b4	Name error (3)	mail.mexicanpharmacy.com.mx	none	none	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:46.500194073 CEST	1.1.1.1	192.168.2.4	0x1a8	Name error (3)	out.jamzhome.com	none	none	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:46.504127979 CEST	1.1.1.1	192.168.2.4	0x834e	No error (0)	docomo.ne.jp		52.223.34.187	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:46.504127979 CEST	1.1.1.1	192.168.2.4	0x834e	No error (0)	docomo.ne.jp		35.71.162.15	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:46.526660919 CEST	1.1.1.1	192.168.2.4	0x44c1	No error (0)	mail.comcat.net		13.248.169.48	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:46.526660919 CEST	1.1.1.1	192.168.2.4	0x44c1	No error (0)	mail.comcat.net		76.223.54.146	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:46.606056929 CEST	1.1.1.1	192.168.2.4	0xa569	No error (0)	secure.mwfurniture.vn		117.122.125.107	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:46.612441063 CEST	1.1.1.1	192.168.2.4	0x6143	No error (0)	vabazar.com		162.241.62.3	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:46.616163015 CEST	1.1.1.1	192.168.2.4	0x45bb	Name error (3)	mail.mirerotravel.com	none	none	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:46.616266966 CEST	1.1.1.1	192.168.2.4	0x45bb	Name error (3)	mail.mirerotravel.com	none	none	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:46.677988052 CEST	1.1.1.1	192.168.2.4	0x5459	Name error (3)	secure.mrcash.es	none	none	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:46.723593950 CEST	1.1.1.1	192.168.2.4	0xb203	No error (0)	mail.tize.es	ghs.google.com		CNAME (Canonical name)	IN (0x0001)	false
Aug 1, 2024 06:09:46.723593950 CEST	1.1.1.1	192.168.2.4	0xb203	No error (0)	ghs.google.com		142.250.186.179	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:46.892378092 CEST	1.1.1.1	192.168.2.4	0x4f54	No error (0)	smtp.white-angel.co.uk	smtpout.secureserver.net		CNAME (Canonical name)	IN (0x0001)	false
Aug 1, 2024 06:09:46.892378092 CEST	1.1.1.1	192.168.2.4	0x4f54	No error (0)	smtpout.secureserver.net	smtpout.vox.secureserver.net		CNAME (Canonical name)	IN (0x0001)	false
Aug 1, 2024 06:09:46.892378092 CEST	1.1.1.1	192.168.2.4	0x4f54	No error (0)	smtpout.vox.secureserver.net	smtpout.eu-sxb1.vox.secureserver.net		CNAME (Canonical name)	IN (0x0001)	false
Aug 1, 2024 06:09:46.892378092 CEST	1.1.1.1	192.168.2.4	0x4f54	No error (0)	smtpout.eu-sxb1.vox.secureserver.net		92.204.80.1	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:46.936047077 CEST	1.1.1.1	192.168.2.4	0xc2c5	No error (0)	mail.shivaywebsolution.com	shivaywebsolution.com		CNAME (Canonical name)	IN (0x0001)	false
Aug 1, 2024 06:09:46.936047077 CEST	1.1.1.1	192.168.2.4	0xc2c5	No error (0)	shivaywebsolution.com		109.70.148.34	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:46.940603018 CEST	1.1.1.1	192.168.2.4	0xb98f	No error (0)	smtp.ct.em-net.ne.jp	tsunagu-smtp-v4.xspmail.jp		CNAME (Canonical name)	IN (0x0001)	false
Aug 1, 2024 06:09:46.940603018 CEST	1.1.1.1	192.168.2.4	0xb98f	No error (0)	tsunagu-smtp-v4.xspmail.jp		160.13.60.151	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:46.979863882 CEST	1.1.1.1	192.168.2.4	0x2597	No error (0)	mail.net.sa		62.72.58.155	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:46.999339104 CEST	1.1.1.1	192.168.2.4	0x9f15	Name error (3)	securesmtp.medouhui.com	none	none	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:47.043277979 CEST	1.1.1.1	192.168.2.4	0x1047	No error (0)	linshiyouxiang.net		188.114.97.3	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:47.043277979 CEST	1.1.1.1	192.168.2.4	0x1047	No error (0)	linshiyouxiang.net		188.114.96.3	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:47.100580931 CEST	1.1.1.1	192.168.2.4	0x6701	No error (0)	smtp.3pprogetti.it		62.149.128.202	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:47.100580931 CEST	1.1.1.1	192.168.2.4	0x6701	No error (0)	smtp.3pprogetti.it		62.149.128.201	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:47.100580931 CEST	1.1.1.1	192.168.2.4	0x6701	No error (0)	smtp.3pprogetti.it		62.149.128.203	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:47.100580931 CEST	1.1.1.1	192.168.2.4	0x6701	No error (0)	smtp.3pprogetti.it		62.149.128.200	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:47.121165037 CEST	1.1.1.1	192.168.2.4	0xc60a	No error (0)	mail.i.ua		104.18.3.81	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:47.121165037 CEST	1.1.1.1	192.168.2.4	0xc60a	No error (0)	mail.i.ua		104.18.2.81	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:47.123611927 CEST	1.1.1.1	192.168.2.4	0x691d	Name error (3)	mail.alifrim.com	none	none	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:47.130794048 CEST	1.1.1.1	192.168.2.4	0x3b5a	No error (0)	nucleobase.com.br		185.201.10.36	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:47.177736044 CEST	1.1.1.1	192.168.2.4	0x8555	Name error (3)	secure.sexyjeans.com.mx	none	none	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:47.235712051 CEST	1.1.1.1	192.168.2.4	0xc334	Name error (3)	securesmtp.ravallielectric.com	none	none	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:47.273931026 CEST	1.1.1.1	192.168.2.4	0x87e8	No error (0)	segametaleng.sk		37.9.175.133	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:47.299684048 CEST	1.1.1.1	192.168.2.4	0x82b9	No error (0)	glaube.de		188.40.120.147	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:47.359687090 CEST	1.1.1.1	192.168.2.4	0x41f0	Name error (3)	smtp.agate.plala.or.jp	none	none	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:47.365063906 CEST	1.1.1.1	192.168.2.4	0x66ee	No error (0)	mail.carpet-culture.com		158.106.135.192	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:47.399096012 CEST	1.1.1.1	192.168.2.4	0x3e82	No error (0)	telekom.de		80.158.67.40	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:47.399900913 CEST	1.1.1.1	192.168.2.4	0x4597	No error (0)	aleetel.com		107.172.219.148	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:47.483707905 CEST	1.1.1.1	192.168.2.4	0xb4a8	Name error (3)	securesmtp.dcsev.com	none	none	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:47.484039068 CEST	1.1.1.1	192.168.2.4	0x107f	Name error (3)	secure.nuevaescuela.net	none	none	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:47.485775948 CEST	1.1.1.1	192.168.2.4	0x7417	Name error (3)	securesmtp.unicem.onmicrosoft.com	none	none	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:47.576308966 CEST	1.1.1.1	192.168.2.4	0xf747	Name error (3)	out.caledonian.ac.uk	none	none	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:47.640075922 CEST	1.1.1.1	192.168.2.4	0x2a46	Name error (3)	secure.blackpoolcab.org.uk	none	none	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:47.642349005 CEST	1.1.1.1	192.168.2.4	0xa9dd	Name error (3)	secure.glurakboard.de	none	none	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:47.660372019 CEST	1.1.1.1	192.168.2.4	0x3e1a	Name error (3)	out.flash.net	none	none	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:47.704761028 CEST	1.1.1.1	192.168.2.4	0x9181	No error (0)	securesmtp.ftschool.org		54.175.134.164	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:47.798619032 CEST	1.1.1.1	192.168.2.4	0xae34	Name error (3)	out.irb.co.in	none	none	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:47.808587074 CEST	1.1.1.1	192.168.2.4	0xc32c	Name error (3)	smtp.falguiere36.org	none	none	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:47.884500027 CEST	1.1.1.1	192.168.2.4	0x44d	No error (0)	smtp.nifty.com		106.153.226.2	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:47.884500027 CEST	1.1.1.1	192.168.2.4	0x44d	No error (0)	smtp.nifty.com		106.153.227.2	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:47.899848938 CEST	1.1.1.1	192.168.2.4	0xabc7	Name error (3)	secure.harrison.co.th	none	none	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:47.928841114 CEST	1.1.1.1	192.168.2.4	0x1b6c	No error (0)	mail.marsdevelopers.in	marsdevelopers.in		CNAME (Canonical name)	IN (0x0001)	false
Aug 1, 2024 06:09:47.928841114 CEST	1.1.1.1	192.168.2.4	0x1b6c	No error (0)	marsdevelopers.in		5.9.80.248	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:47.958702087 CEST	1.1.1.1	192.168.2.4	0xb6ec	Name error (3)	smtp.e-ling.it	none	none	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:47.959670067 CEST	1.1.1.1	192.168.2.4	0x282	Name error (3)	smtp.aeserpa.pt	none	none	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:48.111633062 CEST	1.1.1.1	192.168.2.4	0x16a0	No error (0)	vodafone.es		45.60.74.53	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:48.112092018 CEST	1.1.1.1	192.168.2.4	0x143f	No error (0)	kolkzicht.nl		139.162.171.72	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:48.116998911 CEST	1.1.1.1	192.168.2.4	0x19da	No error (0)	rlrestaurants.com		67.20.76.83	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:48.139249086 CEST	1.1.1.1	192.168.2.4	0xacda	No error (0)	ribbonbox.co.uk		85.159.56.213	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:48.139607906 CEST	1.1.1.1	192.168.2.4	0x2cb4	No error (0)	smtp.bbsyd.dk	bbmail.stofanet.dk		CNAME (Canonical name)	IN (0x0001)	false
Aug 1, 2024 06:09:48.139607906 CEST	1.1.1.1	192.168.2.4	0x2cb4	No error (0)	bbmail.stofanet.dk		212.10.10.66	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:48.140239000 CEST	1.1.1.1	192.168.2.4	0xbe32	No error (0)	smtpin1.euskalnet.net		94.100.132.8	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:48.146466017 CEST	1.1.1.1	192.168.2.4	0x91a5	No error (0)	mercefly.com		198.54.125.123	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:48.155385017 CEST	1.1.1.1	192.168.2.4	0x6b7	Name error (3)	tecmedia-neuss.de	none	none	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:48.162146091 CEST	1.1.1.1	192.168.2.4	0x439a	No error (0)	smtp.totem-experience.com	ssl0.ovh.net		CNAME (Canonical name)	IN (0x0001)	false
Aug 1, 2024 06:09:48.162146091 CEST	1.1.1.1	192.168.2.4	0x439a	No error (0)	ssl0.ovh.net		193.70.18.144	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:48.167661905 CEST	1.1.1.1	192.168.2.4	0x3ac2	Name error (3)	securesmtp.cobmk.com	none	none	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:48.168720007 CEST	1.1.1.1	192.168.2.4	0x1ae0	No error (0)	sympatico.ca		199.85.66.2	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:48.244925976 CEST	1.1.1.1	192.168.2.4	0xc667	Server failure (2)	gdavey31.fsnet.co.uk	none	none	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:48.249475002 CEST	1.1.1.1	192.168.2.4	0xa0f5	No error (0)	stai-tangho.ac.id		103.66.86.203	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:48.282067060 CEST	1.1.1.1	192.168.2.4	0xefd5	Name error (3)	smtp.ondata.com.br	none	none	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:48.333659887 CEST	1.1.1.1	192.168.2.4	0xd79e	Name error (3)	smtp.cpdistributor.com	none	none	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:48.336034060 CEST	1.1.1.1	192.168.2.4	0xd196	Name error (3)	out.crooks.me.uk	none	none	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:48.463316917 CEST	1.1.1.1	192.168.2.4	0xb8ae	No error (0)	mail.agenzialacasa.it		62.149.128.154	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:48.463316917 CEST	1.1.1.1	192.168.2.4	0xb8ae	No error (0)	mail.agenzialacasa.it		62.149.128.166	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:48.463316917 CEST	1.1.1.1	192.168.2.4	0xb8ae	No error (0)	mail.agenzialacasa.it		62.149.128.151	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:48.463316917 CEST	1.1.1.1	192.168.2.4	0xb8ae	No error (0)	mail.agenzialacasa.it		62.149.128.157	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:48.463316917 CEST	1.1.1.1	192.168.2.4	0xb8ae	No error (0)	mail.agenzialacasa.it		62.149.128.163	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:48.463316917 CEST	1.1.1.1	192.168.2.4	0xb8ae	No error (0)	mail.agenzialacasa.it		62.149.128.160	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:48.496545076 CEST	1.1.1.1	192.168.2.4	0x49b0	No error (0)	alt2.aspmx.l.google.com		142.251.9.27	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:48.590909004 CEST	1.1.1.1	192.168.2.4	0xf9f6	No error (0)	mx.breakthur.com		164.90.203.106	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:48.596699953 CEST	1.1.1.1	192.168.2.4	0xace3	No error (0)	peters.at		3.64.163.50	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:48.637387037 CEST	1.1.1.1	192.168.2.4	0x8d06	No error (0)	mail.bvrautomotive.co.uk	bvrautomotive.co.uk		CNAME (Canonical name)	IN (0x0001)	false
Aug 1, 2024 06:09:48.637387037 CEST	1.1.1.1	192.168.2.4	0x8d06	No error (0)	bvrautomotive.co.uk		185.194.90.7	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:48.644021034 CEST	1.1.1.1	192.168.2.4	0x7673	Name error (3)	securesmtp.alnaec.com	none	none	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:48.748095036 CEST	1.1.1.1	192.168.2.4	0xa6fd	No error (0)	smtp.comporium.net	comporium.net.av-mx.com		CNAME (Canonical name)	IN (0x0001)	false
Aug 1, 2024 06:09:48.748095036 CEST	1.1.1.1	192.168.2.4	0xa6fd	No error (0)	comporium.net.av-mx.com		129.159.110.135	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:48.808821917 CEST	1.1.1.1	192.168.2.4	0xfdda	No error (0)	smtp.jcom.zaq.ne.jp	jcom-zaq.mx.zaq.ne.jp		CNAME (Canonical name)	IN (0x0001)	false
Aug 1, 2024 06:09:48.808821917 CEST	1.1.1.1	192.168.2.4	0xfdda	No error (0)	jcom-zaq.mx.zaq.ne.jp		175.135.254.130	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:48.808821917 CEST	1.1.1.1	192.168.2.4	0xfdda	No error (0)	jcom-zaq.mx.zaq.ne.jp		175.135.253.2	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:48.812262058 CEST	1.1.1.1	192.168.2.4	0xdb72	No error (0)	epost.de		20.23.151.207	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:48.838977098 CEST	1.1.1.1	192.168.2.4	0x901b	Name error (3)	pochta.ua	none	none	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:48.931381941 CEST	1.1.1.1	192.168.2.4	0x967	Name error (3)	smtp.excite.co.jp	none	none	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:48.944387913 CEST	1.1.1.1	192.168.2.4	0x5985	No error (0)	mxb.mailgun.org		34.149.236.64	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:49.019315004 CEST	1.1.1.1	192.168.2.4	0xc4d2	No error (0)	smtp.perfiltec.com	smtp-vip.kinghost.net		CNAME (Canonical name)	IN (0x0001)	false
Aug 1, 2024 06:09:49.019315004 CEST	1.1.1.1	192.168.2.4	0xc4d2	No error (0)	smtp-vip.kinghost.net		191.6.216.100	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:49.019315004 CEST	1.1.1.1	192.168.2.4	0xc4d2	No error (0)	smtp-vip.kinghost.net		191.6.216.99	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:49.030461073 CEST	1.1.1.1	192.168.2.4	0xb45a	No error (0)	schlossers.de		157.97.36.145	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:49.063821077 CEST	1.1.1.1	192.168.2.4	0x1	No error (0)	mail.aec.institute		208.109.32.50	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:49.072516918 CEST	1.1.1.1	192.168.2.4	0x4844	No error (0)	mx.netz12.de		49.12.191.122	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:49.098948002 CEST	1.1.1.1	192.168.2.4	0x929b	No error (0)	out.passportbmw.com		199.232.192.247	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:49.098948002 CEST	1.1.1.1	192.168.2.4	0x929b	No error (0)	out.passportbmw.com		199.232.196.247	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:49.154462099 CEST	1.1.1.1	192.168.2.4	0xe9de	No error (0)	smtp.bbox.fr		194.158.122.55	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:49.154514074 CEST	1.1.1.1	192.168.2.4	0xb250	No error (0)	box.ua		178.128.251.242	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:49.166876078 CEST	1.1.1.1	192.168.2.4	0x9220	Name error (3)	mail.nademacorporation.com	none	none	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:49.167910099 CEST	1.1.1.1	192.168.2.4	0x285	Name error (3)	groupxlyrics.cn	none	none	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:49.275665045 CEST	1.1.1.1	192.168.2.4	0xd2e1	No error (0)	smtp.eresmas.net	smtpw.wanadoo.es		CNAME (Canonical name)	IN (0x0001)	false
Aug 1, 2024 06:09:49.275665045 CEST	1.1.1.1	192.168.2.4	0xd2e1	No error (0)	smtpw.wanadoo.es	out.wanadoo.es		CNAME (Canonical name)	IN (0x0001)	false
Aug 1, 2024 06:09:49.275665045 CEST	1.1.1.1	192.168.2.4	0xd2e1	No error (0)	out.wanadoo.es		62.36.20.30	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:49.352603912 CEST	1.1.1.1	192.168.2.4	0xe227	No error (0)	intranet.com.ng		199.79.63.186	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:49.373141050 CEST	1.1.1.1	192.168.2.4	0x8ac5	Name error (3)	securesmtp.conveyors.co.uk	none	none	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:49.443298101 CEST	1.1.1.1	192.168.2.4	0x6f10	No error (0)	rosseti.eu		94.46.169.50	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:49.469794035 CEST	1.1.1.1	192.168.2.4	0xcc06	Name error (3)	radical-resource.co.uk	none	none	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:49.470149994 CEST	1.1.1.1	192.168.2.4	0xc1b7	Name error (3)	mail.jennjenn.net	none	none	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:49.557221889 CEST	1.1.1.1	192.168.2.4	0x313	No error (0)	telia.com		81.236.63.162	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:49.561177015 CEST	1.1.1.1	192.168.2.4	0xdc04	Name error (3)	securesmtp.muscmyanmar.com	none	none	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:49.712527037 CEST	1.1.1.1	192.168.2.4	0x5f20	No error (0)	smtp.cogeco.ca		193.122.131.100	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:49.744048119 CEST	1.1.1.1	192.168.2.4	0xac18	No error (0)	alt4.aspmx.l.google.com		74.125.200.26	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:49.744147062 CEST	1.1.1.1	192.168.2.4	0xc726	Server failure (2)	tianya.cn	none	none	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:49.758230925 CEST	1.1.1.1	192.168.2.4	0xe8cf	Name error (3)	secure.thebookbus.org	none	none	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:49.791138887 CEST	1.1.1.1	192.168.2.4	0x37e0	No error (0)	comhem-se.mail.protection.outlook.com		52.101.68.3	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:49.791138887 CEST	1.1.1.1	192.168.2.4	0x37e0	No error (0)	comhem-se.mail.protection.outlook.com		52.101.68.10	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:49.791138887 CEST	1.1.1.1	192.168.2.4	0x37e0	No error (0)	comhem-se.mail.protection.outlook.com		52.101.73.28	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:49.791138887 CEST	1.1.1.1	192.168.2.4	0x37e0	No error (0)	comhem-se.mail.protection.outlook.com		52.101.68.12	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:49.791138887 CEST	1.1.1.1	192.168.2.4	0x37e0	No error (0)	comhem-se.mail.protection.outlook.com		52.101.68.39	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:49.791138887 CEST	1.1.1.1	192.168.2.4	0x37e0	No error (0)	comhem-se.mail.protection.outlook.com		52.101.73.24	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:49.791138887 CEST	1.1.1.1	192.168.2.4	0x37e0	No error (0)	comhem-se.mail.protection.outlook.com		52.101.68.16	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:49.862970114 CEST	1.1.1.1	192.168.2.4	0x4433	No error (0)	unhfree.net		185.51.248.4	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:49.888119936 CEST	1.1.1.1	192.168.2.4	0x5a03	No error (0)	gaelsong.com		162.248.104.127	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:50.062067032 CEST	1.1.1.1	192.168.2.4	0xe252	Name error (3)	securesmtp.therogueagency.com	none	none	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:50.084573030 CEST	1.1.1.1	192.168.2.4	0xa4b5	Name error (3)	mail.grupodosdemayo.com.pe	none	none	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:50.125245094 CEST	1.1.1.1	192.168.2.4	0x63fa	No error (0)	zilladog.net		207.115.66.179	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:50.167998075 CEST	1.1.1.1	192.168.2.4	0x2101	Name error (3)	secure.apgservices.co.uk	none	none	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:50.325009108 CEST	1.1.1.1	192.168.2.4	0x5412	No error (0)	cantv.net		200.11.153.189	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:50.325735092 CEST	1.1.1.1	192.168.2.4	0xf66a	Name error (3)	qxorpe.com	none	none	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:50.326128006 CEST	1.1.1.1	192.168.2.4	0xf175	No error (0)	smtp.vodafone.de	smtp.vodafonemail.de		CNAME (Canonical name)	IN (0x0001)	false
Aug 1, 2024 06:09:50.326128006 CEST	1.1.1.1	192.168.2.4	0xf175	No error (0)	smtp.vodafonemail.de		2.207.150.234	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:50.422816992 CEST	1.1.1.1	192.168.2.4	0xce9f	No error (0)	secure.svmcards.co.uk		188.114.97.3	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:50.422816992 CEST	1.1.1.1	192.168.2.4	0xce9f	No error (0)	secure.svmcards.co.uk		188.114.96.3	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:50.423342943 CEST	1.1.1.1	192.168.2.4	0x4c56	No error (0)	optusnet.com.au		211.29.132.105	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:50.423372030 CEST	1.1.1.1	192.168.2.4	0x4c56	No error (0)	optusnet.com.au		211.29.132.105	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:50.602767944 CEST	1.1.1.1	192.168.2.4	0xf28f	No error (0)	smtp.frontier.com	relay-ftrcom.glb.frontiernet.net		CNAME (Canonical name)	IN (0x0001)	false
Aug 1, 2024 06:09:50.602767944 CEST	1.1.1.1	192.168.2.4	0xf28f	No error (0)	relay-ftrcom.glb.frontiernet.net		66.133.129.50	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:50.641031027 CEST	1.1.1.1	192.168.2.4	0x2ffd	Name error (3)	mail.gmbol.cem	none	none	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:50.641268015 CEST	1.1.1.1	192.168.2.4	0xc937	Name error (3)	secure.jmanagersd.com	none	none	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:50.686721087 CEST	1.1.1.1	192.168.2.4	0x222a	No error (0)	smtp.alunos.ipca.pt	smtp.office365.com		CNAME (Canonical name)	IN (0x0001)	false
Aug 1, 2024 06:09:50.686721087 CEST	1.1.1.1	192.168.2.4	0x222a	No error (0)	smtp.office365.com	outlook.office365.com		CNAME (Canonical name)	IN (0x0001)	false
Aug 1, 2024 06:09:50.686721087 CEST	1.1.1.1	192.168.2.4	0x222a	No error (0)	outlook.office365.com	ooc-g2.tm-4.office.com		CNAME (Canonical name)	IN (0x0001)	false
Aug 1, 2024 06:09:50.686721087 CEST	1.1.1.1	192.168.2.4	0x222a	No error (0)	ooc-g2.tm-4.office.com	outlook.ms-acdc.office.com		CNAME (Canonical name)	IN (0x0001)	false
Aug 1, 2024 06:09:50.686721087 CEST	1.1.1.1	192.168.2.4	0x222a	No error (0)	outlook.ms-acdc.office.com	HHN-efz.ms-acdc.office.com		CNAME (Canonical name)	IN (0x0001)	false
Aug 1, 2024 06:09:50.686721087 CEST	1.1.1.1	192.168.2.4	0x222a	No error (0)	HHN-efz.ms-acdc.office.com		40.99.150.66	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:50.686721087 CEST	1.1.1.1	192.168.2.4	0x222a	No error (0)	HHN-efz.ms-acdc.office.com		52.98.242.242	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:50.686721087 CEST	1.1.1.1	192.168.2.4	0x222a	No error (0)	HHN-efz.ms-acdc.office.com		40.99.150.98	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:50.686721087 CEST	1.1.1.1	192.168.2.4	0x222a	No error (0)	HHN-efz.ms-acdc.office.com		40.99.150.18	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:50.693690062 CEST	1.1.1.1	192.168.2.4	0x53cd	Name error (3)	securesmtp.superfoods.com.cy	none	none	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:50.700627089 CEST	1.1.1.1	192.168.2.4	0xd5b9	No error (0)	mail.campus.uniurb.it	ghs.googlehosted.com		CNAME (Canonical name)	IN (0x0001)	false
Aug 1, 2024 06:09:50.700627089 CEST	1.1.1.1	192.168.2.4	0xd5b9	No error (0)	ghs.googlehosted.com		142.250.186.51	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:50.718214989 CEST	1.1.1.1	192.168.2.4	0x1ca	No error (0)	e-mds.com		15.197.225.128	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:50.718214989 CEST	1.1.1.1	192.168.2.4	0x1ca	No error (0)	e-mds.com		3.33.251.168	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:50.779393911 CEST	1.1.1.1	192.168.2.4	0x58d9	Name error (3)	mail.tsn-369.com	none	none	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:50.821319103 CEST	1.1.1.1	192.168.2.4	0xba7c	No error (0)	stmi.hu		5.56.33.1	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:50.872807026 CEST	1.1.1.1	192.168.2.4	0xae80	Name error (3)	out.542nm0ee35.com	none	none	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:50.930336952 CEST	1.1.1.1	192.168.2.4	0x6da6	No error (0)	smtp.shaw.ca	shawmail.glb.shawcable.net		CNAME (Canonical name)	IN (0x0001)	false
Aug 1, 2024 06:09:50.930336952 CEST	1.1.1.1	192.168.2.4	0x6da6	No error (0)	shawmail.glb.shawcable.net		64.59.128.135	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:50.930336952 CEST	1.1.1.1	192.168.2.4	0x6da6	No error (0)	shawmail.glb.shawcable.net		64.59.136.142	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:50.952157974 CEST	1.1.1.1	192.168.2.4	0xd464	No error (0)	eircom.net		86.43.151.3	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:50.964195967 CEST	1.1.1.1	192.168.2.4	0x9727	No error (0)	smtp.sherwin-williams.com	redirector-asm.sherwin-williams.com		CNAME (Canonical name)	IN (0x0001)	false
Aug 1, 2024 06:09:50.964195967 CEST	1.1.1.1	192.168.2.4	0x9727	No error (0)	redirector-asm.sherwin-williams.com		148.141.109.36	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:50.988806963 CEST	1.1.1.1	192.168.2.4	0x929d	No error (0)	aspenfilm.org		23.236.57.125	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:51.018033981 CEST	1.1.1.1	192.168.2.4	0x3bdc	No error (0)	smtp.iiseuganeo.cloud		62.149.128.201	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:51.018033981 CEST	1.1.1.1	192.168.2.4	0x3bdc	No error (0)	smtp.iiseuganeo.cloud		62.149.128.203	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:51.018033981 CEST	1.1.1.1	192.168.2.4	0x3bdc	No error (0)	smtp.iiseuganeo.cloud		62.149.128.200	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:51.018033981 CEST	1.1.1.1	192.168.2.4	0x3bdc	No error (0)	smtp.iiseuganeo.cloud		62.149.128.202	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:51.047727108 CEST	1.1.1.1	192.168.2.4	0x827	Name error (3)	out.hurriyet.co	none	none	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:51.134433031 CEST	1.1.1.1	192.168.2.4	0xfb67	No error (0)	curo.dk		49.12.122.94	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:51.146754980 CEST	1.1.1.1	192.168.2.4	0xe89a	No error (0)	webbep.nl		161.35.151.130	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:51.181648970 CEST	1.1.1.1	192.168.2.4	0xa6a3	Name error (3)	out.web.jp	none	none	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:51.182462931 CEST	1.1.1.1	192.168.2.4	0xa630	No error (0)	pobox.sk		188.114.96.3	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:51.182462931 CEST	1.1.1.1	192.168.2.4	0xa630	No error (0)	pobox.sk		188.114.97.3	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:51.351263046 CEST	1.1.1.1	192.168.2.4	0x4c81	No error (0)	xtra.co.nz		202.27.184.102	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:51.403496027 CEST	1.1.1.1	192.168.2.4	0x6f3e	Name error (3)	securesmtp.nuovaedart.it	none	none	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:51.431674957 CEST	1.1.1.1	192.168.2.4	0xba1a	No error (0)	mail.goo.ne.jp		114.179.184.189	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:51.437146902 CEST	1.1.1.1	192.168.2.4	0x1382	Name error (3)	mail.gate9productions.com	none	none	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:51.437342882 CEST	1.1.1.1	192.168.2.4	0xd877	No error (0)	opusradio.com		188.114.96.3	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:51.437342882 CEST	1.1.1.1	192.168.2.4	0xd877	No error (0)	opusradio.com		188.114.97.3	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:51.442796946 CEST	1.1.1.1	192.168.2.4	0xb23	No error (0)	mail.wps-sys.com	pop.secureserver.net		CNAME (Canonical name)	IN (0x0001)	false
Aug 1, 2024 06:09:51.442796946 CEST	1.1.1.1	192.168.2.4	0xb23	No error (0)	pop.secureserver.net	pop.vox.secureserver.net		CNAME (Canonical name)	IN (0x0001)	false
Aug 1, 2024 06:09:51.442796946 CEST	1.1.1.1	192.168.2.4	0xb23	No error (0)	pop.vox.secureserver.net	pop.us-phx.vox.secureserver.net		CNAME (Canonical name)	IN (0x0001)	false
Aug 1, 2024 06:09:51.442796946 CEST	1.1.1.1	192.168.2.4	0xb23	No error (0)	pop.us-phx.vox.secureserver.net		68.178.252.117	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:51.442796946 CEST	1.1.1.1	192.168.2.4	0xb23	No error (0)	pop.us-phx.vox.secureserver.net		173.201.193.97	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:51.442796946 CEST	1.1.1.1	192.168.2.4	0xb23	No error (0)	pop.us-phx.vox.secureserver.net		173.201.193.240	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:51.442796946 CEST	1.1.1.1	192.168.2.4	0xb23	No error (0)	pop.us-phx.vox.secureserver.net		68.178.252.246	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:51.442796946 CEST	1.1.1.1	192.168.2.4	0xb23	No error (0)	pop.us-phx.vox.secureserver.net		68.178.252.153	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:51.442796946 CEST	1.1.1.1	192.168.2.4	0xb23	No error (0)	pop.us-phx.vox.secureserver.net		68.178.252.247	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:51.442796946 CEST	1.1.1.1	192.168.2.4	0xb23	No error (0)	pop.us-phx.vox.secureserver.net		68.178.252.154	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:51.461949110 CEST	1.1.1.1	192.168.2.4	0xab6d	Name error (3)	out.it.schindler.com	none	none	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:51.531511068 CEST	1.1.1.1	192.168.2.4	0x39e0	Name error (3)	securesmtp.crg390.com	none	none	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:51.545558929 CEST	1.1.1.1	192.168.2.4	0xc6d	Name error (3)	secure.evidence-room.net	none	none	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:51.601924896 CEST	1.1.1.1	192.168.2.4	0xc7e5	No error (0)	mail.personalizateya.com		162.241.225.30	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:51.645483017 CEST	1.1.1.1	192.168.2.4	0xae1a	No error (0)	out.sunrisecoal.com		50.62.88.172	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:51.658060074 CEST	1.1.1.1	192.168.2.4	0xa9d6	Name error (3)	smtp.fbv.gcc	none	none	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:51.742687941 CEST	1.1.1.1	192.168.2.4	0xc3a7	No error (0)	mx01.ionos.fr		217.72.192.67	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:51.744463921 CEST	1.1.1.1	192.168.2.4	0x441f	Name error (3)	bol.combr	none	none	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:51.856940985 CEST	1.1.1.1	192.168.2.4	0x16fd	No error (0)	mail.domotec.cl		186.64.116.115	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:51.884941101 CEST	1.1.1.1	192.168.2.4	0xd199	No error (0)	smtp.mtaonline.net	mail.mtaonline.net		CNAME (Canonical name)	IN (0x0001)	false
Aug 1, 2024 06:09:51.884941101 CEST	1.1.1.1	192.168.2.4	0xd199	No error (0)	mail.mtaonline.net	mtaonline.net.av-mx.com		CNAME (Canonical name)	IN (0x0001)	false
Aug 1, 2024 06:09:51.884941101 CEST	1.1.1.1	192.168.2.4	0xd199	No error (0)	mtaonline.net.av-mx.com		193.122.191.58	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:51.888505936 CEST	1.1.1.1	192.168.2.4	0x655d	Name error (3)	smtp.3jmporxvku.com	none	none	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:51.899871111 CEST	1.1.1.1	192.168.2.4	0xb6cc	No error (0)	midi-hits.com		198.57.196.198	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:51.930834055 CEST	1.1.1.1	192.168.2.4	0xc3c4	Name error (3)	out.hiddentalent.org.uk	none	none	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:51.962651968 CEST	1.1.1.1	192.168.2.4	0xbd28	Name error (3)	smtp.commanderlake.net	none	none	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:52.034200907 CEST	1.1.1.1	192.168.2.4	0x929e	No error (0)	zigpropaganda.com.br		200.160.2.95	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:52.038088083 CEST	1.1.1.1	192.168.2.4	0x3d4e	No error (0)	ASPMX3.GOOGLEMAIL.COM		142.251.9.27	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:52.041583061 CEST	1.1.1.1	192.168.2.4	0x7125	Name error (3)	secure.kingham.oxon.sch.uk	none	none	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:52.056237936 CEST	1.1.1.1	192.168.2.4	0xf66b	Name error (3)	securesmtp.oceanhotels.net	none	none	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:52.063011885 CEST	1.1.1.1	192.168.2.4	0x91ed	No error (0)	omigosh.com		3.33.130.190	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:52.063011885 CEST	1.1.1.1	192.168.2.4	0x91ed	No error (0)	omigosh.com		15.197.148.33	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:52.137619972 CEST	1.1.1.1	192.168.2.4	0xf3db	No error (0)	mx2.ua.fm		185.187.81.214	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:52.137945890 CEST	1.1.1.1	192.168.2.4	0x317d	No error (0)	spool.mail.gandi.net		217.70.178.1	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:52.160885096 CEST	1.1.1.1	192.168.2.4	0xdd17	Name error (3)	moldtechsoftware.com	none	none	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:52.259848118 CEST	1.1.1.1	192.168.2.4	0x7b7f	No error (0)	smtp.houstonis.org		103.224.182.251	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:52.294683933 CEST	1.1.1.1	192.168.2.4	0x7542	No error (0)	mail.espiritosantoib.co.uk		46.105.229.192	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:52.299954891 CEST	1.1.1.1	192.168.2.4	0x65c8	No error (0)	smtp.adam.com.au	mail.adam.com.au		CNAME (Canonical name)	IN (0x0001)	false
Aug 1, 2024 06:09:52.299954891 CEST	1.1.1.1	192.168.2.4	0x65c8	No error (0)	mail.adam.com.au	sep-kakadu05.au-east.atmailcloud.com		CNAME (Canonical name)	IN (0x0001)	false
Aug 1, 2024 06:09:52.299954891 CEST	1.1.1.1	192.168.2.4	0x65c8	No error (0)	sep-kakadu05.au-east.atmailcloud.com		13.55.163.193	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:52.299954891 CEST	1.1.1.1	192.168.2.4	0x65c8	No error (0)	sep-kakadu05.au-east.atmailcloud.com		54.253.109.188	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:52.316469908 CEST	1.1.1.1	192.168.2.4	0x7a22	Server failure (2)	mail.szef.cn	none	none	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:52.316490889 CEST	1.1.1.1	192.168.2.4	0x7a22	Server failure (2)	mail.szef.cn	none	none	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:52.316505909 CEST	1.1.1.1	192.168.2.4	0x7a22	Server failure (2)	mail.szef.cn	none	none	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:52.316584110 CEST	1.1.1.1	192.168.2.4	0x7a22	Server failure (2)	mail.szef.cn	none	none	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:52.324804068 CEST	1.1.1.1	192.168.2.4	0xfc6e	No error (0)	smtp.ceuma.com.br	smtp.office365.com		CNAME (Canonical name)	IN (0x0001)	false
Aug 1, 2024 06:09:52.324804068 CEST	1.1.1.1	192.168.2.4	0xfc6e	No error (0)	smtp.office365.com	outlook.office365.com		CNAME (Canonical name)	IN (0x0001)	false
Aug 1, 2024 06:09:52.324804068 CEST	1.1.1.1	192.168.2.4	0xfc6e	No error (0)	outlook.office365.com	ooc-g2.tm-4.office.com		CNAME (Canonical name)	IN (0x0001)	false
Aug 1, 2024 06:09:52.324804068 CEST	1.1.1.1	192.168.2.4	0xfc6e	No error (0)	ooc-g2.tm-4.office.com	outlook.ms-acdc.office.com		CNAME (Canonical name)	IN (0x0001)	false
Aug 1, 2024 06:09:52.324804068 CEST	1.1.1.1	192.168.2.4	0xfc6e	No error (0)	outlook.ms-acdc.office.com	FRA-efz.ms-acdc.office.com		CNAME (Canonical name)	IN (0x0001)	false
Aug 1, 2024 06:09:52.324804068 CEST	1.1.1.1	192.168.2.4	0xfc6e	No error (0)	FRA-efz.ms-acdc.office.com		52.98.179.242	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:52.324804068 CEST	1.1.1.1	192.168.2.4	0xfc6e	No error (0)	FRA-efz.ms-acdc.office.com		52.98.252.226	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:52.324804068 CEST	1.1.1.1	192.168.2.4	0xfc6e	No error (0)	FRA-efz.ms-acdc.office.com		40.99.157.18	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:52.383277893 CEST	1.1.1.1	192.168.2.4	0x4ef6	No error (0)	mail.bc-ig.k12.ia.us		207.165.35.80	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:52.502386093 CEST	1.1.1.1	192.168.2.4	0x62a7	No error (0)	smtp.ziggo.nl		84.116.6.3	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:52.502872944 CEST	1.1.1.1	192.168.2.4	0x7a09	Name error (3)	securesmtp.hologic.it	none	none	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:52.510953903 CEST	1.1.1.1	192.168.2.4	0x68d6	No error (0)	smtp.bestbasketballshoereview.com		68.65.122.246	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:52.558661938 CEST	1.1.1.1	192.168.2.4	0xdd98	No error (0)	smtp.primehome.com	mail.primehome.com		CNAME (Canonical name)	IN (0x0001)	false
Aug 1, 2024 06:09:52.558661938 CEST	1.1.1.1	192.168.2.4	0xdd98	No error (0)	mail.primehome.com		217.27.32.193	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:52.565529108 CEST	1.1.1.1	192.168.2.4	0x2a1e	No error (0)	smtp.pixell.fr	ns0.ovh.net		CNAME (Canonical name)	IN (0x0001)	false
Aug 1, 2024 06:09:52.565529108 CEST	1.1.1.1	192.168.2.4	0x2a1e	No error (0)	ns0.ovh.net		193.70.18.144	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:52.565552950 CEST	1.1.1.1	192.168.2.4	0x2a1e	No error (0)	smtp.pixell.fr	ns0.ovh.net		CNAME (Canonical name)	IN (0x0001)	false
Aug 1, 2024 06:09:52.565552950 CEST	1.1.1.1	192.168.2.4	0x2a1e	No error (0)	ns0.ovh.net		193.70.18.144	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:52.588273048 CEST	1.1.1.1	192.168.2.4	0x3ff0	No error (0)	smtp.nb.sympatico.ca	smtp.bellaliant.net		CNAME (Canonical name)	IN (0x0001)	false
Aug 1, 2024 06:09:52.588273048 CEST	1.1.1.1	192.168.2.4	0x3ff0	No error (0)	smtp.bellaliant.net	smtp-aliant.bell.net		CNAME (Canonical name)	IN (0x0001)	false
Aug 1, 2024 06:09:52.588273048 CEST	1.1.1.1	192.168.2.4	0x3ff0	No error (0)	smtp-aliant.bell.net		209.71.212.26	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:52.672820091 CEST	1.1.1.1	192.168.2.4	0x49c5	No error (0)	secure.webgirl.com		13.248.206.98	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:52.712511063 CEST	1.1.1.1	192.168.2.4	0x92bd	No error (0)	mx.yandex.net		77.88.21.249	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:52.716027021 CEST	1.1.1.1	192.168.2.4	0xc51b	No error (0)	us-smtp-inbound-2.mimecast.com		205.139.110.242	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:52.716027021 CEST	1.1.1.1	192.168.2.4	0xc51b	No error (0)	us-smtp-inbound-2.mimecast.com		205.139.110.221	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:52.716027021 CEST	1.1.1.1	192.168.2.4	0xc51b	No error (0)	us-smtp-inbound-2.mimecast.com		170.10.128.221	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:52.716027021 CEST	1.1.1.1	192.168.2.4	0xc51b	No error (0)	us-smtp-inbound-2.mimecast.com		205.139.110.141	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:52.716027021 CEST	1.1.1.1	192.168.2.4	0xc51b	No error (0)	us-smtp-inbound-2.mimecast.com		170.10.128.242	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:52.716027021 CEST	1.1.1.1	192.168.2.4	0xc51b	No error (0)	us-smtp-inbound-2.mimecast.com		170.10.128.141	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:52.718539953 CEST	1.1.1.1	192.168.2.4	0x1c28	No error (0)	anarosenberg.com		107.181.238.82	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:52.720789909 CEST	1.1.1.1	192.168.2.4	0x3ff0	No error (0)	secure.ltam.co.uk		46.30.215.52	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:52.729316950 CEST	1.1.1.1	192.168.2.4	0x740d	No error (0)	mail.alindeco.com	alindeco.com		CNAME (Canonical name)	IN (0x0001)	false
Aug 1, 2024 06:09:52.729316950 CEST	1.1.1.1	192.168.2.4	0x740d	No error (0)	alindeco.com		173.236.127.29	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:52.805772066 CEST	1.1.1.1	192.168.2.4	0x59a2	Server failure (2)	smtp.wildwood555.fsnet.co.uk	none	none	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:52.822688103 CEST	1.1.1.1	192.168.2.4	0x1729	No error (0)	comcast.com		96.99.227.0	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:52.913940907 CEST	1.1.1.1	192.168.2.4	0xae5c	No error (0)	securesmtp.inter-sign.dk		46.30.213.21	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:52.957998037 CEST	1.1.1.1	192.168.2.4	0x2cdf	Server failure (2)	mail.i-bionic.com	none	none	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:52.965364933 CEST	1.1.1.1	192.168.2.4	0xc17	No error (0)	gunchu.co.jp		157.7.144.5	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:52.973814011 CEST	1.1.1.1	192.168.2.4	0x2c7a	Name error (3)	secure.myfabulousva.com	none	none	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:53.068532944 CEST	1.1.1.1	192.168.2.4	0x5778	Name error (3)	securesmtp.novadan.com.tr	none	none	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:53.120177031 CEST	1.1.1.1	192.168.2.4	0xff49	No error (0)	sky.com		90.216.128.5	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:53.123545885 CEST	1.1.1.1	192.168.2.4	0x1edf	Name error (3)	vfe.watchit.com	none	none	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:53.130897045 CEST	1.1.1.1	192.168.2.4	0xb62	Name error (3)	out.dstv.com	none	none	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:53.169743061 CEST	1.1.1.1	192.168.2.4	0x2ec3	Name error (3)	secure.shootershill.ac.uk	none	none	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:53.276945114 CEST	1.1.1.1	192.168.2.4	0x17b4	No error (0)	teletu.it		85.93.219.12	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:53.276945114 CEST	1.1.1.1	192.168.2.4	0x17b4	No error (0)	teletu.it		85.93.219.11	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:53.301537991 CEST	1.1.1.1	192.168.2.4	0x5a9a	Name error (3)	out.ingve.net	none	none	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:53.306740046 CEST	1.1.1.1	192.168.2.4	0xcb2a	No error (0)	hautesaintonge-fr.mail.protection.outlook.com		52.101.166.1	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:53.306740046 CEST	1.1.1.1	192.168.2.4	0xcb2a	No error (0)	hautesaintonge-fr.mail.protection.outlook.com		52.101.164.0	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:53.306740046 CEST	1.1.1.1	192.168.2.4	0xcb2a	No error (0)	hautesaintonge-fr.mail.protection.outlook.com		52.101.166.2	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:53.306740046 CEST	1.1.1.1	192.168.2.4	0xcb2a	No error (0)	hautesaintonge-fr.mail.protection.outlook.com		52.101.166.0	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:53.396739006 CEST	1.1.1.1	192.168.2.4	0x39b2	No error (0)	out.projectorava.sk		195.181.248.13	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:53.561094046 CEST	1.1.1.1	192.168.2.4	0xa9d	No error (0)	out.perlundpartner.de		92.205.54.23	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:53.568949938 CEST	1.1.1.1	192.168.2.4	0x75e9	Name error (3)	secure.lionor.fr	none	none	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:53.577961922 CEST	1.1.1.1	192.168.2.4	0x14c3	Name error (3)	securesmtp.terrace.co.jp	none	none	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:53.594065905 CEST	1.1.1.1	192.168.2.4	0x14c3	Name error (3)	securesmtp.terrace.co.jp	none	none	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:53.678540945 CEST	1.1.1.1	192.168.2.4	0x8e15	No error (0)	mail.clique.uk.com		54.153.56.183	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:53.695130110 CEST	1.1.1.1	192.168.2.4	0xa34f	No error (0)	bnn.go.id		103.3.70.4	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:53.748011112 CEST	1.1.1.1	192.168.2.4	0x20a9	No error (0)	mxl.mundo-r.com		94.100.132.8	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:53.754493952 CEST	1.1.1.1	192.168.2.4	0x2b3f	Name error (3)	secure.walktheroom.com	none	none	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:53.899976015 CEST	1.1.1.1	192.168.2.4	0x8822	Name error (3)	securesmtp.iescotesbaixes.org	none	none	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:53.920571089 CEST	1.1.1.1	192.168.2.4	0x897f	No error (0)	boldin.com.br		108.167.188.237	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:53.932521105 CEST	1.1.1.1	192.168.2.4	0x9a04	No error (0)	smtp.iprimus.com.au	smtp-ip.gtm.oss-core.net		CNAME (Canonical name)	IN (0x0001)	false
Aug 1, 2024 06:09:53.932521105 CEST	1.1.1.1	192.168.2.4	0x9a04	No error (0)	smtp-ip.gtm.oss-core.net		203.134.71.82	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:53.940885067 CEST	1.1.1.1	192.168.2.4	0x89ec	No error (0)	mail.simail.it		217.27.113.30	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:53.969026089 CEST	1.1.1.1	192.168.2.4	0xfe8f	No error (0)	out.leinefelde.org		185.137.168.92	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:53.987869024 CEST	1.1.1.1	192.168.2.4	0xe111	No error (0)	inbound-smtp.us-east-1.amazonaws.com		3.211.210.226	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:53.987869024 CEST	1.1.1.1	192.168.2.4	0xe111	No error (0)	inbound-smtp.us-east-1.amazonaws.com		44.206.9.87	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:53.987869024 CEST	1.1.1.1	192.168.2.4	0xe111	No error (0)	inbound-smtp.us-east-1.amazonaws.com		54.197.5.236	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:53.987869024 CEST	1.1.1.1	192.168.2.4	0xe111	No error (0)	inbound-smtp.us-east-1.amazonaws.com		44.210.166.32	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:53.987869024 CEST	1.1.1.1	192.168.2.4	0xe111	No error (0)	inbound-smtp.us-east-1.amazonaws.com		54.164.173.191	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:54.037307978 CEST	1.1.1.1	192.168.2.4	0xd08b	No error (0)	evolve27.com		131.153.147.50	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:54.059313059 CEST	1.1.1.1	192.168.2.4	0xa217	No error (0)	bandpcompanies.com		50.87.150.130	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:54.094501019 CEST	1.1.1.1	192.168.2.4	0x6a1f	No error (0)	securesmtp.sigaint.org		172.67.188.56	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:54.094501019 CEST	1.1.1.1	192.168.2.4	0x6a1f	No error (0)	securesmtp.sigaint.org		104.21.64.249	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:54.172605038 CEST	1.1.1.1	192.168.2.4	0x77df	Name error (3)	mail.geopec.it	none	none	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:54.188266039 CEST	1.1.1.1	192.168.2.4	0xad65	No error (0)	mail.lotfibentifour.site11.com		153.92.0.100	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:54.261724949 CEST	1.1.1.1	192.168.2.4	0x6b97	Name error (3)	secure.keynet.it	none	none	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:54.357259035 CEST	1.1.1.1	192.168.2.4	0x24e8	No error (0)	smtp.ae.em-net.ne.jp	tsunagu-smtp-v4.xspmail.jp		CNAME (Canonical name)	IN (0x0001)	false
Aug 1, 2024 06:09:54.357259035 CEST	1.1.1.1	192.168.2.4	0x24e8	No error (0)	tsunagu-smtp-v4.xspmail.jp		160.13.60.151	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:54.378807068 CEST	1.1.1.1	192.168.2.4	0xc388	No error (0)	one.lt		188.114.97.3	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:54.378807068 CEST	1.1.1.1	192.168.2.4	0xc388	No error (0)	one.lt		188.114.96.3	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:54.389800072 CEST	1.1.1.1	192.168.2.4	0xa9a3	No error (0)	sify.com		3.111.210.243	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:54.435446978 CEST	1.1.1.1	192.168.2.4	0xb76	No error (0)	mail.lgov.hu		84.206.126.89	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:54.470864058 CEST	1.1.1.1	192.168.2.4	0x4952	No error (0)	smtp.allin1solutions.com.pk		66.96.147.118	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:54.475244999 CEST	1.1.1.1	192.168.2.4	0x8c88	Server failure (2)	openmailbox.org	none	none	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:54.510170937 CEST	1.1.1.1	192.168.2.4	0xed9f	No error (0)	temporary-mail.net		188.114.96.3	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:54.510170937 CEST	1.1.1.1	192.168.2.4	0xed9f	No error (0)	temporary-mail.net		188.114.97.3	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:54.553958893 CEST	1.1.1.1	192.168.2.4	0x7bcc	Name error (3)	securesmtp.zoomecx.com	none	none	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:54.559103012 CEST	1.1.1.1	192.168.2.4	0x8f25	Name error (3)	secure.republicpro.com	none	none	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:54.773910999 CEST	1.1.1.1	192.168.2.4	0x58d	No error (0)	voytacha.hu		34.254.44.104	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:54.783870935 CEST	1.1.1.1	192.168.2.4	0xaf75	No error (0)	mail.seniorlife.it		93.149.98.107	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:54.814524889 CEST	1.1.1.1	192.168.2.4	0x85a5	No error (0)	aplprinter.com		201.48.8.175	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:54.889071941 CEST	1.1.1.1	192.168.2.4	0x48d9	Name error (3)	mail.boxercleaning.co.uk	none	none	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:54.957237005 CEST	1.1.1.1	192.168.2.4	0xa739	Name error (3)	secure.ruby.ocn.ne.jp	none	none	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:54.973061085 CEST	1.1.1.1	192.168.2.4	0x84cb	Name error (3)	smtp.atomicnetworks.eu	none	none	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:54.977070093 CEST	1.1.1.1	192.168.2.4	0x7237	Name error (3)	smtp.sbcompany.net	none	none	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:55.014070988 CEST	1.1.1.1	192.168.2.4	0x250b	No error (0)	genexport.mx		162.241.123.65	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:55.046351910 CEST	1.1.1.1	192.168.2.4	0xa213	No error (0)	mx1.mirohost.net		78.27.225.105	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:55.046351910 CEST	1.1.1.1	192.168.2.4	0xa213	No error (0)	mx1.mirohost.net		78.27.225.110	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:55.046351910 CEST	1.1.1.1	192.168.2.4	0xa213	No error (0)	mx1.mirohost.net		78.27.225.125	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:55.106242895 CEST	1.1.1.1	192.168.2.4	0xd1d1	No error (0)	smtp.q.com	mail-q.centurylink.net		CNAME (Canonical name)	IN (0x0001)	false
Aug 1, 2024 06:09:55.106242895 CEST	1.1.1.1	192.168.2.4	0xd1d1	No error (0)	mail-q.centurylink.net	lumen.pangia.biz		CNAME (Canonical name)	IN (0x0001)	false
Aug 1, 2024 06:09:55.106242895 CEST	1.1.1.1	192.168.2.4	0xd1d1	No error (0)	lumen.pangia.biz		209.67.129.100	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:55.198993921 CEST	1.1.1.1	192.168.2.4	0xdb80	No error (0)	inboxsky.com		98.248.157.65	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:55.230098009 CEST	1.1.1.1	192.168.2.4	0x3be7	No error (0)	smtp.dfwair.net		66.226.70.66	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:55.379096031 CEST	1.1.1.1	192.168.2.4	0xf647	Name error (3)	smtp.robertsrose.co.uk	none	none	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:55.379118919 CEST	1.1.1.1	192.168.2.4	0xd6af	No error (0)	d69402a.ess.barracudanetworks.com		209.222.82.255	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:55.379118919 CEST	1.1.1.1	192.168.2.4	0xd6af	No error (0)	d69402a.ess.barracudanetworks.com		209.222.82.253	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:55.379118919 CEST	1.1.1.1	192.168.2.4	0xd6af	No error (0)	d69402a.ess.barracudanetworks.com		209.222.82.252	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:55.379390001 CEST	1.1.1.1	192.168.2.4	0x61b2	No error (0)	pep4teens.de		217.160.0.220	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:55.442732096 CEST	1.1.1.1	192.168.2.4	0x6639	Name error (3)	secure.lateral.co.tz	none	none	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:55.454318047 CEST	1.1.1.1	192.168.2.4	0x8864	No error (0)	secure.webrecruit.co.uk		137.74.253.81	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:55.545588017 CEST	1.1.1.1	192.168.2.4	0x63e1	Name error (3)	securesmtp.apcb.co.th	none	none	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:55.581861973 CEST	1.1.1.1	192.168.2.4	0xc343	No error (0)	out.h4xx0r.de		64.190.63.222	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:55.778033018 CEST	1.1.1.1	192.168.2.4	0x9f55	No error (0)	smtp.30500.fr	ns0.ovh.net		CNAME (Canonical name)	IN (0x0001)	false
Aug 1, 2024 06:09:55.778033018 CEST	1.1.1.1	192.168.2.4	0x9f55	No error (0)	ns0.ovh.net		193.70.18.144	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:55.842114925 CEST	1.1.1.1	192.168.2.4	0x8963	Name error (3)	securesmtp.xala.dk	none	none	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:55.850332975 CEST	1.1.1.1	192.168.2.4	0xb70b	No error (0)	smtp.vianet.ca		209.91.128.17	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:55.900757074 CEST	1.1.1.1	192.168.2.4	0x44d9	No error (0)	out.actionwise.co.za		15.197.130.221	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:55.991261005 CEST	1.1.1.1	192.168.2.4	0xc9d	Name error (3)	mail.manuplus.co.uk	none	none	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:56.027395964 CEST	1.1.1.1	192.168.2.4	0xe25	No error (0)	elplan.co		188.40.63.41	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:56.089714050 CEST	1.1.1.1	192.168.2.4	0x28ab	No error (0)	fabricanteslac.com.co		190.90.160.165	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:56.269459009 CEST	1.1.1.1	192.168.2.4	0xda87	No error (0)	psci.net		35.208.225.20	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:56.301198959 CEST	1.1.1.1	192.168.2.4	0x51c5	Name error (3)	out.theamazingdipcompany.com	none	none	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:56.447446108 CEST	1.1.1.1	192.168.2.4	0xfb90	Name error (3)	secure.panoramica.co.uk	none	none	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:56.452327013 CEST	1.1.1.1	192.168.2.4	0x88fb	No error (0)	infoseek.jp		133.237.129.136	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:56.453941107 CEST	1.1.1.1	192.168.2.4	0x94d8	Name error (3)	out.alanatricia.co.uk	none	none	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:56.545239925 CEST	1.1.1.1	192.168.2.4	0xc8b9	Server failure (2)	secure.rwern.com.br	none	none	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:56.545253038 CEST	1.1.1.1	192.168.2.4	0xc8b9	Server failure (2)	secure.rwern.com.br	none	none	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:56.545273066 CEST	1.1.1.1	192.168.2.4	0xc8b9	Server failure (2)	secure.rwern.com.br	none	none	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:56.545300007 CEST	1.1.1.1	192.168.2.4	0xc8b9	Server failure (2)	secure.rwern.com.br	none	none	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:56.661364079 CEST	1.1.1.1	192.168.2.4	0x4d7f	No error (0)	oi.com.br		187.6.211.40	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:56.701994896 CEST	1.1.1.1	192.168.2.4	0xd3f2	No error (0)	mail2.mail-vert.fr		141.94.139.121	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:56.721818924 CEST	1.1.1.1	192.168.2.4	0x95a5	No error (0)	mail.studiad.com		119.59.116.21	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:57.023423910 CEST	1.1.1.1	192.168.2.4	0x3159	No error (0)	mail.nexgo.de	smtp.vodafonemail.de		CNAME (Canonical name)	IN (0x0001)	false
Aug 1, 2024 06:09:57.023423910 CEST	1.1.1.1	192.168.2.4	0x3159	No error (0)	smtp.vodafonemail.de		2.207.150.234	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:57.047353983 CEST	1.1.1.1	192.168.2.4	0x65b8	No error (0)	acerlormittalsa.com		81.92.80.55	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:57.047353983 CEST	1.1.1.1	192.168.2.4	0x65b8	No error (0)	acerlormittalsa.com		81.92.80.56	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:57.073813915 CEST	1.1.1.1	192.168.2.4	0xf23a	Name error (3)	securesmtp.straussdaly.co.za	none	none	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:57.076297998 CEST	1.1.1.1	192.168.2.4	0xab66	Name error (3)	mail.cdonova.mx	none	none	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:57.087079048 CEST	1.1.1.1	192.168.2.4	0x16cc	No error (0)	mynet.com		212.101.122.34	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:57.101807117 CEST	1.1.1.1	192.168.2.4	0x3726	Name error (3)	smtp.stearns.com	none	none	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:57.237047911 CEST	1.1.1.1	192.168.2.4	0x7b29	No error (0)	hannesc.com		54.39.70.216	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:57.299880981 CEST	1.1.1.1	192.168.2.4	0x2555	Name error (3)	out.pooleng.it	none	none	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:57.307130098 CEST	1.1.1.1	192.168.2.4	0x1584	Name error (3)	smtp.guadalupe-whiteheadbetingbonus.info	none	none	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:57.438106060 CEST	1.1.1.1	192.168.2.4	0xb887	No error (0)	ilfalegname.eu		35.214.166.65	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:57.438643932 CEST	1.1.1.1	192.168.2.4	0xa372	Name error (3)	securesmtp.compass-at.com	none	none	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:57.482718945 CEST	1.1.1.1	192.168.2.4	0x39cc	Name error (3)	mail.nukador.xyz	none	none	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:57.502448082 CEST	1.1.1.1	192.168.2.4	0x6da3	No error (0)	mail.nigge.rs	mail.cock.li		CNAME (Canonical name)	IN (0x0001)	false
Aug 1, 2024 06:09:57.502448082 CEST	1.1.1.1	192.168.2.4	0x6da3	No error (0)	mail.cock.li		37.120.193.124	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:57.552589893 CEST	1.1.1.1	192.168.2.4	0x3fcd	No error (0)	smtp.mymts.net	mail.mts.syn-alias.com		CNAME (Canonical name)	IN (0x0001)	false
Aug 1, 2024 06:09:57.552589893 CEST	1.1.1.1	192.168.2.4	0x3fcd	No error (0)	mail.mts.syn-alias.com		140.238.133.27	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:57.856556892 CEST	1.1.1.1	192.168.2.4	0xc9fc	No error (0)	mail.orvwbc.org		134.193.117.58	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:57.856556892 CEST	1.1.1.1	192.168.2.4	0xc9fc	No error (0)	mail.orvwbc.org		192.64.119.254	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:57.857446909 CEST	1.1.1.1	192.168.2.4	0xac4a	Name error (3)	mail.clock.ocn.ne.jp	none	none	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:57.960095882 CEST	1.1.1.1	192.168.2.4	0x8bde	No error (0)	us2.mx2.mailhostbox.com		162.215.2.27	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:57.965585947 CEST	1.1.1.1	192.168.2.4	0x6409	Name error (3)	secure.therucksack.net	none	none	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:58.058048010 CEST	1.1.1.1	192.168.2.4	0x8cdc	Name error (3)	mail.ism-dortmund.de	none	none	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:58.059175968 CEST	1.1.1.1	192.168.2.4	0xc79e	No error (0)	smtp.ugr.es	smtpb.ugr.es		CNAME (Canonical name)	IN (0x0001)	false
Aug 1, 2024 06:09:58.059175968 CEST	1.1.1.1	192.168.2.4	0xc79e	No error (0)	smtpb.ugr.es		150.214.204.23	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:58.066699028 CEST	1.1.1.1	192.168.2.4	0x6e2d	No error (0)	mail.bresnan.net		47.43.18.10	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:58.081851959 CEST	1.1.1.1	192.168.2.4	0x14e6	No error (0)	sysram.com	traff-1.hugedomains.com		CNAME (Canonical name)	IN (0x0001)	false
Aug 1, 2024 06:09:58.081851959 CEST	1.1.1.1	192.168.2.4	0x14e6	No error (0)	traff-1.hugedomains.com	hdr-nlb9-41371129e8304c29.elb.us-east-1.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Aug 1, 2024 06:09:58.081851959 CEST	1.1.1.1	192.168.2.4	0x14e6	No error (0)	hdr-nlb9-41371129e8304c29.elb.us-east-1.amazonaws.com		52.71.57.184	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:58.081851959 CEST	1.1.1.1	192.168.2.4	0x14e6	No error (0)	hdr-nlb9-41371129e8304c29.elb.us-east-1.amazonaws.com		54.209.32.212	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:58.247266054 CEST	1.1.1.1	192.168.2.4	0x48fe	Name error (3)	smtp.333.net	none	none	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:58.324470997 CEST	1.1.1.1	192.168.2.4	0x823e	No error (0)	smtp.sifree.it	smtp.simail.it		CNAME (Canonical name)	IN (0x0001)	false
Aug 1, 2024 06:09:58.324470997 CEST	1.1.1.1	192.168.2.4	0x823e	No error (0)	smtp.simail.it		217.27.113.8	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:58.389350891 CEST	1.1.1.1	192.168.2.4	0xc0c2	Server failure (2)	smtp.yao.com	none	none	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:58.389364958 CEST	1.1.1.1	192.168.2.4	0xc0c2	Server failure (2)	smtp.yao.com	none	none	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:58.389377117 CEST	1.1.1.1	192.168.2.4	0xc0c2	Server failure (2)	smtp.yao.com	none	none	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:58.397253036 CEST	1.1.1.1	192.168.2.4	0xc0c2	Server failure (2)	smtp.yao.com	none	none	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:58.398710012 CEST	1.1.1.1	192.168.2.4	0xb060	No error (0)	alt3.aspmx.l.google.com		142.250.150.26	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:58.424848080 CEST	1.1.1.1	192.168.2.4	0x3200	No error (0)	extremeestates.com		15.197.225.128	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:58.424848080 CEST	1.1.1.1	192.168.2.4	0x3200	No error (0)	extremeestates.com		3.33.251.168	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:58.505774021 CEST	1.1.1.1	192.168.2.4	0x7709	Name error (3)	secure.federiclismo.it	none	none	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:58.561666012 CEST	1.1.1.1	192.168.2.4	0xfc38	No error (0)	mail.kpdrm.com.my		188.114.97.3	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:58.561666012 CEST	1.1.1.1	192.168.2.4	0xfc38	No error (0)	mail.kpdrm.com.my		188.114.96.3	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:58.620012999 CEST	1.1.1.1	192.168.2.4	0x3fd	Name error (3)	securesmtp.youwinmedia.es	none	none	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:58.620457888 CEST	1.1.1.1	192.168.2.4	0xcc66	Name error (3)	out.backus.it	none	none	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:58.649914980 CEST	1.1.1.1	192.168.2.4	0x4bf1	Name error (3)	mail.tipton.st	none	none	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:59.121694088 CEST	1.1.1.1	192.168.2.4	0xd7c7	No error (0)	mx02.earthlink-vadesecure.net		51.81.61.71	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:59.121715069 CEST	1.1.1.1	192.168.2.4	0x2f63	Name error (3)	cjuqnd.com	none	none	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:59.121872902 CEST	1.1.1.1	192.168.2.4	0x4b54	Name error (3)	securesmtp.moore25.karoo.co.uk	none	none	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:59.121941090 CEST	1.1.1.1	192.168.2.4	0x563d	No error (0)	smtp.casiglianiassicurazioni.it		62.149.128.202	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:59.121941090 CEST	1.1.1.1	192.168.2.4	0x563d	No error (0)	smtp.casiglianiassicurazioni.it		62.149.128.200	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:59.121941090 CEST	1.1.1.1	192.168.2.4	0x563d	No error (0)	smtp.casiglianiassicurazioni.it		62.149.128.203	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:59.121941090 CEST	1.1.1.1	192.168.2.4	0x563d	No error (0)	smtp.casiglianiassicurazioni.it		62.149.128.201	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:59.137726068 CEST	1.1.1.1	192.168.2.4	0x5f6c	Name error (3)	secure.jmweb.site	none	none	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:59.144079924 CEST	1.1.1.1	192.168.2.4	0xcb6b	Name error (3)	secure.greenincomeltd.org	none	none	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:59.224778891 CEST	1.1.1.1	192.168.2.4	0x6337	Name error (3)	securesmtp.stefaniacostruzioni.it	none	none	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:59.303358078 CEST	1.1.1.1	192.168.2.4	0x25b1	No error (0)	mail.atlanticbb.net		38.111.141.32	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:59.307293892 CEST	1.1.1.1	192.168.2.4	0x5575	No error (0)	smtp.secureserver.net		92.204.80.0	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:59.309278011 CEST	1.1.1.1	192.168.2.4	0xbc80	No error (0)	alt2.us.email.fireeyecloud.com		3.93.93.44	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:59.309278011 CEST	1.1.1.1	192.168.2.4	0xbc80	No error (0)	alt2.us.email.fireeyecloud.com		34.223.36.125	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:59.309278011 CEST	1.1.1.1	192.168.2.4	0xbc80	No error (0)	alt2.us.email.fireeyecloud.com		34.223.36.126	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:59.309278011 CEST	1.1.1.1	192.168.2.4	0xbc80	No error (0)	alt2.us.email.fireeyecloud.com		34.223.36.124	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:59.309278011 CEST	1.1.1.1	192.168.2.4	0xbc80	No error (0)	alt2.us.email.fireeyecloud.com		3.93.93.43	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:59.309278011 CEST	1.1.1.1	192.168.2.4	0xbc80	No error (0)	alt2.us.email.fireeyecloud.com		3.93.93.45	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:59.343131065 CEST	1.1.1.1	192.168.2.4	0x66a1	No error (0)	gmil.com		209.216.88.85	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:59.459734917 CEST	1.1.1.1	192.168.2.4	0x238a	No error (0)	mail.dreklam.com	mx-out05.natrohost.com		CNAME (Canonical name)	IN (0x0001)	false
Aug 1, 2024 06:09:59.459734917 CEST	1.1.1.1	192.168.2.4	0x238a	No error (0)	mx-out05.natrohost.com		94.73.188.44	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:59.484611988 CEST	1.1.1.1	192.168.2.4	0xc8ea	No error (0)	mailstore1.secureserver.net		92.204.80.3	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:59.488467932 CEST	1.1.1.1	192.168.2.4	0x30bf	Name error (3)	out.caremedicsgroup.com	none	none	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:59.631349087 CEST	1.1.1.1	192.168.2.4	0x2e50	Name error (3)	mail.evergreenmetal.it	none	none	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:59.661015987 CEST	1.1.1.1	192.168.2.4	0xe96	No error (0)	smtp.knid.nl		83.136.192.58	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:59.762691975 CEST	1.1.1.1	192.168.2.4	0x3766	Name error (3)	mail.interdat.co.uk	none	none	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:59.768702030 CEST	1.1.1.1	192.168.2.4	0x5b36	Name error (3)	out.aarete.co.uj	none	none	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:59.915883064 CEST	1.1.1.1	192.168.2.4	0x1c5e	Name error (3)	mail.fdgf3.fr	none	none	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:59.933007956 CEST	1.1.1.1	192.168.2.4	0xfbc3	Name error (3)	securesmtp.binggeli.dk	none	none	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:59.934402943 CEST	1.1.1.1	192.168.2.4	0x4ac2	No error (0)	nelco.lk		109.70.148.33	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:09:59.954277039 CEST	1.1.1.1	192.168.2.4	0xc750	No error (0)	smtp.mvtel.net	yelcot.net.av-mx.com		CNAME (Canonical name)	IN (0x0001)	false
Aug 1, 2024 06:09:59.954277039 CEST	1.1.1.1	192.168.2.4	0xc750	No error (0)	yelcot.net.av-mx.com		129.159.110.135	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:00.002279997 CEST	1.1.1.1	192.168.2.4	0xbfd6	No error (0)	smtp.edu.xunta.es		85.91.64.104	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:00.083003998 CEST	1.1.1.1	192.168.2.4	0x6359	No error (0)	owcu.cn		43.131.226.219	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:00.133002043 CEST	1.1.1.1	192.168.2.4	0x13d3	No error (0)	xmobs.com		119.18.54.84	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:00.233844995 CEST	1.1.1.1	192.168.2.4	0x8a03	Name error (3)	mail.ruzkmooecl.com	none	none	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:00.445760965 CEST	1.1.1.1	192.168.2.4	0x8dcf	Name error (3)	secure.deltapro.com.br	none	none	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:00.468120098 CEST	1.1.1.1	192.168.2.4	0xcb05	Name error (3)	smtp.financemoneyonline.in	none	none	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:00.479394913 CEST	1.1.1.1	192.168.2.4	0xcc47	Name error (3)	securesmtp.grandviewschool.ca	none	none	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:00.487921000 CEST	1.1.1.1	192.168.2.4	0x5994	No error (0)	mail.scarlet.be		193.74.71.25	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:00.489037991 CEST	1.1.1.1	192.168.2.4	0x3254	Name error (3)	ltvz38.tank.jp	none	none	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:00.496572971 CEST	1.1.1.1	192.168.2.4	0xc16c	Name error (3)	out.francetv.fr	none	none	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:00.537600994 CEST	1.1.1.1	192.168.2.4	0xa89d	No error (0)	smtp.massofisioterapistaariannalonghi.it		62.149.128.202	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:00.537600994 CEST	1.1.1.1	192.168.2.4	0xa89d	No error (0)	smtp.massofisioterapistaariannalonghi.it		62.149.128.200	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:00.537600994 CEST	1.1.1.1	192.168.2.4	0xa89d	No error (0)	smtp.massofisioterapistaariannalonghi.it		62.149.128.203	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:00.537600994 CEST	1.1.1.1	192.168.2.4	0xa89d	No error (0)	smtp.massofisioterapistaariannalonghi.it		62.149.128.201	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:00.577234030 CEST	1.1.1.1	192.168.2.4	0x6bfd	Name error (3)	out.aandmsolutions.co.uk	none	none	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:00.663882017 CEST	1.1.1.1	192.168.2.4	0x6dae	No error (0)	mx.armstrong.syn-alias.com		193.122.187.19	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:00.686399937 CEST	1.1.1.1	192.168.2.4	0x746b	Name error (3)	secure.alpenshapes.com	none	none	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:00.709491968 CEST	1.1.1.1	192.168.2.4	0x4815	Name error (3)	securesmtp.webhostranker.com.mx	none	none	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:00.711669922 CEST	1.1.1.1	192.168.2.4	0x40c4	No error (0)	mail.pro-fengenharia.com.br		216.172.172.67	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:00.731430054 CEST	1.1.1.1	192.168.2.4	0xbdbd	Name error (3)	out.im2sexy.net	none	none	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:00.746277094 CEST	1.1.1.1	192.168.2.4	0x5f99	Server failure (2)	tianya.cn	none	none	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:00.777615070 CEST	1.1.1.1	192.168.2.4	0x9bd2	No error (0)	mail.planet.nl	mail.wxs.nl		CNAME (Canonical name)	IN (0x0001)	false
Aug 1, 2024 06:10:00.777615070 CEST	1.1.1.1	192.168.2.4	0x9bd2	No error (0)	mail.wxs.nl		195.121.65.26	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:00.828325987 CEST	1.1.1.1	192.168.2.4	0x85	No error (0)	mail.goodvibesdiving.com		35.215.111.245	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:00.830454111 CEST	1.1.1.1	192.168.2.4	0xec4f	No error (0)	smtp.blackfoot.net	blackfoot.net.av-mx.com		CNAME (Canonical name)	IN (0x0001)	false
Aug 1, 2024 06:10:00.830454111 CEST	1.1.1.1	192.168.2.4	0xec4f	No error (0)	blackfoot.net.av-mx.com		129.159.110.135	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:00.990772963 CEST	1.1.1.1	192.168.2.4	0xabfc	Name error (3)	securesmtp.iatselocal720.com	none	none	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:01.064634085 CEST	1.1.1.1	192.168.2.4	0x618e	No error (0)	walla.com		34.160.41.39	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:01.124253988 CEST	1.1.1.1	192.168.2.4	0x42f3	Name error (3)	secure.atloffice.co.uk	none	none	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:01.158533096 CEST	1.1.1.1	192.168.2.4	0xcddc	Name error (3)	out.marocelectronique.com	none	none	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:01.173425913 CEST	1.1.1.1	192.168.2.4	0x6d61	No error (0)	nhs.net		62.208.144.13	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:01.264183998 CEST	1.1.1.1	192.168.2.4	0xe61e	No error (0)	smtp.skynet.be	relay.glb.proximus.be		CNAME (Canonical name)	IN (0x0001)	false
Aug 1, 2024 06:10:01.264183998 CEST	1.1.1.1	192.168.2.4	0xe61e	No error (0)	relay.glb.proximus.be		195.238.20.30	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:01.274087906 CEST	1.1.1.1	192.168.2.4	0xa2df	Name error (3)	access.k12.wv.us	none	none	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:01.303388119 CEST	1.1.1.1	192.168.2.4	0xd3c8	No error (0)	securesmtp.lokmarket.com	traff-2.hugedomains.com		CNAME (Canonical name)	IN (0x0001)	false
Aug 1, 2024 06:10:01.303388119 CEST	1.1.1.1	192.168.2.4	0xd3c8	No error (0)	traff-2.hugedomains.com	hdr-nlb5-4e815dd67a14bf7f.elb.us-east-2.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Aug 1, 2024 06:10:01.303388119 CEST	1.1.1.1	192.168.2.4	0xd3c8	No error (0)	hdr-nlb5-4e815dd67a14bf7f.elb.us-east-2.amazonaws.com		3.130.204.160	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:01.303388119 CEST	1.1.1.1	192.168.2.4	0xd3c8	No error (0)	hdr-nlb5-4e815dd67a14bf7f.elb.us-east-2.amazonaws.com		3.130.253.23	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:01.318504095 CEST	1.1.1.1	192.168.2.4	0x3bb3	No error (0)	mail.idea.rs		194.126.214.134	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:01.381169081 CEST	1.1.1.1	192.168.2.4	0x1ad0	No error (0)	cluster6a.us.messagelabs.com		52.207.128.88	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:01.381169081 CEST	1.1.1.1	192.168.2.4	0x1ad0	No error (0)	cluster6a.us.messagelabs.com		54.243.60.31	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:01.397087097 CEST	1.1.1.1	192.168.2.4	0x5dbf	Name error (3)	secure.hrad.it	none	none	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:01.399682045 CEST	1.1.1.1	192.168.2.4	0xa55a	No error (0)	ninjajumper.online		185.104.29.150	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:01.435317993 CEST	1.1.1.1	192.168.2.4	0xfe84	Name error (3)	secure.vansan.com.tr	none	none	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:01.465316057 CEST	1.1.1.1	192.168.2.4	0x298c	No error (0)	ethermail.io		13.248.129.137	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:01.465316057 CEST	1.1.1.1	192.168.2.4	0x298c	No error (0)	ethermail.io		76.223.1.95	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:01.476599932 CEST	1.1.1.1	192.168.2.4	0x58a	No error (0)	passwordtechnology.com		13.248.169.48	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:01.476599932 CEST	1.1.1.1	192.168.2.4	0x58a	No error (0)	passwordtechnology.com		76.223.54.146	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:01.543724060 CEST	1.1.1.1	192.168.2.4	0xf2a4	Name error (3)	mail.hambakeradams.co.uk	none	none	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:01.621557951 CEST	1.1.1.1	192.168.2.4	0x69f5	No error (0)	hcmp.co.kr		220.73.163.90	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:01.622175932 CEST	1.1.1.1	192.168.2.4	0xd0da	No error (0)	mail.morrisbb.net	mail.morrisbb.net.cust.b.hostedemail.com		CNAME (Canonical name)	IN (0x0001)	false
Aug 1, 2024 06:10:01.622175932 CEST	1.1.1.1	192.168.2.4	0xd0da	No error (0)	mail.morrisbb.net.cust.b.hostedemail.com		64.98.38.5	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:01.639837980 CEST	1.1.1.1	192.168.2.4	0x5421	No error (0)	pmk-bd.org		5.189.128.152	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:01.701077938 CEST	1.1.1.1	192.168.2.4	0x5514	No error (0)	netflix.com		52.214.181.141	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:01.701077938 CEST	1.1.1.1	192.168.2.4	0x5514	No error (0)	netflix.com		54.246.79.9	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:01.701077938 CEST	1.1.1.1	192.168.2.4	0x5514	No error (0)	netflix.com		54.170.196.176	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:01.802057028 CEST	1.1.1.1	192.168.2.4	0xbc15	Name error (3)	secure.gitnet.co.za	none	none	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:01.835845947 CEST	1.1.1.1	192.168.2.4	0x9d83	No error (0)	is7vikings.org		54.152.155.0	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:01.875448942 CEST	1.1.1.1	192.168.2.4	0xd119	No error (0)	meta.ua		104.22.64.144	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:01.875448942 CEST	1.1.1.1	192.168.2.4	0xd119	No error (0)	meta.ua		104.22.65.144	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:01.875448942 CEST	1.1.1.1	192.168.2.4	0xd119	No error (0)	meta.ua		172.67.25.217	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:01.900783062 CEST	1.1.1.1	192.168.2.4	0x8dd	No error (0)	smtp.thefreelens.com		75.2.37.224	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:01.922317982 CEST	1.1.1.1	192.168.2.4	0xa840	No error (0)	mx3-prod.edatasource.com	mx3-ec2.edatasource.com		CNAME (Canonical name)	IN (0x0001)	false
Aug 1, 2024 06:10:01.922317982 CEST	1.1.1.1	192.168.2.4	0xa840	No error (0)	mx3-ec2.edatasource.com		3.214.30.137	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:01.941288948 CEST	1.1.1.1	192.168.2.4	0xe40d	No error (0)	xcenda.com		52.142.45.143	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:02.117739916 CEST	1.1.1.1	192.168.2.4	0x707a	No error (0)	mail.optimum.net	mail.altice.prod.cloud.openwave.ai		CNAME (Canonical name)	IN (0x0001)	false
Aug 1, 2024 06:10:02.117739916 CEST	1.1.1.1	192.168.2.4	0x707a	No error (0)	mail.altice.prod.cloud.openwave.ai		65.20.63.172	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:02.138890028 CEST	1.1.1.1	192.168.2.4	0x53f1	No error (0)	mail.taku.nl		142.132.181.81	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:02.148057938 CEST	1.1.1.1	192.168.2.4	0x9117	Name error (3)	secure.graphicallsolution.com	none	none	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:02.172744036 CEST	1.1.1.1	192.168.2.4	0xf819	Name error (3)	securesmtp.ncdainfo.com	none	none	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:02.197302103 CEST	1.1.1.1	192.168.2.4	0x2b77	No error (0)	smtp.centrum.cz		46.255.231.70	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:02.479022026 CEST	1.1.1.1	192.168.2.4	0xed0a	No error (0)	smtp.ss.em-net.ne.jp	tsunagu-smtp-v4.xspmail.jp		CNAME (Canonical name)	IN (0x0001)	false
Aug 1, 2024 06:10:02.479022026 CEST	1.1.1.1	192.168.2.4	0xed0a	No error (0)	tsunagu-smtp-v4.xspmail.jp		160.13.60.151	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:02.489545107 CEST	1.1.1.1	192.168.2.4	0x89b0	No error (0)	out.hityy.com		104.206.163.68	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:02.675996065 CEST	1.1.1.1	192.168.2.4	0xde43	No error (0)	cheapnet.it		87.238.28.12	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:03.068192005 CEST	1.1.1.1	192.168.2.4	0xdd44	No error (0)	carrascocarservice.com.uy		170.249.199.66	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:03.086895943 CEST	1.1.1.1	192.168.2.4	0x385	No error (0)	alt4.aspmx.l.google.com		74.125.200.27	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:03.094430923 CEST	1.1.1.1	192.168.2.4	0x23a1	No error (0)	minister.com		3.33.243.145	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:03.115396976 CEST	1.1.1.1	192.168.2.4	0xf95c	Name error (3)	smtp.mynewcaneyisd.org	none	none	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:03.119473934 CEST	1.1.1.1	192.168.2.4	0x9898	No error (0)	pfb-de.mail.protection.outlook.com		52.101.168.0	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:03.119473934 CEST	1.1.1.1	192.168.2.4	0x9898	No error (0)	pfb-de.mail.protection.outlook.com		52.101.170.0	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:03.119473934 CEST	1.1.1.1	192.168.2.4	0x9898	No error (0)	pfb-de.mail.protection.outlook.com		52.101.170.2	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:03.119473934 CEST	1.1.1.1	192.168.2.4	0x9898	No error (0)	pfb-de.mail.protection.outlook.com		52.101.170.1	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:03.149034023 CEST	1.1.1.1	192.168.2.4	0x7d1	No error (0)	smtp.cfa.org.uk		83.170.124.83	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:03.161041021 CEST	1.1.1.1	192.168.2.4	0x6584	No error (0)	hilarious.com		3.33.243.145	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:03.186712027 CEST	1.1.1.1	192.168.2.4	0xba89	No error (0)	mail.iowatelecom.net	mail.iowatelecom.syn-alias.com		CNAME (Canonical name)	IN (0x0001)	false
Aug 1, 2024 06:10:03.186712027 CEST	1.1.1.1	192.168.2.4	0xba89	No error (0)	mail.iowatelecom.syn-alias.com		129.153.232.136	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:03.188536882 CEST	1.1.1.1	192.168.2.4	0x56af	No error (0)	centroanagarcia.com		62.233.41.248	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:03.232686996 CEST	1.1.1.1	192.168.2.4	0x9903	No error (0)	telusplanet.net		161.184.245.22	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:03.320965052 CEST	1.1.1.1	192.168.2.4	0x8092	Name error (3)	out.mediacreationagency.com	none	none	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:03.323206902 CEST	1.1.1.1	192.168.2.4	0x6c10	No error (0)	mail.cncfg.com		205.178.189.131	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:03.613512039 CEST	1.1.1.1	192.168.2.4	0xfd96	Name error (3)	secure.psiek.com	none	none	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:03.616374969 CEST	1.1.1.1	192.168.2.4	0xf091	No error (0)	mx.lycos.es.cust.b.hostedemail.com		64.98.38.4	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:03.637510061 CEST	1.1.1.1	192.168.2.4	0x85bc	No error (0)	unclefluffy.com		188.114.97.3	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:03.637510061 CEST	1.1.1.1	192.168.2.4	0x85bc	No error (0)	unclefluffy.com		188.114.96.3	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:03.698298931 CEST	1.1.1.1	192.168.2.4	0x4673	No error (0)	powerencry.com		162.210.199.87	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:03.755367041 CEST	1.1.1.1	192.168.2.4	0xb3a9	No error (0)	mail.cacaepesca.com.br	smtp-vip.kinghost.net		CNAME (Canonical name)	IN (0x0001)	false
Aug 1, 2024 06:10:03.755367041 CEST	1.1.1.1	192.168.2.4	0xb3a9	No error (0)	smtp-vip.kinghost.net		191.6.216.99	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:03.755367041 CEST	1.1.1.1	192.168.2.4	0xb3a9	No error (0)	smtp-vip.kinghost.net		191.6.216.100	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:03.755409956 CEST	1.1.1.1	192.168.2.4	0xb3a9	No error (0)	mail.cacaepesca.com.br	smtp-vip.kinghost.net		CNAME (Canonical name)	IN (0x0001)	false
Aug 1, 2024 06:10:03.755409956 CEST	1.1.1.1	192.168.2.4	0xb3a9	No error (0)	smtp-vip.kinghost.net		191.6.216.99	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:03.755409956 CEST	1.1.1.1	192.168.2.4	0xb3a9	No error (0)	smtp-vip.kinghost.net		191.6.216.100	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:03.938365936 CEST	1.1.1.1	192.168.2.4	0xe87b	No error (0)	smtp.tmsbioscience.com	smtp.tmsbioscience.com.netsolmail.net		CNAME (Canonical name)	IN (0x0001)	false
Aug 1, 2024 06:10:03.938365936 CEST	1.1.1.1	192.168.2.4	0xe87b	No error (0)	smtp.tmsbioscience.com.netsolmail.net		205.178.146.50	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:03.947139025 CEST	1.1.1.1	192.168.2.4	0x762d	Name error (3)	out.rmsautomacao.com	none	none	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:03.975543022 CEST	1.1.1.1	192.168.2.4	0xad91	Name error (3)	mail.10enmeer.nl	none	none	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:03.976747990 CEST	1.1.1.1	192.168.2.4	0xbf2a	No error (0)	smtp.1und1.de		212.227.15.183	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:03.976747990 CEST	1.1.1.1	192.168.2.4	0xbf2a	No error (0)	smtp.1und1.de		212.227.15.167	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:03.995824099 CEST	1.1.1.1	192.168.2.4	0x5152	Name error (3)	out.jemersoft.com	none	none	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:04.013859034 CEST	1.1.1.1	192.168.2.4	0x31c1	No error (0)	discovernet.net		74.117.153.43	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:05.119371891 CEST	1.1.1.1	192.168.2.4	0xc12b	No error (0)	tamakoshi.jp		162.43.101.36	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:05.119874001 CEST	1.1.1.1	192.168.2.4	0xcc8b	No error (0)	piford.com		119.18.54.180	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:05.123641014 CEST	1.1.1.1	192.168.2.4	0xcc8b	No error (0)	piford.com		119.18.54.180	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:05.123843908 CEST	1.1.1.1	192.168.2.4	0xc12b	No error (0)	tamakoshi.jp		162.43.101.36	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:05.134830952 CEST	1.1.1.1	192.168.2.4	0x8ed6	No error (0)	ocn-fc-r-01.ocn.ad.jp		211.16.12.177	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:05.134830952 CEST	1.1.1.1	192.168.2.4	0x8ed6	No error (0)	ocn-fc-r-01.ocn.ad.jp		210.145.250.129	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:05.137701988 CEST	1.1.1.1	192.168.2.4	0xb592	Name error (3)	smtp.sturm.de	none	none	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:05.138816118 CEST	1.1.1.1	192.168.2.4	0xf155	Name error (3)	securesmtp.qhbztb.com	none	none	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:05.138835907 CEST	1.1.1.1	192.168.2.4	0x3b2b	Name error (3)	mail.asbestobv.cl	none	none	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:05.140341043 CEST	1.1.1.1	192.168.2.4	0x8e02	Name error (3)	out.spdabie2020.onmicrosoft.com	none	none	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:05.155754089 CEST	1.1.1.1	192.168.2.4	0xd2cc	No error (0)	smtp.hccnet.nl		213.136.31.236	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:05.194808006 CEST	1.1.1.1	192.168.2.4	0xd5c1	Name error (3)	securesmtp.contarinivini.it	none	none	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:05.205904007 CEST	1.1.1.1	192.168.2.4	0xb95b	No error (0)	mail.continentalrecords.co.uk	ssl0.ovh.net		CNAME (Canonical name)	IN (0x0001)	false
Aug 1, 2024 06:10:05.205904007 CEST	1.1.1.1	192.168.2.4	0xb95b	No error (0)	ssl0.ovh.net		193.70.18.144	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:05.385018110 CEST	1.1.1.1	192.168.2.4	0x8336	No error (0)	mail.perillup.com	mail.hover.com.cust.hostedemail.com		CNAME (Canonical name)	IN (0x0001)	false
Aug 1, 2024 06:10:05.385018110 CEST	1.1.1.1	192.168.2.4	0x8336	No error (0)	mail.hover.com.cust.hostedemail.com		216.40.42.134	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:05.616090059 CEST	1.1.1.1	192.168.2.4	0xffde	Name error (3)	out.microgen.co.uk	none	none	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:05.671446085 CEST	1.1.1.1	192.168.2.4	0xbcb6	Name error (3)	smtp.johanneswolf.co.uk	none	none	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:05.671717882 CEST	1.1.1.1	192.168.2.4	0xb340	Name error (3)	out.myspacekills.com	none	none	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:05.709646940 CEST	1.1.1.1	192.168.2.4	0x1150	Name error (3)	securesmtp.ensba.fr	none	none	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:05.748631954 CEST	1.1.1.1	192.168.2.4	0xfd93	Name error (3)	smtp.jatengpintar.id	none	none	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:05.750380993 CEST	1.1.1.1	192.168.2.4	0xd23a	No error (0)	districtprinting.com		74.208.236.22	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:05.834764957 CEST	1.1.1.1	192.168.2.4	0x3c72	Name error (3)	out.missteenbaguio.org	none	none	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:05.854669094 CEST	1.1.1.1	192.168.2.4	0x5fc0	Name error (3)	secure.ozelcenazehizmetlerim.com	none	none	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:05.942652941 CEST	1.1.1.1	192.168.2.4	0x7970	No error (0)	securesmtp.webgirl.com		13.248.206.98	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:05.944935083 CEST	1.1.1.1	192.168.2.4	0x71a3	No error (0)	out.co.uk		64.91.253.60	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:06.012720108 CEST	1.1.1.1	192.168.2.4	0x2f33	No error (0)	smtp.cadcom.net	traff-3.hugedomains.com		CNAME (Canonical name)	IN (0x0001)	false
Aug 1, 2024 06:10:06.012720108 CEST	1.1.1.1	192.168.2.4	0x2f33	No error (0)	traff-3.hugedomains.com	hdr-nlb4-0bbd2e21834cb637.elb.us-east-2.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Aug 1, 2024 06:10:06.012720108 CEST	1.1.1.1	192.168.2.4	0x2f33	No error (0)	hdr-nlb4-0bbd2e21834cb637.elb.us-east-2.amazonaws.com		3.19.116.195	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:06.012720108 CEST	1.1.1.1	192.168.2.4	0x2f33	No error (0)	hdr-nlb4-0bbd2e21834cb637.elb.us-east-2.amazonaws.com		3.18.7.81	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:06.022721052 CEST	1.1.1.1	192.168.2.4	0xecc7	Name error (3)	secure.libre.fr	none	none	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:06.249886036 CEST	1.1.1.1	192.168.2.4	0xcb85	Name error (3)	out.gspainters.com.au	none	none	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:06.250000954 CEST	1.1.1.1	192.168.2.4	0x9a0f	Name error (3)	out.dream.com	none	none	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:06.265911102 CEST	1.1.1.1	192.168.2.4	0xa0cf	Name error (3)	out.rpmphoto.co.uk	none	none	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:06.277281046 CEST	1.1.1.1	192.168.2.4	0xf50	No error (0)	mx1.mail.ovh.net		188.165.36.237	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:06.296545982 CEST	1.1.1.1	192.168.2.4	0x59fb	Name error (3)	out.delusionmfg.com	none	none	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:06.349992990 CEST	1.1.1.1	192.168.2.4	0xf2d2	No error (0)	swbell.net		151.164.129.2	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:06.430608988 CEST	1.1.1.1	192.168.2.4	0xe195	No error (0)	secure.de.de		80.92.67.155	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:06.489164114 CEST	1.1.1.1	192.168.2.4	0xadb3	No error (0)	saarbourgdesign-de.mail.protection.outlook.com		52.101.73.16	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:06.489164114 CEST	1.1.1.1	192.168.2.4	0xadb3	No error (0)	saarbourgdesign-de.mail.protection.outlook.com		52.101.68.12	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:06.489164114 CEST	1.1.1.1	192.168.2.4	0xadb3	No error (0)	saarbourgdesign-de.mail.protection.outlook.com		52.101.68.18	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:06.489164114 CEST	1.1.1.1	192.168.2.4	0xadb3	No error (0)	saarbourgdesign-de.mail.protection.outlook.com		52.101.68.15	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:06.552191973 CEST	1.1.1.1	192.168.2.4	0x7aea	No error (0)	seanet.ro		194.102.108.59	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:06.666775942 CEST	1.1.1.1	192.168.2.4	0x8f88	No error (0)	mx1-dk.centerasecurity.dk		89.233.19.127	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:06.666775942 CEST	1.1.1.1	192.168.2.4	0x8f88	No error (0)	mx1-dk.centerasecurity.dk		89.233.19.188	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:06.666775942 CEST	1.1.1.1	192.168.2.4	0x8f88	No error (0)	mx1-dk.centerasecurity.dk		128.76.60.167	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:06.666775942 CEST	1.1.1.1	192.168.2.4	0x8f88	No error (0)	mx1-dk.centerasecurity.dk		128.76.60.187	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:06.680192947 CEST	1.1.1.1	192.168.2.4	0x6a20	No error (0)	persianmail.net		116.203.110.116	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:06.702794075 CEST	1.1.1.1	192.168.2.4	0xb172	Name error (3)	secure.liangruan.com	none	none	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:06.733000994 CEST	1.1.1.1	192.168.2.4	0x9e7	No error (0)	hackveda.in		192.185.129.82	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:06.874861002 CEST	1.1.1.1	192.168.2.4	0x71e7	No error (0)	mail.thevillacollection.co.uk		173.254.30.45	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:06.878245115 CEST	1.1.1.1	192.168.2.4	0xe329	No error (0)	mail.universitadipavia.it	ghs.google.com		CNAME (Canonical name)	IN (0x0001)	false
Aug 1, 2024 06:10:06.878245115 CEST	1.1.1.1	192.168.2.4	0xe329	No error (0)	ghs.google.com		216.58.206.83	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:06.911529064 CEST	1.1.1.1	192.168.2.4	0x57a8	Name error (3)	out.ecotec.org.uk	none	none	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:06.964991093 CEST	1.1.1.1	192.168.2.4	0x9898	Name error (3)	secure.banklemi.co.il	none	none	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:06.996294022 CEST	1.1.1.1	192.168.2.4	0xa3bd	Name error (3)	secure.daydream.tm.fr	none	none	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:07.042429924 CEST	1.1.1.1	192.168.2.4	0x8f1f	Name error (3)	out.escot.ma	none	none	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:07.092375040 CEST	1.1.1.1	192.168.2.4	0xb7c5	Name error (3)	secure.scy.cn	none	none	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:07.092746973 CEST	1.1.1.1	192.168.2.4	0xb7c5	Name error (3)	secure.scy.cn	none	none	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:07.092776060 CEST	1.1.1.1	192.168.2.4	0xb7c5	Name error (3)	secure.scy.cn	none	none	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:07.111042023 CEST	1.1.1.1	192.168.2.4	0x6a1e	Name error (3)	secure.37.tr	none	none	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:07.111397028 CEST	1.1.1.1	192.168.2.4	0xd6cd	Name error (3)	smtp.chclzq.com	none	none	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:07.196141958 CEST	1.1.1.1	192.168.2.4	0x4df9	No error (0)	mosblech-brill.de		217.160.0.85	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:07.224412918 CEST	1.1.1.1	192.168.2.4	0x8c9f	No error (0)	iec.grupo-empresarial.net		162.241.2.39	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:07.282738924 CEST	1.1.1.1	192.168.2.4	0x4304	No error (0)	smtp.grupoondas.com.br	pop.grupoondas.com.br		CNAME (Canonical name)	IN (0x0001)	false
Aug 1, 2024 06:10:07.282738924 CEST	1.1.1.1	192.168.2.4	0x4304	No error (0)	pop.grupoondas.com.br	mail.ita.locamail.com.br		CNAME (Canonical name)	IN (0x0001)	false
Aug 1, 2024 06:10:07.282738924 CEST	1.1.1.1	192.168.2.4	0x4304	No error (0)	mail.ita.locamail.com.br		191.252.112.195	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:07.370703936 CEST	1.1.1.1	192.168.2.4	0x556c	No error (0)	creativesalem.com		130.211.29.77	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:07.403723955 CEST	1.1.1.1	192.168.2.4	0x99ca	No error (0)	mail.dk		3.125.131.179	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:07.403723955 CEST	1.1.1.1	192.168.2.4	0x99ca	No error (0)	mail.dk		18.192.246.145	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:07.403723955 CEST	1.1.1.1	192.168.2.4	0x99ca	No error (0)	mail.dk		18.193.144.171	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:07.517678022 CEST	1.1.1.1	192.168.2.4	0x5cb0	Name error (3)	securesmtp.liberalarts.productions	none	none	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:07.559052944 CEST	1.1.1.1	192.168.2.4	0x46c0	Name error (3)	out.starsandstripesmgmt.co	none	none	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:07.563926935 CEST	1.1.1.1	192.168.2.4	0x6b8b	Name error (3)	out.champagneconstructioninc.com	none	none	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:07.564357996 CEST	1.1.1.1	192.168.2.4	0x551	Name error (3)	mailspirit.info	none	none	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:07.579730988 CEST	1.1.1.1	192.168.2.4	0x957d	No error (0)	smtp.sasinformatica.it	smtp-vip.mgm.tiscali.com		CNAME (Canonical name)	IN (0x0001)	false
Aug 1, 2024 06:10:07.579730988 CEST	1.1.1.1	192.168.2.4	0x957d	No error (0)	smtp-vip.mgm.tiscali.com		213.205.37.10	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:07.581783056 CEST	1.1.1.1	192.168.2.4	0x5b19	Name error (3)	out.nicolehatley.com	none	none	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:07.731154919 CEST	1.1.1.1	192.168.2.4	0xa515	No error (0)	liebens.co.za		197.221.10.156	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:07.755892038 CEST	1.1.1.1	192.168.2.4	0x7934	Name error (3)	mail.westmorelandtransit.com	none	none	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:07.756434917 CEST	1.1.1.1	192.168.2.4	0xd0bd	Name error (3)	out.netntt.fr	none	none	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:07.866820097 CEST	1.1.1.1	192.168.2.4	0xf2be	No error (0)	mail.laradio1045.com		200.58.110.158	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:07.876562119 CEST	1.1.1.1	192.168.2.4	0x4569	No error (0)	smtp.netsync.net	netsync.net.av-mx.com		CNAME (Canonical name)	IN (0x0001)	false
Aug 1, 2024 06:10:07.876562119 CEST	1.1.1.1	192.168.2.4	0x4569	No error (0)	netsync.net.av-mx.com		129.159.110.135	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:07.900871992 CEST	1.1.1.1	192.168.2.4	0xf0b9	No error (0)	mail.abusedwoman.org		207.204.50.48	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:07.971889973 CEST	1.1.1.1	192.168.2.4	0x2967	No error (0)	mail.britconsult.com.br	britconsult.com.br		CNAME (Canonical name)	IN (0x0001)	false
Aug 1, 2024 06:10:07.971889973 CEST	1.1.1.1	192.168.2.4	0x2967	No error (0)	britconsult.com.br		104.156.60.32	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:08.071480036 CEST	1.1.1.1	192.168.2.4	0xe39c	No error (0)	4tcontratistas.pe		192.141.41.86	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:08.213912010 CEST	1.1.1.1	192.168.2.4	0xcadf	Server failure (2)	sprintpcs.com	none	none	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:08.332695007 CEST	1.1.1.1	192.168.2.4	0xfd1c	Name error (3)	mail.physiqueprideosaka.com	none	none	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:08.348807096 CEST	1.1.1.1	192.168.2.4	0xc415	No error (0)	out.supereva.it	d1881mr5w2vitt.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Aug 1, 2024 06:10:08.348807096 CEST	1.1.1.1	192.168.2.4	0xc415	No error (0)	d1881mr5w2vitt.cloudfront.net		13.226.175.92	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:08.348807096 CEST	1.1.1.1	192.168.2.4	0xc415	No error (0)	d1881mr5w2vitt.cloudfront.net		13.226.175.123	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:08.348807096 CEST	1.1.1.1	192.168.2.4	0xc415	No error (0)	d1881mr5w2vitt.cloudfront.net		13.226.175.90	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:08.348807096 CEST	1.1.1.1	192.168.2.4	0xc415	No error (0)	d1881mr5w2vitt.cloudfront.net		13.226.175.19	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:08.394201994 CEST	1.1.1.1	192.168.2.4	0x6873	Name error (3)	out.pharmacie-annecy-74.fr	none	none	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:08.402968884 CEST	1.1.1.1	192.168.2.4	0x8e42	Name error (3)	secure.otto-oppermann.de	none	none	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:08.407501936 CEST	1.1.1.1	192.168.2.4	0xf181	No error (0)	newhorizonadventures.net		82.180.138.219	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:08.418210030 CEST	1.1.1.1	192.168.2.4	0x93ba	Name error (3)	secure.cfb.de	none	none	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:08.418272018 CEST	1.1.1.1	192.168.2.4	0x6a2	Name error (3)	securesmtp.aussieadrenaline.com	none	none	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:08.420172930 CEST	1.1.1.1	192.168.2.4	0x90ee	No error (0)	smtpav2.hosteam.fr		212.83.186.79	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:08.420624971 CEST	1.1.1.1	192.168.2.4	0x8e92	Name error (3)	out.robertwalkerphotographer.biz	none	none	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:08.424721003 CEST	1.1.1.1	192.168.2.4	0x908e	Name error (3)	out.etu.upmc.fr	none	none	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:08.441612005 CEST	1.1.1.1	192.168.2.4	0x109b	Name error (3)	smtp.cm-tresura.ch	none	none	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:08.517529011 CEST	1.1.1.1	192.168.2.4	0xe0a2	Name error (3)	mail.diamant-eventservice.de	none	none	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:08.568095922 CEST	1.1.1.1	192.168.2.4	0xa0bc	No error (0)	kurnaz.com.tr		93.89.224.77	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:08.603919029 CEST	1.1.1.1	192.168.2.4	0xb2fe	No error (0)	secure.ccdis1.org		208.91.197.27	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:08.646394968 CEST	1.1.1.1	192.168.2.4	0x44c3	No error (0)	mail.vivaconstrucoes.com.br		31.170.163.210	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:08.665632010 CEST	1.1.1.1	192.168.2.4	0x2e05	No error (0)	smtp.mowisp.net	mowisp-net.mx.av-mx.com		CNAME (Canonical name)	IN (0x0001)	false
Aug 1, 2024 06:10:08.665632010 CEST	1.1.1.1	192.168.2.4	0x2e05	No error (0)	mowisp-net.mx.av-mx.com		150.136.204.204	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:08.762494087 CEST	1.1.1.1	192.168.2.4	0xd8d7	No error (0)	mdc-west.mx.a.cloudfilter.net		35.82.88.33	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:08.762494087 CEST	1.1.1.1	192.168.2.4	0xd8d7	No error (0)	mdc-west.mx.a.cloudfilter.net		35.166.162.2	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:08.763171911 CEST	1.1.1.1	192.168.2.4	0xb84d	Name error (3)	secure.hrpvjeyou.com	none	none	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:08.841622114 CEST	1.1.1.1	192.168.2.4	0xae74	No error (0)	xsp.mx		191.101.172.182	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:08.925338984 CEST	1.1.1.1	192.168.2.4	0xcf25	No error (0)	ukraves.co.uk		54.171.95.50	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:08.970558882 CEST	1.1.1.1	192.168.2.4	0x76f6	No error (0)	mail.uwaterloo.ca		129.97.128.232	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:09.088929892 CEST	1.1.1.1	192.168.2.4	0x56a7	Name error (3)	securesmtp.mmdfdmf.sdfdsfds	none	none	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:09.089020014 CEST	1.1.1.1	192.168.2.4	0x3992	Name error (3)	securesmtp.ttnonferrous.co.uk	none	none	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:09.093082905 CEST	1.1.1.1	192.168.2.4	0x8d17	No error (0)	mail.veritech.mn		74.220.207.154	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:09.113210917 CEST	1.1.1.1	192.168.2.4	0x22e3	No error (0)	smtp.online.nl	smtp.mail.online.nl		CNAME (Canonical name)	IN (0x0001)	false
Aug 1, 2024 06:10:09.113210917 CEST	1.1.1.1	192.168.2.4	0x22e3	No error (0)	smtp.mail.online.nl		88.99.236.167	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:09.166645050 CEST	1.1.1.1	192.168.2.4	0x6091	No error (0)	myway.com		34.117.28.143	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:09.170003891 CEST	1.1.1.1	192.168.2.4	0xaf4a	No error (0)	mail.qarea.com		185.185.51.226	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:09.195431948 CEST	1.1.1.1	192.168.2.4	0x2599	No error (0)	mail.toidymat.com		162.241.226.19	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:09.196177006 CEST	1.1.1.1	192.168.2.4	0x79e0	No error (0)	telkomsa.net		105.224.1.26	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:09.249219894 CEST	1.1.1.1	192.168.2.4	0x971b	Name error (3)	securesmtp.asketutors.com	none	none	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:09.250531912 CEST	1.1.1.1	192.168.2.4	0x3f39	No error (0)	dr.com		204.74.99.101	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:09.269324064 CEST	1.1.1.1	192.168.2.4	0x867	Name error (3)	secure.h9cgeu4qd4.com	none	none	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:09.329155922 CEST	1.1.1.1	192.168.2.4	0x40fe	Name error (3)	smtp.reach-suppport.co.uk	none	none	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:09.342113018 CEST	1.1.1.1	192.168.2.4	0x726d	Name error (3)	securesmtp.hpsd.school	none	none	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:09.366358995 CEST	1.1.1.1	192.168.2.4	0xb47b	No error (0)	mx02.5ax.org		142.93.64.203	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:09.506607056 CEST	1.1.1.1	192.168.2.4	0xa755	Name error (3)	secure.lutheran-hosp.com	none	none	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:09.546792984 CEST	1.1.1.1	192.168.2.4	0xde29	Name error (3)	smtp.agenziarecasa.it	none	none	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:09.599196911 CEST	1.1.1.1	192.168.2.4	0x605a	No error (0)	smtp.hypersec.com.br	pop.hypersec.com.br		CNAME (Canonical name)	IN (0x0001)	false
Aug 1, 2024 06:10:09.599196911 CEST	1.1.1.1	192.168.2.4	0x605a	No error (0)	pop.hypersec.com.br	mail.ita.locamail.com.br		CNAME (Canonical name)	IN (0x0001)	false
Aug 1, 2024 06:10:09.599196911 CEST	1.1.1.1	192.168.2.4	0x605a	No error (0)	mail.ita.locamail.com.br		191.252.112.195	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:09.680594921 CEST	1.1.1.1	192.168.2.4	0x19ba	No error (0)	smtp.uni-greifswald.de		141.53.10.100	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:09.745398045 CEST	1.1.1.1	192.168.2.4	0x360c	Name error (3)	brtph7ee.bnr.ca	none	none	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:09.780936003 CEST	1.1.1.1	192.168.2.4	0x9e73	No error (0)	wyrral.com		192.99.212.43	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:09.791836023 CEST	1.1.1.1	192.168.2.4	0xf9e4	Name error (3)	out.rj-architecture.fr	none	none	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:09.794675112 CEST	1.1.1.1	192.168.2.4	0xbfc2	No error (0)	tbcevents.pt		94.46.168.88	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:09.889637947 CEST	1.1.1.1	192.168.2.4	0x447d	Name error (3)	smtp.theboobyhatch.org	none	none	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:09.907977104 CEST	1.1.1.1	192.168.2.4	0xd0b9	No error (0)	mail.mpeekel.nl		46.30.213.188	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:09.909126997 CEST	1.1.1.1	192.168.2.4	0x610a	Name error (3)	smtp.jewsforjesus.org.uk	none	none	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:09.928019047 CEST	1.1.1.1	192.168.2.4	0xf381	No error (0)	mail.tech181.com	tech181.com		CNAME (Canonical name)	IN (0x0001)	false
Aug 1, 2024 06:10:09.928019047 CEST	1.1.1.1	192.168.2.4	0xf381	No error (0)	tech181.com		76.223.105.230	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:09.928019047 CEST	1.1.1.1	192.168.2.4	0xf381	No error (0)	tech181.com		13.248.243.5	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:09.934333086 CEST	1.1.1.1	192.168.2.4	0xa14a	No error (0)	icrservices.com		162.214.115.97	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:10.033220053 CEST	1.1.1.1	192.168.2.4	0x1b80	No error (0)	sicsacperu.net		149.56.185.74	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:10.072890997 CEST	1.1.1.1	192.168.2.4	0x1d84	No error (0)	arranz.net		185.209.62.102	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:10.139269114 CEST	1.1.1.1	192.168.2.4	0xfdfb	No error (0)	pandawajayasteel.co.id		103.58.102.44	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:10.139308929 CEST	1.1.1.1	192.168.2.4	0xfdfb	No error (0)	pandawajayasteel.co.id		103.58.102.44	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:10.161396980 CEST	1.1.1.1	192.168.2.4	0xd61b	Name error (3)	plues.co.jp	none	none	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:10.217029095 CEST	1.1.1.1	192.168.2.4	0xe073	No error (0)	smtp.singnet.com.sg	smtp.orchid.atmailcloud.com		CNAME (Canonical name)	IN (0x0001)	false
Aug 1, 2024 06:10:10.217029095 CEST	1.1.1.1	192.168.2.4	0xe073	No error (0)	smtp.orchid.atmailcloud.com		13.250.88.201	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:10.217029095 CEST	1.1.1.1	192.168.2.4	0xe073	No error (0)	smtp.orchid.atmailcloud.com		13.251.182.77	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:10.217029095 CEST	1.1.1.1	192.168.2.4	0xe073	No error (0)	smtp.orchid.atmailcloud.com		13.251.216.156	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:10.227544069 CEST	1.1.1.1	192.168.2.4	0x322e	No error (0)	site1.smtp.exch580.serverdata.net		185.64.213.125	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:10.289345026 CEST	1.1.1.1	192.168.2.4	0x61f0	Name error (3)	out.nento.com	none	none	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:10.417789936 CEST	1.1.1.1	192.168.2.4	0x21cd	No error (0)	mail.bdboxoffice.com		188.114.96.3	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:10.417789936 CEST	1.1.1.1	192.168.2.4	0x21cd	No error (0)	mail.bdboxoffice.com		188.114.97.3	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:10.484584093 CEST	1.1.1.1	192.168.2.4	0x3cfc	No error (0)	smtp.iprimus.com.au	smtp-ip.gtm.oss-core.net		CNAME (Canonical name)	IN (0x0001)	false
Aug 1, 2024 06:10:10.484584093 CEST	1.1.1.1	192.168.2.4	0x3cfc	No error (0)	smtp-ip.gtm.oss-core.net		203.134.71.82	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:10.489005089 CEST	1.1.1.1	192.168.2.4	0xb2a1	Name error (3)	out.macanders.fr	none	none	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:10.618391037 CEST	1.1.1.1	192.168.2.4	0x498e	No error (0)	lunata.in		66.165.234.210	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:10.636909008 CEST	1.1.1.1	192.168.2.4	0x1800	No error (0)	mail.d1.dion.ne.jp	msa.d1.dion.ne.jp		CNAME (Canonical name)	IN (0x0001)	false
Aug 1, 2024 06:10:10.636909008 CEST	1.1.1.1	192.168.2.4	0x1800	No error (0)	msa.d1.dion.ne.jp		106.187.245.193	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:10.671895027 CEST	1.1.1.1	192.168.2.4	0xa8a6	No error (0)	agrisharing.com		157.7.144.5	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:10.702531099 CEST	1.1.1.1	192.168.2.4	0xe976	No error (0)	mail.bitcorecoin.com	mail.bitcorecoin.com.cust.b.hostedemail.com		CNAME (Canonical name)	IN (0x0001)	false
Aug 1, 2024 06:10:10.702531099 CEST	1.1.1.1	192.168.2.4	0xe976	No error (0)	mail.bitcorecoin.com.cust.b.hostedemail.com		64.98.38.5	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:11.016654968 CEST	1.1.1.1	192.168.2.4	0x56f7	No error (0)	mail.best.net.pl		51.83.216.76	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:11.047878027 CEST	1.1.1.1	192.168.2.4	0x6363	No error (0)	mail.carstuning.com	carstuning.com		CNAME (Canonical name)	IN (0x0001)	false
Aug 1, 2024 06:10:11.047878027 CEST	1.1.1.1	192.168.2.4	0x6363	No error (0)	carstuning.com		89.42.218.250	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:11.206804991 CEST	1.1.1.1	192.168.2.4	0x4ada	Name error (3)	mail.maderasanblas.com.ar	none	none	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:11.218328953 CEST	1.1.1.1	192.168.2.4	0x2a1b	No error (0)	jasmine.ocn.ne.jp		180.37.199.168	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:11.237731934 CEST	1.1.1.1	192.168.2.4	0x7f40	Server failure (2)	out.ffwushu.fr	none	none	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:11.237759113 CEST	1.1.1.1	192.168.2.4	0x7f40	Server failure (2)	out.ffwushu.fr	none	none	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:11.237772942 CEST	1.1.1.1	192.168.2.4	0x7f40	Server failure (2)	out.ffwushu.fr	none	none	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:11.256880999 CEST	1.1.1.1	192.168.2.4	0xaa4	No error (0)	nate.com		120.50.131.112	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:11.327146053 CEST	1.1.1.1	192.168.2.4	0xa6f5	No error (0)	citrus.ocn.ne.jp		180.37.194.44	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:11.393181086 CEST	1.1.1.1	192.168.2.4	0xd388	Name error (3)	smtp.christinapeace.com	none	none	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:11.416172028 CEST	1.1.1.1	192.168.2.4	0x441e	No error (0)	mail.chincherini.com		62.149.157.160	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:11.432009935 CEST	1.1.1.1	192.168.2.4	0x8729	No error (0)	yaho.de		13.248.158.7	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:11.432009935 CEST	1.1.1.1	192.168.2.4	0x8729	No error (0)	yaho.de		76.223.84.192	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:11.518779039 CEST	1.1.1.1	192.168.2.4	0x5b8d	Name error (3)	secure.juanaspagodas.com	none	none	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:11.672261953 CEST	1.1.1.1	192.168.2.4	0x76d1	No error (0)	out.avluk.co.uk		185.151.30.121	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:11.672458887 CEST	1.1.1.1	192.168.2.4	0xeb0b	No error (0)	smtp.figueroa-james.com	smtp.secureserver.net		CNAME (Canonical name)	IN (0x0001)	false
Aug 1, 2024 06:10:11.672458887 CEST	1.1.1.1	192.168.2.4	0xeb0b	No error (0)	smtp.secureserver.net		92.204.80.0	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:11.740756989 CEST	1.1.1.1	192.168.2.4	0xdde5	Name error (3)	out.ancrd.com	none	none	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:11.818134069 CEST	1.1.1.1	192.168.2.4	0x69f3	No error (0)	_dc-mx.374b7b1c2704.ssbresidence.com		198.54.115.172	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:11.828226089 CEST	1.1.1.1	192.168.2.4	0x5ef5	Name error (3)	secure.expertbuyer.co.uk	none	none	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:11.843672991 CEST	1.1.1.1	192.168.2.4	0xb60e	Name error (3)	securesmtp.honget.dk	none	none	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:11.856039047 CEST	1.1.1.1	192.168.2.4	0xd8d4	No error (0)	ltmcis.ro		185.250.104.21	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:12.055268049 CEST	1.1.1.1	192.168.2.4	0x6a0	No error (0)	smtp.telecapri.it	posta.9netweb.it		CNAME (Canonical name)	IN (0x0001)	false
Aug 1, 2024 06:10:12.055268049 CEST	1.1.1.1	192.168.2.4	0x6a0	No error (0)	posta.9netweb.it		62.149.157.175	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:12.094351053 CEST	1.1.1.1	192.168.2.4	0x569d	Name error (3)	mail.friesenkrone.de	none	none	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:12.100111008 CEST	1.1.1.1	192.168.2.4	0x6216	Name error (3)	secure.mathes-family.de	none	none	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:12.109610081 CEST	1.1.1.1	192.168.2.4	0x218c	No error (0)	smtp.cs.com	smtp.aol.g03.yahoodns.net		CNAME (Canonical name)	IN (0x0001)	false
Aug 1, 2024 06:10:12.109610081 CEST	1.1.1.1	192.168.2.4	0x218c	No error (0)	smtp.aol.g03.yahoodns.net		87.248.97.31	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:12.146672010 CEST	1.1.1.1	192.168.2.4	0xbc1b	Name error (3)	smtp.stonewall.org.uk	none	none	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:12.185709000 CEST	1.1.1.1	192.168.2.4	0xee36	No error (0)	unno.ca		23.136.240.90	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:12.441278934 CEST	1.1.1.1	192.168.2.4	0x8eed	No error (0)	mail.reverberations.co.uk		72.14.185.43	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:12.441278934 CEST	1.1.1.1	192.168.2.4	0x8eed	No error (0)	mail.reverberations.co.uk		45.33.23.183	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:12.441278934 CEST	1.1.1.1	192.168.2.4	0x8eed	No error (0)	mail.reverberations.co.uk		96.126.123.244	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:12.441278934 CEST	1.1.1.1	192.168.2.4	0x8eed	No error (0)	mail.reverberations.co.uk		45.33.2.79	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:12.441278934 CEST	1.1.1.1	192.168.2.4	0x8eed	No error (0)	mail.reverberations.co.uk		72.14.178.174	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:12.441278934 CEST	1.1.1.1	192.168.2.4	0x8eed	No error (0)	mail.reverberations.co.uk		198.58.118.167	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:12.441278934 CEST	1.1.1.1	192.168.2.4	0x8eed	No error (0)	mail.reverberations.co.uk		45.33.20.235	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:12.441278934 CEST	1.1.1.1	192.168.2.4	0x8eed	No error (0)	mail.reverberations.co.uk		45.79.19.196	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:12.441278934 CEST	1.1.1.1	192.168.2.4	0x8eed	No error (0)	mail.reverberations.co.uk		45.33.18.44	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:12.441278934 CEST	1.1.1.1	192.168.2.4	0x8eed	No error (0)	mail.reverberations.co.uk		45.33.30.197	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:12.441278934 CEST	1.1.1.1	192.168.2.4	0x8eed	No error (0)	mail.reverberations.co.uk		45.56.79.23	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:12.441278934 CEST	1.1.1.1	192.168.2.4	0x8eed	No error (0)	mail.reverberations.co.uk		173.255.194.134	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:12.528160095 CEST	1.1.1.1	192.168.2.4	0xf8df	Name error (3)	out.dnapr.co	none	none	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:12.529665947 CEST	1.1.1.1	192.168.2.4	0x3f88	No error (0)	mail.mckesson.com	mail.mckhboc.com		CNAME (Canonical name)	IN (0x0001)	false
Aug 1, 2024 06:10:12.529665947 CEST	1.1.1.1	192.168.2.4	0x3f88	No error (0)	mail.mckhboc.com		208.147.67.138	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:12.592339993 CEST	1.1.1.1	192.168.2.4	0x8d98	No error (0)	smtp.projekto.it	smtp.itaonline.it		CNAME (Canonical name)	IN (0x0001)	false
Aug 1, 2024 06:10:12.592339993 CEST	1.1.1.1	192.168.2.4	0x8d98	No error (0)	smtp.itaonline.it		92.222.115.115	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:12.619520903 CEST	1.1.1.1	192.168.2.4	0x30b3	No error (0)	mx.abcnetworkingu.pl		167.172.23.243	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:12.633971930 CEST	1.1.1.1	192.168.2.4	0x6726	No error (0)	grupokervo.com.mx		15.235.118.229	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:12.654088020 CEST	1.1.1.1	192.168.2.4	0xf7d0	No error (0)	mail.fabn.net		81.88.48.101	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:12.661039114 CEST	1.1.1.1	192.168.2.4	0x6775	No error (0)	securesmtp.jungclaus.dk		94.231.103.59	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:12.725615978 CEST	1.1.1.1	192.168.2.4	0xa2ca	Name error (3)	out.kalaheoschool.k	none	none	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:12.748564005 CEST	1.1.1.1	192.168.2.4	0x236e	No error (0)	smtp.infonie.fr	smtp.libertysurf.net		CNAME (Canonical name)	IN (0x0001)	false
Aug 1, 2024 06:10:12.748564005 CEST	1.1.1.1	192.168.2.4	0x236e	No error (0)	smtp.libertysurf.net		212.27.48.4	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:12.762594938 CEST	1.1.1.1	192.168.2.4	0x9265	No error (0)	smtp.euroaffiliati.com		62.149.128.200	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:12.762594938 CEST	1.1.1.1	192.168.2.4	0x9265	No error (0)	smtp.euroaffiliati.com		62.149.128.203	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:12.762594938 CEST	1.1.1.1	192.168.2.4	0x9265	No error (0)	smtp.euroaffiliati.com		62.149.128.202	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:12.762594938 CEST	1.1.1.1	192.168.2.4	0x9265	No error (0)	smtp.euroaffiliati.com		62.149.128.201	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:12.925980091 CEST	1.1.1.1	192.168.2.4	0x1a97	No error (0)	cityoflondonschool.org.uk		35.214.121.200	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:12.956868887 CEST	1.1.1.1	192.168.2.4	0x1426	No error (0)	mail.abkronen.dk	mail.unoeuro.com		CNAME (Canonical name)	IN (0x0001)	false
Aug 1, 2024 06:10:12.956868887 CEST	1.1.1.1	192.168.2.4	0x1426	No error (0)	mail.unoeuro.com	mail.simply.com		CNAME (Canonical name)	IN (0x0001)	false
Aug 1, 2024 06:10:12.956868887 CEST	1.1.1.1	192.168.2.4	0x1426	No error (0)	mail.simply.com		94.231.103.107	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:12.956868887 CEST	1.1.1.1	192.168.2.4	0x1426	No error (0)	mail.simply.com		94.231.103.207	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:12.982908964 CEST	1.1.1.1	192.168.2.4	0x8af8	Name error (3)	securesmtp.mybce.catholic.com.au	none	none	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:13.008102894 CEST	1.1.1.1	192.168.2.4	0x99ed	No error (0)	tmr.com.au		27.54.86.58	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:13.077940941 CEST	1.1.1.1	192.168.2.4	0x1227	No error (0)	newcastle.ac.uk		128.240.216.85	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:13.105493069 CEST	1.1.1.1	192.168.2.4	0x7451	No error (0)	smtp.bex.net	mail.buckeyecom.net		CNAME (Canonical name)	IN (0x0001)	false
Aug 1, 2024 06:10:13.105493069 CEST	1.1.1.1	192.168.2.4	0x7451	No error (0)	mail.buckeyecom.net		209.67.129.55	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:13.177100897 CEST	1.1.1.1	192.168.2.4	0x1	No error (0)	mail.kanwhizztimes.com		111.118.214.84	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:13.194849014 CEST	1.1.1.1	192.168.2.4	0xd40	No error (0)	room.ocn.ne.jp		180.37.194.55	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:13.281178951 CEST	1.1.1.1	192.168.2.4	0xa2fb	Name error (3)	mail.kota.pl.us	none	none	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:13.328766108 CEST	1.1.1.1	192.168.2.4	0xe90b	No error (0)	mail.mencucci.it		62.149.128.157	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:13.392195940 CEST	1.1.1.1	192.168.2.4	0xc5f4	Name error (3)	secure.mhivwacd.com	none	none	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:13.412899971 CEST	1.1.1.1	192.168.2.4	0x6b86	No error (0)	smtp.shaw.ca	shawmail.glb.shawcable.net		CNAME (Canonical name)	IN (0x0001)	false
Aug 1, 2024 06:10:13.412899971 CEST	1.1.1.1	192.168.2.4	0x6b86	No error (0)	shawmail.glb.shawcable.net		64.59.136.142	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:13.412899971 CEST	1.1.1.1	192.168.2.4	0x6b86	No error (0)	shawmail.glb.shawcable.net		64.59.128.135	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:13.673590899 CEST	1.1.1.1	192.168.2.4	0xefd9	No error (0)	smtp.proctor.net		216.40.34.37	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:13.719904900 CEST	1.1.1.1	192.168.2.4	0xf7ce	Name error (3)	securesmtp.techgen.mx	none	none	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:13.763968945 CEST	1.1.1.1	192.168.2.4	0xc3bf	No error (0)	primataeletronica.com.br		108.179.193.149	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:13.780421019 CEST	1.1.1.1	192.168.2.4	0xd278	Name error (3)	secure.webflink.de	none	none	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:13.813421965 CEST	1.1.1.1	192.168.2.4	0x840f	No error (0)	mail.ennergia.com.br		192.185.223.245	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:13.926875114 CEST	1.1.1.1	192.168.2.4	0x37a5	Name error (3)	mail.courts.state.va.us	none	none	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:14.017973900 CEST	1.1.1.1	192.168.2.4	0xc16e	No error (0)	aspmx2.googlemail.com		142.250.153.26	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:14.124371052 CEST	1.1.1.1	192.168.2.4	0xa106	No error (0)	mx01.ionos.de		217.72.192.67	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:14.169017076 CEST	1.1.1.1	192.168.2.4	0x6997	Name error (3)	jingdong1212.cn	none	none	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:14.306890965 CEST	1.1.1.1	192.168.2.4	0x456f	No error (0)	smtp.azet.sk		91.235.53.41	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:14.412924051 CEST	1.1.1.1	192.168.2.4	0xe19b	No error (0)	smtp.primeportugaltours.pt	smtp-pt.securemail.pro		CNAME (Canonical name)	IN (0x0001)	false
Aug 1, 2024 06:10:14.412924051 CEST	1.1.1.1	192.168.2.4	0xe19b	No error (0)	smtp-pt.securemail.pro		81.88.58.196	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:14.517571926 CEST	1.1.1.1	192.168.2.4	0xb821	No error (0)	mail.bg		193.201.172.98	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:14.529021978 CEST	1.1.1.1	192.168.2.4	0x7965	No error (0)	mail.getitatglobal.co.uk		35.214.74.247	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:14.544862986 CEST	1.1.1.1	192.168.2.4	0x8383	No error (0)	profimarkt.pl		77.79.202.81	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:14.644911051 CEST	1.1.1.1	192.168.2.4	0xd6c6	Name error (3)	mail.esh3.cf	none	none	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:14.722995996 CEST	1.1.1.1	192.168.2.4	0xb78c	Server failure (2)	smtp.unwired.com.au	none	none	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:14.988780975 CEST	1.1.1.1	192.168.2.4	0xa6e9	Server failure (2)	smtp.clear.net	none	none	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:15.340713978 CEST	1.1.1.1	192.168.2.4	0xb99c	No error (0)	skilltank.de		217.160.0.224	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:15.384267092 CEST	1.1.1.1	192.168.2.4	0xaf05	Name error (3)	secure.servitelsa.cl	none	none	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:15.550976038 CEST	1.1.1.1	192.168.2.4	0xb988	Name error (3)	out.pitti.de	none	none	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:15.602885008 CEST	1.1.1.1	192.168.2.4	0xd2f8	No error (0)	mail.arabellacountryhouse.com.au		103.237.110.98	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:15.675225019 CEST	1.1.1.1	192.168.2.4	0x45d	No error (0)	te.net.ua		195.138.80.34	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:15.696552992 CEST	1.1.1.1	192.168.2.4	0xd805	No error (0)	rhine.is.ed.ac.uk		129.215.17.201	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:15.723563910 CEST	1.1.1.1	192.168.2.4	0x833f	Name error (3)	securesmtp.itw.com	none	none	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:15.784003019 CEST	1.1.1.1	192.168.2.4	0x2895	No error (0)	smtp.flyingtigeritalia.com		62.149.128.200	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:15.784003019 CEST	1.1.1.1	192.168.2.4	0x2895	No error (0)	smtp.flyingtigeritalia.com		62.149.128.203	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:15.784003019 CEST	1.1.1.1	192.168.2.4	0x2895	No error (0)	smtp.flyingtigeritalia.com		62.149.128.201	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:15.784003019 CEST	1.1.1.1	192.168.2.4	0x2895	No error (0)	smtp.flyingtigeritalia.com		62.149.128.202	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:15.890722036 CEST	1.1.1.1	192.168.2.4	0xc449	No error (0)	eu-smtp-inbound-2.mimecast.com		91.220.42.211	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:15.890722036 CEST	1.1.1.1	192.168.2.4	0xc449	No error (0)	eu-smtp-inbound-2.mimecast.com		91.220.42.241	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:15.890722036 CEST	1.1.1.1	192.168.2.4	0xc449	No error (0)	eu-smtp-inbound-2.mimecast.com		195.130.217.201	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:15.890722036 CEST	1.1.1.1	192.168.2.4	0xc449	No error (0)	eu-smtp-inbound-2.mimecast.com		91.220.42.201	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:15.890722036 CEST	1.1.1.1	192.168.2.4	0xc449	No error (0)	eu-smtp-inbound-2.mimecast.com		195.130.217.241	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:15.890722036 CEST	1.1.1.1	192.168.2.4	0xc449	No error (0)	eu-smtp-inbound-2.mimecast.com		195.130.217.211	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:15.902266979 CEST	1.1.1.1	192.168.2.4	0x3c79	Name error (3)	mail.danfoss-bauer.de	none	none	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:15.921453953 CEST	1.1.1.1	192.168.2.4	0xd596	No error (0)	smtp.vestigium.net		46.30.215.68	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:15.962610960 CEST	1.1.1.1	192.168.2.4	0xf8f4	No error (0)	grupoartplus.com.br		192.185.218.14	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:15.982203960 CEST	1.1.1.1	192.168.2.4	0xf9b3	No error (0)	mail.professionalneon.com		162.241.252.17	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:16.001581907 CEST	1.1.1.1	192.168.2.4	0x1939	No error (0)	smtp.highland.net	mail.highland.net		CNAME (Canonical name)	IN (0x0001)	false
Aug 1, 2024 06:10:16.001581907 CEST	1.1.1.1	192.168.2.4	0x1939	No error (0)	mail.highland.net	highland.net.av-mx.com		CNAME (Canonical name)	IN (0x0001)	false
Aug 1, 2024 06:10:16.001581907 CEST	1.1.1.1	192.168.2.4	0x1939	No error (0)	highland.net.av-mx.com		129.159.110.135	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:16.013770103 CEST	1.1.1.1	192.168.2.4	0x6512	No error (0)	smtp.rendercube.co.uk	mail.rendercube.co.uk		CNAME (Canonical name)	IN (0x0001)	false
Aug 1, 2024 06:10:16.013770103 CEST	1.1.1.1	192.168.2.4	0x6512	No error (0)	mail.rendercube.co.uk		173.254.30.77	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:16.101380110 CEST	1.1.1.1	192.168.2.4	0xb662	No error (0)	smtp.ezweb.ne.jp		182.248.170.226	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:16.101380110 CEST	1.1.1.1	192.168.2.4	0xb662	No error (0)	smtp.ezweb.ne.jp		182.248.170.98	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:16.102998018 CEST	1.1.1.1	192.168.2.4	0xcc37	No error (0)	mx3.pub.mailpod8-cph3.one.com		185.164.14.104	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:16.104579926 CEST	1.1.1.1	192.168.2.4	0x23b1	Name error (3)	out.frequencycoffee.co	none	none	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:16.166806936 CEST	1.1.1.1	192.168.2.4	0x6dea	Name error (3)	securesmtp.posthaus.com.br	none	none	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:16.170243025 CEST	1.1.1.1	192.168.2.4	0xc4b9	Name error (3)	kosmetika-pro.in.ua	none	none	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:16.200930119 CEST	1.1.1.1	192.168.2.4	0x9b20	Name error (3)	securesmtp.wmsolicitors.com	none	none	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:16.343833923 CEST	1.1.1.1	192.168.2.4	0x5a05	No error (0)	peoplepc.com		52.147.208.244	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:16.378681898 CEST	1.1.1.1	192.168.2.4	0xaa5b	No error (0)	mail.rcn.com		129.213.13.252	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:16.539911032 CEST	1.1.1.1	192.168.2.4	0x68e0	No error (0)	mail.rub.de		134.147.42.237	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:16.646831989 CEST	1.1.1.1	192.168.2.4	0xb094	No error (0)	wadoo.co.jp		119.245.179.248	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:16.767668962 CEST	1.1.1.1	192.168.2.4	0xc276	Name error (3)	out.apost.plala.or.jp	none	none	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:16.791157007 CEST	1.1.1.1	192.168.2.4	0x4a54	No error (0)	mail.tanahbumbukab.go.id		188.114.96.3	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:16.791157007 CEST	1.1.1.1	192.168.2.4	0x4a54	No error (0)	mail.tanahbumbukab.go.id		188.114.97.3	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:16.806277990 CEST	1.1.1.1	192.168.2.4	0x1a33	No error (0)	d333211.b.ess.de.barracudanetworks.com		18.185.115.251	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:16.806277990 CEST	1.1.1.1	192.168.2.4	0x1a33	No error (0)	d333211.b.ess.de.barracudanetworks.com		18.185.115.252	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:16.806277990 CEST	1.1.1.1	192.168.2.4	0x1a33	No error (0)	d333211.b.ess.de.barracudanetworks.com		18.185.115.250	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:16.890840054 CEST	1.1.1.1	192.168.2.4	0x4bde	No error (0)	ypa-ltd.co.uk		217.160.0.92	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:17.031465054 CEST	1.1.1.1	192.168.2.4	0x9f0a	No error (0)	alt2.aspmx.l.google.com		142.251.9.27	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:17.056458950 CEST	1.1.1.1	192.168.2.4	0xa788	No error (0)	ottawa.ca		199.83.128.65	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:17.056458950 CEST	1.1.1.1	192.168.2.4	0xa788	No error (0)	ottawa.ca		199.83.132.65	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:17.230500937 CEST	1.1.1.1	192.168.2.4	0xaab9	No error (0)	mx2.nz.smxemail.com		203.84.135.3	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:17.310193062 CEST	1.1.1.1	192.168.2.4	0x2f1f	Name error (3)	mail.leonardo.it	none	none	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:17.463301897 CEST	1.1.1.1	192.168.2.4	0x1c4d	Name error (3)	securesmtp.tjmg.jus.br	none	none	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:17.469731092 CEST	1.1.1.1	192.168.2.4	0x9e82	Name error (3)	out.accesosdemadrid.es	none	none	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:17.473831892 CEST	1.1.1.1	192.168.2.4	0x97ed	Name error (3)	mail.geopec.it	none	none	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:17.611629963 CEST	1.1.1.1	192.168.2.4	0xf37f	Name error (3)	secure.chambershotel.com	none	none	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:17.657562017 CEST	1.1.1.1	192.168.2.4	0x1272	No error (0)	smtp.melitoitalia.it		62.149.128.201	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:17.657562017 CEST	1.1.1.1	192.168.2.4	0x1272	No error (0)	smtp.melitoitalia.it		62.149.128.203	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:17.657562017 CEST	1.1.1.1	192.168.2.4	0x1272	No error (0)	smtp.melitoitalia.it		62.149.128.200	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:17.657562017 CEST	1.1.1.1	192.168.2.4	0x1272	No error (0)	smtp.melitoitalia.it		62.149.128.202	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:17.724601984 CEST	1.1.1.1	192.168.2.4	0x1fb5	No error (0)	smtp.grupodiestra.com	serv1.casadiaz.com.mx		CNAME (Canonical name)	IN (0x0001)	false
Aug 1, 2024 06:10:17.724601984 CEST	1.1.1.1	192.168.2.4	0x1fb5	No error (0)	serv1.casadiaz.com.mx		177.233.6.140	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:17.858515024 CEST	1.1.1.1	192.168.2.4	0xcb89	Name error (3)	mail.myrigs.fr	none	none	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:17.886746883 CEST	1.1.1.1	192.168.2.4	0xfc3b	Name error (3)	smtp.hart.ca.k12.us	none	none	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:18.030087948 CEST	1.1.1.1	192.168.2.4	0x4aa4	No error (0)	smtp.nwytg.net		65.109.49.216	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:18.056196928 CEST	1.1.1.1	192.168.2.4	0x1edb	Name error (3)	secure.davestrus.com	none	none	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:18.119391918 CEST	1.1.1.1	192.168.2.4	0x94ab	Name error (3)	smtp.marquette.com	none	none	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:18.288068056 CEST	1.1.1.1	192.168.2.4	0xee76	No error (0)	mail.tomsawyer.org.uk		68.183.186.60	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:18.291399002 CEST	1.1.1.1	192.168.2.4	0xd055	Name error (3)	out.seripap.com	none	none	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:19.392206907 CEST	1.1.1.1	192.168.2.4	0xd0b1	Server failure (2)	mail.octamais.com.br	none	none	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:19.392220974 CEST	1.1.1.1	192.168.2.4	0xd0b1	Server failure (2)	mail.octamais.com.br	none	none	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:19.392234087 CEST	1.1.1.1	192.168.2.4	0xd0b1	Server failure (2)	mail.octamais.com.br	none	none	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:19.392246008 CEST	1.1.1.1	192.168.2.4	0xd0b1	Server failure (2)	mail.octamais.com.br	none	none	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:19.392349958 CEST	1.1.1.1	192.168.2.4	0xd6a2	No error (0)	hcmp.co.kr		220.73.163.90	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:19.394442081 CEST	1.1.1.1	192.168.2.4	0xd6a2	No error (0)	hcmp.co.kr		220.73.163.90	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:19.394886971 CEST	1.1.1.1	192.168.2.4	0xd0b1	Server failure (2)	mail.octamais.com.br	none	none	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:19.421966076 CEST	1.1.1.1	192.168.2.4	0xed86	No error (0)	mail.darklotus.xyz		41.216.183.54	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:19.434113026 CEST	1.1.1.1	192.168.2.4	0xc15d	No error (0)	smtp.cruzeirothailand.com	smtp.secureserver.net		CNAME (Canonical name)	IN (0x0001)	false
Aug 1, 2024 06:10:19.434113026 CEST	1.1.1.1	192.168.2.4	0xc15d	No error (0)	smtp.secureserver.net		92.204.80.0	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:19.443506956 CEST	1.1.1.1	192.168.2.4	0x3d83	Name error (3)	out.xpdr.org	none	none	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:19.447072029 CEST	1.1.1.1	192.168.2.4	0x32a8	No error (0)	smtp.hottie.de	www.hottie.de		CNAME (Canonical name)	IN (0x0001)	false
Aug 1, 2024 06:10:19.447072029 CEST	1.1.1.1	192.168.2.4	0x32a8	No error (0)	www.hottie.de		88.198.7.51	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:19.517045021 CEST	1.1.1.1	192.168.2.4	0xb36	No error (0)	smtp.epix.net	relay.glb.frontiernet.net		CNAME (Canonical name)	IN (0x0001)	false
Aug 1, 2024 06:10:19.517045021 CEST	1.1.1.1	192.168.2.4	0xb36	No error (0)	relay.glb.frontiernet.net		199.224.64.206	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:19.662842989 CEST	1.1.1.1	192.168.2.4	0x2cc9	No error (0)	brturbo.com.br		50.116.87.133	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:19.746215105 CEST	1.1.1.1	192.168.2.4	0xb66a	No error (0)	smtp.manx.net	smtp-cushag.atmailcloud.com		CNAME (Canonical name)	IN (0x0001)	false
Aug 1, 2024 06:10:19.746215105 CEST	1.1.1.1	192.168.2.4	0xb66a	No error (0)	smtp-cushag.atmailcloud.com	sep-cushag.eu-west.atmailcloud.com		CNAME (Canonical name)	IN (0x0001)	false
Aug 1, 2024 06:10:19.746215105 CEST	1.1.1.1	192.168.2.4	0xb66a	No error (0)	sep-cushag.eu-west.atmailcloud.com	sep-cushag.pc4.atmailcloud.com		CNAME (Canonical name)	IN (0x0001)	false
Aug 1, 2024 06:10:19.746215105 CEST	1.1.1.1	192.168.2.4	0xb66a	No error (0)	sep-cushag.pc4.atmailcloud.com		54.75.201.147	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:19.746215105 CEST	1.1.1.1	192.168.2.4	0xb66a	No error (0)	sep-cushag.pc4.atmailcloud.com		54.155.87.222	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:19.746215105 CEST	1.1.1.1	192.168.2.4	0xb66a	No error (0)	sep-cushag.pc4.atmailcloud.com		54.220.208.177	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:19.822391033 CEST	1.1.1.1	192.168.2.4	0x910a	No error (0)	securesmtp.albano.net		216.40.34.37	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:19.862814903 CEST	1.1.1.1	192.168.2.4	0x6f97	Name error (3)	secure.slice2slice.com	none	none	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:19.872693062 CEST	1.1.1.1	192.168.2.4	0xd664	No error (0)	out.co.uk		64.91.253.60	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:19.890119076 CEST	1.1.1.1	192.168.2.4	0xa6af	No error (0)	mx.plala.or.jp		60.36.166.235	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:19.909272909 CEST	1.1.1.1	192.168.2.4	0x8a0c	No error (0)	mail.mycosmos.gr		62.103.147.228	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:20.082353115 CEST	1.1.1.1	192.168.2.4	0x4cb4	Name error (3)	smtp.zum-stargard.pl	none	none	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:20.088267088 CEST	1.1.1.1	192.168.2.4	0x105a	Name error (3)	secure.wilsonsolutions.co.uk	none	none	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:20.196913004 CEST	1.1.1.1	192.168.2.4	0x41d9	Name error (3)	out.zbookusa.us	none	none	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:20.238632917 CEST	1.1.1.1	192.168.2.4	0xa6c7	No error (0)	multinet.dp.ua		194.33.181.33	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:20.274288893 CEST	1.1.1.1	192.168.2.4	0xdbe3	Name error (3)	mail.wanderlustholidaydeals.co.uk	none	none	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:20.309313059 CEST	1.1.1.1	192.168.2.4	0xb33	No error (0)	mail.grandtours.co.kr	mailapp.hiworks.co.kr		CNAME (Canonical name)	IN (0x0001)	false
Aug 1, 2024 06:10:20.309313059 CEST	1.1.1.1	192.168.2.4	0xb33	No error (0)	mailapp.hiworks.co.kr		211.47.76.59	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:20.309313059 CEST	1.1.1.1	192.168.2.4	0xb33	No error (0)	mailapp.hiworks.co.kr		45.120.71.59	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:20.309313059 CEST	1.1.1.1	192.168.2.4	0xb33	No error (0)	mailapp.hiworks.co.kr		121.254.168.55	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:20.447326899 CEST	1.1.1.1	192.168.2.4	0x54d1	No error (0)	out.eresmas.com	web.eresmas.com		CNAME (Canonical name)	IN (0x0001)	false
Aug 1, 2024 06:10:20.447326899 CEST	1.1.1.1	192.168.2.4	0x54d1	No error (0)	web.eresmas.com		62.37.237.60	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:20.570184946 CEST	1.1.1.1	192.168.2.4	0x3fe2	Name error (3)	secure.prometals.net	none	none	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:20.629851103 CEST	1.1.1.1	192.168.2.4	0x87ab	No error (0)	cdtm.de		129.187.254.228	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:20.652288914 CEST	1.1.1.1	192.168.2.4	0xb14b	No error (0)	solvixtech.com		185.138.42.193	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:20.865305901 CEST	1.1.1.1	192.168.2.4	0x7427	No error (0)	cpost.plala.or.jp		60.36.166.219	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:20.897595882 CEST	1.1.1.1	192.168.2.4	0x8f34	Name error (3)	secure.sbbnet.dk	none	none	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:20.947797060 CEST	1.1.1.1	192.168.2.4	0x365d	Name error (3)	out.capital.co.kr	none	none	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:20.980634928 CEST	1.1.1.1	192.168.2.4	0x6f8c	Name error (3)	smtp.iphone4.fr	none	none	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:20.988277912 CEST	1.1.1.1	192.168.2.4	0x6215	No error (0)	mx3.fuse.net		150.136.132.149	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:21.007395983 CEST	1.1.1.1	192.168.2.4	0xd05b	No error (0)	smtp.welho.com		83.102.40.126	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:21.037863970 CEST	1.1.1.1	192.168.2.4	0xdab1	No error (0)	smtp.intergga.ch	smtp.quickline.com		CNAME (Canonical name)	IN (0x0001)	false
Aug 1, 2024 06:10:21.037863970 CEST	1.1.1.1	192.168.2.4	0xdab1	No error (0)	smtp.quickline.com		89.236.174.10	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:21.076354027 CEST	1.1.1.1	192.168.2.4	0xf638	No error (0)	emahlaw.com		129.121.4.192	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:21.095031023 CEST	1.1.1.1	192.168.2.4	0xaca8	No error (0)	smtp.amcco.co.jp		157.7.231.229	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:21.127470970 CEST	1.1.1.1	192.168.2.4	0x4f10	No error (0)	celasa.com.gt		110.238.68.173	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:21.225248098 CEST	1.1.1.1	192.168.2.4	0x398d	No error (0)	paradiseproperties.net		160.153.0.91	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:21.235935926 CEST	1.1.1.1	192.168.2.4	0xef9b	No error (0)	smtp.londonbasement.co.uk		172.67.70.100	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:21.235935926 CEST	1.1.1.1	192.168.2.4	0xef9b	No error (0)	smtp.londonbasement.co.uk		104.26.10.222	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:21.235935926 CEST	1.1.1.1	192.168.2.4	0xef9b	No error (0)	smtp.londonbasement.co.uk		104.26.11.222	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:21.247848988 CEST	1.1.1.1	192.168.2.4	0x356d	No error (0)	emailsl.com		68.66.232.152	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:21.337421894 CEST	1.1.1.1	192.168.2.4	0xf374	No error (0)	deglaperu.com		192.141.41.10	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:21.390585899 CEST	1.1.1.1	192.168.2.4	0xabac	No error (0)	mx00.ionos.de		212.227.15.41	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:21.395853043 CEST	1.1.1.1	192.168.2.4	0x5268	Name error (3)	smtp.electrochemical.net	none	none	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:21.495265961 CEST	1.1.1.1	192.168.2.4	0xd185	Name error (3)	truegamerz.net	none	none	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:21.525548935 CEST	1.1.1.1	192.168.2.4	0x6f43	No error (0)	smtp.toucansurf.com		62.24.139.43	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:21.525548935 CEST	1.1.1.1	192.168.2.4	0x6f43	No error (0)	smtp.toucansurf.com		62.24.202.43	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:21.628211021 CEST	1.1.1.1	192.168.2.4	0x18a5	Name error (3)	securesmtp.lautogrillo.it	none	none	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:21.744709969 CEST	1.1.1.1	192.168.2.4	0xc13a	No error (0)	smtp-in.iomartmail.com		62.128.193.140	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:21.790038109 CEST	1.1.1.1	192.168.2.4	0xa7f	No error (0)	hirvahr.com		185.230.63.186	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:21.790038109 CEST	1.1.1.1	192.168.2.4	0xa7f	No error (0)	hirvahr.com		185.230.63.107	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:21.790038109 CEST	1.1.1.1	192.168.2.4	0xa7f	No error (0)	hirvahr.com		185.230.63.171	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:21.794233084 CEST	1.1.1.1	192.168.2.4	0x1270	No error (0)	keybrainstech.com		162.241.85.193	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:21.807677984 CEST	1.1.1.1	192.168.2.4	0x90f7	Name error (3)	securesmtp.colweytec.com.pe	none	none	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:21.827794075 CEST	1.1.1.1	192.168.2.4	0x1d4b	No error (0)	securesmtp.ccfstore.com	traff-1.hugedomains.com		CNAME (Canonical name)	IN (0x0001)	false
Aug 1, 2024 06:10:21.827794075 CEST	1.1.1.1	192.168.2.4	0x1d4b	No error (0)	traff-1.hugedomains.com	hdr-nlb9-41371129e8304c29.elb.us-east-1.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Aug 1, 2024 06:10:21.827794075 CEST	1.1.1.1	192.168.2.4	0x1d4b	No error (0)	hdr-nlb9-41371129e8304c29.elb.us-east-1.amazonaws.com		54.209.32.212	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:21.827794075 CEST	1.1.1.1	192.168.2.4	0x1d4b	No error (0)	hdr-nlb9-41371129e8304c29.elb.us-east-1.amazonaws.com		52.71.57.184	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:21.877209902 CEST	1.1.1.1	192.168.2.4	0xfffd	No error (0)	mail.zetaelectric.cl		186.64.116.175	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:21.894315004 CEST	1.1.1.1	192.168.2.4	0xf5b9	No error (0)	av2.gbredes.com		51.161.13.28	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:21.894315004 CEST	1.1.1.1	192.168.2.4	0xf5b9	No error (0)	av2.gbredes.com		51.79.11.68	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:22.013844013 CEST	1.1.1.1	192.168.2.4	0xd7fc	No error (0)	mail.heartlight.org	ghs.google.com		CNAME (Canonical name)	IN (0x0001)	false
Aug 1, 2024 06:10:22.013844013 CEST	1.1.1.1	192.168.2.4	0xd7fc	No error (0)	ghs.google.com		142.250.186.83	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:22.016464949 CEST	1.1.1.1	192.168.2.4	0xf3da	Name error (3)	securesmtp.techelm-tech.com	none	none	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:22.017575979 CEST	1.1.1.1	192.168.2.4	0x7369	No error (0)	smtp.reyzen.com		13.248.169.48	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:22.017575979 CEST	1.1.1.1	192.168.2.4	0x7369	No error (0)	smtp.reyzen.com		76.223.54.146	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:22.022120953 CEST	1.1.1.1	192.168.2.4	0xe805	Name error (3)	out.deepduck.de	none	none	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:22.034236908 CEST	1.1.1.1	192.168.2.4	0x60c3	No error (0)	fcetasaba-edu.ng		176.9.174.165	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:22.081806898 CEST	1.1.1.1	192.168.2.4	0x77b2	Name error (3)	smtp.corp.santander.pt	none	none	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:22.086097002 CEST	1.1.1.1	192.168.2.4	0xaac6	No error (0)	mail.sharonwicks.com		65.254.250.152	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:22.119950056 CEST	1.1.1.1	192.168.2.4	0xa746	No error (0)	smtp.hb.tp1.jp		59.157.135.3	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:22.318695068 CEST	1.1.1.1	192.168.2.4	0x6b22	Name error (3)	securesmtp.hansgrohe.de	none	none	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:22.331336975 CEST	1.1.1.1	192.168.2.4	0x6531	No error (0)	smtp.citromail.hu	smtp.dka.mailcore.net		CNAME (Canonical name)	IN (0x0001)	false
Aug 1, 2024 06:10:22.331336975 CEST	1.1.1.1	192.168.2.4	0x6531	No error (0)	smtp.dka.mailcore.net		194.19.134.66	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:22.331336975 CEST	1.1.1.1	192.168.2.4	0x6531	No error (0)	smtp.dka.mailcore.net		185.138.56.194	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:22.332103968 CEST	1.1.1.1	192.168.2.4	0x171f	No error (0)	autograf.pl		75.2.24.159	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:22.332103968 CEST	1.1.1.1	192.168.2.4	0x171f	No error (0)	autograf.pl		99.83.253.192	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:22.526777029 CEST	1.1.1.1	192.168.2.4	0xc46c	Name error (3)	out.ventas.fincamex.com.mx	none	none	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:22.533304930 CEST	1.1.1.1	192.168.2.4	0x3736	No error (0)	continental-corporation.com		3.65.150.226	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:22.534065962 CEST	1.1.1.1	192.168.2.4	0x80dc	Server failure (2)	mail.email.pl	none	none	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:22.543670893 CEST	1.1.1.1	192.168.2.4	0x4803	Name error (3)	securesmtp.dckane.com	none	none	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:22.556241035 CEST	1.1.1.1	192.168.2.4	0xfedc	Name error (3)	out.gold-travel-designer.com	none	none	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:22.557881117 CEST	1.1.1.1	192.168.2.4	0xe823	Name error (3)	securesmtp.russoandsontactical.com	none	none	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:22.637232065 CEST	1.1.1.1	192.168.2.4	0x6669	Name error (3)	smtp.riversideartmuseum.org	none	none	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:22.662256956 CEST	1.1.1.1	192.168.2.4	0x257c	Name error (3)	out.pfu.fujitsu.com	none	none	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:22.736495972 CEST	1.1.1.1	192.168.2.4	0xb067	No error (0)	mail.the-beach.net		38.111.141.32	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:22.751686096 CEST	1.1.1.1	192.168.2.4	0x5864	Name error (3)	smtp.tfsbrokers.com	none	none	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:22.821986914 CEST	1.1.1.1	192.168.2.4	0x50	Name error (3)	out.i.sotbank.jp	none	none	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:22.822288036 CEST	1.1.1.1	192.168.2.4	0x7ed1	Name error (3)	secure.fusaal.de	none	none	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:22.847793102 CEST	1.1.1.1	192.168.2.4	0x73c1	No error (0)	turk.net		95.70.148.6	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:23.009552002 CEST	1.1.1.1	192.168.2.4	0x286b	Name error (3)	mail.rm-plaza-heibronn.de	none	none	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:23.301696062 CEST	1.1.1.1	192.168.2.4	0x6525	Name error (3)	smtp.imgpharma.com	none	none	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:23.323796034 CEST	1.1.1.1	192.168.2.4	0x1c20	Name error (3)	secure.spdlutowo.pl	none	none	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:23.377006054 CEST	1.1.1.1	192.168.2.4	0xeef5	Name error (3)	secure.ceskedivky.info	none	none	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:23.387816906 CEST	1.1.1.1	192.168.2.4	0x2e4b	No error (0)	ethiodigital.net		198.91.81.15	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:23.391773939 CEST	1.1.1.1	192.168.2.4	0x5a8a	No error (0)	jahn.us		34.234.100.102	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:23.417912960 CEST	1.1.1.1	192.168.2.4	0x93ce	Name error (3)	out.hanmir.com	none	none	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:23.478065968 CEST	1.1.1.1	192.168.2.4	0xd9ab	No error (0)	smtp.okulmix.net		185.84.180.37	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:23.545241117 CEST	1.1.1.1	192.168.2.4	0x4e	No error (0)	secure.kogames.com		185.53.177.52	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:23.578533888 CEST	1.1.1.1	192.168.2.4	0x7c7d	No error (0)	mail.flowdigital.marketing		108.167.168.46	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:23.579790115 CEST	1.1.1.1	192.168.2.4	0xae58	Name error (3)	out.afloreslaw.com	none	none	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:23.596280098 CEST	1.1.1.1	192.168.2.4	0x61da	Name error (3)	smtp.meriggialessandra.191.it	none	none	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:23.598753929 CEST	1.1.1.1	192.168.2.4	0xeb6f	Name error (3)	securesmtp.nwblwi.voip.tds.net	none	none	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:23.619803905 CEST	1.1.1.1	192.168.2.4	0x48dd	No error (0)	cvcmetalplastik.com		31.186.13.240	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:23.673060894 CEST	1.1.1.1	192.168.2.4	0x3d57	Name error (3)	securesmtp.cotswoldbarristers.co.uk	none	none	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:23.751269102 CEST	1.1.1.1	192.168.2.4	0xb952	No error (0)	mx.generic-isp.com		142.93.237.125	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:24.011883974 CEST	1.1.1.1	192.168.2.4	0x5f0f	Name error (3)	out.eezi.net.au	none	none	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:24.059693098 CEST	1.1.1.1	192.168.2.4	0x9a2c	No error (0)	titusgpandi.hu		79.172.249.237	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:24.153692007 CEST	1.1.1.1	192.168.2.4	0xd871	No error (0)	toymaster.com.br		162.241.62.81	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:24.178380966 CEST	1.1.1.1	192.168.2.4	0x7ee8	No error (0)	smtp.nb.sympatico.ca	smtp.bellaliant.net		CNAME (Canonical name)	IN (0x0001)	false
Aug 1, 2024 06:10:24.178380966 CEST	1.1.1.1	192.168.2.4	0x7ee8	No error (0)	smtp.bellaliant.net	smtp-aliant.bell.net		CNAME (Canonical name)	IN (0x0001)	false
Aug 1, 2024 06:10:24.178380966 CEST	1.1.1.1	192.168.2.4	0x7ee8	No error (0)	smtp-aliant.bell.net		209.71.212.26	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:24.255043030 CEST	1.1.1.1	192.168.2.4	0xad05	Name error (3)	securesmtp.slmsinc.net	none	none	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:24.496788979 CEST	1.1.1.1	192.168.2.4	0xb984	No error (0)	tallerduff.com		179.27.99.43	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:24.508704901 CEST	1.1.1.1	192.168.2.4	0x104b	Name error (3)	out.cggs.acteduau	none	none	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:24.526304960 CEST	1.1.1.1	192.168.2.4	0xb399	Name error (3)	jingdong919.cn	none	none	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:24.572055101 CEST	1.1.1.1	192.168.2.4	0x9a45	Name error (3)	out.goproforma.com	none	none	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:24.695308924 CEST	1.1.1.1	192.168.2.4	0xa5bc	Name error (3)	securesmtp.ieladeinu.org.ar	none	none	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:24.823246956 CEST	1.1.1.1	192.168.2.4	0x9c8e	Name error (3)	out.mtrace.org	none	none	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:24.834673882 CEST	1.1.1.1	192.168.2.4	0xd6d4	No error (0)	mail.inbox.lt		195.216.236.10	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:24.845678091 CEST	1.1.1.1	192.168.2.4	0xe5ba	No error (0)	mail.tsusho.cz	tsusho.cz		CNAME (Canonical name)	IN (0x0001)	false
Aug 1, 2024 06:10:24.845678091 CEST	1.1.1.1	192.168.2.4	0xe5ba	No error (0)	tsusho.cz		81.2.194.128	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:24.854365110 CEST	1.1.1.1	192.168.2.4	0x60fc	No error (0)	stlukesprimary-co-uk.mail.protection.outlook.com		52.101.68.12	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:24.854365110 CEST	1.1.1.1	192.168.2.4	0x60fc	No error (0)	stlukesprimary-co-uk.mail.protection.outlook.com		52.101.73.15	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:24.854365110 CEST	1.1.1.1	192.168.2.4	0x60fc	No error (0)	stlukesprimary-co-uk.mail.protection.outlook.com		52.101.73.24	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:24.854365110 CEST	1.1.1.1	192.168.2.4	0x60fc	No error (0)	stlukesprimary-co-uk.mail.protection.outlook.com		52.101.73.22	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:24.994534016 CEST	1.1.1.1	192.168.2.4	0x47f4	No error (0)	smtp.eikenreform.co.jp		183.90.241.156	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:25.002676964 CEST	1.1.1.1	192.168.2.4	0xf37	Name error (3)	mail.tradexpress.com.br	none	none	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:25.066116095 CEST	1.1.1.1	192.168.2.4	0xcf67	Name error (3)	securesmtp.cantex.net	none	none	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:25.186331034 CEST	1.1.1.1	192.168.2.4	0x6aa8	No error (0)	mx20.antispam.mailspamprotection.com		34.120.156.61	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:25.187423944 CEST	1.1.1.1	192.168.2.4	0x1c9a	Name error (3)	andyc.demon.co.uk	none	none	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:25.188312054 CEST	1.1.1.1	192.168.2.4	0xe0c3	No error (0)	mx2.pub.mailpod2-cph3.one.com		185.164.14.7	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:25.196405888 CEST	1.1.1.1	192.168.2.4	0x29d	Name error (3)	smtp.yashi.org	none	none	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:25.227709055 CEST	1.1.1.1	192.168.2.4	0x9c2e	Name error (3)	smtp.medsch.ucl.ac.uk	none	none	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:25.274312019 CEST	1.1.1.1	192.168.2.4	0xa505	No error (0)	ma.medias.ne.jp		220.156.64.7	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:25.278345108 CEST	1.1.1.1	192.168.2.4	0xf77e	Name error (3)	mail.congeladoscordero.es	none	none	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:25.283633947 CEST	1.1.1.1	192.168.2.4	0x3e82	Name error (3)	westallmedia.co.uk	none	none	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:25.342735052 CEST	1.1.1.1	192.168.2.4	0x5708	No error (0)	asp12.mailinblack.com		52.143.158.11	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:25.343355894 CEST	1.1.1.1	192.168.2.4	0x39ea	No error (0)	purecustomsolutions.com		143.95.240.15	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:25.355631113 CEST	1.1.1.1	192.168.2.4	0x2227	Name error (3)	smtp.psiagency.net	none	none	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:25.355642080 CEST	1.1.1.1	192.168.2.4	0x768c	No error (0)	smtp.hbuch.de	smtpout.secureserver.net		CNAME (Canonical name)	IN (0x0001)	false
Aug 1, 2024 06:10:25.355642080 CEST	1.1.1.1	192.168.2.4	0x768c	No error (0)	smtpout.secureserver.net	smtpout.vox.secureserver.net		CNAME (Canonical name)	IN (0x0001)	false
Aug 1, 2024 06:10:25.355642080 CEST	1.1.1.1	192.168.2.4	0x768c	No error (0)	smtpout.vox.secureserver.net	smtpout.eu-sxb1.vox.secureserver.net		CNAME (Canonical name)	IN (0x0001)	false
Aug 1, 2024 06:10:25.355642080 CEST	1.1.1.1	192.168.2.4	0x768c	No error (0)	smtpout.eu-sxb1.vox.secureserver.net		92.204.80.1	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:25.392607927 CEST	1.1.1.1	192.168.2.4	0x8606	No error (0)	smtp.tpg.com.au	mail.tpg.com.au		CNAME (Canonical name)	IN (0x0001)	false
Aug 1, 2024 06:10:25.392607927 CEST	1.1.1.1	192.168.2.4	0x8606	No error (0)	mail.tpg.com.au	sep-kakadu02.au-east.atmailcloud.com		CNAME (Canonical name)	IN (0x0001)	false
Aug 1, 2024 06:10:25.392607927 CEST	1.1.1.1	192.168.2.4	0x8606	No error (0)	sep-kakadu02.au-east.atmailcloud.com		52.63.237.70	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:25.392607927 CEST	1.1.1.1	192.168.2.4	0x8606	No error (0)	sep-kakadu02.au-east.atmailcloud.com		54.206.19.13	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:25.447698116 CEST	1.1.1.1	192.168.2.4	0x8aae	Name error (3)	smtp.embutidosabuelo.com	none	none	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:25.511837959 CEST	1.1.1.1	192.168.2.4	0x1c01	Name error (3)	secure.woodschapelchurch.org	none	none	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:25.622100115 CEST	1.1.1.1	192.168.2.4	0xae5c	No error (0)	mail.g8vs.cl		23.29.124.10	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:25.635478973 CEST	1.1.1.1	192.168.2.4	0x505e	Name error (3)	secure.odbskmb.cz	none	none	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:25.936059952 CEST	1.1.1.1	192.168.2.4	0xd3bb	Name error (3)	out.rybeckfoundation.com	none	none	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:26.231710911 CEST	1.1.1.1	192.168.2.4	0x84f6	No error (0)	smtp.me.com	smtp.me.com.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Aug 1, 2024 06:10:26.264338970 CEST	1.1.1.1	192.168.2.4	0xe3a2	No error (0)	pizzaitalia-re.de		95.130.17.35	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:26.310594082 CEST	1.1.1.1	192.168.2.4	0xcff3	Name error (3)	out.boone.ca	none	none	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:26.395292044 CEST	1.1.1.1	192.168.2.4	0xfccb	Name error (3)	secure.theadairs.co.uk	none	none	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:26.398889065 CEST	1.1.1.1	192.168.2.4	0x6bf7	No error (0)	vf-beratung.de		81.169.145.74	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:26.407619953 CEST	1.1.1.1	192.168.2.4	0x4bbb	No error (0)	hkis.org.hk		188.114.96.3	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:26.407619953 CEST	1.1.1.1	192.168.2.4	0x4bbb	No error (0)	hkis.org.hk		188.114.97.3	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:26.585983992 CEST	1.1.1.1	192.168.2.4	0xf951	No error (0)	smtp.otbstudios.com		13.248.169.48	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:26.585983992 CEST	1.1.1.1	192.168.2.4	0xf951	No error (0)	smtp.otbstudios.com		76.223.54.146	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:26.770658016 CEST	1.1.1.1	192.168.2.4	0x7573	No error (0)	mail.ingenierosdecadiz.es		46.226.148.198	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:26.826756001 CEST	1.1.1.1	192.168.2.4	0x9172	No error (0)	mail.cors.co.kr		211.115.64.90	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:26.826766968 CEST	1.1.1.1	192.168.2.4	0x9172	No error (0)	mail.cors.co.kr		211.115.64.90	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:26.840825081 CEST	1.1.1.1	192.168.2.4	0xb43c	No error (0)	leisurebuilding.co.uk		178.62.79.177	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:26.957196951 CEST	1.1.1.1	192.168.2.4	0xadc4	Name error (3)	smtp.kron.com	none	none	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:26.959347963 CEST	1.1.1.1	192.168.2.4	0x2388	Name error (3)	out.unitemediagroup.com	none	none	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:27.458842993 CEST	1.1.1.1	192.168.2.4	0x9167	Name error (3)	secure.nptgroup.com.au	none	none	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:28.076787949 CEST	1.1.1.1	192.168.2.4	0x4354	Server failure (2)	tianya.cn	none	none	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:29.496642113 CEST	1.1.1.1	192.168.2.4	0x1	Server failure (2)	tianya.cn	none	none	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:35.160146952 CEST	1.1.1.1	192.168.2.4	0xec70	No error (0)	smtp.learnquickacademy.co.za		102.219.84.58	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:35.303910971 CEST	1.1.1.1	192.168.2.4	0xc5fe	No error (0)	mail.link.net		41.178.51.17	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:35.588396072 CEST	1.1.1.1	192.168.2.4	0x9112	No error (0)	sultengprov.go.id		113.20.30.104	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:35.626882076 CEST	1.1.1.1	192.168.2.4	0x251e	No error (0)	mail.cinel.com		62.149.157.160	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:35.932332039 CEST	1.1.1.1	192.168.2.4	0xf9d1	No error (0)	smtp.slingshot.co.nz		60.234.0.35	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:36.767154932 CEST	1.1.1.1	192.168.2.4	0x8b71	No error (0)	apartmentmgr.com		162.144.38.231	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:37.263350964 CEST	1.1.1.1	192.168.2.4	0xdaa	No error (0)	mail.helixbj.com		192.254.235.208	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:37.370286942 CEST	1.1.1.1	192.168.2.4	0x4462	No error (0)	mail.aruba.it		94.177.209.28	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:38.269341946 CEST	1.1.1.1	192.168.2.4	0x3e3e	No error (0)	arabshadows.com		158.106.133.180	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:38.419219971 CEST	1.1.1.1	192.168.2.4	0x2689	No error (0)	smtp.frontier.com	relay-ftrcom.glb.frontiernet.net		CNAME (Canonical name)	IN (0x0001)	false
Aug 1, 2024 06:10:38.419219971 CEST	1.1.1.1	192.168.2.4	0x2689	No error (0)	relay-ftrcom.glb.frontiernet.net		199.224.64.207	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:39.061584949 CEST	1.1.1.1	192.168.2.4	0xf1a1	No error (0)	smtp.tapsigroup.com	us2.smtp.mailhostbox.com		CNAME (Canonical name)	IN (0x0001)	false
Aug 1, 2024 06:10:39.061584949 CEST	1.1.1.1	192.168.2.4	0xf1a1	No error (0)	us2.smtp.mailhostbox.com		208.91.198.143	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:39.061584949 CEST	1.1.1.1	192.168.2.4	0xf1a1	No error (0)	us2.smtp.mailhostbox.com		208.91.199.225	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:39.061584949 CEST	1.1.1.1	192.168.2.4	0xf1a1	No error (0)	us2.smtp.mailhostbox.com		208.91.199.224	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:39.061584949 CEST	1.1.1.1	192.168.2.4	0xf1a1	No error (0)	us2.smtp.mailhostbox.com		208.91.199.223	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:39.327260971 CEST	1.1.1.1	192.168.2.4	0xb91	No error (0)	smtp.montenge.com.br	pop.montenge.com.br		CNAME (Canonical name)	IN (0x0001)	false
Aug 1, 2024 06:10:39.327260971 CEST	1.1.1.1	192.168.2.4	0xb91	No error (0)	pop.montenge.com.br	mail.ita.locaweb.com.br		CNAME (Canonical name)	IN (0x0001)	false
Aug 1, 2024 06:10:39.327260971 CEST	1.1.1.1	192.168.2.4	0xb91	No error (0)	mail.ita.locaweb.com.br		191.252.112.194	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:39.327336073 CEST	1.1.1.1	192.168.2.4	0x262a	No error (0)	mail.estacion13diciembre.com		190.185.150.8	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:39.328413963 CEST	1.1.1.1	192.168.2.4	0xb91	No error (0)	smtp.montenge.com.br	pop.montenge.com.br		CNAME (Canonical name)	IN (0x0001)	false
Aug 1, 2024 06:10:39.328413963 CEST	1.1.1.1	192.168.2.4	0xb91	No error (0)	pop.montenge.com.br	mail.ita.locaweb.com.br		CNAME (Canonical name)	IN (0x0001)	false
Aug 1, 2024 06:10:39.328413963 CEST	1.1.1.1	192.168.2.4	0xb91	No error (0)	mail.ita.locaweb.com.br		191.252.112.194	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:39.338882923 CEST	1.1.1.1	192.168.2.4	0x1a68	No error (0)	mx01-brz.echolabs.net		38.111.141.142	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:39.569225073 CEST	1.1.1.1	192.168.2.4	0x5e43	No error (0)	codconsultants.com		119.18.49.6	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:39.972407103 CEST	1.1.1.1	192.168.2.4	0x793d	No error (0)	smtp.lineone.net		62.24.139.43	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:40.047580004 CEST	1.1.1.1	192.168.2.4	0xc6f2	No error (0)	mail.ut.ac.ir		80.66.179.18	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:40.721218109 CEST	1.1.1.1	192.168.2.4	0x2d8e	No error (0)	smtp.progestionchile.com	smtp.tie.cl		CNAME (Canonical name)	IN (0x0001)	false
Aug 1, 2024 06:10:40.721218109 CEST	1.1.1.1	192.168.2.4	0x2d8e	No error (0)	smtp.tie.cl		200.91.27.66	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:40.996417046 CEST	1.1.1.1	192.168.2.4	0xdc86	No error (0)	akkayabuz.com		77.245.159.99	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:41.042474031 CEST	1.1.1.1	192.168.2.4	0xeeaf	No error (0)	smtp.maronesicasaecia.com	mail.ita.locamail.com.br		CNAME (Canonical name)	IN (0x0001)	false
Aug 1, 2024 06:10:41.042474031 CEST	1.1.1.1	192.168.2.4	0xeeaf	No error (0)	mail.ita.locamail.com.br		191.252.112.195	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:41.594449997 CEST	1.1.1.1	192.168.2.4	0x54a5	No error (0)	devlyn.com.mx		167.250.76.8	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:41.765314102 CEST	1.1.1.1	192.168.2.4	0xf6b8	No error (0)	conacero.com.ec		208.91.198.109	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:42.053670883 CEST	1.1.1.1	192.168.2.4	0x4cc2	No error (0)	smtp.cajac.it		62.149.128.202	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:42.053670883 CEST	1.1.1.1	192.168.2.4	0x4cc2	No error (0)	smtp.cajac.it		62.149.128.203	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:42.053670883 CEST	1.1.1.1	192.168.2.4	0x4cc2	No error (0)	smtp.cajac.it		62.149.128.200	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:42.053670883 CEST	1.1.1.1	192.168.2.4	0x4cc2	No error (0)	smtp.cajac.it		62.149.128.201	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:42.614331007 CEST	1.1.1.1	192.168.2.4	0xa9c7	No error (0)	smtp.iprimus.com.au	smtp-ip.gtm.oss-core.net		CNAME (Canonical name)	IN (0x0001)	false
Aug 1, 2024 06:10:42.614331007 CEST	1.1.1.1	192.168.2.4	0xa9c7	No error (0)	smtp-ip.gtm.oss-core.net		203.134.153.82	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:42.695235014 CEST	1.1.1.1	192.168.2.4	0xc73e	No error (0)	dhd.mx		162.241.140.207	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:43.182837009 CEST	1.1.1.1	192.168.2.4	0xb6f8	No error (0)	innowa-development.pl		94.152.11.62	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:43.207578897 CEST	1.1.1.1	192.168.2.4	0x3c37	No error (0)	mail.jena-nabytekk.cz		35.214.213.135	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:43.239257097 CEST	1.1.1.1	192.168.2.4	0x45e9	No error (0)	mail.wedo.dz		197.140.11.3	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:43.416603088 CEST	1.1.1.1	192.168.2.4	0x81d1	No error (0)	mail.usawastemanagement.com	mail.office365.com		CNAME (Canonical name)	IN (0x0001)	false
Aug 1, 2024 06:10:43.416603088 CEST	1.1.1.1	192.168.2.4	0x81d1	No error (0)	mail.office365.com	outlook.office365.com		CNAME (Canonical name)	IN (0x0001)	false
Aug 1, 2024 06:10:43.416603088 CEST	1.1.1.1	192.168.2.4	0x81d1	No error (0)	outlook.office365.com	ooc-g2.tm-4.office.com		CNAME (Canonical name)	IN (0x0001)	false
Aug 1, 2024 06:10:43.416603088 CEST	1.1.1.1	192.168.2.4	0x81d1	No error (0)	ooc-g2.tm-4.office.com	outlook.ms-acdc.office.com		CNAME (Canonical name)	IN (0x0001)	false
Aug 1, 2024 06:10:43.416603088 CEST	1.1.1.1	192.168.2.4	0x81d1	No error (0)	outlook.ms-acdc.office.com	FRA-efz.ms-acdc.office.com		CNAME (Canonical name)	IN (0x0001)	false
Aug 1, 2024 06:10:43.416603088 CEST	1.1.1.1	192.168.2.4	0x81d1	No error (0)	FRA-efz.ms-acdc.office.com		40.99.157.2	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:43.416603088 CEST	1.1.1.1	192.168.2.4	0x81d1	No error (0)	FRA-efz.ms-acdc.office.com		52.98.178.226	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:43.416603088 CEST	1.1.1.1	192.168.2.4	0x81d1	No error (0)	FRA-efz.ms-acdc.office.com		52.98.179.114	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:43.724719048 CEST	1.1.1.1	192.168.2.4	0x72f5	No error (0)	titterfamily.net		198.54.126.67	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:43.778522968 CEST	1.1.1.1	192.168.2.4	0x7129	No error (0)	mail.einsauto.co.kr	m130.mailplug.com		CNAME (Canonical name)	IN (0x0001)	false
Aug 1, 2024 06:10:43.778522968 CEST	1.1.1.1	192.168.2.4	0x7129	No error (0)	m130.mailplug.com		121.156.118.130	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:43.778553009 CEST	1.1.1.1	192.168.2.4	0x7129	No error (0)	mail.einsauto.co.kr	m130.mailplug.com		CNAME (Canonical name)	IN (0x0001)	false
Aug 1, 2024 06:10:43.778553009 CEST	1.1.1.1	192.168.2.4	0x7129	No error (0)	m130.mailplug.com		121.156.118.130	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:43.841563940 CEST	1.1.1.1	192.168.2.4	0x588e	No error (0)	ecohouse.ge		91.239.207.189	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:44.173185110 CEST	1.1.1.1	192.168.2.4	0xe5a	No error (0)	iis-berlin.de		95.216.78.220	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:44.303039074 CEST	1.1.1.1	192.168.2.4	0xab94	No error (0)	smtp.sbmkwitnaca.waw.pl	ssl0.ovh.net		CNAME (Canonical name)	IN (0x0001)	false
Aug 1, 2024 06:10:44.303039074 CEST	1.1.1.1	192.168.2.4	0xab94	No error (0)	ssl0.ovh.net		193.70.18.144	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:44.576205015 CEST	1.1.1.1	192.168.2.4	0x6cb4	No error (0)	rinzainstruments.com		109.70.148.66	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:44.841394901 CEST	1.1.1.1	192.168.2.4	0xa217	No error (0)	mail.connectiongroup.ae		162.241.216.116	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:44.967149019 CEST	1.1.1.1	192.168.2.4	0x3792	No error (0)	out.sjuaq.com		65.109.49.216	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:45.026067019 CEST	1.1.1.1	192.168.2.4	0xf141	Name error (3)	smtp.hottlookin.com	none	none	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:45.115340948 CEST	1.1.1.1	192.168.2.4	0x7b99	No error (0)	smtp.uvic.ca		142.104.197.65	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:45.305206060 CEST	1.1.1.1	192.168.2.4	0xa2a2	No error (0)	smtp.connecttime.net		64.29.145.194	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:45.418133020 CEST	1.1.1.1	192.168.2.4	0xb0e1	Name error (3)	out.micron.com	none	none	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:45.419223070 CEST	1.1.1.1	192.168.2.4	0x3911	Name error (3)	out.advmktg.net	none	none	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:45.469985962 CEST	1.1.1.1	192.168.2.4	0x2a9b	No error (0)	smtp.mediacat.ne.jp	cnci-mediacat-mbox-v4.xspmail.jp		CNAME (Canonical name)	IN (0x0001)	false
Aug 1, 2024 06:10:45.469985962 CEST	1.1.1.1	192.168.2.4	0x2a9b	No error (0)	cnci-mediacat-mbox-v4.xspmail.jp		220.156.64.62	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:45.490278006 CEST	1.1.1.1	192.168.2.4	0x5ab5	No error (0)	smtp.hawaiiantel.net	smtp.hawaiiantel.net.cust.b.hostedemail.com		CNAME (Canonical name)	IN (0x0001)	false
Aug 1, 2024 06:10:45.490278006 CEST	1.1.1.1	192.168.2.4	0x5ab5	No error (0)	smtp.hawaiiantel.net.cust.b.hostedemail.com		64.98.38.132	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:45.774061918 CEST	1.1.1.1	192.168.2.4	0xa4e6	No error (0)	mx01.hornetsecurity.com		94.100.132.8	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:45.776340961 CEST	1.1.1.1	192.168.2.4	0xde12	Name error (3)	out.nrrafwps.com	none	none	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:45.822321892 CEST	1.1.1.1	192.168.2.4	0x58ed	Name error (3)	secure.ossconsulting.co.in	none	none	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:45.863455057 CEST	1.1.1.1	192.168.2.4	0xaac8	No error (0)	mail.iscope.media	iscope.media		CNAME (Canonical name)	IN (0x0001)	false
Aug 1, 2024 06:10:45.863455057 CEST	1.1.1.1	192.168.2.4	0xaac8	No error (0)	iscope.media		3.33.130.190	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:45.863455057 CEST	1.1.1.1	192.168.2.4	0xaac8	No error (0)	iscope.media		15.197.148.33	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:45.955472946 CEST	1.1.1.1	192.168.2.4	0x9170	Name error (3)	securesmtp.comune.at	none	none	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:46.001657009 CEST	1.1.1.1	192.168.2.4	0x865d	No error (0)	unikamsolutions.com		192.185.113.15	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:46.129530907 CEST	1.1.1.1	192.168.2.4	0xa2dc	Name error (3)	mail.syimpatico.ca	none	none	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:46.166588068 CEST	1.1.1.1	192.168.2.4	0xd0c0	No error (0)	mail.europe.com		204.74.99.100	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:46.239013910 CEST	1.1.1.1	192.168.2.4	0xb429	No error (0)	smtp.mediacombb.net	mcc.smtp.a.cloudfilter.net		CNAME (Canonical name)	IN (0x0001)	false
Aug 1, 2024 06:10:46.239013910 CEST	1.1.1.1	192.168.2.4	0xb429	No error (0)	mcc.smtp.a.cloudfilter.net		18.236.21.232	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:46.239013910 CEST	1.1.1.1	192.168.2.4	0xb429	No error (0)	mcc.smtp.a.cloudfilter.net		34.213.176.2	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:46.239013910 CEST	1.1.1.1	192.168.2.4	0xb429	No error (0)	mcc.smtp.a.cloudfilter.net		35.172.131.32	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:46.239013910 CEST	1.1.1.1	192.168.2.4	0xb429	No error (0)	mcc.smtp.a.cloudfilter.net		35.175.55.215	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:46.259901047 CEST	1.1.1.1	192.168.2.4	0xe706	No error (0)	mail.terre.it		35.214.162.255	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:46.283315897 CEST	1.1.1.1	192.168.2.4	0xc7b3	No error (0)	post.pl		212.85.96.51	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:46.393831015 CEST	1.1.1.1	192.168.2.4	0xb104	No error (0)	securesmtp.viettel.com.vn		125.235.4.59	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:46.411741972 CEST	1.1.1.1	192.168.2.4	0x7c6c	No error (0)	mail.moimstone.com		122.199.180.4	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:46.528954029 CEST	1.1.1.1	192.168.2.4	0x4157	No error (0)	smtp.coweb.jp		104.219.210.157	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:46.593780994 CEST	1.1.1.1	192.168.2.4	0xca64	Name error (3)	secure.ya.hoo.com.vn	none	none	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:46.600378990 CEST	1.1.1.1	192.168.2.4	0x6e11	Name error (3)	ertu-org.p20.mxthunder.net	none	none	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:46.702306032 CEST	1.1.1.1	192.168.2.4	0x14cf	Name error (3)	csf-ne.jp	none	none	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:46.709296942 CEST	1.1.1.1	192.168.2.4	0x2e64	Name error (3)	secure.privatemoe.ae	none	none	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:46.732304096 CEST	1.1.1.1	192.168.2.4	0xef6c	Name error (3)	secure.euglia.net	none	none	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:46.751547098 CEST	1.1.1.1	192.168.2.4	0x9381	No error (0)	out.thirsty-duck.com		3.64.163.50	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:46.766839027 CEST	1.1.1.1	192.168.2.4	0xc9cb	Name error (3)	secure.sefaz.al.gov.br	none	none	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:46.780994892 CEST	1.1.1.1	192.168.2.4	0x12e0	Name error (3)	smtp.ldnl.com	none	none	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:47.003381968 CEST	1.1.1.1	192.168.2.4	0xa8b9	No error (0)	mail.versatiletechno.com		208.91.198.210	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:47.003411055 CEST	1.1.1.1	192.168.2.4	0xeb76	Name error (3)	secure.drolatic.com	none	none	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:47.033787966 CEST	1.1.1.1	192.168.2.4	0x3575	No error (0)	smtp.sasktel.net		69.49.109.87	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:47.038580894 CEST	1.1.1.1	192.168.2.4	0xd10b	No error (0)	smtp.cwgsy.net	secure.emailsrvr.com		CNAME (Canonical name)	IN (0x0001)	false
Aug 1, 2024 06:10:47.038580894 CEST	1.1.1.1	192.168.2.4	0xd10b	No error (0)	secure.emailsrvr.com		173.203.187.10	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:47.045193911 CEST	1.1.1.1	192.168.2.4	0xda72	No error (0)	mojah.net		109.70.148.46	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:47.069992065 CEST	1.1.1.1	192.168.2.4	0xdc2c	Name error (3)	smtp.ultrafrutasdemexico.com	none	none	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:47.243513107 CEST	1.1.1.1	192.168.2.4	0xd85d	No error (0)	smtp.frontiernet.net	relay.glb.frontiernet.net		CNAME (Canonical name)	IN (0x0001)	false
Aug 1, 2024 06:10:47.243513107 CEST	1.1.1.1	192.168.2.4	0xd85d	No error (0)	relay.glb.frontiernet.net		66.133.129.10	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:47.280695915 CEST	1.1.1.1	192.168.2.4	0xfcf9	No error (0)	dragg.net		172.67.140.203	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:47.280695915 CEST	1.1.1.1	192.168.2.4	0xfcf9	No error (0)	dragg.net		104.21.27.17	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:47.280832052 CEST	1.1.1.1	192.168.2.4	0x6da1	No error (0)	excite.com		146.75.122.114	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:47.295859098 CEST	1.1.1.1	192.168.2.4	0xa3	No error (0)	mail.unitn.it		193.205.206.20	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:47.300044060 CEST	1.1.1.1	192.168.2.4	0xeb31	Name error (3)	mail.bellapelli.com	none	none	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:47.305345058 CEST	1.1.1.1	192.168.2.4	0xdb	Name error (3)	out.tiscali.de	none	none	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:47.327259064 CEST	1.1.1.1	192.168.2.4	0x9c85	Name error (3)	securesmtp.lovcorlogisticsllc.com	none	none	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:47.360888004 CEST	1.1.1.1	192.168.2.4	0x265e	Name error (3)	out.musictechsites.co.uk	none	none	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:47.368447065 CEST	1.1.1.1	192.168.2.4	0xbbfe	Name error (3)	mail.ccipersonnel.co.uk	none	none	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:47.398735046 CEST	1.1.1.1	192.168.2.4	0xc45d	No error (0)	geotekautomation.com.tr		185.95.169.95	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:47.523156881 CEST	1.1.1.1	192.168.2.4	0xb14e	No error (0)	mail.fr		62.201.172.40	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:47.564505100 CEST	1.1.1.1	192.168.2.4	0x6c91	No error (0)	mail.optonline.net	mail.altice.prod.cloud.openwave.ai		CNAME (Canonical name)	IN (0x0001)	false
Aug 1, 2024 06:10:47.564505100 CEST	1.1.1.1	192.168.2.4	0x6c91	No error (0)	mail.altice.prod.cloud.openwave.ai		65.20.63.172	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:47.569437027 CEST	1.1.1.1	192.168.2.4	0xfbbf	No error (0)	out.hajes.org	hajes.org		CNAME (Canonical name)	IN (0x0001)	false
Aug 1, 2024 06:10:47.569437027 CEST	1.1.1.1	192.168.2.4	0xfbbf	No error (0)	hajes.org		116.203.54.160	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:47.571192980 CEST	1.1.1.1	192.168.2.4	0x7755	No error (0)	mail.vakarm.net		51.178.92.125	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:47.703402042 CEST	1.1.1.1	192.168.2.4	0x678b	Name error (3)	smtp.hotellamarck.com	none	none	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:47.721868038 CEST	1.1.1.1	192.168.2.4	0x1409	No error (0)	smtp.autograf.fr	ns0.ovh.net		CNAME (Canonical name)	IN (0x0001)	false
Aug 1, 2024 06:10:47.721868038 CEST	1.1.1.1	192.168.2.4	0x1409	No error (0)	ns0.ovh.net		193.70.18.144	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:47.729403019 CEST	1.1.1.1	192.168.2.4	0xaddc	No error (0)	smtp.policiadelaciudad.gob.ar	mr.fibercorp.com.ar		CNAME (Canonical name)	IN (0x0001)	false
Aug 1, 2024 06:10:47.729403019 CEST	1.1.1.1	192.168.2.4	0xaddc	No error (0)	mr.fibercorp.com.ar		201.212.2.146	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:47.751456022 CEST	1.1.1.1	192.168.2.4	0x25d7	No error (0)	smtp.skynet.be	relay.glb.proximus.be		CNAME (Canonical name)	IN (0x0001)	false
Aug 1, 2024 06:10:47.751456022 CEST	1.1.1.1	192.168.2.4	0x25d7	No error (0)	relay.glb.proximus.be		195.238.22.30	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:47.758980036 CEST	1.1.1.1	192.168.2.4	0x7ca6	No error (0)	mx1.forwardemail.net		138.197.213.185	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:47.760046959 CEST	1.1.1.1	192.168.2.4	0xf66f	Name error (3)	secure.542nm0ee35.com	none	none	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:47.957640886 CEST	1.1.1.1	192.168.2.4	0xa224	No error (0)	smtp.tds.net	mail.tds.syn-alias.com		CNAME (Canonical name)	IN (0x0001)	false
Aug 1, 2024 06:10:47.957640886 CEST	1.1.1.1	192.168.2.4	0xa224	No error (0)	mail.tds.syn-alias.com		129.159.94.43	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:48.008877039 CEST	1.1.1.1	192.168.2.4	0xe5	Name error (3)	smtp.plslaton.com	none	none	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:48.010768890 CEST	1.1.1.1	192.168.2.4	0x9fc8	No error (0)	mail.alchemisttechme.com		162.241.85.131	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:48.045278072 CEST	1.1.1.1	192.168.2.4	0x7f53	Name error (3)	secure.emc.com	none	none	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:48.047082901 CEST	1.1.1.1	192.168.2.4	0x91ff	Name error (3)	secure.midcountytravel.com	none	none	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:48.068217039 CEST	1.1.1.1	192.168.2.4	0x90ad	Name error (3)	out.wlanteknik.se	none	none	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:48.102277040 CEST	1.1.1.1	192.168.2.4	0xc7b6	Name error (3)	out.umc.ua	none	none	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:48.126946926 CEST	1.1.1.1	192.168.2.4	0xf83a	Name error (3)	securesmtp.copanama.com	none	none	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:48.136331081 CEST	1.1.1.1	192.168.2.4	0xbfb6	Server failure (2)	tianya.cn	none	none	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:48.179414034 CEST	1.1.1.1	192.168.2.4	0xd00f	No error (0)	burnley.gov.uk		35.214.2.150	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:48.235008955 CEST	1.1.1.1	192.168.2.4	0xded8	Name error (3)	out.notifyvisitors.com	none	none	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:48.342133045 CEST	1.1.1.1	192.168.2.4	0x8d4a	No error (0)	fallbackmx.spamexperts.eu		149.13.75.27	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:48.342133045 CEST	1.1.1.1	192.168.2.4	0x8d4a	No error (0)	fallbackmx.spamexperts.eu		130.117.54.106	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:48.342133045 CEST	1.1.1.1	192.168.2.4	0x8d4a	No error (0)	fallbackmx.spamexperts.eu		154.59.104.23	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:48.359770060 CEST	1.1.1.1	192.168.2.4	0x4f3c	Name error (3)	securesmtp.ual.es	none	none	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:48.359848022 CEST	1.1.1.1	192.168.2.4	0xb041	Server failure (2)	dormerhouse.fsnet.co.uk	none	none	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:48.464905024 CEST	1.1.1.1	192.168.2.4	0x49d0	No error (0)	mail.paicho.com		162.254.39.15	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:48.477380991 CEST	1.1.1.1	192.168.2.4	0x38f6	No error (0)	smtp.shaw.ca	shawmail.glb.shawcable.net		CNAME (Canonical name)	IN (0x0001)	false
Aug 1, 2024 06:10:48.477380991 CEST	1.1.1.1	192.168.2.4	0x38f6	No error (0)	shawmail.glb.shawcable.net		64.59.128.135	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:48.477380991 CEST	1.1.1.1	192.168.2.4	0x38f6	No error (0)	shawmail.glb.shawcable.net		64.59.136.142	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:48.649615049 CEST	1.1.1.1	192.168.2.4	0xcd3f	Name error (3)	securesmtp.jamesons-solicitors.co.uk	none	none	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:48.708867073 CEST	1.1.1.1	192.168.2.4	0x3763	No error (0)	mail.ngawikab.go.id		103.124.8.229	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:48.709806919 CEST	1.1.1.1	192.168.2.4	0xdda	No error (0)	out.longoweb.it		80.88.87.212	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:48.730154037 CEST	1.1.1.1	192.168.2.4	0xcbf3	No error (0)	mail.eastcom.ne.jp		27.121.3.2	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:48.731878996 CEST	1.1.1.1	192.168.2.4	0x1	No error (0)	smtp.k-net.fr		178.250.209.75	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:48.735441923 CEST	1.1.1.1	192.168.2.4	0x739d	Name error (3)	smtp.dutyandduty.com	none	none	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:48.742396116 CEST	1.1.1.1	192.168.2.4	0xea28	Name error (3)	maxial.org	none	none	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:48.805090904 CEST	1.1.1.1	192.168.2.4	0xb835	Name error (3)	out.hgh.kjjk	none	none	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:48.807189941 CEST	1.1.1.1	192.168.2.4	0x50bb	Name error (3)	smtp.stny.r.com	none	none	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:48.828006029 CEST	1.1.1.1	192.168.2.4	0x1c12	Name error (3)	secure.intrada.de	none	none	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:48.853607893 CEST	1.1.1.1	192.168.2.4	0x9be9	Name error (3)	out.polycabos.com.br	none	none	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:48.948092937 CEST	1.1.1.1	192.168.2.4	0x2bb3	No error (0)	aoo.co.jp		202.51.9.216	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:49.032111883 CEST	1.1.1.1	192.168.2.4	0xcd3f	No error (0)	semenov.de		217.160.223.92	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:49.033868074 CEST	1.1.1.1	192.168.2.4	0xe28e	No error (0)	hansensauto.dk		93.191.156.13	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:49.045535088 CEST	1.1.1.1	192.168.2.4	0xcd65	Name error (3)	smtp.thinkmp.mx	none	none	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:49.059304953 CEST	1.1.1.1	192.168.2.4	0x7fad	No error (0)	vonrocko.com		198.185.159.145	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:49.059304953 CEST	1.1.1.1	192.168.2.4	0x7fad	No error (0)	vonrocko.com		198.49.23.144	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:49.059304953 CEST	1.1.1.1	192.168.2.4	0x7fad	No error (0)	vonrocko.com		198.49.23.145	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:49.059304953 CEST	1.1.1.1	192.168.2.4	0x7fad	No error (0)	vonrocko.com		198.185.159.144	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:49.064003944 CEST	1.1.1.1	192.168.2.4	0x1a25	No error (0)	mail.laposte.fr		195.6.62.7	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:49.159821033 CEST	1.1.1.1	192.168.2.4	0xa65e	Server failure (2)	secure.easterbrookhome.fsnet.co.uk	none	none	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:49.168649912 CEST	1.1.1.1	192.168.2.4	0xc42b	Name error (3)	secure.tatacoffe.com	none	none	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:49.204245090 CEST	1.1.1.1	192.168.2.4	0xf89a	No error (0)	secure.sandlin.com		216.40.34.37	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:49.211663961 CEST	1.1.1.1	192.168.2.4	0xe1c4	No error (0)	superschwalm.com.br		177.11.54.198	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:49.223306894 CEST	1.1.1.1	192.168.2.4	0x8350	No error (0)	smtp.towebs.com	mail.towebs.com		CNAME (Canonical name)	IN (0x0001)	false
Aug 1, 2024 06:10:49.223306894 CEST	1.1.1.1	192.168.2.4	0x8350	No error (0)	mail.towebs.com		200.80.43.16	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:49.227556944 CEST	1.1.1.1	192.168.2.4	0xe88c	No error (0)	smtp.jcom.home.ne.jp	jcom-home.mx.zaq.ne.jp		CNAME (Canonical name)	IN (0x0001)	false
Aug 1, 2024 06:10:49.227556944 CEST	1.1.1.1	192.168.2.4	0xe88c	No error (0)	jcom-home.mx.zaq.ne.jp		175.135.254.129	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:49.227556944 CEST	1.1.1.1	192.168.2.4	0xe88c	No error (0)	jcom-home.mx.zaq.ne.jp		175.135.253.1	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:49.273534060 CEST	1.1.1.1	192.168.2.4	0xd9ac	No error (0)	smtp.kk.em-net.ne.jp	tsunagu-smtp-v4.xspmail.jp		CNAME (Canonical name)	IN (0x0001)	false
Aug 1, 2024 06:10:49.273534060 CEST	1.1.1.1	192.168.2.4	0xd9ac	No error (0)	tsunagu-smtp-v4.xspmail.jp		160.13.60.151	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:49.306720018 CEST	1.1.1.1	192.168.2.4	0x17d4	Name error (3)	out.radiotropical.nl	none	none	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:49.361677885 CEST	1.1.1.1	192.168.2.4	0xad4a	Name error (3)	out.didactika.it	none	none	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:49.402616024 CEST	1.1.1.1	192.168.2.4	0xaa09	No error (0)	rogers.com		40.85.218.2	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:49.403192043 CEST	1.1.1.1	192.168.2.4	0x1bde	Name error (3)	medcommunications.ca	none	none	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:49.448672056 CEST	1.1.1.1	192.168.2.4	0x3495	Name error (3)	securesmtp.shapesandforms.tv	none	none	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:49.466223001 CEST	1.1.1.1	192.168.2.4	0x8830	Name error (3)	mail.poolhousevets.co.uk	none	none	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:49.568588018 CEST	1.1.1.1	192.168.2.4	0x9eaf	No error (0)	secure.specus.lt		92.62.135.9	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:49.599062920 CEST	1.1.1.1	192.168.2.4	0xe765	Name error (3)	mailspirit.info	none	none	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:49.600250959 CEST	1.1.1.1	192.168.2.4	0xb99f	No error (0)	universaluniform.co.uk		185.146.23.48	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:49.621263027 CEST	1.1.1.1	192.168.2.4	0x4524	No error (0)	smtp.espeholt.dk		77.111.240.128	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:49.624850035 CEST	1.1.1.1	192.168.2.4	0xf53f	Name error (3)	securesmtp.grizzet.com	none	none	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:49.718585968 CEST	1.1.1.1	192.168.2.4	0x384c	Name error (3)	mail.univ-lille2.fr	none	none	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:49.737153053 CEST	1.1.1.1	192.168.2.4	0x6166	No error (0)	mail.upnet.gr	cormorant.upnet.gr		CNAME (Canonical name)	IN (0x0001)	false
Aug 1, 2024 06:10:49.737153053 CEST	1.1.1.1	192.168.2.4	0x6166	No error (0)	cormorant.upnet.gr		150.140.129.7	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:49.819390059 CEST	1.1.1.1	192.168.2.4	0x327c	No error (0)	htech.pk		213.199.49.149	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:49.820229053 CEST	1.1.1.1	192.168.2.4	0x7812	No error (0)	mx10.antispam.mailspamprotection.com		34.149.79.66	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:49.849293947 CEST	1.1.1.1	192.168.2.4	0x4128	Name error (3)	mail.json.cl	none	none	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:49.854588985 CEST	1.1.1.1	192.168.2.4	0xe7a0	Name error (3)	secure.siembrafeliz.com.ar	none	none	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:49.907540083 CEST	1.1.1.1	192.168.2.4	0x30e8	No error (0)	mx1.improvmx.com		35.181.18.45	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:49.907540083 CEST	1.1.1.1	192.168.2.4	0x30e8	No error (0)	mx1.improvmx.com		15.236.236.160	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:49.907540083 CEST	1.1.1.1	192.168.2.4	0x30e8	No error (0)	mx1.improvmx.com		13.37.195.136	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:49.925254107 CEST	1.1.1.1	192.168.2.4	0x62a7	No error (0)	janelagrande-pt.mail.protection.outlook.com		52.101.73.16	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:49.925254107 CEST	1.1.1.1	192.168.2.4	0x62a7	No error (0)	janelagrande-pt.mail.protection.outlook.com		52.101.73.1	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:49.925254107 CEST	1.1.1.1	192.168.2.4	0x62a7	No error (0)	janelagrande-pt.mail.protection.outlook.com		52.101.68.21	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:49.925254107 CEST	1.1.1.1	192.168.2.4	0x62a7	No error (0)	janelagrande-pt.mail.protection.outlook.com		52.101.73.8	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:50.020109892 CEST	1.1.1.1	192.168.2.4	0x2c4d	Name error (3)	securesmtp.robertofranco.ro	none	none	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:50.026490927 CEST	1.1.1.1	192.168.2.4	0x2580	No error (0)	mail.telltaletravel.co.uk	telltaletravel.co.uk		CNAME (Canonical name)	IN (0x0001)	false
Aug 1, 2024 06:10:50.026490927 CEST	1.1.1.1	192.168.2.4	0x2580	No error (0)	telltaletravel.co.uk		192.250.239.215	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:50.113851070 CEST	1.1.1.1	192.168.2.4	0x8a67	No error (0)	linkxp.com.br		108.167.188.164	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:50.221056938 CEST	1.1.1.1	192.168.2.4	0x3e2	No error (0)	out.online.ua		104.18.8.233	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:50.221056938 CEST	1.1.1.1	192.168.2.4	0x3e2	No error (0)	out.online.ua		104.18.9.233	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:50.250133991 CEST	1.1.1.1	192.168.2.4	0xf79d	Name error (3)	smtp.alec.com.au	none	none	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:50.353373051 CEST	1.1.1.1	192.168.2.4	0xf28b	No error (0)	walla.co.il		34.160.41.39	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:50.368596077 CEST	1.1.1.1	192.168.2.4	0xec95	No error (0)	smtp.trevine.co.za	mail.trevine.co.za		CNAME (Canonical name)	IN (0x0001)	false
Aug 1, 2024 06:10:50.368596077 CEST	1.1.1.1	192.168.2.4	0xec95	No error (0)	mail.trevine.co.za		41.185.110.20	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:50.393393040 CEST	1.1.1.1	192.168.2.4	0xbe51	Name error (3)	smtp.medievisti.it	none	none	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:50.452080011 CEST	1.1.1.1	192.168.2.4	0x5d43	Name error (3)	smtp.valentines.net	none	none	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:50.470069885 CEST	1.1.1.1	192.168.2.4	0xe37b	No error (0)	mail.aussiebroadband.com.au		121.200.0.25	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:50.477025032 CEST	1.1.1.1	192.168.2.4	0x519f	Name error (3)	out.web.jp	none	none	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:50.541673899 CEST	1.1.1.1	192.168.2.4	0x33b3	Name error (3)	smtp.55mail.jp	none	none	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:50.590604067 CEST	1.1.1.1	192.168.2.4	0xea39	No error (0)	data-affinity.com		45.82.191.137	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:50.638788939 CEST	1.1.1.1	192.168.2.4	0xb658	Name error (3)	securesmtp.onlinebizsoft.com	none	none	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:50.718333006 CEST	1.1.1.1	192.168.2.4	0xaf6c	Name error (3)	out.thomson.co.uk	none	none	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:50.914608955 CEST	1.1.1.1	192.168.2.4	0x93be	Name error (3)	out.engsystems.co.za	none	none	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:50.997453928 CEST	1.1.1.1	192.168.2.4	0x4b82	No error (0)	mail.immacolataitv.it		52.144.67.132	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:51.105304956 CEST	1.1.1.1	192.168.2.4	0x7f01	Name error (3)	smtp.pre-stige.com.mx	none	none	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:51.223664999 CEST	1.1.1.1	192.168.2.4	0xcd44	Name error (3)	out.skotnicki.it	none	none	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:51.256639957 CEST	1.1.1.1	192.168.2.4	0xa856	Name error (3)	smtp.qemcrdmg.com	none	none	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:51.416723967 CEST	1.1.1.1	192.168.2.4	0xdd48	No error (0)	smtp.netzero.com	smtp-com.netzero.net		CNAME (Canonical name)	IN (0x0001)	false
Aug 1, 2024 06:10:51.416723967 CEST	1.1.1.1	192.168.2.4	0xdd48	No error (0)	smtp-com.netzero.net		64.136.44.50	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:51.416723967 CEST	1.1.1.1	192.168.2.4	0xdd48	No error (0)	smtp-com.netzero.net		64.136.52.50	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:51.419087887 CEST	1.1.1.1	192.168.2.4	0xad8b	Name error (3)	bigpoint.acc	none	none	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:51.540359020 CEST	1.1.1.1	192.168.2.4	0x1103	No error (0)	smtp.creativechallenge.co.uk	smtp.protectedservice.net		CNAME (Canonical name)	IN (0x0001)	false
Aug 1, 2024 06:10:51.540359020 CEST	1.1.1.1	192.168.2.4	0x1103	No error (0)	smtp.protectedservice.net		3.8.72.97	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:51.540359020 CEST	1.1.1.1	192.168.2.4	0x1103	No error (0)	smtp.protectedservice.net		194.1.166.187	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:51.540359020 CEST	1.1.1.1	192.168.2.4	0x1103	No error (0)	smtp.protectedservice.net		18.135.21.201	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:51.629923105 CEST	1.1.1.1	192.168.2.4	0xacf7	Name error (3)	mail.dartheads.com	none	none	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:51.655919075 CEST	1.1.1.1	192.168.2.4	0xde32	Name error (3)	zet.zero.com	none	none	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:51.670938015 CEST	1.1.1.1	192.168.2.4	0x7f69	Name error (3)	out.demoney.org	none	none	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:51.685602903 CEST	1.1.1.1	192.168.2.4	0xde0	Name error (3)	out.springersjewelers.com	none	none	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:51.686181068 CEST	1.1.1.1	192.168.2.4	0x9c4a	No error (0)	etapanet.net		200.55.224.96	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:51.760773897 CEST	1.1.1.1	192.168.2.4	0x5572	Name error (3)	secure.jacziesmer.com	none	none	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:51.815980911 CEST	1.1.1.1	192.168.2.4	0x2ff1	Name error (3)	secure.wmconnect.com	none	none	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:51.822856903 CEST	1.1.1.1	192.168.2.4	0xac68	Name error (3)	mail.voliacable.com	none	none	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:51.834034920 CEST	1.1.1.1	192.168.2.4	0xf24d	No error (0)	mail.direcone.com		68.183.60.199	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:51.901690006 CEST	1.1.1.1	192.168.2.4	0xada9	No error (0)	smtp.bellaliant.net	smtp-aliant.bell.net		CNAME (Canonical name)	IN (0x0001)	false
Aug 1, 2024 06:10:51.901690006 CEST	1.1.1.1	192.168.2.4	0xada9	No error (0)	smtp-aliant.bell.net		209.71.208.9	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:51.987834930 CEST	1.1.1.1	192.168.2.4	0xb5f4	Name error (3)	smtp.studiozoppini.com	none	none	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:52.020842075 CEST	1.1.1.1	192.168.2.4	0x1df2	No error (0)	smtp.maskatel.net		67.223.158.212	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:52.034293890 CEST	1.1.1.1	192.168.2.4	0x218e	Name error (3)	out.easttlink.ca	none	none	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:52.063169003 CEST	1.1.1.1	192.168.2.4	0xf280	No error (0)	starporcelainbd-com.mail.protection.outlook.com		52.101.132.28	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:52.063169003 CEST	1.1.1.1	192.168.2.4	0xf280	No error (0)	starporcelainbd-com.mail.protection.outlook.com		52.101.132.30	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:52.063169003 CEST	1.1.1.1	192.168.2.4	0xf280	No error (0)	starporcelainbd-com.mail.protection.outlook.com		52.101.137.2	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:52.063169003 CEST	1.1.1.1	192.168.2.4	0xf280	No error (0)	starporcelainbd-com.mail.protection.outlook.com		52.101.137.0	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:52.188205957 CEST	1.1.1.1	192.168.2.4	0x5ab7	Name error (3)	securesmtp.dunnva.com	none	none	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:52.270798922 CEST	1.1.1.1	192.168.2.4	0x4020	No error (0)	mail.simnet.is		194.105.232.75	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:52.270798922 CEST	1.1.1.1	192.168.2.4	0x4020	No error (0)	mail.simnet.is		194.105.232.70	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:52.270798922 CEST	1.1.1.1	192.168.2.4	0x4020	No error (0)	mail.simnet.is		194.105.232.72	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:52.273994923 CEST	1.1.1.1	192.168.2.4	0xf9a	No error (0)	in.mx.ifl.net		217.181.2.52	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:52.273994923 CEST	1.1.1.1	192.168.2.4	0xf9a	No error (0)	in.mx.ifl.net		217.181.2.51	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:52.285769939 CEST	1.1.1.1	192.168.2.4	0xb987	No error (0)	smtp.sediex.com.ar		190.105.202.10	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:52.490587950 CEST	1.1.1.1	192.168.2.4	0x9b2f	Name error (3)	secure.werbeform-display.de	none	none	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:52.557813883 CEST	1.1.1.1	192.168.2.4	0x2487	No error (0)	praco.in		115.124.126.155	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:52.602363110 CEST	1.1.1.1	192.168.2.4	0x72e1	No error (0)	smtp.jobs.fr	ns0.ovh.net		CNAME (Canonical name)	IN (0x0001)	false
Aug 1, 2024 06:10:52.602363110 CEST	1.1.1.1	192.168.2.4	0x72e1	No error (0)	ns0.ovh.net		193.70.18.144	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:52.611618042 CEST	1.1.1.1	192.168.2.4	0xab72	No error (0)	arnet.com.ar		190.225.183.42	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:52.649904013 CEST	1.1.1.1	192.168.2.4	0xb93d	No error (0)	smtp.hotkey.net.au	smtp-hk.gtm.oss-core.net		CNAME (Canonical name)	IN (0x0001)	false
Aug 1, 2024 06:10:52.649904013 CEST	1.1.1.1	192.168.2.4	0xb93d	No error (0)	smtp-hk.gtm.oss-core.net		203.134.71.84	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:52.652527094 CEST	1.1.1.1	192.168.2.4	0xf4fa	No error (0)	staffershr.com		162.251.85.203	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:52.694050074 CEST	1.1.1.1	192.168.2.4	0x79c6	No error (0)	mail.register.it		195.110.124.132	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:52.704154968 CEST	1.1.1.1	192.168.2.4	0x2e8c	No error (0)	smtp.gamil.com		192.252.154.117	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:52.733834982 CEST	1.1.1.1	192.168.2.4	0x858e	Name error (3)	smtp.aforna.com	none	none	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:52.790102005 CEST	1.1.1.1	192.168.2.4	0x2584	Name error (3)	securesmtp.felixlasitschka.de	none	none	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:52.901525974 CEST	1.1.1.1	192.168.2.4	0xf1a5	No error (0)	education.nsw.gov.au		54.252.16.137	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:52.901525974 CEST	1.1.1.1	192.168.2.4	0xf1a5	No error (0)	education.nsw.gov.au		54.252.3.133	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:52.933473110 CEST	1.1.1.1	192.168.2.4	0x3248	Name error (3)	out.cristex.co.uk	none	none	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:52.956733942 CEST	1.1.1.1	192.168.2.4	0xd9ca	Name error (3)	mail.sreindia.in	none	none	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:52.957478046 CEST	1.1.1.1	192.168.2.4	0xfa8b	No error (0)	out.df.estudante.senai.com		45.56.79.23	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:52.957478046 CEST	1.1.1.1	192.168.2.4	0xfa8b	No error (0)	out.df.estudante.senai.com		198.58.118.167	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:52.957478046 CEST	1.1.1.1	192.168.2.4	0xfa8b	No error (0)	out.df.estudante.senai.com		45.33.23.183	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:52.957478046 CEST	1.1.1.1	192.168.2.4	0xfa8b	No error (0)	out.df.estudante.senai.com		96.126.123.244	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:52.957478046 CEST	1.1.1.1	192.168.2.4	0xfa8b	No error (0)	out.df.estudante.senai.com		45.79.19.196	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:52.957478046 CEST	1.1.1.1	192.168.2.4	0xfa8b	No error (0)	out.df.estudante.senai.com		45.33.2.79	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:52.957478046 CEST	1.1.1.1	192.168.2.4	0xfa8b	No error (0)	out.df.estudante.senai.com		173.255.194.134	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:52.957478046 CEST	1.1.1.1	192.168.2.4	0xfa8b	No error (0)	out.df.estudante.senai.com		72.14.185.43	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:52.957478046 CEST	1.1.1.1	192.168.2.4	0xfa8b	No error (0)	out.df.estudante.senai.com		45.33.18.44	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:52.957478046 CEST	1.1.1.1	192.168.2.4	0xfa8b	No error (0)	out.df.estudante.senai.com		45.33.30.197	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:52.957478046 CEST	1.1.1.1	192.168.2.4	0xfa8b	No error (0)	out.df.estudante.senai.com		72.14.178.174	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:52.957478046 CEST	1.1.1.1	192.168.2.4	0xfa8b	No error (0)	out.df.estudante.senai.com		45.33.20.235	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:53.003289938 CEST	1.1.1.1	192.168.2.4	0x304e	Name error (3)	securesmtp.rnhnyl.com	none	none	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:53.019028902 CEST	1.1.1.1	192.168.2.4	0xb52b	No error (0)	aon.at		193.81.82.81	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:53.084731102 CEST	1.1.1.1	192.168.2.4	0xa57f	No error (0)	clesa.it		81.31.145.134	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:53.099920988 CEST	1.1.1.1	192.168.2.4	0xad22	No error (0)	sman7ptk.sch.id		103.133.56.140	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:53.101773024 CEST	1.1.1.1	192.168.2.4	0x69af	No error (0)	smtp.foxvalley.net		64.135.192.34	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:53.131293058 CEST	1.1.1.1	192.168.2.4	0x222c	No error (0)	britolia.com		89.252.188.86	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:53.165308952 CEST	1.1.1.1	192.168.2.4	0x4b69	No error (0)	viedam-com.mail.protection.outlook.com		52.101.132.30	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:53.165308952 CEST	1.1.1.1	192.168.2.4	0x4b69	No error (0)	viedam-com.mail.protection.outlook.com		52.101.137.0	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:53.165308952 CEST	1.1.1.1	192.168.2.4	0x4b69	No error (0)	viedam-com.mail.protection.outlook.com		52.101.137.2	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:53.165308952 CEST	1.1.1.1	192.168.2.4	0x4b69	No error (0)	viedam-com.mail.protection.outlook.com		52.101.132.28	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:53.169574976 CEST	1.1.1.1	192.168.2.4	0x8150	Server failure (2)	securesmtp.hm44.fslife.co.uk	none	none	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:53.174065113 CEST	1.1.1.1	192.168.2.4	0xef2	Name error (3)	secure.chryssopoulos.de	none	none	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:53.232815981 CEST	1.1.1.1	192.168.2.4	0x8985	Name error (3)	securesmtp.doma9uog45.com	none	none	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:53.279463053 CEST	1.1.1.1	192.168.2.4	0x492e	No error (0)	out.sotaysuckhoe.wiki		45.117.83.212	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:53.281048059 CEST	1.1.1.1	192.168.2.4	0xa6c1	No error (0)	entertek.net		199.19.202.147	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:53.293673992 CEST	1.1.1.1	192.168.2.4	0x50a2	No error (0)	smtp.changeyourlifechallenge.org		154.85.184.165	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:53.327694893 CEST	1.1.1.1	192.168.2.4	0xc89d	Name error (3)	mail.mccconstrucoes.com.br	none	none	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:53.337548971 CEST	1.1.1.1	192.168.2.4	0x64c1	No error (0)	mail.hostlike.pro		46.98.3.196	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:53.366858959 CEST	1.1.1.1	192.168.2.4	0xd6bf	No error (0)	zynga.com		18.66.2.111	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:53.366858959 CEST	1.1.1.1	192.168.2.4	0xd6bf	No error (0)	zynga.com		18.66.2.91	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:53.366858959 CEST	1.1.1.1	192.168.2.4	0xd6bf	No error (0)	zynga.com		18.66.2.118	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:53.366858959 CEST	1.1.1.1	192.168.2.4	0xd6bf	No error (0)	zynga.com		18.66.2.68	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:53.475527048 CEST	1.1.1.1	192.168.2.4	0x4cf0	No error (0)	out.siouxplating.com		103.224.182.240	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:53.518059015 CEST	1.1.1.1	192.168.2.4	0xee63	No error (0)	yaho.com		13.248.158.7	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:53.518059015 CEST	1.1.1.1	192.168.2.4	0xee63	No error (0)	yaho.com		76.223.84.192	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:53.526185036 CEST	1.1.1.1	192.168.2.4	0xe210	Name error (3)	out.datingfrance.fr	none	none	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:53.572367907 CEST	1.1.1.1	192.168.2.4	0xa999	No error (0)	mail.korreoweb.com		52.58.173.206	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:53.574899912 CEST	1.1.1.1	192.168.2.4	0x9e3d	No error (0)	velsen5.nl		81.169.145.66	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:53.577685118 CEST	1.1.1.1	192.168.2.4	0xb53f	No error (0)	smtp.telfort.nl	telfortsmtp.kpnxchange.com		CNAME (Canonical name)	IN (0x0001)	false
Aug 1, 2024 06:10:53.577685118 CEST	1.1.1.1	192.168.2.4	0xb53f	No error (0)	telfortsmtp.kpnxchange.com		195.121.65.26	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:53.614866018 CEST	1.1.1.1	192.168.2.4	0xfd14	No error (0)	mx.giochi0.it		104.131.176.42	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:53.647949934 CEST	1.1.1.1	192.168.2.4	0xb3e2	No error (0)	smtp.satelitnatechnika.sk		92.240.253.56	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:53.649252892 CEST	1.1.1.1	192.168.2.4	0x8697	Name error (3)	mail.grupoambientalbrasil.com.br	none	none	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:53.707707882 CEST	1.1.1.1	192.168.2.4	0x1895	No error (0)	smtp.vodafone.de	smtp.vodafonemail.de		CNAME (Canonical name)	IN (0x0001)	false
Aug 1, 2024 06:10:53.707707882 CEST	1.1.1.1	192.168.2.4	0x1895	No error (0)	smtp.vodafonemail.de		2.207.150.234	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:53.713669062 CEST	1.1.1.1	192.168.2.4	0x87a5	Name error (3)	smtp.mybne.catholiceduau	none	none	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:53.718224049 CEST	1.1.1.1	192.168.2.4	0x5dde	Name error (3)	out.coccinet.com	none	none	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:53.796322107 CEST	1.1.1.1	192.168.2.4	0x5c8b	Name error (3)	out.gwentmusic.net	none	none	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:53.849050999 CEST	1.1.1.1	192.168.2.4	0x2623	Name error (3)	securesmtp.robert-lamont.co.uk	none	none	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:53.861972094 CEST	1.1.1.1	192.168.2.4	0xde37	Name error (3)	securesmtp.huascarancertificaciones.com	none	none	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:53.892242908 CEST	1.1.1.1	192.168.2.4	0xb635	Name error (3)	mail.njoyinvesting.com.mx	none	none	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:53.936431885 CEST	1.1.1.1	192.168.2.4	0xe2fe	No error (0)	alkharafa.com		103.28.23.103	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:53.944386959 CEST	1.1.1.1	192.168.2.4	0xaab0	No error (0)	caricature-co-uk.mail.protection.outlook.com		52.101.99.2	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:53.944386959 CEST	1.1.1.1	192.168.2.4	0xaab0	No error (0)	caricature-co-uk.mail.protection.outlook.com		52.101.89.0	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:53.944386959 CEST	1.1.1.1	192.168.2.4	0xaab0	No error (0)	caricature-co-uk.mail.protection.outlook.com		52.101.89.1	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:53.944386959 CEST	1.1.1.1	192.168.2.4	0xaab0	No error (0)	caricature-co-uk.mail.protection.outlook.com		52.101.89.2	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:53.958559990 CEST	1.1.1.1	192.168.2.4	0xf2c9	No error (0)	secure.drramyalanany.com		188.114.97.3	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:53.958559990 CEST	1.1.1.1	192.168.2.4	0xf2c9	No error (0)	secure.drramyalanany.com		188.114.96.3	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:54.098025084 CEST	1.1.1.1	192.168.2.4	0x2eb5	No error (0)	mail.cesfamdalcahue.cl		186.64.116.110	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:54.116220951 CEST	1.1.1.1	192.168.2.4	0x3963	Server failure (2)	supertecreset.com	none	none	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:54.124206066 CEST	1.1.1.1	192.168.2.4	0xcf64	Name error (3)	out.toon.beach.com	none	none	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:54.289028883 CEST	1.1.1.1	192.168.2.4	0x345	No error (0)	mail.rpcc.com.br	smtp-vip.uni5.net		CNAME (Canonical name)	IN (0x0001)	false
Aug 1, 2024 06:10:54.289028883 CEST	1.1.1.1	192.168.2.4	0x345	No error (0)	smtp-vip.uni5.net		191.6.220.99	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:54.289028883 CEST	1.1.1.1	192.168.2.4	0x345	No error (0)	smtp-vip.uni5.net		191.6.220.100	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:54.319669008 CEST	1.1.1.1	192.168.2.4	0xb53a	No error (0)	heatons.co.uk		34.246.118.232	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:54.388092995 CEST	1.1.1.1	192.168.2.4	0xa36	Name error (3)	mail.pharmacysystems.com	none	none	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:54.462434053 CEST	1.1.1.1	192.168.2.4	0x46bd	No error (0)	smtp.ncs-co.jp		202.172.28.195	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:54.514269114 CEST	1.1.1.1	192.168.2.4	0x6f3c	No error (0)	smtp.nb.sympatico.ca	smtp.bellaliant.net		CNAME (Canonical name)	IN (0x0001)	false
Aug 1, 2024 06:10:54.514269114 CEST	1.1.1.1	192.168.2.4	0x6f3c	No error (0)	smtp.bellaliant.net	smtp-aliant.bell.net		CNAME (Canonical name)	IN (0x0001)	false
Aug 1, 2024 06:10:54.514269114 CEST	1.1.1.1	192.168.2.4	0x6f3c	No error (0)	smtp-aliant.bell.net		209.71.208.9	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:54.519345999 CEST	1.1.1.1	192.168.2.4	0xb93e	Name error (3)	mail.56mb.co.uk	none	none	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:54.522573948 CEST	1.1.1.1	192.168.2.4	0xe092	No error (0)	mail.czarymary.pl		51.83.156.77	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:54.615720034 CEST	1.1.1.1	192.168.2.4	0xd81d	Name error (3)	out.pop.com.br	none	none	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:54.617723942 CEST	1.1.1.1	192.168.2.4	0xdf65	No error (0)	mx01.schlund.de		217.72.192.67	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:54.675401926 CEST	1.1.1.1	192.168.2.4	0x2ef5	No error (0)	mail.gallant.ca		149.248.61.31	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:54.689346075 CEST	1.1.1.1	192.168.2.4	0xac66	No error (0)	mx19b.antispameurope.com		83.246.65.85	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:54.791219950 CEST	1.1.1.1	192.168.2.4	0x78c1	No error (0)	mx.progiftstore.org		167.172.23.243	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:54.882719994 CEST	1.1.1.1	192.168.2.4	0x66b7	Server failure (2)	amazing-herb.com	none	none	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:54.882730007 CEST	1.1.1.1	192.168.2.4	0x66b7	Server failure (2)	amazing-herb.com	none	none	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:54.920602083 CEST	1.1.1.1	192.168.2.4	0xfdf2	No error (0)	mail.dragonfoods.com.mx	dragonfoods.com.mx		CNAME (Canonical name)	IN (0x0001)	false
Aug 1, 2024 06:10:54.920602083 CEST	1.1.1.1	192.168.2.4	0xfdf2	No error (0)	dragonfoods.com.mx		198.37.123.32	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:54.951560974 CEST	1.1.1.1	192.168.2.4	0x5c44	No error (0)	secure.yhoo.com	rc.yahoo.com		CNAME (Canonical name)	IN (0x0001)	false
Aug 1, 2024 06:10:54.951560974 CEST	1.1.1.1	192.168.2.4	0x5c44	No error (0)	rc.yahoo.com	global-accelerator.dns-rc.aws.oath.cloud		CNAME (Canonical name)	IN (0x0001)	false
Aug 1, 2024 06:10:54.951560974 CEST	1.1.1.1	192.168.2.4	0x5c44	No error (0)	global-accelerator.dns-rc.aws.oath.cloud	a7de0457831fd11f7.awsglobalaccelerator.com		CNAME (Canonical name)	IN (0x0001)	false
Aug 1, 2024 06:10:54.951560974 CEST	1.1.1.1	192.168.2.4	0x5c44	No error (0)	a7de0457831fd11f7.awsglobalaccelerator.com		76.223.84.192	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:54.951560974 CEST	1.1.1.1	192.168.2.4	0x5c44	No error (0)	a7de0457831fd11f7.awsglobalaccelerator.com		13.248.158.7	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:55.048073053 CEST	1.1.1.1	192.168.2.4	0xac7d	No error (0)	smtp.markcomm.com.mx		162.215.121.91	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:55.056828976 CEST	1.1.1.1	192.168.2.4	0xe69e	Name error (3)	secure.vakiparta.net	none	none	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:55.065896988 CEST	1.1.1.1	192.168.2.4	0x2fe2	No error (0)	smtp.kalbarprov.go.id	mail.kalbarprov.go.id		CNAME (Canonical name)	IN (0x0001)	false
Aug 1, 2024 06:10:55.065896988 CEST	1.1.1.1	192.168.2.4	0x2fe2	No error (0)	mail.kalbarprov.go.id		222.124.219.187	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:55.100970984 CEST	1.1.1.1	192.168.2.4	0xe85	No error (0)	horsetalksa.co.za		41.185.8.159	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:55.103837013 CEST	1.1.1.1	192.168.2.4	0x14dd	Name error (3)	mail.plataforma20.com	none	none	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:55.217741013 CEST	1.1.1.1	192.168.2.4	0xc302	No error (0)	mx10.se.isp-net.nl		149.13.75.27	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:55.217741013 CEST	1.1.1.1	192.168.2.4	0xc302	No error (0)	mx10.se.isp-net.nl		130.117.54.106	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:55.217741013 CEST	1.1.1.1	192.168.2.4	0xc302	No error (0)	mx10.se.isp-net.nl		154.59.104.23	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:55.217741013 CEST	1.1.1.1	192.168.2.4	0xc302	No error (0)	mx10.se.isp-net.nl		38.111.198.185	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:55.217812061 CEST	1.1.1.1	192.168.2.4	0xc302	No error (0)	mx10.se.isp-net.nl		149.13.75.27	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:55.217812061 CEST	1.1.1.1	192.168.2.4	0xc302	No error (0)	mx10.se.isp-net.nl		130.117.54.106	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:55.217812061 CEST	1.1.1.1	192.168.2.4	0xc302	No error (0)	mx10.se.isp-net.nl		154.59.104.23	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:55.217812061 CEST	1.1.1.1	192.168.2.4	0xc302	No error (0)	mx10.se.isp-net.nl		38.111.198.185	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:55.217879057 CEST	1.1.1.1	192.168.2.4	0xc302	No error (0)	mx10.se.isp-net.nl		149.13.75.27	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:55.217879057 CEST	1.1.1.1	192.168.2.4	0xc302	No error (0)	mx10.se.isp-net.nl		130.117.54.106	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:55.217879057 CEST	1.1.1.1	192.168.2.4	0xc302	No error (0)	mx10.se.isp-net.nl		154.59.104.23	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:55.217879057 CEST	1.1.1.1	192.168.2.4	0xc302	No error (0)	mx10.se.isp-net.nl		38.111.198.185	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:55.242023945 CEST	1.1.1.1	192.168.2.4	0x2aa4	No error (0)	smtp.escolamondrian.com.br	smtp-vip.uni5.net		CNAME (Canonical name)	IN (0x0001)	false
Aug 1, 2024 06:10:55.242023945 CEST	1.1.1.1	192.168.2.4	0x2aa4	No error (0)	smtp-vip.uni5.net		191.6.220.99	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:55.242023945 CEST	1.1.1.1	192.168.2.4	0x2aa4	No error (0)	smtp-vip.uni5.net		191.6.220.100	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:55.248856068 CEST	1.1.1.1	192.168.2.4	0xb65a	No error (0)	smtp.farmaciaditullio.it	smtp-vip.mgm.tiscali.com		CNAME (Canonical name)	IN (0x0001)	false
Aug 1, 2024 06:10:55.248856068 CEST	1.1.1.1	192.168.2.4	0xb65a	No error (0)	smtp-vip.mgm.tiscali.com		213.205.37.10	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:55.251264095 CEST	1.1.1.1	192.168.2.4	0x7691	No error (0)	wacky.vip.co.jp		218.219.70.221	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:55.305072069 CEST	1.1.1.1	192.168.2.4	0x9873	Name error (3)	securesmtp.rbrinformatica.com.br	none	none	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:55.305507898 CEST	1.1.1.1	192.168.2.4	0x9a3a	Server failure (2)	smtp.wtaengenhariaeletrica.com.br	none	none	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:55.305517912 CEST	1.1.1.1	192.168.2.4	0x9a3a	Server failure (2)	smtp.wtaengenhariaeletrica.com.br	none	none	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:55.305526972 CEST	1.1.1.1	192.168.2.4	0x9a3a	Server failure (2)	smtp.wtaengenhariaeletrica.com.br	none	none	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:55.305538893 CEST	1.1.1.1	192.168.2.4	0x9a3a	Server failure (2)	smtp.wtaengenhariaeletrica.com.br	none	none	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:55.433494091 CEST	1.1.1.1	192.168.2.4	0x37cc	No error (0)	smtp.bps.go.id		203.123.60.48	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:55.433494091 CEST	1.1.1.1	192.168.2.4	0x37cc	No error (0)	smtp.bps.go.id		203.123.60.49	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:55.433494091 CEST	1.1.1.1	192.168.2.4	0x37cc	No error (0)	smtp.bps.go.id		203.123.60.51	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:55.433494091 CEST	1.1.1.1	192.168.2.4	0x37cc	No error (0)	smtp.bps.go.id		203.123.60.53	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:55.560467005 CEST	1.1.1.1	192.168.2.4	0xadaf	No error (0)	smtp.mynet.net	wave02.mynet.net		CNAME (Canonical name)	IN (0x0001)	false
Aug 1, 2024 06:10:55.560467005 CEST	1.1.1.1	192.168.2.4	0xadaf	No error (0)	wave02.mynet.net		5.79.125.84	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:55.582858086 CEST	1.1.1.1	192.168.2.4	0x46c4	No error (0)	securesmtp.geromiller.de		138.201.146.235	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:55.618005991 CEST	1.1.1.1	192.168.2.4	0x7c69	Name error (3)	smtp.kwlugeppec.com	none	none	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:55.636814117 CEST	1.1.1.1	192.168.2.4	0x3da4	Name error (3)	smtp.opinedms.com	none	none	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:55.671953917 CEST	1.1.1.1	192.168.2.4	0x6ce9	Name error (3)	out.venturalink.net	none	none	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:55.688280106 CEST	1.1.1.1	192.168.2.4	0x5ef7	Name error (3)	out.ntlworld.co.uk	none	none	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:55.772008896 CEST	1.1.1.1	192.168.2.4	0x5b00	Name error (3)	secure.reflectionsinbinary.com	none	none	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:55.781794071 CEST	1.1.1.1	192.168.2.4	0x9c19	Name error (3)	smtp.eduardozuna.net	none	none	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:55.820094109 CEST	1.1.1.1	192.168.2.4	0x27d4	No error (0)	mail.whitewolf.de		185.53.177.54	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:55.967619896 CEST	1.1.1.1	192.168.2.4	0x1e6e	Name error (3)	secure.computertechnology.es	none	none	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:55.987289906 CEST	1.1.1.1	192.168.2.4	0x1707	No error (0)	smtp.htw-saarland.de	htw-mail.htw-saarland.de		CNAME (Canonical name)	IN (0x0001)	false
Aug 1, 2024 06:10:55.987289906 CEST	1.1.1.1	192.168.2.4	0x1707	No error (0)	htw-mail.htw-saarland.de		134.96.210.140	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:56.052655935 CEST	1.1.1.1	192.168.2.4	0xe100	Name error (3)	secure.rpp.de	none	none	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:56.154531956 CEST	1.1.1.1	192.168.2.4	0x8687	No error (0)	mail.dejazzd.com	mail.dejazzd.syn-alias.com		CNAME (Canonical name)	IN (0x0001)	false
Aug 1, 2024 06:10:56.154531956 CEST	1.1.1.1	192.168.2.4	0x8687	No error (0)	mail.dejazzd.syn-alias.com		129.213.213.65	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:56.189348936 CEST	1.1.1.1	192.168.2.4	0xec64	Name error (3)	smtp.anuvarthh.com	none	none	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:56.197242975 CEST	1.1.1.1	192.168.2.4	0x7811	Name error (3)	smtp.iteminfo.fr	none	none	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:56.219113111 CEST	1.1.1.1	192.168.2.4	0xa919	Name error (3)	out.francanet.com.br	none	none	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:56.220577002 CEST	1.1.1.1	192.168.2.4	0xf94b	No error (0)	monster.com		208.71.193.147	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:56.236257076 CEST	1.1.1.1	192.168.2.4	0x6de0	No error (0)	smtp.me.com	smtp.me.com.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Aug 1, 2024 06:10:56.314721107 CEST	1.1.1.1	192.168.2.4	0x715f	No error (0)	smtp.solucaoengma.com.br		177.12.171.254	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:56.555152893 CEST	1.1.1.1	192.168.2.4	0x51b3	No error (0)	mail.qreon.de		49.13.50.5	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:56.564034939 CEST	1.1.1.1	192.168.2.4	0x390f	Name error (3)	smtp.hotellamarck.com	none	none	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:56.582900047 CEST	1.1.1.1	192.168.2.4	0xec65	Name error (3)	out.dishmail.net	none	none	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:56.589873075 CEST	1.1.1.1	192.168.2.4	0xceca	No error (0)	frontdoor.pr.hu		87.242.0.7	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:56.638520002 CEST	1.1.1.1	192.168.2.4	0x48c2	Name error (3)	regalo.br	none	none	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:56.689579010 CEST	1.1.1.1	192.168.2.4	0x1321	No error (0)	smtp.aei.ca	mail-c-01.b2b2c.net		CNAME (Canonical name)	IN (0x0001)	false
Aug 1, 2024 06:10:56.689579010 CEST	1.1.1.1	192.168.2.4	0x1321	No error (0)	mail-c-01.b2b2c.net		66.158.129.203	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:56.692222118 CEST	1.1.1.1	192.168.2.4	0x8c6	No error (0)	smtp.milmotors.it	mail.milmotors.it		CNAME (Canonical name)	IN (0x0001)	false
Aug 1, 2024 06:10:56.692222118 CEST	1.1.1.1	192.168.2.4	0x8c6	No error (0)	mail.milmotors.it		62.149.157.160	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:57.160026073 CEST	1.1.1.1	192.168.2.4	0x8e35	No error (0)	headwhack.com		208.91.197.27	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:57.177000999 CEST	1.1.1.1	192.168.2.4	0x57e6	No error (0)	cobaltsafes.com		23.227.38.65	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:57.179378033 CEST	1.1.1.1	192.168.2.4	0xd41e	No error (0)	therfcgroup.com		35.167.224.72	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:57.183111906 CEST	1.1.1.1	192.168.2.4	0x8f6d	Name error (3)	out.cbe45.fr	none	none	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:57.190793037 CEST	1.1.1.1	192.168.2.4	0xb47	No error (0)	out.gs-heinrich.de	gs-heinrich.de		CNAME (Canonical name)	IN (0x0001)	false
Aug 1, 2024 06:10:57.190793037 CEST	1.1.1.1	192.168.2.4	0xb47	No error (0)	gs-heinrich.de		81.14.185.137	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:57.193583012 CEST	1.1.1.1	192.168.2.4	0x5680	No error (0)	levenmintsocialinvestments.com		76.223.105.230	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:57.193583012 CEST	1.1.1.1	192.168.2.4	0x5680	No error (0)	levenmintsocialinvestments.com		13.248.243.5	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:57.310338974 CEST	1.1.1.1	192.168.2.4	0xbf16	No error (0)	grifoolmos.pe		161.132.46.19	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:57.453115940 CEST	1.1.1.1	192.168.2.4	0xd15c	No error (0)	tmas.net		79.170.40.53	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:57.741616011 CEST	1.1.1.1	192.168.2.4	0xab97	Name error (3)	smtp.marioreis.ca	none	none	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:57.933720112 CEST	1.1.1.1	192.168.2.4	0xfdb5	No error (0)	smtp.totalise.co.uk		212.159.8.240	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:57.933720112 CEST	1.1.1.1	192.168.2.4	0xfdb5	No error (0)	smtp.totalise.co.uk		212.159.9.240	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:57.948105097 CEST	1.1.1.1	192.168.2.4	0xb7ff	Name error (3)	smtp.cc-inc.org	none	none	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:57.988045931 CEST	1.1.1.1	192.168.2.4	0xb107	No error (0)	mx01.kundenserver.de		217.72.192.67	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:57.993009090 CEST	1.1.1.1	192.168.2.4	0x1367	Name error (3)	out.alunos.estacio.br	none	none	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:57.994829893 CEST	1.1.1.1	192.168.2.4	0x9f75	Name error (3)	secure.tiptopclean.eu	none	none	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:58.031589985 CEST	1.1.1.1	192.168.2.4	0xd1ab	Name error (3)	secure.a2plus.pt	none	none	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:58.078176975 CEST	1.1.1.1	192.168.2.4	0xa7f3	No error (0)	mx2.pub.mailpod11-cph3.one.com		104.37.34.231	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:58.185863972 CEST	1.1.1.1	192.168.2.4	0xf9d0	No error (0)	icrar.org		99.86.4.88	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:58.185863972 CEST	1.1.1.1	192.168.2.4	0xf9d0	No error (0)	icrar.org		99.86.4.24	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:58.185863972 CEST	1.1.1.1	192.168.2.4	0xf9d0	No error (0)	icrar.org		99.86.4.41	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:58.185863972 CEST	1.1.1.1	192.168.2.4	0xf9d0	No error (0)	icrar.org		99.86.4.105	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:58.252257109 CEST	1.1.1.1	192.168.2.4	0x5710	No error (0)	smtp.acsalaska.net		66.226.70.80	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:58.261961937 CEST	1.1.1.1	192.168.2.4	0x6853	No error (0)	smtp.idtsearch.com	smtp.qiye.aliyun.com		CNAME (Canonical name)	IN (0x0001)	false
Aug 1, 2024 06:10:58.261961937 CEST	1.1.1.1	192.168.2.4	0x6853	No error (0)	smtp.qiye.aliyun.com		47.246.64.75	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:58.261961937 CEST	1.1.1.1	192.168.2.4	0x6853	No error (0)	smtp.qiye.aliyun.com		47.246.64.66	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:58.261961937 CEST	1.1.1.1	192.168.2.4	0x6853	No error (0)	smtp.qiye.aliyun.com		47.246.64.74	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:58.302985907 CEST	1.1.1.1	192.168.2.4	0x2a01	Name error (3)	smtp.executive-pet-services.com	none	none	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:58.320703030 CEST	1.1.1.1	192.168.2.4	0x3075	Name error (3)	abogadosanfernando.cl	none	none	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:58.369204044 CEST	1.1.1.1	192.168.2.4	0x9b74	Name error (3)	iousm.cn	none	none	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:58.384381056 CEST	1.1.1.1	192.168.2.4	0x9362	Name error (3)	mail.capitallendingsolutions.com	none	none	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:58.420609951 CEST	1.1.1.1	192.168.2.4	0x5b1	No error (0)	smtp.univ-ubs.fr	storck.univ-ubs.fr		CNAME (Canonical name)	IN (0x0001)	false
Aug 1, 2024 06:10:58.420609951 CEST	1.1.1.1	192.168.2.4	0x5b1	No error (0)	storck.univ-ubs.fr		193.52.32.76	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:58.488214016 CEST	1.1.1.1	192.168.2.4	0xdff9	Name error (3)	mail.beynat.com.fr	none	none	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:58.721677065 CEST	1.1.1.1	192.168.2.4	0x9fa4	Name error (3)	smtp.raspinispa.it	none	none	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:58.721764088 CEST	1.1.1.1	192.168.2.4	0x1e0b	No error (0)	starservice.com.ua		91.203.144.64	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:58.724411964 CEST	1.1.1.1	192.168.2.4	0x1f52	No error (0)	clearwire.net		67.222.21.222	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:58.725430012 CEST	1.1.1.1	192.168.2.4	0x1d53	No error (0)	wallstreetmkt.com		64.31.7.206	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:58.736462116 CEST	1.1.1.1	192.168.2.4	0x806d	No error (0)	mx2-eu1.ppe-hosted.com		185.132.181.17	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:58.736462116 CEST	1.1.1.1	192.168.2.4	0x806d	No error (0)	mx2-eu1.ppe-hosted.com		91.209.104.156	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:58.736646891 CEST	1.1.1.1	192.168.2.4	0x69a3	No error (0)	mx3.pub.mailpod2-cph3.one.com		185.164.14.8	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:58.784034967 CEST	1.1.1.1	192.168.2.4	0x886f	Name error (3)	out.oneplusmexico.com	none	none	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:58.797650099 CEST	1.1.1.1	192.168.2.4	0x6e32	No error (0)	stirlinghotel-com-au.mail.protection.outlook.com		52.101.151.5	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:58.797650099 CEST	1.1.1.1	192.168.2.4	0x6e32	No error (0)	stirlinghotel-com-au.mail.protection.outlook.com		52.101.149.1	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:58.797650099 CEST	1.1.1.1	192.168.2.4	0x6e32	No error (0)	stirlinghotel-com-au.mail.protection.outlook.com		52.101.149.9	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:58.797650099 CEST	1.1.1.1	192.168.2.4	0x6e32	No error (0)	stirlinghotel-com-au.mail.protection.outlook.com		52.101.149.2	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:58.807250977 CEST	1.1.1.1	192.168.2.4	0xa6ae	No error (0)	partshanger.com		81.17.29.148	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:58.853961945 CEST	1.1.1.1	192.168.2.4	0xbe90	Name error (3)	tommyribbers.nl	none	none	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:58.935396910 CEST	1.1.1.1	192.168.2.4	0xa869	No error (0)	smtp.ievaran.ir		45.149.79.189	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:58.938577890 CEST	1.1.1.1	192.168.2.4	0xc2ba	Name error (3)	out.usagencies.com	none	none	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:58.942519903 CEST	1.1.1.1	192.168.2.4	0xb601	No error (0)	in.com		124.153.64.203	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:58.956058979 CEST	1.1.1.1	192.168.2.4	0xd222	Name error (3)	out.suscom.net	none	none	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:58.980782032 CEST	1.1.1.1	192.168.2.4	0x7040	No error (0)	mail.southern-redfern.co.uk		87.127.179.51	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:59.010116100 CEST	1.1.1.1	192.168.2.4	0xf6b1	No error (0)	kn11536-mail01.aixit.com		83.141.2.162	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:59.090490103 CEST	1.1.1.1	192.168.2.4	0xcb2	Name error (3)	securesmtp.gaom.com	none	none	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:59.202637911 CEST	1.1.1.1	192.168.2.4	0xd1fb	No error (0)	mail.duckpro.xyz		203.170.129.8	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:59.275106907 CEST	1.1.1.1	192.168.2.4	0x44ab	No error (0)	yapaytech.com		188.114.97.3	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:59.275106907 CEST	1.1.1.1	192.168.2.4	0x44ab	No error (0)	yapaytech.com		188.114.96.3	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:59.316293001 CEST	1.1.1.1	192.168.2.4	0xbc38	Server failure (2)	tianya.cn	none	none	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:59.334985971 CEST	1.1.1.1	192.168.2.4	0xf0f5	Name error (3)	securesmtp.essex.gov.uk	none	none	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:59.383141041 CEST	1.1.1.1	192.168.2.4	0x29f3	No error (0)	mail.elarabyofficeeg.com		106.0.62.81	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:59.455348015 CEST	1.1.1.1	192.168.2.4	0xef80	Name error (3)	smtp.flipssl.com	none	none	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:59.511466026 CEST	1.1.1.1	192.168.2.4	0x2739	No error (0)	mail.tps501.org		68.111.104.211	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:59.532278061 CEST	1.1.1.1	192.168.2.4	0x6d5	Name error (3)	smtp.bei-schlegels.de	none	none	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:59.791270971 CEST	1.1.1.1	192.168.2.4	0xedd3	Name error (3)	secure.dutchieguy.ca	none	none	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:59.808526039 CEST	1.1.1.1	192.168.2.4	0x231a	Name error (3)	smtp.uda.com	none	none	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:59.868607998 CEST	1.1.1.1	192.168.2.4	0x9f10	No error (0)	smtp.buckeyeexpress.com	mail.buckeyecom.net		CNAME (Canonical name)	IN (0x0001)	false
Aug 1, 2024 06:10:59.868607998 CEST	1.1.1.1	192.168.2.4	0x9f10	No error (0)	mail.buckeyecom.net		209.67.129.55	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:10:59.897567987 CEST	1.1.1.1	192.168.2.4	0x1c69	No error (0)	inditec.com.br		162.241.203.111	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:11:00.036559105 CEST	1.1.1.1	192.168.2.4	0x9389	Name error (3)	smtp.firenze.it	none	none	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:11:00.079319954 CEST	1.1.1.1	192.168.2.4	0x25cf	Name error (3)	securesmtp.heffron.com.au	none	none	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:11:00.148703098 CEST	1.1.1.1	192.168.2.4	0xea9b	No error (0)	omkartech.online		162.19.58.166	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:11:00.256047964 CEST	1.1.1.1	192.168.2.4	0x6f44	No error (0)	smtp.ehinger-schwarz.de		136.243.87.209	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:11:00.265120983 CEST	1.1.1.1	192.168.2.4	0xbbdc	Name error (3)	securesmtp.mediascript.com	none	none	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:11:00.402760983 CEST	1.1.1.1	192.168.2.4	0xfcdd	Name error (3)	secure.moretzmarketing.com	none	none	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:11:00.464077950 CEST	1.1.1.1	192.168.2.4	0x34f8	No error (0)	coral.ocn.ne.jp		180.37.199.39	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:11:00.504123926 CEST	1.1.1.1	192.168.2.4	0x8a35	Server failure (2)	foxboxup.com	none	none	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:11:00.504134893 CEST	1.1.1.1	192.168.2.4	0x8a35	Server failure (2)	foxboxup.com	none	none	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:11:00.504189968 CEST	1.1.1.1	192.168.2.4	0x8a35	Server failure (2)	foxboxup.com	none	none	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:11:00.504199028 CEST	1.1.1.1	192.168.2.4	0x8a35	Server failure (2)	foxboxup.com	none	none	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:11:00.743580103 CEST	1.1.1.1	192.168.2.4	0x9762	Name error (3)	secure.hopla.fr	none	none	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:11:00.854598045 CEST	1.1.1.1	192.168.2.4	0xda4b	No error (0)	mx2.zoho.com		136.143.183.44	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:11:00.858728886 CEST	1.1.1.1	192.168.2.4	0x5b71	No error (0)	baronsestates.com		92.205.13.202	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:11:00.869824886 CEST	1.1.1.1	192.168.2.4	0xc337	Name error (3)	securesmtp.chxjcnbtlanr.fr	none	none	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:11:00.882505894 CEST	1.1.1.1	192.168.2.4	0xe879	Name error (3)	out.selasdugouessant.fr	none	none	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:11:00.893337011 CEST	1.1.1.1	192.168.2.4	0x6253	Name error (3)	smtp.riptoo.com	none	none	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:11:01.104855061 CEST	1.1.1.1	192.168.2.4	0xfeb5	No error (0)	mail.grupoafline.com.br		192.185.217.37	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:11:01.117539883 CEST	1.1.1.1	192.168.2.4	0x11d2	No error (0)	kingstonholdings.com		69.195.93.185	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:11:01.137901068 CEST	1.1.1.1	192.168.2.4	0xc4c4	No error (0)	protech-algerie.com		149.202.93.122	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:11:01.178591013 CEST	1.1.1.1	192.168.2.4	0xa65	Name error (3)	smtp.onlineaffe.de	none	none	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:11:01.264164925 CEST	1.1.1.1	192.168.2.4	0xe787	No error (0)	smtp.supercable.es	smtp.auna.com		CNAME (Canonical name)	IN (0x0001)	false
Aug 1, 2024 06:11:01.264164925 CEST	1.1.1.1	192.168.2.4	0xe787	No error (0)	smtp.auna.com		62.42.230.12	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:11:01.267442942 CEST	1.1.1.1	192.168.2.4	0x7981	Name error (3)	mail.pvlearnerss.net	none	none	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:11:01.295485020 CEST	1.1.1.1	192.168.2.4	0x56d7	No error (0)	surgeib1.nova.es		212.85.36.18	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:11:01.612818956 CEST	1.1.1.1	192.168.2.4	0xf51b	No error (0)	smtp.xs4all.nl		195.121.65.191	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:11:01.657537937 CEST	1.1.1.1	192.168.2.4	0x3ec8	Name error (3)	smtp.ymlaenceredigion.org.uk	none	none	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:11:01.678972006 CEST	1.1.1.1	192.168.2.4	0x6da1	No error (0)	mail.netaporter.pl	ghs.googlehosted.com		CNAME (Canonical name)	IN (0x0001)	false
Aug 1, 2024 06:11:01.678972006 CEST	1.1.1.1	192.168.2.4	0x6da1	No error (0)	ghs.googlehosted.com		142.250.185.243	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:11:01.715281010 CEST	1.1.1.1	192.168.2.4	0xc419	No error (0)	smtp.tps.co.id	mail.tps.co.id		CNAME (Canonical name)	IN (0x0001)	false
Aug 1, 2024 06:11:01.715281010 CEST	1.1.1.1	192.168.2.4	0xc419	No error (0)	mail.tps.co.id	mail.wip.tps.co.id		CNAME (Canonical name)	IN (0x0001)	false
Aug 1, 2024 06:11:01.715281010 CEST	1.1.1.1	192.168.2.4	0xc419	No error (0)	mail.wip.tps.co.id		202.154.61.67	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:11:01.715311050 CEST	1.1.1.1	192.168.2.4	0xc419	No error (0)	smtp.tps.co.id	mail.tps.co.id		CNAME (Canonical name)	IN (0x0001)	false
Aug 1, 2024 06:11:01.715311050 CEST	1.1.1.1	192.168.2.4	0xc419	No error (0)	mail.tps.co.id	mail.wip.tps.co.id		CNAME (Canonical name)	IN (0x0001)	false
Aug 1, 2024 06:11:01.715311050 CEST	1.1.1.1	192.168.2.4	0xc419	No error (0)	mail.wip.tps.co.id		202.154.61.67	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:11:01.716656923 CEST	1.1.1.1	192.168.2.4	0xb3a6	Name error (3)	securesmtp.urdisc.com.ua	none	none	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:11:01.748584032 CEST	1.1.1.1	192.168.2.4	0xa3e5	No error (0)	_dc-mx.410986632b22.brownielabs.pe		176.9.31.17	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:11:03.642050028 CEST	1.1.1.1	192.168.2.4	0xcf6f	Name error (3)	securesmtp.rewe-touristik.com	none	none	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:11:03.648525953 CEST	1.1.1.1	192.168.2.4	0x53b5	Name error (3)	mail.thegarciafamily.co.uk	none	none	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:11:03.651101112 CEST	1.1.1.1	192.168.2.4	0x2a03	Server failure (2)	smtp.mstorrie.fsnet.co.uk	none	none	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:11:03.668502092 CEST	1.1.1.1	192.168.2.4	0xe530	Name error (3)	out.zjnobx.com	none	none	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:11:03.670684099 CEST	1.1.1.1	192.168.2.4	0x4831	Name error (3)	mail.michaeljamesdesign.co.uk	none	none	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:11:03.917277098 CEST	1.1.1.1	192.168.2.4	0x9b8c	No error (0)	mail.eatel.net	mail.eatel.net.cust.b.hostedemail.com		CNAME (Canonical name)	IN (0x0001)	false
Aug 1, 2024 06:11:03.917277098 CEST	1.1.1.1	192.168.2.4	0x9b8c	No error (0)	mail.eatel.net.cust.b.hostedemail.com		64.98.38.234	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:11:03.941263914 CEST	1.1.1.1	192.168.2.4	0xdaf6	Name error (3)	securesmtp.cafrance.com	none	none	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:11:03.941884995 CEST	1.1.1.1	192.168.2.4	0x998d	Name error (3)	secure.migato.ga	none	none	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:11:03.944104910 CEST	1.1.1.1	192.168.2.4	0xa338	Name error (3)	out.flingenieros.com	none	none	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:11:04.001880884 CEST	1.1.1.1	192.168.2.4	0x90d2	Name error (3)	securesmtp.noneonsjajjdfjfujucjc.com	none	none	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:11:04.046839952 CEST	1.1.1.1	192.168.2.4	0x2e37	No error (0)	mx1.mail.uk.easynet.net		212.135.6.27	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:11:04.135533094 CEST	1.1.1.1	192.168.2.4	0x3ece	Name error (3)	mail.ddyldm.com	none	none	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:11:04.167409897 CEST	1.1.1.1	192.168.2.4	0xb472	No error (0)	smtp.studiodenapoli.com		62.149.128.200	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:11:04.167409897 CEST	1.1.1.1	192.168.2.4	0xb472	No error (0)	smtp.studiodenapoli.com		62.149.128.203	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:11:04.167409897 CEST	1.1.1.1	192.168.2.4	0xb472	No error (0)	smtp.studiodenapoli.com		62.149.128.202	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:11:04.167409897 CEST	1.1.1.1	192.168.2.4	0xb472	No error (0)	smtp.studiodenapoli.com		62.149.128.201	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:11:04.201747894 CEST	1.1.1.1	192.168.2.4	0x5cb0	Name error (3)	ahqua.co.uk	none	none	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:11:04.283431053 CEST	1.1.1.1	192.168.2.4	0x3df3	Name error (3)	secure.uqtr.ca	none	none	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:11:04.312562943 CEST	1.1.1.1	192.168.2.4	0x272a	No error (0)	mail.itrs.net.br		187.53.223.107	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:11:04.460597038 CEST	1.1.1.1	192.168.2.4	0xc01e	Name error (3)	secure.da-raiders.de	none	none	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:11:04.488475084 CEST	1.1.1.1	192.168.2.4	0xd3ee	No error (0)	relix.cl		188.114.97.3	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:11:04.488475084 CEST	1.1.1.1	192.168.2.4	0xd3ee	No error (0)	relix.cl		188.114.96.3	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:11:04.508601904 CEST	1.1.1.1	192.168.2.4	0x2cb4	No error (0)	smtp.163.net		106.38.219.73	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:11:04.535562038 CEST	1.1.1.1	192.168.2.4	0xa473	Name error (3)	mail.zsolen.ro	none	none	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:11:04.536365032 CEST	1.1.1.1	192.168.2.4	0x593e	Name error (3)	out.lbguk.net	none	none	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:11:04.572870970 CEST	1.1.1.1	192.168.2.4	0xd43f	Name error (3)	smtp.asilonidoilbiberon.it	none	none	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:11:04.626580954 CEST	1.1.1.1	192.168.2.4	0x8671	Name error (3)	votre-webmaster.com	none	none	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:11:04.676592112 CEST	1.1.1.1	192.168.2.4	0xca1	Name error (3)	smtp.essvideo.com	none	none	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:11:04.703398943 CEST	1.1.1.1	192.168.2.4	0xff12	No error (0)	smtp.infinito.it		194.185.246.171	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:11:04.710442066 CEST	1.1.1.1	192.168.2.4	0xead5	Server failure (2)	disciplesofmercy.co.ke	none	none	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:11:04.713466883 CEST	1.1.1.1	192.168.2.4	0x2b79	No error (0)	smtp.baech.dk		93.191.156.15	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:11:04.795499086 CEST	1.1.1.1	192.168.2.4	0xc494	No error (0)	nntc-mx.email-protect.gosecure.net		208.80.204.155	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:11:04.807090998 CEST	1.1.1.1	192.168.2.4	0x2fb6	No error (0)	smtp.shaw.ca	shawmail.glb.shawcable.net		CNAME (Canonical name)	IN (0x0001)	false
Aug 1, 2024 06:11:04.807090998 CEST	1.1.1.1	192.168.2.4	0x2fb6	No error (0)	shawmail.glb.shawcable.net		64.59.128.135	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:11:04.807090998 CEST	1.1.1.1	192.168.2.4	0x2fb6	No error (0)	shawmail.glb.shawcable.net		64.59.136.142	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:11:04.820875883 CEST	1.1.1.1	192.168.2.4	0x62b9	Name error (3)	out.crossfitworks.com	none	none	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:11:04.827860117 CEST	1.1.1.1	192.168.2.4	0x4d6a	No error (0)	mail.lantic.net	smtp.lantic.net		CNAME (Canonical name)	IN (0x0001)	false
Aug 1, 2024 06:11:04.827860117 CEST	1.1.1.1	192.168.2.4	0x4d6a	No error (0)	smtp.lantic.net		209.203.34.199	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:11:04.941442966 CEST	1.1.1.1	192.168.2.4	0xb7b0	No error (0)	proofpoint5.sfu.ca		142.58.200.9	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:11:04.951314926 CEST	1.1.1.1	192.168.2.4	0x5f5e	No error (0)	smtp.sweetybunny.com		185.78.164.177	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:11:04.954406977 CEST	1.1.1.1	192.168.2.4	0x9e8e	Name error (3)	securesmtp.itsrebecca.com	none	none	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:11:05.001452923 CEST	1.1.1.1	192.168.2.4	0x86d9	Name error (3)	smtp.vipchristianlouboutindiscount.com	none	none	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:11:05.008869886 CEST	1.1.1.1	192.168.2.4	0xac13	No error (0)	sencard.com.tr		46.234.16.44	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:11:05.156366110 CEST	1.1.1.1	192.168.2.4	0x795	Name error (3)	mail.alternativeplastics.com.au	none	none	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:11:05.158199072 CEST	1.1.1.1	192.168.2.4	0xc53b	No error (0)	harcdb.co.uk		37.9.61.52	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:11:05.166877985 CEST	1.1.1.1	192.168.2.4	0x59d2	Name error (3)	clickconsulting.online	none	none	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:11:05.185414076 CEST	1.1.1.1	192.168.2.4	0x63d9	No error (0)	mail.freenetname.co.uk		212.159.8.233	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:11:05.185414076 CEST	1.1.1.1	192.168.2.4	0x63d9	No error (0)	mail.freenetname.co.uk		212.159.9.233	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:11:05.190804958 CEST	1.1.1.1	192.168.2.4	0x7af6	No error (0)	hw.ac.uk		185.18.139.13	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:11:05.237624884 CEST	1.1.1.1	192.168.2.4	0x4a02	Name error (3)	smtp.hkpearl.com.hk	none	none	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:11:05.237653017 CEST	1.1.1.1	192.168.2.4	0x4a02	Name error (3)	smtp.hkpearl.com.hk	none	none	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:11:05.323200941 CEST	1.1.1.1	192.168.2.4	0x784f	No error (0)	mail.dskbangladesh.org		115.127.7.4	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:11:05.554320097 CEST	1.1.1.1	192.168.2.4	0x7730	No error (0)	austineng.com		141.193.213.11	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:11:05.554320097 CEST	1.1.1.1	192.168.2.4	0x7730	No error (0)	austineng.com		141.193.213.10	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:11:05.554337025 CEST	1.1.1.1	192.168.2.4	0x7730	No error (0)	austineng.com		141.193.213.11	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:11:05.554337025 CEST	1.1.1.1	192.168.2.4	0x7730	No error (0)	austineng.com		141.193.213.10	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:11:05.570702076 CEST	1.1.1.1	192.168.2.4	0x9583	No error (0)	smtp.qit.ne.jp	arteria-qit-mbox-v4.xspmail.jp		CNAME (Canonical name)	IN (0x0001)	false
Aug 1, 2024 06:11:05.570702076 CEST	1.1.1.1	192.168.2.4	0x9583	No error (0)	arteria-qit-mbox-v4.xspmail.jp		160.13.60.133	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:11:05.654994965 CEST	1.1.1.1	192.168.2.4	0xaf58	Name error (3)	out.zpost.plala.or.jp	none	none	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:11:06.885128975 CEST	1.1.1.1	192.168.2.4	0xe94d	Name error (3)	listerassociates.co.uk	none	none	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:11:06.889158010 CEST	1.1.1.1	192.168.2.4	0xbd69	Name error (3)	mail.sncf.fr	none	none	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:11:06.892577887 CEST	1.1.1.1	192.168.2.4	0xca3	Name error (3)	out.whitneytx.net	none	none	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:11:06.934513092 CEST	1.1.1.1	192.168.2.4	0xb0ce	No error (0)	georg-ackermann-schule.de		87.98.247.16	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:11:06.986867905 CEST	1.1.1.1	192.168.2.4	0x47a5	No error (0)	sulayici.com		95.173.184.52	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:11:07.278554916 CEST	1.1.1.1	192.168.2.4	0xc435	No error (0)	nolahome.net		185.199.110.153	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:11:07.278554916 CEST	1.1.1.1	192.168.2.4	0xc435	No error (0)	nolahome.net		185.199.111.153	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:11:07.278554916 CEST	1.1.1.1	192.168.2.4	0xc435	No error (0)	nolahome.net		185.199.109.153	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:11:07.278554916 CEST	1.1.1.1	192.168.2.4	0xc435	No error (0)	nolahome.net		185.199.108.153	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:11:07.281856060 CEST	1.1.1.1	192.168.2.4	0xb816	Name error (3)	mail.vihchorus.org	none	none	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:11:07.287233114 CEST	1.1.1.1	192.168.2.4	0x24bb	No error (0)	_dc-mx.be643bbe8cb8.djstranger.com		148.135.58.178	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:11:07.304471016 CEST	1.1.1.1	192.168.2.4	0x7c1c	No error (0)	securesmtp.helgahalkjaer.dk		77.111.240.30	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:11:07.369890928 CEST	1.1.1.1	192.168.2.4	0xf623	No error (0)	hosting2366159.online.pro		46.242.233.134	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:11:07.464495897 CEST	1.1.1.1	192.168.2.4	0x5fd8	No error (0)	smtp.com.br		177.70.6.70	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:11:07.480516911 CEST	1.1.1.1	192.168.2.4	0xcf07	No error (0)	mx.ertemaik.com		104.131.176.42	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:11:07.487386942 CEST	1.1.1.1	192.168.2.4	0x4d17	No error (0)	out.hogarcrea.net		74.220.199.6	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:11:07.506562948 CEST	1.1.1.1	192.168.2.4	0x20f3	No error (0)	smtp.aslogic.es		217.116.0.228	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:11:07.512002945 CEST	1.1.1.1	192.168.2.4	0x1c24	Name error (3)	securesmtp.clubinternet.fr	none	none	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:11:07.657661915 CEST	1.1.1.1	192.168.2.4	0xd20b	No error (0)	fernexpo.com		104.26.11.92	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:11:07.657661915 CEST	1.1.1.1	192.168.2.4	0xd20b	No error (0)	fernexpo.com		172.67.74.185	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:11:07.657661915 CEST	1.1.1.1	192.168.2.4	0xd20b	No error (0)	fernexpo.com		104.26.10.92	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:11:07.678297997 CEST	1.1.1.1	192.168.2.4	0xfd13	Name error (3)	fycreation.com	none	none	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:11:07.718456984 CEST	1.1.1.1	192.168.2.4	0xbe54	Name error (3)	securesmtp.stanfordschool.co.uk	none	none	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:11:07.900655031 CEST	1.1.1.1	192.168.2.4	0xf018	Name error (3)	mail.1100du.com	none	none	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:11:07.911261082 CEST	1.1.1.1	192.168.2.4	0xfaff	No error (0)	mail.ctb.ne.jp		202.214.233.75	A (IP address)	IN (0x0001)	false
Aug 1, 2024 06:11:07.920659065 CEST	1.1.1.1	192.168.2.4	0x7d07	No error (0)	out.amereytryerta.co.cc		175.126.123.219	A (IP address)	IN (0x0001)	false

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.4	49783	20.12.23.50	443

Timestamp	Bytes transferred	Direction	Data
2024-08-01 04:09:18 UTC	306	OUT	GET /SLS/%7B522D76A4-93E1-47F8-B8CE-07C937AD1A1E%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=5B67yh1zFHPWn3u&MD=cwfMEBzV HTTP/1.1 Connection: Keep-Alive Accept: / User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33 Host: slscr.update.microsoft.com
2024-08-01 04:09:18 UTC	560	IN	HTTP/1.1 200 OK Cache-Control: no-cache Pragma: no-cache Content-Type: application/octet-stream Expires: -1 Last-Modified: Mon, 01 Jan 0001 00:00:00 GMT ETag: "XAopazV00XDWnJCwkmEWRv6JkbjRA9QSSZ2+e/3MzEk=_2880" MS-CorrelationId: ecc3c736-2eec-41f1-b14a-c7ba4f046088 MS-RequestId: de08bef3-a720-4fcb-8430-19cb5052ddfe MS-CV: 4Y4jaz1hpEKj5xa/.0 X-Microsoft-SLSClientCache: 2880 Content-Disposition: attachment; filename=environment.cab X-Content-Type-Options: nosniff Date: Thu, 01 Aug 2024 04:09:18 GMT Connection: close Content-Length: 24490
2024-08-01 04:09:18 UTC	15824	IN	Data Raw: 4d 53 43 46 00 00 00 00 92 1e 00 00 00 00 00 00 44 00 00 00 00 00 00 00 03 01 01 00 01 00 04 00 23 d0 00 00 14 00 00 00 00 00 10 00 92 1e 00 00 18 41 00 00 00 00 00 00 00 00 00 00 64 00 00 00 01 00 01 00 e6 42 00 00 00 00 00 00 00 00 00 00 00 00 80 00 65 6e 76 69 72 6f 6e 6d 65 6e 74 2e 63 61 62 00 78 cf 8d 5c 26 1e e6 42 43 4b ed 5c 07 54 13 db d6 4e a3 f7 2e d5 d0 3b 4c 42 af 4a 57 10 e9 20 bd 77 21 94 80 88 08 24 2a 02 02 d2 55 10 a4 a8 88 97 22 8a 0a d2 11 04 95 ae d2 8b 20 28 0a 88 20 45 05 f4 9f 80 05 bd ed dd f7 ff 77 dd f7 bf 65 d6 4a 66 ce 99 33 67 4e d9 7b 7f fb db 7b 56 f4 4d 34 b4 21 e0 a7 03 0a d9 fc 68 6e 1d 20 70 28 14 02 85 20 20 ad 61 10 08 e3 66 0d ed 66 9b 1d 6a 90 af 1f 17 f0 4b 68 35 01 83 6c fb 44 42 5c 7d 83 3d 03 30 be 3e ae be 58 Data Ascii: MSCFD#AdBenvironment.cabx\&BCK\TN.;LBJW w!$*U" ( EweJf3gN{{VM4!hn p( affjKh5lDB\}=0>X
2024-08-01 04:09:18 UTC	8666	IN	Data Raw: 04 01 31 2f 30 2d 30 0a 02 05 00 e1 2b 8a 50 02 01 00 30 0a 02 01 00 02 02 12 fe 02 01 ff 30 07 02 01 00 02 02 11 e6 30 0a 02 05 00 e1 2c db d0 02 01 00 30 36 06 0a 2b 06 01 04 01 84 59 0a 04 02 31 28 30 26 30 0c 06 0a 2b 06 01 04 01 84 59 0a 03 02 a0 0a 30 08 02 01 00 02 03 07 a1 20 a1 0a 30 08 02 01 00 02 03 01 86 a0 30 0d 06 09 2a 86 48 86 f7 0d 01 01 05 05 00 03 81 81 00 0c d9 08 df 48 94 57 65 3e ad e7 f2 17 9c 1f ca 3d 4d 6c cd 51 e1 ed 9c 17 a5 52 35 0f fd de 4b bd 22 92 c5 69 e5 d7 9f 29 23 72 40 7a ca 55 9d 8d 11 ad d5 54 00 bb 53 b4 87 7b 72 84 da 2d f6 e3 2c 4f 7e ba 1a 58 88 6e d6 b9 6d 16 ae 85 5b b5 c2 81 a8 e0 ee 0a 9c 60 51 3a 7b e4 61 f8 c3 e4 38 bd 7d 28 17 d6 79 f0 c8 58 c6 ef 1f f7 88 65 b1 ea 0a c0 df f7 ee 5c 23 c2 27 fd 98 63 08 31 Data Ascii: 1/0-0+P000,06+Y1(0&0+Y0 00*HHWe>=MlQR5K"i)#r@zUTS{r-,O~Xnm[`Q:{a8}(yXe\#'c1

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.4	53701	20.12.23.50	443

Timestamp	Bytes transferred	Direction	Data
2024-08-01 04:09:56 UTC	306	OUT	GET /SLS/%7BE7A50285-D08D-499D-9FF8-180FDC2332BC%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=5B67yh1zFHPWn3u&MD=cwfMEBzV HTTP/1.1 Connection: Keep-Alive Accept: / User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33 Host: slscr.update.microsoft.com
2024-08-01 04:09:56 UTC	560	IN	HTTP/1.1 200 OK Cache-Control: no-cache Pragma: no-cache Content-Type: application/octet-stream Expires: -1 Last-Modified: Mon, 01 Jan 0001 00:00:00 GMT ETag: "vic+p1MiJJ+/WMnK08jaWnCBGDfvkGRzPk9f8ZadQHg=_1440" MS-CorrelationId: 457f3ed8-24b8-4b51-a03e-a6c08bc34d12 MS-RequestId: b628a5e9-fba1-4c9e-8bf8-b187262f2b8d MS-CV: B0ZNryrjx0OhyeMg.0 X-Microsoft-SLSClientCache: 1440 Content-Disposition: attachment; filename=environment.cab X-Content-Type-Options: nosniff Date: Thu, 01 Aug 2024 04:09:56 GMT Connection: close Content-Length: 30005
2024-08-01 04:09:56 UTC	15824	IN	Data Raw: 4d 53 43 46 00 00 00 00 8d 2b 00 00 00 00 00 00 44 00 00 00 00 00 00 00 03 01 01 00 01 00 04 00 5b 49 00 00 14 00 00 00 00 00 10 00 8d 2b 00 00 a8 49 00 00 00 00 00 00 00 00 00 00 64 00 00 00 01 00 01 00 72 4d 00 00 00 00 00 00 00 00 00 00 00 00 80 00 65 6e 76 69 72 6f 6e 6d 65 6e 74 2e 63 61 62 00 fe f6 51 be 21 2b 72 4d 43 4b ed 7c 05 58 54 eb da f6 14 43 49 37 0a 02 d2 b9 86 0e 41 52 a4 1b 24 a5 bb 43 24 44 18 94 90 92 52 41 3a 05 09 95 ee 54 b0 00 91 2e e9 12 10 04 11 c9 6f 10 b7 a2 67 9f bd cf 3e ff b7 ff b3 bf 73 ed e1 9a 99 f5 c6 7a d7 bb de f5 3e cf fd 3c f7 dc 17 4a 1a 52 e7 41 a8 97 1e 14 f4 e5 25 7d f4 05 82 82 c1 20 30 08 06 ba c3 05 02 11 7f a9 c1 ff d2 87 5c 1e f4 ed 65 8e 7a 1f f6 0a 40 03 1d 7b f9 83 2c 1c 2f db b8 3a 39 3a 58 38 ba 73 5e Data Ascii: MSCF+D[I+IdrMenvironment.cabQ!+rMCK\|XTCI7AR$C$DRA:T.og>sz><JRA%} 0\ez@{,/:9:X8s^
2024-08-01 04:09:56 UTC	14181	IN	Data Raw: 06 03 55 04 06 13 02 55 53 31 13 30 11 06 03 55 04 08 13 0a 57 61 73 68 69 6e 67 74 6f 6e 31 10 30 0e 06 03 55 04 07 13 07 52 65 64 6d 6f 6e 64 31 1e 30 1c 06 03 55 04 0a 13 15 4d 69 63 72 6f 73 6f 66 74 20 43 6f 72 70 6f 72 61 74 69 6f 6e 31 26 30 24 06 03 55 04 03 13 1d 4d 69 63 72 6f 73 6f 66 74 20 54 69 6d 65 2d 53 74 61 6d 70 20 50 43 41 20 32 30 31 30 30 1e 17 0d 32 33 31 30 31 32 31 39 30 37 32 35 5a 17 0d 32 35 30 31 31 30 31 39 30 37 32 35 5a 30 81 d2 31 0b 30 09 06 03 55 04 06 13 02 55 53 31 13 30 11 06 03 55 04 08 13 0a 57 61 73 68 69 6e 67 74 6f 6e 31 10 30 0e 06 03 55 04 07 13 07 52 65 64 6d 6f 6e 64 31 1e 30 1c 06 03 55 04 0a 13 15 4d 69 63 72 6f 73 6f 66 74 20 43 6f 72 70 6f 72 61 74 69 6f 6e 31 2d 30 2b 06 03 55 04 0b 13 24 4d 69 63 72 6f Data Ascii: UUS10UWashington10URedmond10UMicrosoft Corporation1&0$UMicrosoft Time-Stamp PCA 20100231012190725Z250110190725Z010UUS10UWashington10URedmond10UMicrosoft Corporation1-0+U$Micro

Target ID:	0
Start time:	00:08:58
Start date:	01/08/2024
Path:	C:\Users\user\Desktop\b2bXo6vmDm.exe
Wow64 process (32bit):	false
Commandline:	"C:\Users\user\Desktop\b2bXo6vmDm.exe"
Imagebase:	0x7ff7ff3d0000
File size:	920'376 bytes
MD5 hash:	4C3049F8E220C2264692CB192B741A30
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	1
Start time:	00:08:58
Start date:	01/08/2024
Path:	C:\Windows\System32\cmd.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\cmd.exe /c ""C:\Users\user\AppData\Local\Temp\RarSFX0\1.bat" "
Imagebase:	0x7ff727070000
File size:	289'792 bytes
MD5 hash:	8A2122E8162DBEF04694B9C3E0B6CDEE
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Show Windows behavior

Target ID:	2
Start time:	00:08:58
Start date:	01/08/2024
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff7699e0000
File size:	862'208 bytes
MD5 hash:	0D698AF330FD17BEE3BF90011D49251D
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Show Windows behavior

Target ID:	3
Start time:	00:08:58
Start date:	01/08/2024
Path:	C:\Users\user\AppData\Local\Temp\RarSFX0\clamer.exe
Wow64 process (32bit):	false
Commandline:	clamer.exe -priverdD
Imagebase:	0x7ff6e8db0000
File size:	464'808 bytes
MD5 hash:	FB30B403C1FA1D57FB65DC8B8E00E75C
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_SystemBC, Description: Yara detected SystemBC, Source: 00000003.00000003.1694019057.000001B13408C000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security
Antivirus matches:	Detection: 8%, ReversingLabs
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	4
Start time:	00:08:59
Start date:	01/08/2024
Path:	C:\Users\user\AppData\Local\Temp\RarSFX1\thkdh.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\AppData\Local\Temp\RarSFX1\thkdh.exe"
Imagebase:	0x400000
File size:	16'384 bytes
MD5 hash:	E7D405EEC8052898F4D2B0440A6B72C9
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_SystemBC, Description: Yara detected SystemBC, Source: 00000004.00000002.1699625834.000000000042E000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_SystemBC, Description: Yara detected SystemBC, Source: 00000004.00000000.1696467305.0000000000405000.00000008.00000001.01000000.0000000B.sdmp, Author: Joe Security Rule: JoeSecurity_SystemBC, Description: Yara detected SystemBC, Source: C:\Users\user\AppData\Local\Temp\RarSFX1\thkdh.exe, Author: Joe Security
Antivirus matches:	Detection: 100%, Avira Detection: 100%, Joe Sandbox ML Detection: 84%, ReversingLabs
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	5
Start time:	00:08:59
Start date:	01/08/2024
Path:	C:\ProgramData\flax\xalhg.exe
Wow64 process (32bit):	true
Commandline:	C:\ProgramData\flax\xalhg.exe
Imagebase:	0x400000
File size:	16'384 bytes
MD5 hash:	E7D405EEC8052898F4D2B0440A6B72C9
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_SystemBC, Description: Yara detected SystemBC, Source: 00000005.00000000.1701026803.0000000000405000.00000008.00000001.01000000.0000000C.sdmp, Author: Joe Security Rule: JoeSecurity_SystemBC, Description: Yara detected SystemBC, Source: C:\ProgramData\flax\xalhg.exe, Author: Joe Security
Antivirus matches:	Detection: 100%, Avira Detection: 100%, Joe Sandbox ML Detection: 84%, ReversingLabs
Reputation:	low
Has exited:	false

Show Windows behavior

Execution Graph

Execution Coverage:	11.4%
Dynamic/Decrypted Code Coverage:	0%
Signature Coverage:	26.5%
Total number of Nodes:	2000
Total number of Limit Nodes:	27

Executed Functions

Function 00007FF7FF3FB190 Relevance: 125.7, APIs: 61, Strings: 10, Instructions: 1421windowfilesleepCOMMON

Download Yara Rule

APIs

Part of subcall function 00007FF7FF3D255C: GetDlgItem.USER32 ref: 00007FF7FF3D25AC
Part of subcall function 00007FF7FF3D255C: SetDlgItemTextW.USER32 ref: 00007FF7FF3D25C8

EndDialog.USER32 ref: 00007FF7FF3FB2D0
SetDlgItemTextW.USER32 ref: 00007FF7FF3FB320
GetMessageW.USER32 ref: 00007FF7FF3FB350
IsDialogMessageW.USER32 ref: 00007FF7FF3FB369
TranslateMessage.USER32 ref: 00007FF7FF3FB37B
DispatchMessageW.USER32 ref: 00007FF7FF3FB389
EndDialog.USER32 ref: 00007FF7FF3FB3D3
GetDlgItem.USER32 ref: 00007FF7FF3FB410
IsDlgButtonChecked.USER32 ref: 00007FF7FF3FB431
IsDlgButtonChecked.USER32 ref: 00007FF7FF3FB449
SetFocus.USER32 ref: 00007FF7FF3FB452
GetLastError.KERNEL32 ref: 00007FF7FF3FB634
GetLastError.KERNEL32 ref: 00007FF7FF3FB665
GetTickCount.KERNEL32 ref: 00007FF7FF3FB68B
GetLastError.KERNEL32 ref: 00007FF7FF3FB6F5
GetCommandLineW.KERNEL32 ref: 00007FF7FF3FB841
CreateFileMappingW.KERNEL32 ref: 00007FF7FF3FB900
MapViewOfFile.KERNEL32 ref: 00007FF7FF3FB923
ShellExecuteExW.SHELL32 ref: 00007FF7FF3FB95B
Sleep.KERNEL32 ref: 00007FF7FF3FB9B6
UnmapViewOfFile.KERNEL32 ref: 00007FF7FF3FB9DF
CloseHandle.KERNEL32 ref: 00007FF7FF3FB9E8
SetDlgItemTextW.USER32 ref: 00007FF7FF3FBCDE
DialogBoxParamW.USER32 ref: 00007FF7FF3FC0D7
EndDialog.USER32 ref: 00007FF7FF3FC0EF
EnableWindow.USER32 ref: 00007FF7FF3FC2A6
IsDlgButtonChecked.USER32 ref: 00007FF7FF3FC2F8
WaitForInputIdle.USER32 ref: 00007FF7FF3FB9A3

Part of subcall function 00007FF7FF3EAAE0: LoadStringW.USER32 ref: 00007FF7FF3EAB67
Part of subcall function 00007FF7FF3EAAE0: LoadStringW.USER32 ref: 00007FF7FF3EAB80

IsDlgButtonChecked.USER32 ref: 00007FF7FF3FBEC3
SendDlgItemMessageW.USER32 ref: 00007FF7FF3FBEEA
GetDlgItem.USER32 ref: 00007FF7FF3FBEF8
IsDlgButtonChecked.USER32 ref: 00007FF7FF3FBF12
GetDlgItem.USER32 ref: 00007FF7FF3FBF4F
SetDlgItemTextW.USER32 ref: 00007FF7FF3FBFEC
SetDlgItemTextW.USER32 ref: 00007FF7FF3FC004
SetDlgItemTextW.USER32 ref: 00007FF7FF3FC321
_invalid_parameter_noinfo_noreturn.LIBCMT ref: 00007FF7FF3FC363
_invalid_parameter_noinfo_noreturn.LIBCMT ref: 00007FF7FF3FC369
_invalid_parameter_noinfo_noreturn.LIBCMT ref: 00007FF7FF3FC36F
_invalid_parameter_noinfo_noreturn.LIBCMT ref: 00007FF7FF3FC375
_invalid_parameter_noinfo_noreturn.LIBCMT ref: 00007FF7FF3FC37B
_invalid_parameter_noinfo_noreturn.LIBCMT ref: 00007FF7FF3FC381
SendDlgItemMessageW.USER32 ref: 00007FF7FF3FC449
EndDialog.USER32 ref: 00007FF7FF3FC463
GetDlgItem.USER32 ref: 00007FF7FF3FC491
SetFocus.USER32 ref: 00007FF7FF3FC49A
SendDlgItemMessageW.USER32 ref: 00007FF7FF3FC53E
FindFirstFileW.KERNEL32 ref: 00007FF7FF3FC562
FindClose.KERNEL32 ref: 00007FF7FF3FC68A
SendDlgItemMessageW.USER32 ref: 00007FF7FF3FC7AF

Part of subcall function 00007FF7FF3D129C: Concurrency::cancel_current_task.LIBCPMT ref: 00007FF7FF3D1396

_invalid_parameter_noinfo_noreturn.LIBCMT ref: 00007FF7FF3FCAA9
_invalid_parameter_noinfo_noreturn.LIBCMT ref: 00007FF7FF3FCAAF
_invalid_parameter_noinfo_noreturn.LIBCMT ref: 00007FF7FF3FCAB5
_invalid_parameter_noinfo_noreturn.LIBCMT ref: 00007FF7FF3FCABB
_invalid_parameter_noinfo_noreturn.LIBCMT ref: 00007FF7FF3FCAC1
_invalid_parameter_noinfo_noreturn.LIBCMT ref: 00007FF7FF3FCAC7

Strings

%s %s, xrefs: 00007FF7FF3FC6D9, 00007FF7FF3FC946
runas, xrefs: 00007FF7FF3FB7C9
__tmp_rar_sfx_access_check_, xrefs: 00007FF7FF3FB6A9
winrarsfxmappingfile.tmp, xrefs: 00007FF7FF3FB8E0
p, xrefs: 00007FF7FF3FB7AB
-el -s2 "-d%s" "-sp%s", xrefs: 00007FF7FF3FB799
STARTDLG, xrefs: 00007FF7FF3FB1CA
LICENSEDLG, xrefs: 00007FF7FF3FC0C9
@, xrefs: 00007FF7FF3FB7B6
REPLACEFILEDLG, xrefs: 00007FF7FF3FC3D3

Memory Dump Source

Source File: 00000000.00000002.1706197426.00007FF7FF3D1000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF7FF3D0000, based on PE: true

Associated: 00000000.00000002.1706180107.00007FF7FF3D0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1706234158.00007FF7FF418000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1706255447.00007FF7FF42B000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1706255447.00007FF7FF434000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1706289188.00007FF7FF43A000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1706289188.00007FF7FF43E000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff7ff3d0000_b2bXo6vmDm.jbxd

Similarity

API ID: Item$_invalid_parameter_noinfo_noreturn$Message$DialogText$ButtonChecked$FileSend$ErrorLast$CloseFindFocusLoadStringView$CommandConcurrency::cancel_current_taskCountCreateDispatchEnableExecuteFirstHandleIdleInputLineMappingParamShellSleepTickTranslateUnmapWaitWindow
String ID: %s %s$-el -s2 "-d%s" "-sp%s"$@$LICENSEDLG$REPLACEFILEDLG$STARTDLG$__tmp_rar_sfx_access_check_$p$runas$winrarsfxmappingfile.tmp
API String ID: 2128803032-2702805183
Opcode ID: 9f535972f23b126ea1453dee374d7cc25eedc2bbbdd02c65b32e266581137cbe
Instruction ID: 1ca23ed133fd7d26666f48073791730027f84e0bdbdea28bad6374f251153c15
Opcode Fuzzy Hash: 9f535972f23b126ea1453dee374d7cc25eedc2bbbdd02c65b32e266581137cbe
Instruction Fuzzy Hash: C6D26F61A086C782EF24BB25E8502F9A351EF857D0FD0433AD97D0A6E5DE3CE644D7A0

Function 00007FF7FF3FCE88 Relevance: 66.7, APIs: 27, Strings: 10, Instructions: 1963fileCOMMON

Download Yara Rule

APIs

GetDlgItem.USER32 ref: 00007FF7FF3FD5F3
IsDlgButtonChecked.USER32 ref: 00007FF7FF3FD626
IsDlgButtonChecked.USER32 ref: 00007FF7FF3FD655
SHFileOperationW.SHELL32 ref: 00007FF7FF3FD9BB
MoveFileW.KERNEL32 ref: 00007FF7FF3FDB4B
MoveFileExW.KERNEL32 ref: 00007FF7FF3FDB69
GetTempPathW.KERNEL32 ref: 00007FF7FF3FDC49

Part of subcall function 00007FF7FF3D1FA0: _invalid_parameter_noinfo_noreturn.LIBCMT ref: 00007FF7FF3D1FFB

EndDialog.USER32 ref: 00007FF7FF3FDFCA
Concurrency::cancel_current_task.LIBCPMT ref: 00007FF7FF3FEEE3
_invalid_parameter_noinfo_noreturn.LIBCMT ref: 00007FF7FF3FEEEF
_invalid_parameter_noinfo_noreturn.LIBCMT ref: 00007FF7FF3FEF07
_invalid_parameter_noinfo_noreturn.LIBCMT ref: 00007FF7FF3FEF0D
_invalid_parameter_noinfo_noreturn.LIBCMT ref: 00007FF7FF3FEF13
_invalid_parameter_noinfo_noreturn.LIBCMT ref: 00007FF7FF3FEF19
_invalid_parameter_noinfo_noreturn.LIBCMT ref: 00007FF7FF3FEF1F
_invalid_parameter_noinfo_noreturn.LIBCMT ref: 00007FF7FF3FEF25
_invalid_parameter_noinfo_noreturn.LIBCMT ref: 00007FF7FF3FEF2B
_invalid_parameter_noinfo_noreturn.LIBCMT ref: 00007FF7FF3FEF31
_invalid_parameter_noinfo_noreturn.LIBCMT ref: 00007FF7FF3FEF37
_invalid_parameter_noinfo_noreturn.LIBCMT ref: 00007FF7FF3FEF3D
_invalid_parameter_noinfo_noreturn.LIBCMT ref: 00007FF7FF3FEF43
_invalid_parameter_noinfo_noreturn.LIBCMT ref: 00007FF7FF3FEF49
_invalid_parameter_noinfo_noreturn.LIBCMT ref: 00007FF7FF3FEF4F
_invalid_parameter_noinfo_noreturn.LIBCMT ref: 00007FF7FF3FEF55
_invalid_parameter_noinfo_noreturn.LIBCMT ref: 00007FF7FF3FEF5B
Concurrency::cancel_current_task.LIBCPMT ref: 00007FF7FF3FEF67
Concurrency::cancel_current_task.LIBCPMT ref: 00007FF7FF3FEF73

Strings

.tmp, xrefs: 00007FF7FF3FDA85
MAX, xrefs: 00007FF7FF3FEA82, 00007FF7FF3FEA91
lnk, xrefs: 00007FF7FF3FE3CA, 00007FF7FF3FE3D9
<br>, xrefs: 00007FF7FF3FD6DA, 00007FF7FF3FD6E9
HIDE, xrefs: 00007FF7FF3FE9E5, 00007FF7FF3FE9F4
Software\Microsoft\Windows\CurrentVersion, xrefs: 00007FF7FF3FD501
.lnk, xrefs: 00007FF7FF3FE406, 00007FF7FF3FE415
ProgramFilesDir, xrefs: 00007FF7FF3FD4F0
@set:user, xrefs: 00007FF7FF3FDD96, 00007FF7FF3FDDA5
MIN, xrefs: 00007FF7FF3FEAE5, 00007FF7FF3FEAF4

Memory Dump Source

Source File: 00000000.00000002.1706197426.00007FF7FF3D1000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF7FF3D0000, based on PE: true

Associated: 00000000.00000002.1706180107.00007FF7FF3D0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1706234158.00007FF7FF418000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1706255447.00007FF7FF42B000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1706255447.00007FF7FF434000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1706289188.00007FF7FF43A000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1706289188.00007FF7FF43E000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff7ff3d0000_b2bXo6vmDm.jbxd

Similarity

API ID: _invalid_parameter_noinfo_noreturn$Concurrency::cancel_current_taskFile$ButtonCheckedMove$DialogItemOperationPathTemp
String ID: .lnk$.tmp$<br>$@set:user$HIDE$MAX$MIN$ProgramFilesDir$Software\Microsoft\Windows\CurrentVersion$lnk
API String ID: 2285161090-3916287355
Opcode ID: 5417905a6bfc79c54138c2525b56b808916815c1c32f8922a5e03a59d39ac3e2
Instruction ID: 2e8be7b699cdbd3d1e16f60f1a43dbe9e2638cf6471e093cdad0c9f0be86c9e8
Opcode Fuzzy Hash: 5417905a6bfc79c54138c2525b56b808916815c1c32f8922a5e03a59d39ac3e2
Instruction Fuzzy Hash: 00138262A047C286EF14EF64D8442FC67A1EF40798F90063ADA7D5BAD9DF38D584C3A0

Function 00007FF7FF400754 Relevance: 45.9, APIs: 21, Strings: 5, Instructions: 380
filetimewindowCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

Part of subcall function 00007FF7FF3EDFD0: GetModuleHandleW.KERNEL32(?,?,?,00000000,?), ref: 00007FF7FF3EE018
Part of subcall function 00007FF7FF3EDFD0: GetProcAddress.KERNEL32(?,?,?,00000000,?), ref: 00007FF7FF3EE030
Part of subcall function 00007FF7FF3EDFD0: GetProcAddress.KERNEL32(?,?,?,00000000,?), ref: 00007FF7FF3EE05D

Part of subcall function 00007FF7FF3E62DC: GetCurrentDirectoryW.KERNEL32 ref: 00007FF7FF3E62F2
Part of subcall function 00007FF7FF3E62DC: GetCurrentDirectoryW.KERNEL32 ref: 00007FF7FF3E632C

Part of subcall function 00007FF7FF3F946C: OleInitialize.OLE32 ref: 00007FF7FF3F9486
Part of subcall function 00007FF7FF3F946C: SHGetMalloc.SHELL32 ref: 00007FF7FF3F94D4

GetCommandLineW.KERNEL32 ref: 00007FF7FF40096E
OpenFileMappingW.KERNEL32 ref: 00007FF7FF400A07
MapViewOfFile.KERNEL32 ref: 00007FF7FF400A30
UnmapViewOfFile.KERNEL32 ref: 00007FF7FF400A46
MapViewOfFile.KERNEL32 ref: 00007FF7FF400A63
UnmapViewOfFile.KERNEL32 ref: 00007FF7FF400ACA
CloseHandle.KERNEL32 ref: 00007FF7FF400AD3
SetEnvironmentVariableW.KERNEL32 ref: 00007FF7FF400BAD
GetLocalTime.KERNEL32 ref: 00007FF7FF400BB8
swprintf.LEGACY_STDIO_DEFINITIONS ref: 00007FF7FF400C13
SetEnvironmentVariableW.KERNEL32 ref: 00007FF7FF400C26
GetModuleHandleW.KERNEL32 ref: 00007FF7FF400C2E
LoadIconW.USER32 ref: 00007FF7FF400C4D
DialogBoxParamW.USER32 ref: 00007FF7FF400CB6
SleepEx.KERNEL32 ref: 00007FF7FF400CE6
DeleteObject.GDI32 ref: 00007FF7FF400D0D
DeleteObject.GDI32 ref: 00007FF7FF400D1F
CloseHandle.KERNEL32 ref: 00007FF7FF400D67
_invalid_parameter_noinfo_noreturn.LIBCMT ref: 00007FF7FF400DD7
_invalid_parameter_noinfo_noreturn.LIBCMT ref: 00007FF7FF400DDD
_invalid_parameter_noinfo_noreturn.LIBCMT ref: 00007FF7FF400DE3

Part of subcall function 00007FF7FF3FFD0C: SetEnvironmentVariableW.KERNEL32 ref: 00007FF7FF3FFD43
Part of subcall function 00007FF7FF3FFD0C: SetEnvironmentVariableW.KERNELBASE ref: 00007FF7FF3FFDBC

Strings

sfxname, xrefs: 00007FF7FF400B9B
winrarsfxmappingfile.tmp, xrefs: 00007FF7FF4009F9
STARTDLG, xrefs: 00007FF7FF400CA5
sfxstime, xrefs: 00007FF7FF400C1F
%4d-%02d-%02d-%02d-%02d-%02d-%03d, xrefs: 00007FF7FF400C02

Memory Dump Source

Source File: 00000000.00000002.1706197426.00007FF7FF3D1000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF7FF3D0000, based on PE: true

Associated: 00000000.00000002.1706180107.00007FF7FF3D0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1706234158.00007FF7FF418000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1706255447.00007FF7FF42B000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1706255447.00007FF7FF434000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1706289188.00007FF7FF43A000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1706289188.00007FF7FF43E000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff7ff3d0000_b2bXo6vmDm.jbxd

Similarity

API ID: File$EnvironmentHandleVariableView$_invalid_parameter_noinfo_noreturn$AddressCloseCurrentDeleteDirectoryModuleObjectProcUnmap$CommandDialogIconInitializeLineLoadLocalMallocMappingOpenParamSleepTimeswprintf
String ID: %4d-%02d-%02d-%02d-%02d-%02d-%03d$STARTDLG$sfxname$sfxstime$winrarsfxmappingfile.tmp
API String ID: 1048086575-3710569615
Opcode ID: 2f6dcb1796a5cc5fae15301374b2f3b8c66cbb3b7bb412c49ee4b9e1a7e23614
Instruction ID: ad33797d82238341490fab7ccb793ee2b90c7cc2638b26521647e84586ce9152
Opcode Fuzzy Hash: 2f6dcb1796a5cc5fae15301374b2f3b8c66cbb3b7bb412c49ee4b9e1a7e23614
Instruction Fuzzy Hash: 4B129761A18BC281EB11AB24E8412F9B361FF84794F900335DABD46BE9DF3CE144D3A4

Function 00007FF7FF3EA4AC Relevance: 23.0, APIs: 11, Strings: 2, Instructions: 250
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

swprintf.LEGACY_STDIO_DEFINITIONS ref: 00007FF7FF3EA504

Part of subcall function 00007FF7FF3F0F68: WideCharToMultiByte.KERNEL32 ref: 00007FF7FF3F0F99

SetDlgItemTextW.USER32 ref: 00007FF7FF3EA573
GetWindowRect.USER32 ref: 00007FF7FF3EA5AD
GetClientRect.USER32 ref: 00007FF7FF3EA5BB
GetWindowLongPtrW.USER32 ref: 00007FF7FF3EA66C
GetWindowRect.USER32 ref: 00007FF7FF3EA6B2
SetDlgItemTextW.USER32 ref: 00007FF7FF3EA6EC
GetSystemMetrics.USER32 ref: 00007FF7FF3EA6F7
GetWindow.USER32 ref: 00007FF7FF3EA708
GetWindowRect.USER32 ref: 00007FF7FF3EA746
GetWindow.USER32 ref: 00007FF7FF3EA808

Strings

CAPTION, xrefs: 00007FF7FF3EA6CF
$%s:, xrefs: 00007FF7FF3EA4EF

Memory Dump Source

Source File: 00000000.00000002.1706197426.00007FF7FF3D1000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF7FF3D0000, based on PE: true

Associated: 00000000.00000002.1706180107.00007FF7FF3D0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1706234158.00007FF7FF418000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1706255447.00007FF7FF42B000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1706255447.00007FF7FF434000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1706289188.00007FF7FF43A000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1706289188.00007FF7FF43E000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff7ff3d0000_b2bXo6vmDm.jbxd

Similarity

API ID: Window$Rect$ItemText$ByteCharClientLongMetricsMultiSystemWideswprintf
String ID: $%s:$CAPTION
API String ID: 1936833115-404845831
Opcode ID: 1224945cd41bf140f0dcf37f1b002595631e4f701a4b658f84a72e9da714e3d9
Instruction ID: 2178c1ff78583e9afe424df1bd5b77b3db62db40ee50c543ea4e4b30ef4dd0ed
Opcode Fuzzy Hash: 1224945cd41bf140f0dcf37f1b002595631e4f701a4b658f84a72e9da714e3d9
Instruction Fuzzy Hash: 7991FA32B1868187E714DF29E8006B9A761FB85784F805635EE6D47BD8CF3CE809CB50

Function 00007FF7FF3F8624 Relevance: 19.4, APIs: 10, Strings: 1, Instructions: 101
memorywindowCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

FindResourceW.KERNELBASE ref: 00007FF7FF3F863D
SizeofResource.KERNEL32 ref: 00007FF7FF3F8659
LoadResource.KERNEL32 ref: 00007FF7FF3F8673
LockResource.KERNEL32 ref: 00007FF7FF3F8685
GlobalAlloc.KERNELBASE ref: 00007FF7FF3F86A6
GlobalLock.KERNEL32 ref: 00007FF7FF3F86BB
GdipAlloc.GDIPLUS ref: 00007FF7FF3F86FE
GdipCreateHBITMAPFromBitmap.GDIPLUS ref: 00007FF7FF3F8769
GlobalUnlock.KERNEL32 ref: 00007FF7FF3F878C
GlobalFree.KERNEL32 ref: 00007FF7FF3F8795

Strings

PNG, xrefs: 00007FF7FF3F862F

Memory Dump Source

Source File: 00000000.00000002.1706197426.00007FF7FF3D1000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF7FF3D0000, based on PE: true

Associated: 00000000.00000002.1706180107.00007FF7FF3D0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1706234158.00007FF7FF418000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1706255447.00007FF7FF42B000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1706255447.00007FF7FF434000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1706289188.00007FF7FF43A000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1706289188.00007FF7FF43E000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff7ff3d0000_b2bXo6vmDm.jbxd

Similarity

API ID: GlobalResource$AllocGdipLock$BitmapCreateFindFreeFromLoadSizeofUnlock
String ID: PNG
API String ID: 541704414-364855578
Opcode ID: c8606208415c3a11eb94d5df8c8f8595ea54109f2541637b646828bce78d4013
Instruction ID: 534bccec54615f0a1a845b0b931798bb412573970179fe009a3cb396a0992010
Opcode Fuzzy Hash: c8606208415c3a11eb94d5df8c8f8595ea54109f2541637b646828bce78d4013
Instruction Fuzzy Hash: FD413225A09B8682EF09AB16D4443B9E3A0AF84BD4F940635CD3D4B3E4DF7CD44997A4

Function 00007FF7FF3DF930 Relevance: 17.2, APIs: 8, Strings: 1, Instructions: 1417COMMON

Download Yara Rule

APIs

_invalid_parameter_noinfo_noreturn.LIBCMT ref: 00007FF7FF3E1239
_invalid_parameter_noinfo_noreturn.LIBCMT ref: 00007FF7FF3E123F
_invalid_parameter_noinfo_noreturn.LIBCMT ref: 00007FF7FF3E1245
_invalid_parameter_noinfo_noreturn.LIBCMT ref: 00007FF7FF3E124B
_invalid_parameter_noinfo_noreturn.LIBCMT ref: 00007FF7FF3E1251
_invalid_parameter_noinfo_noreturn.LIBCMT ref: 00007FF7FF3E1257
_invalid_parameter_noinfo_noreturn.LIBCMT ref: 00007FF7FF3E125D
_invalid_parameter_noinfo_noreturn.LIBCMT ref: 00007FF7FF3E1263

Strings

__tmp_reference_source_, xrefs: 00007FF7FF3DFCCF, 00007FF7FF3DFCDE

Memory Dump Source

Source File: 00000000.00000002.1706197426.00007FF7FF3D1000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF7FF3D0000, based on PE: true

Associated: 00000000.00000002.1706180107.00007FF7FF3D0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1706234158.00007FF7FF418000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1706255447.00007FF7FF42B000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1706255447.00007FF7FF434000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1706289188.00007FF7FF43A000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1706289188.00007FF7FF43E000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff7ff3d0000_b2bXo6vmDm.jbxd

Similarity

API ID: _invalid_parameter_noinfo_noreturn
String ID: __tmp_reference_source_
API String ID: 3668304517-685763994
Opcode ID: 4b6605fd47bba1bb09a389acc306dbe7be42c32f37c0ea54758f42be01817672
Instruction ID: 9f8f826d37884794bbd8fd9a787f85bc296acf10dcbec64de6c5828aad935f86
Opcode Fuzzy Hash: 4b6605fd47bba1bb09a389acc306dbe7be42c32f37c0ea54758f42be01817672
Instruction Fuzzy Hash: B9E28362A086C683EB64AB65D1403EEE761FF81744F80423ADABD1B7E5CF3CE4588751

Function 00007FF7FF3D4840 Relevance: 12.1, APIs: 5, Strings: 1, Instructions: 1624COMMON

Download Yara Rule

APIs

_invalid_parameter_noinfo_noreturn.LIBCMT ref: 00007FF7FF3D511E
_invalid_parameter_noinfo_noreturn.LIBCMT ref: 00007FF7FF3D5124
_invalid_parameter_noinfo_noreturn.LIBCMT ref: 00007FF7FF3D512A
_invalid_parameter_noinfo_noreturn.LIBCMT ref: 00007FF7FF3D5E16
_invalid_parameter_noinfo_noreturn.LIBCMT ref: 00007FF7FF3D5E1C

Strings

CMT, xrefs: 00007FF7FF3D59B2

Memory Dump Source

Source File: 00000000.00000002.1706197426.00007FF7FF3D1000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF7FF3D0000, based on PE: true

Associated: 00000000.00000002.1706180107.00007FF7FF3D0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1706234158.00007FF7FF418000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1706255447.00007FF7FF42B000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1706255447.00007FF7FF434000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1706289188.00007FF7FF43A000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1706289188.00007FF7FF43E000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff7ff3d0000_b2bXo6vmDm.jbxd

Similarity

API ID: _invalid_parameter_noinfo_noreturn
String ID: CMT
API String ID: 3668304517-2756464174
Opcode ID: edb1919e0c2ff88984d6b33c1a181f4caea46d6e624be7fd3ff6bd93c5b14ff2
Instruction ID: c7d68ff853869f463ea11fbf43c3b639aa49de0488f30eef4e7ec9c9fc72dbcd
Opcode Fuzzy Hash: edb1919e0c2ff88984d6b33c1a181f4caea46d6e624be7fd3ff6bd93c5b14ff2
Instruction Fuzzy Hash: 4CE2D422B086C687EB14AB75D5502FDA7A1EF44784F84023ADA7E4B6D6DF3CE454C3A0

Function 00007FF7FF3E40BC Relevance: 10.7, APIs: 7, Instructions: 153
fileCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

FindFirstFileW.KERNELBASE ref: 00007FF7FF3E410B
FindFirstFileW.KERNEL32 ref: 00007FF7FF3E415E
GetLastError.KERNEL32 ref: 00007FF7FF3E41AF
FindNextFileW.KERNEL32 ref: 00007FF7FF3E41D7
GetLastError.KERNEL32 ref: 00007FF7FF3E41E5
_invalid_parameter_noinfo_noreturn.LIBCMT ref: 00007FF7FF3E430F
_invalid_parameter_noinfo_noreturn.LIBCMT ref: 00007FF7FF3E4315

Memory Dump Source

Source File: 00000000.00000002.1706197426.00007FF7FF3D1000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF7FF3D0000, based on PE: true

Associated: 00000000.00000002.1706180107.00007FF7FF3D0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1706234158.00007FF7FF418000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1706255447.00007FF7FF42B000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1706255447.00007FF7FF434000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1706289188.00007FF7FF43A000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1706289188.00007FF7FF43E000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff7ff3d0000_b2bXo6vmDm.jbxd

Similarity

API ID: FileFind$ErrorFirstLast_invalid_parameter_noinfo_noreturn$Next
String ID:
API String ID: 474548282-0
Opcode ID: 3ee96c9aed3c94a745cca2dc02a0ae9902b722a9ff44476fc619c6065aa41b54
Instruction ID: 0eea9743853bda4f6749cd634b0e55ff04b5bf8abffb1ca72e239432cbbd288d
Opcode Fuzzy Hash: 3ee96c9aed3c94a745cca2dc02a0ae9902b722a9ff44476fc619c6065aa41b54
Instruction Fuzzy Hash: 9E61B562A08A8682EF10AB24E4803BDA361FF997B4F914335EABD076D9DF3CD544C751

Function 00007FF7FF3D5E24 Relevance: 7.6, APIs: 3, Strings: 1, Instructions: 586COMMON

Download Yara Rule

Strings

CMT, xrefs: 00007FF7FF3D59B2, 00007FF7FF3D675B

Memory Dump Source

Source File: 00000000.00000002.1706197426.00007FF7FF3D1000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF7FF3D0000, based on PE: true

Associated: 00000000.00000002.1706180107.00007FF7FF3D0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1706234158.00007FF7FF418000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1706255447.00007FF7FF42B000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1706255447.00007FF7FF434000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1706289188.00007FF7FF43A000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1706289188.00007FF7FF43E000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff7ff3d0000_b2bXo6vmDm.jbxd

Similarity

API ID:
String ID: CMT
API String ID: 0-2756464174
Opcode ID: bb8f32dfb39c41a2f4cffe25f113d86e3364d78267da2167cd0a984ef8db8d77
Instruction ID: 550b19312e3aed0f5f45d1c2370c6114ae484b18829fdc4cfc41ce0e83a48b18
Opcode Fuzzy Hash: bb8f32dfb39c41a2f4cffe25f113d86e3364d78267da2167cd0a984ef8db8d77
Instruction Fuzzy Hash: 5A429F22F086C697EB18AB74C1502FDA7A1AF51344F80023ADB7E5B6D6DF38E558C790

Function 00007FF7FF3E4928 Relevance: .1, Instructions: 136COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.1706197426.00007FF7FF3D1000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF7FF3D0000, based on PE: true

Associated: 00000000.00000002.1706180107.00007FF7FF3D0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1706234158.00007FF7FF418000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1706255447.00007FF7FF42B000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1706255447.00007FF7FF434000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1706289188.00007FF7FF43A000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1706289188.00007FF7FF43E000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff7ff3d0000_b2bXo6vmDm.jbxd

Similarity

API ID: Create$CriticalEventInitializeSectionSemaphore
String ID:
API String ID: 3340455307-0
Opcode ID: 351ceed20d24346c920f2b33a82c7c15764e1b5f9a2ac08ee0b3c21e451927ce
Instruction ID: c863246a46fd9607d4bc6bf399a025915e098e8f3e4c8bee3e115fe3c8d9502f
Opcode Fuzzy Hash: 351ceed20d24346c920f2b33a82c7c15764e1b5f9a2ac08ee0b3c21e451927ce
Instruction Fuzzy Hash: 85412822B156D687FB64EE11E4403A9A242BFC8784F954238DE3D0B7D4CE3CE44A8395

Function 00007FF7FF3EDFD0 Relevance: 143.9, APIs: 16, Strings: 66, Instructions: 440
libraryfileloaderCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

GetModuleHandleW.KERNEL32(?,?,?,00000000,?), ref: 00007FF7FF3EE018
GetProcAddress.KERNEL32(?,?,?,00000000,?), ref: 00007FF7FF3EE030
GetProcAddress.KERNEL32(?,?,?,00000000,?), ref: 00007FF7FF3EE05D
CreateFileW.KERNEL32 ref: 00007FF7FF3EE3F0
SetFilePointer.KERNEL32 ref: 00007FF7FF3EE40E
ReadFile.KERNEL32 ref: 00007FF7FF3EE436

Part of subcall function 00007FF7FF3EDFD0: GetSystemDirectoryW.KERNEL32 ref: 00007FF7FF3EDDDF

CompareStringW.KERNELBASE ref: 00007FF7FF3EE559
CloseHandle.KERNEL32 ref: 00007FF7FF3EE4F3

Part of subcall function 00007FF7FF3D1FA0: _invalid_parameter_noinfo_noreturn.LIBCMT ref: 00007FF7FF3D1FFB

Part of subcall function 00007FF7FF3E51A4: GetVersionExW.KERNEL32 ref: 00007FF7FF3E51D5

Part of subcall function 00007FF7FF3EDFD0: LoadLibraryW.KERNELBASE ref: 00007FF7FF3EDEFF
Part of subcall function 00007FF7FF3EDFD0: _invalid_parameter_noinfo_noreturn.LIBCMT ref: 00007FF7FF3EDFB5
Part of subcall function 00007FF7FF3EDFD0: _invalid_parameter_noinfo_noreturn.LIBCMT ref: 00007FF7FF3EDFBB
Part of subcall function 00007FF7FF3EDFD0: _invalid_parameter_noinfo_noreturn.LIBCMT ref: 00007FF7FF3EDFC1
Part of subcall function 00007FF7FF3EDFD0: _invalid_parameter_noinfo_noreturn.LIBCMT ref: 00007FF7FF3EDFC7

AllocConsole.KERNEL32(?,?,?,00000000,?), ref: 00007FF7FF3EE74B
GetCurrentProcessId.KERNEL32(?,?,?,00000000,?), ref: 00007FF7FF3EE755
AttachConsole.KERNEL32(?,?,?,00000000,?), ref: 00007FF7FF3EE75D
GetStdHandle.KERNEL32(?,?,?,00000000,?), ref: 00007FF7FF3EE780
WriteConsoleW.KERNEL32(?,?,?,00000000,?), ref: 00007FF7FF3EE799
Sleep.KERNEL32(?,?,?,00000000,?), ref: 00007FF7FF3EE7A4
FreeConsole.KERNEL32(?,?,?,00000000,?), ref: 00007FF7FF3EE7AA
ExitProcess.KERNEL32 ref: 00007FF7FF3EE7BB

Strings

cryptbase.dll, xrefs: 00007FF7FF3EE0C8
ws2help.dll, xrefs: 00007FF7FF3EE10A
atl.dll, xrefs: 00007FF7FF3EE136
WindowsCodecs.dll, xrefs: 00007FF7FF3EE213
sfc_os.dll, xrefs: 00007FF7FF3EE091
samlib.dll, xrefs: 00007FF7FF3EE2D7
browcli.dll, xrefs: 00007FF7FF3EE301
devrtl.dll, xrefs: 00007FF7FF3EE29F
mlang.dll, xrefs: 00007FF7FF3EE2BB
Please remove %s from %s folder. It is unsecure to run %s until it is done., xrefs: 00007FF7FF3EE73B
wintrust.dll, xrefs: 00007FF7FF3EE1B1
samcli.dll, xrefs: 00007FF7FF3EE2C9
cscapi.dll, xrefs: 00007FF7FF3EE22F
userenv.dll, xrefs: 00007FF7FF3EE15D
dfscli.dll, xrefs: 00007FF7FF3EE2F3
shell32.dll, xrefs: 00007FF7FF3EE1BF
dwmapi.dll, xrefs: 00007FF7FF3EE0BD, 00007FF7FF3EE661
msasn1.dll, xrefs: 00007FF7FF3EE195
ws2_32.dll, xrefs: 00007FF7FF3EE0FF
dsrole.dll, xrefs: 00007FF7FF3EE37F
iphlpapi.DLL, xrefs: 00007FF7FF3EE267
kernel32, xrefs: 00007FF7FF3EE011
dhcpcsvc6.dll, xrefs: 00007FF7FF3EE31D
wkscli.dll, xrefs: 00007FF7FF3EE2E5
peerdist.dll, xrefs: 00007FF7FF3EE38D
imageres.dll, xrefs: 00007FF7FF3EE24B
mpr.dll, xrefs: 00007FF7FF3EE291
version.dll, xrefs: 00007FF7FF3EE07B
linkinfo.dll, xrefs: 00007FF7FF3EE347
ieframe.dll, xrefs: 00007FF7FF3EE120
profapi.dll, xrefs: 00007FF7FF3EE205
crypt32.dll, xrefs: 00007FF7FF3EE187
cryptui.dll, xrefs: 00007FF7FF3EE1A3
comres.dll, xrefs: 00007FF7FF3EE0F4
RpcRtRemote.dll, xrefs: 00007FF7FF3EE363
dnsapi.DLL, xrefs: 00007FF7FF3EE259
netutils.dll, xrefs: 00007FF7FF3EE283
setupapi.dll, xrefs: 00007FF7FF3EE141
secur32.dll, xrefs: 00007FF7FF3EE1CD
DXGIDebug.dll, xrefs: 00007FF7FF3EE086, 00007FF7FF3EE5B6
rasadhlp.dll, xrefs: 00007FF7FF3EE30F
UXTheme.dll, xrefs: 00007FF7FF3EE0B2
rsaenh.dll, xrefs: 00007FF7FF3EE0A7
cryptsp.dll, xrefs: 00007FF7FF3EE355
aclui.dll, xrefs: 00007FF7FF3EE371
SetDefaultDllDirectories, xrefs: 00007FF7FF3EE053
XmlLite.dll, xrefs: 00007FF7FF3EE339
ntshrui.dll, xrefs: 00007FF7FF3EE12B
srvcli.dll, xrefs: 00007FF7FF3EE221
propsys.dll, xrefs: 00007FF7FF3EE2AD
clbcatq.dll, xrefs: 00007FF7FF3EE0E9
WINNSI.DLL, xrefs: 00007FF7FF3EE275
oleaccrc.dll, xrefs: 00007FF7FF3EE1E9
shdocvw.dll, xrefs: 00007FF7FF3EE179
slc.dll, xrefs: 00007FF7FF3EE23D
usp10.dll, xrefs: 00007FF7FF3EE0DE
dhcpcsvc.dll, xrefs: 00007FF7FF3EE32B
apphelp.dll, xrefs: 00007FF7FF3EE14F
lpk.dll, xrefs: 00007FF7FF3EE0D3
netapi32.dll, xrefs: 00007FF7FF3EE16B
ntmarta.dll, xrefs: 00007FF7FF3EE1F7
cabinet.dll, xrefs: 00007FF7FF3EE1DB
SetDllDirectoryW, xrefs: 00007FF7FF3EE026
uxtheme.dll, xrefs: 00007FF7FF3EE66D
psapi.dll, xrefs: 00007FF7FF3EE115
SSPICLI.DLL, xrefs: 00007FF7FF3EE09C

Memory Dump Source

Source File: 00000000.00000002.1706197426.00007FF7FF3D1000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF7FF3D0000, based on PE: true

Associated: 00000000.00000002.1706180107.00007FF7FF3D0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1706234158.00007FF7FF418000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1706255447.00007FF7FF42B000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1706255447.00007FF7FF434000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1706289188.00007FF7FF43A000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1706289188.00007FF7FF43E000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff7ff3d0000_b2bXo6vmDm.jbxd

Similarity

API ID: _invalid_parameter_noinfo_noreturn$Console$FileHandle$AddressProcProcess$AllocAttachCloseCompareCreateCurrentDirectoryExitFreeLibraryLoadModulePointerReadSleepStringSystemVersionWrite
String ID: DXGIDebug.dll$Please remove %s from %s folder. It is unsecure to run %s until it is done.$RpcRtRemote.dll$SSPICLI.DLL$SetDefaultDllDirectories$SetDllDirectoryW$UXTheme.dll$WINNSI.DLL$WindowsCodecs.dll$XmlLite.dll$aclui.dll$apphelp.dll$atl.dll$browcli.dll$cabinet.dll$clbcatq.dll$comres.dll$crypt32.dll$cryptbase.dll$cryptsp.dll$cryptui.dll$cscapi.dll$devrtl.dll$dfscli.dll$dhcpcsvc.dll$dhcpcsvc6.dll$dnsapi.DLL$dsrole.dll$dwmapi.dll$ieframe.dll$imageres.dll$iphlpapi.DLL$kernel32$linkinfo.dll$lpk.dll$mlang.dll$mpr.dll$msasn1.dll$netapi32.dll$netutils.dll$ntmarta.dll$ntshrui.dll$oleaccrc.dll$peerdist.dll$profapi.dll$propsys.dll$psapi.dll$rasadhlp.dll$rsaenh.dll$samcli.dll$samlib.dll$secur32.dll$setupapi.dll$sfc_os.dll$shdocvw.dll$shell32.dll$slc.dll$srvcli.dll$userenv.dll$usp10.dll$uxtheme.dll$version.dll$wintrust.dll$wkscli.dll$ws2_32.dll$ws2help.dll
API String ID: 1496594111-2013832382
Opcode ID: 34802ec4308bac0a765840d4883717106c0f60697b5732dd1b55c612bebcfb11
Instruction ID: 622759c2d9a1f6a913807b8dbc7bd389d1aa929bb9247f76a4ef725ea99d2dc9
Opcode Fuzzy Hash: 34802ec4308bac0a765840d4883717106c0f60697b5732dd1b55c612bebcfb11
Instruction Fuzzy Hash: 5132EC31A09FC295E712AF60E8402E9B3A4FF44368F900236DA7D567E5EF78D259C391

Function 00007FF7FF3E98DC Relevance: 25.2, APIs: 3, Strings: 11, Instructions: 702COMMON

Download Yara Rule

APIs

Part of subcall function 00007FF7FF3E8E58: Concurrency::cancel_current_task.LIBCPMT ref: 00007FF7FF3E8F8D

_snwprintf.LEGACY_STDIO_DEFINITIONS ref: 00007FF7FF3E9F75
_invalid_parameter_noinfo_noreturn.LIBCMT ref: 00007FF7FF3EA42F
_invalid_parameter_noinfo_noreturn.LIBCMT ref: 00007FF7FF3EA435

Part of subcall function 00007FF7FF3F0BBC: MultiByteToWideChar.KERNEL32(?,?,?,?,?,00007FF7FF3F0B44), ref: 00007FF7FF3F0BE9

Strings

DIRECTION, xrefs: 00007FF7FF3E9DE5
STRINGS, xrefs: 00007FF7FF3E9DC1
RTL, xrefs: 00007FF7FF3E9F2E
*messages***, xrefs: 00007FF7FF3E9C04
,, xrefs: 00007FF7FF3E9FAA
*messages***, xrefs: 00007FF7FF3E9BC6
$%s:, xrefs: 00007FF7FF3E9F50
@%s:, xrefs: 00007FF7FF3E9F57
MENU, xrefs: 00007FF7FF3E9DD9
, xrefs: 00007FF7FF3E9DF9
DIALOG, xrefs: 00007FF7FF3E9DCD

Memory Dump Source

Source File: 00000000.00000002.1706197426.00007FF7FF3D1000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF7FF3D0000, based on PE: true

Associated: 00000000.00000002.1706180107.00007FF7FF3D0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1706234158.00007FF7FF418000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1706255447.00007FF7FF42B000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1706255447.00007FF7FF434000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1706289188.00007FF7FF43A000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1706289188.00007FF7FF43E000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff7ff3d0000_b2bXo6vmDm.jbxd

Similarity

API ID: _invalid_parameter_noinfo_noreturn$ByteCharConcurrency::cancel_current_taskMultiWide_snwprintf
String ID: $ ,$$%s:$*messages***$*messages***$@%s:$DIALOG$DIRECTION$MENU$RTL$STRINGS
API String ID: 3629253777-3268106645
Opcode ID: 33335783f0649a6975a212281d78a023fb8133171aa8785b3cb81e5231241cdb
Instruction ID: f62c411745a74613fa44b96cf84d8950e6d61e731ec0f01d5f97c31f0cddb33f
Opcode Fuzzy Hash: 33335783f0649a6975a212281d78a023fb8133171aa8785b3cb81e5231241cdb
Instruction Fuzzy Hash: 0D628E22A196C286EB10EF24D4442FDA365FF50784FC04239DA7D4B6D9EF38E549C3A2

Function 00007FF7FF401900 Relevance: 22.9, APIs: 12, Strings: 1, Instructions: 195
libraryCOMMONLIBRARYCODE

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

Part of subcall function 00007FF7FF401558: DloadProtectSection.DELAYIMP ref: 00007FF7FF4015C9

RaiseException.KERNEL32 ref: 00007FF7FF4019A7
DloadReleaseSectionWriteAccess.DELAYIMP ref: 00007FF7FF401993

Part of subcall function 00007FF7FF401868: DloadProtectSection.DELAYIMP ref: 00007FF7FF4018C7

LoadLibraryExA.KERNELBASE ref: 00007FF7FF401A46
GetLastError.KERNEL32 ref: 00007FF7FF401A54
DloadReleaseSectionWriteAccess.DELAYIMP ref: 00007FF7FF401A86
RaiseException.KERNEL32 ref: 00007FF7FF401A9A

Strings

H, xrefs: 00007FF7FF401974

Memory Dump Source

Source File: 00000000.00000002.1706197426.00007FF7FF3D1000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF7FF3D0000, based on PE: true

Associated: 00000000.00000002.1706180107.00007FF7FF3D0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1706234158.00007FF7FF418000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1706255447.00007FF7FF42B000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1706255447.00007FF7FF434000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1706289188.00007FF7FF43A000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1706289188.00007FF7FF43E000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff7ff3d0000_b2bXo6vmDm.jbxd

Similarity

API ID: DloadSection$AccessExceptionProtectRaiseReleaseWrite$ErrorLastLibraryLoad
String ID: H
API String ID: 3432403771-2852464175
Opcode ID: cf3fc932a6b7fb7fc9ef8320b4dd67bfc8d7ec91281715f792326570f1d4a57f
Instruction ID: 82160ae28de56cc2652f47f50f637b8d67574c376e349eb50a200868f52583b7
Opcode Fuzzy Hash: cf3fc932a6b7fb7fc9ef8320b4dd67bfc8d7ec91281715f792326570f1d4a57f
Instruction Fuzzy Hash: 51917C22A04B918AEB11EF61D8406FCB3B0FB48B98F944635DE2D07794EF38E545C7A0

Function 00007FF7FF3FF4E0 Relevance: 21.3, APIs: 8, Strings: 4, Instructions: 285
windowCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

ShellExecuteExW.SHELL32 ref: 00007FF7FF3FF747
IsWindowVisible.USER32 ref: 00007FF7FF3FF777
ShowWindow.USER32 ref: 00007FF7FF3FF786
WaitForInputIdle.USER32 ref: 00007FF7FF3FF797
GetExitCodeProcess.KERNEL32 ref: 00007FF7FF3FF7BD
CloseHandle.KERNEL32 ref: 00007FF7FF3FF7E7
ShowWindow.USER32 ref: 00007FF7FF3FF83F
_invalid_parameter_noinfo_noreturn.LIBCMT ref: 00007FF7FF3FF8FB

Strings

.inf, xrefs: 00007FF7FF3FF675
Install, xrefs: 00007FF7FF3FF684
p, xrefs: 00007FF7FF3FF529
.exe, xrefs: 00007FF7FF3FF7F2

Memory Dump Source

Source File: 00000000.00000002.1706197426.00007FF7FF3D1000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF7FF3D0000, based on PE: true

Associated: 00000000.00000002.1706180107.00007FF7FF3D0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1706234158.00007FF7FF418000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1706255447.00007FF7FF42B000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1706255447.00007FF7FF434000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1706289188.00007FF7FF43A000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1706289188.00007FF7FF43E000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff7ff3d0000_b2bXo6vmDm.jbxd

Similarity

API ID: Window$Show$CloseCodeExecuteExitHandleIdleInputProcessShellVisibleWait_invalid_parameter_noinfo_noreturn
String ID: .exe$.inf$Install$p
API String ID: 148627002-3607691742
Opcode ID: 186da1f03ade3c00f17eba80b6c095a00a75595338a7e0a1f02d2270103e4a56
Instruction ID: b6b2bcc81c40929d049f950aa4a8c5d8804e5161492499daa82616bb8ff7a320
Opcode Fuzzy Hash: 186da1f03ade3c00f17eba80b6c095a00a75595338a7e0a1f02d2270103e4a56
Instruction Fuzzy Hash: 40C18F22F1868286FF04AB25D9402FDA361AF85B84F844339CE7D4B6E5DF3CE45593A4

Function 00007FF7FF3FF0A4 Relevance: 16.6, APIs: 11, Instructions: 102
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

Part of subcall function 00007FF7FF3FAE1C: PeekMessageW.USER32 ref: 00007FF7FF3FAE32
Part of subcall function 00007FF7FF3FAE1C: GetMessageW.USER32 ref: 00007FF7FF3FAE49
Part of subcall function 00007FF7FF3FAE1C: IsDialogMessageW.USER32 ref: 00007FF7FF3FAE60
Part of subcall function 00007FF7FF3FAE1C: TranslateMessage.USER32 ref: 00007FF7FF3FAE6F
Part of subcall function 00007FF7FF3FAE1C: DispatchMessageW.USER32 ref: 00007FF7FF3FAE7A

GetDlgItem.USER32 ref: 00007FF7FF3FF0E3
ShowWindow.USER32 ref: 00007FF7FF3FF109
IsDlgButtonChecked.USER32 ref: 00007FF7FF3FF11E
IsDlgButtonChecked.USER32 ref: 00007FF7FF3FF136
IsDlgButtonChecked.USER32 ref: 00007FF7FF3FF157
IsDlgButtonChecked.USER32 ref: 00007FF7FF3FF173
IsDlgButtonChecked.USER32 ref: 00007FF7FF3FF1B6
IsDlgButtonChecked.USER32 ref: 00007FF7FF3FF1D4
IsDlgButtonChecked.USER32 ref: 00007FF7FF3FF1E8
IsDlgButtonChecked.USER32 ref: 00007FF7FF3FF212
IsDlgButtonChecked.USER32 ref: 00007FF7FF3FF22A

Memory Dump Source

Source File: 00000000.00000002.1706197426.00007FF7FF3D1000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF7FF3D0000, based on PE: true

Associated: 00000000.00000002.1706180107.00007FF7FF3D0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1706234158.00007FF7FF418000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1706255447.00007FF7FF42B000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1706255447.00007FF7FF434000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1706289188.00007FF7FF43A000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1706289188.00007FF7FF43E000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff7ff3d0000_b2bXo6vmDm.jbxd

Similarity

API ID: ButtonChecked$Message$DialogDispatchItemPeekShowTranslateWindow
String ID:
API String ID: 4119318379-0
Opcode ID: 6d17268858d6b6aed380ad60cc2cf8b16547cb3a0c40a3112c59011326a33119
Instruction ID: ade0b8b484543918e1a4508e4f87ada79187205ebc73f4aaaac10de3aa604fcb
Opcode Fuzzy Hash: 6d17268858d6b6aed380ad60cc2cf8b16547cb3a0c40a3112c59011326a33119
Instruction Fuzzy Hash: 30419031B14A8286F710AF61E810BFA6360FB85BD8F841235DD3A07BD5CE7DD44997A4

Function 00007FF7FF3DEF10 Relevance: 11.0, APIs: 7, Instructions: 453COMMON

Download Yara Rule

APIs

_invalid_parameter_noinfo_noreturn.LIBCMT ref: 00007FF7FF3DF542
_invalid_parameter_noinfo_noreturn.LIBCMT ref: 00007FF7FF3DF548
_invalid_parameter_noinfo_noreturn.LIBCMT ref: 00007FF7FF3DF554
_invalid_parameter_noinfo_noreturn.LIBCMT ref: 00007FF7FF3DF55A
_invalid_parameter_noinfo_noreturn.LIBCMT ref: 00007FF7FF3DF560
_invalid_parameter_noinfo_noreturn.LIBCMT ref: 00007FF7FF3DF56C
_invalid_parameter_noinfo_noreturn.LIBCMT ref: 00007FF7FF3DF572

Memory Dump Source

Source File: 00000000.00000002.1706197426.00007FF7FF3D1000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF7FF3D0000, based on PE: true

Associated: 00000000.00000002.1706180107.00007FF7FF3D0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1706234158.00007FF7FF418000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1706255447.00007FF7FF42B000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1706255447.00007FF7FF434000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1706289188.00007FF7FF43A000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1706289188.00007FF7FF43E000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff7ff3d0000_b2bXo6vmDm.jbxd

Similarity

API ID: _invalid_parameter_noinfo_noreturn
String ID:
API String ID: 3668304517-0
Opcode ID: 6469fcd7a18d79184505e1ddd466699231e2121c09bb10067de1f33c8494aa65
Instruction ID: ca8208e74760e00d29fe681a7ff9b0c4fa73f59eab8d1b149859384a0849b36b
Opcode Fuzzy Hash: 6469fcd7a18d79184505e1ddd466699231e2121c09bb10067de1f33c8494aa65
Instruction Fuzzy Hash: 97129262B1878686EB10EB75D4842FDA371AF45798F80033ADA7C1BAD5DF38D589C390

Function 00007FF7FF3E24C0 Relevance: 9.2, APIs: 6, Instructions: 164
filetimeCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

CreateFileW.KERNELBASE ref: 00007FF7FF3E259B
GetLastError.KERNEL32 ref: 00007FF7FF3E25AE
CreateFileW.KERNEL32 ref: 00007FF7FF3E260E
GetLastError.KERNEL32 ref: 00007FF7FF3E2617
SetFileTime.KERNEL32 ref: 00007FF7FF3E26C9
_invalid_parameter_noinfo_noreturn.LIBCMT ref: 00007FF7FF3E2736

Memory Dump Source

Source File: 00000000.00000002.1706197426.00007FF7FF3D1000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF7FF3D0000, based on PE: true

Associated: 00000000.00000002.1706180107.00007FF7FF3D0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1706234158.00007FF7FF418000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1706255447.00007FF7FF42B000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1706255447.00007FF7FF434000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1706289188.00007FF7FF43A000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1706289188.00007FF7FF43E000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff7ff3d0000_b2bXo6vmDm.jbxd

Similarity

API ID: File$CreateErrorLast$Time_invalid_parameter_noinfo_noreturn
String ID:
API String ID: 3536497005-0
Opcode ID: 731a06aeb1aeb45fbab96b045eb79c55c759261894fecd14d272f4e3d7f6f85d
Instruction ID: 692f00f27b90b8ea9576a51db9db80c503c04d633076c32e4eebc83d2af995ac
Opcode Fuzzy Hash: 731a06aeb1aeb45fbab96b045eb79c55c759261894fecd14d272f4e3d7f6f85d
Instruction Fuzzy Hash: 1A61E562E1868186E7209B29E5003BEA7A1BF857B8F501338DFB907AD5CF7DD058C794

Function 00007FF7FF3FFD0C Relevance: 8.8, APIs: 3, Strings: 2, Instructions: 76
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

SetEnvironmentVariableW.KERNEL32 ref: 00007FF7FF3FFD43
SetEnvironmentVariableW.KERNELBASE ref: 00007FF7FF3FFDBC
_invalid_parameter_noinfo_noreturn.LIBCMT ref: 00007FF7FF3FFE1B

Strings

sfxpar, xrefs: 00007FF7FF3FFDB5
sfxcmd, xrefs: 00007FF7FF3FFD3C

Memory Dump Source

Source File: 00000000.00000002.1706197426.00007FF7FF3D1000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF7FF3D0000, based on PE: true

Associated: 00000000.00000002.1706180107.00007FF7FF3D0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1706234158.00007FF7FF418000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1706255447.00007FF7FF42B000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1706255447.00007FF7FF434000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1706289188.00007FF7FF43A000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1706289188.00007FF7FF43E000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff7ff3d0000_b2bXo6vmDm.jbxd

Similarity

API ID: EnvironmentVariable$_invalid_parameter_noinfo_noreturn
String ID: sfxcmd$sfxpar
API String ID: 3540648995-3493335439
Opcode ID: 48e58e823320ee2e30a8ba7f247afa82eb81b269a21fe23b9d6641b37ea74fe4
Instruction ID: 9eae55e69d58fdb448d5c5c7df15cdce80abe6c51d4be4719060ea2468e78e31
Opcode Fuzzy Hash: 48e58e823320ee2e30a8ba7f247afa82eb81b269a21fe23b9d6641b37ea74fe4
Instruction Fuzzy Hash: 77316E32A14A8685EF04AB75E4841FCB371EF44B98F940335DE7D1B6E9DE38D145C2A4

Function 00007FF7FF3FB014 Relevance: 8.8, APIs: 4, Strings: 1, Instructions: 54
windowCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

LoadBitmapW.USER32 ref: 00007FF7FF3FB02A
GetObjectW.GDI32 ref: 00007FF7FF3FB05B
DeleteObject.GDI32 ref: 00007FF7FF3FB095
DeleteObject.GDI32 ref: 00007FF7FF3FB0C5

Part of subcall function 00007FF7FF3F8624: FindResourceW.KERNELBASE ref: 00007FF7FF3F863D
Part of subcall function 00007FF7FF3F8624: SizeofResource.KERNEL32 ref: 00007FF7FF3F8659
Part of subcall function 00007FF7FF3F8624: LoadResource.KERNEL32 ref: 00007FF7FF3F8673
Part of subcall function 00007FF7FF3F8624: LockResource.KERNEL32 ref: 00007FF7FF3F8685
Part of subcall function 00007FF7FF3F8624: GlobalAlloc.KERNELBASE ref: 00007FF7FF3F86A6
Part of subcall function 00007FF7FF3F8624: GlobalLock.KERNEL32 ref: 00007FF7FF3F86BB
Part of subcall function 00007FF7FF3F8624: GdipAlloc.GDIPLUS ref: 00007FF7FF3F86FE
Part of subcall function 00007FF7FF3F8624: GdipCreateHBITMAPFromBitmap.GDIPLUS ref: 00007FF7FF3F8769
Part of subcall function 00007FF7FF3F8624: GlobalUnlock.KERNEL32 ref: 00007FF7FF3F878C
Part of subcall function 00007FF7FF3F8624: GlobalFree.KERNEL32 ref: 00007FF7FF3F8795

Strings

], xrefs: 00007FF7FF3FB063

Memory Dump Source

Source File: 00000000.00000002.1706197426.00007FF7FF3D1000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF7FF3D0000, based on PE: true

Associated: 00000000.00000002.1706180107.00007FF7FF3D0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1706234158.00007FF7FF418000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1706255447.00007FF7FF42B000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1706255447.00007FF7FF434000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1706289188.00007FF7FF43A000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1706289188.00007FF7FF43E000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff7ff3d0000_b2bXo6vmDm.jbxd

Similarity

API ID: GlobalResource$Object$AllocBitmapDeleteGdipLoadLock$CreateFindFreeFromSizeofUnlock
String ID: ]
API String ID: 2347093688-3352871620
Opcode ID: 2f79d63664e457f963bfbd157e1c525b341384e02eb8e860e1f42d2dee528bbf
Instruction ID: 485a0b16a48f03e8cdb7bbadffeba20c30fced80998e8c402680460e17665e96
Opcode Fuzzy Hash: 2f79d63664e457f963bfbd157e1c525b341384e02eb8e860e1f42d2dee528bbf
Instruction Fuzzy Hash: AA115761B096C343EF58B71196543F9D291AF84BC4F880238D97D0BBD5DF2CE8059691

Function 00007FF7FF3FFE24 Relevance: 7.5, APIs: 5, Instructions: 29
windowsynchronizationCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

PeekMessageW.USER32 ref: 00007FF7FF3FFE41
GetMessageW.USER32 ref: 00007FF7FF3FFE58
TranslateMessage.USER32 ref: 00007FF7FF3FFE63
DispatchMessageW.USER32 ref: 00007FF7FF3FFE6E
WaitForSingleObject.KERNEL32 ref: 00007FF7FF3FFE7C

Memory Dump Source

Source File: 00000000.00000002.1706197426.00007FF7FF3D1000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF7FF3D0000, based on PE: true

Associated: 00000000.00000002.1706180107.00007FF7FF3D0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1706234158.00007FF7FF418000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1706255447.00007FF7FF42B000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1706255447.00007FF7FF434000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1706289188.00007FF7FF43A000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1706289188.00007FF7FF43E000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff7ff3d0000_b2bXo6vmDm.jbxd

Similarity

API ID: Message$DispatchObjectPeekSingleTranslateWait
String ID:
API String ID: 3621893840-0
Opcode ID: eb57a341668d454e4e6cd52f39bb1811463ddcab187ea95c48cb89abc8d18535
Instruction ID: 7489824b4b264e6507a7fa042d1615b349c2c7405c0ec2dad154e2e5e87252ce
Opcode Fuzzy Hash: eb57a341668d454e4e6cd52f39bb1811463ddcab187ea95c48cb89abc8d18535
Instruction Fuzzy Hash: 9DF04F22B2848683FB10A730E494BB6A211FFE4B45FC41230E97F459D4DE2CD149D760

Function 00007FF7FF3FAE1C Relevance: 7.5, APIs: 5, Instructions: 27
windowCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

PeekMessageW.USER32 ref: 00007FF7FF3FAE32
GetMessageW.USER32 ref: 00007FF7FF3FAE49
IsDialogMessageW.USER32 ref: 00007FF7FF3FAE60
TranslateMessage.USER32 ref: 00007FF7FF3FAE6F
DispatchMessageW.USER32 ref: 00007FF7FF3FAE7A

Memory Dump Source

Source File: 00000000.00000002.1706197426.00007FF7FF3D1000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF7FF3D0000, based on PE: true

Associated: 00000000.00000002.1706180107.00007FF7FF3D0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1706234158.00007FF7FF418000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1706255447.00007FF7FF42B000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1706255447.00007FF7FF434000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1706289188.00007FF7FF43A000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1706289188.00007FF7FF43E000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff7ff3d0000_b2bXo6vmDm.jbxd

Similarity

API ID: Message$DialogDispatchPeekTranslate
String ID:
API String ID: 1266772231-0
Opcode ID: 8f901ab8bb575df3ccfb48a5cb3294f091b017f84468599a2020223c8e70b7dc
Instruction ID: 8784774e75fae8255c23a0938fa9338fa97ff04431a3925e03483afa96eb2930
Opcode Fuzzy Hash: 8f901ab8bb575df3ccfb48a5cb3294f091b017f84468599a2020223c8e70b7dc
Instruction Fuzzy Hash: BCF03C21B3958282FF50AB20E895BB6A361BFE0744FC05231E57E419D4DF2CD108EB50

Function 00007FF7FF3F91E8 Relevance: 7.0, APIs: 3, Strings: 1, Instructions: 33
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

GetClassNameW.USER32 ref: 00007FF7FF3F9211
SHAutoComplete.SHLWAPI ref: 00007FF7FF3F9255

Part of subcall function 00007FF7FF3F13C4: CompareStringW.KERNEL32 ref: 00007FF7FF3F13E3

FindWindowExW.USER32 ref: 00007FF7FF3F923F

Strings

EDIT, xrefs: 00007FF7FF3F921B, 00007FF7FF3F9233

Memory Dump Source

Source File: 00000000.00000002.1706197426.00007FF7FF3D1000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF7FF3D0000, based on PE: true

Associated: 00000000.00000002.1706180107.00007FF7FF3D0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1706234158.00007FF7FF418000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1706255447.00007FF7FF42B000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1706255447.00007FF7FF434000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1706289188.00007FF7FF43A000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1706289188.00007FF7FF43E000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff7ff3d0000_b2bXo6vmDm.jbxd

Similarity

API ID: AutoClassCompareCompleteFindNameStringWindow
String ID: EDIT
API String ID: 4243998846-3080729518
Opcode ID: 5198dd27efd6ef2cfe81d4e1a42d30dc263c523227a297f5f4c02164b2b5e029
Instruction ID: 8c46a11da263c8696fb1fd32679a66d0b3bc6d64909caaac45707d06d3f1220f
Opcode Fuzzy Hash: 5198dd27efd6ef2cfe81d4e1a42d30dc263c523227a297f5f4c02164b2b5e029
Instruction Fuzzy Hash: B9016221B19AC782FF24AF21AC107F5A390BF98784FC40235C97D4A6D9DF2CE14D96A0

Function 00007FF7FF3E2CE0 Relevance: 6.1, APIs: 4, Instructions: 136
fileCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

GetStdHandle.KERNEL32(00007FF7FF3E8C9A), ref: 00007FF7FF3E2D22
WriteFile.KERNEL32 ref: 00007FF7FF3E2D6C
WriteFile.KERNELBASE ref: 00007FF7FF3E2D9A

Memory Dump Source

Source File: 00000000.00000002.1706197426.00007FF7FF3D1000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF7FF3D0000, based on PE: true

Associated: 00000000.00000002.1706180107.00007FF7FF3D0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1706234158.00007FF7FF418000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1706255447.00007FF7FF42B000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1706255447.00007FF7FF434000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1706289188.00007FF7FF43A000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1706289188.00007FF7FF43E000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff7ff3d0000_b2bXo6vmDm.jbxd

Similarity

API ID: FileWrite$Handle
String ID:
API String ID: 4209713984-0
Opcode ID: c0878563cb540de980db5307815f43949119fc8f7ca07e724854b0feeef95fd0
Instruction ID: 35c66fe1201b7d9d86c1421b7fc026d6323c8270fc1a33371877927a7164ce2e
Opcode Fuzzy Hash: c0878563cb540de980db5307815f43949119fc8f7ca07e724854b0feeef95fd0
Instruction Fuzzy Hash: 9751E562E189C682FB11AB25D4447FAA310FF84794F940339DA7D4AAD4DF7CE489C3A1

Function 00007FF7FF4003E0 Relevance: 6.1, APIs: 4, Instructions: 123COMMON

Download Yara Rule

APIs

SetDlgItemTextW.USER32 ref: 00007FF7FF400556
_invalid_parameter_noinfo_noreturn.LIBCMT ref: 00007FF7FF4005C1
_invalid_parameter_noinfo_noreturn.LIBCMT ref: 00007FF7FF4005C7
_invalid_parameter_noinfo_noreturn.LIBCMT ref: 00007FF7FF4005CD

Memory Dump Source

Source File: 00000000.00000002.1706197426.00007FF7FF3D1000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF7FF3D0000, based on PE: true

Associated: 00000000.00000002.1706180107.00007FF7FF3D0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1706234158.00007FF7FF418000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1706255447.00007FF7FF42B000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1706255447.00007FF7FF434000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1706289188.00007FF7FF43A000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1706289188.00007FF7FF43E000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff7ff3d0000_b2bXo6vmDm.jbxd

Similarity

API ID: _invalid_parameter_noinfo_noreturn$ItemText
String ID:
API String ID: 3750147219-0
Opcode ID: 35df2a362a464365dc6398d19e6275f0ea1a8323423e9e04c1d6fcc9330b5770
Instruction ID: 3f33fd235b57c4e61820139c82a5af1ea00012e430debe1b5cd495783be9c69a
Opcode Fuzzy Hash: 35df2a362a464365dc6398d19e6275f0ea1a8323423e9e04c1d6fcc9330b5770
Instruction Fuzzy Hash: 2A519462F14A9285FB00EBA8D8442FDA362AF45794FD00735DA3C16BD9DF6CD540C3A4

Function 00007FF7FF3E3684 Relevance: 6.1, APIs: 4, Instructions: 94COMMON

Download Yara Rule

APIs

CreateDirectoryW.KERNELBASE(?,?,?,?,?,?,?,00000000,?,00007FF7FF3E309D), ref: 00007FF7FF3E36CE
CreateDirectoryW.KERNEL32 ref: 00007FF7FF3E3733
GetLastError.KERNEL32(?,?,?,?,?,?,?,00000000,?,00007FF7FF3E309D), ref: 00007FF7FF3E3791
_invalid_parameter_noinfo_noreturn.LIBCMT ref: 00007FF7FF3E37CE

Memory Dump Source

Source File: 00000000.00000002.1706197426.00007FF7FF3D1000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF7FF3D0000, based on PE: true

Associated: 00000000.00000002.1706180107.00007FF7FF3D0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1706234158.00007FF7FF418000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1706255447.00007FF7FF42B000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1706255447.00007FF7FF434000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1706289188.00007FF7FF43A000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1706289188.00007FF7FF43E000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff7ff3d0000_b2bXo6vmDm.jbxd

Similarity

API ID: CreateDirectory$ErrorLast_invalid_parameter_noinfo_noreturn
String ID:
API String ID: 2359106489-0
Opcode ID: 623c7cdad90b96bec9a950f5b6d0d98be22cc1c56ccb42caf94d3fb3334d27cf
Instruction ID: 6cdc5d981f1f4449ac21bcfec2fbe36420db48870fefcfd4fc18a65e725c466c
Opcode Fuzzy Hash: 623c7cdad90b96bec9a950f5b6d0d98be22cc1c56ccb42caf94d3fb3334d27cf
Instruction Fuzzy Hash: 4E31D462A0CAC242EB20AB25D4443BDE751BF887A0F900335EEBD5A6D4CF3CD5598291

Function 00007FF7FF402D6C Relevance: 6.1, APIs: 4, Instructions: 94COMMON

Download Yara Rule

APIs

__scrt_initialize_crt.LIBCMT ref: 00007FF7FF402D7B

Part of subcall function 00007FF7FF4027FC: __scrt_dllmain_crt_thread_attach.LIBCMT ref: 00007FF7FF40281E

__scrt_acquire_startup_lock.LIBCMT ref: 00007FF7FF402D90
__scrt_release_startup_lock.LIBCMT ref: 00007FF7FF402DFE
__scrt_get_show_window_mode.LIBCMT ref: 00007FF7FF402E51

Memory Dump Source

Source File: 00000000.00000002.1706197426.00007FF7FF3D1000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF7FF3D0000, based on PE: true

Associated: 00000000.00000002.1706180107.00007FF7FF3D0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1706234158.00007FF7FF418000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1706255447.00007FF7FF42B000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1706255447.00007FF7FF434000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1706289188.00007FF7FF43A000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1706289188.00007FF7FF43E000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff7ff3d0000_b2bXo6vmDm.jbxd

Similarity

API ID: __scrt_acquire_startup_lock__scrt_dllmain_crt_thread_attach__scrt_get_show_window_mode__scrt_initialize_crt__scrt_release_startup_lock
String ID:
API String ID: 1452418845-0
Opcode ID: f380b52e8f95e6a0f24ce785192d8cb773bc143ddf3d62aee805abe4fb8ed354
Instruction ID: c3ddd306e21e303525d6f066161e2b5f9ee8c79c00598386f3f94ac0dcb99eb5
Opcode Fuzzy Hash: f380b52e8f95e6a0f24ce785192d8cb773bc143ddf3d62aee805abe4fb8ed354
Instruction Fuzzy Hash: 87314B21A481C381FB55BB6494113FAEA91AF41384FD40738DA3E4B6D3DE6CAA4492F4

Function 00007FF7FF3E2320 Relevance: 6.1, APIs: 4, Instructions: 58fileCOMMON

Download Yara Rule

APIs

GetStdHandle.KERNEL32(?,?,?,?,00000000,00007FF7FF3E2927,?,00100000,?,00000001,00000000,00000000,?,00007FF7FF3E14C1), ref: 00007FF7FF3E2348
ReadFile.KERNELBASE ref: 00007FF7FF3E2367
GetLastError.KERNEL32 ref: 00007FF7FF3E239B
GetLastError.KERNEL32 ref: 00007FF7FF3E23BA

Memory Dump Source

Source File: 00000000.00000002.1706197426.00007FF7FF3D1000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF7FF3D0000, based on PE: true

Associated: 00000000.00000002.1706180107.00007FF7FF3D0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1706234158.00007FF7FF418000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1706255447.00007FF7FF42B000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1706255447.00007FF7FF434000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1706289188.00007FF7FF43A000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1706289188.00007FF7FF43E000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff7ff3d0000_b2bXo6vmDm.jbxd

Similarity

API ID: ErrorLast$FileHandleRead
String ID:
API String ID: 2244327787-0
Opcode ID: 5dece825d5be91adec6864fa12bb564f4e3b5809c08bfde6ef0babe01e3581d0
Instruction ID: dffcf2f5f80dc3c95a1363f6b71528ab938f872677f335b8cbd527754d2e54dc
Opcode Fuzzy Hash: 5dece825d5be91adec6864fa12bb564f4e3b5809c08bfde6ef0babe01e3581d0
Instruction Fuzzy Hash: 80217421E0C98682EB606B11E4003B9E750BF55B94F944678DA7D4E6C4CEBCD8898BB2

Function 00007FF7FF3EE948 Relevance: 6.0, APIs: 4, Instructions: 31COMMON

Download Yara Rule

APIs

Part of subcall function 00007FF7FF3EECD8: ResetEvent.KERNEL32 ref: 00007FF7FF3EECF1
Part of subcall function 00007FF7FF3EECD8: ReleaseSemaphore.KERNEL32 ref: 00007FF7FF3EED07

ReleaseSemaphore.KERNEL32 ref: 00007FF7FF3EE974
FindCloseChangeNotification.KERNELBASE ref: 00007FF7FF3EE993
DeleteCriticalSection.KERNEL32 ref: 00007FF7FF3EE9AA
CloseHandle.KERNEL32 ref: 00007FF7FF3EE9B7

Part of subcall function 00007FF7FF3EEA5C: WaitForSingleObject.KERNEL32(?,?,?,?,?,?,?,?,00007FF7FF3EE95F,?,?,?,00007FF7FF3E463A,?,?,?), ref: 00007FF7FF3EEA63
Part of subcall function 00007FF7FF3EEA5C: GetLastError.KERNEL32(?,?,?,?,?,?,?,?,00007FF7FF3EE95F,?,?,?,00007FF7FF3E463A,?,?,?), ref: 00007FF7FF3EEA6E

Memory Dump Source

Source File: 00000000.00000002.1706197426.00007FF7FF3D1000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF7FF3D0000, based on PE: true

Associated: 00000000.00000002.1706180107.00007FF7FF3D0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1706234158.00007FF7FF418000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1706255447.00007FF7FF42B000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1706255447.00007FF7FF434000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1706289188.00007FF7FF43A000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1706289188.00007FF7FF43E000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff7ff3d0000_b2bXo6vmDm.jbxd

Similarity

API ID: CloseReleaseSemaphore$ChangeCriticalDeleteErrorEventFindHandleLastNotificationObjectResetSectionSingleWait
String ID:
API String ID: 2143293610-0
Opcode ID: 7c4c69b688bb09167c3d8ec6f4195a818a409db0987586a56ae23aa503e7e0cd
Instruction ID: 0258346718aff6ad5ec1243ee63be425d588e1315e67c88cb45943f93640ba6d
Opcode Fuzzy Hash: 7c4c69b688bb09167c3d8ec6f4195a818a409db0987586a56ae23aa503e7e0cd
Instruction Fuzzy Hash: 80015B32A14E81D3E749AB21E5442A9B320FF84B90F400234DA7D072A1CF79E4B8C794

Function 00007FF7FF3EEAA4 Relevance: 5.3, APIs: 2, Strings: 1, Instructions: 42threadCOMMON

Download Yara Rule

APIs

CreateThread.KERNELBASE ref: 00007FF7FF3EEAE0
SetThreadPriority.KERNEL32 ref: 00007FF7FF3EEB36

Strings

CreateThread failed, xrefs: 00007FF7FF3EEAEE

Memory Dump Source

Source File: 00000000.00000002.1706197426.00007FF7FF3D1000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF7FF3D0000, based on PE: true

Associated: 00000000.00000002.1706180107.00007FF7FF3D0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1706234158.00007FF7FF418000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1706255447.00007FF7FF42B000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1706255447.00007FF7FF434000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1706289188.00007FF7FF43A000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1706289188.00007FF7FF43E000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff7ff3d0000_b2bXo6vmDm.jbxd

Similarity

API ID: Thread$CreatePriority
String ID: CreateThread failed
API String ID: 2610526550-3849766595
Opcode ID: cf4f3858e1c5421656891f758a667cd72a6f2059ba57d4f8d940dbc9b5e0f540
Instruction ID: f35622271887d6fee7a783c5d17097ac3f13b9eae606e486557ea2deb6450283
Opcode Fuzzy Hash: cf4f3858e1c5421656891f758a667cd72a6f2059ba57d4f8d940dbc9b5e0f540
Instruction Fuzzy Hash: 99112131A08A8282E715AB14E8412FAF360FF84794F944335DA7D066A9DF7CE585C7A0

Function 00007FF7FF3F946C Relevance: 5.3, APIs: 2, Strings: 1, Instructions: 26comCOMMON

Download Yara Rule

APIs

Part of subcall function 00007FF7FF3EDFD0: GetSystemDirectoryW.KERNEL32 ref: 00007FF7FF3EDDDF

OleInitialize.OLE32 ref: 00007FF7FF3F9486
SHGetMalloc.SHELL32 ref: 00007FF7FF3F94D4

Strings

riched20.dll, xrefs: 00007FF7FF3F9475

Memory Dump Source

Source File: 00000000.00000002.1706197426.00007FF7FF3D1000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF7FF3D0000, based on PE: true

Associated: 00000000.00000002.1706180107.00007FF7FF3D0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1706234158.00007FF7FF418000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1706255447.00007FF7FF42B000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1706255447.00007FF7FF434000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1706289188.00007FF7FF43A000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1706289188.00007FF7FF43E000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff7ff3d0000_b2bXo6vmDm.jbxd

Similarity

API ID: DirectoryInitializeMallocSystem
String ID: riched20.dll
API String ID: 174490985-3360196438
Opcode ID: b1936b3f38021c99ecd6522b050f6163774a90ef7a51b133bb98bdb322c125e4
Instruction ID: e90da834e0dbf407591e953ff8e5b698f23675c101903a13afeb0296559e1ecd
Opcode Fuzzy Hash: b1936b3f38021c99ecd6522b050f6163774a90ef7a51b133bb98bdb322c125e4
Instruction Fuzzy Hash: BFF03C71619A8182EB01AF20E4142FAB7A0FF88754F800235EAAD466A5DFBCD15DDB60

Function 00007FF7FF3F095C Relevance: 4.7, APIs: 3, Instructions: 152windowCOMMON

Download Yara Rule

APIs

Part of subcall function 00007FF7FF3F853C: GlobalMemoryStatusEx.KERNEL32 ref: 00007FF7FF3F856C

Part of subcall function 00007FF7FF3EAAE0: LoadStringW.USER32 ref: 00007FF7FF3EAB67
Part of subcall function 00007FF7FF3EAAE0: LoadStringW.USER32 ref: 00007FF7FF3EAB80

Part of subcall function 00007FF7FF3D1FA0: _invalid_parameter_noinfo_noreturn.LIBCMT ref: 00007FF7FF3D1FFB

Part of subcall function 00007FF7FF3D129C: Concurrency::cancel_current_task.LIBCPMT ref: 00007FF7FF3D1396

_invalid_parameter_noinfo_noreturn.LIBCMT ref: 00007FF7FF4001BB
_invalid_parameter_noinfo_noreturn.LIBCMT ref: 00007FF7FF4001C1
SendDlgItemMessageW.USER32 ref: 00007FF7FF4001F2

Memory Dump Source

Source File: 00000000.00000002.1706197426.00007FF7FF3D1000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF7FF3D0000, based on PE: true

Associated: 00000000.00000002.1706180107.00007FF7FF3D0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1706234158.00007FF7FF418000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1706255447.00007FF7FF42B000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1706255447.00007FF7FF434000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1706289188.00007FF7FF43A000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1706289188.00007FF7FF43E000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff7ff3d0000_b2bXo6vmDm.jbxd

Similarity

API ID: _invalid_parameter_noinfo_noreturn$LoadString$Concurrency::cancel_current_taskGlobalItemMemoryMessageSendStatus
String ID:
API String ID: 3106221260-0
Opcode ID: 45fd903f6b2aec8c71a10246635352740a8ca63c8d8b2cd055e955d931041677
Instruction ID: fd9a094c5ed63bc1961027f5ec1a93dbb706cd644294832265a1c4eb8643ffb8
Opcode Fuzzy Hash: 45fd903f6b2aec8c71a10246635352740a8ca63c8d8b2cd055e955d931041677
Instruction Fuzzy Hash: D751A162F0468646FB10BBA5D4412FDA322AF85B84F80433ADE3D5B7DADE2CD545C3A0

Function 00007FF7FF3F9F4C Relevance: 4.6, APIs: 3, Instructions: 146COMMON

Download Yara Rule

APIs

SHFileOperationW.SHELL32 ref: 00007FF7FF3FA118
_invalid_parameter_noinfo_noreturn.LIBCMT ref: 00007FF7FF3FA184
_invalid_parameter_noinfo_noreturn.LIBCMT ref: 00007FF7FF3FA18A

Memory Dump Source

Source File: 00000000.00000002.1706197426.00007FF7FF3D1000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF7FF3D0000, based on PE: true

Associated: 00000000.00000002.1706180107.00007FF7FF3D0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1706234158.00007FF7FF418000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1706255447.00007FF7FF42B000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1706255447.00007FF7FF434000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1706289188.00007FF7FF43A000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1706289188.00007FF7FF43E000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff7ff3d0000_b2bXo6vmDm.jbxd

Similarity

API ID: _invalid_parameter_noinfo_noreturn$FileOperation
String ID:
API String ID: 2032784890-0
Opcode ID: 7d878e36dc04d7e2045931aea44641ead5352885b8565c3bb440a05356bafa6e
Instruction ID: 1acc7f6c88e6910b6110dc7098dc8c4c2cdc154669e025fef80a3e81faf85b12
Opcode Fuzzy Hash: 7d878e36dc04d7e2045931aea44641ead5352885b8565c3bb440a05356bafa6e
Instruction Fuzzy Hash: 9D617C62A18B828AEB00EF64D8942FC7361EF44798F804636DA7C17BE9DF38D555D390

Function 00007FF7FF3E2134 Relevance: 4.6, APIs: 3, Instructions: 114fileCOMMON

Download Yara Rule

APIs

CreateFileW.KERNELBASE ref: 00007FF7FF3E21CF
CreateFileW.KERNEL32 ref: 00007FF7FF3E223C
_invalid_parameter_noinfo_noreturn.LIBCMT ref: 00007FF7FF3E22D8

Memory Dump Source

Source File: 00000000.00000002.1706197426.00007FF7FF3D1000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF7FF3D0000, based on PE: true

Associated: 00000000.00000002.1706180107.00007FF7FF3D0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1706234158.00007FF7FF418000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1706255447.00007FF7FF42B000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1706255447.00007FF7FF434000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1706289188.00007FF7FF43A000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1706289188.00007FF7FF43E000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff7ff3d0000_b2bXo6vmDm.jbxd

Similarity

API ID: CreateFile$_invalid_parameter_noinfo_noreturn
String ID:
API String ID: 2272807158-0
Opcode ID: fadebd8b54f10f1951c29d3e9f7df512abc916790a43b14df76b265dc45515ba
Instruction ID: 35f0acc4122ae353440043a0c6b83855b8b75ebf13f290a32a6c58be3bc92f0a
Opcode Fuzzy Hash: fadebd8b54f10f1951c29d3e9f7df512abc916790a43b14df76b265dc45515ba
Instruction Fuzzy Hash: 7141C272A18AC682EB14AB15E4443A9A3A0FF847B4F904338DFBD07AD5CF7CE4948755

Function 00007FF7FF3D23F8 Relevance: 4.6, APIs: 3, Instructions: 73COMMON

Download Yara Rule

APIs

GetWindowTextLengthW.USER32 ref: 00007FF7FF3D243E
GetWindowTextW.USER32 ref: 00007FF7FF3D2476
_invalid_parameter_noinfo_noreturn.LIBCMT ref: 00007FF7FF3D2505

Memory Dump Source

Source File: 00000000.00000002.1706197426.00007FF7FF3D1000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF7FF3D0000, based on PE: true

Associated: 00000000.00000002.1706180107.00007FF7FF3D0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1706234158.00007FF7FF418000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1706255447.00007FF7FF42B000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1706255447.00007FF7FF434000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1706289188.00007FF7FF43A000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1706289188.00007FF7FF43E000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff7ff3d0000_b2bXo6vmDm.jbxd

Similarity

API ID: TextWindow$Length_invalid_parameter_noinfo_noreturn
String ID:
API String ID: 2176759853-0
Opcode ID: 107cbe78643896cd277503af9d79c84134f19e12336bfdef765791961383781f
Instruction ID: bdec17c203f1bfa8979df4b4e05703a074171e949fc9845e238affa7b306d04c
Opcode Fuzzy Hash: 107cbe78643896cd277503af9d79c84134f19e12336bfdef765791961383781f
Instruction Fuzzy Hash: 18218162A18BC682EB10AB65A4401BEA364FB89BD0F544336EFBD03BD5CF7CD1508780

Function 00007FF7FF3F1F94 Relevance: 4.6, APIs: 3, Instructions: 68COMMON

Download Yara Rule

APIs

std::bad_alloc::bad_alloc.LIBCMT ref: 00007FF7FF3F205B
std::bad_alloc::bad_alloc.LIBCMT ref: 00007FF7FF3F2077
std::bad_alloc::bad_alloc.LIBCMT ref: 00007FF7FF3F2093

Memory Dump Source

Source File: 00000000.00000002.1706197426.00007FF7FF3D1000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF7FF3D0000, based on PE: true

Associated: 00000000.00000002.1706180107.00007FF7FF3D0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1706234158.00007FF7FF418000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1706255447.00007FF7FF42B000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1706255447.00007FF7FF434000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1706289188.00007FF7FF43A000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1706289188.00007FF7FF43E000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff7ff3d0000_b2bXo6vmDm.jbxd

Similarity

API ID: std::bad_alloc::bad_alloc
String ID:
API String ID: 1875163511-0
Opcode ID: 3184854c0548f34c7a90d4258170e6c5642c10e35e78a0ba32f0d1228a2c41a2
Instruction ID: 3998553c64efe9d84081bb45438872ecb6d072c09d0e0f77c591ed220261f600
Opcode Fuzzy Hash: 3184854c0548f34c7a90d4258170e6c5642c10e35e78a0ba32f0d1228a2c41a2
Instruction Fuzzy Hash: 18315E13A096C792EB28B714E4443F9A3A0FF40B84F944635E67C1A6E9DFACE946C351

Function 00007FF7FF3E3D34 Relevance: 4.6, APIs: 3, Instructions: 62COMMON

Download Yara Rule

APIs

SetFileAttributesW.KERNELBASE(?,?,?,?,?,?,00000000,00000001,?,00007FF7FF3F07E1), ref: 00007FF7FF3E3D5E
SetFileAttributesW.KERNEL32 ref: 00007FF7FF3E3DB0
_invalid_parameter_noinfo_noreturn.LIBCMT ref: 00007FF7FF3E3E1A

Memory Dump Source

Source File: 00000000.00000002.1706197426.00007FF7FF3D1000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF7FF3D0000, based on PE: true

Associated: 00000000.00000002.1706180107.00007FF7FF3D0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1706234158.00007FF7FF418000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1706255447.00007FF7FF42B000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1706255447.00007FF7FF434000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1706289188.00007FF7FF43A000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1706289188.00007FF7FF43E000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff7ff3d0000_b2bXo6vmDm.jbxd

Similarity

API ID: AttributesFile$_invalid_parameter_noinfo_noreturn
String ID:
API String ID: 1203560049-0
Opcode ID: 9ad1da1d281fb88a90e37ecd930f681ad4649b1953909ec7c8adb17a28908e15
Instruction ID: 05e9d2b2c4aa18419f930a27c5cc10a4999aacf012a697a2efb6753f9726db09
Opcode Fuzzy Hash: 9ad1da1d281fb88a90e37ecd930f681ad4649b1953909ec7c8adb17a28908e15
Instruction Fuzzy Hash: 80210822A18AC182EB20AB25E4553FAA360FF84794F904334EABD466D4DF3CD544C690

Function 00007FF7FF3E31BC Relevance: 4.6, APIs: 3, Instructions: 59fileCOMMON

Download Yara Rule

APIs

DeleteFileW.KERNELBASE(?,?,?,?,?,?,?,?,00000000,00007FF7FF3F0822), ref: 00007FF7FF3E31E7
DeleteFileW.KERNEL32 ref: 00007FF7FF3E3237
_invalid_parameter_noinfo_noreturn.LIBCMT ref: 00007FF7FF3E32A1

Memory Dump Source

Source File: 00000000.00000002.1706197426.00007FF7FF3D1000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF7FF3D0000, based on PE: true

Associated: 00000000.00000002.1706180107.00007FF7FF3D0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1706234158.00007FF7FF418000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1706255447.00007FF7FF42B000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1706255447.00007FF7FF434000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1706289188.00007FF7FF43A000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1706289188.00007FF7FF43E000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff7ff3d0000_b2bXo6vmDm.jbxd

Similarity

API ID: DeleteFile$_invalid_parameter_noinfo_noreturn
String ID:
API String ID: 3118131910-0
Opcode ID: 72c673f2880adfe6ea93f0d9f4cbebf29628e435fcdd813aa7a5852a82454db7
Instruction ID: 971a60646839f925e9ecb1a4b718bedd5bd392a0dc73ce37128f0137cd0932fe
Opcode Fuzzy Hash: 72c673f2880adfe6ea93f0d9f4cbebf29628e435fcdd813aa7a5852a82454db7
Instruction Fuzzy Hash: 5D21B632A18BC182EB10AB25E4442BEB760FF85B94F901334EAFD56AD5DF3CD144C690

Function 00007FF7FF3E32BC Relevance: 4.6, APIs: 3, Instructions: 57COMMON

Download Yara Rule

APIs

GetFileAttributesW.KERNELBASE(?,?,?,?,00007FF7FF3EE5B1,?,?,?,00000000,?), ref: 00007FF7FF3E32E7
GetFileAttributesW.KERNELBASE ref: 00007FF7FF3E3334
_invalid_parameter_noinfo_noreturn.LIBCMT ref: 00007FF7FF3E3399

Memory Dump Source

Source File: 00000000.00000002.1706197426.00007FF7FF3D1000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF7FF3D0000, based on PE: true

Associated: 00000000.00000002.1706180107.00007FF7FF3D0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1706234158.00007FF7FF418000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1706255447.00007FF7FF42B000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1706255447.00007FF7FF434000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1706289188.00007FF7FF43A000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1706289188.00007FF7FF43E000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff7ff3d0000_b2bXo6vmDm.jbxd

Similarity

API ID: AttributesFile$_invalid_parameter_noinfo_noreturn
String ID:
API String ID: 1203560049-0
Opcode ID: 40ad9405655d088623e5613f9ff1dd24c057f9c22428089c7716efbf5db7ae43
Instruction ID: 6592de5a9d1fd8753c66ea18fc5da152df2700a51b4b0cc35cc468ac3770c544
Opcode Fuzzy Hash: 40ad9405655d088623e5613f9ff1dd24c057f9c22428089c7716efbf5db7ae43
Instruction Fuzzy Hash: 5721A732A18AC182EB10AB29E44427AA761FF987A4F900335EABD47BD5DF3CD544C694

Function 00007FF7FF40BF64 Relevance: 4.5, APIs: 3, Instructions: 19COMMON

Download Yara Rule

APIs

GetCurrentProcess.KERNEL32(?,?,?,00007FF7FF40BF48), ref: 00007FF7FF40BF8C
TerminateProcess.KERNEL32(?,?,?,00007FF7FF40BF48), ref: 00007FF7FF40BF97
ExitProcess.KERNEL32 ref: 00007FF7FF40BFA6

Memory Dump Source

Source File: 00000000.00000002.1706197426.00007FF7FF3D1000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF7FF3D0000, based on PE: true

Associated: 00000000.00000002.1706180107.00007FF7FF3D0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1706234158.00007FF7FF418000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1706255447.00007FF7FF42B000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1706255447.00007FF7FF434000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1706289188.00007FF7FF43A000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1706289188.00007FF7FF43E000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff7ff3d0000_b2bXo6vmDm.jbxd

Similarity

API ID: Process$CurrentExitTerminate
String ID:
API String ID: 1703294689-0
Opcode ID: 44b3a526fe0d15710854bc957cc7a82f9edee4cc7420f0560de4bec5ea2a17a0
Instruction ID: 4f34b601c47b82b37c8f6076f76d643b246a78c1475c5a1c6a47c80ed4f0f45a
Opcode Fuzzy Hash: 44b3a526fe0d15710854bc957cc7a82f9edee4cc7420f0560de4bec5ea2a17a0
Instruction Fuzzy Hash: DBE04F24B0878946FB547B3198953F9A352AF88751F644638D83F833E6DE3DA40987A4

Function 00007FF7FF3DF578 Relevance: 3.2, APIs: 2, Instructions: 193COMMON

Download Yara Rule

APIs

_invalid_parameter_noinfo_noreturn.LIBCMT ref: 00007FF7FF3DF895
_invalid_parameter_noinfo_noreturn.LIBCMT ref: 00007FF7FF3DF89B

Part of subcall function 00007FF7FF3E3EC8: FindClose.KERNELBASE(?,?,00000000,00007FF7FF3F0811), ref: 00007FF7FF3E3EFD

Memory Dump Source

Source File: 00000000.00000002.1706197426.00007FF7FF3D1000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF7FF3D0000, based on PE: true

Associated: 00000000.00000002.1706180107.00007FF7FF3D0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1706234158.00007FF7FF418000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1706255447.00007FF7FF42B000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1706255447.00007FF7FF434000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1706289188.00007FF7FF43A000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1706289188.00007FF7FF43E000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff7ff3d0000_b2bXo6vmDm.jbxd

Similarity

API ID: _invalid_parameter_noinfo_noreturn$CloseFind
String ID:
API String ID: 3587649625-0
Opcode ID: 910080437137de208837c13716e92e19399b5e0a0f32405d6b5b9450238948ca
Instruction ID: b0a939c4e3c84289f8f06297a4201ab67ab9876aff058d565267332fab308c3c
Opcode Fuzzy Hash: 910080437137de208837c13716e92e19399b5e0a0f32405d6b5b9450238948ca
Instruction Fuzzy Hash: 6791A272A187C595EB10EB74D4802EDA361FF84798F80423AEA7C0BAE9DF78D545C390

Function 00007FF7FF3D3904 Relevance: 3.1, APIs: 2, Instructions: 124COMMON

Download Yara Rule

APIs

_invalid_parameter_noinfo_noreturn.LIBCMT ref: 00007FF7FF3D3AB3
_invalid_parameter_noinfo_noreturn.LIBCMT ref: 00007FF7FF3D3AB9

Memory Dump Source

Source File: 00000000.00000002.1706197426.00007FF7FF3D1000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF7FF3D0000, based on PE: true

Associated: 00000000.00000002.1706180107.00007FF7FF3D0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1706234158.00007FF7FF418000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1706255447.00007FF7FF42B000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1706255447.00007FF7FF434000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1706289188.00007FF7FF43A000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1706289188.00007FF7FF43E000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff7ff3d0000_b2bXo6vmDm.jbxd

Similarity

API ID: _invalid_parameter_noinfo_noreturn
String ID:
API String ID: 3668304517-0
Opcode ID: 201b90534166b8da7461634ac6a816a56932a3fdfe7bfd1a1f820e126a9c965b
Instruction ID: 244596e2843e4e8eacb96fd1761cec5aadca0a00149491114bcc462d4262fb08
Opcode Fuzzy Hash: 201b90534166b8da7461634ac6a816a56932a3fdfe7bfd1a1f820e126a9c965b
Instruction Fuzzy Hash: CF41C862F1469686FB04EBB5D4402FDA720AF44BD8F94133ADE3D2BAD9DE38D4418390

Function 00007FF7FF3E2778 Relevance: 3.1, APIs: 2, Instructions: 100COMMON

Download Yara Rule

APIs

SetFilePointer.KERNELBASE(00000000,00000002,?,00000F99,?,00007FF7FF3E274D), ref: 00007FF7FF3E28A9
GetLastError.KERNEL32(?,00007FF7FF3E274D), ref: 00007FF7FF3E28B8

Memory Dump Source

Source File: 00000000.00000002.1706197426.00007FF7FF3D1000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF7FF3D0000, based on PE: true

Associated: 00000000.00000002.1706180107.00007FF7FF3D0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1706234158.00007FF7FF418000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1706255447.00007FF7FF42B000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1706255447.00007FF7FF434000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1706289188.00007FF7FF43A000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1706289188.00007FF7FF43E000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff7ff3d0000_b2bXo6vmDm.jbxd

Similarity

API ID: ErrorFileLastPointer
String ID:
API String ID: 2976181284-0
Opcode ID: 043a82e8aff847b2e282b78885e55c7214a93c585b530bdf19c19deffc600893
Instruction ID: d705e639320b0dc2a3dd941387d17947048ec267ec1f953f20f440efb8d8677f
Opcode Fuzzy Hash: 043a82e8aff847b2e282b78885e55c7214a93c585b530bdf19c19deffc600893
Instruction Fuzzy Hash: 6031B222E19A9682EB606A2AD9407F9A250AF04BD4F940235DE3D0B7D0DEACE54582A1

Function 00007FF7FF3D22BC Relevance: 3.1, APIs: 2, Instructions: 83COMMON

Download Yara Rule

APIs

GetDlgItem.USER32 ref: 00007FF7FF3D22F1
_invalid_parameter_noinfo_noreturn.LIBCMT ref: 00007FF7FF3D23F0

Memory Dump Source

Source File: 00000000.00000002.1706197426.00007FF7FF3D1000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF7FF3D0000, based on PE: true

Associated: 00000000.00000002.1706180107.00007FF7FF3D0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1706234158.00007FF7FF418000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1706255447.00007FF7FF42B000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1706255447.00007FF7FF434000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1706289188.00007FF7FF43A000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1706289188.00007FF7FF43E000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff7ff3d0000_b2bXo6vmDm.jbxd

Similarity

API ID: Item_invalid_parameter_noinfo_noreturn
String ID:
API String ID: 1746051919-0
Opcode ID: 5a2890223aea6d88e53338121990f25a14a9249d0429ebf34ef8f54134bab86e
Instruction ID: 0fd25095095ec523d06f4b687967809ebb92665cad50fd41ffac46d7d649ea82
Opcode Fuzzy Hash: 5a2890223aea6d88e53338121990f25a14a9249d0429ebf34ef8f54134bab86e
Instruction Fuzzy Hash: EC318021A1878642EB10AB15E4453BEB360EF84790F944336EABC0BBD5DF7CE1408794

Function 00007FF7FF3E2AD0 Relevance: 3.1, APIs: 2, Instructions: 76timeCOMMON

Download Yara Rule

APIs

FlushFileBuffers.KERNEL32 ref: 00007FF7FF3E2AFE
SetFileTime.KERNELBASE ref: 00007FF7FF3E2B9B

Memory Dump Source

Source File: 00000000.00000002.1706197426.00007FF7FF3D1000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF7FF3D0000, based on PE: true

Associated: 00000000.00000002.1706180107.00007FF7FF3D0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1706234158.00007FF7FF418000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1706255447.00007FF7FF42B000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1706255447.00007FF7FF434000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1706289188.00007FF7FF43A000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1706289188.00007FF7FF43E000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff7ff3d0000_b2bXo6vmDm.jbxd

Similarity

API ID: File$BuffersFlushTime
String ID:
API String ID: 1392018926-0
Opcode ID: 1f7bfd0f82637a6abdcd08aef8b442a865f6f50d97ba3a1fa7ef62b0e093425a
Instruction ID: 5557e4d03f8c171f64ac839e60fd633c1e48c55c1d2e10c86890f3781820f186
Opcode Fuzzy Hash: 1f7bfd0f82637a6abdcd08aef8b442a865f6f50d97ba3a1fa7ef62b0e093425a
Instruction Fuzzy Hash: 3021E522E0DBC796EB62AE11D4007F6A790AF01794F954235DE7C0A2D5EEBCD48EC291

Function 00007FF7FF3EAAE0 Relevance: 3.1, APIs: 2, Instructions: 52COMMON

Download Yara Rule

APIs

LoadStringW.USER32 ref: 00007FF7FF3EAB67
LoadStringW.USER32 ref: 00007FF7FF3EAB80

Memory Dump Source

Source File: 00000000.00000002.1706197426.00007FF7FF3D1000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF7FF3D0000, based on PE: true

Associated: 00000000.00000002.1706180107.00007FF7FF3D0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1706234158.00007FF7FF418000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1706255447.00007FF7FF42B000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1706255447.00007FF7FF434000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1706289188.00007FF7FF43A000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1706289188.00007FF7FF43E000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff7ff3d0000_b2bXo6vmDm.jbxd

Similarity

API ID: LoadString
String ID:
API String ID: 2948472770-0
Opcode ID: efc1550bd5bba1d5ac9face2304fa075ed5e4cb94ffc19493764f318ca00d951
Instruction ID: 617fbda9a6391846dc3cddb2b3b057aee0f9161d18ccd4cdf8444be52bee76f5
Opcode Fuzzy Hash: efc1550bd5bba1d5ac9face2304fa075ed5e4cb94ffc19493764f318ca00d951
Instruction Fuzzy Hash: 48117F71B0968186EB00AF1AF8401F8B7A1BF94FC0B944639CE3D937A5DE7CE545A394

Function 00007FF7FF3E2BB0 Relevance: 3.0, APIs: 2, Instructions: 47COMMON

Download Yara Rule

APIs

SetFilePointer.KERNELBASE ref: 00007FF7FF3E2C11
GetLastError.KERNEL32 ref: 00007FF7FF3E2C1E

Memory Dump Source

Source File: 00000000.00000002.1706197426.00007FF7FF3D1000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF7FF3D0000, based on PE: true

Associated: 00000000.00000002.1706180107.00007FF7FF3D0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1706234158.00007FF7FF418000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1706255447.00007FF7FF42B000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1706255447.00007FF7FF434000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1706289188.00007FF7FF43A000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1706289188.00007FF7FF43E000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff7ff3d0000_b2bXo6vmDm.jbxd

Similarity

API ID: ErrorFileLastPointer
String ID:
API String ID: 2976181284-0
Opcode ID: 5eda2cbf1ce6837a88d649c872729f31e823bc49095d59e5e9b193bf7b9166cd
Instruction ID: 709b44762bbc7fffa3cf024c7e121bef8d8118ec3df1e11cfc8da80432f6496d
Opcode Fuzzy Hash: 5eda2cbf1ce6837a88d649c872729f31e823bc49095d59e5e9b193bf7b9166cd
Instruction Fuzzy Hash: 6811A521E086C682EB50AB25E8403B9B260FF45BB8F940335DA7D0A2E4CF7CD586C351

Function 00007FF7FF3D255C Relevance: 3.0, APIs: 2, Instructions: 37COMMON

Download Yara Rule

APIs

Part of subcall function 00007FF7FF3EA4AC: swprintf.LEGACY_STDIO_DEFINITIONS ref: 00007FF7FF3EA504
Part of subcall function 00007FF7FF3EA4AC: SetDlgItemTextW.USER32 ref: 00007FF7FF3EA573
Part of subcall function 00007FF7FF3EA4AC: GetWindowRect.USER32 ref: 00007FF7FF3EA5AD
Part of subcall function 00007FF7FF3EA4AC: GetClientRect.USER32 ref: 00007FF7FF3EA5BB

GetDlgItem.USER32 ref: 00007FF7FF3D25AC
SetDlgItemTextW.USER32 ref: 00007FF7FF3D25C8

Memory Dump Source

Source File: 00000000.00000002.1706197426.00007FF7FF3D1000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF7FF3D0000, based on PE: true

Associated: 00000000.00000002.1706180107.00007FF7FF3D0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1706234158.00007FF7FF418000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1706255447.00007FF7FF42B000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1706255447.00007FF7FF434000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1706289188.00007FF7FF43A000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1706289188.00007FF7FF43E000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff7ff3d0000_b2bXo6vmDm.jbxd

Similarity

API ID: Item$RectText$ClientWindowswprintf
String ID:
API String ID: 402765569-0
Opcode ID: ad94589889145b650e3461eb84003e845283bd92425fc2a9221c8100a4e27e71
Instruction ID: 774e78448e3a7609a81b02c08c43b8d1f1e40854d4f1d4bf32b6579eba4aadc3
Opcode Fuzzy Hash: ad94589889145b650e3461eb84003e845283bd92425fc2a9221c8100a4e27e71
Instruction Fuzzy Hash: DA015214A092CE42FF557B52A4546F9D7526F85784F880239D87D0A3D9EE6CE48893A0

Function 00007FF7FF3EEB58 Relevance: 3.0, APIs: 2, Instructions: 23COMMON

Download Yara Rule

APIs

GetCurrentProcess.KERNEL32(?,?,?,?,00007FF7FF3EEBAD,?,?,?,?,00007FF7FF3E5752,?,?,?,00007FF7FF3E56DE), ref: 00007FF7FF3EEB5C
GetProcessAffinityMask.KERNEL32 ref: 00007FF7FF3EEB6F

Memory Dump Source

Source File: 00000000.00000002.1706197426.00007FF7FF3D1000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF7FF3D0000, based on PE: true

Associated: 00000000.00000002.1706180107.00007FF7FF3D0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1706234158.00007FF7FF418000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1706255447.00007FF7FF42B000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1706255447.00007FF7FF434000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1706289188.00007FF7FF43A000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1706289188.00007FF7FF43E000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff7ff3d0000_b2bXo6vmDm.jbxd

Similarity

API ID: Process$AffinityCurrentMask
String ID:
API String ID: 1231390398-0
Opcode ID: 444071b75e142e51b736d9fa504759652bc9944b894df1f8101a797a07211085
Instruction ID: 19d6befe4d7adbba8e0a4add7a7224ff1424782bf834921b9518855a3b4c691f
Opcode Fuzzy Hash: 444071b75e142e51b736d9fa504759652bc9944b894df1f8101a797a07211085
Instruction Fuzzy Hash: A9E02B61F289C643DF099F55D4405E9B392BFC8B40BC48135D61B83654DE2CE1498B40

Function 00007FF7FF4021D0 Relevance: 3.0, APIs: 2, Instructions: 21COMMON

Download Yara Rule

APIs

Concurrency::cancel_current_task.LIBCPMT ref: 00007FF7FF402200

Part of subcall function 00007FF7FF402F7C: std::bad_alloc::bad_alloc.LIBCMT ref: 00007FF7FF402F85

Concurrency::cancel_current_task.LIBCPMT ref: 00007FF7FF402206

Memory Dump Source

Source File: 00000000.00000002.1706197426.00007FF7FF3D1000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF7FF3D0000, based on PE: true

Associated: 00000000.00000002.1706180107.00007FF7FF3D0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1706234158.00007FF7FF418000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1706255447.00007FF7FF42B000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1706255447.00007FF7FF434000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1706289188.00007FF7FF43A000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1706289188.00007FF7FF43E000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff7ff3d0000_b2bXo6vmDm.jbxd

Similarity

API ID: Concurrency::cancel_current_task$std::bad_alloc::bad_alloc
String ID:
API String ID: 1173176844-0
Opcode ID: 14867973fed18b2c44dc58e1bcd5f94848bfca26dcf41195b9c376eff134a452
Instruction ID: a7423d1f15e432bc2128f3ff7cd5d1d61654e4878fdc5d1448936197082b8616
Opcode Fuzzy Hash: 14867973fed18b2c44dc58e1bcd5f94848bfca26dcf41195b9c376eff134a452
Instruction Fuzzy Hash: 61E0EC40E1D18B42FF5832B118251F484545F19370FDC1734DA3E486D2AD9CA6A191F0

Function 00007FF7FF40D90C Relevance: 3.0, APIs: 2, Instructions: 19threadCOMMONLIBRARYCODE

Download Yara Rule

APIs

RtlRestoreThreadPreferredUILanguages.NTDLL ref: 00007FF7FF40D922
GetLastError.KERNEL32 ref: 00007FF7FF40D934

Memory Dump Source

Source File: 00000000.00000002.1706197426.00007FF7FF3D1000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF7FF3D0000, based on PE: true

Associated: 00000000.00000002.1706180107.00007FF7FF3D0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1706234158.00007FF7FF418000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1706255447.00007FF7FF42B000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1706255447.00007FF7FF434000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1706289188.00007FF7FF43A000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1706289188.00007FF7FF43E000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff7ff3d0000_b2bXo6vmDm.jbxd

Similarity

API ID: ErrorLanguagesLastPreferredRestoreThread
String ID:
API String ID: 588628887-0
Opcode ID: 7829e02dcbd74b51c5e196648e5aad52518f68633834b7095f7e5950a32ae739
Instruction ID: d7c7a050d3339cec3bf145eca2dc3a246eefa7e59287e1e20cb2265b5a91f599
Opcode Fuzzy Hash: 7829e02dcbd74b51c5e196648e5aad52518f68633834b7095f7e5950a32ae739
Instruction Fuzzy Hash: 0BE08C60E0958382FF09BBF298051F892A15F94BA0B840230C93D863D2FE2CA48986A0

Function 00007FF7FF3D33E4 Relevance: 1.8, APIs: 1, Instructions: 328COMMON

Download Yara Rule

APIs

_invalid_parameter_noinfo_noreturn.LIBCMT ref: 00007FF7FF3D388C

Memory Dump Source

Source File: 00000000.00000002.1706197426.00007FF7FF3D1000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF7FF3D0000, based on PE: true

Associated: 00000000.00000002.1706180107.00007FF7FF3D0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1706234158.00007FF7FF418000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1706255447.00007FF7FF42B000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1706255447.00007FF7FF434000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1706289188.00007FF7FF43A000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1706289188.00007FF7FF43E000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff7ff3d0000_b2bXo6vmDm.jbxd

Similarity

API ID: _invalid_parameter_noinfo_noreturn
String ID:
API String ID: 3668304517-0
Opcode ID: f8f0656341598af6003fffa7e335d44fb7c45440e0a5f27bfaa7809f138a3a24
Instruction ID: c0683776e9b9eac6bee64d96a449562f49031cf879e7b19806af656105b63b64
Opcode Fuzzy Hash: f8f0656341598af6003fffa7e335d44fb7c45440e0a5f27bfaa7809f138a3a24
Instruction Fuzzy Hash: 65D19B62B086C957FB649B2595402FDE7A1FF05B84F84013ACA7D1B7E1CF38E8648390

Function 00007FF7FF3E5294 Relevance: 1.7, APIs: 1, Instructions: 198COMMON

Download Yara Rule

APIs

_invalid_parameter_noinfo_noreturn.LIBCMT ref: 00007FF7FF3E551B

Part of subcall function 00007FF7FF3F13F4: CompareStringW.KERNEL32 ref: 00007FF7FF3F145A

Memory Dump Source

Source File: 00000000.00000002.1706197426.00007FF7FF3D1000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF7FF3D0000, based on PE: true

Associated: 00000000.00000002.1706180107.00007FF7FF3D0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1706234158.00007FF7FF418000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1706255447.00007FF7FF42B000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1706255447.00007FF7FF434000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1706289188.00007FF7FF43A000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1706289188.00007FF7FF43E000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff7ff3d0000_b2bXo6vmDm.jbxd

Similarity

API ID: CompareString_invalid_parameter_noinfo_noreturn
String ID:
API String ID: 1017591355-0
Opcode ID: a143f18b4ccf410723d5b55495dd87be6177e3dd9b35435d6782b563dee17ef9
Instruction ID: 93c149aec074b7f2719bc647fc717d6d37359a1db0a7e1031f1317fa7e958018
Opcode Fuzzy Hash: a143f18b4ccf410723d5b55495dd87be6177e3dd9b35435d6782b563dee17ef9
Instruction Fuzzy Hash: F061D511A1C5C783EBA4BA15C4243FAD291AF50FD0F944339DE7D8E6C5EE6CE44886B2

Function 00007FF7FF3F1870 Relevance: 1.7, APIs: 1, Instructions: 172COMMON

Download Yara Rule

APIs

Part of subcall function 00007FF7FF3EE948: ReleaseSemaphore.KERNEL32 ref: 00007FF7FF3EE974
Part of subcall function 00007FF7FF3EE948: FindCloseChangeNotification.KERNELBASE ref: 00007FF7FF3EE993
Part of subcall function 00007FF7FF3EE948: DeleteCriticalSection.KERNEL32 ref: 00007FF7FF3EE9AA
Part of subcall function 00007FF7FF3EE948: CloseHandle.KERNEL32 ref: 00007FF7FF3EE9B7

_invalid_parameter_noinfo_noreturn.LIBCMT ref: 00007FF7FF3F1ACB

Memory Dump Source

Source File: 00000000.00000002.1706197426.00007FF7FF3D1000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF7FF3D0000, based on PE: true

Associated: 00000000.00000002.1706180107.00007FF7FF3D0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1706234158.00007FF7FF418000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1706255447.00007FF7FF42B000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1706255447.00007FF7FF434000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1706289188.00007FF7FF43A000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1706289188.00007FF7FF43E000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff7ff3d0000_b2bXo6vmDm.jbxd

Similarity

API ID: Close$ChangeCriticalDeleteFindHandleNotificationReleaseSectionSemaphore_invalid_parameter_noinfo_noreturn
String ID:
API String ID: 1624603282-0
Opcode ID: 42cb38b371fe5272928b18923788695436b3197e4abbe647344de4d448ce9491
Instruction ID: eb067481d5144e01d9d485fac5cdb3921b288c2afa7d83be4a575f2baa38096b
Opcode Fuzzy Hash: 42cb38b371fe5272928b18923788695436b3197e4abbe647344de4d448ce9491
Instruction Fuzzy Hash: 11617D62B156C692EF0CEA65E5940FCA365FF40B94B94433AD73D0BAC2CF2CE4608390

Function 00007FF7FF3DEC9C Relevance: 1.6, APIs: 1, Instructions: 145COMMON

Download Yara Rule

APIs

_invalid_parameter_noinfo_noreturn.LIBCMT ref: 00007FF7FF3DEEB8

Memory Dump Source

Source File: 00000000.00000002.1706197426.00007FF7FF3D1000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF7FF3D0000, based on PE: true

Associated: 00000000.00000002.1706180107.00007FF7FF3D0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1706234158.00007FF7FF418000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1706255447.00007FF7FF42B000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1706255447.00007FF7FF434000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1706289188.00007FF7FF43A000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1706289188.00007FF7FF43E000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff7ff3d0000_b2bXo6vmDm.jbxd

Similarity

API ID: _invalid_parameter_noinfo_noreturn
String ID:
API String ID: 3668304517-0
Opcode ID: a3afaaf56553eb207ec18f3fa429f8fdb0872cbd95b270b1d5112c59ff95bd57
Instruction ID: 2602b09d0dd234b320b359fa3c9593138e564f39fd9078660a85c417513c2569
Opcode Fuzzy Hash: a3afaaf56553eb207ec18f3fa429f8fdb0872cbd95b270b1d5112c59ff95bd57
Instruction Fuzzy Hash: 54519362A086C652EB14AB25D4453FDAB51EF45BC4F84023AEE7D0B3D6CE7DE485C3A0

Function 00007FF7FF3DE7A8 Relevance: 1.6, APIs: 1, Instructions: 118COMMON

Download Yara Rule

APIs

Part of subcall function 00007FF7FF3E3EC8: FindClose.KERNELBASE(?,?,00000000,00007FF7FF3F0811), ref: 00007FF7FF3E3EFD

_invalid_parameter_noinfo_noreturn.LIBCMT ref: 00007FF7FF3DE993

Memory Dump Source

Source File: 00000000.00000002.1706197426.00007FF7FF3D1000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF7FF3D0000, based on PE: true

Associated: 00000000.00000002.1706180107.00007FF7FF3D0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1706234158.00007FF7FF418000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1706255447.00007FF7FF42B000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1706255447.00007FF7FF434000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1706289188.00007FF7FF43A000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1706289188.00007FF7FF43E000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff7ff3d0000_b2bXo6vmDm.jbxd

Similarity

API ID: CloseFind_invalid_parameter_noinfo_noreturn
String ID:
API String ID: 1011579015-0
Opcode ID: 864680af9fc0f386fe5511f3b68e5025b57726e97162e4a7d041eb2bb48d23ec
Instruction ID: b4e96453dbfd017f62ecc9bd6d246c27799c1a602928c33a7b939cc47b9a4f6d
Opcode Fuzzy Hash: 864680af9fc0f386fe5511f3b68e5025b57726e97162e4a7d041eb2bb48d23ec
Instruction Fuzzy Hash: 27515422A086C982FB50AB14D4453BDA751FF84B84F84033ADA7D0B7E5DF2CD481C3A1

Function 00007FF7FF3E1794 Relevance: 1.6, APIs: 1, Instructions: 115COMMON

Download Yara Rule

APIs

_invalid_parameter_noinfo_noreturn.LIBCMT ref: 00007FF7FF3E187D

Memory Dump Source

Source File: 00000000.00000002.1706197426.00007FF7FF3D1000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF7FF3D0000, based on PE: true

Associated: 00000000.00000002.1706180107.00007FF7FF3D0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1706234158.00007FF7FF418000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1706255447.00007FF7FF42B000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1706255447.00007FF7FF434000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1706289188.00007FF7FF43A000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1706289188.00007FF7FF43E000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff7ff3d0000_b2bXo6vmDm.jbxd

Similarity

API ID: _invalid_parameter_noinfo_noreturn
String ID:
API String ID: 3668304517-0
Opcode ID: e8405a4364327432c6efff807be56d7ba1f00902b4c6efe70abeeeccd5322058
Instruction ID: 40b8bb7186d1042e2b94247e4d2bd1524ac3199e0250712d717d03b82f54a157
Opcode Fuzzy Hash: e8405a4364327432c6efff807be56d7ba1f00902b4c6efe70abeeeccd5322058
Instruction Fuzzy Hash: 5641D662B186C142EB14AA16E5403B9E251AF44BC0F848639EE7C0BF8ADF7CD5558380

Function 00007FF7FF3E2F58 Relevance: 1.6, APIs: 1, Instructions: 100COMMON

Download Yara Rule

APIs

_invalid_parameter_noinfo_noreturn.LIBCMT ref: 00007FF7FF3E30C8

Memory Dump Source

Source File: 00000000.00000002.1706197426.00007FF7FF3D1000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF7FF3D0000, based on PE: true

Associated: 00000000.00000002.1706180107.00007FF7FF3D0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1706234158.00007FF7FF418000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1706255447.00007FF7FF42B000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1706255447.00007FF7FF434000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1706289188.00007FF7FF43A000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1706289188.00007FF7FF43E000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff7ff3d0000_b2bXo6vmDm.jbxd

Similarity

API ID: _invalid_parameter_noinfo_noreturn
String ID:
API String ID: 3668304517-0
Opcode ID: f5994b23863df56f13e19732c7b5392fac300bbdca5fd5cc38b58261a4c2634e
Instruction ID: 50b8ab8ef05c4ee410b8ad4bda9de441c871b1904b329a1d9970f21bec1d7e9d
Opcode Fuzzy Hash: f5994b23863df56f13e19732c7b5392fac300bbdca5fd5cc38b58261a4c2634e
Instruction Fuzzy Hash: B1410862A0878582EF10AB25E5453F9A760EF44BD4F840339EA7D0B7D9CF3DE44987A1

Function 00007FF7FF40BDF8 Relevance: 1.6, APIs: 1, Instructions: 96COMMON

Download Yara Rule

APIs

GetModuleHandleW.KERNEL32 ref: 00007FF7FF40BE20

Part of subcall function 00007FF7FF40BFB0: GetModuleHandleExW.KERNEL32 ref: 00007FF7FF40BFD0
Part of subcall function 00007FF7FF40BFB0: GetProcAddress.KERNEL32 ref: 00007FF7FF40BFE6
Part of subcall function 00007FF7FF40BFB0: FreeLibrary.KERNEL32 ref: 00007FF7FF40C00B

Memory Dump Source

Source File: 00000000.00000002.1706197426.00007FF7FF3D1000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF7FF3D0000, based on PE: true

Associated: 00000000.00000002.1706180107.00007FF7FF3D0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1706234158.00007FF7FF418000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1706255447.00007FF7FF42B000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1706255447.00007FF7FF434000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1706289188.00007FF7FF43A000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1706289188.00007FF7FF43E000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff7ff3d0000_b2bXo6vmDm.jbxd

Similarity

API ID: HandleModule$AddressFreeLibraryProc
String ID:
API String ID: 3947729631-0
Opcode ID: 5b4d6432c9ab27f48bf344f41163fa66ca8822e5b5ed34cf2c0174bd429b5c6d
Instruction ID: 87bf2f3cebd0698df1dc4595e74c4efe53e0d9f142aa51c199bb6a9b78cd74a6
Opcode Fuzzy Hash: 5b4d6432c9ab27f48bf344f41163fa66ca8822e5b5ed34cf2c0174bd429b5c6d
Instruction Fuzzy Hash: 8241C422A186C282FB14FB2098501F8E251EF54B80FD44636DA3E87AE1DF3DE845D7E4

Function 00007FF7FF3D129C Relevance: 1.6, APIs: 1, Instructions: 73COMMON

Download Yara Rule

APIs

Concurrency::cancel_current_task.LIBCPMT ref: 00007FF7FF3D1396

Part of subcall function 00007FF7FF3D1F80: std::bad_alloc::bad_alloc.LIBCMT ref: 00007FF7FF3D1F89

Memory Dump Source

Source File: 00000000.00000002.1706197426.00007FF7FF3D1000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF7FF3D0000, based on PE: true

Associated: 00000000.00000002.1706180107.00007FF7FF3D0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1706234158.00007FF7FF418000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1706255447.00007FF7FF42B000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1706255447.00007FF7FF434000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1706289188.00007FF7FF43A000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1706289188.00007FF7FF43E000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff7ff3d0000_b2bXo6vmDm.jbxd

Similarity

API ID: Concurrency::cancel_current_taskstd::bad_alloc::bad_alloc
String ID:
API String ID: 680105476-0
Opcode ID: c531f2d93e59bc2c3255c3b03e21e7a52a1bb814650bbdd6308fec67296c0182
Instruction ID: 7f56bea81ee05cd918f697d6e412a1409cf3cb92b2e6c324fa94d4f286a563d3
Opcode Fuzzy Hash: c531f2d93e59bc2c3255c3b03e21e7a52a1bb814650bbdd6308fec67296c0182
Instruction Fuzzy Hash: 8C218322A086D687FB14BA91A4002BDA650EF05BF0F980B36DF7D4BBD5DE7CE0518394

Function 00007FF7FF3D2C54 Relevance: 1.6, APIs: 1, Instructions: 66COMMON

Download Yara Rule

APIs

_invalid_parameter_noinfo_noreturn.LIBCMT ref: 00007FF7FF3D2D77

Memory Dump Source

Source File: 00000000.00000002.1706197426.00007FF7FF3D1000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF7FF3D0000, based on PE: true

Associated: 00000000.00000002.1706180107.00007FF7FF3D0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1706234158.00007FF7FF418000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1706255447.00007FF7FF42B000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1706255447.00007FF7FF434000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1706289188.00007FF7FF43A000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1706289188.00007FF7FF43E000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff7ff3d0000_b2bXo6vmDm.jbxd

Similarity

API ID: _invalid_parameter_noinfo_noreturn
String ID:
API String ID: 3668304517-0
Opcode ID: 5f2a2e87236d0f423c6cdec1faf71a67df3b30f520f20d418f9c7705e5a41c4e
Instruction ID: c449ec8546d36d2bbfe2c2965731a547ebab2c72559036f47f3743f82bae8034
Opcode Fuzzy Hash: 5f2a2e87236d0f423c6cdec1faf71a67df3b30f520f20d418f9c7705e5a41c4e
Instruction Fuzzy Hash: 6E212862A145CA62EB08BB61D5443FCA314FF44784FD44636E63D0B6E2DF78E964C3A1

Function 00007FF7FF41124C Relevance: 1.6, APIs: 1, Instructions: 51COMMON

Download Yara Rule

APIs

_invalid_parameter_noinfo.LIBCMT ref: 00007FF7FF411280

Memory Dump Source

Source File: 00000000.00000002.1706197426.00007FF7FF3D1000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF7FF3D0000, based on PE: true

Associated: 00000000.00000002.1706180107.00007FF7FF3D0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1706234158.00007FF7FF418000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1706255447.00007FF7FF42B000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1706255447.00007FF7FF434000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1706289188.00007FF7FF43A000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1706289188.00007FF7FF43E000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff7ff3d0000_b2bXo6vmDm.jbxd

Similarity

API ID: _invalid_parameter_noinfo
String ID:
API String ID: 3215553584-0
Opcode ID: 9dd5a9e84c18447e56e2265fa04046f11d37b96b7f5b774ce3305aa6458b3f00
Instruction ID: 442749cb4b2c0cae7454cf2301c91c30c13647812aae73814f905b99bedcd50a
Opcode Fuzzy Hash: 9dd5a9e84c18447e56e2265fa04046f11d37b96b7f5b774ce3305aa6458b3f00
Instruction Fuzzy Hash: 3C115432A1CAC286F711AF5094405B9F299FB803A0FE50635E67D977D5DF3CE4009BA4

Function 00007FF7FF3FFC68 Relevance: 1.5, APIs: 1, Instructions: 45COMMON

Download Yara Rule

APIs

Part of subcall function 00007FF7FF3FF0A4: GetDlgItem.USER32 ref: 00007FF7FF3FF0E3
Part of subcall function 00007FF7FF3FF0A4: ShowWindow.USER32 ref: 00007FF7FF3FF109
Part of subcall function 00007FF7FF3FF0A4: IsDlgButtonChecked.USER32 ref: 00007FF7FF3FF11E
Part of subcall function 00007FF7FF3FF0A4: IsDlgButtonChecked.USER32 ref: 00007FF7FF3FF136
Part of subcall function 00007FF7FF3FF0A4: IsDlgButtonChecked.USER32 ref: 00007FF7FF3FF157
Part of subcall function 00007FF7FF3FF0A4: IsDlgButtonChecked.USER32 ref: 00007FF7FF3FF173
Part of subcall function 00007FF7FF3FF0A4: IsDlgButtonChecked.USER32 ref: 00007FF7FF3FF1B6
Part of subcall function 00007FF7FF3FF0A4: IsDlgButtonChecked.USER32 ref: 00007FF7FF3FF1D4
Part of subcall function 00007FF7FF3FF0A4: IsDlgButtonChecked.USER32 ref: 00007FF7FF3FF1E8
Part of subcall function 00007FF7FF3FF0A4: IsDlgButtonChecked.USER32 ref: 00007FF7FF3FF212
Part of subcall function 00007FF7FF3FF0A4: IsDlgButtonChecked.USER32 ref: 00007FF7FF3FF22A

_invalid_parameter_noinfo_noreturn.LIBCMT ref: 00007FF7FF3FFD03

Memory Dump Source

Source File: 00000000.00000002.1706197426.00007FF7FF3D1000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF7FF3D0000, based on PE: true

Associated: 00000000.00000002.1706180107.00007FF7FF3D0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1706234158.00007FF7FF418000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1706255447.00007FF7FF42B000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1706255447.00007FF7FF434000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1706289188.00007FF7FF43A000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1706289188.00007FF7FF43E000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff7ff3d0000_b2bXo6vmDm.jbxd

Similarity

API ID: ButtonChecked$ItemShowWindow_invalid_parameter_noinfo_noreturn
String ID:
API String ID: 4003826521-0
Opcode ID: cda69570bdac1a94ff29650853fe264a00bf8ba2677d701060c4dce7484e7aab
Instruction ID: d6b924d798467234efbf1420c13a5ecb38b45c792b394ab4cfa591f485e74e52
Opcode Fuzzy Hash: cda69570bdac1a94ff29650853fe264a00bf8ba2677d701060c4dce7484e7aab
Instruction Fuzzy Hash: 6F01C862A146C642FF14B774E4453FDA311EF89794F900335EABC0ABDADE2CE1408654

Function 00007FF7FF3D3AD8 Relevance: 1.5, APIs: 1, Instructions: 39COMMON

Download Yara Rule

APIs

_invalid_parameter_noinfo_noreturn.LIBCMT ref: 00007FF7FF3D3B6C

Memory Dump Source

Source File: 00000000.00000002.1706197426.00007FF7FF3D1000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF7FF3D0000, based on PE: true

Associated: 00000000.00000002.1706180107.00007FF7FF3D0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1706234158.00007FF7FF418000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1706255447.00007FF7FF42B000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1706255447.00007FF7FF434000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1706289188.00007FF7FF43A000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1706289188.00007FF7FF43E000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff7ff3d0000_b2bXo6vmDm.jbxd

Similarity

API ID: _invalid_parameter_noinfo_noreturn
String ID:
API String ID: 3668304517-0
Opcode ID: d36793c31387f104dd38dd6a9dfed600e2c4ae88e6f2c17daf49c6767410ecdf
Instruction ID: 334e0db7e13b9b932110acabeba55f17341035148ff0f7f7d2f41ca0b3d5803d
Opcode Fuzzy Hash: d36793c31387f104dd38dd6a9dfed600e2c4ae88e6f2c17daf49c6767410ecdf
Instruction Fuzzy Hash: 0C01E562A186C542EB11A724E4412BDF361FF85790FC04336EABC0BAE5DF3CD0408604

Function 00007FF7FF401558 Relevance: 1.5, APIs: 1, Instructions: 38COMMONLIBRARYCODE

Download Yara Rule

APIs

Part of subcall function 00007FF7FF401604: GetModuleHandleW.KERNEL32(?,?,?,00007FF7FF401573,?,?,?,00007FF7FF40192A), ref: 00007FF7FF40162B

DloadProtectSection.DELAYIMP ref: 00007FF7FF4015C9

Memory Dump Source

Source File: 00000000.00000002.1706197426.00007FF7FF3D1000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF7FF3D0000, based on PE: true

Associated: 00000000.00000002.1706180107.00007FF7FF3D0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1706234158.00007FF7FF418000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1706255447.00007FF7FF42B000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1706255447.00007FF7FF434000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1706289188.00007FF7FF43A000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1706289188.00007FF7FF43E000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff7ff3d0000_b2bXo6vmDm.jbxd

Similarity

API ID: DloadHandleModuleProtectSection
String ID:
API String ID: 2883838935-0
Opcode ID: 902d746097657f35995c40355b3f554eba39218e3fb79a70aefbb70b68ceb6fd
Instruction ID: 43ae858a49d2575237950e83719dfbf3c8e5fd2b2b6504ee4b30adc85ad1301f
Opcode Fuzzy Hash: 902d746097657f35995c40355b3f554eba39218e3fb79a70aefbb70b68ceb6fd
Instruction Fuzzy Hash: 4811BA62D085D781FB61BB05A8413F4E390AF54388FE40635D93D472E1EF2DA495AAE8

Function 00007FF7FF40FA04 Relevance: 1.5, APIs: 1, Instructions: 36memoryCOMMONLIBRARYCODE

Download Yara Rule

APIs

RtlAllocateHeap.NTDLL ref: 00007FF7FF40FA59

Memory Dump Source

Source File: 00000000.00000002.1706197426.00007FF7FF3D1000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF7FF3D0000, based on PE: true

Associated: 00000000.00000002.1706180107.00007FF7FF3D0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1706234158.00007FF7FF418000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1706255447.00007FF7FF42B000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1706255447.00007FF7FF434000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1706289188.00007FF7FF43A000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1706289188.00007FF7FF43E000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff7ff3d0000_b2bXo6vmDm.jbxd

Similarity

API ID: AllocateHeap
String ID:
API String ID: 1279760036-0
Opcode ID: c4d23aaef5024e3722ccbb242168b3e22d65bf63548bcaacbbf61b8d0a3ba7a1
Instruction ID: bdb0a9aa477877c7fa32c4b082e05dffcb8a8ee8553f82a5ca06d534767a0dc4
Opcode Fuzzy Hash: c4d23aaef5024e3722ccbb242168b3e22d65bf63548bcaacbbf61b8d0a3ba7a1
Instruction Fuzzy Hash: 2EF06D54B0D78785FF557AA599113F4D2909F84BA0FCC5630CA3E8A7C1EE2CE68146B4

Function 00007FF7FF3E3EC8 Relevance: 1.5, APIs: 1, Instructions: 31COMMON

Download Yara Rule

APIs

Part of subcall function 00007FF7FF3E40BC: FindFirstFileW.KERNELBASE ref: 00007FF7FF3E410B
Part of subcall function 00007FF7FF3E40BC: FindFirstFileW.KERNEL32 ref: 00007FF7FF3E415E
Part of subcall function 00007FF7FF3E40BC: GetLastError.KERNEL32 ref: 00007FF7FF3E41AF

FindClose.KERNELBASE(?,?,00000000,00007FF7FF3F0811), ref: 00007FF7FF3E3EFD

Memory Dump Source

Source File: 00000000.00000002.1706197426.00007FF7FF3D1000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF7FF3D0000, based on PE: true

Associated: 00000000.00000002.1706180107.00007FF7FF3D0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1706234158.00007FF7FF418000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1706255447.00007FF7FF42B000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1706255447.00007FF7FF434000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1706289188.00007FF7FF43A000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1706289188.00007FF7FF43E000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff7ff3d0000_b2bXo6vmDm.jbxd

Similarity

API ID: Find$FileFirst$CloseErrorLast
String ID:
API String ID: 1464966427-0
Opcode ID: 18fe74ab7ca813274cb64c08179860cc48efc587ad39327f0b25563dc18ddab5
Instruction ID: a3e7cfe02506f1459689b4845c58b5f245486da0b682927db875fe45123cd048
Opcode Fuzzy Hash: 18fe74ab7ca813274cb64c08179860cc48efc587ad39327f0b25563dc18ddab5
Instruction Fuzzy Hash: CCF0816250C2C186DB50AB75E1002F9BB609F19BB4F541378EA3D0B2C7CE38D44987A6

Function 00007FF7FF3E20D0 Relevance: 1.5, APIs: 1, Instructions: 29COMMON

Download Yara Rule

APIs

FindCloseChangeNotification.KERNELBASE(?,?,00000001,00007FF7FF3E207E), ref: 00007FF7FF3E20F6

Memory Dump Source

Source File: 00000000.00000002.1706197426.00007FF7FF3D1000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF7FF3D0000, based on PE: true

Associated: 00000000.00000002.1706180107.00007FF7FF3D0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1706234158.00007FF7FF418000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1706255447.00007FF7FF42B000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1706255447.00007FF7FF434000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1706289188.00007FF7FF43A000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1706289188.00007FF7FF43E000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff7ff3d0000_b2bXo6vmDm.jbxd

Similarity

API ID: ChangeCloseFindNotification
String ID:
API String ID: 2591292051-0
Opcode ID: ccbd9008d2c4ce7168f8d058ff2f34620ae6bf54bfe45a0cbca9d6a6f1a7c065
Instruction ID: 36fbe4d823663622149a228ca451f1626b03537a4d6ea50e70d4fb3ac02ed77c
Opcode Fuzzy Hash: ccbd9008d2c4ce7168f8d058ff2f34620ae6bf54bfe45a0cbca9d6a6f1a7c065
Instruction Fuzzy Hash: 15F02D22E046C246FB209B31D0403B9A760DF00BB8F890338D73C451D4CF68C599C351

Function 00007FF7FF40D94C Relevance: 1.5, APIs: 1, Instructions: 29memoryCOMMONLIBRARYCODE

Download Yara Rule

APIs

RtlAllocateHeap.NTDLL ref: 00007FF7FF40D98A

Memory Dump Source

Source File: 00000000.00000002.1706197426.00007FF7FF3D1000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF7FF3D0000, based on PE: true

Associated: 00000000.00000002.1706180107.00007FF7FF3D0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1706234158.00007FF7FF418000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1706255447.00007FF7FF42B000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1706255447.00007FF7FF434000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1706289188.00007FF7FF43A000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1706289188.00007FF7FF43E000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff7ff3d0000_b2bXo6vmDm.jbxd

Similarity

API ID: AllocateHeap
String ID:
API String ID: 1279760036-0
Opcode ID: 5fa632deebd8181b9f3ea37834cf4eccbda839d7d0d6f948310c23224b4a93e7
Instruction ID: a51d2db77bb726781e201d8de7c48e8f30b944285555ce03410168eef603f68b
Opcode Fuzzy Hash: 5fa632deebd8181b9f3ea37834cf4eccbda839d7d0d6f948310c23224b4a93e7
Instruction Fuzzy Hash: EDF08C10F192C785FF147AB158002F4E2A05F847A0FC81B30DE3E863C5FE2CA48882B0

Function 00007FF7FF3E2490 Relevance: 1.5, APIs: 1, Instructions: 12COMMON

Download Yara Rule

APIs

GetFileType.KERNELBASE ref: 00007FF7FF3E24A2

Memory Dump Source

Source File: 00000000.00000002.1706197426.00007FF7FF3D1000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF7FF3D0000, based on PE: true

Associated: 00000000.00000002.1706180107.00007FF7FF3D0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1706234158.00007FF7FF418000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1706255447.00007FF7FF42B000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1706255447.00007FF7FF434000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1706289188.00007FF7FF43A000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1706289188.00007FF7FF43E000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff7ff3d0000_b2bXo6vmDm.jbxd

Similarity

API ID: FileType
String ID:
API String ID: 3081899298-0
Opcode ID: df9a28314c6b6fddfb177ebf539387614dcb0363737e1ba4f38fe55c4f903e1a
Instruction ID: 5a893c047baf235d9ae8451f15609890d60d65f2b375933e7f8f2ca458590a1e
Opcode Fuzzy Hash: df9a28314c6b6fddfb177ebf539387614dcb0363737e1ba4f38fe55c4f903e1a
Instruction Fuzzy Hash: F4D01212D0988183DF10A735D8521BC6350AF92735FF40730D63E856E1CE5DD59EA7A6

Function 00007FF7FF3E7FC4 Relevance: 1.5, APIs: 1, Instructions: 9COMMON

Download Yara Rule

APIs

SetCurrentDirectoryW.KERNELBASE ref: 00007FF7FF3E7FD2

Memory Dump Source

Source File: 00000000.00000002.1706197426.00007FF7FF3D1000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF7FF3D0000, based on PE: true

Associated: 00000000.00000002.1706180107.00007FF7FF3D0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1706234158.00007FF7FF418000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1706255447.00007FF7FF42B000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1706255447.00007FF7FF434000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1706289188.00007FF7FF43A000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1706289188.00007FF7FF43E000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff7ff3d0000_b2bXo6vmDm.jbxd

Similarity

API ID: CurrentDirectory
String ID:
API String ID: 1611563598-0
Opcode ID: 176ab68ebee512dad0278907058cd855c5c44f8615b79807412a7d406b36e525
Instruction ID: 9d87228ca0303930346136f5f7df16c66368f8d94b3dbb2d544be91253a62508
Opcode Fuzzy Hash: 176ab68ebee512dad0278907058cd855c5c44f8615b79807412a7d406b36e525
Instruction Fuzzy Hash: E3C08C20F05942C2DB086B26C8C92A813A4BF40B04BB28138C23C811A0CE2CD5EE939A

Non-executed Functions

Function 00007FF7FF3DC2F0 Relevance: 49.8, APIs: 24, Strings: 4, Instructions: 754fileCOMMON

Download Yara Rule

APIs

Part of subcall function 00007FF7FF3DDE04: GetCurrentProcess.KERNEL32(?,?,?,?,?,?,?,?,?,00007FF7FF3DCF4B), ref: 00007FF7FF3DDE27
Part of subcall function 00007FF7FF3DDE04: GetLastError.KERNEL32 ref: 00007FF7FF3DDE88
Part of subcall function 00007FF7FF3DDE04: CloseHandle.KERNEL32 ref: 00007FF7FF3DDE9B

wcscpy.LIBCMT ref: 00007FF7FF3DCBC8
wcscpy.LIBCMT ref: 00007FF7FF3DCBFE
CreateFileW.KERNEL32 ref: 00007FF7FF3DCC38
DeviceIoControl.KERNEL32 ref: 00007FF7FF3DCD01
CloseHandle.KERNEL32 ref: 00007FF7FF3DCD12
GetLastError.KERNEL32 ref: 00007FF7FF3DCD2E
RemoveDirectoryW.KERNEL32 ref: 00007FF7FF3DCD7D
DeleteFileW.KERNEL32 ref: 00007FF7FF3DCD88
_invalid_parameter_noinfo_noreturn.LIBCMT ref: 00007FF7FF3DCE89
_invalid_parameter_noinfo_noreturn.LIBCMT ref: 00007FF7FF3DCE8F
_invalid_parameter_noinfo_noreturn.LIBCMT ref: 00007FF7FF3DCE9B
_invalid_parameter_noinfo_noreturn.LIBCMT ref: 00007FF7FF3DCEA1
_invalid_parameter_noinfo_noreturn.LIBCMT ref: 00007FF7FF3DCEAD
_invalid_parameter_noinfo_noreturn.LIBCMT ref: 00007FF7FF3DCEB3
_invalid_parameter_noinfo_noreturn.LIBCMT ref: 00007FF7FF3DCEB9
_invalid_parameter_noinfo_noreturn.LIBCMT ref: 00007FF7FF3DCEBF
_invalid_parameter_noinfo_noreturn.LIBCMT ref: 00007FF7FF3DCEC5
_invalid_parameter_noinfo_noreturn.LIBCMT ref: 00007FF7FF3DCECB
_invalid_parameter_noinfo_noreturn.LIBCMT ref: 00007FF7FF3DCED1
_invalid_parameter_noinfo_noreturn.LIBCMT ref: 00007FF7FF3DCED7

Strings

\??\, xrefs: 00007FF7FF3DC392, 00007FF7FF3DC3B8
SeCreateSymbolicLinkPrivilege, xrefs: 00007FF7FF3DC34F
UNC\, xrefs: 00007FF7FF3DC53F, 00007FF7FF3DC55D
SeRestorePrivilege, xrefs: 00007FF7FF3DC343

Memory Dump Source

Source File: 00000000.00000002.1706197426.00007FF7FF3D1000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF7FF3D0000, based on PE: true

Associated: 00000000.00000002.1706180107.00007FF7FF3D0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1706234158.00007FF7FF418000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1706255447.00007FF7FF42B000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1706255447.00007FF7FF434000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1706289188.00007FF7FF43A000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1706289188.00007FF7FF43E000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff7ff3d0000_b2bXo6vmDm.jbxd

Similarity

API ID: _invalid_parameter_noinfo_noreturn$CloseErrorFileHandleLastwcscpy$ControlCreateCurrentDeleteDeviceDirectoryProcessRemove
String ID: SeCreateSymbolicLinkPrivilege$SeRestorePrivilege$UNC\$\??\
API String ID: 2659423929-3508440684
Opcode ID: 910e9aa7ec42519728c5e592c338b87a2ac9a8216202e4693b4301178f0d99cf
Instruction ID: bf364f299d82ba4b4940d15b3377d4d140253888d42c764b8696edb1011115e9
Opcode Fuzzy Hash: 910e9aa7ec42519728c5e592c338b87a2ac9a8216202e4693b4301178f0d99cf
Instruction Fuzzy Hash: 7062C062F186C686FB00AB74D4442FDA361AF857A4F904336DA7C5BADADF38D185C390

Function 00007FF7FF3EF180 Relevance: 43.2, APIs: 22, Strings: 2, Instructions: 1205COMMON

Download Yara Rule

APIs

_Init_thread_footer.LIBCMT ref: 00007FF7FF3F0528

Part of subcall function 00007FF7FF3EAAE0: LoadStringW.USER32 ref: 00007FF7FF3EAB67
Part of subcall function 00007FF7FF3EAAE0: LoadStringW.USER32 ref: 00007FF7FF3EAB80

Part of subcall function 00007FF7FF3FB0DC: GetLastError.KERNEL32(?,?,?,?,?,?,?,?,00000000,?,00007FF7FF3F0429), ref: 00007FF7FF3FB110
Part of subcall function 00007FF7FF3FB0DC: SetLastError.KERNEL32 ref: 00007FF7FF3FB153

Part of subcall function 00007FF7FF3D129C: Concurrency::cancel_current_task.LIBCPMT ref: 00007FF7FF3D1396

_invalid_parameter_noinfo_noreturn.LIBCMT ref: 00007FF7FF3F0490
_invalid_parameter_noinfo_noreturn.LIBCMT ref: 00007FF7FF3F0496
_invalid_parameter_noinfo_noreturn.LIBCMT ref: 00007FF7FF3F049C
_invalid_parameter_noinfo_noreturn.LIBCMT ref: 00007FF7FF3F04A2
_invalid_parameter_noinfo_noreturn.LIBCMT ref: 00007FF7FF3F04A8
_invalid_parameter_noinfo_noreturn.LIBCMT ref: 00007FF7FF3F04AE
_invalid_parameter_noinfo_noreturn.LIBCMT ref: 00007FF7FF3F04B4
_invalid_parameter_noinfo_noreturn.LIBCMT ref: 00007FF7FF3F04BA
_invalid_parameter_noinfo_noreturn.LIBCMT ref: 00007FF7FF3F04C0
_invalid_parameter_noinfo_noreturn.LIBCMT ref: 00007FF7FF3F04C6
_invalid_parameter_noinfo_noreturn.LIBCMT ref: 00007FF7FF3F04CC
_invalid_parameter_noinfo_noreturn.LIBCMT ref: 00007FF7FF3F04D2
_invalid_parameter_noinfo_noreturn.LIBCMT ref: 00007FF7FF3F04D8
_invalid_parameter_noinfo_noreturn.LIBCMT ref: 00007FF7FF3F04DE
_invalid_parameter_noinfo_noreturn.LIBCMT ref: 00007FF7FF3F04E4
_invalid_parameter_noinfo_noreturn.LIBCMT ref: 00007FF7FF3F04EA
_invalid_parameter_noinfo_noreturn.LIBCMT ref: 00007FF7FF3F04F0
_invalid_parameter_noinfo_noreturn.LIBCMT ref: 00007FF7FF3F04F6
_invalid_parameter_noinfo_noreturn.LIBCMT ref: 00007FF7FF3F0532
_invalid_parameter_noinfo_noreturn.LIBCMT ref: 00007FF7FF3F0538

Strings

%ls, xrefs: 00007FF7FF3EF3AC, 00007FF7FF3EF3FF
%s: %s, xrefs: 00007FF7FF3EFC11

Memory Dump Source

Source File: 00000000.00000002.1706197426.00007FF7FF3D1000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF7FF3D0000, based on PE: true

Associated: 00000000.00000002.1706180107.00007FF7FF3D0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1706234158.00007FF7FF418000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1706255447.00007FF7FF42B000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1706255447.00007FF7FF434000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1706289188.00007FF7FF43A000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1706289188.00007FF7FF43E000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff7ff3d0000_b2bXo6vmDm.jbxd

Similarity

API ID: _invalid_parameter_noinfo_noreturn$ErrorLastLoadString$Concurrency::cancel_current_taskInit_thread_footer
String ID: %ls$%s: %s
API String ID: 2539828978-2259941744
Opcode ID: 036ec75b57e485660c9cb06a15e5eb3ac4865e562a3aa7da73e39248fd119ff7
Instruction ID: 25a81ec68724799aeb560379700c8af63599d509af24059c35bd4493d857940c
Opcode Fuzzy Hash: 036ec75b57e485660c9cb06a15e5eb3ac4865e562a3aa7da73e39248fd119ff7
Instruction Fuzzy Hash: 09B28562A586C342EB14B729D4542FEE311EF89790F90433AE6BD0BBE6DE6CD540C790

Function 00007FF7FF412550 Relevance: 22.3, APIs: 8, Strings: 4, Instructions: 1310COMMONLIBRARYCODE

Download Yara Rule

APIs

_invalid_parameter_noinfo.LIBCMT ref: 00007FF7FF412C12
memcpy_s.LIBCMT ref: 00007FF7FF4135BF
memcpy_s.LIBCMT ref: 00007FF7FF413666

Part of subcall function 00007FF7FF4138BC: _invalid_parameter_noinfo.LIBCMT ref: 00007FF7FF4138EE

memcpy_s.LIBCMT ref: 00007FF7FF41372F

Part of subcall function 00007FF7FF40D008: _invalid_parameter_noinfo.LIBCMT ref: 00007FF7FF40D02D

Strings

1#INF, xrefs: 00007FF7FF413807
1#QNAN, xrefs: 00007FF7FF4137E8
1#IND, xrefs: 00007FF7FF4137AA
1#SNAN, xrefs: 00007FF7FF4137C9

Memory Dump Source

Source File: 00000000.00000002.1706197426.00007FF7FF3D1000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF7FF3D0000, based on PE: true

Associated: 00000000.00000002.1706180107.00007FF7FF3D0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1706234158.00007FF7FF418000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1706255447.00007FF7FF42B000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1706255447.00007FF7FF434000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1706289188.00007FF7FF43A000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1706289188.00007FF7FF43E000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff7ff3d0000_b2bXo6vmDm.jbxd

Similarity

API ID: _invalid_parameter_noinfomemcpy_s
String ID: 1#IND$1#INF$1#QNAN$1#SNAN
API String ID: 1759834784-2761157908
Opcode ID: c1568b5568d689d261f1f0b975b9c1104ab10acfc5286cd5346a40821ab4f9bc
Instruction ID: 33e63b3ed93907b93265f39208f3be2097bdc5fe652b871fcc9175772ff6a0e1
Opcode Fuzzy Hash: c1568b5568d689d261f1f0b975b9c1104ab10acfc5286cd5346a40821ab4f9bc
Instruction Fuzzy Hash: EAB22B72A085C28BE7369E25D4407FDB7A1FB44798FA05235DA39A7BC4DF38E5048B90

Function 00007FF7FF3E1A48 Relevance: 17.9, APIs: 9, Strings: 1, Instructions: 375fileCOMMON

Download Yara Rule

APIs

GetLongPathNameW.KERNEL32 ref: 00007FF7FF3E1A97
GetLongPathNameW.KERNEL32 ref: 00007FF7FF3E1AE0
GetShortPathNameW.KERNEL32 ref: 00007FF7FF3E1B21
GetShortPathNameW.KERNEL32 ref: 00007FF7FF3E1B6A

Part of subcall function 00007FF7FF3F13C4: CompareStringW.KERNEL32 ref: 00007FF7FF3F13E3

MoveFileW.KERNEL32 ref: 00007FF7FF3E1DFE
MoveFileW.KERNEL32 ref: 00007FF7FF3E1E65

Part of subcall function 00007FF7FF3E2134: CreateFileW.KERNEL32 ref: 00007FF7FF3E223C

_invalid_parameter_noinfo_noreturn.LIBCMT ref: 00007FF7FF3E1FE1
_invalid_parameter_noinfo_noreturn.LIBCMT ref: 00007FF7FF3E1FE7
_invalid_parameter_noinfo_noreturn.LIBCMT ref: 00007FF7FF3E1FED

Strings

rtmp, xrefs: 00007FF7FF3E1CF4, 00007FF7FF3E1D03

Memory Dump Source

Source File: 00000000.00000002.1706197426.00007FF7FF3D1000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF7FF3D0000, based on PE: true

Associated: 00000000.00000002.1706180107.00007FF7FF3D0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1706234158.00007FF7FF418000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1706255447.00007FF7FF42B000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1706255447.00007FF7FF434000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1706289188.00007FF7FF43A000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1706289188.00007FF7FF43E000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff7ff3d0000_b2bXo6vmDm.jbxd

Similarity

API ID: NamePath$File_invalid_parameter_noinfo_noreturn$LongMoveShort$CompareCreateString
String ID: rtmp
API String ID: 3587137053-870060881
Opcode ID: 2690c3f4432e1cddd4f0063f2626a82685cab83fa6c88011cccedc1e274da5b8
Instruction ID: 8aba7c5d01251fe12173344d917672646ac2bff58dad5c42f41fd858f4ed6be8
Opcode Fuzzy Hash: 2690c3f4432e1cddd4f0063f2626a82685cab83fa6c88011cccedc1e274da5b8
Instruction Fuzzy Hash: 7BF1A622B04A8282EB10FB65D4402FDA761EF85794F901336EA7D4BAE5DF3CD589C790

Function 00007FF7FF3E5B60 Relevance: 12.3, APIs: 8, Instructions: 256COMMON

Download Yara Rule

APIs

GetFullPathNameW.KERNEL32 ref: 00007FF7FF3E5BC2
GetFullPathNameW.KERNEL32 ref: 00007FF7FF3E5C0E
GetFullPathNameW.KERNEL32 ref: 00007FF7FF3E5D2B
GetFullPathNameW.KERNEL32 ref: 00007FF7FF3E5D70
_invalid_parameter_noinfo_noreturn.LIBCMT ref: 00007FF7FF3E5EE0
_invalid_parameter_noinfo_noreturn.LIBCMT ref: 00007FF7FF3E5EE6
_invalid_parameter_noinfo_noreturn.LIBCMT ref: 00007FF7FF3E5EEC
_invalid_parameter_noinfo_noreturn.LIBCMT ref: 00007FF7FF3E5EF2

Memory Dump Source

Source File: 00000000.00000002.1706197426.00007FF7FF3D1000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF7FF3D0000, based on PE: true

Associated: 00000000.00000002.1706180107.00007FF7FF3D0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1706234158.00007FF7FF418000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1706255447.00007FF7FF42B000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1706255447.00007FF7FF434000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1706289188.00007FF7FF43A000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1706289188.00007FF7FF43E000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff7ff3d0000_b2bXo6vmDm.jbxd

Similarity

API ID: FullNamePath_invalid_parameter_noinfo_noreturn
String ID:
API String ID: 1693479884-0
Opcode ID: f4aab3d6a38d3a7c87b22c38f8e02ebac67e4094d45f76237e24e5c31d843a01
Instruction ID: 71d928c753ebff80f0b129cb0b2a2705d9765bebaa034094c962454c74d30e5b
Opcode Fuzzy Hash: f4aab3d6a38d3a7c87b22c38f8e02ebac67e4094d45f76237e24e5c31d843a01
Instruction Fuzzy Hash: 42A1C362F14A9246FF40AB79C8542FCA321AF84FA4B905339DE7D5BBC5DE3CE0458291

Function 00007FF7FF403170 Relevance: 10.6, APIs: 7, Instructions: 72COMMON

Download Yara Rule

APIs

IsProcessorFeaturePresent.KERNEL32 ref: 00007FF7FF40318C
RtlCaptureContext.KERNEL32 ref: 00007FF7FF4031B9
RtlLookupFunctionEntry.KERNEL32 ref: 00007FF7FF4031D3
RtlVirtualUnwind.KERNEL32 ref: 00007FF7FF403214
IsDebuggerPresent.KERNEL32 ref: 00007FF7FF403268
SetUnhandledExceptionFilter.KERNEL32 ref: 00007FF7FF403289
UnhandledExceptionFilter.KERNEL32 ref: 00007FF7FF403294

Memory Dump Source

Source File: 00000000.00000002.1706197426.00007FF7FF3D1000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF7FF3D0000, based on PE: true

Associated: 00000000.00000002.1706180107.00007FF7FF3D0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1706234158.00007FF7FF418000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1706255447.00007FF7FF42B000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1706255447.00007FF7FF434000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1706289188.00007FF7FF43A000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1706289188.00007FF7FF43E000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff7ff3d0000_b2bXo6vmDm.jbxd

Similarity

API ID: ExceptionFilterPresentUnhandled$CaptureContextDebuggerEntryFeatureFunctionLookupProcessorUnwindVirtual
String ID:
API String ID: 3140674995-0
Opcode ID: eb4060bcbbf6947450414bc0ac192b8da1feec02df413969c5a674799d26ef14
Instruction ID: 94e4f81c5d49f7567bcb3a2c849ea7d27c48b0acfc1a4d9e14f313bbe33c0660
Opcode Fuzzy Hash: eb4060bcbbf6947450414bc0ac192b8da1feec02df413969c5a674799d26ef14
Instruction Fuzzy Hash: A3316072608BC18AEB609F60E8503FDB360FB84744F88413ADA6D57A88DF3CD548C764

Function 00007FF7FF4076D8 Relevance: 9.1, APIs: 6, Instructions: 83COMMONLIBRARYCODE

Download Yara Rule

APIs

RtlCaptureContext.KERNEL32 ref: 00007FF7FF407751
RtlLookupFunctionEntry.KERNEL32 ref: 00007FF7FF407769
RtlVirtualUnwind.KERNEL32 ref: 00007FF7FF4077A4
IsDebuggerPresent.KERNEL32 ref: 00007FF7FF4077DD
SetUnhandledExceptionFilter.KERNEL32 ref: 00007FF7FF4077E7
UnhandledExceptionFilter.KERNEL32 ref: 00007FF7FF4077F2

Memory Dump Source

Source File: 00000000.00000002.1706197426.00007FF7FF3D1000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF7FF3D0000, based on PE: true

Associated: 00000000.00000002.1706180107.00007FF7FF3D0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1706234158.00007FF7FF418000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1706255447.00007FF7FF42B000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1706255447.00007FF7FF434000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1706289188.00007FF7FF43A000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1706289188.00007FF7FF43E000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff7ff3d0000_b2bXo6vmDm.jbxd

Similarity

API ID: ExceptionFilterUnhandled$CaptureContextDebuggerEntryFunctionLookupPresentUnwindVirtual
String ID:
API String ID: 1239891234-0
Opcode ID: 5940ef1d6d2c32beaf7af9e8e0892e721e3d30544378453b8f42f9f5775f8da8
Instruction ID: 2ed3fe404153d586d42573e361799406d71f193469a9f24f92218e07d20763d8
Opcode Fuzzy Hash: 5940ef1d6d2c32beaf7af9e8e0892e721e3d30544378453b8f42f9f5775f8da8
Instruction Fuzzy Hash: 06315F32608FC195EB609F25E8402FEB7A0FB88754F940235EAAD43B99DF38D545CB50

Function 00007FF7FF3D1AA4 Relevance: 6.3, APIs: 4, Instructions: 285COMMON

Download Yara Rule

APIs

_invalid_parameter_noinfo_noreturn.LIBCMT ref: 00007FF7FF3D1EA9
_invalid_parameter_noinfo_noreturn.LIBCMT ref: 00007FF7FF3D1EAF
_invalid_parameter_noinfo_noreturn.LIBCMT ref: 00007FF7FF3D1EB5
_invalid_parameter_noinfo_noreturn.LIBCMT ref: 00007FF7FF3D1EBB

Memory Dump Source

Source File: 00000000.00000002.1706197426.00007FF7FF3D1000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF7FF3D0000, based on PE: true

Associated: 00000000.00000002.1706180107.00007FF7FF3D0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1706234158.00007FF7FF418000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1706255447.00007FF7FF42B000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1706255447.00007FF7FF434000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1706289188.00007FF7FF43A000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1706289188.00007FF7FF43E000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff7ff3d0000_b2bXo6vmDm.jbxd

Similarity

API ID: _invalid_parameter_noinfo_noreturn
String ID:
API String ID: 3668304517-0
Opcode ID: 7b7dd3cc945c75579ea6e4d6b5bd8dcfccb141db249b2c8eab1a1b88401a34c7
Instruction ID: 8f9091993f6f5d62cc91db8f0204deffd137d31536029b195bae4fe3f43a8645
Opcode Fuzzy Hash: 7b7dd3cc945c75579ea6e4d6b5bd8dcfccb141db249b2c8eab1a1b88401a34c7
Instruction Fuzzy Hash: 79B18C62A156CA87EB10BB65D8402FDA361FF85794F80533AEA7C0BBD9DF2CD5448390

Function 00007FF7FF40FA94 Relevance: 5.4, APIs: 1, Strings: 2, Instructions: 164COMMON

Download Yara Rule

APIs

_invalid_parameter_noinfo.LIBCMT ref: 00007FF7FF40FAC4

Part of subcall function 00007FF7FF407934: GetCurrentProcess.KERNEL32(00007FF7FF410CCD), ref: 00007FF7FF407961

Strings

*?, xrefs: 00007FF7FF40FAEB
., xrefs: 00007FF7FF40FEE4

Memory Dump Source

Source File: 00000000.00000002.1706197426.00007FF7FF3D1000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF7FF3D0000, based on PE: true

Associated: 00000000.00000002.1706180107.00007FF7FF3D0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1706234158.00007FF7FF418000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1706255447.00007FF7FF42B000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1706255447.00007FF7FF434000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1706289188.00007FF7FF43A000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1706289188.00007FF7FF43E000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff7ff3d0000_b2bXo6vmDm.jbxd

Similarity

API ID: CurrentProcess_invalid_parameter_noinfo
String ID: *?$.
API String ID: 2518042432-3972193922
Opcode ID: f96344909874f118cd7fc652812aee2de17a0b901a5c412331694f6fbd6e8fc4
Instruction ID: dfe244f52a3a1ed9c2e4a934cddcbb8889b539d5a7da3d995cb794070662ac96
Opcode Fuzzy Hash: f96344909874f118cd7fc652812aee2de17a0b901a5c412331694f6fbd6e8fc4
Instruction Fuzzy Hash: E851E662B18BD585EF10EFA194114F9A7A4FB48BE8B844631DE3D17BC9EE3CD0428350

Function 00007FF7FF412080 Relevance: 4.8, APIs: 3, Instructions: 340COMMONLIBRARYCODE

Download Yara Rule

APIs

memcpy_s.LIBCMT ref: 00007FF7FF41210B

Memory Dump Source

Source File: 00000000.00000002.1706197426.00007FF7FF3D1000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF7FF3D0000, based on PE: true

Associated: 00000000.00000002.1706180107.00007FF7FF3D0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1706234158.00007FF7FF418000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1706255447.00007FF7FF42B000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1706255447.00007FF7FF434000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1706289188.00007FF7FF43A000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1706289188.00007FF7FF43E000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff7ff3d0000_b2bXo6vmDm.jbxd

Similarity

API ID: memcpy_s
String ID:
API String ID: 1502251526-0
Opcode ID: b531b63a04a12e36dec63d06dc2411054f876835da8b044adf2bb9f605172619
Instruction ID: 69171296cf51b1fff7b52a8b8d99416ed3efd2fe35f5e3c7773f47b6cc35326e
Opcode Fuzzy Hash: b531b63a04a12e36dec63d06dc2411054f876835da8b044adf2bb9f605172619
Instruction Fuzzy Hash: 01D1D432B18AC687EB25DF15E1846BAB791F788754F548234CB6E93B84DF3CE9418B40

Function 00007FF7FF3DB6D8 Relevance: 4.5, APIs: 3, Instructions: 36windowCOMMON

Download Yara Rule

APIs

GetLastError.KERNEL32(?,?,?,?,?,?,?,00007FF7FF3DBA9D), ref: 00007FF7FF3DB6E5
FormatMessageW.KERNEL32(?,?,?,?,?,?,?,00007FF7FF3DBA9D), ref: 00007FF7FF3DB719
LocalFree.KERNEL32(?,?,?,?,?,?,?,00007FF7FF3DBA9D), ref: 00007FF7FF3DB743

Memory Dump Source

Source File: 00000000.00000002.1706197426.00007FF7FF3D1000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF7FF3D0000, based on PE: true

Associated: 00000000.00000002.1706180107.00007FF7FF3D0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1706234158.00007FF7FF418000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1706255447.00007FF7FF42B000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1706255447.00007FF7FF434000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1706289188.00007FF7FF43A000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1706289188.00007FF7FF43E000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff7ff3d0000_b2bXo6vmDm.jbxd

Similarity

API ID: ErrorFormatFreeLastLocalMessage
String ID:
API String ID: 1365068426-0
Opcode ID: c27e05edbcf0c556cf9f4b9f4aa6354f64d9dc72ff0f252d3a2ededa039666af
Instruction ID: 63264db4e10f0dd5f8d3841813c2d629d76db27ab36f2617b9d0e07af2c74c9c
Opcode Fuzzy Hash: c27e05edbcf0c556cf9f4b9f4aa6354f64d9dc72ff0f252d3a2ededa039666af
Instruction Fuzzy Hash: 35012C71608B8682E710AF22B8501BEA791BF89BD4F884139EAAD46B95CF3CD5048795

Function 00007FF7FF40FCA0 Relevance: 3.6, APIs: 1, Strings: 1, Instructions: 97COMMON

Download Yara Rule

Strings

., xrefs: 00007FF7FF40FEE4

Memory Dump Source

Source File: 00000000.00000002.1706197426.00007FF7FF3D1000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF7FF3D0000, based on PE: true

Associated: 00000000.00000002.1706180107.00007FF7FF3D0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1706234158.00007FF7FF418000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1706255447.00007FF7FF42B000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1706255447.00007FF7FF434000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1706289188.00007FF7FF43A000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1706289188.00007FF7FF43E000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff7ff3d0000_b2bXo6vmDm.jbxd

Similarity

API ID:
String ID: .
API String ID: 0-248832578
Opcode ID: 7c9d8364e7b62915daf92aecf888b4814fe01b6aae5fc02ec6e7aa2f3019df5b
Instruction ID: 068b8972ab4f25ddc90dadd3bcc995bec9fff7bb11a7ca98761f8f5a6f0b927c
Opcode Fuzzy Hash: 7c9d8364e7b62915daf92aecf888b4814fe01b6aae5fc02ec6e7aa2f3019df5b
Instruction Fuzzy Hash: 4931EA22B0C6D145F720AA26A8057F9BA91EB94BF4F948335DE7D47BD6CE3CD5018380

Function 00007FF7FF415AF8 Relevance: 3.2, APIs: 2, Instructions: 227COMMONLIBRARYCODE

Download Yara Rule

APIs

_clrfp.LIBCMT ref: 00007FF7FF415D45
RaiseException.KERNEL32 ref: 00007FF7FF415D56

Memory Dump Source

Source File: 00000000.00000002.1706197426.00007FF7FF3D1000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF7FF3D0000, based on PE: true

Associated: 00000000.00000002.1706180107.00007FF7FF3D0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1706234158.00007FF7FF418000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1706255447.00007FF7FF42B000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1706255447.00007FF7FF434000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1706289188.00007FF7FF43A000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1706289188.00007FF7FF43E000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff7ff3d0000_b2bXo6vmDm.jbxd

Similarity

API ID: ExceptionRaise_clrfp
String ID:
API String ID: 15204871-0
Opcode ID: 131550a8e914c8a4384a7255cc8ec53066b4dff0b7ecc1394be8dfb6b4310eca
Instruction ID: eef339d7bd21be36844989c3e387234d916941a06e0713cc8c00ae83d90726f1
Opcode Fuzzy Hash: 131550a8e914c8a4384a7255cc8ec53066b4dff0b7ecc1394be8dfb6b4310eca
Instruction Fuzzy Hash: EEB15B73600B898AEB16DF29C8463A87BA0F744F58F658A21DA7D837B4CF39D451C710

Function 00007FF7FF3F8DF4 Relevance: 3.2, APIs: 2, Instructions: 186COMMON

Download Yara Rule

APIs

Part of subcall function 00007FF7FF3F85E0: GetDC.USER32 ref: 00007FF7FF3F85EC
Part of subcall function 00007FF7FF3F85E0: GetDeviceCaps.GDI32 ref: 00007FF7FF3F85FD
Part of subcall function 00007FF7FF3F85E0: ReleaseDC.USER32 ref: 00007FF7FF3F860A

GetObjectW.GDI32 ref: 00007FF7FF3F8E48

Part of subcall function 00007FF7FF3F90B0: GetDC.USER32 ref: 00007FF7FF3F90D9
Part of subcall function 00007FF7FF3F90B0: GetObjectW.GDI32 ref: 00007FF7FF3F9107
Part of subcall function 00007FF7FF3F90B0: ReleaseDC.USER32 ref: 00007FF7FF3F91BB

Memory Dump Source

Source File: 00000000.00000002.1706197426.00007FF7FF3D1000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF7FF3D0000, based on PE: true

Associated: 00000000.00000002.1706180107.00007FF7FF3D0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1706234158.00007FF7FF418000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1706255447.00007FF7FF42B000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1706255447.00007FF7FF434000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1706289188.00007FF7FF43A000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1706289188.00007FF7FF43E000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff7ff3d0000_b2bXo6vmDm.jbxd

Similarity

API ID: ObjectRelease$CapsDevice
String ID:
API String ID: 1061551593-0
Opcode ID: 68dbe16693602acb82a0a9c061fd0d735b77194d41f4ab9e90264308bb487059
Instruction ID: 6270abd48c504c73c35883283bd318c2e8de6e1dbbf5af670034ea43c4bbbc62
Opcode Fuzzy Hash: 68dbe16693602acb82a0a9c061fd0d735b77194d41f4ab9e90264308bb487059
Instruction Fuzzy Hash: 9A816E32B08A4586EB14DF6AD8406ACB771FB88B98F504236DE2D577A4CF38D145C794

Function 00007FF7FF3FA2CC Relevance: 3.0, APIs: 2, Instructions: 46COMMON

Download Yara Rule

APIs

GetLocaleInfoW.KERNEL32 ref: 00007FF7FF3FA315
GetNumberFormatW.KERNEL32 ref: 00007FF7FF3FA371

Memory Dump Source

Source File: 00000000.00000002.1706197426.00007FF7FF3D1000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF7FF3D0000, based on PE: true

Associated: 00000000.00000002.1706180107.00007FF7FF3D0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1706234158.00007FF7FF418000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1706255447.00007FF7FF42B000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1706255447.00007FF7FF434000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1706289188.00007FF7FF43A000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1706289188.00007FF7FF43E000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff7ff3d0000_b2bXo6vmDm.jbxd

Similarity

API ID: FormatInfoLocaleNumber
String ID:
API String ID: 2169056816-0
Opcode ID: a0c8fcaef59427837b2a7c7753e3d717a8442860a15e47712294eddcbb527c28
Instruction ID: a977e2e38d172fc021fecf70d2868f87f839d9abc280860d7076f14cb8b4bd03
Opcode Fuzzy Hash: a0c8fcaef59427837b2a7c7753e3d717a8442860a15e47712294eddcbb527c28
Instruction Fuzzy Hash: A5113B22618BC196E7619B11E8003F9B360FF88B94FC44235DA6D03AA4DF3CE145D798

Function 00007FF7FF3E126C Relevance: 1.7, APIs: 1, Instructions: 241COMMON

Download Yara Rule

APIs

Part of subcall function 00007FF7FF3E24C0: CreateFileW.KERNELBASE ref: 00007FF7FF3E259B
Part of subcall function 00007FF7FF3E24C0: GetLastError.KERNEL32 ref: 00007FF7FF3E25AE
Part of subcall function 00007FF7FF3E24C0: CreateFileW.KERNEL32 ref: 00007FF7FF3E260E
Part of subcall function 00007FF7FF3E24C0: GetLastError.KERNEL32 ref: 00007FF7FF3E2617

_invalid_parameter_noinfo_noreturn.LIBCMT ref: 00007FF7FF3E15D0

Part of subcall function 00007FF7FF3E3980: MoveFileW.KERNEL32 ref: 00007FF7FF3E39BD
Part of subcall function 00007FF7FF3E3980: MoveFileW.KERNEL32 ref: 00007FF7FF3E3A34

Memory Dump Source

Source File: 00000000.00000002.1706197426.00007FF7FF3D1000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF7FF3D0000, based on PE: true

Associated: 00000000.00000002.1706180107.00007FF7FF3D0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1706234158.00007FF7FF418000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1706255447.00007FF7FF42B000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1706255447.00007FF7FF434000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1706289188.00007FF7FF43A000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1706289188.00007FF7FF43E000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff7ff3d0000_b2bXo6vmDm.jbxd

Similarity

API ID: File$CreateErrorLastMove$_invalid_parameter_noinfo_noreturn
String ID:
API String ID: 34527147-0
Opcode ID: 1488c1936801c91a2cee98249e7db5a0996b073c688c31523c97a3bef9f1bd63
Instruction ID: 23e2870dabb063b89a65c87a1431e528487148a36d3f52176fbf70dd09021bcf
Opcode Fuzzy Hash: 1488c1936801c91a2cee98249e7db5a0996b073c688c31523c97a3bef9f1bd63
Instruction Fuzzy Hash: ED91B122B1868682EB10FB62D4442FDA360FF54BC4F80423AEE2D5BBD5DE78D549C790

Function 00007FF7FF3E4EB0 Relevance: 1.5, APIs: 1, Instructions: 31COMMON

Download Yara Rule

APIs

GetVersionExW.KERNEL32 ref: 00007FF7FF3E4EE2

Memory Dump Source

Source File: 00000000.00000002.1706197426.00007FF7FF3D1000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF7FF3D0000, based on PE: true

Associated: 00000000.00000002.1706180107.00007FF7FF3D0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1706234158.00007FF7FF418000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1706255447.00007FF7FF42B000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1706255447.00007FF7FF434000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1706289188.00007FF7FF43A000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1706289188.00007FF7FF43E000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff7ff3d0000_b2bXo6vmDm.jbxd

Similarity

API ID: Version
String ID:
API String ID: 1889659487-0
Opcode ID: 5e1f820920c456f15e44ae9d5f0cc3b6f822566f542002a6e47536c5256bfc9c
Instruction ID: 55ccb5210d3ae17f5250b0b6ba16d82329a6695a25513303ab9d678aadf8792c
Opcode Fuzzy Hash: 5e1f820920c456f15e44ae9d5f0cc3b6f822566f542002a6e47536c5256bfc9c
Instruction Fuzzy Hash: 8C01717594D5C386FB21A720E4543F5A6905FA9709FC60378C5BC0A3D5CE3CA04DAAA5

Function 00007FF7FF408C1C Relevance: 1.5, Strings: 1, Instructions: 219COMMONLIBRARYCODE

Download Yara Rule

Strings

0, xrefs: 00007FF7FF408DD3

Memory Dump Source

Source File: 00000000.00000002.1706197426.00007FF7FF3D1000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF7FF3D0000, based on PE: true

Associated: 00000000.00000002.1706180107.00007FF7FF3D0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1706234158.00007FF7FF418000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1706255447.00007FF7FF42B000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1706255447.00007FF7FF434000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1706289188.00007FF7FF43A000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1706289188.00007FF7FF43E000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff7ff3d0000_b2bXo6vmDm.jbxd

Similarity

API ID: _invalid_parameter_noinfo
String ID: 0
API String ID: 3215553584-4108050209
Opcode ID: 0fbd957179d89af9e1d3453d65279f22830f04fe064c784c04e338e6c7bf3646
Instruction ID: 9c4e7b41e216f5ca73e748cfe64575b183da64cb0cf7a9eae18695bef65e2851
Opcode Fuzzy Hash: 0fbd957179d89af9e1d3453d65279f22830f04fe064c784c04e338e6c7bf3646
Instruction Fuzzy Hash: 6581E521A182C246FBA8AA2582406FDA3A0EF60744F941731DD39877D5CF3DE849D7E9

Function 00007FF7FF4089A0 Relevance: 1.4, Strings: 1, Instructions: 199COMMONLIBRARYCODE

Download Yara Rule

Strings

0, xrefs: 00007FF7FF408B3A

Memory Dump Source

Source File: 00000000.00000002.1706197426.00007FF7FF3D1000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF7FF3D0000, based on PE: true

Associated: 00000000.00000002.1706180107.00007FF7FF3D0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1706234158.00007FF7FF418000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1706255447.00007FF7FF42B000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1706255447.00007FF7FF434000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1706289188.00007FF7FF43A000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1706289188.00007FF7FF43E000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff7ff3d0000_b2bXo6vmDm.jbxd

Similarity

API ID: _invalid_parameter_noinfo
String ID: 0
API String ID: 3215553584-4108050209
Opcode ID: a261a21fa45f21d734edfefcd2ffe271b1157111beaf653bc061adca1a26389c
Instruction ID: 6815a9535903c20f7f1807085e67ec017094947b48b5a4522cd363effdbb2eca
Opcode Fuzzy Hash: a261a21fa45f21d734edfefcd2ffe271b1157111beaf653bc061adca1a26389c
Instruction Fuzzy Hash: D8712A21A0D6C346FB64AA2942402FEE3A09F41744F941731DD7987BD7CE2DE846CBE9

Function 00007FF7FF3EC96C Relevance: 1.4, Strings: 1, Instructions: 142COMMON

Download Yara Rule

Strings

gj, xrefs: 00007FF7FF3EC97B

Memory Dump Source

Source File: 00000000.00000002.1706197426.00007FF7FF3D1000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF7FF3D0000, based on PE: true

Associated: 00000000.00000002.1706180107.00007FF7FF3D0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1706234158.00007FF7FF418000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1706255447.00007FF7FF42B000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1706255447.00007FF7FF434000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1706289188.00007FF7FF43A000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1706289188.00007FF7FF43E000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff7ff3d0000_b2bXo6vmDm.jbxd

Similarity

API ID:
String ID: gj
API String ID: 0-4203073231
Opcode ID: 226aa63bfce789330e15763d8953fb7d553c3450d9c1aa6f260de1088bdface5
Instruction ID: 58b010c32cb25b592264d8bea94975934958d6507dfee221d9fe2a7914592dc1
Opcode Fuzzy Hash: 226aa63bfce789330e15763d8953fb7d553c3450d9c1aa6f260de1088bdface5
Instruction Fuzzy Hash: 0C5191377286908BD714CF25E400AAEB3A5F788798F445126EF5A93B49CB3DE945CF40

Function 00007FF7FF40C838 Relevance: 1.4, Strings: 1, Instructions: 139COMMON

Download Yara Rule

Strings

@, xrefs: 00007FF7FF40C874

Memory Dump Source

Source File: 00000000.00000002.1706197426.00007FF7FF3D1000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF7FF3D0000, based on PE: true

Associated: 00000000.00000002.1706180107.00007FF7FF3D0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1706234158.00007FF7FF418000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1706255447.00007FF7FF42B000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1706255447.00007FF7FF434000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1706289188.00007FF7FF43A000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1706289188.00007FF7FF43E000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff7ff3d0000_b2bXo6vmDm.jbxd

Similarity

API ID:
String ID: @
API String ID: 0-2766056989
Opcode ID: 49e7fa989fc271adaa8e130b28d1cae0d9f82f392019a5f874cdac11a507a941
Instruction ID: d078e26567cdb979e4134558b5ece82f4c2106ef00e259106d72b9b3ce717799
Opcode Fuzzy Hash: 49e7fa989fc271adaa8e130b28d1cae0d9f82f392019a5f874cdac11a507a941
Instruction Fuzzy Hash: 8C41BF22714A84C6EB04DF2AD8142F9B3A1AB58FD0B899236DF2D877A4EE3CD045C340

Function 00007FF7FF410D20 Relevance: 1.3, APIs: 1, Instructions: 7memoryCOMMON

Download Yara Rule

APIs

GetProcessHeap.KERNEL32 ref: 00007FF7FF410D24

Memory Dump Source

Source File: 00000000.00000002.1706197426.00007FF7FF3D1000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF7FF3D0000, based on PE: true

Associated: 00000000.00000002.1706180107.00007FF7FF3D0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1706234158.00007FF7FF418000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1706255447.00007FF7FF42B000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1706255447.00007FF7FF434000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1706289188.00007FF7FF43A000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1706289188.00007FF7FF43E000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff7ff3d0000_b2bXo6vmDm.jbxd

Similarity

API ID: HeapProcess
String ID:
API String ID: 54951025-0
Opcode ID: 4ce929ddb23f73c0a8458b43b9ad49d4d7e2a2f746430c3d48bba7e89996d797
Instruction ID: 2429666af7a99585e9f61e9709f509425205cfacfd383300fb2008351e37a950
Opcode Fuzzy Hash: 4ce929ddb23f73c0a8458b43b9ad49d4d7e2a2f746430c3d48bba7e89996d797
Instruction Fuzzy Hash: 53B09230E17A86C2EB093F516D822A4A2A5BF48790FE88138C52C813A0DE2D20A56760

Function 00007FF7FF3F3964 Relevance: .9, Instructions: 931COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.1706197426.00007FF7FF3D1000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF7FF3D0000, based on PE: true

Associated: 00000000.00000002.1706180107.00007FF7FF3D0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1706234158.00007FF7FF418000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1706255447.00007FF7FF42B000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1706255447.00007FF7FF434000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1706289188.00007FF7FF43A000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1706289188.00007FF7FF43E000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff7ff3d0000_b2bXo6vmDm.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: f10b3c0000bd651423828cb986904098d4bd6c393877fd54d7a895255c38939a
Instruction ID: 319d6199f197227c37ec91d2774864192ce9d1089929938b6acc0e5d4d5eb862
Opcode Fuzzy Hash: f10b3c0000bd651423828cb986904098d4bd6c393877fd54d7a895255c38939a
Instruction Fuzzy Hash: 618203A3A096C186DB08DF29D4442FCBB61EB51B88F49823ACA7E5B3D5DE3CD445C360

Function 00007FF7FF3D76C0 Relevance: .9, Instructions: 893COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.1706197426.00007FF7FF3D1000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF7FF3D0000, based on PE: true

Associated: 00000000.00000002.1706180107.00007FF7FF3D0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1706234158.00007FF7FF418000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1706255447.00007FF7FF42B000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1706255447.00007FF7FF434000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1706289188.00007FF7FF43A000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1706289188.00007FF7FF43E000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff7ff3d0000_b2bXo6vmDm.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: fb6bb4a62616f0bcd3e2e2126cd32946fe2ad160a7c0dbd4e5bd03ed1428d6a6
Instruction ID: 65c9d902a1ed9e0444cd932a2556e46db587882c02bdef02c563a591b43c8718
Opcode Fuzzy Hash: fb6bb4a62616f0bcd3e2e2126cd32946fe2ad160a7c0dbd4e5bd03ed1428d6a6
Instruction Fuzzy Hash: 75627E9AD3AF9A1EE303A53954131D2E35C0EF74C9551E31BFCE431E66EB92A6832314

Function 00007FF7FF3F53F0 Relevance: .9, Instructions: 891COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.1706197426.00007FF7FF3D1000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF7FF3D0000, based on PE: true

Associated: 00000000.00000002.1706180107.00007FF7FF3D0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1706234158.00007FF7FF418000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1706255447.00007FF7FF42B000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1706255447.00007FF7FF434000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1706289188.00007FF7FF43A000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1706289188.00007FF7FF43E000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff7ff3d0000_b2bXo6vmDm.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 48af5ed364a5f24a1952bf7eddbdda76aa6abd9a5dc0519f651bf09102684f27
Instruction ID: 39262bdb090fab8db7c7a35ad240548a14c2fec656781a4775d42540f8fef474
Opcode Fuzzy Hash: 48af5ed364a5f24a1952bf7eddbdda76aa6abd9a5dc0519f651bf09102684f27
Instruction Fuzzy Hash: 2382F0B3A096C18BDB58DE24D4446FCBB61EB55F48F48823ACA7D4B7C5CE389845C7A0

Function 00007FF7FF3EBB90 Relevance: .6, Instructions: 587COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.1706197426.00007FF7FF3D1000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF7FF3D0000, based on PE: true

Associated: 00000000.00000002.1706180107.00007FF7FF3D0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1706234158.00007FF7FF418000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1706255447.00007FF7FF42B000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1706255447.00007FF7FF434000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1706289188.00007FF7FF43A000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1706289188.00007FF7FF43E000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff7ff3d0000_b2bXo6vmDm.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: ffdf8f5a64276e3eb417e3b9ae5b43350349d41efb04db03fca9f8ba9e24336f
Instruction ID: cf600c279a42a403554793ab4cfea3abddfe0c506c0af471273924ff06efe37f
Opcode Fuzzy Hash: ffdf8f5a64276e3eb417e3b9ae5b43350349d41efb04db03fca9f8ba9e24336f
Instruction Fuzzy Hash: 1222E573B246908BD728CF15C89AE5E3766F798744B4B8228DF0ACB789DB38D505CB40

Function 00007FF7FF3F4B98 Relevance: .6, Instructions: 578COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.1706197426.00007FF7FF3D1000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF7FF3D0000, based on PE: true

Associated: 00000000.00000002.1706180107.00007FF7FF3D0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1706234158.00007FF7FF418000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1706255447.00007FF7FF42B000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1706255447.00007FF7FF434000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1706289188.00007FF7FF43A000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1706289188.00007FF7FF43E000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff7ff3d0000_b2bXo6vmDm.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 21143e83615dcc23e36b64f0d60848ac948cba63854c17a605a1a3ec217f9251
Instruction ID: 31c7df30a163e5d6f418fac61ec236f0e2f9b678327bb6d9640138a15ca0f6a3
Opcode Fuzzy Hash: 21143e83615dcc23e36b64f0d60848ac948cba63854c17a605a1a3ec217f9251
Instruction Fuzzy Hash: 8832BF72A041918BEB1C9F24D5906FC77A1FB54B48F418239DA7A8BBC9DF3CA850C790

Function 00007FF7FF3F1F20 Relevance: .3, Instructions: 337COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.1706197426.00007FF7FF3D1000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF7FF3D0000, based on PE: true

Associated: 00000000.00000002.1706180107.00007FF7FF3D0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1706234158.00007FF7FF418000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1706255447.00007FF7FF42B000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1706255447.00007FF7FF434000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1706289188.00007FF7FF43A000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1706289188.00007FF7FF43E000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff7ff3d0000_b2bXo6vmDm.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: c9f6a2aa98f4e9a823078b7adb96348ac20125961d45f013e1d8c3efdf9901f2
Instruction ID: 2d1247492b858c87661f419f53577d0d4bb6965b9d23cdd25a943bbb6f253700
Opcode Fuzzy Hash: c9f6a2aa98f4e9a823078b7adb96348ac20125961d45f013e1d8c3efdf9901f2
Instruction Fuzzy Hash: 2BE1C322A082C28BEF68AF28E0842BDB790EF44748F564239DB7D4B7C5DE3CE5458754

Function 00007FF7FF3F3484 Relevance: .3, Instructions: 302COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.1706197426.00007FF7FF3D1000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF7FF3D0000, based on PE: true

Associated: 00000000.00000002.1706180107.00007FF7FF3D0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1706234158.00007FF7FF418000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1706255447.00007FF7FF42B000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1706255447.00007FF7FF434000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1706289188.00007FF7FF43A000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1706289188.00007FF7FF43E000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff7ff3d0000_b2bXo6vmDm.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 3d9f1d4af68ebc00f7ab7abf4cea58f5074969ee2768498b55c72978f68bcf28
Instruction ID: 53322f4e8af9d5145824ebc3d03ea7073a3c7f5384a80a7b399500083b06e20b
Opcode Fuzzy Hash: 3d9f1d4af68ebc00f7ab7abf4cea58f5074969ee2768498b55c72978f68bcf28
Instruction Fuzzy Hash: CAB1BEA2B056C993EF5CAA6696086E9A391BB44BC4F84813ADE3D1F7C0DF3CE1558350

Function 00007FF7FF3D7288 Relevance: .3, Instructions: 294COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.1706197426.00007FF7FF3D1000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF7FF3D0000, based on PE: true

Associated: 00000000.00000002.1706180107.00007FF7FF3D0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1706234158.00007FF7FF418000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1706255447.00007FF7FF42B000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1706255447.00007FF7FF434000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1706289188.00007FF7FF43A000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1706289188.00007FF7FF43E000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff7ff3d0000_b2bXo6vmDm.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 063370d9e2e9571dc593e8358d008e0ec5385ad0435e9f2f5019d46da215c13b
Instruction ID: 5713990ca148a832fce11a3679178b0c5dccd08cfd1860ffd7bca52bc5c4a02f
Opcode Fuzzy Hash: 063370d9e2e9571dc593e8358d008e0ec5385ad0435e9f2f5019d46da215c13b
Instruction Fuzzy Hash: 4CC1ADB7B281908FE350CF7AD400AAD7BB1F39878CB515125EF69A7B09D639E605CB40

Function 00007FF7FF3F2D58 Relevance: .3, Instructions: 268COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.1706197426.00007FF7FF3D1000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF7FF3D0000, based on PE: true

Associated: 00000000.00000002.1706180107.00007FF7FF3D0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1706234158.00007FF7FF418000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1706255447.00007FF7FF42B000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1706255447.00007FF7FF434000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1706289188.00007FF7FF43A000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1706289188.00007FF7FF43E000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff7ff3d0000_b2bXo6vmDm.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 602477e063b5c1ca901f2159ae3c7fc010244aaa433e93e1960e83d539d05e76
Instruction ID: ca444c973ebd1b54f3fa2299e1357997ff892a2cd7c900849e9e1b8f0446461c
Opcode Fuzzy Hash: 602477e063b5c1ca901f2159ae3c7fc010244aaa433e93e1960e83d539d05e76
Instruction Fuzzy Hash: 60A12372A081C287EF19EA24D4447F9A691EFA4744F954339DA7A1F7C6CE7CE84183A0

Function 00007FF7FF3EAF18 Relevance: .2, Instructions: 244COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.1706197426.00007FF7FF3D1000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF7FF3D0000, based on PE: true

Associated: 00000000.00000002.1706180107.00007FF7FF3D0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1706234158.00007FF7FF418000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1706255447.00007FF7FF42B000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1706255447.00007FF7FF434000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1706289188.00007FF7FF43A000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1706289188.00007FF7FF43E000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff7ff3d0000_b2bXo6vmDm.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: e3f156a61251d3696a660eff3e2c5499dd818c979554cbf7ea7c30eccab92618
Instruction ID: 4ab749307ce6c047900531f941b5c82f0cae02d1610e2ac1b376866b2d1517e5
Opcode Fuzzy Hash: e3f156a61251d3696a660eff3e2c5499dd818c979554cbf7ea7c30eccab92618
Instruction Fuzzy Hash: 26C10773A291E04DE302CBB5A4248FD3FF1E71D34DB464255EFA666B4AC6285205DF70

Function 00007FF7FF3DA310 Relevance: .2, Instructions: 230COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.1706197426.00007FF7FF3D1000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF7FF3D0000, based on PE: true

Associated: 00000000.00000002.1706180107.00007FF7FF3D0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1706234158.00007FF7FF418000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1706255447.00007FF7FF42B000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1706255447.00007FF7FF434000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1706289188.00007FF7FF43A000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1706289188.00007FF7FF43E000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff7ff3d0000_b2bXo6vmDm.jbxd

Similarity

API ID: AddressProc
String ID:
API String ID: 190572456-0
Opcode ID: ba0d91b71a6ba36ace61fab0c0f7d4922daa1e3f8d028e3e8b3457ff5b2a4fa0
Instruction ID: 01c86da9fde44987cc4f689070cdfaf061d8511d73e78d8bd6ef3445b0771ac1
Opcode Fuzzy Hash: ba0d91b71a6ba36ace61fab0c0f7d4922daa1e3f8d028e3e8b3457ff5b2a4fa0
Instruction Fuzzy Hash: 2B911262A185C596EB11EF29D4402FDA721FF95788F840231EF6E0B79ADE38D60AC350

Function 00007FF7FF3EB534 Relevance: .2, Instructions: 181COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.1706197426.00007FF7FF3D1000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF7FF3D0000, based on PE: true

Associated: 00000000.00000002.1706180107.00007FF7FF3D0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1706234158.00007FF7FF418000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1706255447.00007FF7FF42B000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1706255447.00007FF7FF434000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1706289188.00007FF7FF43A000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1706289188.00007FF7FF43E000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff7ff3d0000_b2bXo6vmDm.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: cfd80b8924012b3a81ce264cde7180753b201b1e387c519ebd9873ce58afa85e
Instruction ID: 048fc0ddf6fa53b0622f86aef1d42111c0b8e941f9f1df5f1ea9f773ddb22921
Opcode Fuzzy Hash: cfd80b8924012b3a81ce264cde7180753b201b1e387c519ebd9873ce58afa85e
Instruction Fuzzy Hash: 10612A23B081D54AEB02DF75C5005FDBFA1AF09784B854136CEB95B696CE3CE509CB62

Function 00007FF7FF3F21D0 Relevance: .1, Instructions: 137COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.1706197426.00007FF7FF3D1000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF7FF3D0000, based on PE: true

Associated: 00000000.00000002.1706180107.00007FF7FF3D0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1706234158.00007FF7FF418000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1706255447.00007FF7FF42B000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1706255447.00007FF7FF434000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1706289188.00007FF7FF43A000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1706289188.00007FF7FF43E000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff7ff3d0000_b2bXo6vmDm.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 8137a9b05b05aada6fbcd6bbdda66db02b1ef4637fe403d2df7c72722ebbdea5
Instruction ID: d0ab3ed6b3dc3a53c98e73c2807eb90184e3e29ba3fbe4b520b27651f9ade065
Opcode Fuzzy Hash: 8137a9b05b05aada6fbcd6bbdda66db02b1ef4637fe403d2df7c72722ebbdea5
Instruction Fuzzy Hash: 05511373B181919BEB689F2890047BDB751FB40B44F844239DA794B6C8CE7DE540CB90

Function 00007FF7FF3F2AB0 Relevance: .1, Instructions: 112COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.1706197426.00007FF7FF3D1000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF7FF3D0000, based on PE: true

Associated: 00000000.00000002.1706180107.00007FF7FF3D0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1706234158.00007FF7FF418000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1706255447.00007FF7FF42B000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1706255447.00007FF7FF434000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1706289188.00007FF7FF43A000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1706289188.00007FF7FF43E000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff7ff3d0000_b2bXo6vmDm.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 525267a7f117e2089c634eae81b531c40420bccc1aa688f1dd99d62513960580
Instruction ID: 28ad740daf7635e3947e6ac1bddd2fa4c2ec5152f4793e609d53361c9fb0ee6d
Opcode Fuzzy Hash: 525267a7f117e2089c634eae81b531c40420bccc1aa688f1dd99d62513960580
Instruction Fuzzy Hash: 0E31C3A2A085C28BDB08EE56D5902BEA790BB54340F85823DDF768B7C1DE7CE455C760

Function 00007FF7FF3EDC70 Relevance: .0, Instructions: 39COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.1706197426.00007FF7FF3D1000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF7FF3D0000, based on PE: true

Associated: 00000000.00000002.1706180107.00007FF7FF3D0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1706234158.00007FF7FF418000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1706255447.00007FF7FF42B000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1706255447.00007FF7FF434000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1706289188.00007FF7FF43A000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1706289188.00007FF7FF43E000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff7ff3d0000_b2bXo6vmDm.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 6a4fac86f8f1a6b9d8c17b4c2881c5c96027003405599c7815143c772f625e0d
Instruction ID: 446e57c6e7b368f7e8abb5aa84f0f88a69b820c629f15decf1e6168845a46ab6
Opcode Fuzzy Hash: 6a4fac86f8f1a6b9d8c17b4c2881c5c96027003405599c7815143c772f625e0d
Instruction Fuzzy Hash: 66F0BD61F9C08283FB582028D8193B9A0559F11390F944A3DD23BCF2C9FDADA48B11AB

Function 00007FF7FF403354 Relevance: .0, Instructions: 2COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.1706197426.00007FF7FF3D1000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF7FF3D0000, based on PE: true

Associated: 00000000.00000002.1706180107.00007FF7FF3D0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1706234158.00007FF7FF418000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1706255447.00007FF7FF42B000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1706255447.00007FF7FF434000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1706289188.00007FF7FF43A000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1706289188.00007FF7FF43E000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff7ff3d0000_b2bXo6vmDm.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: e57e15d0ab639cfe726454a8769b7378f2b682ff734fe90589bfb13db1bf513a
Instruction ID: 8b4dd9c362e8d9c9bda1f2d279eb486bd84001faca6773b5946b05ebade88cf4
Opcode Fuzzy Hash: e57e15d0ab639cfe726454a8769b7378f2b682ff734fe90589bfb13db1bf513a
Instruction Fuzzy Hash: 7AA00161908C86D0E759AB10A8A04B0A620BB90310BA80231E03D510E49E3DA40182A8

Function 00007FF7FF3DD7D0 Relevance: 26.3, APIs: 1, Strings: 14, Instructions: 98COMMON

Download Yara Rule

APIs

_invalid_parameter_noinfo_noreturn.LIBCMT ref: 00007FF7FF3DD964

Strings

:$EFS:$LOGGED_UTILITY_STREAM, xrefs: 00007FF7FF3DD86A
::$LOGGED_UTILITY_STREAM, xrefs: 00007FF7FF3DD85F
::$EA, xrefs: 00007FF7FF3DD81D
::$ATTRIBUTE_LIST, xrefs: 00007FF7FF3DD7FC
:$I30:$INDEX_ALLOCATION, xrefs: 00007FF7FF3DD849
:$TXF_DATA:$LOGGED_UTILITY_STREAM, xrefs: 00007FF7FF3DD875
::$REPARSE_POINT, xrefs: 00007FF7FF3DD88B
::$FILE_NAME, xrefs: 00007FF7FF3DD833
::$EA_INFORMATION, xrefs: 00007FF7FF3DD828
::$BITMAP, xrefs: 00007FF7FF3DD807
::$INDEX_ROOT, xrefs: 00007FF7FF3DD854
::$INDEX_ALLOCATION, xrefs: 00007FF7FF3DD83E
::$OBJECT_ID, xrefs: 00007FF7FF3DD880
::$DATA, xrefs: 00007FF7FF3DD812

Memory Dump Source

Source File: 00000000.00000002.1706197426.00007FF7FF3D1000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF7FF3D0000, based on PE: true

Associated: 00000000.00000002.1706180107.00007FF7FF3D0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1706234158.00007FF7FF418000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1706255447.00007FF7FF42B000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1706255447.00007FF7FF434000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1706289188.00007FF7FF43A000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1706289188.00007FF7FF43E000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff7ff3d0000_b2bXo6vmDm.jbxd

Similarity

API ID: _invalid_parameter_noinfo_noreturn
String ID: :$EFS:$LOGGED_UTILITY_STREAM$:$I30:$INDEX_ALLOCATION$:$TXF_DATA:$LOGGED_UTILITY_STREAM$::$ATTRIBUTE_LIST$::$BITMAP$::$DATA$::$EA$::$EA_INFORMATION$::$FILE_NAME$::$INDEX_ALLOCATION$::$INDEX_ROOT$::$LOGGED_UTILITY_STREAM$::$OBJECT_ID$::$REPARSE_POINT
API String ID: 3668304517-727060406
Opcode ID: 9722f19d9730c17eaeca2eefbf6c05556aeae8c55d78850e8e2a1aeae63cce70
Instruction ID: e0286fd9edf01ce53463e1819cd5739dfdde2bd296aa4e6b0d5b4568d5e8a491
Opcode Fuzzy Hash: 9722f19d9730c17eaeca2eefbf6c05556aeae8c55d78850e8e2a1aeae63cce70
Instruction Fuzzy Hash: B741F836B05F85D9EB01AB60E4403ED73A5EB48798F90023ADA7C07BA9EF38D155C394

Function 00007FF7FF402A10 Relevance: 21.1, APIs: 8, Strings: 4, Instructions: 61libraryloaderCOMMON

Download Yara Rule

APIs

InitializeCriticalSectionAndSpinCount.KERNEL32 ref: 00007FF7FF402A26
GetModuleHandleW.KERNEL32 ref: 00007FF7FF402A33
GetModuleHandleW.KERNEL32 ref: 00007FF7FF402A48
GetProcAddress.KERNEL32 ref: 00007FF7FF402A60
GetProcAddress.KERNEL32 ref: 00007FF7FF402A73
CreateEventW.KERNEL32 ref: 00007FF7FF402A9F
DeleteCriticalSection.KERNEL32 ref: 00007FF7FF402AEB
CloseHandle.KERNEL32 ref: 00007FF7FF402AFD

Strings

WakeAllConditionVariable, xrefs: 00007FF7FF402A66
api-ms-win-core-synch-l1-2-0.dll, xrefs: 00007FF7FF402A2C
SleepConditionVariableCS, xrefs: 00007FF7FF402A56
kernel32.dll, xrefs: 00007FF7FF402A41

Memory Dump Source

Source File: 00000000.00000002.1706197426.00007FF7FF3D1000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF7FF3D0000, based on PE: true

Associated: 00000000.00000002.1706180107.00007FF7FF3D0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1706234158.00007FF7FF418000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1706255447.00007FF7FF42B000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1706255447.00007FF7FF434000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1706289188.00007FF7FF43A000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1706289188.00007FF7FF43E000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff7ff3d0000_b2bXo6vmDm.jbxd

Similarity

API ID: Handle$AddressCriticalModuleProcSection$CloseCountCreateDeleteEventInitializeSpin
String ID: SleepConditionVariableCS$WakeAllConditionVariable$api-ms-win-core-synch-l1-2-0.dll$kernel32.dll
API String ID: 2565136772-3242537097
Opcode ID: 6e1e709f092c3aabc6fb1c9db3d7c09c3ef1a4a7bf2af41e7ac9402dec2f511f
Instruction ID: 30d9e549698ba5e4b3931fb81350ec89f8e14dc7bb68b5b641112fa49e18cccf
Opcode Fuzzy Hash: 6e1e709f092c3aabc6fb1c9db3d7c09c3ef1a4a7bf2af41e7ac9402dec2f511f
Instruction Fuzzy Hash: 68215E61E09A8781FF56BB60E8541F8E7A0AF487A0FD40335D83E026E0DF7CA555D7A4

Function 00007FF7FF3E6A0C Relevance: 16.2, APIs: 6, Strings: 3, Instructions: 444COMMON

Download Yara Rule

APIs

_invalid_parameter_noinfo_noreturn.LIBCMT ref: 00007FF7FF3E70A6

Part of subcall function 00007FF7FF3D2004: std::_Xinvalid_argument.LIBCPMT ref: 00007FF7FF3D200F

_invalid_parameter_noinfo_noreturn.LIBCMT ref: 00007FF7FF3E70B2
_invalid_parameter_noinfo_noreturn.LIBCMT ref: 00007FF7FF3E70B8
_invalid_parameter_noinfo_noreturn.LIBCMT ref: 00007FF7FF3E70C4
_invalid_parameter_noinfo_noreturn.LIBCMT ref: 00007FF7FF3E70D6
_invalid_parameter_noinfo_noreturn.LIBCMT ref: 00007FF7FF3E70DC

Strings

UNC, xrefs: 00007FF7FF3E6BBF
DXGIDebug.dll, xrefs: 00007FF7FF3E6A18
\\?\, xrefs: 00007FF7FF3E6A57, 00007FF7FF3E6A66

Memory Dump Source

Source File: 00000000.00000002.1706197426.00007FF7FF3D1000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF7FF3D0000, based on PE: true

Associated: 00000000.00000002.1706180107.00007FF7FF3D0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1706234158.00007FF7FF418000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1706255447.00007FF7FF42B000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1706255447.00007FF7FF434000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1706289188.00007FF7FF43A000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1706289188.00007FF7FF43E000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff7ff3d0000_b2bXo6vmDm.jbxd

Similarity

API ID: _invalid_parameter_noinfo_noreturn$Xinvalid_argumentstd::_
String ID: DXGIDebug.dll$UNC$\\?\
API String ID: 4097890229-4048004291
Opcode ID: fb1ac769355281392679e6cccb69878fe575312718547a0a82cc4cd56cbd4b61
Instruction ID: d7f18d6e56995157308e2b5e3dc6578c64b0400834b1ba8cd0fa9f40fd1e4a6f
Opcode Fuzzy Hash: fb1ac769355281392679e6cccb69878fe575312718547a0a82cc4cd56cbd4b61
Instruction Fuzzy Hash: CC12A222B18A8682EB10AB65D4441FDA371EF81B94F904339DA7D0BBD9DF3CE549C391

Function 00007FF7FF3FA440 Relevance: 16.0, APIs: 7, Strings: 2, Instructions: 257COMMON

Download Yara Rule

APIs

Part of subcall function 00007FF7FF3D129C: Concurrency::cancel_current_task.LIBCPMT ref: 00007FF7FF3D1396

_invalid_parameter_noinfo_noreturn.LIBCMT ref: 00007FF7FF3FA72F
_invalid_parameter_noinfo_noreturn.LIBCMT ref: 00007FF7FF3FA735
_invalid_parameter_noinfo_noreturn.LIBCMT ref: 00007FF7FF3FA73B
_invalid_parameter_noinfo_noreturn.LIBCMT ref: 00007FF7FF3FA741
_invalid_parameter_noinfo_noreturn.LIBCMT ref: 00007FF7FF3FA747
EndDialog.USER32 ref: 00007FF7FF3FA7BA

Strings

GETPASSWORD1, xrefs: 00007FF7FF3FA773
Software\WinRAR SFX, xrefs: 00007FF7FF3FA52B, 00007FF7FF3FA53A

Memory Dump Source

Source File: 00000000.00000002.1706197426.00007FF7FF3D1000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF7FF3D0000, based on PE: true

Associated: 00000000.00000002.1706180107.00007FF7FF3D0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1706234158.00007FF7FF418000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1706255447.00007FF7FF42B000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1706255447.00007FF7FF434000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1706289188.00007FF7FF43A000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1706289188.00007FF7FF43E000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff7ff3d0000_b2bXo6vmDm.jbxd

Similarity

API ID: _invalid_parameter_noinfo_noreturn$Concurrency::cancel_current_taskDialog
String ID: GETPASSWORD1$Software\WinRAR SFX
API String ID: 431506467-1315819833
Opcode ID: 492748e4b920a0caf0e9a60e4b7f93ee9a00f1d6e92b46c97eb4ea70364b9bd5
Instruction ID: efbdd87059089f2723b1eaa1d856a28d0e968eecaf50c4c9adf881581ae5d667
Opcode Fuzzy Hash: 492748e4b920a0caf0e9a60e4b7f93ee9a00f1d6e92b46c97eb4ea70364b9bd5
Instruction Fuzzy Hash: 6FB19162F197C286FF00ABA4D4442FC6361AF45794F904339DA7C2AAD9DE7CE149C3A4

Function 00007FF7FF40E650 Relevance: 15.9, APIs: 1, Strings: 8, Instructions: 117COMMONLIBRARYCODE

Download Yara Rule

APIs

_invalid_parameter_noinfo.LIBCMT ref: 00007FF7FF40E7CD

Strings

INF, xrefs: 00007FF7FF40E6C3
inf, xrefs: 00007FF7FF40E6D6
nan(ind), xrefs: 00007FF7FF40E706
NAN(SNAN), xrefs: 00007FF7FF40E6E5
NAN, xrefs: 00007FF7FF40E6B1
nan, xrefs: 00007FF7FF40E6B8
NAN(IND), xrefs: 00007FF7FF40E6FB
nan(snan), xrefs: 00007FF7FF40E6F0

Memory Dump Source

Source File: 00000000.00000002.1706197426.00007FF7FF3D1000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF7FF3D0000, based on PE: true

Associated: 00000000.00000002.1706180107.00007FF7FF3D0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1706234158.00007FF7FF418000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1706255447.00007FF7FF42B000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1706255447.00007FF7FF434000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1706289188.00007FF7FF43A000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1706289188.00007FF7FF43E000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff7ff3d0000_b2bXo6vmDm.jbxd

Similarity

API ID: _invalid_parameter_noinfo
String ID: INF$NAN$NAN(IND)$NAN(SNAN)$inf$nan$nan(ind)$nan(snan)
API String ID: 3215553584-2617248754
Opcode ID: ca8329083cbd7a022b2adefca7a3bb58d0ae1dff90efa4c28dbe4d3f14657870
Instruction ID: 07d34a9a47170e67f0581f75afd1d8f4dc2096e46442e6857ca929d9b8819bed
Opcode Fuzzy Hash: ca8329083cbd7a022b2adefca7a3bb58d0ae1dff90efa4c28dbe4d3f14657870
Instruction Fuzzy Hash: 5941BE72A19B8589E701DF25E8417E977A4FB183A8F904636EE7C07B94DE3CD025C394

Function 00007FF7FF3FF390 Relevance: 15.8, APIs: 8, Strings: 1, Instructions: 85COMMON

Download Yara Rule

APIs

GetWindow.USER32 ref: 00007FF7FF3FF3CF
GetClassNameW.USER32 ref: 00007FF7FF3FF3FC
GetWindowLongPtrW.USER32 ref: 00007FF7FF3FF41D
IsDlgButtonChecked.USER32 ref: 00007FF7FF3FF437
GetObjectW.GDI32 ref: 00007FF7FF3FF452
IsDlgButtonChecked.USER32 ref: 00007FF7FF3FF487
DeleteObject.GDI32 ref: 00007FF7FF3FF490
GetWindow.USER32 ref: 00007FF7FF3FF49E

Strings

STATIC, xrefs: 00007FF7FF3FF402

Memory Dump Source

Source File: 00000000.00000002.1706197426.00007FF7FF3D1000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF7FF3D0000, based on PE: true

Associated: 00000000.00000002.1706180107.00007FF7FF3D0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1706234158.00007FF7FF418000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1706255447.00007FF7FF42B000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1706255447.00007FF7FF434000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1706289188.00007FF7FF43A000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1706289188.00007FF7FF43E000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff7ff3d0000_b2bXo6vmDm.jbxd

Similarity

API ID: Window$ButtonCheckedObject$ClassDeleteLongName
String ID: STATIC
API String ID: 781704138-1882779555
Opcode ID: 028936735c5caa7e1c5955390d3996a5d13f8d6e72d7f98742e6e6c768b0ab82
Instruction ID: 0303329e44856f7f2d40038cf79a37cc2db6a2bd971c73fa6396bd4bf24ded9b
Opcode Fuzzy Hash: 028936735c5caa7e1c5955390d3996a5d13f8d6e72d7f98742e6e6c768b0ab82
Instruction Fuzzy Hash: 76318F21B0968242FF64BB21A5547F9A3A1BF89BC0F800234DD7D0BBD5DE3CE40697A0

Function 00007FF7FF3F6E80 Relevance: 14.2, APIs: 4, Strings: 4, Instructions: 204memoryCOMMON

Download Yara Rule

APIs

GlobalAlloc.KERNEL32(?,?,?,?,?,?,?,?,?,?,?,00007FF7FF3F7E9B), ref: 00007FF7FF3F7080
_invalid_parameter_noinfo_noreturn.LIBCMT ref: 00007FF7FF3F717B
_invalid_parameter_noinfo_noreturn.LIBCMT ref: 00007FF7FF3F7181
_invalid_parameter_noinfo_noreturn.LIBCMT ref: 00007FF7FF3F7187

Strings

<html><head><meta http-equiv="content-type" content="text/html; charset=utf-8"></head>, xrefs: 00007FF7FF3F6ED5, 00007FF7FF3F6EE4
<html>, xrefs: 00007FF7FF3F6F13
<style>body{font-family:"Arial";font-size:12;}</style>, xrefs: 00007FF7FF3F6F2C, 00007FF7FF3F6F3B
</html>, xrefs: 00007FF7FF3F6F72, 00007FF7FF3F6F81

Memory Dump Source

Source File: 00000000.00000002.1706197426.00007FF7FF3D1000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF7FF3D0000, based on PE: true

Associated: 00000000.00000002.1706180107.00007FF7FF3D0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1706234158.00007FF7FF418000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1706255447.00007FF7FF42B000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1706255447.00007FF7FF434000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1706289188.00007FF7FF43A000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1706289188.00007FF7FF43E000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff7ff3d0000_b2bXo6vmDm.jbxd

Similarity

API ID: _invalid_parameter_noinfo_noreturn$AllocGlobal
String ID: </html>$<html>$<html><head><meta http-equiv="content-type" content="text/html; charset=utf-8"></head>$<style>body{font-family:"Arial";font-size:12;}</style>
API String ID: 2721297748-1533471033
Opcode ID: b0a568968ba406e2562f5405558042a856f124114ebc2f236df8f8f8fbeda86d
Instruction ID: b6478470f89eccdf87327382e3faca46970b376e84531df2645e5b6bb423e5a3
Opcode Fuzzy Hash: b0a568968ba406e2562f5405558042a856f124114ebc2f236df8f8f8fbeda86d
Instruction Fuzzy Hash: FB818262F18A8696FB05EBA5D4401FDA371AF44798F800235DE3D1B6D9DE38E50AC3A4

Function 00007FF7FF3FAE90 Relevance: 14.1, APIs: 7, Strings: 1, Instructions: 94COMMON

Download Yara Rule

Strings

LICENSEDLG, xrefs: 00007FF7FF3FAEAE

Memory Dump Source

Source File: 00000000.00000002.1706197426.00007FF7FF3D1000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF7FF3D0000, based on PE: true

Associated: 00000000.00000002.1706180107.00007FF7FF3D0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1706234158.00007FF7FF418000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1706255447.00007FF7FF42B000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1706255447.00007FF7FF434000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1706289188.00007FF7FF43A000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1706289188.00007FF7FF43E000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff7ff3d0000_b2bXo6vmDm.jbxd

Similarity

API ID: Item$Text
String ID: LICENSEDLG
API String ID: 1601838975-2177901306
Opcode ID: e29db3841e3cac596c2aa5df9f59b5580221106af80a371471668d29e16b4ce4
Instruction ID: d06a8e68dc647b0068cc616472281cd2d5f5bb8ceb105b2e8d224167a42eeb1c
Opcode Fuzzy Hash: e29db3841e3cac596c2aa5df9f59b5580221106af80a371471668d29e16b4ce4
Instruction Fuzzy Hash: 80416121A1869283FF58BB11A8547F9A251AF84BD0F844239DD3E0BBE4CF7CE54593A4

Function 00007FF7FF3EB9B4 Relevance: 14.1, APIs: 3, Strings: 5, Instructions: 84libraryloaderCOMMON

Download Yara Rule

APIs

GetProcAddress.KERNEL32 ref: 00007FF7FF3EBA12
GetProcAddress.KERNEL32 ref: 00007FF7FF3EBA2D
GetCurrentProcessId.KERNEL32 ref: 00007FF7FF3EBACA

Part of subcall function 00007FF7FF3EDFD0: GetSystemDirectoryW.KERNEL32 ref: 00007FF7FF3EDDDF

Strings

Crypt32.dll, xrefs: 00007FF7FF3EB9F0
CryptProtectMemory failed, xrefs: 00007FF7FF3EBA80
CryptProtectMemory, xrefs: 00007FF7FF3EBA08
CryptUnprotectMemory failed, xrefs: 00007FF7FF3EBAC1
CryptUnprotectMemory, xrefs: 00007FF7FF3EBA1F

Memory Dump Source

Source File: 00000000.00000002.1706197426.00007FF7FF3D1000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF7FF3D0000, based on PE: true

Associated: 00000000.00000002.1706180107.00007FF7FF3D0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1706234158.00007FF7FF418000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1706255447.00007FF7FF42B000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1706255447.00007FF7FF434000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1706289188.00007FF7FF43A000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1706289188.00007FF7FF43E000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff7ff3d0000_b2bXo6vmDm.jbxd

Similarity

API ID: AddressProc$CurrentDirectoryProcessSystem
String ID: Crypt32.dll$CryptProtectMemory$CryptProtectMemory failed$CryptUnprotectMemory$CryptUnprotectMemory failed
API String ID: 2915667086-2207617598
Opcode ID: 6794cfd2df2083ddb130d433e4ca33b69faefb70ddab7dfcfa84983386d80e8a
Instruction ID: 2af5b8dfebe7e2bd5961f1ffcbaac327392cdf52b3724c119cf50942204a61e3
Opcode Fuzzy Hash: 6794cfd2df2083ddb130d433e4ca33b69faefb70ddab7dfcfa84983386d80e8a
Instruction Fuzzy Hash: 6D316120B0DB8681FF16BB15E9502F9A3A0AF44B94F940339C97D073E4DE3CE445A3A6

Function 00007FF7FF3F87D8 Relevance: 12.7, APIs: 5, Strings: 2, Instructions: 415COMMON

Download Yara Rule

APIs

_invalid_parameter_noinfo_noreturn.LIBCMT ref: 00007FF7FF3F8DB6
_invalid_parameter_noinfo_noreturn.LIBCMT ref: 00007FF7FF3F8DC2
_invalid_parameter_noinfo_noreturn.LIBCMT ref: 00007FF7FF3F8DCE
_invalid_parameter_noinfo_noreturn.LIBCMT ref: 00007FF7FF3F8DDA
_invalid_parameter_noinfo_noreturn.LIBCMT ref: 00007FF7FF3F8DE0

Strings

, xrefs: 00007FF7FF3F88BE
, xrefs: 00007FF7FF3F8A55

Memory Dump Source

Source File: 00000000.00000002.1706197426.00007FF7FF3D1000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF7FF3D0000, based on PE: true

Associated: 00000000.00000002.1706180107.00007FF7FF3D0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1706234158.00007FF7FF418000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1706255447.00007FF7FF42B000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1706255447.00007FF7FF434000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1706289188.00007FF7FF43A000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1706289188.00007FF7FF43E000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff7ff3d0000_b2bXo6vmDm.jbxd

Similarity

API ID: _invalid_parameter_noinfo_noreturn
String ID: $
API String ID: 3668304517-227171996
Opcode ID: 93e15664c85aa1a1f9ae32de8f7f246b6d6edb1843b9570bb481cf61e9e74ae4
Instruction ID: 78f4bcbb20a018351f814ffe548d8d517db2ef4b0c21f40ab50944a36553ad31
Opcode Fuzzy Hash: 93e15664c85aa1a1f9ae32de8f7f246b6d6edb1843b9570bb481cf61e9e74ae4
Instruction Fuzzy Hash: 1CF1E162F15A8682EF08AB64D4441FCA321AF44B98F805339DA3D1B7D5DF7CE084D3A8

Function 00007FF7FF4057EC Relevance: 10.8, APIs: 3, Strings: 3, Instructions: 317COMMONLIBRARYCODE

Download Yara Rule

APIs

Is_bad_exception_allowed.LIBVCRUNTIME ref: 00007FF7FF40598A
std::bad_alloc::bad_alloc.LIBCMT ref: 00007FF7FF405CAD
abort.LIBCMT ref: 00007FF7FF405CE1

Strings

csm, xrefs: 00007FF7FF4059B1
csm, xrefs: 00007FF7FF405933
csm, xrefs: 00007FF7FF4058D1

Memory Dump Source

Source File: 00000000.00000002.1706197426.00007FF7FF3D1000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF7FF3D0000, based on PE: true

Associated: 00000000.00000002.1706180107.00007FF7FF3D0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1706234158.00007FF7FF418000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1706255447.00007FF7FF42B000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1706255447.00007FF7FF434000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1706289188.00007FF7FF43A000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1706289188.00007FF7FF43E000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff7ff3d0000_b2bXo6vmDm.jbxd

Similarity

API ID: Is_bad_exception_allowedabortstd::bad_alloc::bad_alloc
String ID: csm$csm$csm
API String ID: 2940173790-393685449
Opcode ID: 65edb01f61f21fff02eaccc9a46b43a233fa456fccf40e480b66f774ee54b1a7
Instruction ID: 283d8a13de1bf868d3416a402f5af03a0a735794a6e0c6c9699eef13cbb4ca0b
Opcode Fuzzy Hash: 65edb01f61f21fff02eaccc9a46b43a233fa456fccf40e480b66f774ee54b1a7
Instruction Fuzzy Hash: 88E180739086C28AE710AB65D4803FDBBA0FB45B58F944235DABD47696CF38E485CB90

Function 00007FF7FF3E4F38 Relevance: 10.7, APIs: 1, Strings: 5, Instructions: 158COMMON

Download Yara Rule

APIs

Part of subcall function 00007FF7FF3E4E24: SysAllocString.OLEAUT32 ref: 00007FF7FF3E4E5F

VariantClear.OLEAUT32 ref: 00007FF7FF3E5125

Strings

SELECT * FROM Win32_OperatingSystem, xrefs: 00007FF7FF3E5017
ROOT\CIMV2, xrefs: 00007FF7FF3E4F7B
WQL, xrefs: 00007FF7FF3E502A
Windows 10, xrefs: 00007FF7FF3E510A
Name, xrefs: 00007FF7FF3E50F9

Memory Dump Source

Source File: 00000000.00000002.1706197426.00007FF7FF3D1000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF7FF3D0000, based on PE: true

Associated: 00000000.00000002.1706180107.00007FF7FF3D0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1706234158.00007FF7FF418000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1706255447.00007FF7FF42B000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1706255447.00007FF7FF434000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1706289188.00007FF7FF43A000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1706289188.00007FF7FF43E000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff7ff3d0000_b2bXo6vmDm.jbxd

Similarity

API ID: AllocClearStringVariant
String ID: Name$ROOT\CIMV2$SELECT * FROM Win32_OperatingSystem$WQL$Windows 10
API String ID: 1959693985-3505469590
Opcode ID: a8b35b7bcd37d82ee4aaa20c3b876beaab518b1de9e1ce59ea14af8b32f1fe8d
Instruction ID: 78bbd835a38f1483c0d78f0f7ab3ec8910903f9de51492600780ea6bffb82ce6
Opcode Fuzzy Hash: a8b35b7bcd37d82ee4aaa20c3b876beaab518b1de9e1ce59ea14af8b32f1fe8d
Instruction Fuzzy Hash: 7F714036A14B8586EB10DF25D8906EDB770FF88B98B901236EA6D47BA4CF3CD544C390

Function 00007FF7FF4072EC Relevance: 10.6, APIs: 5, Strings: 1, Instructions: 88libraryloaderCOMMONLIBRARYCODE

Download Yara Rule

APIs

LoadLibraryExW.KERNEL32(?,?,00000000,00007FF7FF4074F3,?,?,?,00007FF7FF40525E,?,?,?,00007FF7FF405219), ref: 00007FF7FF407371
GetLastError.KERNEL32(?,?,00000000,00007FF7FF4074F3,?,?,?,00007FF7FF40525E,?,?,?,00007FF7FF405219), ref: 00007FF7FF40737F
LoadLibraryExW.KERNEL32(?,?,00000000,00007FF7FF4074F3,?,?,?,00007FF7FF40525E,?,?,?,00007FF7FF405219), ref: 00007FF7FF4073A9
FreeLibrary.KERNEL32(?,?,00000000,00007FF7FF4074F3,?,?,?,00007FF7FF40525E,?,?,?,00007FF7FF405219), ref: 00007FF7FF4073EF
GetProcAddress.KERNEL32(?,?,00000000,00007FF7FF4074F3,?,?,?,00007FF7FF40525E,?,?,?,00007FF7FF405219), ref: 00007FF7FF4073FB

Strings

api-ms-, xrefs: 00007FF7FF407391

Memory Dump Source

Source File: 00000000.00000002.1706197426.00007FF7FF3D1000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF7FF3D0000, based on PE: true

Associated: 00000000.00000002.1706180107.00007FF7FF3D0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1706234158.00007FF7FF418000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1706255447.00007FF7FF42B000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1706255447.00007FF7FF434000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1706289188.00007FF7FF43A000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1706289188.00007FF7FF43E000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff7ff3d0000_b2bXo6vmDm.jbxd

Similarity

API ID: Library$Load$AddressErrorFreeLastProc
String ID: api-ms-
API String ID: 2559590344-2084034818
Opcode ID: eedfc97f7024c66fbeb39a7219499b253e22696fd1fdab2c5f769bf1fd383016
Instruction ID: 1df6230e0525208cd9ff765f7c1c914a30694a394545f010b7ab6dbbae0bb014
Opcode Fuzzy Hash: eedfc97f7024c66fbeb39a7219499b253e22696fd1fdab2c5f769bf1fd383016
Instruction Fuzzy Hash: 62318E21A1AA8291EB12BB06A8005B9A294FF44BA4F994735DD3D4A3C4DF3CE490C7A5

Function 00007FF7FF401604 Relevance: 10.5, APIs: 3, Strings: 3, Instructions: 43libraryloaderCOMMONLIBRARYCODE

Download Yara Rule

APIs

GetModuleHandleW.KERNEL32(?,?,?,00007FF7FF401573,?,?,?,00007FF7FF40192A), ref: 00007FF7FF40162B
GetProcAddress.KERNEL32(?,?,?,00007FF7FF401573,?,?,?,00007FF7FF40192A), ref: 00007FF7FF401648
GetProcAddress.KERNEL32(?,?,?,00007FF7FF401573,?,?,?,00007FF7FF40192A), ref: 00007FF7FF401664

Strings

KERNEL32.DLL, xrefs: 00007FF7FF401624
ReleaseSRWLockExclusive, xrefs: 00007FF7FF401653
AcquireSRWLockExclusive, xrefs: 00007FF7FF40163E

Memory Dump Source

Source File: 00000000.00000002.1706197426.00007FF7FF3D1000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF7FF3D0000, based on PE: true

Associated: 00000000.00000002.1706180107.00007FF7FF3D0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1706234158.00007FF7FF418000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1706255447.00007FF7FF42B000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1706255447.00007FF7FF434000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1706289188.00007FF7FF43A000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1706289188.00007FF7FF43E000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff7ff3d0000_b2bXo6vmDm.jbxd

Similarity

API ID: AddressProc$HandleModule
String ID: AcquireSRWLockExclusive$KERNEL32.DLL$ReleaseSRWLockExclusive
API String ID: 667068680-1718035505
Opcode ID: 4fe35f58cd4175722fa2f4edd42b7d77b08fa8d78ae8e9bf73ccac7c2071e7f8
Instruction ID: 4914eeee2c2d8407ef5a3d07ef2903abe7d94dd25d7e1d87a4b38b194ce125fa
Opcode Fuzzy Hash: 4fe35f58cd4175722fa2f4edd42b7d77b08fa8d78ae8e9bf73ccac7c2071e7f8
Instruction Fuzzy Hash: BB116121A19BC382FF56AB00AD402F4E3956F887A4FDC5B35D83D067D0EE7CA4459AB0

Function 00007FF7FF3EED24 Relevance: 9.1, APIs: 6, Instructions: 120timeCOMMON

Download Yara Rule

APIs

Part of subcall function 00007FF7FF3E51A4: GetVersionExW.KERNEL32 ref: 00007FF7FF3E51D5

FileTimeToLocalFileTime.KERNEL32(?,?,?,?,?,?,?,?,?,?,?,?,00000001,00007FF7FF3D5AB4), ref: 00007FF7FF3EED8C
FileTimeToSystemTime.KERNEL32(?,?,?,?,?,?,?,?,?,?,?,?,00000001,00007FF7FF3D5AB4), ref: 00007FF7FF3EED98
SystemTimeToTzSpecificLocalTime.KERNEL32(?,?,?,?,?,?,?,?,?,?,?,?,00000001,00007FF7FF3D5AB4), ref: 00007FF7FF3EEDA8
SystemTimeToFileTime.KERNEL32(?,?,?,?,?,?,?,?,?,?,?,?,00000001,00007FF7FF3D5AB4), ref: 00007FF7FF3EEDB6
SystemTimeToFileTime.KERNEL32(?,?,?,?,?,?,?,?,?,?,?,?,00000001,00007FF7FF3D5AB4), ref: 00007FF7FF3EEDC4
FileTimeToSystemTime.KERNEL32(?,?,?,?,?,?,?,?,?,?,?,?,00000001,00007FF7FF3D5AB4), ref: 00007FF7FF3EEE05

Memory Dump Source

Source File: 00000000.00000002.1706197426.00007FF7FF3D1000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF7FF3D0000, based on PE: true

Associated: 00000000.00000002.1706180107.00007FF7FF3D0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1706234158.00007FF7FF418000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1706255447.00007FF7FF42B000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1706255447.00007FF7FF434000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1706289188.00007FF7FF43A000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1706289188.00007FF7FF43E000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff7ff3d0000_b2bXo6vmDm.jbxd

Similarity

API ID: Time$File$System$Local$SpecificVersion
String ID:
API String ID: 2092733347-0
Opcode ID: 197518eb8103cda2bd6b54f1f5e99fa721289ee203340eaf45d2c62117a67569
Instruction ID: 02fd75b7087900b0fa48081093c7ccf48d6960bddba3d6f9ee38b2da94d1e2c7
Opcode Fuzzy Hash: 197518eb8103cda2bd6b54f1f5e99fa721289ee203340eaf45d2c62117a67569
Instruction Fuzzy Hash: 6C517CB2B006918BEB04DFA4D4401EC77B1FB48B98BA0413ADE6D57B98DF78E545C750

Function 00007FF7FF3EF010 Relevance: 9.1, APIs: 6, Instructions: 80timeCOMMON

Download Yara Rule

APIs

SystemTimeToFileTime.KERNEL32 ref: 00007FF7FF3EF074

Part of subcall function 00007FF7FF3E51A4: GetVersionExW.KERNEL32 ref: 00007FF7FF3E51D5

LocalFileTimeToFileTime.KERNEL32 ref: 00007FF7FF3EF096
FileTimeToSystemTime.KERNEL32 ref: 00007FF7FF3EF0A2
TzSpecificLocalTimeToSystemTime.KERNEL32 ref: 00007FF7FF3EF0B2
SystemTimeToFileTime.KERNEL32 ref: 00007FF7FF3EF0C0
SystemTimeToFileTime.KERNEL32 ref: 00007FF7FF3EF0CE

Memory Dump Source

Source File: 00000000.00000002.1706197426.00007FF7FF3D1000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF7FF3D0000, based on PE: true

Associated: 00000000.00000002.1706180107.00007FF7FF3D0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1706234158.00007FF7FF418000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1706255447.00007FF7FF42B000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1706255447.00007FF7FF434000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1706289188.00007FF7FF43A000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1706289188.00007FF7FF43E000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff7ff3d0000_b2bXo6vmDm.jbxd

Similarity

API ID: Time$File$System$Local$SpecificVersion
String ID:
API String ID: 2092733347-0
Opcode ID: 93bf5fe4be91675a5f4cba4a2df0f2c5ed0bd126a165fd4d88c3e7d5e64543a6
Instruction ID: 4085f82a2f5a575b59cb5cc09de9f8a37fd61cd9d4bba3fc3b64167aaf9ea404
Opcode Fuzzy Hash: 93bf5fe4be91675a5f4cba4a2df0f2c5ed0bd126a165fd4d88c3e7d5e64543a6
Instruction Fuzzy Hash: C4314962B10A918AEB00DFB5D8801FC7770FF08758B94512AEE2D97A98EF78D895C354

Function 00007FF7FF3E7918 Relevance: 9.0, APIs: 1, Strings: 4, Instructions: 233COMMON

Download Yara Rule

APIs

_invalid_parameter_noinfo_noreturn.LIBCMT ref: 00007FF7FF3E7C8C

Strings

exe, xrefs: 00007FF7FF3E79AF, 00007FF7FF3E79BE
.rar, xrefs: 00007FF7FF3E7969, 00007FF7FF3E7978
rar, xrefs: 00007FF7FF3E7A9B, 00007FF7FF3E7AAA, 00007FF7FF3E7B67, 00007FF7FF3E7B7C
sfx, xrefs: 00007FF7FF3E79F3, 00007FF7FF3E7A02

Memory Dump Source

Source File: 00000000.00000002.1706197426.00007FF7FF3D1000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF7FF3D0000, based on PE: true

Associated: 00000000.00000002.1706180107.00007FF7FF3D0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1706234158.00007FF7FF418000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1706255447.00007FF7FF42B000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1706255447.00007FF7FF434000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1706289188.00007FF7FF43A000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1706289188.00007FF7FF43E000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff7ff3d0000_b2bXo6vmDm.jbxd

Similarity

API ID: _invalid_parameter_noinfo_noreturn
String ID: .rar$exe$rar$sfx
API String ID: 3668304517-630704357
Opcode ID: 97aafd44a7caf21700e2098a6ceb5321661423453e734b1945fa1e7d2bcd8431
Instruction ID: 45fd340e6bb092cfb8c1f8bd81628dce46453f6e07995f6313ad34e2ff44a0e4
Opcode Fuzzy Hash: 97aafd44a7caf21700e2098a6ceb5321661423453e734b1945fa1e7d2bcd8431
Instruction Fuzzy Hash: CAA1A222A14A8642EB04AB25D4453FCB361AF54BA8F901339DD3D0B6E6DF3CE549C3A5

Function 00007FF7FF405CE8 Relevance: 8.9, APIs: 3, Strings: 2, Instructions: 191COMMONLIBRARYCODE

Download Yara Rule

APIs

EncodePointer.KERNEL32 ref: 00007FF7FF405D58

Part of subcall function 00007FF7FF405210: abort.LIBCMT ref: 00007FF7FF405223

_CallSETranslator.LIBVCRUNTIME ref: 00007FF7FF405DA3
abort.LIBCMT ref: 00007FF7FF405FD1

Strings

RCC, xrefs: 00007FF7FF405D74
MOC, xrefs: 00007FF7FF405D6C

Memory Dump Source

Source File: 00000000.00000002.1706197426.00007FF7FF3D1000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF7FF3D0000, based on PE: true

Associated: 00000000.00000002.1706180107.00007FF7FF3D0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1706234158.00007FF7FF418000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1706255447.00007FF7FF42B000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1706255447.00007FF7FF434000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1706289188.00007FF7FF43A000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1706289188.00007FF7FF43E000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff7ff3d0000_b2bXo6vmDm.jbxd

Similarity

API ID: abort$CallEncodePointerTranslator
String ID: MOC$RCC
API String ID: 2889003569-2084237596
Opcode ID: 0f4c2d06ef2d655583c55900dbb020dcf620b12558a4295111afe460be181df6
Instruction ID: 957389e129bc8628a23abc862aef9fc617ff8e78b1a47de041f40b8a48e677b0
Opcode Fuzzy Hash: 0f4c2d06ef2d655583c55900dbb020dcf620b12558a4295111afe460be181df6
Instruction Fuzzy Hash: 31919073A08BC18AE710EB65D4802FDB7A0FB44B88F54422AEEAD17795DF38D195C790

Function 00007FF7FF404F80 Relevance: 8.9, APIs: 3, Strings: 2, Instructions: 144COMMONLIBRARYCODE

Download Yara Rule

APIs

__except_validate_context_record.LIBVCRUNTIME ref: 00007FF7FF404FAB
_IsNonwritableInCurrentImage.LIBCMT ref: 00007FF7FF405040
RtlUnwindEx.KERNEL32(?,?,?,?,?,?,?,00007FF7FF402F5E), ref: 00007FF7FF40508F

Strings

f, xrefs: 00007FF7FF404FBE
csm, xrefs: 00007FF7FF405026

Memory Dump Source

Source File: 00000000.00000002.1706197426.00007FF7FF3D1000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF7FF3D0000, based on PE: true

Associated: 00000000.00000002.1706180107.00007FF7FF3D0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1706234158.00007FF7FF418000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1706255447.00007FF7FF42B000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1706255447.00007FF7FF434000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1706289188.00007FF7FF43A000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1706289188.00007FF7FF43E000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff7ff3d0000_b2bXo6vmDm.jbxd

Similarity

API ID: CurrentImageNonwritableUnwind__except_validate_context_record
String ID: csm$f
API String ID: 2395640692-629598281
Opcode ID: a7c39da158025e753bf36dfb1e051fd0b17def11f5f8def40396cbfe1c046983
Instruction ID: 8ad9b567113aaa16e8aaea087ebac031ee9196e5c64a3343594540eec567ef50
Opcode Fuzzy Hash: a7c39da158025e753bf36dfb1e051fd0b17def11f5f8def40396cbfe1c046983
Instruction Fuzzy Hash: 1051B132E1968286EB14EF11E444ABDB795FB44F98F908234DA3A477C8DF78E841C794

Function 00007FF7FF3DCEE0 Relevance: 8.9, APIs: 3, Strings: 2, Instructions: 139COMMON

Download Yara Rule

APIs

GetLastError.KERNEL32 ref: 00007FF7FF3DD03D
_invalid_parameter_noinfo_noreturn.LIBCMT ref: 00007FF7FF3DD0D1
_invalid_parameter_noinfo_noreturn.LIBCMT ref: 00007FF7FF3DD0D7

Part of subcall function 00007FF7FF3DDE04: GetCurrentProcess.KERNEL32(?,?,?,?,?,?,?,?,?,00007FF7FF3DCF4B), ref: 00007FF7FF3DDE27
Part of subcall function 00007FF7FF3DDE04: GetLastError.KERNEL32 ref: 00007FF7FF3DDE88
Part of subcall function 00007FF7FF3DDE04: CloseHandle.KERNEL32 ref: 00007FF7FF3DDE9B

Strings

SeSecurityPrivilege, xrefs: 00007FF7FF3DCF3F
SeRestorePrivilege, xrefs: 00007FF7FF3DCF5E

Memory Dump Source

Source File: 00000000.00000002.1706197426.00007FF7FF3D1000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF7FF3D0000, based on PE: true

Associated: 00000000.00000002.1706180107.00007FF7FF3D0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1706234158.00007FF7FF418000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1706255447.00007FF7FF42B000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1706255447.00007FF7FF434000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1706289188.00007FF7FF43A000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1706289188.00007FF7FF43E000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff7ff3d0000_b2bXo6vmDm.jbxd

Similarity

API ID: ErrorLast_invalid_parameter_noinfo_noreturn$CloseCurrentHandleProcess
String ID: SeRestorePrivilege$SeSecurityPrivilege
API String ID: 2102711378-639343689
Opcode ID: 87299e3d8371150436d20a5d335114172b85ee8c064b133af49689baa0f6dc88
Instruction ID: 2bde3d7aa2147c6d4cdba94c57d9176f1233656c4ffd8952b3e3409a3857b153
Opcode Fuzzy Hash: 87299e3d8371150436d20a5d335114172b85ee8c064b133af49689baa0f6dc88
Instruction Fuzzy Hash: 5751B462F146C646FB10EB65D8412FDA760AF847E4F90033ADD3D1A6D6EE3CA445C2A0

Function 00007FF7FF3F7B28 Relevance: 8.9, APIs: 4, Strings: 1, Instructions: 122COMMON

Download Yara Rule

APIs

ShowWindow.USER32 ref: 00007FF7FF3F7B6F
GetWindowRect.USER32 ref: 00007FF7FF3F7BC0
ShowWindow.USER32 ref: 00007FF7FF3F7C96
ShowWindow.USER32 ref: 00007FF7FF3F7CC3

Strings

RarHtmlClassName, xrefs: 00007FF7FF3F7C4B

Memory Dump Source

Source File: 00000000.00000002.1706197426.00007FF7FF3D1000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF7FF3D0000, based on PE: true

Associated: 00000000.00000002.1706180107.00007FF7FF3D0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1706234158.00007FF7FF418000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1706255447.00007FF7FF42B000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1706255447.00007FF7FF434000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1706289188.00007FF7FF43A000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1706289188.00007FF7FF43E000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff7ff3d0000_b2bXo6vmDm.jbxd

Similarity

API ID: Window$Show$Rect
String ID: RarHtmlClassName
API String ID: 2396740005-1658105358
Opcode ID: 7e152e90957d1346e93cce3b53dfbd480fa38e990bdf0b518984ba75781cfd03
Instruction ID: 55bfbe9f239308cc2fca79a4651b5d3f7c961e2efd20ee6f5c20da23af0684f8
Opcode Fuzzy Hash: 7e152e90957d1346e93cce3b53dfbd480fa38e990bdf0b518984ba75781cfd03
Instruction Fuzzy Hash: BD5171356097C286EB24AB25E4443BAE760FF85780F804239DEBA47BD4DF3CE4458750

Function 00007FF7FF3FFED4 Relevance: 8.8, APIs: 3, Strings: 2, Instructions: 52COMMON

Download Yara Rule

Strings

RENAMEDLG, xrefs: 00007FF7FF3FFF60
REPLACEFILEDLG, xrefs: 00007FF7FF3FFF34, 00007FF7FF3FFF99

Memory Dump Source

Source File: 00000000.00000002.1706197426.00007FF7FF3D1000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF7FF3D0000, based on PE: true

Associated: 00000000.00000002.1706180107.00007FF7FF3D0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1706234158.00007FF7FF418000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1706255447.00007FF7FF42B000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1706255447.00007FF7FF434000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1706289188.00007FF7FF43A000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1706289188.00007FF7FF43E000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff7ff3d0000_b2bXo6vmDm.jbxd

Similarity

API ID:
String ID: RENAMEDLG$REPLACEFILEDLG
API String ID: 0-56093855
Opcode ID: 98f895654b64cd1d2f90e97d30244ed9b67d31cc2014a88c355cd353264df31a
Instruction ID: 4dd69526795529b6ca286cda8c10c8dea79cb9b6bfa32dcf415e8c21ce04267c
Opcode Fuzzy Hash: 98f895654b64cd1d2f90e97d30244ed9b67d31cc2014a88c355cd353264df31a
Instruction Fuzzy Hash: D8211C2090DBC782FB15AB25B8441F4A360AF497D8F940336D9BD477E4CE3CE185A3A4

Function 00007FF7FF40BFB0 Relevance: 8.8, APIs: 3, Strings: 2, Instructions: 29libraryloaderCOMMON

Download Yara Rule

APIs

GetModuleHandleExW.KERNEL32 ref: 00007FF7FF40BFD0
GetProcAddress.KERNEL32 ref: 00007FF7FF40BFE6
FreeLibrary.KERNEL32 ref: 00007FF7FF40C00B

Strings

CorExitProcess, xrefs: 00007FF7FF40BFDF
mscoree.dll, xrefs: 00007FF7FF40BFC7

Memory Dump Source

Source File: 00000000.00000002.1706197426.00007FF7FF3D1000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF7FF3D0000, based on PE: true

Associated: 00000000.00000002.1706180107.00007FF7FF3D0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1706234158.00007FF7FF418000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1706255447.00007FF7FF42B000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1706255447.00007FF7FF434000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1706289188.00007FF7FF43A000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1706289188.00007FF7FF43E000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff7ff3d0000_b2bXo6vmDm.jbxd

Similarity

API ID: AddressFreeHandleLibraryModuleProc
String ID: CorExitProcess$mscoree.dll
API String ID: 4061214504-1276376045
Opcode ID: 42a4ca90c7c49dddb16080121233970ff8583544d2054868cb5f0899d871e2db
Instruction ID: 118917b4b651931c9b0457e5398c443ff2e880c2b2fcbd137f9db189aad28129
Opcode Fuzzy Hash: 42a4ca90c7c49dddb16080121233970ff8583544d2054868cb5f0899d871e2db
Instruction Fuzzy Hash: A9F04431A19E8281EF46EB51E8403F9A360EF887A4FA41135DA7F46694DF3CD484C754

Function 00007FF7FF4145C0 Relevance: 7.7, APIs: 5, Instructions: 203COMMON

Download Yara Rule

APIs

_invalid_parameter_noinfo.LIBCMT ref: 00007FF7FF414605

Memory Dump Source

Source File: 00000000.00000002.1706197426.00007FF7FF3D1000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF7FF3D0000, based on PE: true

Associated: 00000000.00000002.1706180107.00007FF7FF3D0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1706234158.00007FF7FF418000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1706255447.00007FF7FF42B000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1706255447.00007FF7FF434000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1706289188.00007FF7FF43A000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1706289188.00007FF7FF43E000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff7ff3d0000_b2bXo6vmDm.jbxd

Similarity

API ID: _invalid_parameter_noinfo
String ID:
API String ID: 3215553584-0
Opcode ID: cf462e6f26ae3af6f96c078c51b53c82231ed120809331cf2f591469c69a5a17
Instruction ID: cc4b4376c844a65a1777adc0cd28a5240737f6ce237e0f4e4e89601b2621de35
Opcode Fuzzy Hash: cf462e6f26ae3af6f96c078c51b53c82231ed120809331cf2f591469c69a5a17
Instruction Fuzzy Hash: 8381E622F18A8285F712AB2584806FCE6A0BB46BA8FA54335DD3D537E5DF3C9445C360

Function 00007FF7FF3E3AF8 Relevance: 7.7, APIs: 5, Instructions: 164filetimeCOMMON

Download Yara Rule

APIs

CreateFileW.KERNEL32 ref: 00007FF7FF3E3BBB
CreateFileW.KERNEL32 ref: 00007FF7FF3E3C24
SetFileTime.KERNEL32 ref: 00007FF7FF3E3CEC
CloseHandle.KERNEL32 ref: 00007FF7FF3E3CF6
_invalid_parameter_noinfo_noreturn.LIBCMT ref: 00007FF7FF3E3D2C

Memory Dump Source

Source File: 00000000.00000002.1706197426.00007FF7FF3D1000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF7FF3D0000, based on PE: true

Associated: 00000000.00000002.1706180107.00007FF7FF3D0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1706234158.00007FF7FF418000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1706255447.00007FF7FF42B000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1706255447.00007FF7FF434000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1706289188.00007FF7FF43A000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1706289188.00007FF7FF43E000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff7ff3d0000_b2bXo6vmDm.jbxd

Similarity

API ID: File$Create$CloseHandleTime_invalid_parameter_noinfo_noreturn
String ID:
API String ID: 2398171386-0
Opcode ID: 82f053c75c0f85402010483eccdcf8e864613be84fe09434e6a81e38387e2611
Instruction ID: 44539bbfae422f2432a9c618395a27a347749c71305d177ee46a0bf238896a50
Opcode Fuzzy Hash: 82f053c75c0f85402010483eccdcf8e864613be84fe09434e6a81e38387e2611
Instruction Fuzzy Hash: D151E422B04A824AFB10EBA5E4403FDB771AF447A8F804739DE7D5A7D4DE3890498391

Function 00007FF7FF413F34 Relevance: 7.6, APIs: 5, Instructions: 142fileCOMMON

Download Yara Rule

APIs

GetConsoleCP.KERNEL32(?,?,?,?,?,?,?,?,?,?,?,?,00000000,?,?,00007FF7FF414767), ref: 00007FF7FF413F91
WideCharToMultiByte.KERNEL32 ref: 00007FF7FF41406D
WriteFile.KERNEL32 ref: 00007FF7FF414093
WriteFile.KERNEL32 ref: 00007FF7FF4140D2
GetLastError.KERNEL32 ref: 00007FF7FF41410A

Memory Dump Source

Source File: 00000000.00000002.1706197426.00007FF7FF3D1000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF7FF3D0000, based on PE: true

Associated: 00000000.00000002.1706180107.00007FF7FF3D0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1706234158.00007FF7FF418000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1706255447.00007FF7FF42B000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1706255447.00007FF7FF434000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1706289188.00007FF7FF43A000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1706289188.00007FF7FF43E000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff7ff3d0000_b2bXo6vmDm.jbxd

Similarity

API ID: FileWrite$ByteCharConsoleErrorLastMultiWide
String ID:
API String ID: 3659116390-0
Opcode ID: 8f90b3f8899b92826fb288bc35eb601c263b89b4fb676f823db5d062d6f6b41f
Instruction ID: 066853293ce662b564fe0dccda5232824d94c4e57045f3ec5b7691660d9494db
Opcode Fuzzy Hash: 8f90b3f8899b92826fb288bc35eb601c263b89b4fb676f823db5d062d6f6b41f
Instruction Fuzzy Hash: 9C51DF32A14A9189F711DB35E4843FCBBB0BB45BA8F548235CE2A57AE9DF38D145C360

Function 00007FF7FF401E00 Relevance: 7.6, APIs: 5, Instructions: 137memoryCOMMON

Download Yara Rule

APIs

MultiByteToWideChar.KERNEL32(?,?,?,?,?,?,?,?,00000000,00007FF7FF3E4DF4), ref: 00007FF7FF401E87
MultiByteToWideChar.KERNEL32(?,?,?,?,?,?,?,?,00000000,00007FF7FF3E4DF4), ref: 00007FF7FF401F09
SysAllocString.OLEAUT32 ref: 00007FF7FF401F16

Memory Dump Source

Source File: 00000000.00000002.1706197426.00007FF7FF3D1000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF7FF3D0000, based on PE: true

Associated: 00000000.00000002.1706180107.00007FF7FF3D0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1706234158.00007FF7FF418000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1706255447.00007FF7FF42B000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1706255447.00007FF7FF434000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1706289188.00007FF7FF43A000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1706289188.00007FF7FF43E000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff7ff3d0000_b2bXo6vmDm.jbxd

Similarity

API ID: ByteCharMultiWide$AllocString
String ID:
API String ID: 262959230-0
Opcode ID: 0c9fa0c6bf819422fbbcbf8a1cc47624dda944ba8802b04b3bf134fe07a1f51e
Instruction ID: 7fa2a02991b9055e792673b54f83717af788b96ea1e84a107eed30b8cffde095
Opcode Fuzzy Hash: 0c9fa0c6bf819422fbbcbf8a1cc47624dda944ba8802b04b3bf134fe07a1f51e
Instruction Fuzzy Hash: E941A331A09AC689EB14AF7194403F9A291EF88BE4F944734EA7D477D5DF3CE14187A0

Function 00007FF7FF40F414 Relevance: 7.6, APIs: 5, Instructions: 114libraryloaderCOMMONLIBRARYCODE

Download Yara Rule

APIs

GetProcAddress.KERNEL32 ref: 00007FF7FF40F536

Memory Dump Source

Source File: 00000000.00000002.1706197426.00007FF7FF3D1000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF7FF3D0000, based on PE: true

Associated: 00000000.00000002.1706180107.00007FF7FF3D0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1706234158.00007FF7FF418000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1706255447.00007FF7FF42B000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1706255447.00007FF7FF434000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1706289188.00007FF7FF43A000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1706289188.00007FF7FF43E000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff7ff3d0000_b2bXo6vmDm.jbxd

Similarity

API ID: AddressProc
String ID:
API String ID: 190572456-0
Opcode ID: d8da239e760e4119be076ce5ae60c5d71a4e7276355522d8061e2664917ecd9d
Instruction ID: 532ff514bcdfb044eaee8918a7c4ce94844b993b7f2bc4c523a046461bce9207
Opcode Fuzzy Hash: d8da239e760e4119be076ce5ae60c5d71a4e7276355522d8061e2664917ecd9d
Instruction Fuzzy Hash: CB41B362B1DA8291FB16AB12A8005F5A295FF54BF0F994735DD3D4BBD4EE3CE44083A0

Function 00007FF7FF4156D8 Relevance: 7.6, APIs: 5, Instructions: 56COMMONLIBRARYCODE

Download Yara Rule

APIs

_set_statfp.LIBCMT ref: 00007FF7FF4156FF
_set_statfp.LIBCMT ref: 00007FF7FF41571A
_set_statfp.LIBCMT ref: 00007FF7FF415736
_set_statfp.LIBCMT ref: 00007FF7FF415772

Memory Dump Source

Source File: 00000000.00000002.1706197426.00007FF7FF3D1000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF7FF3D0000, based on PE: true

Associated: 00000000.00000002.1706180107.00007FF7FF3D0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1706234158.00007FF7FF418000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1706255447.00007FF7FF42B000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1706255447.00007FF7FF434000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1706289188.00007FF7FF43A000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1706289188.00007FF7FF43E000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff7ff3d0000_b2bXo6vmDm.jbxd

Similarity

API ID: _set_statfp
String ID:
API String ID: 1156100317-0
Opcode ID: f3bd3298a46f29c998dca386ec4adc9bd6d7efdfabb851da102e47160911a3a1
Instruction ID: 42ee494f0531a6a493c1b780047b37e96ea6f4c9af69352a379fe3432bd5e27a
Opcode Fuzzy Hash: f3bd3298a46f29c998dca386ec4adc9bd6d7efdfabb851da102e47160911a3a1
Instruction Fuzzy Hash: 2A119036E18F8781F7573264E5473FA81516F45BB0FE84330EA7D065F68F6CA44841A5

Function 00007FF7FF40625C Relevance: 7.2, APIs: 2, Strings: 2, Instructions: 163COMMONLIBRARYCODE

Download Yara Rule

APIs

__except_validate_context_record.LIBVCRUNTIME ref: 00007FF7FF406286
abort.LIBCMT ref: 00007FF7FF4064EA

Strings

csm, xrefs: 00007FF7FF40641A
csm, xrefs: 00007FF7FF4062AB

Memory Dump Source

Source File: 00000000.00000002.1706197426.00007FF7FF3D1000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF7FF3D0000, based on PE: true

Associated: 00000000.00000002.1706180107.00007FF7FF3D0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1706234158.00007FF7FF418000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1706255447.00007FF7FF42B000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1706255447.00007FF7FF434000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1706289188.00007FF7FF43A000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1706289188.00007FF7FF43E000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff7ff3d0000_b2bXo6vmDm.jbxd

Similarity

API ID: __except_validate_context_recordabort
String ID: csm$csm
API String ID: 746414643-3733052814
Opcode ID: 91fc108a1c492767e4bb41002f60c2920875b1ec76e01922ab372504797a4c8e
Instruction ID: 8e1c0bb1365359650646f88eac31cee6b6f7946f09b3780bbb38eb556bf1afdb
Opcode Fuzzy Hash: 91fc108a1c492767e4bb41002f60c2920875b1ec76e01922ab372504797a4c8e
Instruction Fuzzy Hash: 1F71B0726086D28AD760AF2590507BDFBA0EB05B98F848235DE7E07AC9CF3CD495C794

Function 00007FF7FF4080F4 Relevance: 7.1, APIs: 2, Strings: 2, Instructions: 145COMMONLIBRARYCODE

Download Yara Rule

APIs

_invalid_parameter_noinfo.LIBCMT ref: 00007FF7FF40811B
_invalid_parameter_noinfo.LIBCMT ref: 00007FF7FF4082ED

Strings

, xrefs: 00007FF7FF408276
*, xrefs: 00007FF7FF408221

Memory Dump Source

Source File: 00000000.00000002.1706197426.00007FF7FF3D1000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF7FF3D0000, based on PE: true

Associated: 00000000.00000002.1706180107.00007FF7FF3D0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1706234158.00007FF7FF418000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1706255447.00007FF7FF42B000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1706255447.00007FF7FF434000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1706289188.00007FF7FF43A000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1706289188.00007FF7FF43E000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff7ff3d0000_b2bXo6vmDm.jbxd

Similarity

API ID: _invalid_parameter_noinfo
String ID: $*
API String ID: 3215553584-3982473090
Opcode ID: 42643a1ee39b50d27a50b926b179a62c0cdc4d381fe14b17104e750277292b9f
Instruction ID: 9a2b86d950f47790e67c1e859f76ae42e8d6b3e36303a3796e4c15e8ec4005b4
Opcode Fuzzy Hash: 42643a1ee39b50d27a50b926b179a62c0cdc4d381fe14b17104e750277292b9f
Instruction Fuzzy Hash: 5A51687290CA838AE764AF2886443BC7BA1FF05B18F941339C679452D9CF3CD481D6AD

Function 00007FF7FF411758 Relevance: 7.1, APIs: 3, Strings: 1, Instructions: 126COMMONLIBRARYCODE

Download Yara Rule

APIs

MultiByteToWideChar.KERNEL32 ref: 00007FF7FF4117CB
MultiByteToWideChar.KERNEL32 ref: 00007FF7FF411894
GetStringTypeW.KERNEL32 ref: 00007FF7FF4118AE

Strings

$%s, xrefs: 00007FF7FF41175A

Memory Dump Source

Source File: 00000000.00000002.1706197426.00007FF7FF3D1000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF7FF3D0000, based on PE: true

Associated: 00000000.00000002.1706180107.00007FF7FF3D0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1706234158.00007FF7FF418000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1706255447.00007FF7FF42B000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1706255447.00007FF7FF434000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1706289188.00007FF7FF43A000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1706289188.00007FF7FF43E000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff7ff3d0000_b2bXo6vmDm.jbxd

Similarity

API ID: ByteCharMultiWide$StringType
String ID: $%s
API String ID: 3586891840-3791308623
Opcode ID: 8174e861c2faa6f2f7f5292a0ee7474812abc1109b8acb2517e9a7bc716d8d39
Instruction ID: f9209e5ded7ac204fe134bcd2c11395aa83775e2060de0d3cecee3962e44e918
Opcode Fuzzy Hash: 8174e861c2faa6f2f7f5292a0ee7474812abc1109b8acb2517e9a7bc716d8d39
Instruction Fuzzy Hash: E2418222B15BC14AEB129F25D8006F9A295FB84BA8F984731DE3D077C5DF3CE4458794

Function 00007FF7FF4066A0 Relevance: 7.1, APIs: 3, Strings: 1, Instructions: 117COMMON

Download Yara Rule

APIs

Part of subcall function 00007FF7FF405210: abort.LIBCMT ref: 00007FF7FF405223

__except_validate_context_record.LIBVCRUNTIME ref: 00007FF7FF40674A
_CreateFrameInfo.LIBVCRUNTIME ref: 00007FF7FF406776

Strings

csm, xrefs: 00007FF7FF406876

Memory Dump Source

Source File: 00000000.00000002.1706197426.00007FF7FF3D1000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF7FF3D0000, based on PE: true

Associated: 00000000.00000002.1706180107.00007FF7FF3D0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1706234158.00007FF7FF418000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1706255447.00007FF7FF42B000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1706255447.00007FF7FF434000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1706289188.00007FF7FF43A000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1706289188.00007FF7FF43E000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff7ff3d0000_b2bXo6vmDm.jbxd

Similarity

API ID: CreateFrameInfo__except_validate_context_recordabort
String ID: csm
API String ID: 2466640111-1018135373
Opcode ID: ef48871438151390fa300b301edbe87f2aaf35895cd4fd9de5e2d21b12dcaab2
Instruction ID: 72094cad7964c4e0f27c526de7b3f0798c4f7a3e5c9f311a3fe72d9225524d1d
Opcode Fuzzy Hash: ef48871438151390fa300b301edbe87f2aaf35895cd4fd9de5e2d21b12dcaab2
Instruction Fuzzy Hash: FD515E7361978287E720BB55A4402BEB7A4FB88B90F840634EBAD07B95CF3CD490CB50

Function 00007FF7FF414360 Relevance: 7.1, APIs: 3, Strings: 1, Instructions: 100fileCOMMON

Download Yara Rule

APIs

WideCharToMultiByte.KERNEL32 ref: 00007FF7FF414446
WriteFile.KERNEL32 ref: 00007FF7FF414479
GetLastError.KERNEL32 ref: 00007FF7FF41449B

Strings

U, xrefs: 00007FF7FF414424

Memory Dump Source

Source File: 00000000.00000002.1706197426.00007FF7FF3D1000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF7FF3D0000, based on PE: true

Associated: 00000000.00000002.1706180107.00007FF7FF3D0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1706234158.00007FF7FF418000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1706255447.00007FF7FF42B000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1706255447.00007FF7FF434000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1706289188.00007FF7FF43A000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1706289188.00007FF7FF43E000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff7ff3d0000_b2bXo6vmDm.jbxd

Similarity

API ID: ByteCharErrorFileLastMultiWideWrite
String ID: U
API String ID: 2456169464-4171548499
Opcode ID: a3c4996b5397ae7c68c43f4944c85cd830f0b958292ccb38960a62bfe152ddee
Instruction ID: a44edbbc94606240fec24793f3db683e6cb96fea7f7627595e3bd9cd472534a3
Opcode Fuzzy Hash: a3c4996b5397ae7c68c43f4944c85cd830f0b958292ccb38960a62bfe152ddee
Instruction Fuzzy Hash: E841C222718A8582E7119F65E8443F9A760FB887A4F904231EE6D877D8DF7CD451C790

Function 00007FF7FF3F90B0 Relevance: 7.1, APIs: 3, Strings: 1, Instructions: 83COMMON

Download Yara Rule

APIs

GetDC.USER32 ref: 00007FF7FF3F90D9
GetObjectW.GDI32 ref: 00007FF7FF3F9107
ReleaseDC.USER32 ref: 00007FF7FF3F91BB

Strings

, xrefs: 00007FF7FF3F9153

Memory Dump Source

Source File: 00000000.00000002.1706197426.00007FF7FF3D1000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF7FF3D0000, based on PE: true

Associated: 00000000.00000002.1706180107.00007FF7FF3D0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1706234158.00007FF7FF418000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1706255447.00007FF7FF42B000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1706255447.00007FF7FF434000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1706289188.00007FF7FF43A000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1706289188.00007FF7FF43E000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff7ff3d0000_b2bXo6vmDm.jbxd

Similarity

API ID: ObjectRelease
String ID:
API String ID: 1429681911-3916222277
Opcode ID: 0b5772d91688d342ea342be5c9c3c9ea07a5ad9e93d570546deb1a9808731c40
Instruction ID: 78fd557df0513f1605aa16d6461a9e93984175b83deb2e92dbbe8bf6da93f9e8
Opcode Fuzzy Hash: 0b5772d91688d342ea342be5c9c3c9ea07a5ad9e93d570546deb1a9808731c40
Instruction Fuzzy Hash: 38316E3560A79186EB04AF12B9087BAB770F788FD1F804535ED6A47B94CE3CD449EB50

Function 00007FF7FF3EE870 Relevance: 7.1, APIs: 3, Strings: 1, Instructions: 53COMMON

Download Yara Rule

APIs

InitializeCriticalSection.KERNEL32(?,?,?,00007FF7FF3F317F,?,?,00001000,00007FF7FF3DE51D), ref: 00007FF7FF3EE8BB
CreateSemaphoreW.KERNEL32(?,?,?,00007FF7FF3F317F,?,?,00001000,00007FF7FF3DE51D), ref: 00007FF7FF3EE8CB
CreateEventW.KERNEL32(?,?,?,00007FF7FF3F317F,?,?,00001000,00007FF7FF3DE51D), ref: 00007FF7FF3EE8E4

Strings

Thread pool initialization failed., xrefs: 00007FF7FF3EE900

Memory Dump Source

Source File: 00000000.00000002.1706197426.00007FF7FF3D1000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF7FF3D0000, based on PE: true

Associated: 00000000.00000002.1706180107.00007FF7FF3D0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1706234158.00007FF7FF418000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1706255447.00007FF7FF42B000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1706255447.00007FF7FF434000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1706289188.00007FF7FF43A000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1706289188.00007FF7FF43E000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff7ff3d0000_b2bXo6vmDm.jbxd

Similarity

API ID: Create$CriticalEventInitializeSectionSemaphore
String ID: Thread pool initialization failed.
API String ID: 3340455307-2182114853
Opcode ID: 6610cce2f1ff4f40d78c24fcbab0d777ace7136147ab701da82aad1b7a389e44
Instruction ID: bf1ad82af76f9c8144f8d539d27df164a2057c2f5b86c41a99b4b3543bfc7054
Opcode Fuzzy Hash: 6610cce2f1ff4f40d78c24fcbab0d777ace7136147ab701da82aad1b7a389e44
Instruction Fuzzy Hash: 1A21A432A1568187F751AF24D4543F972A2EF84B0CF588238CA2D4A2D5CF7E9485C7E5

Function 00007FF7FF3F85E0 Relevance: 7.0, APIs: 3, Strings: 1, Instructions: 19COMMON

Download Yara Rule

APIs

GetDC.USER32 ref: 00007FF7FF3F85EC
GetDeviceCaps.GDI32 ref: 00007FF7FF3F85FD
ReleaseDC.USER32 ref: 00007FF7FF3F860A

Strings

, xrefs: 00007FF7FF3F8610

Memory Dump Source

Source File: 00000000.00000002.1706197426.00007FF7FF3D1000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF7FF3D0000, based on PE: true

Associated: 00000000.00000002.1706180107.00007FF7FF3D0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1706234158.00007FF7FF418000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1706255447.00007FF7FF42B000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1706255447.00007FF7FF434000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1706289188.00007FF7FF43A000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1706289188.00007FF7FF43E000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff7ff3d0000_b2bXo6vmDm.jbxd

Similarity

API ID: CapsDeviceRelease
String ID:
API String ID: 127614599-3916222277
Opcode ID: a42f7bf34e2550c06df92b4c4441a28b155cc5d7cfc3f2a0da00e80f490195b4
Instruction ID: 7b6688e44fa8cb9f2fd1c3f4e735f00c9cd5c4526c00da9b692709bccf77c05f
Opcode Fuzzy Hash: a42f7bf34e2550c06df92b4c4441a28b155cc5d7cfc3f2a0da00e80f490195b4
Instruction Fuzzy Hash: 93E0C220B0968182FB0867B6B58917AA261BB8CBD0F558135DE3F437D4CE3CC8C85350

Function 00007FF7FF3DD1A8 Relevance: 6.2, APIs: 4, Instructions: 238timeCOMMON

Download Yara Rule

APIs

SetFileTime.KERNEL32 ref: 00007FF7FF3DD46C
_invalid_parameter_noinfo_noreturn.LIBCMT ref: 00007FF7FF3DD554
_invalid_parameter_noinfo_noreturn.LIBCMT ref: 00007FF7FF3DD55A
_invalid_parameter_noinfo_noreturn.LIBCMT ref: 00007FF7FF3DD560

Memory Dump Source

Source File: 00000000.00000002.1706197426.00007FF7FF3D1000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF7FF3D0000, based on PE: true

Associated: 00000000.00000002.1706180107.00007FF7FF3D0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1706234158.00007FF7FF418000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1706255447.00007FF7FF42B000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1706255447.00007FF7FF434000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1706289188.00007FF7FF43A000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1706289188.00007FF7FF43E000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff7ff3d0000_b2bXo6vmDm.jbxd

Similarity

API ID: _invalid_parameter_noinfo_noreturn$FileTime
String ID:
API String ID: 1137671866-0
Opcode ID: 20228944a5afb91411426e12e74fd9f957feffc0ed5156b7d75ac355226ac421
Instruction ID: 9b9dc5e8fbf6a4f63a02ab21a025fc3282fb10c9ec26ad4864c990013d92ef9d
Opcode Fuzzy Hash: 20228944a5afb91411426e12e74fd9f957feffc0ed5156b7d75ac355226ac421
Instruction Fuzzy Hash: E5A18162A18AC682EB10EB65D4401FDA361FF85794F805336EA7D0BAD9EF3CE544C790

Function 00007FF7FF3F0548 Relevance: 6.1, APIs: 4, Instructions: 122COMMON

Download Yara Rule

APIs

GetLastError.KERNEL32 ref: 00007FF7FF3F05FC
SetLastError.KERNEL32 ref: 00007FF7FF3F0697

Memory Dump Source

Source File: 00000000.00000002.1706197426.00007FF7FF3D1000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF7FF3D0000, based on PE: true

Associated: 00000000.00000002.1706180107.00007FF7FF3D0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1706234158.00007FF7FF418000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1706255447.00007FF7FF42B000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1706255447.00007FF7FF434000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1706289188.00007FF7FF43A000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1706289188.00007FF7FF43E000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff7ff3d0000_b2bXo6vmDm.jbxd

Similarity

API ID: ErrorLast
String ID:
API String ID: 1452528299-0
Opcode ID: 5ed787d55209b7c8df3ee471615d716fc40756d92c62d9d0f6fb7c7bc11a0d97
Instruction ID: 3700295c97726523a10c5ac3933e202af7c8f7dde9c65209e3dd7040a44f830b
Opcode Fuzzy Hash: 5ed787d55209b7c8df3ee471615d716fc40756d92c62d9d0f6fb7c7bc11a0d97
Instruction Fuzzy Hash: 50518272B14A8686FF04AB68D4442FCA321EF85B98F904336DA7C5B7D6DE2CD145C3A4

Function 00007FF7FF3F9D90 Relevance: 6.1, APIs: 4, Instructions: 106COMMON

Download Yara Rule

APIs

GetCurrentProcess.KERNEL32 ref: 00007FF7FF3F9DBC
GetLastError.KERNEL32 ref: 00007FF7FF3F9E08
CreateDirectoryW.KERNEL32 ref: 00007FF7FF3F9F10
LocalFree.KERNEL32 ref: 00007FF7FF3F9F20

Memory Dump Source

Source File: 00000000.00000002.1706197426.00007FF7FF3D1000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF7FF3D0000, based on PE: true

Associated: 00000000.00000002.1706180107.00007FF7FF3D0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1706234158.00007FF7FF418000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1706255447.00007FF7FF42B000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1706255447.00007FF7FF434000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1706289188.00007FF7FF43A000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1706289188.00007FF7FF43E000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff7ff3d0000_b2bXo6vmDm.jbxd

Similarity

API ID: CreateCurrentDirectoryErrorFreeLastLocalProcess
String ID:
API String ID: 1077098981-0
Opcode ID: ca5d27243be9ec8130d03a2fe366c549bde872ce788a203b2958cc7020f45f59
Instruction ID: 4f6422502396a3ee8d9fe29efa6425b937e5a3ebc6445e8e5a4e53569cdb45b5
Opcode Fuzzy Hash: ca5d27243be9ec8130d03a2fe366c549bde872ce788a203b2958cc7020f45f59
Instruction Fuzzy Hash: 29515332A19B8286EB409F21E8443BDB774FB84794F901139EA7D57A98DF3CD544CB90

Function 00007FF7FF40DB5C Relevance: 6.1, APIs: 4, Instructions: 104COMMONLIBRARYCODE

Download Yara Rule

APIs

_invalid_parameter_noinfo.LIBCMT ref: 00007FF7FF40DBAF
WideCharToMultiByte.KERNEL32 ref: 00007FF7FF40DC81
GetLastError.KERNEL32 ref: 00007FF7FF40DCA4
_invalid_parameter_noinfo.LIBCMT ref: 00007FF7FF40DCD6

Memory Dump Source

Source File: 00000000.00000002.1706197426.00007FF7FF3D1000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF7FF3D0000, based on PE: true

Associated: 00000000.00000002.1706180107.00007FF7FF3D0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1706234158.00007FF7FF418000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1706255447.00007FF7FF42B000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1706255447.00007FF7FF434000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1706289188.00007FF7FF43A000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1706289188.00007FF7FF43E000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff7ff3d0000_b2bXo6vmDm.jbxd

Similarity

API ID: _invalid_parameter_noinfo$ByteCharErrorLastMultiWide
String ID:
API String ID: 4141327611-0
Opcode ID: fdb879c7c344a6dcddabd48f24568e2f5e84c2dc3f6ceef9c32cec135b3ccbbf
Instruction ID: 207e9c382d8b72a16bb748e5a98b29ec1201359d723356ca06b8b26dd1ffa615
Opcode Fuzzy Hash: fdb879c7c344a6dcddabd48f24568e2f5e84c2dc3f6ceef9c32cec135b3ccbbf
Instruction Fuzzy Hash: AF418532A0C6C256F765AE1090443F9E6B0EF80B90F944331DA7D47AD9EF6CD84687A0

Function 00007FF7FF3E3980 Relevance: 6.1, APIs: 4, Instructions: 101fileCOMMON

Download Yara Rule

APIs

MoveFileW.KERNEL32 ref: 00007FF7FF3E39BD
MoveFileW.KERNEL32 ref: 00007FF7FF3E3A34
_invalid_parameter_noinfo_noreturn.LIBCMT ref: 00007FF7FF3E3AEB
_invalid_parameter_noinfo_noreturn.LIBCMT ref: 00007FF7FF3E3AF1

Memory Dump Source

Source File: 00000000.00000002.1706197426.00007FF7FF3D1000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF7FF3D0000, based on PE: true

Associated: 00000000.00000002.1706180107.00007FF7FF3D0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1706234158.00007FF7FF418000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1706255447.00007FF7FF42B000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1706255447.00007FF7FF434000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1706289188.00007FF7FF43A000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1706289188.00007FF7FF43E000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff7ff3d0000_b2bXo6vmDm.jbxd

Similarity

API ID: FileMove_invalid_parameter_noinfo_noreturn
String ID:
API String ID: 3823481717-0
Opcode ID: 23c5bd100aa8ad673c958e7e4297408591e81b8e6a21f45797f9c77ad4370286
Instruction ID: b08b1186d72f09d496deeb114af81f7d950635b9c8227fd10b0e931e8bbd9965
Opcode Fuzzy Hash: 23c5bd100aa8ad673c958e7e4297408591e81b8e6a21f45797f9c77ad4370286
Instruction Fuzzy Hash: EC41BE62F24A9285FB00EB65D8842FC6371BF44BA4B901335DE7D2AAD9DF78D084C290

Function 00007FF7FF410B78 Relevance: 6.1, APIs: 4, Instructions: 74COMMON

Download Yara Rule

APIs

GetEnvironmentStringsW.KERNEL32(?,?,?,?,?,?,?,00007FF7FF40C45B), ref: 00007FF7FF410B91
WideCharToMultiByte.KERNEL32(?,?,?,?,?,?,?,00007FF7FF40C45B), ref: 00007FF7FF410BF3
WideCharToMultiByte.KERNEL32(?,?,?,?,?,?,?,00007FF7FF40C45B), ref: 00007FF7FF410C2D
FreeEnvironmentStringsW.KERNEL32(?,?,?,?,?,?,?,00007FF7FF40C45B), ref: 00007FF7FF410C57

Memory Dump Source

Source File: 00000000.00000002.1706197426.00007FF7FF3D1000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF7FF3D0000, based on PE: true

Associated: 00000000.00000002.1706180107.00007FF7FF3D0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1706234158.00007FF7FF418000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1706255447.00007FF7FF42B000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1706255447.00007FF7FF434000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1706289188.00007FF7FF43A000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1706289188.00007FF7FF43E000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff7ff3d0000_b2bXo6vmDm.jbxd

Similarity

API ID: ByteCharEnvironmentMultiStringsWide$Free
String ID:
API String ID: 1557788787-0
Opcode ID: 23704c5f87cc5d65a6a85ab0da0438508b9fc27f2b888927c3d6011bf25654c1
Instruction ID: 7c3834530b04910a2f91b47e230f34c27cbb9a3097c3cad787ceb9181e433eba
Opcode Fuzzy Hash: 23704c5f87cc5d65a6a85ab0da0438508b9fc27f2b888927c3d6011bf25654c1
Instruction Fuzzy Hash: F1219131A18F9181E725AF15A440079E6A4FF54BE0B984234DEBE63BD8DE3CE4528654

Function 00007FF7FF40D440 Relevance: 6.0, APIs: 4, Instructions: 43COMMONLIBRARYCODE

Download Yara Rule

APIs

GetLastError.KERNEL32(?,?,?,00007FF7FF407F28,?,?,?,00007FF7FF409D35), ref: 00007FF7FF40D44A
SetLastError.KERNEL32(?,?,?,00007FF7FF407F28,?,?,?,00007FF7FF409D35), ref: 00007FF7FF40D4B2
SetLastError.KERNEL32(?,?,?,00007FF7FF407F28,?,?,?,00007FF7FF409D35), ref: 00007FF7FF40D4C8
abort.LIBCMT ref: 00007FF7FF40D4CE

Memory Dump Source

Source File: 00000000.00000002.1706197426.00007FF7FF3D1000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF7FF3D0000, based on PE: true

Associated: 00000000.00000002.1706180107.00007FF7FF3D0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1706234158.00007FF7FF418000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1706255447.00007FF7FF42B000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1706255447.00007FF7FF434000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1706289188.00007FF7FF43A000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1706289188.00007FF7FF43E000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff7ff3d0000_b2bXo6vmDm.jbxd

Similarity

API ID: ErrorLast$abort
String ID:
API String ID: 1447195878-0
Opcode ID: df247b5a3948333368795c339682862bf84e23f7c025c70b8dad3e7beb060077
Instruction ID: 3eccff727b0c3910d572813a9b6b5d11d397372b365432cc66ab7ab496c9f86d
Opcode Fuzzy Hash: df247b5a3948333368795c339682862bf84e23f7c025c70b8dad3e7beb060077
Instruction Fuzzy Hash: 0A014C10B0D6C642FB59B731AA551F8A1B19F447A0F944738D93E06BD6FD2CF88942B0

Function 00007FF7FF3F8590 Relevance: 6.0, APIs: 4, Instructions: 21COMMON

Download Yara Rule

APIs

GetDC.USER32 ref: 00007FF7FF3F8598
GetDeviceCaps.GDI32 ref: 00007FF7FF3F85AE
GetDeviceCaps.GDI32 ref: 00007FF7FF3F85C2
ReleaseDC.USER32 ref: 00007FF7FF3F85D3

Memory Dump Source

Source File: 00000000.00000002.1706197426.00007FF7FF3D1000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF7FF3D0000, based on PE: true

Associated: 00000000.00000002.1706180107.00007FF7FF3D0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1706234158.00007FF7FF418000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1706255447.00007FF7FF42B000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1706255447.00007FF7FF434000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1706289188.00007FF7FF43A000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1706289188.00007FF7FF43E000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff7ff3d0000_b2bXo6vmDm.jbxd

Similarity

API ID: CapsDevice$Release
String ID:
API String ID: 1035833867-0
Opcode ID: de15d0a72ac65e47349a1b4cc9ca260558533dfe27db70e7b1e031f833f09c6c
Instruction ID: efb3c1a2399d1630a5e78871dd32cfa5ffff90372f4e48432ade9118d54434fa
Opcode Fuzzy Hash: de15d0a72ac65e47349a1b4cc9ca260558533dfe27db70e7b1e031f833f09c6c
Instruction Fuzzy Hash: 73E0E560E0A64142FF087B7168991B59150BF48781F884539C83E463D0DD3C9449F664

Function 00007FF7FF3DE34C Relevance: 5.4, APIs: 2, Strings: 1, Instructions: 176COMMON

Download Yara Rule

APIs

_invalid_parameter_noinfo_noreturn.LIBCMT ref: 00007FF7FF3DE549

Strings

DXGIDebug.dll, xrefs: 00007FF7FF3DE35A

Memory Dump Source

Source File: 00000000.00000002.1706197426.00007FF7FF3D1000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF7FF3D0000, based on PE: true

Associated: 00000000.00000002.1706180107.00007FF7FF3D0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1706234158.00007FF7FF418000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1706255447.00007FF7FF42B000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1706255447.00007FF7FF434000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1706289188.00007FF7FF43A000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1706289188.00007FF7FF43E000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff7ff3d0000_b2bXo6vmDm.jbxd

Similarity

API ID: _invalid_parameter_noinfo_noreturn
String ID: DXGIDebug.dll
API String ID: 3668304517-540382549
Opcode ID: 0987c429807df35fdd24896527435974459c4b9b81a0ebe1677a01cdcabc3dd8
Instruction ID: 162d03f88fa6f5c65fbeb26917bb86d77956ebb01a1e5404002f325897245fef
Opcode Fuzzy Hash: 0987c429807df35fdd24896527435974459c4b9b81a0ebe1677a01cdcabc3dd8
Instruction Fuzzy Hash: 4571AC72A14B8586EB14AB65E4403EDB3A4FF54794F80422ADBBC07BD5DF78D191C390

Function 00007FF7FF40E1F4 Relevance: 5.4, APIs: 1, Strings: 2, Instructions: 138COMMONLIBRARYCODE

Download Yara Rule

APIs

_invalid_parameter_noinfo.LIBCMT ref: 00007FF7FF40E237

Strings

gfff, xrefs: 00007FF7FF40E362
e+000, xrefs: 00007FF7FF40E2DF

Memory Dump Source

Source File: 00000000.00000002.1706197426.00007FF7FF3D1000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF7FF3D0000, based on PE: true

Associated: 00000000.00000002.1706180107.00007FF7FF3D0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1706234158.00007FF7FF418000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1706255447.00007FF7FF42B000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1706255447.00007FF7FF434000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1706289188.00007FF7FF43A000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1706289188.00007FF7FF43E000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff7ff3d0000_b2bXo6vmDm.jbxd

Similarity

API ID: _invalid_parameter_noinfo
String ID: e+000$gfff
API String ID: 3215553584-3030954782
Opcode ID: ffbcb58cc87a1110f60409a8afde5d08377aab6ce8cf060c3284a5669936e3c2
Instruction ID: d6cb08a8165b090298039f5af35694c249ccc2d11b0b1f89b4b492aef1d756f2
Opcode Fuzzy Hash: ffbcb58cc87a1110f60409a8afde5d08377aab6ce8cf060c3284a5669936e3c2
Instruction Fuzzy Hash: A2511662B187C246E7259B3599403B9AF91BB81B90F889335CBBC87BD6CE3CD454C750

Function 00007FF7FF3E9408 Relevance: 5.4, APIs: 2, Strings: 1, Instructions: 108COMMON

Download Yara Rule

APIs

Part of subcall function 00007FF7FF3E95A8: swprintf.LEGACY_STDIO_DEFINITIONS ref: 00007FF7FF3E95E6

_invalid_parameter_noinfo_noreturn.LIBCMT ref: 00007FF7FF3E959C
_invalid_parameter_noinfo_noreturn.LIBCMT ref: 00007FF7FF3E95A2

Strings

SIZE, xrefs: 00007FF7FF3E9443

Memory Dump Source

Source File: 00000000.00000002.1706197426.00007FF7FF3D1000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF7FF3D0000, based on PE: true

Associated: 00000000.00000002.1706180107.00007FF7FF3D0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1706234158.00007FF7FF418000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1706255447.00007FF7FF42B000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1706255447.00007FF7FF434000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1706289188.00007FF7FF43A000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1706289188.00007FF7FF43E000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff7ff3d0000_b2bXo6vmDm.jbxd

Similarity

API ID: _invalid_parameter_noinfo_noreturn$swprintf
String ID: SIZE
API String ID: 449872665-3243624926
Opcode ID: 6775c6e5e0b050535fa3d5d92d2e2625b9409ae7efec724ba4f308c615c90b07
Instruction ID: f0bb1622f7f4d1c48116638fef5f04bb2c2abda77574ad0af505438aad538895
Opcode Fuzzy Hash: 6775c6e5e0b050535fa3d5d92d2e2625b9409ae7efec724ba4f308c615c90b07
Instruction Fuzzy Hash: 3341C362A196C286EF10EF14E4413FDA350EF85790F904335EABD0A6DAEE7CD544C791

Function 00007FF7FF40C2C0 Relevance: 5.4, APIs: 2, Strings: 1, Instructions: 107COMMON

Download Yara Rule

APIs

_invalid_parameter_noinfo.LIBCMT ref: 00007FF7FF40C2EA
GetModuleFileNameA.KERNEL32(?,?,?,?,?,00007FF7FF402CD5), ref: 00007FF7FF40C30B

Strings

C:\Users\user\Desktop\b2bXo6vmDm.exe, xrefs: 00007FF7FF40C2F9

Memory Dump Source

Source File: 00000000.00000002.1706197426.00007FF7FF3D1000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF7FF3D0000, based on PE: true

Associated: 00000000.00000002.1706180107.00007FF7FF3D0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1706234158.00007FF7FF418000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1706255447.00007FF7FF42B000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1706255447.00007FF7FF434000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1706289188.00007FF7FF43A000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1706289188.00007FF7FF43E000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff7ff3d0000_b2bXo6vmDm.jbxd

Similarity

API ID: FileModuleName_invalid_parameter_noinfo
String ID: C:\Users\user\Desktop\b2bXo6vmDm.exe
API String ID: 3307058713-3442687374
Opcode ID: 2b307fc7043d57580c2760bc14d10e66149d3294dbd6a1f00798eb6953a6f573
Instruction ID: 2b95b036b285ceb1416190023f7b376a4b37b0d11af9e61fe04f92f1dda95c1e
Opcode Fuzzy Hash: 2b307fc7043d57580c2760bc14d10e66149d3294dbd6a1f00798eb6953a6f573
Instruction Fuzzy Hash: 24418032A18A92CAEB15EF25A4400FCB7A4EF447D4B944235EA7D47BC5DE3DE441D3A0

Function 00007FF7FF3F9B40 Relevance: 5.4, APIs: 2, Strings: 1, Instructions: 104COMMON

Download Yara Rule

APIs

Part of subcall function 00007FF7FF3D255C: GetDlgItem.USER32 ref: 00007FF7FF3D25AC
Part of subcall function 00007FF7FF3D255C: SetDlgItemTextW.USER32 ref: 00007FF7FF3D25C8

EndDialog.USER32 ref: 00007FF7FF3F9C24
SetDlgItemTextW.USER32 ref: 00007FF7FF3F9CAA

Strings

ASKNEXTVOL, xrefs: 00007FF7FF3F9B72

Memory Dump Source

Source File: 00000000.00000002.1706197426.00007FF7FF3D1000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF7FF3D0000, based on PE: true

Associated: 00000000.00000002.1706180107.00007FF7FF3D0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1706234158.00007FF7FF418000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1706255447.00007FF7FF42B000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1706255447.00007FF7FF434000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1706289188.00007FF7FF43A000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1706289188.00007FF7FF43E000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff7ff3d0000_b2bXo6vmDm.jbxd

Similarity

API ID: Item$Text$Dialog
String ID: ASKNEXTVOL
API String ID: 2638039312-3402441367
Opcode ID: d0a7277abea115b5451496591776496c59c44b7436eace80e69975e6a8ac9e23
Instruction ID: a32afa3b07ff118620a551ae7eeeeeb1ebb4ef1a0d660ba39a3c1ac831afa07d
Opcode Fuzzy Hash: d0a7277abea115b5451496591776496c59c44b7436eace80e69975e6a8ac9e23
Instruction Fuzzy Hash: FE413D21A096C642FB54BF12E9502F9A7A1AF85BC0F940239DE7D0B7DDCE3DE44593A0

Function 00007FF7FF3E9638 Relevance: 5.3, APIs: 1, Strings: 2, Instructions: 84COMMON

Download Yara Rule

APIs

_snwprintf.LEGACY_STDIO_DEFINITIONS ref: 00007FF7FF3E96EA

Part of subcall function 00007FF7FF3F0F68: WideCharToMultiByte.KERNEL32 ref: 00007FF7FF3F0F99

Strings

@%s, xrefs: 00007FF7FF3E96CE
$%s, xrefs: 00007FF7FF3E96D7

Memory Dump Source

Source File: 00000000.00000002.1706197426.00007FF7FF3D1000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF7FF3D0000, based on PE: true

Associated: 00000000.00000002.1706180107.00007FF7FF3D0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1706234158.00007FF7FF418000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1706255447.00007FF7FF42B000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1706255447.00007FF7FF434000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1706289188.00007FF7FF43A000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1706289188.00007FF7FF43E000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff7ff3d0000_b2bXo6vmDm.jbxd

Similarity

API ID: ByteCharMultiWide_snwprintf
String ID: $%s$@%s
API String ID: 2650857296-834177443
Opcode ID: 68d6d98aec82f67e7f26d78b4367655257a27e60e60eb814561ac576190adeba
Instruction ID: 6ea4630dfa76e935e419fbbfba024ff8f0cf40dd13544b21b78b503831877004
Opcode Fuzzy Hash: 68d6d98aec82f67e7f26d78b4367655257a27e60e60eb814561ac576190adeba
Instruction Fuzzy Hash: B231B272B19A8696EF10AF25D4407F9A3A0AF44784F800236DE3C1B7D9DE3CE519C790

Function 00007FF7FF400204 Relevance: 5.3, APIs: 2, Strings: 1, Instructions: 75windowCOMMON

Download Yara Rule

APIs

IsWindowVisible.USER32 ref: 00007FF7FF40026F
DialogBoxParamW.USER32 ref: 00007FF7FF4002A4

Strings

GETPASSWORD1, xrefs: 00007FF7FF40029D

Memory Dump Source

Source File: 00000000.00000002.1706197426.00007FF7FF3D1000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF7FF3D0000, based on PE: true

Associated: 00000000.00000002.1706180107.00007FF7FF3D0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1706234158.00007FF7FF418000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1706255447.00007FF7FF42B000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1706255447.00007FF7FF434000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1706289188.00007FF7FF43A000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1706289188.00007FF7FF43E000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff7ff3d0000_b2bXo6vmDm.jbxd

Similarity

API ID: DialogParamVisibleWindow
String ID: GETPASSWORD1
API String ID: 3157717868-3292211884
Opcode ID: 3689008c5ae976a1f3a242e5b1eb30ef9737a63c20829ff4d7ba5964f065d3d0
Instruction ID: 58bf27db7530f46156c34a2cba50f0150f50d75fb8df1a9becb98f1dbbb36c3a
Opcode Fuzzy Hash: 3689008c5ae976a1f3a242e5b1eb30ef9737a63c20829ff4d7ba5964f065d3d0
Instruction Fuzzy Hash: FF316F25A0D6C685EB01AB25A8401F9AB60AF45BC4FC80375D9BD077E9CE2CE844E7F4

Function 00007FF7FF40EB04 Relevance: 5.3, APIs: 2, Strings: 1, Instructions: 70COMMON

Download Yara Rule

APIs

GetStdHandle.KERNEL32 ref: 00007FF7FF40EB76
GetFileType.KERNEL32 ref: 00007FF7FF40EB8C

Strings

@, xrefs: 00007FF7FF40EBB7

Memory Dump Source

Source File: 00000000.00000002.1706197426.00007FF7FF3D1000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF7FF3D0000, based on PE: true

Associated: 00000000.00000002.1706180107.00007FF7FF3D0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1706234158.00007FF7FF418000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1706255447.00007FF7FF42B000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1706255447.00007FF7FF434000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1706289188.00007FF7FF43A000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1706289188.00007FF7FF43E000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff7ff3d0000_b2bXo6vmDm.jbxd

Similarity

API ID: FileHandleType
String ID: @
API String ID: 3000768030-2766056989
Opcode ID: 01c4e23626c5bd34e0d32a71787dfe5976e9b76bf070a7e2fa99837352baeece
Instruction ID: 35e2712e8f263fd635b591f68ed1cd7fb53c4d4802eec37116ef3aa5a5408647
Opcode Fuzzy Hash: 01c4e23626c5bd34e0d32a71787dfe5976e9b76bf070a7e2fa99837352baeece
Instruction Fuzzy Hash: EB21A522E0CBC281EB60DB2894901B9AA61FB85774F680335D6BF077D4DE3DD891D3A1

Function 00007FF7FF404078 Relevance: 5.3, APIs: 2, Strings: 1, Instructions: 42COMMONLIBRARYCODE

Download Yara Rule

APIs

RtlPcToFileHeader.KERNEL32(?,?,?,?,?,?,?,?,?,00007FF7FF401D3E), ref: 00007FF7FF4040BC
RaiseException.KERNEL32(?,?,?,?,?,?,?,?,?,00007FF7FF401D3E), ref: 00007FF7FF404102

Strings

csm, xrefs: 00007FF7FF4040EF

Memory Dump Source

Source File: 00000000.00000002.1706197426.00007FF7FF3D1000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF7FF3D0000, based on PE: true

Associated: 00000000.00000002.1706180107.00007FF7FF3D0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1706234158.00007FF7FF418000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1706255447.00007FF7FF42B000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1706255447.00007FF7FF434000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1706289188.00007FF7FF43A000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1706289188.00007FF7FF43E000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff7ff3d0000_b2bXo6vmDm.jbxd

Similarity

API ID: ExceptionFileHeaderRaise
String ID: csm
API String ID: 2573137834-1018135373
Opcode ID: 995ce70781ed1107fbe35a2df86b6ab92d82f2488d4e31342cdb9a65d606da21
Instruction ID: 6d2351f03e7e145f2e762604bcf8fa566178c5a120b4e77beddc313a225cff97
Opcode Fuzzy Hash: 995ce70781ed1107fbe35a2df86b6ab92d82f2488d4e31342cdb9a65d606da21
Instruction Fuzzy Hash: 7711A332608B8182EB219F15F4402A9B7E0FB88B94F584230DFAC077A5DF3DD551C744

Function 00007FF7FF3EEA5C Relevance: 5.3, APIs: 2, Strings: 1, Instructions: 16synchronizationCOMMON

Download Yara Rule

APIs

WaitForSingleObject.KERNEL32(?,?,?,?,?,?,?,?,00007FF7FF3EE95F,?,?,?,00007FF7FF3E463A,?,?,?), ref: 00007FF7FF3EEA63
GetLastError.KERNEL32(?,?,?,?,?,?,?,?,00007FF7FF3EE95F,?,?,?,00007FF7FF3E463A,?,?,?), ref: 00007FF7FF3EEA6E

Strings

WaitForMultipleObjects error %d, GetLastError %d, xrefs: 00007FF7FF3EEA78

Memory Dump Source

Source File: 00000000.00000002.1706197426.00007FF7FF3D1000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF7FF3D0000, based on PE: true

Associated: 00000000.00000002.1706180107.00007FF7FF3D0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1706234158.00007FF7FF418000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1706255447.00007FF7FF42B000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1706255447.00007FF7FF434000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1706289188.00007FF7FF43A000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1706289188.00007FF7FF43E000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff7ff3d0000_b2bXo6vmDm.jbxd

Similarity

API ID: ErrorLastObjectSingleWait
String ID: WaitForMultipleObjects error %d, GetLastError %d
API String ID: 1211598281-2248577382
Opcode ID: 98ce5a6e9b01a49333d4d7b683bb298ff4a8e953ba0927a3bf2f7aa8eb90df55
Instruction ID: c8312e18844e7be44b993f39591ec190d85666427e94b0e56378d0cfa45cfc2c
Opcode Fuzzy Hash: 98ce5a6e9b01a49333d4d7b683bb298ff4a8e953ba0927a3bf2f7aa8eb90df55
Instruction Fuzzy Hash: 0DE01A21E19CC282F701B724AC425F9A210BF607B4FE00335D03E852F59F2CA989D3A1

Function 00007FF7FF3EA43C Relevance: 5.3, APIs: 2, Strings: 1, Instructions: 15COMMON

Download Yara Rule

APIs

GetModuleHandleW.KERNEL32 ref: 00007FF7FF3EA447
FindResourceW.KERNEL32 ref: 00007FF7FF3EA45D

Strings

RTL, xrefs: 00007FF7FF3EA453

Memory Dump Source

Source File: 00000000.00000002.1706197426.00007FF7FF3D1000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF7FF3D0000, based on PE: true

Associated: 00000000.00000002.1706180107.00007FF7FF3D0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1706234158.00007FF7FF418000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1706255447.00007FF7FF42B000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1706255447.00007FF7FF434000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1706289188.00007FF7FF43A000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1706289188.00007FF7FF43E000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff7ff3d0000_b2bXo6vmDm.jbxd

Similarity

API ID: FindHandleModuleResource
String ID: RTL
API String ID: 3537982541-834975271
Opcode ID: e39cf6139d6c3c808756c827088780cb49cd2dd94430b396554b51375d39015a
Instruction ID: 6f395cb06db1188f5bf2e513fbcf0f6a325d1e727bfa34e3a83c97f270f48552
Opcode Fuzzy Hash: e39cf6139d6c3c808756c827088780cb49cd2dd94430b396554b51375d39015a
Instruction Fuzzy Hash: 4DD05E92F09A8682FF1AAB71A4497B466515F18B51FE84138CC3E0A3D1EE3CD088C7A5

Analysis Process: clamer.exePID: 6664, Parent PID: 6876COMMON

Execution Graph

Execution Coverage:	12.5%
Dynamic/Decrypted Code Coverage:	0%
Signature Coverage:	0%
Total number of Nodes:	2000
Total number of Limit Nodes:	27

Executed Functions

Function 00007FF6E8DDB190 Relevance: 125.7, APIs: 61, Strings: 10, Instructions: 1421windowfilesleepCOMMON

Download Yara Rule

APIs

Part of subcall function 00007FF6E8DB255C: GetDlgItem.USER32 ref: 00007FF6E8DB25AC
Part of subcall function 00007FF6E8DB255C: SetDlgItemTextW.USER32 ref: 00007FF6E8DB25C8

EndDialog.USER32 ref: 00007FF6E8DDB2D0
SetDlgItemTextW.USER32 ref: 00007FF6E8DDB320
GetMessageW.USER32 ref: 00007FF6E8DDB350
IsDialogMessageW.USER32 ref: 00007FF6E8DDB369
TranslateMessage.USER32 ref: 00007FF6E8DDB37B
DispatchMessageW.USER32 ref: 00007FF6E8DDB389
EndDialog.USER32 ref: 00007FF6E8DDB3D3
GetDlgItem.USER32 ref: 00007FF6E8DDB410
IsDlgButtonChecked.USER32 ref: 00007FF6E8DDB431
IsDlgButtonChecked.USER32 ref: 00007FF6E8DDB449
SetFocus.USER32 ref: 00007FF6E8DDB452
GetLastError.KERNEL32 ref: 00007FF6E8DDB634
GetLastError.KERNEL32 ref: 00007FF6E8DDB665
GetTickCount.KERNEL32 ref: 00007FF6E8DDB68B
GetLastError.KERNEL32 ref: 00007FF6E8DDB6F5
GetCommandLineW.KERNEL32 ref: 00007FF6E8DDB841
CreateFileMappingW.KERNEL32 ref: 00007FF6E8DDB900
MapViewOfFile.KERNEL32 ref: 00007FF6E8DDB923
ShellExecuteExW.SHELL32 ref: 00007FF6E8DDB95B
Sleep.KERNEL32 ref: 00007FF6E8DDB9B6
UnmapViewOfFile.KERNEL32 ref: 00007FF6E8DDB9DF
CloseHandle.KERNEL32 ref: 00007FF6E8DDB9E8
SetDlgItemTextW.USER32 ref: 00007FF6E8DDBCDE
DialogBoxParamW.USER32 ref: 00007FF6E8DDC0D7
EndDialog.USER32 ref: 00007FF6E8DDC0EF
EnableWindow.USER32 ref: 00007FF6E8DDC2A6
IsDlgButtonChecked.USER32 ref: 00007FF6E8DDC2F8
WaitForInputIdle.USER32 ref: 00007FF6E8DDB9A3

Part of subcall function 00007FF6E8DCAAE0: LoadStringW.USER32 ref: 00007FF6E8DCAB67
Part of subcall function 00007FF6E8DCAAE0: LoadStringW.USER32 ref: 00007FF6E8DCAB80

IsDlgButtonChecked.USER32 ref: 00007FF6E8DDBEC3
SendDlgItemMessageW.USER32 ref: 00007FF6E8DDBEEA
GetDlgItem.USER32 ref: 00007FF6E8DDBEF8
IsDlgButtonChecked.USER32 ref: 00007FF6E8DDBF12
GetDlgItem.USER32 ref: 00007FF6E8DDBF4F
SetDlgItemTextW.USER32 ref: 00007FF6E8DDBFEC
SetDlgItemTextW.USER32 ref: 00007FF6E8DDC004
SetDlgItemTextW.USER32 ref: 00007FF6E8DDC321
_invalid_parameter_noinfo_noreturn.LIBCMT ref: 00007FF6E8DDC363
_invalid_parameter_noinfo_noreturn.LIBCMT ref: 00007FF6E8DDC369
_invalid_parameter_noinfo_noreturn.LIBCMT ref: 00007FF6E8DDC36F
_invalid_parameter_noinfo_noreturn.LIBCMT ref: 00007FF6E8DDC375
_invalid_parameter_noinfo_noreturn.LIBCMT ref: 00007FF6E8DDC37B
_invalid_parameter_noinfo_noreturn.LIBCMT ref: 00007FF6E8DDC381
SendDlgItemMessageW.USER32 ref: 00007FF6E8DDC449
EndDialog.USER32 ref: 00007FF6E8DDC463
GetDlgItem.USER32 ref: 00007FF6E8DDC491
SetFocus.USER32 ref: 00007FF6E8DDC49A
SendDlgItemMessageW.USER32 ref: 00007FF6E8DDC53E
FindFirstFileW.KERNEL32 ref: 00007FF6E8DDC562
FindClose.KERNEL32 ref: 00007FF6E8DDC68A
SendDlgItemMessageW.USER32 ref: 00007FF6E8DDC7AF

Part of subcall function 00007FF6E8DB129C: Concurrency::cancel_current_task.LIBCPMT ref: 00007FF6E8DB1396

_invalid_parameter_noinfo_noreturn.LIBCMT ref: 00007FF6E8DDCAA9
_invalid_parameter_noinfo_noreturn.LIBCMT ref: 00007FF6E8DDCAAF
_invalid_parameter_noinfo_noreturn.LIBCMT ref: 00007FF6E8DDCAB5
_invalid_parameter_noinfo_noreturn.LIBCMT ref: 00007FF6E8DDCABB
_invalid_parameter_noinfo_noreturn.LIBCMT ref: 00007FF6E8DDCAC1
_invalid_parameter_noinfo_noreturn.LIBCMT ref: 00007FF6E8DDCAC7

Strings

%s %s, xrefs: 00007FF6E8DDC6D9, 00007FF6E8DDC946
__tmp_rar_sfx_access_check_, xrefs: 00007FF6E8DDB6A9
LICENSEDLG, xrefs: 00007FF6E8DDC0C9
REPLACEFILEDLG, xrefs: 00007FF6E8DDC3D3
winrarsfxmappingfile.tmp, xrefs: 00007FF6E8DDB8E0
STARTDLG, xrefs: 00007FF6E8DDB1CA
-el -s2 "-d%s" "-sp%s", xrefs: 00007FF6E8DDB799
p, xrefs: 00007FF6E8DDB7AB
@, xrefs: 00007FF6E8DDB7B6
runas, xrefs: 00007FF6E8DDB7C9

Memory Dump Source

Source File: 00000003.00000002.1704265649.00007FF6E8DB1000.00000020.00000001.01000000.00000009.sdmp, Offset: 00007FF6E8DB0000, based on PE: true

Associated: 00000003.00000002.1704240339.00007FF6E8DB0000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.1704351194.00007FF6E8DF8000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.1704386188.00007FF6E8E0B000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.1704386188.00007FF6E8E14000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.1704433121.00007FF6E8E1A000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.1704433121.00007FF6E8E1E000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_7ff6e8db0000_clamer.jbxd

Similarity

API ID: Item$_invalid_parameter_noinfo_noreturn$Message$DialogText$ButtonChecked$FileSend$ErrorLast$CloseFindFocusLoadStringView$CommandConcurrency::cancel_current_taskCountCreateDispatchEnableExecuteFirstHandleIdleInputLineMappingParamShellSleepTickTranslateUnmapWaitWindow
String ID: %s %s$-el -s2 "-d%s" "-sp%s"$@$LICENSEDLG$REPLACEFILEDLG$STARTDLG$__tmp_rar_sfx_access_check_$p$runas$winrarsfxmappingfile.tmp
API String ID: 2128803032-2702805183
Opcode ID: ef88a523969dd0235166cb9d42acde09ccc0fc415cb4720df313b6d38dcb6fdb
Instruction ID: 15e614cfcd76657c10df123b3f4de4a947179a660c1409c2c70f6cb413bb8dce
Opcode Fuzzy Hash: ef88a523969dd0235166cb9d42acde09ccc0fc415cb4720df313b6d38dcb6fdb
Instruction Fuzzy Hash: C7D29163A0868285EA209B35E8543F96361EF85784F504335D98D877EADF3EE54CCB0E

Function 00007FF6E8DDCE88 Relevance: 66.7, APIs: 27, Strings: 10, Instructions: 1963fileCOMMON

Download Yara Rule

APIs

GetDlgItem.USER32 ref: 00007FF6E8DDD5F3
IsDlgButtonChecked.USER32 ref: 00007FF6E8DDD626
IsDlgButtonChecked.USER32 ref: 00007FF6E8DDD655
SHFileOperationW.SHELL32 ref: 00007FF6E8DDD9BB
MoveFileW.KERNEL32 ref: 00007FF6E8DDDB4B
MoveFileExW.KERNEL32 ref: 00007FF6E8DDDB69
GetTempPathW.KERNEL32 ref: 00007FF6E8DDDC49

Part of subcall function 00007FF6E8DB1FA0: _invalid_parameter_noinfo_noreturn.LIBCMT ref: 00007FF6E8DB1FFB

EndDialog.USER32 ref: 00007FF6E8DDDFCA
Concurrency::cancel_current_task.LIBCPMT ref: 00007FF6E8DDEEE3
_invalid_parameter_noinfo_noreturn.LIBCMT ref: 00007FF6E8DDEEEF
_invalid_parameter_noinfo_noreturn.LIBCMT ref: 00007FF6E8DDEF07
_invalid_parameter_noinfo_noreturn.LIBCMT ref: 00007FF6E8DDEF0D
_invalid_parameter_noinfo_noreturn.LIBCMT ref: 00007FF6E8DDEF13
_invalid_parameter_noinfo_noreturn.LIBCMT ref: 00007FF6E8DDEF19
_invalid_parameter_noinfo_noreturn.LIBCMT ref: 00007FF6E8DDEF1F
_invalid_parameter_noinfo_noreturn.LIBCMT ref: 00007FF6E8DDEF25
_invalid_parameter_noinfo_noreturn.LIBCMT ref: 00007FF6E8DDEF2B
_invalid_parameter_noinfo_noreturn.LIBCMT ref: 00007FF6E8DDEF31
_invalid_parameter_noinfo_noreturn.LIBCMT ref: 00007FF6E8DDEF37
_invalid_parameter_noinfo_noreturn.LIBCMT ref: 00007FF6E8DDEF3D
_invalid_parameter_noinfo_noreturn.LIBCMT ref: 00007FF6E8DDEF43
_invalid_parameter_noinfo_noreturn.LIBCMT ref: 00007FF6E8DDEF49
_invalid_parameter_noinfo_noreturn.LIBCMT ref: 00007FF6E8DDEF4F
_invalid_parameter_noinfo_noreturn.LIBCMT ref: 00007FF6E8DDEF55
_invalid_parameter_noinfo_noreturn.LIBCMT ref: 00007FF6E8DDEF5B
Concurrency::cancel_current_task.LIBCPMT ref: 00007FF6E8DDEF67
Concurrency::cancel_current_task.LIBCPMT ref: 00007FF6E8DDEF73

Strings

MIN, xrefs: 00007FF6E8DDEAE5, 00007FF6E8DDEAF4
<br>, xrefs: 00007FF6E8DDD6DA, 00007FF6E8DDD6E9
@set:user, xrefs: 00007FF6E8DDDD96, 00007FF6E8DDDDA5
.tmp, xrefs: 00007FF6E8DDDA85
.lnk, xrefs: 00007FF6E8DDE406, 00007FF6E8DDE415
ProgramFilesDir, xrefs: 00007FF6E8DDD4F0
lnk, xrefs: 00007FF6E8DDE3CA, 00007FF6E8DDE3D9
Software\Microsoft\Windows\CurrentVersion, xrefs: 00007FF6E8DDD501
HIDE, xrefs: 00007FF6E8DDE9E5, 00007FF6E8DDE9F4
MAX, xrefs: 00007FF6E8DDEA82, 00007FF6E8DDEA91

Memory Dump Source

Source File: 00000003.00000002.1704265649.00007FF6E8DB1000.00000020.00000001.01000000.00000009.sdmp, Offset: 00007FF6E8DB0000, based on PE: true

Associated: 00000003.00000002.1704240339.00007FF6E8DB0000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.1704351194.00007FF6E8DF8000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.1704386188.00007FF6E8E0B000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.1704386188.00007FF6E8E14000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.1704433121.00007FF6E8E1A000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.1704433121.00007FF6E8E1E000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_7ff6e8db0000_clamer.jbxd

Similarity

API ID: _invalid_parameter_noinfo_noreturn$Concurrency::cancel_current_taskFile$ButtonCheckedMove$DialogItemOperationPathTemp
String ID: .lnk$.tmp$<br>$@set:user$HIDE$MAX$MIN$ProgramFilesDir$Software\Microsoft\Windows\CurrentVersion$lnk
API String ID: 2285161090-3916287355
Opcode ID: e530fa976c247d03843a71bdcb8ea7d5b705ef19b124f0053bbcc44abdb5d3bc
Instruction ID: 2669fad467e97c934406254a0c9dfcce09722be8d6786f0f1be60bfa5664aec9
Opcode Fuzzy Hash: e530fa976c247d03843a71bdcb8ea7d5b705ef19b124f0053bbcc44abdb5d3bc
Instruction Fuzzy Hash: DA13AB23A04B8289EB109F74D8403EC27B5EB44398F501735DA5D97AE9DF3AE588C74E

Function 00007FF6E8DE0754 Relevance: 45.9, APIs: 21, Strings: 5, Instructions: 380
filesleeptimeCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

Part of subcall function 00007FF6E8DCDFD0: GetModuleHandleW.KERNEL32(?,?,?,00000000,?), ref: 00007FF6E8DCE018
Part of subcall function 00007FF6E8DCDFD0: GetProcAddress.KERNEL32(?,?,?,00000000,?), ref: 00007FF6E8DCE030
Part of subcall function 00007FF6E8DCDFD0: GetProcAddress.KERNEL32(?,?,?,00000000,?), ref: 00007FF6E8DCE05D

Part of subcall function 00007FF6E8DC62DC: GetCurrentDirectoryW.KERNEL32 ref: 00007FF6E8DC62F2
Part of subcall function 00007FF6E8DC62DC: GetCurrentDirectoryW.KERNEL32 ref: 00007FF6E8DC632C

Part of subcall function 00007FF6E8DD946C: OleInitialize.OLE32 ref: 00007FF6E8DD9486
Part of subcall function 00007FF6E8DD946C: SHGetMalloc.SHELL32 ref: 00007FF6E8DD94D4

GetCommandLineW.KERNEL32 ref: 00007FF6E8DE096E
OpenFileMappingW.KERNEL32 ref: 00007FF6E8DE0A07
MapViewOfFile.KERNEL32 ref: 00007FF6E8DE0A30
UnmapViewOfFile.KERNEL32 ref: 00007FF6E8DE0A46
MapViewOfFile.KERNEL32 ref: 00007FF6E8DE0A63
UnmapViewOfFile.KERNEL32 ref: 00007FF6E8DE0ACA
CloseHandle.KERNEL32 ref: 00007FF6E8DE0AD3
SetEnvironmentVariableW.KERNELBASE ref: 00007FF6E8DE0BAD
GetLocalTime.KERNEL32 ref: 00007FF6E8DE0BB8
swprintf.LEGACY_STDIO_DEFINITIONS ref: 00007FF6E8DE0C13
SetEnvironmentVariableW.KERNEL32 ref: 00007FF6E8DE0C26
GetModuleHandleW.KERNEL32 ref: 00007FF6E8DE0C2E
LoadIconW.USER32 ref: 00007FF6E8DE0C4D
DialogBoxParamW.USER32 ref: 00007FF6E8DE0CB6
Sleep.KERNEL32 ref: 00007FF6E8DE0CE6
DeleteObject.GDI32 ref: 00007FF6E8DE0D0D
DeleteObject.GDI32 ref: 00007FF6E8DE0D1F
CloseHandle.KERNEL32 ref: 00007FF6E8DE0D67
_invalid_parameter_noinfo_noreturn.LIBCMT ref: 00007FF6E8DE0DD7
_invalid_parameter_noinfo_noreturn.LIBCMT ref: 00007FF6E8DE0DDD
_invalid_parameter_noinfo_noreturn.LIBCMT ref: 00007FF6E8DE0DE3

Part of subcall function 00007FF6E8DDFD0C: SetEnvironmentVariableW.KERNEL32 ref: 00007FF6E8DDFD43
Part of subcall function 00007FF6E8DDFD0C: SetEnvironmentVariableW.KERNEL32 ref: 00007FF6E8DDFDBC

Strings

sfxstime, xrefs: 00007FF6E8DE0C1F
winrarsfxmappingfile.tmp, xrefs: 00007FF6E8DE09F9
STARTDLG, xrefs: 00007FF6E8DE0CA5
%4d-%02d-%02d-%02d-%02d-%02d-%03d, xrefs: 00007FF6E8DE0C02
sfxname, xrefs: 00007FF6E8DE0B9B

Memory Dump Source

Source File: 00000003.00000002.1704265649.00007FF6E8DB1000.00000020.00000001.01000000.00000009.sdmp, Offset: 00007FF6E8DB0000, based on PE: true

Associated: 00000003.00000002.1704240339.00007FF6E8DB0000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.1704351194.00007FF6E8DF8000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.1704386188.00007FF6E8E0B000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.1704386188.00007FF6E8E14000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.1704433121.00007FF6E8E1A000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.1704433121.00007FF6E8E1E000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_7ff6e8db0000_clamer.jbxd

Similarity

API ID: File$EnvironmentHandleVariableView$_invalid_parameter_noinfo_noreturn$AddressCloseCurrentDeleteDirectoryModuleObjectProcUnmap$CommandDialogIconInitializeLineLoadLocalMallocMappingOpenParamSleepTimeswprintf
String ID: %4d-%02d-%02d-%02d-%02d-%02d-%03d$STARTDLG$sfxname$sfxstime$winrarsfxmappingfile.tmp
API String ID: 1048086575-3710569615
Opcode ID: d5ff2d27d4a47c3e78c3dd13211a1c1de422b0d8b6c9155afaadc84a8e0932e8
Instruction ID: b956f6050fcdd48a1c01d2e321c9acb1703ecbdd9d083d17e293e02de98b7f65
Opcode Fuzzy Hash: d5ff2d27d4a47c3e78c3dd13211a1c1de422b0d8b6c9155afaadc84a8e0932e8
Instruction Fuzzy Hash: 2412B923E08B8681EB10DB34E8413B9A361FF85794F504331DA9D96AA5DF3EE548C70E

Function 00007FF6E8DCA4AC Relevance: 23.0, APIs: 11, Strings: 2, Instructions: 250
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

swprintf.LEGACY_STDIO_DEFINITIONS ref: 00007FF6E8DCA504

Part of subcall function 00007FF6E8DD0F68: WideCharToMultiByte.KERNEL32 ref: 00007FF6E8DD0F99

SetDlgItemTextW.USER32 ref: 00007FF6E8DCA573
GetWindowRect.USER32 ref: 00007FF6E8DCA5AD
GetClientRect.USER32 ref: 00007FF6E8DCA5BB
GetWindowLongPtrW.USER32 ref: 00007FF6E8DCA66C
GetWindowRect.USER32 ref: 00007FF6E8DCA6B2
SetDlgItemTextW.USER32 ref: 00007FF6E8DCA6EC
GetSystemMetrics.USER32 ref: 00007FF6E8DCA6F7
GetWindow.USER32 ref: 00007FF6E8DCA708
GetWindowRect.USER32 ref: 00007FF6E8DCA746
GetWindow.USER32 ref: 00007FF6E8DCA808

Strings

$%s:, xrefs: 00007FF6E8DCA4EF
CAPTION, xrefs: 00007FF6E8DCA6CF

Memory Dump Source

Source File: 00000003.00000002.1704265649.00007FF6E8DB1000.00000020.00000001.01000000.00000009.sdmp, Offset: 00007FF6E8DB0000, based on PE: true

Associated: 00000003.00000002.1704240339.00007FF6E8DB0000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.1704351194.00007FF6E8DF8000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.1704386188.00007FF6E8E0B000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.1704386188.00007FF6E8E14000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.1704433121.00007FF6E8E1A000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.1704433121.00007FF6E8E1E000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_7ff6e8db0000_clamer.jbxd

Similarity

API ID: Window$Rect$ItemText$ByteCharClientLongMetricsMultiSystemWideswprintf
String ID: $%s:$CAPTION
API String ID: 1936833115-404845831
Opcode ID: 1224945cd41bf140f0dcf37f1b002595631e4f701a4b658f84a72e9da714e3d9
Instruction ID: 0c36d3645ee3ff2aebc746cd4dbdeb18349ff40cc8a8d6b21df134f5923e8ea4
Opcode Fuzzy Hash: 1224945cd41bf140f0dcf37f1b002595631e4f701a4b658f84a72e9da714e3d9
Instruction Fuzzy Hash: 2491F873B2864286E754CF39E8107A9A7A1FB84784F505535EE8D87B59CF3DE809CB08

Function 00007FF6E8DBF930 Relevance: 17.2, APIs: 8, Strings: 1, Instructions: 1417COMMON

Download Yara Rule

APIs

_invalid_parameter_noinfo_noreturn.LIBCMT ref: 00007FF6E8DC1239
_invalid_parameter_noinfo_noreturn.LIBCMT ref: 00007FF6E8DC123F
_invalid_parameter_noinfo_noreturn.LIBCMT ref: 00007FF6E8DC1245
_invalid_parameter_noinfo_noreturn.LIBCMT ref: 00007FF6E8DC124B
_invalid_parameter_noinfo_noreturn.LIBCMT ref: 00007FF6E8DC1251
_invalid_parameter_noinfo_noreturn.LIBCMT ref: 00007FF6E8DC1257
_invalid_parameter_noinfo_noreturn.LIBCMT ref: 00007FF6E8DC125D
_invalid_parameter_noinfo_noreturn.LIBCMT ref: 00007FF6E8DC1263

Strings

__tmp_reference_source_, xrefs: 00007FF6E8DBFCCF, 00007FF6E8DBFCDE

Memory Dump Source

Source File: 00000003.00000002.1704265649.00007FF6E8DB1000.00000020.00000001.01000000.00000009.sdmp, Offset: 00007FF6E8DB0000, based on PE: true

Associated: 00000003.00000002.1704240339.00007FF6E8DB0000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.1704351194.00007FF6E8DF8000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.1704386188.00007FF6E8E0B000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.1704386188.00007FF6E8E14000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.1704433121.00007FF6E8E1A000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.1704433121.00007FF6E8E1E000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_7ff6e8db0000_clamer.jbxd

Similarity

API ID: _invalid_parameter_noinfo_noreturn
String ID: __tmp_reference_source_
API String ID: 3668304517-685763994
Opcode ID: 4624d0d2893f011b5be8b6ffca3faaddc15c8b957ce7a47abe3dcbca9120cf77
Instruction ID: cfb71dcc7defb4e139396b1a911e1724a38cd10cd3f4228fc4ca64404e9d6ff2
Opcode Fuzzy Hash: 4624d0d2893f011b5be8b6ffca3faaddc15c8b957ce7a47abe3dcbca9120cf77
Instruction Fuzzy Hash: 82E2A563A086C692EA64CB35D1403FEA761FB81740F404232DB9D976A6CF3EE459C70E

Function 00007FF6E8DB4840 Relevance: 12.1, APIs: 5, Strings: 1, Instructions: 1624COMMON

Download Yara Rule

APIs

_invalid_parameter_noinfo_noreturn.LIBCMT ref: 00007FF6E8DB511E
_invalid_parameter_noinfo_noreturn.LIBCMT ref: 00007FF6E8DB5124
_invalid_parameter_noinfo_noreturn.LIBCMT ref: 00007FF6E8DB512A
_invalid_parameter_noinfo_noreturn.LIBCMT ref: 00007FF6E8DB5E16
_invalid_parameter_noinfo_noreturn.LIBCMT ref: 00007FF6E8DB5E1C

Strings

CMT, xrefs: 00007FF6E8DB59B2

Memory Dump Source

Source File: 00000003.00000002.1704265649.00007FF6E8DB1000.00000020.00000001.01000000.00000009.sdmp, Offset: 00007FF6E8DB0000, based on PE: true

Associated: 00000003.00000002.1704240339.00007FF6E8DB0000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.1704351194.00007FF6E8DF8000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.1704386188.00007FF6E8E0B000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.1704386188.00007FF6E8E14000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.1704433121.00007FF6E8E1A000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.1704433121.00007FF6E8E1E000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_7ff6e8db0000_clamer.jbxd

Similarity

API ID: _invalid_parameter_noinfo_noreturn
String ID: CMT
API String ID: 3668304517-2756464174
Opcode ID: 3e3ef2645bc48f2f268b551dc6196b380c912f1c7b9d048ccb2ab2083d35e596
Instruction ID: a17ce447d5a165effbd63ff504f8cd9dd8aeb371bfcafdd1b5be7bdddc3042b5
Opcode Fuzzy Hash: 3e3ef2645bc48f2f268b551dc6196b380c912f1c7b9d048ccb2ab2083d35e596
Instruction Fuzzy Hash: 4CE2EE23B0868286EB18DBB5D5503FE67A1FB44384F400235DA5E9769ADF3EE459C30E

Function 00007FF6E8DC40BC Relevance: 10.7, APIs: 7, Instructions: 153
fileCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

FindFirstFileW.KERNELBASE ref: 00007FF6E8DC410B
FindFirstFileW.KERNEL32 ref: 00007FF6E8DC415E
GetLastError.KERNEL32 ref: 00007FF6E8DC41AF
FindNextFileW.KERNEL32 ref: 00007FF6E8DC41D7
GetLastError.KERNEL32 ref: 00007FF6E8DC41E5
_invalid_parameter_noinfo_noreturn.LIBCMT ref: 00007FF6E8DC430F
_invalid_parameter_noinfo_noreturn.LIBCMT ref: 00007FF6E8DC4315

Memory Dump Source

Source File: 00000003.00000002.1704265649.00007FF6E8DB1000.00000020.00000001.01000000.00000009.sdmp, Offset: 00007FF6E8DB0000, based on PE: true

Associated: 00000003.00000002.1704240339.00007FF6E8DB0000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.1704351194.00007FF6E8DF8000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.1704386188.00007FF6E8E0B000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.1704386188.00007FF6E8E14000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.1704433121.00007FF6E8E1A000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.1704433121.00007FF6E8E1E000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_7ff6e8db0000_clamer.jbxd

Similarity

API ID: FileFind$ErrorFirstLast_invalid_parameter_noinfo_noreturn$Next
String ID:
API String ID: 474548282-0
Opcode ID: 5b7a682f346ba33cc6e8113bf8bb974c5d06c867b30d63dc8f71ee7e42fd28a6
Instruction ID: af72849d2893cd8f9523abb60db3872ffbfffb54d5ec401c10d7bd2e36d41b89
Opcode Fuzzy Hash: 5b7a682f346ba33cc6e8113bf8bb974c5d06c867b30d63dc8f71ee7e42fd28a6
Instruction Fuzzy Hash: 7861C363A08A4281EA118B38E94037D6362FF957B4F505331EABD876DADF3DD548C709

Function 00007FF6E8DB5E24 Relevance: 7.6, APIs: 3, Strings: 1, Instructions: 586
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

Strings

CMT, xrefs: 00007FF6E8DB59B2, 00007FF6E8DB675B

Memory Dump Source

Source File: 00000003.00000002.1704265649.00007FF6E8DB1000.00000020.00000001.01000000.00000009.sdmp, Offset: 00007FF6E8DB0000, based on PE: true

Associated: 00000003.00000002.1704240339.00007FF6E8DB0000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.1704351194.00007FF6E8DF8000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.1704386188.00007FF6E8E0B000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.1704386188.00007FF6E8E14000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.1704433121.00007FF6E8E1A000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.1704433121.00007FF6E8E1E000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_7ff6e8db0000_clamer.jbxd

Similarity

API ID:
String ID: CMT
API String ID: 0-2756464174
Opcode ID: b8fa635b894758bb4949fb57bddd48836ff0d2ecd2be86fe1bb2065c738ed5aa
Instruction ID: 639c92a2c927d86c6dc4694064efad023f363c62c64e80e832b1017e3a750844
Opcode Fuzzy Hash: b8fa635b894758bb4949fb57bddd48836ff0d2ecd2be86fe1bb2065c738ed5aa
Instruction Fuzzy Hash: 1542DD23B08A829AEB18DB74D1503FD67A1EB41744F400236DB5ED769ADF39E52CC30A

Function 00007FF6E8DCDFD0 Relevance: 143.9, APIs: 16, Strings: 66, Instructions: 440
libraryfileloaderCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

GetModuleHandleW.KERNEL32(?,?,?,00000000,?), ref: 00007FF6E8DCE018
GetProcAddress.KERNEL32(?,?,?,00000000,?), ref: 00007FF6E8DCE030
GetProcAddress.KERNEL32(?,?,?,00000000,?), ref: 00007FF6E8DCE05D
CreateFileW.KERNEL32 ref: 00007FF6E8DCE3F0
SetFilePointer.KERNEL32 ref: 00007FF6E8DCE40E
ReadFile.KERNEL32 ref: 00007FF6E8DCE436

Part of subcall function 00007FF6E8DCDFD0: GetSystemDirectoryW.KERNEL32 ref: 00007FF6E8DCDDDF

CompareStringW.KERNELBASE ref: 00007FF6E8DCE559
CloseHandle.KERNEL32 ref: 00007FF6E8DCE4F3

Part of subcall function 00007FF6E8DB1FA0: _invalid_parameter_noinfo_noreturn.LIBCMT ref: 00007FF6E8DB1FFB

Part of subcall function 00007FF6E8DC51A4: GetVersionExW.KERNEL32 ref: 00007FF6E8DC51D5

Part of subcall function 00007FF6E8DCDFD0: LoadLibraryW.KERNELBASE ref: 00007FF6E8DCDEFF
Part of subcall function 00007FF6E8DCDFD0: _invalid_parameter_noinfo_noreturn.LIBCMT ref: 00007FF6E8DCDFB5
Part of subcall function 00007FF6E8DCDFD0: _invalid_parameter_noinfo_noreturn.LIBCMT ref: 00007FF6E8DCDFBB
Part of subcall function 00007FF6E8DCDFD0: _invalid_parameter_noinfo_noreturn.LIBCMT ref: 00007FF6E8DCDFC1
Part of subcall function 00007FF6E8DCDFD0: _invalid_parameter_noinfo_noreturn.LIBCMT ref: 00007FF6E8DCDFC7

AllocConsole.KERNEL32(?,?,?,00000000,?), ref: 00007FF6E8DCE74B
GetCurrentProcessId.KERNEL32(?,?,?,00000000,?), ref: 00007FF6E8DCE755
AttachConsole.KERNEL32(?,?,?,00000000,?), ref: 00007FF6E8DCE75D
GetStdHandle.KERNEL32(?,?,?,00000000,?), ref: 00007FF6E8DCE780
WriteConsoleW.KERNEL32(?,?,?,00000000,?), ref: 00007FF6E8DCE799
Sleep.KERNEL32(?,?,?,00000000,?), ref: 00007FF6E8DCE7A4
FreeConsole.KERNEL32(?,?,?,00000000,?), ref: 00007FF6E8DCE7AA
ExitProcess.KERNEL32 ref: 00007FF6E8DCE7BB

Strings

version.dll, xrefs: 00007FF6E8DCE07B
WindowsCodecs.dll, xrefs: 00007FF6E8DCE213
kernel32, xrefs: 00007FF6E8DCE011
oleaccrc.dll, xrefs: 00007FF6E8DCE1E9
dwmapi.dll, xrefs: 00007FF6E8DCE0BD, 00007FF6E8DCE661
clbcatq.dll, xrefs: 00007FF6E8DCE0E9
ws2_32.dll, xrefs: 00007FF6E8DCE0FF
propsys.dll, xrefs: 00007FF6E8DCE2AD
samlib.dll, xrefs: 00007FF6E8DCE2D7
usp10.dll, xrefs: 00007FF6E8DCE0DE
mpr.dll, xrefs: 00007FF6E8DCE291
DXGIDebug.dll, xrefs: 00007FF6E8DCE086, 00007FF6E8DCE5B6
wkscli.dll, xrefs: 00007FF6E8DCE2E5
XmlLite.dll, xrefs: 00007FF6E8DCE339
ws2help.dll, xrefs: 00007FF6E8DCE10A
lpk.dll, xrefs: 00007FF6E8DCE0D3
srvcli.dll, xrefs: 00007FF6E8DCE221
UXTheme.dll, xrefs: 00007FF6E8DCE0B2
shdocvw.dll, xrefs: 00007FF6E8DCE179
ntmarta.dll, xrefs: 00007FF6E8DCE1F7
setupapi.dll, xrefs: 00007FF6E8DCE141
wintrust.dll, xrefs: 00007FF6E8DCE1B1
dnsapi.DLL, xrefs: 00007FF6E8DCE259
sfc_os.dll, xrefs: 00007FF6E8DCE091
atl.dll, xrefs: 00007FF6E8DCE136
linkinfo.dll, xrefs: 00007FF6E8DCE347
Please remove %s from %s folder. It is unsecure to run %s until it is done., xrefs: 00007FF6E8DCE73B
ntshrui.dll, xrefs: 00007FF6E8DCE12B
peerdist.dll, xrefs: 00007FF6E8DCE38D
msasn1.dll, xrefs: 00007FF6E8DCE195
uxtheme.dll, xrefs: 00007FF6E8DCE66D
dsrole.dll, xrefs: 00007FF6E8DCE37F
dfscli.dll, xrefs: 00007FF6E8DCE2F3
cryptsp.dll, xrefs: 00007FF6E8DCE355
rasadhlp.dll, xrefs: 00007FF6E8DCE30F
crypt32.dll, xrefs: 00007FF6E8DCE187
dhcpcsvc.dll, xrefs: 00007FF6E8DCE32B
mlang.dll, xrefs: 00007FF6E8DCE2BB
RpcRtRemote.dll, xrefs: 00007FF6E8DCE363
secur32.dll, xrefs: 00007FF6E8DCE1CD
browcli.dll, xrefs: 00007FF6E8DCE301
SSPICLI.DLL, xrefs: 00007FF6E8DCE09C
SetDllDirectoryW, xrefs: 00007FF6E8DCE026
netapi32.dll, xrefs: 00007FF6E8DCE16B
shell32.dll, xrefs: 00007FF6E8DCE1BF
cabinet.dll, xrefs: 00007FF6E8DCE1DB
cscapi.dll, xrefs: 00007FF6E8DCE22F
netutils.dll, xrefs: 00007FF6E8DCE283
profapi.dll, xrefs: 00007FF6E8DCE205
SetDefaultDllDirectories, xrefs: 00007FF6E8DCE053
comres.dll, xrefs: 00007FF6E8DCE0F4
cryptbase.dll, xrefs: 00007FF6E8DCE0C8
cryptui.dll, xrefs: 00007FF6E8DCE1A3
devrtl.dll, xrefs: 00007FF6E8DCE29F
ieframe.dll, xrefs: 00007FF6E8DCE120
rsaenh.dll, xrefs: 00007FF6E8DCE0A7
slc.dll, xrefs: 00007FF6E8DCE23D
apphelp.dll, xrefs: 00007FF6E8DCE14F
samcli.dll, xrefs: 00007FF6E8DCE2C9
userenv.dll, xrefs: 00007FF6E8DCE15D
aclui.dll, xrefs: 00007FF6E8DCE371
psapi.dll, xrefs: 00007FF6E8DCE115
imageres.dll, xrefs: 00007FF6E8DCE24B
WINNSI.DLL, xrefs: 00007FF6E8DCE275
dhcpcsvc6.dll, xrefs: 00007FF6E8DCE31D
iphlpapi.DLL, xrefs: 00007FF6E8DCE267

Memory Dump Source

Source File: 00000003.00000002.1704265649.00007FF6E8DB1000.00000020.00000001.01000000.00000009.sdmp, Offset: 00007FF6E8DB0000, based on PE: true

Associated: 00000003.00000002.1704240339.00007FF6E8DB0000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.1704351194.00007FF6E8DF8000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.1704386188.00007FF6E8E0B000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.1704386188.00007FF6E8E14000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.1704433121.00007FF6E8E1A000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.1704433121.00007FF6E8E1E000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_7ff6e8db0000_clamer.jbxd

Similarity

API ID: _invalid_parameter_noinfo_noreturn$Console$FileHandle$AddressProcProcess$AllocAttachCloseCompareCreateCurrentDirectoryExitFreeLibraryLoadModulePointerReadSleepStringSystemVersionWrite
String ID: DXGIDebug.dll$Please remove %s from %s folder. It is unsecure to run %s until it is done.$RpcRtRemote.dll$SSPICLI.DLL$SetDefaultDllDirectories$SetDllDirectoryW$UXTheme.dll$WINNSI.DLL$WindowsCodecs.dll$XmlLite.dll$aclui.dll$apphelp.dll$atl.dll$browcli.dll$cabinet.dll$clbcatq.dll$comres.dll$crypt32.dll$cryptbase.dll$cryptsp.dll$cryptui.dll$cscapi.dll$devrtl.dll$dfscli.dll$dhcpcsvc.dll$dhcpcsvc6.dll$dnsapi.DLL$dsrole.dll$dwmapi.dll$ieframe.dll$imageres.dll$iphlpapi.DLL$kernel32$linkinfo.dll$lpk.dll$mlang.dll$mpr.dll$msasn1.dll$netapi32.dll$netutils.dll$ntmarta.dll$ntshrui.dll$oleaccrc.dll$peerdist.dll$profapi.dll$propsys.dll$psapi.dll$rasadhlp.dll$rsaenh.dll$samcli.dll$samlib.dll$secur32.dll$setupapi.dll$sfc_os.dll$shdocvw.dll$shell32.dll$slc.dll$srvcli.dll$userenv.dll$usp10.dll$uxtheme.dll$version.dll$wintrust.dll$wkscli.dll$ws2_32.dll$ws2help.dll
API String ID: 1496594111-2013832382
Opcode ID: f7f2a11762ce96c0b678dc2ee5f4093b28e28463b6618f01c06ebafbf4af03a3
Instruction ID: f6cfc569021ca63ad889cd01dae395ad66bf6038d2703d874cba48a2b4082fee
Opcode Fuzzy Hash: f7f2a11762ce96c0b678dc2ee5f4093b28e28463b6618f01c06ebafbf4af03a3
Instruction Fuzzy Hash: 6D323B32A09B82A5EB118F30E8402E933A9FF54354F600336DA4D967A5EF3ED259D74D

Function 00007FF6E8DC98DC Relevance: 25.2, APIs: 3, Strings: 11, Instructions: 702COMMON

Download Yara Rule

APIs

Part of subcall function 00007FF6E8DC8E58: Concurrency::cancel_current_task.LIBCPMT ref: 00007FF6E8DC8F8D

_snwprintf.LEGACY_STDIO_DEFINITIONS ref: 00007FF6E8DC9F75
_invalid_parameter_noinfo_noreturn.LIBCMT ref: 00007FF6E8DCA42F
_invalid_parameter_noinfo_noreturn.LIBCMT ref: 00007FF6E8DCA435

Part of subcall function 00007FF6E8DD0BBC: MultiByteToWideChar.KERNEL32(?,?,?,?,?,00007FF6E8DD0B44), ref: 00007FF6E8DD0BE9

Strings

DIRECTION, xrefs: 00007FF6E8DC9DE5
DIALOG, xrefs: 00007FF6E8DC9DCD
*messages***, xrefs: 00007FF6E8DC9BC6
MENU, xrefs: 00007FF6E8DC9DD9
@%s:, xrefs: 00007FF6E8DC9F57
$%s:, xrefs: 00007FF6E8DC9F50
STRINGS, xrefs: 00007FF6E8DC9DC1
RTL, xrefs: 00007FF6E8DC9F2E
,, xrefs: 00007FF6E8DC9FAA
, xrefs: 00007FF6E8DC9DF9
*messages***, xrefs: 00007FF6E8DC9C04

Memory Dump Source

Source File: 00000003.00000002.1704265649.00007FF6E8DB1000.00000020.00000001.01000000.00000009.sdmp, Offset: 00007FF6E8DB0000, based on PE: true

Associated: 00000003.00000002.1704240339.00007FF6E8DB0000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.1704351194.00007FF6E8DF8000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.1704386188.00007FF6E8E0B000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.1704386188.00007FF6E8E14000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.1704433121.00007FF6E8E1A000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.1704433121.00007FF6E8E1E000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_7ff6e8db0000_clamer.jbxd

Similarity

API ID: _invalid_parameter_noinfo_noreturn$ByteCharConcurrency::cancel_current_taskMultiWide_snwprintf
String ID: $ ,$$%s:$*messages***$*messages***$@%s:$DIALOG$DIRECTION$MENU$RTL$STRINGS
API String ID: 3629253777-3268106645
Opcode ID: 789f2c465d95f0b5fb7cec132a24dad3ff94c3f7f58e61963b873022c14ab567
Instruction ID: 8f5950eea1297d43c535dc4df97565be6a9c419b2a664e8fd5c8756a939f5304
Opcode Fuzzy Hash: 789f2c465d95f0b5fb7cec132a24dad3ff94c3f7f58e61963b873022c14ab567
Instruction Fuzzy Hash: 5762EE63A1968295EB10DF34C4447FD6365FB50784F805232EA4D8B69AEF3EE948C34E

Function 00007FF6E8DE1900 Relevance: 22.9, APIs: 12, Strings: 1, Instructions: 195
libraryCOMMONLIBRARYCODE

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

Part of subcall function 00007FF6E8DE1558: DloadProtectSection.DELAYIMP ref: 00007FF6E8DE15C9

RaiseException.KERNEL32 ref: 00007FF6E8DE19A7
DloadReleaseSectionWriteAccess.DELAYIMP ref: 00007FF6E8DE1993

Part of subcall function 00007FF6E8DE1868: DloadProtectSection.DELAYIMP ref: 00007FF6E8DE18C7

LoadLibraryExA.KERNELBASE ref: 00007FF6E8DE1A46
GetLastError.KERNEL32 ref: 00007FF6E8DE1A54
DloadReleaseSectionWriteAccess.DELAYIMP ref: 00007FF6E8DE1A86
RaiseException.KERNEL32 ref: 00007FF6E8DE1A9A

Strings

H, xrefs: 00007FF6E8DE1974

Memory Dump Source

Source File: 00000003.00000002.1704265649.00007FF6E8DB1000.00000020.00000001.01000000.00000009.sdmp, Offset: 00007FF6E8DB0000, based on PE: true

Associated: 00000003.00000002.1704240339.00007FF6E8DB0000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.1704351194.00007FF6E8DF8000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.1704386188.00007FF6E8E0B000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.1704386188.00007FF6E8E14000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.1704433121.00007FF6E8E1A000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.1704433121.00007FF6E8E1E000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_7ff6e8db0000_clamer.jbxd

Similarity

API ID: DloadSection$AccessExceptionProtectRaiseReleaseWrite$ErrorLastLibraryLoad
String ID: H
API String ID: 3432403771-2852464175
Opcode ID: cf3fc932a6b7fb7fc9ef8320b4dd67bfc8d7ec91281715f792326570f1d4a57f
Instruction ID: 0a86915d0f3d19e33569bc9b1254620755f678ac7112392119ed2cbd3abcddbb
Opcode Fuzzy Hash: cf3fc932a6b7fb7fc9ef8320b4dd67bfc8d7ec91281715f792326570f1d4a57f
Instruction Fuzzy Hash: EB914722F05B528AEB10CFB5E8407AC73A5FB08B99B544235DE0D97754EF3AE449C30A

Function 00007FF6E8DDF4E0 Relevance: 21.3, APIs: 8, Strings: 4, Instructions: 285
windowCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

ShellExecuteExW.SHELL32 ref: 00007FF6E8DDF747
IsWindowVisible.USER32 ref: 00007FF6E8DDF777
ShowWindow.USER32 ref: 00007FF6E8DDF786
WaitForInputIdle.USER32 ref: 00007FF6E8DDF797
GetExitCodeProcess.KERNEL32 ref: 00007FF6E8DDF7BD
CloseHandle.KERNEL32 ref: 00007FF6E8DDF7E7
ShowWindow.USER32 ref: 00007FF6E8DDF83F
_invalid_parameter_noinfo_noreturn.LIBCMT ref: 00007FF6E8DDF8FB

Strings

.exe, xrefs: 00007FF6E8DDF7F2
p, xrefs: 00007FF6E8DDF529
Install, xrefs: 00007FF6E8DDF684
.inf, xrefs: 00007FF6E8DDF675

Memory Dump Source

Source File: 00000003.00000002.1704265649.00007FF6E8DB1000.00000020.00000001.01000000.00000009.sdmp, Offset: 00007FF6E8DB0000, based on PE: true

Associated: 00000003.00000002.1704240339.00007FF6E8DB0000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.1704351194.00007FF6E8DF8000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.1704386188.00007FF6E8E0B000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.1704386188.00007FF6E8E14000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.1704433121.00007FF6E8E1A000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.1704433121.00007FF6E8E1E000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_7ff6e8db0000_clamer.jbxd

Similarity

API ID: Window$Show$CloseCodeExecuteExitHandleIdleInputProcessShellVisibleWait_invalid_parameter_noinfo_noreturn
String ID: .exe$.inf$Install$p
API String ID: 148627002-3607691742
Opcode ID: 1718da423bd7346896bcb56f91dbb63b3cffccde2402356a375081e8d016c4d6
Instruction ID: e23feb723247a55f249fd291aa1eaaacbc198bfd11210f23b66b61f3a87ce5ae
Opcode Fuzzy Hash: 1718da423bd7346896bcb56f91dbb63b3cffccde2402356a375081e8d016c4d6
Instruction Fuzzy Hash: F1C17F63F18A0295FA10CB75D94037D63A1AF85B88F044335DA4D87AE5DF3EE4598B0E

Function 00007FF6E8DD8624 Relevance: 19.4, APIs: 10, Strings: 1, Instructions: 101
memorywindowCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

FindResourceW.KERNELBASE ref: 00007FF6E8DD863D
SizeofResource.KERNEL32 ref: 00007FF6E8DD8659
LoadResource.KERNEL32 ref: 00007FF6E8DD8673
LockResource.KERNEL32 ref: 00007FF6E8DD8685
GlobalAlloc.KERNELBASE ref: 00007FF6E8DD86A6
GlobalLock.KERNEL32 ref: 00007FF6E8DD86BB
GdipAlloc.GDIPLUS ref: 00007FF6E8DD86FE
GdipCreateHBITMAPFromBitmap.GDIPLUS ref: 00007FF6E8DD8769
GlobalUnlock.KERNEL32 ref: 00007FF6E8DD878C
GlobalFree.KERNEL32 ref: 00007FF6E8DD8795

Strings

PNG, xrefs: 00007FF6E8DD862F

Memory Dump Source

Source File: 00000003.00000002.1704265649.00007FF6E8DB1000.00000020.00000001.01000000.00000009.sdmp, Offset: 00007FF6E8DB0000, based on PE: true

Associated: 00000003.00000002.1704240339.00007FF6E8DB0000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.1704351194.00007FF6E8DF8000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.1704386188.00007FF6E8E0B000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.1704386188.00007FF6E8E14000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.1704433121.00007FF6E8E1A000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.1704433121.00007FF6E8E1E000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_7ff6e8db0000_clamer.jbxd

Similarity

API ID: GlobalResource$AllocGdipLock$BitmapCreateFindFreeFromLoadSizeofUnlock
String ID: PNG
API String ID: 541704414-364855578
Opcode ID: c8606208415c3a11eb94d5df8c8f8595ea54109f2541637b646828bce78d4013
Instruction ID: 66427a62ae59bbc067d46a52a1b97d48bf1038b48ad43fbd3723489e16bc1b8f
Opcode Fuzzy Hash: c8606208415c3a11eb94d5df8c8f8595ea54109f2541637b646828bce78d4013
Instruction Fuzzy Hash: 54416123B09B0291EE158B36D84437963A0AF88B95F144635DD0D9B3A4EF7EE45C8B0E

Function 00007FF6E8DDF0A4 Relevance: 16.6, APIs: 11, Instructions: 102
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

Part of subcall function 00007FF6E8DDAE1C: PeekMessageW.USER32 ref: 00007FF6E8DDAE32
Part of subcall function 00007FF6E8DDAE1C: GetMessageW.USER32 ref: 00007FF6E8DDAE49
Part of subcall function 00007FF6E8DDAE1C: IsDialogMessageW.USER32 ref: 00007FF6E8DDAE60
Part of subcall function 00007FF6E8DDAE1C: TranslateMessage.USER32 ref: 00007FF6E8DDAE6F
Part of subcall function 00007FF6E8DDAE1C: DispatchMessageW.USER32 ref: 00007FF6E8DDAE7A

GetDlgItem.USER32 ref: 00007FF6E8DDF0E3
ShowWindow.USER32 ref: 00007FF6E8DDF109
IsDlgButtonChecked.USER32 ref: 00007FF6E8DDF11E
IsDlgButtonChecked.USER32 ref: 00007FF6E8DDF136
IsDlgButtonChecked.USER32 ref: 00007FF6E8DDF157
IsDlgButtonChecked.USER32 ref: 00007FF6E8DDF173
IsDlgButtonChecked.USER32 ref: 00007FF6E8DDF1B6
IsDlgButtonChecked.USER32 ref: 00007FF6E8DDF1D4
IsDlgButtonChecked.USER32 ref: 00007FF6E8DDF1E8
IsDlgButtonChecked.USER32 ref: 00007FF6E8DDF212
IsDlgButtonChecked.USER32 ref: 00007FF6E8DDF22A

Memory Dump Source

Source File: 00000003.00000002.1704265649.00007FF6E8DB1000.00000020.00000001.01000000.00000009.sdmp, Offset: 00007FF6E8DB0000, based on PE: true

Associated: 00000003.00000002.1704240339.00007FF6E8DB0000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.1704351194.00007FF6E8DF8000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.1704386188.00007FF6E8E0B000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.1704386188.00007FF6E8E14000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.1704433121.00007FF6E8E1A000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.1704433121.00007FF6E8E1E000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_7ff6e8db0000_clamer.jbxd

Similarity

API ID: ButtonChecked$Message$DialogDispatchItemPeekShowTranslateWindow
String ID:
API String ID: 4119318379-0
Opcode ID: 6d17268858d6b6aed380ad60cc2cf8b16547cb3a0c40a3112c59011326a33119
Instruction ID: 03bcf29d2fe0e8e168d8373afcba4f941226d5000749730132fe873aed9998ff
Opcode Fuzzy Hash: 6d17268858d6b6aed380ad60cc2cf8b16547cb3a0c40a3112c59011326a33119
Instruction Fuzzy Hash: F141B433B14A4286F710CF71E810BAA2360EB85B98F441235DD4A87B95CF7ED44D8B5D

Function 00007FF6E8DCB9B4 Relevance: 14.1, APIs: 3, Strings: 5, Instructions: 84
libraryloaderCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

GetProcAddressForCaller.KERNELBASE ref: 00007FF6E8DCBA12
GetProcAddress.KERNEL32 ref: 00007FF6E8DCBA2D
GetCurrentProcessId.KERNEL32 ref: 00007FF6E8DCBACA

Part of subcall function 00007FF6E8DCDFD0: GetSystemDirectoryW.KERNEL32 ref: 00007FF6E8DCDDDF

Strings

Crypt32.dll, xrefs: 00007FF6E8DCB9F0
CryptProtectMemory failed, xrefs: 00007FF6E8DCBA80
CryptUnprotectMemory, xrefs: 00007FF6E8DCBA1F
CryptProtectMemory, xrefs: 00007FF6E8DCBA08
CryptUnprotectMemory failed, xrefs: 00007FF6E8DCBAC1

Memory Dump Source

Source File: 00000003.00000002.1704265649.00007FF6E8DB1000.00000020.00000001.01000000.00000009.sdmp, Offset: 00007FF6E8DB0000, based on PE: true

Associated: 00000003.00000002.1704240339.00007FF6E8DB0000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.1704351194.00007FF6E8DF8000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.1704386188.00007FF6E8E0B000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.1704386188.00007FF6E8E14000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.1704433121.00007FF6E8E1A000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.1704433121.00007FF6E8E1E000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_7ff6e8db0000_clamer.jbxd

Similarity

API ID: AddressProc$CallerCurrentDirectoryProcessSystem
String ID: Crypt32.dll$CryptProtectMemory$CryptProtectMemory failed$CryptUnprotectMemory$CryptUnprotectMemory failed
API String ID: 1389829785-2207617598
Opcode ID: d2e93635ec338890dfe438c4789fcaf7e26687fbfe6c7ce53d5981307f2d6baa
Instruction ID: 36373997515323c015bfbbfdac7dfe3e7ba77a43be0127cc2cbb6989cd76eef9
Opcode Fuzzy Hash: d2e93635ec338890dfe438c4789fcaf7e26687fbfe6c7ce53d5981307f2d6baa
Instruction Fuzzy Hash: 06316D22F09B0680FA148B32A85077523A1AF54B90F244235DC8ECB3A9DF7EE54D930F

Function 00007FF6E8DBEF10 Relevance: 11.0, APIs: 7, Instructions: 453COMMON

Download Yara Rule

APIs

_invalid_parameter_noinfo_noreturn.LIBCMT ref: 00007FF6E8DBF542
_invalid_parameter_noinfo_noreturn.LIBCMT ref: 00007FF6E8DBF548
_invalid_parameter_noinfo_noreturn.LIBCMT ref: 00007FF6E8DBF554
_invalid_parameter_noinfo_noreturn.LIBCMT ref: 00007FF6E8DBF55A
_invalid_parameter_noinfo_noreturn.LIBCMT ref: 00007FF6E8DBF560
_invalid_parameter_noinfo_noreturn.LIBCMT ref: 00007FF6E8DBF56C
_invalid_parameter_noinfo_noreturn.LIBCMT ref: 00007FF6E8DBF572

Memory Dump Source

Source File: 00000003.00000002.1704265649.00007FF6E8DB1000.00000020.00000001.01000000.00000009.sdmp, Offset: 00007FF6E8DB0000, based on PE: true

Associated: 00000003.00000002.1704240339.00007FF6E8DB0000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.1704351194.00007FF6E8DF8000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.1704386188.00007FF6E8E0B000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.1704386188.00007FF6E8E14000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.1704433121.00007FF6E8E1A000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.1704433121.00007FF6E8E1E000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_7ff6e8db0000_clamer.jbxd

Similarity

API ID: _invalid_parameter_noinfo_noreturn
String ID:
API String ID: 3668304517-0
Opcode ID: 2f1b3bdcd2581fc3eb11a20f3f8936e506afa36e288419d3eb12971ae08578fa
Instruction ID: 4ed3b41a3399dff6fb5f50a829473fa5ad892c3ba1aa28f4d128dc8048871b6d
Opcode Fuzzy Hash: 2f1b3bdcd2581fc3eb11a20f3f8936e506afa36e288419d3eb12971ae08578fa
Instruction Fuzzy Hash: AD12AD63F08B4285EA10CB75D4443AD6371EB857A8F400336DA5C97AE9DF3AE58AC34D

Function 00007FF6E8DC24C0 Relevance: 9.2, APIs: 6, Instructions: 164
filetimeCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

CreateFileW.KERNELBASE ref: 00007FF6E8DC259B
GetLastError.KERNEL32 ref: 00007FF6E8DC25AE
CreateFileW.KERNEL32 ref: 00007FF6E8DC260E
GetLastError.KERNEL32 ref: 00007FF6E8DC2617
SetFileTime.KERNEL32 ref: 00007FF6E8DC26C9
_invalid_parameter_noinfo_noreturn.LIBCMT ref: 00007FF6E8DC2736

Memory Dump Source

Source File: 00000003.00000002.1704265649.00007FF6E8DB1000.00000020.00000001.01000000.00000009.sdmp, Offset: 00007FF6E8DB0000, based on PE: true

Associated: 00000003.00000002.1704240339.00007FF6E8DB0000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.1704351194.00007FF6E8DF8000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.1704386188.00007FF6E8E0B000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.1704386188.00007FF6E8E14000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.1704433121.00007FF6E8E1A000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.1704433121.00007FF6E8E1E000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_7ff6e8db0000_clamer.jbxd

Similarity

API ID: File$CreateErrorLast$Time_invalid_parameter_noinfo_noreturn
String ID:
API String ID: 3536497005-0
Opcode ID: 7e74b88d639c8d570aa5cbccebcd9353285634c108726f52f9c563d03d833b9c
Instruction ID: 90496ee769e0e6680b61ba78383dd8ca78e2a486fa840dfc1291bc3a1430452e
Opcode Fuzzy Hash: 7e74b88d639c8d570aa5cbccebcd9353285634c108726f52f9c563d03d833b9c
Instruction Fuzzy Hash: 3261F367A1868189EB208B39E44076E67B1FB847A8F100334DEA947AD9CF3ED059870D

Function 00007FF6E8DDB014 Relevance: 8.8, APIs: 4, Strings: 1, Instructions: 54
windowCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

LoadBitmapW.USER32 ref: 00007FF6E8DDB02A
GetObjectW.GDI32 ref: 00007FF6E8DDB05B
DeleteObject.GDI32 ref: 00007FF6E8DDB095
DeleteObject.GDI32 ref: 00007FF6E8DDB0C5

Part of subcall function 00007FF6E8DD8624: FindResourceW.KERNELBASE ref: 00007FF6E8DD863D
Part of subcall function 00007FF6E8DD8624: SizeofResource.KERNEL32 ref: 00007FF6E8DD8659
Part of subcall function 00007FF6E8DD8624: LoadResource.KERNEL32 ref: 00007FF6E8DD8673
Part of subcall function 00007FF6E8DD8624: LockResource.KERNEL32 ref: 00007FF6E8DD8685
Part of subcall function 00007FF6E8DD8624: GlobalAlloc.KERNELBASE ref: 00007FF6E8DD86A6
Part of subcall function 00007FF6E8DD8624: GlobalLock.KERNEL32 ref: 00007FF6E8DD86BB
Part of subcall function 00007FF6E8DD8624: GdipAlloc.GDIPLUS ref: 00007FF6E8DD86FE
Part of subcall function 00007FF6E8DD8624: GdipCreateHBITMAPFromBitmap.GDIPLUS ref: 00007FF6E8DD8769
Part of subcall function 00007FF6E8DD8624: GlobalUnlock.KERNEL32 ref: 00007FF6E8DD878C
Part of subcall function 00007FF6E8DD8624: GlobalFree.KERNEL32 ref: 00007FF6E8DD8795

Strings

], xrefs: 00007FF6E8DDB063

Memory Dump Source

Source File: 00000003.00000002.1704265649.00007FF6E8DB1000.00000020.00000001.01000000.00000009.sdmp, Offset: 00007FF6E8DB0000, based on PE: true

Associated: 00000003.00000002.1704240339.00007FF6E8DB0000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.1704351194.00007FF6E8DF8000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.1704386188.00007FF6E8E0B000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.1704386188.00007FF6E8E14000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.1704433121.00007FF6E8E1A000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.1704433121.00007FF6E8E1E000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_7ff6e8db0000_clamer.jbxd

Similarity

API ID: GlobalResource$Object$AllocBitmapDeleteGdipLoadLock$CreateFindFreeFromSizeofUnlock
String ID: ]
API String ID: 2347093688-3352871620
Opcode ID: 2f79d63664e457f963bfbd157e1c525b341384e02eb8e860e1f42d2dee528bbf
Instruction ID: de23747fd99d5dc16f02472150f27cc65733658c6fe0e85a700080f29fb80ff2
Opcode Fuzzy Hash: 2f79d63664e457f963bfbd157e1c525b341384e02eb8e860e1f42d2dee528bbf
Instruction Fuzzy Hash: 7B11D622B0964242FA24973196047799291AFC9BC4F080634D95D97BC5DE3EE81C8E0E

Function 00007FF6E8DDFE24 Relevance: 7.5, APIs: 5, Instructions: 29
windowsynchronizationCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

PeekMessageW.USER32 ref: 00007FF6E8DDFE41
GetMessageW.USER32 ref: 00007FF6E8DDFE58
TranslateMessage.USER32 ref: 00007FF6E8DDFE63
DispatchMessageW.USER32 ref: 00007FF6E8DDFE6E
WaitForSingleObject.KERNEL32 ref: 00007FF6E8DDFE7C

Memory Dump Source

Source File: 00000003.00000002.1704265649.00007FF6E8DB1000.00000020.00000001.01000000.00000009.sdmp, Offset: 00007FF6E8DB0000, based on PE: true

Associated: 00000003.00000002.1704240339.00007FF6E8DB0000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.1704351194.00007FF6E8DF8000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.1704386188.00007FF6E8E0B000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.1704386188.00007FF6E8E14000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.1704433121.00007FF6E8E1A000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.1704433121.00007FF6E8E1E000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_7ff6e8db0000_clamer.jbxd

Similarity

API ID: Message$DispatchObjectPeekSingleTranslateWait
String ID:
API String ID: 3621893840-0
Opcode ID: eb57a341668d454e4e6cd52f39bb1811463ddcab187ea95c48cb89abc8d18535
Instruction ID: ef2af496681179e1e3fe9d0866121b094d8772e779151cf0cc40d884d0d808a7
Opcode Fuzzy Hash: eb57a341668d454e4e6cd52f39bb1811463ddcab187ea95c48cb89abc8d18535
Instruction Fuzzy Hash: AFF0FF23B3895782F7509730E459B76A251FFA4B05F941230E98E829949E3DD54DCB0D

Function 00007FF6E8DDAE1C Relevance: 7.5, APIs: 5, Instructions: 27
windowCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

PeekMessageW.USER32 ref: 00007FF6E8DDAE32
GetMessageW.USER32 ref: 00007FF6E8DDAE49
IsDialogMessageW.USER32 ref: 00007FF6E8DDAE60
TranslateMessage.USER32 ref: 00007FF6E8DDAE6F
DispatchMessageW.USER32 ref: 00007FF6E8DDAE7A

Memory Dump Source

Source File: 00000003.00000002.1704265649.00007FF6E8DB1000.00000020.00000001.01000000.00000009.sdmp, Offset: 00007FF6E8DB0000, based on PE: true

Associated: 00000003.00000002.1704240339.00007FF6E8DB0000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.1704351194.00007FF6E8DF8000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.1704386188.00007FF6E8E0B000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.1704386188.00007FF6E8E14000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.1704433121.00007FF6E8E1A000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.1704433121.00007FF6E8E1E000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_7ff6e8db0000_clamer.jbxd

Similarity

API ID: Message$DialogDispatchPeekTranslate
String ID:
API String ID: 1266772231-0
Opcode ID: 8f901ab8bb575df3ccfb48a5cb3294f091b017f84468599a2020223c8e70b7dc
Instruction ID: e724e52cb3ac9f056623c9619e4fd00056674576418cad847ec362491414d8a9
Opcode Fuzzy Hash: 8f901ab8bb575df3ccfb48a5cb3294f091b017f84468599a2020223c8e70b7dc
Instruction Fuzzy Hash: 76F0CD26B2895282EB909B30E855B7A6361BFD0745F805531E98E82894DF3DD50CCA0D

Function 00007FF6E8DD91E8 Relevance: 7.0, APIs: 3, Strings: 1, Instructions: 33
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

GetClassNameW.USER32 ref: 00007FF6E8DD9211
SHAutoComplete.SHLWAPI ref: 00007FF6E8DD9255

Part of subcall function 00007FF6E8DD13C4: CompareStringW.KERNEL32 ref: 00007FF6E8DD13E3

FindWindowExW.USER32 ref: 00007FF6E8DD923F

Strings

EDIT, xrefs: 00007FF6E8DD921B, 00007FF6E8DD9233

Memory Dump Source

Source File: 00000003.00000002.1704265649.00007FF6E8DB1000.00000020.00000001.01000000.00000009.sdmp, Offset: 00007FF6E8DB0000, based on PE: true

Associated: 00000003.00000002.1704240339.00007FF6E8DB0000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.1704351194.00007FF6E8DF8000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.1704386188.00007FF6E8E0B000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.1704386188.00007FF6E8E14000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.1704433121.00007FF6E8E1A000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.1704433121.00007FF6E8E1E000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_7ff6e8db0000_clamer.jbxd

Similarity

API ID: AutoClassCompareCompleteFindNameStringWindow
String ID: EDIT
API String ID: 4243998846-3080729518
Opcode ID: 5198dd27efd6ef2cfe81d4e1a42d30dc263c523227a297f5f4c02164b2b5e029
Instruction ID: e5d5b6d6bf36ed7c5d7ae8f0f1eb280d42bb89d0752e20229b4411093a7f7198
Opcode Fuzzy Hash: 5198dd27efd6ef2cfe81d4e1a42d30dc263c523227a297f5f4c02164b2b5e029
Instruction Fuzzy Hash: 14018163B18A4391FA609B31F8107F6A394BFA9744F880231CD4D86695EE3EE14D8B4D

Function 00007FF6E8DC2CE0 Relevance: 6.1, APIs: 4, Instructions: 136fileCOMMON

Download Yara Rule

APIs

GetStdHandle.KERNEL32(00007FF6E8DC8C9A), ref: 00007FF6E8DC2D22
WriteFile.KERNEL32 ref: 00007FF6E8DC2D6C
WriteFile.KERNELBASE ref: 00007FF6E8DC2D9A

Memory Dump Source

Source File: 00000003.00000002.1704265649.00007FF6E8DB1000.00000020.00000001.01000000.00000009.sdmp, Offset: 00007FF6E8DB0000, based on PE: true

Associated: 00000003.00000002.1704240339.00007FF6E8DB0000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.1704351194.00007FF6E8DF8000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.1704386188.00007FF6E8E0B000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.1704386188.00007FF6E8E14000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.1704433121.00007FF6E8E1A000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.1704433121.00007FF6E8E1E000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_7ff6e8db0000_clamer.jbxd

Similarity

API ID: FileWrite$Handle
String ID:
API String ID: 4209713984-0
Opcode ID: 95d7fd16c8d926fcf5da752308064adee905e679e75eda990adbc5c1a1c917ca
Instruction ID: 343817e7b96ec8c9c80723c8fad9fc4547f642d32b6422ee77bc3cc8ebcf6702
Opcode Fuzzy Hash: 95d7fd16c8d926fcf5da752308064adee905e679e75eda990adbc5c1a1c917ca
Instruction Fuzzy Hash: D1512263B18A4286FA10CB35D80477A6320FF94B90F540231EA4D8BA95DF7EE48DC34E

Function 00007FF6E8DE03E0 Relevance: 6.1, APIs: 4, Instructions: 123COMMON

Download Yara Rule

APIs

SetDlgItemTextW.USER32 ref: 00007FF6E8DE0556
_invalid_parameter_noinfo_noreturn.LIBCMT ref: 00007FF6E8DE05C1
_invalid_parameter_noinfo_noreturn.LIBCMT ref: 00007FF6E8DE05C7
_invalid_parameter_noinfo_noreturn.LIBCMT ref: 00007FF6E8DE05CD

Memory Dump Source

Source File: 00000003.00000002.1704265649.00007FF6E8DB1000.00000020.00000001.01000000.00000009.sdmp, Offset: 00007FF6E8DB0000, based on PE: true

Associated: 00000003.00000002.1704240339.00007FF6E8DB0000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.1704351194.00007FF6E8DF8000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.1704386188.00007FF6E8E0B000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.1704386188.00007FF6E8E14000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.1704433121.00007FF6E8E1A000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.1704433121.00007FF6E8E1E000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_7ff6e8db0000_clamer.jbxd

Similarity

API ID: _invalid_parameter_noinfo_noreturn$ItemText
String ID:
API String ID: 3750147219-0
Opcode ID: 0323cd7dccde4bd545d5a1ada9e86922f4353efdfc5b50cf6c7908d58d7c9cbc
Instruction ID: 46754ea05311e23820fbc18b01052e4d500b2b1bb24da6139123d4c3f752b1a0
Opcode Fuzzy Hash: 0323cd7dccde4bd545d5a1ada9e86922f4353efdfc5b50cf6c7908d58d7c9cbc
Instruction Fuzzy Hash: DE51BF63F1465A84FB009BB5D8443AD6322BF45BA4F400736DA1C96BDADF6ED849C30E

Function 00007FF6E8DE2D6C Relevance: 6.1, APIs: 4, Instructions: 94COMMON

Download Yara Rule

APIs

__scrt_initialize_crt.LIBCMT ref: 00007FF6E8DE2D7B

Part of subcall function 00007FF6E8DE27FC: __scrt_dllmain_crt_thread_attach.LIBCMT ref: 00007FF6E8DE281E

__scrt_acquire_startup_lock.LIBCMT ref: 00007FF6E8DE2D90
__scrt_release_startup_lock.LIBCMT ref: 00007FF6E8DE2DFE
__scrt_get_show_window_mode.LIBCMT ref: 00007FF6E8DE2E51

Memory Dump Source

Source File: 00000003.00000002.1704265649.00007FF6E8DB1000.00000020.00000001.01000000.00000009.sdmp, Offset: 00007FF6E8DB0000, based on PE: true

Associated: 00000003.00000002.1704240339.00007FF6E8DB0000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.1704351194.00007FF6E8DF8000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.1704386188.00007FF6E8E0B000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.1704386188.00007FF6E8E14000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.1704433121.00007FF6E8E1A000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.1704433121.00007FF6E8E1E000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_7ff6e8db0000_clamer.jbxd

Similarity

API ID: __scrt_acquire_startup_lock__scrt_dllmain_crt_thread_attach__scrt_get_show_window_mode__scrt_initialize_crt__scrt_release_startup_lock
String ID:
API String ID: 1452418845-0
Opcode ID: f380b52e8f95e6a0f24ce785192d8cb773bc143ddf3d62aee805abe4fb8ed354
Instruction ID: 5c1fff39ef564f092e2172948b861e081041c57d31ccb2b2a8e1af1d01e244c0
Opcode Fuzzy Hash: f380b52e8f95e6a0f24ce785192d8cb773bc143ddf3d62aee805abe4fb8ed354
Instruction Fuzzy Hash: E4314C23E0C1524AFA64AB7494513B9A391AF41744F441634EA4ECB6E3DE2FB80C835F

Function 00007FF6E8DC3684 Relevance: 6.1, APIs: 4, Instructions: 94COMMON

Download Yara Rule

APIs

CreateDirectoryW.KERNELBASE(?,?,?,?,?,?,?,00000000,?,00007FF6E8DC309D), ref: 00007FF6E8DC36CE
CreateDirectoryW.KERNEL32 ref: 00007FF6E8DC3733
GetLastError.KERNEL32(?,?,?,?,?,?,?,00000000,?,00007FF6E8DC309D), ref: 00007FF6E8DC3791
_invalid_parameter_noinfo_noreturn.LIBCMT ref: 00007FF6E8DC37CE

Memory Dump Source

Source File: 00000003.00000002.1704265649.00007FF6E8DB1000.00000020.00000001.01000000.00000009.sdmp, Offset: 00007FF6E8DB0000, based on PE: true

Associated: 00000003.00000002.1704240339.00007FF6E8DB0000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.1704351194.00007FF6E8DF8000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.1704386188.00007FF6E8E0B000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.1704386188.00007FF6E8E14000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.1704433121.00007FF6E8E1A000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.1704433121.00007FF6E8E1E000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_7ff6e8db0000_clamer.jbxd

Similarity

API ID: CreateDirectory$ErrorLast_invalid_parameter_noinfo_noreturn
String ID:
API String ID: 2359106489-0
Opcode ID: 9d9d2995018f7f6f648ac6a5d97c5d37007cde808aee1d861722df7aa9659c46
Instruction ID: 6cc5330355232b0f4fcef5eb9b440ccc19128e9044cf4c39058dfe2deed1b5bf
Opcode Fuzzy Hash: 9d9d2995018f7f6f648ac6a5d97c5d37007cde808aee1d861722df7aa9659c46
Instruction Fuzzy Hash: 4931E623A0C68241EA64DB35A44437DA351FF897A4F600331EE9DCB6E6DF3ED449860E

Function 00007FF6E8DC2320 Relevance: 6.1, APIs: 4, Instructions: 58fileCOMMON

Download Yara Rule

APIs

GetStdHandle.KERNEL32(?,?,?,?,00000000,00007FF6E8DC2927,?,00100000,?,00000001,00000000,00000000,?,00007FF6E8DC14C1), ref: 00007FF6E8DC2348
ReadFile.KERNELBASE ref: 00007FF6E8DC2367
GetLastError.KERNEL32 ref: 00007FF6E8DC239B
GetLastError.KERNEL32 ref: 00007FF6E8DC23BA

Memory Dump Source

Source File: 00000003.00000002.1704265649.00007FF6E8DB1000.00000020.00000001.01000000.00000009.sdmp, Offset: 00007FF6E8DB0000, based on PE: true

Associated: 00000003.00000002.1704240339.00007FF6E8DB0000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.1704351194.00007FF6E8DF8000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.1704386188.00007FF6E8E0B000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.1704386188.00007FF6E8E14000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.1704433121.00007FF6E8E1A000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.1704433121.00007FF6E8E1E000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_7ff6e8db0000_clamer.jbxd

Similarity

API ID: ErrorLast$FileHandleRead
String ID:
API String ID: 2244327787-0
Opcode ID: 5dece825d5be91adec6864fa12bb564f4e3b5809c08bfde6ef0babe01e3581d0
Instruction ID: e9ce983a58978eddd1916127d29ef0e3816f713927cf4b4c8495f678e4604b5e
Opcode Fuzzy Hash: 5dece825d5be91adec6864fa12bb564f4e3b5809c08bfde6ef0babe01e3581d0
Instruction Fuzzy Hash: 0B216223A0C54289EA605F31A40033D63A0FF95B94F244739DA5DCE686CF7EE899875F

Function 00007FF6E8DD946C Relevance: 5.3, APIs: 2, Strings: 1, Instructions: 26comCOMMON

Download Yara Rule

APIs

Part of subcall function 00007FF6E8DCDFD0: GetSystemDirectoryW.KERNEL32 ref: 00007FF6E8DCDDDF

OleInitialize.OLE32 ref: 00007FF6E8DD9486
SHGetMalloc.SHELL32 ref: 00007FF6E8DD94D4

Strings

riched20.dll, xrefs: 00007FF6E8DD9475

Memory Dump Source

Source File: 00000003.00000002.1704265649.00007FF6E8DB1000.00000020.00000001.01000000.00000009.sdmp, Offset: 00007FF6E8DB0000, based on PE: true

Associated: 00000003.00000002.1704240339.00007FF6E8DB0000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.1704351194.00007FF6E8DF8000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.1704386188.00007FF6E8E0B000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.1704386188.00007FF6E8E14000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.1704433121.00007FF6E8E1A000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.1704433121.00007FF6E8E1E000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_7ff6e8db0000_clamer.jbxd

Similarity

API ID: DirectoryInitializeMallocSystem
String ID: riched20.dll
API String ID: 174490985-3360196438
Opcode ID: 0d85db053d286d1bd0fa19ead2840fc3f5149c6ee0f027e6ed6c33eb2c824e37
Instruction ID: 1909697b9535b5e1e5b33a0dd69aa6bcf24583c486d87e8ecef69e499ddbac1b
Opcode Fuzzy Hash: 0d85db053d286d1bd0fa19ead2840fc3f5149c6ee0f027e6ed6c33eb2c824e37
Instruction Fuzzy Hash: 36F03C72A18A4282EB419F30F8156AAB3A0FB88754F440235E98E82654DF7DE14DCB09

Function 00007FF6E8DD095C Relevance: 4.7, APIs: 3, Instructions: 152windowCOMMON

Download Yara Rule

APIs

Part of subcall function 00007FF6E8DD853C: GlobalMemoryStatusEx.KERNEL32 ref: 00007FF6E8DD856C

Part of subcall function 00007FF6E8DCAAE0: LoadStringW.USER32 ref: 00007FF6E8DCAB67
Part of subcall function 00007FF6E8DCAAE0: LoadStringW.USER32 ref: 00007FF6E8DCAB80

Part of subcall function 00007FF6E8DB1FA0: _invalid_parameter_noinfo_noreturn.LIBCMT ref: 00007FF6E8DB1FFB

Part of subcall function 00007FF6E8DB129C: Concurrency::cancel_current_task.LIBCPMT ref: 00007FF6E8DB1396

_invalid_parameter_noinfo_noreturn.LIBCMT ref: 00007FF6E8DE01BB
_invalid_parameter_noinfo_noreturn.LIBCMT ref: 00007FF6E8DE01C1
SendDlgItemMessageW.USER32 ref: 00007FF6E8DE01F2

Memory Dump Source

Source File: 00000003.00000002.1704265649.00007FF6E8DB1000.00000020.00000001.01000000.00000009.sdmp, Offset: 00007FF6E8DB0000, based on PE: true

Associated: 00000003.00000002.1704240339.00007FF6E8DB0000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.1704351194.00007FF6E8DF8000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.1704386188.00007FF6E8E0B000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.1704386188.00007FF6E8E14000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.1704433121.00007FF6E8E1A000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.1704433121.00007FF6E8E1E000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_7ff6e8db0000_clamer.jbxd

Similarity

API ID: _invalid_parameter_noinfo_noreturn$LoadString$Concurrency::cancel_current_taskGlobalItemMemoryMessageSendStatus
String ID:
API String ID: 3106221260-0
Opcode ID: a85457c9f0beb41b8e2f23d266ea2b3255992c6d9f1e4ffc16c64fafd43f3ad8
Instruction ID: f11e8b5aa04a15defa7f583856f0fedf1b1cfe31566ea55dcfad099e444cf71c
Opcode Fuzzy Hash: a85457c9f0beb41b8e2f23d266ea2b3255992c6d9f1e4ffc16c64fafd43f3ad8
Instruction Fuzzy Hash: 2F51AD63F446468AEB109BB5D8413FD6322AB89BC8F400335DA0D9B7DADE2DE509C34D

Function 00007FF6E8DD9F4C Relevance: 4.6, APIs: 3, Instructions: 146COMMON

Download Yara Rule

APIs

SHFileOperationW.SHELL32 ref: 00007FF6E8DDA118
_invalid_parameter_noinfo_noreturn.LIBCMT ref: 00007FF6E8DDA184
_invalid_parameter_noinfo_noreturn.LIBCMT ref: 00007FF6E8DDA18A

Memory Dump Source

Source File: 00000003.00000002.1704265649.00007FF6E8DB1000.00000020.00000001.01000000.00000009.sdmp, Offset: 00007FF6E8DB0000, based on PE: true

Associated: 00000003.00000002.1704240339.00007FF6E8DB0000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.1704351194.00007FF6E8DF8000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.1704386188.00007FF6E8E0B000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.1704386188.00007FF6E8E14000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.1704433121.00007FF6E8E1A000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.1704433121.00007FF6E8E1E000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_7ff6e8db0000_clamer.jbxd

Similarity

API ID: _invalid_parameter_noinfo_noreturn$FileOperation
String ID:
API String ID: 2032784890-0
Opcode ID: 425ddadb74c4bc10119aa1baa60ba7c5a4f73d54acf5c20dfc24dcb126184bbf
Instruction ID: cfebff63ecc5aadeb2522683f02f36876305fbc70bfd6433a1bee18a9068912c
Opcode Fuzzy Hash: 425ddadb74c4bc10119aa1baa60ba7c5a4f73d54acf5c20dfc24dcb126184bbf
Instruction Fuzzy Hash: D0616923A54A4199EB00CF74C8943FC3361EB48798F408635DA5CA3BA9DF3AD599C709

Function 00007FF6E8DC2134 Relevance: 4.6, APIs: 3, Instructions: 114fileCOMMON

Download Yara Rule

APIs

CreateFileW.KERNELBASE ref: 00007FF6E8DC21CF
CreateFileW.KERNEL32 ref: 00007FF6E8DC223C
_invalid_parameter_noinfo_noreturn.LIBCMT ref: 00007FF6E8DC22D8

Memory Dump Source

Source File: 00000003.00000002.1704265649.00007FF6E8DB1000.00000020.00000001.01000000.00000009.sdmp, Offset: 00007FF6E8DB0000, based on PE: true

Associated: 00000003.00000002.1704240339.00007FF6E8DB0000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.1704351194.00007FF6E8DF8000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.1704386188.00007FF6E8E0B000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.1704386188.00007FF6E8E14000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.1704433121.00007FF6E8E1A000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.1704433121.00007FF6E8E1E000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_7ff6e8db0000_clamer.jbxd

Similarity

API ID: CreateFile$_invalid_parameter_noinfo_noreturn
String ID:
API String ID: 2272807158-0
Opcode ID: 4ce248ffffd21e537046429b603db88a9fd2a3d13b10b45fb751dcef003d6319
Instruction ID: ce37ea75bace510f3b245468493cc671c24b109d7ffaaccfc01092392db89c06
Opcode Fuzzy Hash: 4ce248ffffd21e537046429b603db88a9fd2a3d13b10b45fb751dcef003d6319
Instruction Fuzzy Hash: D641D473A0878186EB208B25E444769A3A0FB84BB4F104334DFAD47AD6CF3DE498870D

Function 00007FF6E8DB23F8 Relevance: 4.6, APIs: 3, Instructions: 73COMMON

Download Yara Rule

APIs

GetWindowTextLengthW.USER32 ref: 00007FF6E8DB243E
GetWindowTextW.USER32 ref: 00007FF6E8DB2476
_invalid_parameter_noinfo_noreturn.LIBCMT ref: 00007FF6E8DB2505

Memory Dump Source

Source File: 00000003.00000002.1704265649.00007FF6E8DB1000.00000020.00000001.01000000.00000009.sdmp, Offset: 00007FF6E8DB0000, based on PE: true

Associated: 00000003.00000002.1704240339.00007FF6E8DB0000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.1704351194.00007FF6E8DF8000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.1704386188.00007FF6E8E0B000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.1704386188.00007FF6E8E14000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.1704433121.00007FF6E8E1A000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.1704433121.00007FF6E8E1E000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_7ff6e8db0000_clamer.jbxd

Similarity

API ID: TextWindow$Length_invalid_parameter_noinfo_noreturn
String ID:
API String ID: 2176759853-0
Opcode ID: 324ad9725680782466c8b9226039195d64c3332d7d8035b24254b52cca95445d
Instruction ID: 9a039ce430c2fbf3df6abd207db9f2fd50072c4d1d76563b685e56d37296836a
Opcode Fuzzy Hash: 324ad9725680782466c8b9226039195d64c3332d7d8035b24254b52cca95445d
Instruction Fuzzy Hash: 1D21A473A28B8181EA109B75A84027EA364FB89BE0F144335EBDD43B99DF3DD155C709

Function 00007FF6E8DD1F94 Relevance: 4.6, APIs: 3, Instructions: 68COMMON

Download Yara Rule

APIs

std::bad_alloc::bad_alloc.LIBCMT ref: 00007FF6E8DD205B
std::bad_alloc::bad_alloc.LIBCMT ref: 00007FF6E8DD2077
std::bad_alloc::bad_alloc.LIBCMT ref: 00007FF6E8DD2093

Memory Dump Source

Source File: 00000003.00000002.1704265649.00007FF6E8DB1000.00000020.00000001.01000000.00000009.sdmp, Offset: 00007FF6E8DB0000, based on PE: true

Associated: 00000003.00000002.1704240339.00007FF6E8DB0000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.1704351194.00007FF6E8DF8000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.1704386188.00007FF6E8E0B000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.1704386188.00007FF6E8E14000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.1704433121.00007FF6E8E1A000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.1704433121.00007FF6E8E1E000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_7ff6e8db0000_clamer.jbxd

Similarity

API ID: std::bad_alloc::bad_alloc
String ID:
API String ID: 1875163511-0
Opcode ID: 473e069831e40b03067e3ac07c55198f41caec4ce5e3ab4939735fa524c57bef
Instruction ID: 121dd0165a707582c5cdd669ee64c16391536ae81e7a3eb67ad72177bf931ce2
Opcode Fuzzy Hash: 473e069831e40b03067e3ac07c55198f41caec4ce5e3ab4939735fa524c57bef
Instruction Fuzzy Hash: 1131E413E0868655FB249730E4447B9A3A0FB40784F444731D29C865E9DF7EE98ACB0F

Function 00007FF6E8DC3D34 Relevance: 4.6, APIs: 3, Instructions: 62COMMON

Download Yara Rule

APIs

SetFileAttributesW.KERNELBASE(?,?,?,?,?,?,00000000,00000001,?,00007FF6E8DD07E1), ref: 00007FF6E8DC3D5E
SetFileAttributesW.KERNEL32 ref: 00007FF6E8DC3DB0
_invalid_parameter_noinfo_noreturn.LIBCMT ref: 00007FF6E8DC3E1A

Memory Dump Source

Source File: 00000003.00000002.1704265649.00007FF6E8DB1000.00000020.00000001.01000000.00000009.sdmp, Offset: 00007FF6E8DB0000, based on PE: true

Associated: 00000003.00000002.1704240339.00007FF6E8DB0000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.1704351194.00007FF6E8DF8000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.1704386188.00007FF6E8E0B000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.1704386188.00007FF6E8E14000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.1704433121.00007FF6E8E1A000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.1704433121.00007FF6E8E1E000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_7ff6e8db0000_clamer.jbxd

Similarity

API ID: AttributesFile$_invalid_parameter_noinfo_noreturn
String ID:
API String ID: 1203560049-0
Opcode ID: 523e4a483c86c9ac9ee543cf6c476d9bf2e9d6353514affc3e0f4067b8c7bc61
Instruction ID: 2e35c6ee863c53c05a37005d3d04c88887091bfb16ac11de93f5fc4176d47d4a
Opcode Fuzzy Hash: 523e4a483c86c9ac9ee543cf6c476d9bf2e9d6353514affc3e0f4067b8c7bc61
Instruction Fuzzy Hash: 0021D623A1868181EE20CB35E44536A6360FF88B94F504330EA9E866A5EF3DD549C70D

Function 00007FF6E8DC31BC Relevance: 4.6, APIs: 3, Instructions: 59fileCOMMON

Download Yara Rule

APIs

DeleteFileW.KERNELBASE(?,?,?,?,?,?,?,?,00000000,00007FF6E8DD0822), ref: 00007FF6E8DC31E7
DeleteFileW.KERNEL32 ref: 00007FF6E8DC3237
_invalid_parameter_noinfo_noreturn.LIBCMT ref: 00007FF6E8DC32A1

Memory Dump Source

Source File: 00000003.00000002.1704265649.00007FF6E8DB1000.00000020.00000001.01000000.00000009.sdmp, Offset: 00007FF6E8DB0000, based on PE: true

Associated: 00000003.00000002.1704240339.00007FF6E8DB0000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.1704351194.00007FF6E8DF8000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.1704386188.00007FF6E8E0B000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.1704386188.00007FF6E8E14000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.1704433121.00007FF6E8E1A000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.1704433121.00007FF6E8E1E000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_7ff6e8db0000_clamer.jbxd

Similarity

API ID: DeleteFile$_invalid_parameter_noinfo_noreturn
String ID:
API String ID: 3118131910-0
Opcode ID: 9e0f12d03b62ccef14e62e4bf3878a3457daa81ed2db8d115c48a0739d4b379d
Instruction ID: 97562d8f33d21eb6b4f0d47473e9cd50477bbbc76836487e0021fb5dda8a7ba0
Opcode Fuzzy Hash: 9e0f12d03b62ccef14e62e4bf3878a3457daa81ed2db8d115c48a0739d4b379d
Instruction Fuzzy Hash: AF217123A1878182EE10CB35E44536EA360FF89B94F501334EA9E86AA9DF3DD545CB4D

Function 00007FF6E8DC32BC Relevance: 4.6, APIs: 3, Instructions: 57COMMON

Download Yara Rule

APIs

GetFileAttributesW.KERNELBASE(?,?,?,?,00007FF6E8DCE5B1,?,?,?,00000000,?), ref: 00007FF6E8DC32E7
GetFileAttributesW.KERNELBASE ref: 00007FF6E8DC3334
_invalid_parameter_noinfo_noreturn.LIBCMT ref: 00007FF6E8DC3399

Memory Dump Source

Source File: 00000003.00000002.1704265649.00007FF6E8DB1000.00000020.00000001.01000000.00000009.sdmp, Offset: 00007FF6E8DB0000, based on PE: true

Associated: 00000003.00000002.1704240339.00007FF6E8DB0000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.1704351194.00007FF6E8DF8000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.1704386188.00007FF6E8E0B000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.1704386188.00007FF6E8E14000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.1704433121.00007FF6E8E1A000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.1704433121.00007FF6E8E1E000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_7ff6e8db0000_clamer.jbxd

Similarity

API ID: AttributesFile$_invalid_parameter_noinfo_noreturn
String ID:
API String ID: 1203560049-0
Opcode ID: d981565e32c06465bb9ca9e6032df0ff87469bcd01ee0110978b6e45bf249536
Instruction ID: e0b6f8479c4dd51c7c17439e54e1eadf0b8dd388191fa46c1773e09bc2e491de
Opcode Fuzzy Hash: d981565e32c06465bb9ca9e6032df0ff87469bcd01ee0110978b6e45bf249536
Instruction Fuzzy Hash: FA216033A1868181EA14DB39E44432EA361FBC9BA4F500335EA9D87AE5DF3DD549CB0D

Function 00007FF6E8DEBF64 Relevance: 4.5, APIs: 3, Instructions: 19COMMON

Download Yara Rule

APIs

GetCurrentProcess.KERNEL32(?,?,?,00007FF6E8DEBF48), ref: 00007FF6E8DEBF8C
TerminateProcess.KERNEL32(?,?,?,00007FF6E8DEBF48), ref: 00007FF6E8DEBF97
ExitProcess.KERNEL32 ref: 00007FF6E8DEBFA6

Memory Dump Source

Source File: 00000003.00000002.1704265649.00007FF6E8DB1000.00000020.00000001.01000000.00000009.sdmp, Offset: 00007FF6E8DB0000, based on PE: true

Associated: 00000003.00000002.1704240339.00007FF6E8DB0000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.1704351194.00007FF6E8DF8000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.1704386188.00007FF6E8E0B000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.1704386188.00007FF6E8E14000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.1704433121.00007FF6E8E1A000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.1704433121.00007FF6E8E1E000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_7ff6e8db0000_clamer.jbxd

Similarity

API ID: Process$CurrentExitTerminate
String ID:
API String ID: 1703294689-0
Opcode ID: 44b3a526fe0d15710854bc957cc7a82f9edee4cc7420f0560de4bec5ea2a17a0
Instruction ID: cc5fe63cc43dbf883d6603fc155ea1960988293edc0e178ed5f80fa9acc75215
Opcode Fuzzy Hash: 44b3a526fe0d15710854bc957cc7a82f9edee4cc7420f0560de4bec5ea2a17a0
Instruction Fuzzy Hash: 79E01A26F0430646EA546B7198953796352AF98741F204638D84EA3396CE3FA41D870F

Function 00007FF6E8DBF578 Relevance: 3.2, APIs: 2, Instructions: 193COMMON

Download Yara Rule

APIs

_invalid_parameter_noinfo_noreturn.LIBCMT ref: 00007FF6E8DBF895
_invalid_parameter_noinfo_noreturn.LIBCMT ref: 00007FF6E8DBF89B

Part of subcall function 00007FF6E8DC3EC8: FindClose.KERNELBASE(?,?,00000000,00007FF6E8DD0811), ref: 00007FF6E8DC3EFD

Memory Dump Source

Source File: 00000003.00000002.1704265649.00007FF6E8DB1000.00000020.00000001.01000000.00000009.sdmp, Offset: 00007FF6E8DB0000, based on PE: true

Associated: 00000003.00000002.1704240339.00007FF6E8DB0000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.1704351194.00007FF6E8DF8000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.1704386188.00007FF6E8E0B000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.1704386188.00007FF6E8E14000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.1704433121.00007FF6E8E1A000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.1704433121.00007FF6E8E1E000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_7ff6e8db0000_clamer.jbxd

Similarity

API ID: _invalid_parameter_noinfo_noreturn$CloseFind
String ID:
API String ID: 3587649625-0
Opcode ID: 23f630cba899342486ec3d5de318505faaaca4e13abb6a95497164dac5ca7356
Instruction ID: a9044b9fd0da4197a915e0508cfee7b0033dd24d6fad593b74524928fef24022
Opcode Fuzzy Hash: 23f630cba899342486ec3d5de318505faaaca4e13abb6a95497164dac5ca7356
Instruction Fuzzy Hash: 6591B073A18B8194EB10DF34D8443AD6361FB847A8F904236EA5C87AE9DF7DD589C309

Function 00007FF6E8DB3904 Relevance: 3.1, APIs: 2, Instructions: 124COMMON

Download Yara Rule

APIs

_invalid_parameter_noinfo_noreturn.LIBCMT ref: 00007FF6E8DB3AB3
_invalid_parameter_noinfo_noreturn.LIBCMT ref: 00007FF6E8DB3AB9

Memory Dump Source

Source File: 00000003.00000002.1704265649.00007FF6E8DB1000.00000020.00000001.01000000.00000009.sdmp, Offset: 00007FF6E8DB0000, based on PE: true

Associated: 00000003.00000002.1704240339.00007FF6E8DB0000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.1704351194.00007FF6E8DF8000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.1704386188.00007FF6E8E0B000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.1704386188.00007FF6E8E14000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.1704433121.00007FF6E8E1A000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.1704433121.00007FF6E8E1E000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_7ff6e8db0000_clamer.jbxd

Similarity

API ID: _invalid_parameter_noinfo_noreturn
String ID:
API String ID: 3668304517-0
Opcode ID: 402f2d810e1efc6a759daaa5297bed4678b331cbcfb426b8061d29b6a9ebee63
Instruction ID: 9e8aa271532c7340f6e0e0db3dbbe06523db2702d1199de04d4ef265043bcb32
Opcode Fuzzy Hash: 402f2d810e1efc6a759daaa5297bed4678b331cbcfb426b8061d29b6a9ebee63
Instruction Fuzzy Hash: EA41BF23F1465285FB04DBB1D8403AD2360AF44B98F141335EE1DA7AEADE39D48A830D

Function 00007FF6E8DC2778 Relevance: 3.1, APIs: 2, Instructions: 100COMMON

Download Yara Rule

APIs

SetFilePointer.KERNELBASE(00000000,00000002,?,00000F99,?,00007FF6E8DC274D), ref: 00007FF6E8DC28A9
GetLastError.KERNEL32(?,00007FF6E8DC274D), ref: 00007FF6E8DC28B8

Memory Dump Source

Source File: 00000003.00000002.1704265649.00007FF6E8DB1000.00000020.00000001.01000000.00000009.sdmp, Offset: 00007FF6E8DB0000, based on PE: true

Associated: 00000003.00000002.1704240339.00007FF6E8DB0000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.1704351194.00007FF6E8DF8000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.1704386188.00007FF6E8E0B000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.1704386188.00007FF6E8E14000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.1704433121.00007FF6E8E1A000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.1704433121.00007FF6E8E1E000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_7ff6e8db0000_clamer.jbxd

Similarity

API ID: ErrorFileLastPointer
String ID:
API String ID: 2976181284-0
Opcode ID: 043a82e8aff847b2e282b78885e55c7214a93c585b530bdf19c19deffc600893
Instruction ID: 99d93c456c3120a6e3feb180b4dc008b92f755134ea3e246230197e1b9c21c89
Opcode Fuzzy Hash: 043a82e8aff847b2e282b78885e55c7214a93c585b530bdf19c19deffc600893
Instruction Fuzzy Hash: 2A31F623B19A428AEE604B3BD5407792350AF84FE4F140331DE1D9B791DE3ED44A974E

Function 00007FF6E8DB22BC Relevance: 3.1, APIs: 2, Instructions: 83COMMON

Download Yara Rule

APIs

GetDlgItem.USER32 ref: 00007FF6E8DB22F1
_invalid_parameter_noinfo_noreturn.LIBCMT ref: 00007FF6E8DB23F0

Memory Dump Source

Source File: 00000003.00000002.1704265649.00007FF6E8DB1000.00000020.00000001.01000000.00000009.sdmp, Offset: 00007FF6E8DB0000, based on PE: true

Associated: 00000003.00000002.1704240339.00007FF6E8DB0000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.1704351194.00007FF6E8DF8000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.1704386188.00007FF6E8E0B000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.1704386188.00007FF6E8E14000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.1704433121.00007FF6E8E1A000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.1704433121.00007FF6E8E1E000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_7ff6e8db0000_clamer.jbxd

Similarity

API ID: Item_invalid_parameter_noinfo_noreturn
String ID:
API String ID: 1746051919-0
Opcode ID: 8763c555b957396376e96df864685bb2527d49eefc22d4d720e740779d29c564
Instruction ID: bd9a0868ca76997caa16bc10ad052f9fda94c569e26b005d55ae2a9a0db7faaf
Opcode Fuzzy Hash: 8763c555b957396376e96df864685bb2527d49eefc22d4d720e740779d29c564
Instruction Fuzzy Hash: F731DE23A1878686EA108B35E4453AEB360EF84B90F404335EB9C47BA9DF3DE548C70D

Function 00007FF6E8DC2AD0 Relevance: 3.1, APIs: 2, Instructions: 76timeCOMMON

Download Yara Rule

APIs

FlushFileBuffers.KERNEL32 ref: 00007FF6E8DC2AFE
SetFileTime.KERNELBASE ref: 00007FF6E8DC2B9B

Memory Dump Source

Source File: 00000003.00000002.1704265649.00007FF6E8DB1000.00000020.00000001.01000000.00000009.sdmp, Offset: 00007FF6E8DB0000, based on PE: true

Associated: 00000003.00000002.1704240339.00007FF6E8DB0000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.1704351194.00007FF6E8DF8000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.1704386188.00007FF6E8E0B000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.1704386188.00007FF6E8E14000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.1704433121.00007FF6E8E1A000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.1704433121.00007FF6E8E1E000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_7ff6e8db0000_clamer.jbxd

Similarity

API ID: File$BuffersFlushTime
String ID:
API String ID: 1392018926-0
Opcode ID: 1f7bfd0f82637a6abdcd08aef8b442a865f6f50d97ba3a1fa7ef62b0e093425a
Instruction ID: a8330b64e7eceeaddc38ff2561699adac9b3c9403484df40587fb11d86f33cfa
Opcode Fuzzy Hash: 1f7bfd0f82637a6abdcd08aef8b442a865f6f50d97ba3a1fa7ef62b0e093425a
Instruction Fuzzy Hash: 2321F463F0DB4259EA628E31D4017BA5B91AF81794F144231DE4C4B29AEE3ED58EC30E

Function 00007FF6E8DCAAE0 Relevance: 3.1, APIs: 2, Instructions: 52COMMON

Download Yara Rule

APIs

LoadStringW.USER32 ref: 00007FF6E8DCAB67
LoadStringW.USER32 ref: 00007FF6E8DCAB80

Memory Dump Source

Source File: 00000003.00000002.1704265649.00007FF6E8DB1000.00000020.00000001.01000000.00000009.sdmp, Offset: 00007FF6E8DB0000, based on PE: true

Associated: 00000003.00000002.1704240339.00007FF6E8DB0000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.1704351194.00007FF6E8DF8000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.1704386188.00007FF6E8E0B000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.1704386188.00007FF6E8E14000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.1704433121.00007FF6E8E1A000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.1704433121.00007FF6E8E1E000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_7ff6e8db0000_clamer.jbxd

Similarity

API ID: LoadString
String ID:
API String ID: 2948472770-0
Opcode ID: efc1550bd5bba1d5ac9face2304fa075ed5e4cb94ffc19493764f318ca00d951
Instruction ID: b6d132825efec142b874a1916d09986537cd62a74d99e71b03646faf06fa7f9e
Opcode Fuzzy Hash: efc1550bd5bba1d5ac9face2304fa075ed5e4cb94ffc19493764f318ca00d951
Instruction Fuzzy Hash: AE11B2B2B08B0285EA008F26A940268BBA2BF98FC0F544535DE4DD7721DF7DE549834D

Function 00007FF6E8DC2BB0 Relevance: 3.0, APIs: 2, Instructions: 47COMMON

Download Yara Rule

APIs

SetFilePointer.KERNELBASE ref: 00007FF6E8DC2C11
GetLastError.KERNEL32 ref: 00007FF6E8DC2C1E

Memory Dump Source

Source File: 00000003.00000002.1704265649.00007FF6E8DB1000.00000020.00000001.01000000.00000009.sdmp, Offset: 00007FF6E8DB0000, based on PE: true

Associated: 00000003.00000002.1704240339.00007FF6E8DB0000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.1704351194.00007FF6E8DF8000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.1704386188.00007FF6E8E0B000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.1704386188.00007FF6E8E14000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.1704433121.00007FF6E8E1A000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.1704433121.00007FF6E8E1E000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_7ff6e8db0000_clamer.jbxd

Similarity

API ID: ErrorFileLastPointer
String ID:
API String ID: 2976181284-0
Opcode ID: 5eda2cbf1ce6837a88d649c872729f31e823bc49095d59e5e9b193bf7b9166cd
Instruction ID: 827d85e22e1ae66b447a5673b7d65280b59e8b09622ed4cb5e3d6335f4a98661
Opcode Fuzzy Hash: 5eda2cbf1ce6837a88d649c872729f31e823bc49095d59e5e9b193bf7b9166cd
Instruction Fuzzy Hash: B111D623A0864185FB609B35E9803796360FB84BB4F544331DA7D9A2D9CF3ED59AC30E

Function 00007FF6E8DB255C Relevance: 3.0, APIs: 2, Instructions: 37COMMON

Download Yara Rule

APIs

Part of subcall function 00007FF6E8DCA4AC: swprintf.LEGACY_STDIO_DEFINITIONS ref: 00007FF6E8DCA504
Part of subcall function 00007FF6E8DCA4AC: SetDlgItemTextW.USER32 ref: 00007FF6E8DCA573
Part of subcall function 00007FF6E8DCA4AC: GetWindowRect.USER32 ref: 00007FF6E8DCA5AD
Part of subcall function 00007FF6E8DCA4AC: GetClientRect.USER32 ref: 00007FF6E8DCA5BB

GetDlgItem.USER32 ref: 00007FF6E8DB25AC
SetDlgItemTextW.USER32 ref: 00007FF6E8DB25C8

Memory Dump Source

Source File: 00000003.00000002.1704265649.00007FF6E8DB1000.00000020.00000001.01000000.00000009.sdmp, Offset: 00007FF6E8DB0000, based on PE: true

Associated: 00000003.00000002.1704240339.00007FF6E8DB0000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.1704351194.00007FF6E8DF8000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.1704386188.00007FF6E8E0B000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.1704386188.00007FF6E8E14000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.1704433121.00007FF6E8E1A000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.1704433121.00007FF6E8E1E000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_7ff6e8db0000_clamer.jbxd

Similarity

API ID: Item$RectText$ClientWindowswprintf
String ID:
API String ID: 402765569-0
Opcode ID: ad94589889145b650e3461eb84003e845283bd92425fc2a9221c8100a4e27e71
Instruction ID: a84b15ca82879bb78e700c0d3743132eec5c75d7fbcdfa27acfd7c32124efa2f
Opcode Fuzzy Hash: ad94589889145b650e3461eb84003e845283bd92425fc2a9221c8100a4e27e71
Instruction Fuzzy Hash: E3017123A0D68B41FF595772A8687B953916F85784F080134D88D866DEDE7EE88CC30E

Function 00007FF6E8DCEB58 Relevance: 3.0, APIs: 2, Instructions: 23COMMON

Download Yara Rule

APIs

GetCurrentProcess.KERNEL32(?,?,?,?,00007FF6E8DCEBAD,?,?,?,?,00007FF6E8DC5752,?,?,?,00007FF6E8DC56DE), ref: 00007FF6E8DCEB5C
GetProcessAffinityMask.KERNEL32 ref: 00007FF6E8DCEB6F

Memory Dump Source

Source File: 00000003.00000002.1704265649.00007FF6E8DB1000.00000020.00000001.01000000.00000009.sdmp, Offset: 00007FF6E8DB0000, based on PE: true

Associated: 00000003.00000002.1704240339.00007FF6E8DB0000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.1704351194.00007FF6E8DF8000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.1704386188.00007FF6E8E0B000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.1704386188.00007FF6E8E14000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.1704433121.00007FF6E8E1A000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.1704433121.00007FF6E8E1E000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_7ff6e8db0000_clamer.jbxd

Similarity

API ID: Process$AffinityCurrentMask
String ID:
API String ID: 1231390398-0
Opcode ID: 444071b75e142e51b736d9fa504759652bc9944b894df1f8101a797a07211085
Instruction ID: e5fc632995101792e544086000c9573fa93e0bb66bd947867960f6b214a92ac8
Opcode Fuzzy Hash: 444071b75e142e51b736d9fa504759652bc9944b894df1f8101a797a07211085
Instruction Fuzzy Hash: DAE02B62F2494642DF188F65C4406E973A2FFC8B40B848235E60BC3614DE2DE14D8B09

Function 00007FF6E8DE21D0 Relevance: 3.0, APIs: 2, Instructions: 21COMMON

Download Yara Rule

APIs

Concurrency::cancel_current_task.LIBCPMT ref: 00007FF6E8DE2200

Part of subcall function 00007FF6E8DE2F7C: std::bad_alloc::bad_alloc.LIBCMT ref: 00007FF6E8DE2F85

Concurrency::cancel_current_task.LIBCPMT ref: 00007FF6E8DE2206

Memory Dump Source

Source File: 00000003.00000002.1704265649.00007FF6E8DB1000.00000020.00000001.01000000.00000009.sdmp, Offset: 00007FF6E8DB0000, based on PE: true

Associated: 00000003.00000002.1704240339.00007FF6E8DB0000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.1704351194.00007FF6E8DF8000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.1704386188.00007FF6E8E0B000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.1704386188.00007FF6E8E14000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.1704433121.00007FF6E8E1A000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.1704433121.00007FF6E8E1E000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_7ff6e8db0000_clamer.jbxd

Similarity

API ID: Concurrency::cancel_current_task$std::bad_alloc::bad_alloc
String ID:
API String ID: 1173176844-0
Opcode ID: ac554a43d54612151bc7e480101717375080be3004ee5b366f50feb51e7139dd
Instruction ID: 2232fb6973ac5198d86f2a320a7d343593d71f98ec2b63c78a7618c5a60f48e5
Opcode Fuzzy Hash: ac554a43d54612151bc7e480101717375080be3004ee5b366f50feb51e7139dd
Instruction Fuzzy Hash: 77E01243E5D10749FD18227218253B482400F69370E5C1730FE3EC46C6AD1EB59DC31E

Function 00007FF6E8DED90C Relevance: 3.0, APIs: 2, Instructions: 19threadCOMMONLIBRARYCODE

Download Yara Rule

APIs

RtlRestoreThreadPreferredUILanguages.NTDLL ref: 00007FF6E8DED922
GetLastError.KERNEL32 ref: 00007FF6E8DED934

Memory Dump Source

Source File: 00000003.00000002.1704265649.00007FF6E8DB1000.00000020.00000001.01000000.00000009.sdmp, Offset: 00007FF6E8DB0000, based on PE: true

Associated: 00000003.00000002.1704240339.00007FF6E8DB0000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.1704351194.00007FF6E8DF8000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.1704386188.00007FF6E8E0B000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.1704386188.00007FF6E8E14000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.1704433121.00007FF6E8E1A000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.1704433121.00007FF6E8E1E000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_7ff6e8db0000_clamer.jbxd

Similarity

API ID: ErrorLanguagesLastPreferredRestoreThread
String ID:
API String ID: 588628887-0
Opcode ID: 7829e02dcbd74b51c5e196648e5aad52518f68633834b7095f7e5950a32ae739
Instruction ID: fb9efac8d27607b883a205a175bad7a749b6b871df5a5d12a87330ef8571e575
Opcode Fuzzy Hash: 7829e02dcbd74b51c5e196648e5aad52518f68633834b7095f7e5950a32ae739
Instruction Fuzzy Hash: 3BE08652F0910346FF05AFB65C4537853915FA4750F081134C90DC6352DE3E949D830F

Function 00007FF6E8DB33E4 Relevance: 1.8, APIs: 1, Instructions: 328COMMON

Download Yara Rule

APIs

_invalid_parameter_noinfo_noreturn.LIBCMT ref: 00007FF6E8DB388C

Memory Dump Source

Source File: 00000003.00000002.1704265649.00007FF6E8DB1000.00000020.00000001.01000000.00000009.sdmp, Offset: 00007FF6E8DB0000, based on PE: true

Associated: 00000003.00000002.1704240339.00007FF6E8DB0000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.1704351194.00007FF6E8DF8000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.1704386188.00007FF6E8E0B000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.1704386188.00007FF6E8E14000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.1704433121.00007FF6E8E1A000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.1704433121.00007FF6E8E1E000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_7ff6e8db0000_clamer.jbxd

Similarity

API ID: _invalid_parameter_noinfo_noreturn
String ID:
API String ID: 3668304517-0
Opcode ID: db0f75601c8d953953658c1d14be6529ec917dbd1ad2d5887d518296e9f1c024
Instruction ID: 54dc9c951fadd4857eca3827998314c73765652658ce7338a6f7b4ed57950d49
Opcode Fuzzy Hash: db0f75601c8d953953658c1d14be6529ec917dbd1ad2d5887d518296e9f1c024
Instruction Fuzzy Hash: D6D1B367B0868256EB2C8B3595403BDA7E1FB15B84F040235CB5D877B9CF3AE468930E

Function 00007FF6E8DDCAD0 Relevance: 1.7, APIs: 1, Instructions: 196COMMON

Download Yara Rule

APIs

_invalid_parameter_noinfo_noreturn.LIBCMT ref: 00007FF6E8DDCDE4

Memory Dump Source

Source File: 00000003.00000002.1704265649.00007FF6E8DB1000.00000020.00000001.01000000.00000009.sdmp, Offset: 00007FF6E8DB0000, based on PE: true

Associated: 00000003.00000002.1704240339.00007FF6E8DB0000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.1704351194.00007FF6E8DF8000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.1704386188.00007FF6E8E0B000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.1704386188.00007FF6E8E14000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.1704433121.00007FF6E8E1A000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.1704433121.00007FF6E8E1E000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_7ff6e8db0000_clamer.jbxd

Similarity

API ID: _invalid_parameter_noinfo_noreturn
String ID:
API String ID: 3668304517-0
Opcode ID: e2460866a0684328410107459c6d972396d79668fc4668c3375d4f16519848c4
Instruction ID: b2dd21dc6ad31a6415e9ce8a66a1c132d8aca62391a941dbafccc59cbf71d73b
Opcode Fuzzy Hash: e2460866a0684328410107459c6d972396d79668fc4668c3375d4f16519848c4
Instruction Fuzzy Hash: 55917223F1461288FB10DBB4D8843AC2B75AF017A8F540335DA6D92AD9DF79D58ACB0D

Function 00007FF6E8DD1870 Relevance: 1.7, APIs: 1, Instructions: 172COMMON

Download Yara Rule

APIs

Part of subcall function 00007FF6E8DCE948: ReleaseSemaphore.KERNEL32 ref: 00007FF6E8DCE974
Part of subcall function 00007FF6E8DCE948: CloseHandle.KERNEL32 ref: 00007FF6E8DCE993
Part of subcall function 00007FF6E8DCE948: DeleteCriticalSection.KERNEL32 ref: 00007FF6E8DCE9AA
Part of subcall function 00007FF6E8DCE948: CloseHandle.KERNEL32 ref: 00007FF6E8DCE9B7

_invalid_parameter_noinfo_noreturn.LIBCMT ref: 00007FF6E8DD1ACB

Memory Dump Source

Source File: 00000003.00000002.1704265649.00007FF6E8DB1000.00000020.00000001.01000000.00000009.sdmp, Offset: 00007FF6E8DB0000, based on PE: true

Associated: 00000003.00000002.1704240339.00007FF6E8DB0000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.1704351194.00007FF6E8DF8000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.1704386188.00007FF6E8E0B000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.1704386188.00007FF6E8E14000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.1704433121.00007FF6E8E1A000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.1704433121.00007FF6E8E1E000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_7ff6e8db0000_clamer.jbxd

Similarity

API ID: CloseHandle$CriticalDeleteReleaseSectionSemaphore_invalid_parameter_noinfo_noreturn
String ID:
API String ID: 904680172-0
Opcode ID: 84549558681af96b4525e1e1ffe2288fe9035f316ab4ad669e4cf30d3a3af5a1
Instruction ID: a5c6e52a1a59981bf7a9297351fb43908a662705c99c43fac5556a0e2b127016
Opcode Fuzzy Hash: 84549558681af96b4525e1e1ffe2288fe9035f316ab4ad669e4cf30d3a3af5a1
Instruction Fuzzy Hash: F961C163B1568591EE08CB75D5442BCB365FB40B90B544332E72D4BAC2CF2AE479870D

Function 00007FF6E8DBEC9C Relevance: 1.6, APIs: 1, Instructions: 145COMMON

Download Yara Rule

APIs

_invalid_parameter_noinfo_noreturn.LIBCMT ref: 00007FF6E8DBEEB8

Memory Dump Source

Source File: 00000003.00000002.1704265649.00007FF6E8DB1000.00000020.00000001.01000000.00000009.sdmp, Offset: 00007FF6E8DB0000, based on PE: true

Associated: 00000003.00000002.1704240339.00007FF6E8DB0000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.1704351194.00007FF6E8DF8000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.1704386188.00007FF6E8E0B000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.1704386188.00007FF6E8E14000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.1704433121.00007FF6E8E1A000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.1704433121.00007FF6E8E1E000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_7ff6e8db0000_clamer.jbxd

Similarity

API ID: _invalid_parameter_noinfo_noreturn
String ID:
API String ID: 3668304517-0
Opcode ID: 69a943e656ee331f1661201cfe822fb8f69a168c4299475660200162fa714270
Instruction ID: 7a82f6e8b78605fb4f28e22988aa2cb30cf789af1baa24219d948ed530bba6d6
Opcode Fuzzy Hash: 69a943e656ee331f1661201cfe822fb8f69a168c4299475660200162fa714270
Instruction Fuzzy Hash: DE51C363A08A8240FA149B36D4453BD6751FB85BD4F440236EE5D8739ACF3EE489C35D

Function 00007FF6E8DBE7A8 Relevance: 1.6, APIs: 1, Instructions: 118COMMON

Download Yara Rule

APIs

Part of subcall function 00007FF6E8DC3EC8: FindClose.KERNELBASE(?,?,00000000,00007FF6E8DD0811), ref: 00007FF6E8DC3EFD

_invalid_parameter_noinfo_noreturn.LIBCMT ref: 00007FF6E8DBE993

Memory Dump Source

Source File: 00000003.00000002.1704265649.00007FF6E8DB1000.00000020.00000001.01000000.00000009.sdmp, Offset: 00007FF6E8DB0000, based on PE: true

Associated: 00000003.00000002.1704240339.00007FF6E8DB0000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.1704351194.00007FF6E8DF8000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.1704386188.00007FF6E8E0B000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.1704386188.00007FF6E8E14000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.1704433121.00007FF6E8E1A000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.1704433121.00007FF6E8E1E000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_7ff6e8db0000_clamer.jbxd

Similarity

API ID: CloseFind_invalid_parameter_noinfo_noreturn
String ID:
API String ID: 1011579015-0
Opcode ID: e982e273b1865209a75a3cfd535ad9023e3388265a11ab7418cbf5dec2d39955
Instruction ID: 8b08c65a83527039b117ecbb5560e3a3e2aa19181b5727eb41dbdf57d48ffbec
Opcode Fuzzy Hash: e982e273b1865209a75a3cfd535ad9023e3388265a11ab7418cbf5dec2d39955
Instruction Fuzzy Hash: 3E517F23A08A8681FF608F35D44537D6365FF84B94F440236EA8D876A9DF2ED449C31E

Function 00007FF6E8DC1794 Relevance: 1.6, APIs: 1, Instructions: 115COMMON

Download Yara Rule

APIs

_invalid_parameter_noinfo_noreturn.LIBCMT ref: 00007FF6E8DC187D

Memory Dump Source

Source File: 00000003.00000002.1704265649.00007FF6E8DB1000.00000020.00000001.01000000.00000009.sdmp, Offset: 00007FF6E8DB0000, based on PE: true

Associated: 00000003.00000002.1704240339.00007FF6E8DB0000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.1704351194.00007FF6E8DF8000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.1704386188.00007FF6E8E0B000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.1704386188.00007FF6E8E14000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.1704433121.00007FF6E8E1A000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.1704433121.00007FF6E8E1E000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_7ff6e8db0000_clamer.jbxd

Similarity

API ID: _invalid_parameter_noinfo_noreturn
String ID:
API String ID: 3668304517-0
Opcode ID: 61fec30c4ba775886d5a885ca6c3d9e3f01b60c7a9016415a9e671651ca41277
Instruction ID: a37b149fe29f7c5c3c1483cc7df7ae6780b9a2a9fda90e6b9aba126b2bfbf568
Opcode Fuzzy Hash: 61fec30c4ba775886d5a885ca6c3d9e3f01b60c7a9016415a9e671651ca41277
Instruction Fuzzy Hash: F1410863F18A9142EE149A27AA00379A251FF84FD0F448635EE5C8BF5BDF3DD4568308

Function 00007FF6E8DC2F58 Relevance: 1.6, APIs: 1, Instructions: 100COMMON

Download Yara Rule

APIs

_invalid_parameter_noinfo_noreturn.LIBCMT ref: 00007FF6E8DC30C8

Memory Dump Source

Source File: 00000003.00000002.1704265649.00007FF6E8DB1000.00000020.00000001.01000000.00000009.sdmp, Offset: 00007FF6E8DB0000, based on PE: true

Associated: 00000003.00000002.1704240339.00007FF6E8DB0000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.1704351194.00007FF6E8DF8000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.1704386188.00007FF6E8E0B000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.1704386188.00007FF6E8E14000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.1704433121.00007FF6E8E1A000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.1704433121.00007FF6E8E1E000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_7ff6e8db0000_clamer.jbxd

Similarity

API ID: _invalid_parameter_noinfo_noreturn
String ID:
API String ID: 3668304517-0
Opcode ID: 71211bdb8fcfb718bc8c1f80de60d6f389c440e1fadeaa63cd7f355b18b082f6
Instruction ID: ab23b2369bbdc6f7dce6955e2ac43fa615e0062617b7f4646efe671b1ddae0d8
Opcode Fuzzy Hash: 71211bdb8fcfb718bc8c1f80de60d6f389c440e1fadeaa63cd7f355b18b082f6
Instruction Fuzzy Hash: F8410423A08B4581EE14DF79E54537963A0EB84BD4F140334EA4D8B7AADF3EE449874D

Function 00007FF6E8DEBDF8 Relevance: 1.6, APIs: 1, Instructions: 96COMMON

Download Yara Rule

APIs

GetModuleHandleW.KERNEL32 ref: 00007FF6E8DEBE20

Part of subcall function 00007FF6E8DEBFB0: GetModuleHandleExW.KERNEL32 ref: 00007FF6E8DEBFD0
Part of subcall function 00007FF6E8DEBFB0: GetProcAddress.KERNEL32 ref: 00007FF6E8DEBFE6
Part of subcall function 00007FF6E8DEBFB0: FreeLibrary.KERNEL32 ref: 00007FF6E8DEC00B

Memory Dump Source

Source File: 00000003.00000002.1704265649.00007FF6E8DB1000.00000020.00000001.01000000.00000009.sdmp, Offset: 00007FF6E8DB0000, based on PE: true

Associated: 00000003.00000002.1704240339.00007FF6E8DB0000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.1704351194.00007FF6E8DF8000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.1704386188.00007FF6E8E0B000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.1704386188.00007FF6E8E14000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.1704433121.00007FF6E8E1A000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.1704433121.00007FF6E8E1E000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_7ff6e8db0000_clamer.jbxd

Similarity

API ID: HandleModule$AddressFreeLibraryProc
String ID:
API String ID: 3947729631-0
Opcode ID: 5b4d6432c9ab27f48bf344f41163fa66ca8822e5b5ed34cf2c0174bd429b5c6d
Instruction ID: e42c3317b263167816179b7bfa9e153501ae1ed611c8e99355d7b496df73b4ce
Opcode Fuzzy Hash: 5b4d6432c9ab27f48bf344f41163fa66ca8822e5b5ed34cf2c0174bd429b5c6d
Instruction Fuzzy Hash: 9F41F223E1861282FB249B309850338A261AF64B40F544637DA4DE76A5CF3FF848C78F

Function 00007FF6E8DB129C Relevance: 1.6, APIs: 1, Instructions: 73COMMON

Download Yara Rule

APIs

Concurrency::cancel_current_task.LIBCPMT ref: 00007FF6E8DB1396

Part of subcall function 00007FF6E8DB1F80: std::bad_alloc::bad_alloc.LIBCMT ref: 00007FF6E8DB1F89

Memory Dump Source

Source File: 00000003.00000002.1704265649.00007FF6E8DB1000.00000020.00000001.01000000.00000009.sdmp, Offset: 00007FF6E8DB0000, based on PE: true

Associated: 00000003.00000002.1704240339.00007FF6E8DB0000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.1704351194.00007FF6E8DF8000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.1704386188.00007FF6E8E0B000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.1704386188.00007FF6E8E14000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.1704433121.00007FF6E8E1A000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.1704433121.00007FF6E8E1E000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_7ff6e8db0000_clamer.jbxd

Similarity

API ID: Concurrency::cancel_current_taskstd::bad_alloc::bad_alloc
String ID:
API String ID: 680105476-0
Opcode ID: fb4569e23469dfa57eec0626174c03e5963d7f6e26c3e18aa513be619ff1198f
Instruction ID: 09ab88e25d43b97c03c29b584ad44e593ceac1060180e1eee198fdfc636743f9
Opcode Fuzzy Hash: fb4569e23469dfa57eec0626174c03e5963d7f6e26c3e18aa513be619ff1198f
Instruction Fuzzy Hash: 5B218123A0865185EE149EA1A40037DA250FB05BF0F680B31DE7E87BD9EE7EE455834E

Function 00007FF6E8DB2C54 Relevance: 1.6, APIs: 1, Instructions: 66COMMON

Download Yara Rule

APIs

_invalid_parameter_noinfo_noreturn.LIBCMT ref: 00007FF6E8DB2D77

Memory Dump Source

Source File: 00000003.00000002.1704265649.00007FF6E8DB1000.00000020.00000001.01000000.00000009.sdmp, Offset: 00007FF6E8DB0000, based on PE: true

Associated: 00000003.00000002.1704240339.00007FF6E8DB0000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.1704351194.00007FF6E8DF8000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.1704386188.00007FF6E8E0B000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.1704386188.00007FF6E8E14000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.1704433121.00007FF6E8E1A000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.1704433121.00007FF6E8E1E000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_7ff6e8db0000_clamer.jbxd

Similarity

API ID: _invalid_parameter_noinfo_noreturn
String ID:
API String ID: 3668304517-0
Opcode ID: febd97f69b4633085c38b8d7b3d390eb9c01e95c270f9ffcfe48760324ba941a
Instruction ID: f64e7ca095ff7186e19d71afa2fd7788bd8b89e34f8d30778b9a6deb3969cea5
Opcode Fuzzy Hash: febd97f69b4633085c38b8d7b3d390eb9c01e95c270f9ffcfe48760324ba941a
Instruction Fuzzy Hash: 5A217C23B2458266EA08EB30D5447FD6314FB44784F944631E71D876AACF3EA8A8C30E

Function 00007FF6E8DF124C Relevance: 1.6, APIs: 1, Instructions: 51COMMON

Download Yara Rule

APIs

_invalid_parameter_noinfo.LIBCMT ref: 00007FF6E8DF1280

Memory Dump Source

Source File: 00000003.00000002.1704265649.00007FF6E8DB1000.00000020.00000001.01000000.00000009.sdmp, Offset: 00007FF6E8DB0000, based on PE: true

Associated: 00000003.00000002.1704240339.00007FF6E8DB0000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.1704351194.00007FF6E8DF8000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.1704386188.00007FF6E8E0B000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.1704386188.00007FF6E8E14000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.1704433121.00007FF6E8E1A000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.1704433121.00007FF6E8E1E000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_7ff6e8db0000_clamer.jbxd

Similarity

API ID: _invalid_parameter_noinfo
String ID:
API String ID: 3215553584-0
Opcode ID: 9dd5a9e84c18447e56e2265fa04046f11d37b96b7f5b774ce3305aa6458b3f00
Instruction ID: 1d42c15862be813242a1daa4ddf3d65794dfcc1ca7e19af1de28f6322cc977ee
Opcode Fuzzy Hash: 9dd5a9e84c18447e56e2265fa04046f11d37b96b7f5b774ce3305aa6458b3f00
Instruction Fuzzy Hash: E8115E33D5C64286FB119BB0A441779B2A4FB50390F640235E68DC7696EF3EE808D74E

Function 00007FF6E8DB3AD8 Relevance: 1.5, APIs: 1, Instructions: 39COMMON

Download Yara Rule

APIs

_invalid_parameter_noinfo_noreturn.LIBCMT ref: 00007FF6E8DB3B6C

Memory Dump Source

Source File: 00000003.00000002.1704265649.00007FF6E8DB1000.00000020.00000001.01000000.00000009.sdmp, Offset: 00007FF6E8DB0000, based on PE: true

Associated: 00000003.00000002.1704240339.00007FF6E8DB0000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.1704351194.00007FF6E8DF8000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.1704386188.00007FF6E8E0B000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.1704386188.00007FF6E8E14000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.1704433121.00007FF6E8E1A000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.1704433121.00007FF6E8E1E000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_7ff6e8db0000_clamer.jbxd

Similarity

API ID: _invalid_parameter_noinfo_noreturn
String ID:
API String ID: 3668304517-0
Opcode ID: dd833eb704b03c62a36fea145c0b0b4abee32047d89ef2e694e61e0216d7ee09
Instruction ID: 833417c04ce31caecc40ea0c15152f03714191bec3ac8e7f89e20188cf973d2d
Opcode Fuzzy Hash: dd833eb704b03c62a36fea145c0b0b4abee32047d89ef2e694e61e0216d7ee09
Instruction Fuzzy Hash: 4E01C463E1878581EA159738E44532D73A1FFD9790F405331E69C47BA9DF2EE045870D

Function 00007FF6E8DE1558 Relevance: 1.5, APIs: 1, Instructions: 38COMMONLIBRARYCODE

Download Yara Rule

APIs

Part of subcall function 00007FF6E8DE1604: GetModuleHandleW.KERNEL32(?,?,?,00007FF6E8DE1573,?,?,?,00007FF6E8DE192A), ref: 00007FF6E8DE162B

DloadProtectSection.DELAYIMP ref: 00007FF6E8DE15C9

Memory Dump Source

Source File: 00000003.00000002.1704265649.00007FF6E8DB1000.00000020.00000001.01000000.00000009.sdmp, Offset: 00007FF6E8DB0000, based on PE: true

Associated: 00000003.00000002.1704240339.00007FF6E8DB0000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.1704351194.00007FF6E8DF8000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.1704386188.00007FF6E8E0B000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.1704386188.00007FF6E8E14000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.1704433121.00007FF6E8E1A000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.1704433121.00007FF6E8E1E000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_7ff6e8db0000_clamer.jbxd

Similarity

API ID: DloadHandleModuleProtectSection
String ID:
API String ID: 2883838935-0
Opcode ID: 908f49ac33541a8240f4269ada82e733cc5c0c647bda27ab8868a2cee9a60ef3
Instruction ID: 1d3801ac6a5505d0244cf34b09cb4e73883a8276d487ec9d8d0152eb9e0fa184
Opcode Fuzzy Hash: 908f49ac33541a8240f4269ada82e733cc5c0c647bda27ab8868a2cee9a60ef3
Instruction Fuzzy Hash: A011A862E0855781FF619B35A84037063A0AF1834AF141574C94DD62A1EE3EA89D874F

Function 00007FF6E8DEFA04 Relevance: 1.5, APIs: 1, Instructions: 36memoryCOMMONLIBRARYCODE

Download Yara Rule

APIs

RtlAllocateHeap.NTDLL ref: 00007FF6E8DEFA59

Memory Dump Source

Source File: 00000003.00000002.1704265649.00007FF6E8DB1000.00000020.00000001.01000000.00000009.sdmp, Offset: 00007FF6E8DB0000, based on PE: true

Associated: 00000003.00000002.1704240339.00007FF6E8DB0000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.1704351194.00007FF6E8DF8000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.1704386188.00007FF6E8E0B000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.1704386188.00007FF6E8E14000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.1704433121.00007FF6E8E1A000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.1704433121.00007FF6E8E1E000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_7ff6e8db0000_clamer.jbxd

Similarity

API ID: AllocateHeap
String ID:
API String ID: 1279760036-0
Opcode ID: c4d23aaef5024e3722ccbb242168b3e22d65bf63548bcaacbbf61b8d0a3ba7a1
Instruction ID: 5bad791af380b9104b9a3b3a9408e66a760c08c022cfdcf400e055f0eddf88a8
Opcode Fuzzy Hash: c4d23aaef5024e3722ccbb242168b3e22d65bf63548bcaacbbf61b8d0a3ba7a1
Instruction Fuzzy Hash: 9AF06D93F2A20745FE655B7699113B8A2805F54B80F4C5670CD0ECE3C1ED2EE689431E

Function 00007FF6E8DC3EC8 Relevance: 1.5, APIs: 1, Instructions: 31COMMON

Download Yara Rule

APIs

Part of subcall function 00007FF6E8DC40BC: FindFirstFileW.KERNELBASE ref: 00007FF6E8DC410B
Part of subcall function 00007FF6E8DC40BC: FindFirstFileW.KERNEL32 ref: 00007FF6E8DC415E
Part of subcall function 00007FF6E8DC40BC: GetLastError.KERNEL32 ref: 00007FF6E8DC41AF

FindClose.KERNELBASE(?,?,00000000,00007FF6E8DD0811), ref: 00007FF6E8DC3EFD

Memory Dump Source

Source File: 00000003.00000002.1704265649.00007FF6E8DB1000.00000020.00000001.01000000.00000009.sdmp, Offset: 00007FF6E8DB0000, based on PE: true

Associated: 00000003.00000002.1704240339.00007FF6E8DB0000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.1704351194.00007FF6E8DF8000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.1704386188.00007FF6E8E0B000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.1704386188.00007FF6E8E14000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.1704433121.00007FF6E8E1A000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.1704433121.00007FF6E8E1E000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_7ff6e8db0000_clamer.jbxd

Similarity

API ID: Find$FileFirst$CloseErrorLast
String ID:
API String ID: 1464966427-0
Opcode ID: 18fe74ab7ca813274cb64c08179860cc48efc587ad39327f0b25563dc18ddab5
Instruction ID: 5ba2850573baac4a9372b3fd706f5686a94c04fb56d42ab3688e573b00f51096
Opcode Fuzzy Hash: 18fe74ab7ca813274cb64c08179860cc48efc587ad39327f0b25563dc18ddab5
Instruction Fuzzy Hash: 5BF0A46350828185EA159B75A1003B93760DF15BB4F141338EA3D4B2D7CE2ED448874E

Function 00007FF6E8DED94C Relevance: 1.5, APIs: 1, Instructions: 29memoryCOMMONLIBRARYCODE

Download Yara Rule

APIs

RtlAllocateHeap.NTDLL ref: 00007FF6E8DED98A

Memory Dump Source

Source File: 00000003.00000002.1704265649.00007FF6E8DB1000.00000020.00000001.01000000.00000009.sdmp, Offset: 00007FF6E8DB0000, based on PE: true

Associated: 00000003.00000002.1704240339.00007FF6E8DB0000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.1704351194.00007FF6E8DF8000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.1704386188.00007FF6E8E0B000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.1704386188.00007FF6E8E14000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.1704433121.00007FF6E8E1A000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.1704433121.00007FF6E8E1E000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_7ff6e8db0000_clamer.jbxd

Similarity

API ID: AllocateHeap
String ID:
API String ID: 1279760036-0
Opcode ID: 5fa632deebd8181b9f3ea37834cf4eccbda839d7d0d6f948310c23224b4a93e7
Instruction ID: 52233682e98e0c59db182e221f89be53b19612e7c1752a691f02c7875e513dc0
Opcode Fuzzy Hash: 5fa632deebd8181b9f3ea37834cf4eccbda839d7d0d6f948310c23224b4a93e7
Instruction Fuzzy Hash: BCF05813F0920744FF166AB55C003B892905F847A0F482730DD6EC62C1DF2EA488831F

Function 00007FF6E8DC20D0 Relevance: 1.5, APIs: 1, Instructions: 29COMMON

Download Yara Rule

APIs

FindCloseChangeNotification.KERNELBASE(?,?,00000001,00007FF6E8DC207E), ref: 00007FF6E8DC20F6

Memory Dump Source

Source File: 00000003.00000002.1704265649.00007FF6E8DB1000.00000020.00000001.01000000.00000009.sdmp, Offset: 00007FF6E8DB0000, based on PE: true

Associated: 00000003.00000002.1704240339.00007FF6E8DB0000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.1704351194.00007FF6E8DF8000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.1704386188.00007FF6E8E0B000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.1704386188.00007FF6E8E14000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.1704433121.00007FF6E8E1A000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.1704433121.00007FF6E8E1E000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_7ff6e8db0000_clamer.jbxd

Similarity

API ID: ChangeCloseFindNotification
String ID:
API String ID: 2591292051-0
Opcode ID: ccbd9008d2c4ce7168f8d058ff2f34620ae6bf54bfe45a0cbca9d6a6f1a7c065
Instruction ID: a916b063503b0c4e26ff89bfbc0a49d0bed5e67aabd2b0811032644faac0f912
Opcode Fuzzy Hash: ccbd9008d2c4ce7168f8d058ff2f34620ae6bf54bfe45a0cbca9d6a6f1a7c065
Instruction Fuzzy Hash: D6F0C223A0868289FB248B30E0413792770EB94B78F584334E73C891DACF29D899C30E

Function 00007FF6E8DC2490 Relevance: 1.5, APIs: 1, Instructions: 12COMMON

Download Yara Rule

APIs

GetFileType.KERNELBASE ref: 00007FF6E8DC24A2

Memory Dump Source

Source File: 00000003.00000002.1704265649.00007FF6E8DB1000.00000020.00000001.01000000.00000009.sdmp, Offset: 00007FF6E8DB0000, based on PE: true

Associated: 00000003.00000002.1704240339.00007FF6E8DB0000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.1704351194.00007FF6E8DF8000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.1704386188.00007FF6E8E0B000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.1704386188.00007FF6E8E14000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.1704433121.00007FF6E8E1A000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.1704433121.00007FF6E8E1E000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_7ff6e8db0000_clamer.jbxd

Similarity

API ID: FileType
String ID:
API String ID: 3081899298-0
Opcode ID: df9a28314c6b6fddfb177ebf539387614dcb0363737e1ba4f38fe55c4f903e1a
Instruction ID: 1742d982346568ecb7ee9d6a545592bb425c585cd86b719db0d213e428ce863c
Opcode Fuzzy Hash: df9a28314c6b6fddfb177ebf539387614dcb0363737e1ba4f38fe55c4f903e1a
Instruction Fuzzy Hash: 31D0C913E09841C3D9109639A85153C2250AFA2735FB40720D63ED56E2CE1E949AA21E

Function 00007FF6E8DF7610 Relevance: 1.5, APIs: 1, Instructions: 10COMMON

Download Yara Rule

APIs

FreeLibrary.KERNELBASE ref: 00007FF6E8DF7620

Memory Dump Source

Source File: 00000003.00000002.1704265649.00007FF6E8DB1000.00000020.00000001.01000000.00000009.sdmp, Offset: 00007FF6E8DB0000, based on PE: true

Associated: 00000003.00000002.1704240339.00007FF6E8DB0000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.1704351194.00007FF6E8DF8000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.1704386188.00007FF6E8E0B000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.1704386188.00007FF6E8E14000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.1704433121.00007FF6E8E1A000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.1704433121.00007FF6E8E1E000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_7ff6e8db0000_clamer.jbxd

Similarity

API ID: FreeLibrary
String ID:
API String ID: 3664257935-0
Opcode ID: d905035bd3ffed0fa3d42b0ba6c84558746c8bc0c2d9d26789c142ff972459f6
Instruction ID: 0d3d95c8a4d5a733138486479fda81bd0fe17f26316558ac3c2445ed01c5cb7a
Opcode Fuzzy Hash: d905035bd3ffed0fa3d42b0ba6c84558746c8bc0c2d9d26789c142ff972459f6
Instruction Fuzzy Hash: EDD09E9BF2A90685FB449B21EC95B3022627F68B25F510734C84D851558F7E209C870F

Function 00007FF6E8DC7FC4 Relevance: 1.5, APIs: 1, Instructions: 9COMMON

Download Yara Rule

APIs

SetCurrentDirectoryW.KERNELBASE ref: 00007FF6E8DC7FD2

Memory Dump Source

Source File: 00000003.00000002.1704265649.00007FF6E8DB1000.00000020.00000001.01000000.00000009.sdmp, Offset: 00007FF6E8DB0000, based on PE: true

Associated: 00000003.00000002.1704240339.00007FF6E8DB0000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.1704351194.00007FF6E8DF8000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.1704386188.00007FF6E8E0B000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.1704386188.00007FF6E8E14000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.1704433121.00007FF6E8E1A000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.1704433121.00007FF6E8E1E000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_7ff6e8db0000_clamer.jbxd

Similarity

API ID: CurrentDirectory
String ID:
API String ID: 1611563598-0
Opcode ID: 176ab68ebee512dad0278907058cd855c5c44f8615b79807412a7d406b36e525
Instruction ID: e4d301f6b5e4bd7437d06183a502abf677096033f50ca7e3ba04e62d67342107
Opcode Fuzzy Hash: 176ab68ebee512dad0278907058cd855c5c44f8615b79807412a7d406b36e525
Instruction Fuzzy Hash: B0C08C22F05502C1DA085B3AC8C961813A4FB60B04BB08134C10CC1120CE3EC4FEA34F

Non-executed Functions

Function 00007FF6E8DE3170 Relevance: 10.6, APIs: 7, Instructions: 72COMMON

Download Yara Rule

APIs

IsProcessorFeaturePresent.KERNEL32 ref: 00007FF6E8DE318C
RtlCaptureContext.KERNEL32 ref: 00007FF6E8DE31B9
RtlLookupFunctionEntry.KERNEL32 ref: 00007FF6E8DE31D3
RtlVirtualUnwind.KERNEL32 ref: 00007FF6E8DE3214
IsDebuggerPresent.KERNEL32 ref: 00007FF6E8DE3268
SetUnhandledExceptionFilter.KERNEL32 ref: 00007FF6E8DE3289
UnhandledExceptionFilter.KERNEL32 ref: 00007FF6E8DE3294

Memory Dump Source

Source File: 00000003.00000002.1704265649.00007FF6E8DB1000.00000020.00000001.01000000.00000009.sdmp, Offset: 00007FF6E8DB0000, based on PE: true

Associated: 00000003.00000002.1704240339.00007FF6E8DB0000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.1704351194.00007FF6E8DF8000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.1704386188.00007FF6E8E0B000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.1704386188.00007FF6E8E14000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.1704433121.00007FF6E8E1A000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.1704433121.00007FF6E8E1E000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_7ff6e8db0000_clamer.jbxd

Similarity

API ID: ExceptionFilterPresentUnhandled$CaptureContextDebuggerEntryFeatureFunctionLookupProcessorUnwindVirtual
String ID:
API String ID: 3140674995-0
Opcode ID: eb4060bcbbf6947450414bc0ac192b8da1feec02df413969c5a674799d26ef14
Instruction ID: 778d54d1c8b9bce37c20e911380bb451f4521773507de3f9b37550155ae495a1
Opcode Fuzzy Hash: eb4060bcbbf6947450414bc0ac192b8da1feec02df413969c5a674799d26ef14
Instruction Fuzzy Hash: AB316D73A08B818AEB649F70E8503FE73A0FB98744F444139DA4D97AA8DF39D558C709

Function 00007FF6E8DB1AA4 Relevance: 6.3, APIs: 4, Instructions: 285COMMON

Download Yara Rule

APIs

_invalid_parameter_noinfo_noreturn.LIBCMT ref: 00007FF6E8DB1EA9
_invalid_parameter_noinfo_noreturn.LIBCMT ref: 00007FF6E8DB1EAF
_invalid_parameter_noinfo_noreturn.LIBCMT ref: 00007FF6E8DB1EB5
_invalid_parameter_noinfo_noreturn.LIBCMT ref: 00007FF6E8DB1EBB

Memory Dump Source

Source File: 00000003.00000002.1704265649.00007FF6E8DB1000.00000020.00000001.01000000.00000009.sdmp, Offset: 00007FF6E8DB0000, based on PE: true

Associated: 00000003.00000002.1704240339.00007FF6E8DB0000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.1704351194.00007FF6E8DF8000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.1704386188.00007FF6E8E0B000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.1704386188.00007FF6E8E14000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.1704433121.00007FF6E8E1A000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.1704433121.00007FF6E8E1E000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_7ff6e8db0000_clamer.jbxd

Similarity

API ID: _invalid_parameter_noinfo_noreturn
String ID:
API String ID: 3668304517-0
Opcode ID: 5c56660b5b0420761b265ac77c18a44f27d6fe961691fcb50e1e6ca7403c7364
Instruction ID: b110c85ed026f874dc06cfedc9e77b6cc5ab546f10465e55af226426306c4c2b
Opcode Fuzzy Hash: 5c56660b5b0420761b265ac77c18a44f27d6fe961691fcb50e1e6ca7403c7364
Instruction Fuzzy Hash: 98B1CD63A24A8686EF109B75D8443AE6361FF8A794F401331EA5C87B99EF3DD548C30D

Function 00007FF6E8DEFA94 Relevance: 5.4, APIs: 1, Strings: 2, Instructions: 164COMMON

Download Yara Rule

APIs

_invalid_parameter_noinfo.LIBCMT ref: 00007FF6E8DEFAC4

Part of subcall function 00007FF6E8DE7934: GetCurrentProcess.KERNEL32(00007FF6E8DF0CCD), ref: 00007FF6E8DE7961

Strings

., xrefs: 00007FF6E8DEFEE4
*?, xrefs: 00007FF6E8DEFAEB

Memory Dump Source

Source File: 00000003.00000002.1704265649.00007FF6E8DB1000.00000020.00000001.01000000.00000009.sdmp, Offset: 00007FF6E8DB0000, based on PE: true

Associated: 00000003.00000002.1704240339.00007FF6E8DB0000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.1704351194.00007FF6E8DF8000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.1704386188.00007FF6E8E0B000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.1704386188.00007FF6E8E14000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.1704433121.00007FF6E8E1A000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.1704433121.00007FF6E8E1E000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_7ff6e8db0000_clamer.jbxd

Similarity

API ID: CurrentProcess_invalid_parameter_noinfo
String ID: *?$.
API String ID: 2518042432-3972193922
Opcode ID: f96344909874f118cd7fc652812aee2de17a0b901a5c412331694f6fbd6e8fc4
Instruction ID: 204361fc33c212acb589ba2df1b56de0ebc397ebfa1ad467d3a89060118739b9
Opcode Fuzzy Hash: f96344909874f118cd7fc652812aee2de17a0b901a5c412331694f6fbd6e8fc4
Instruction Fuzzy Hash: 03510163F24B9581EB11DFB298502B8A3A0FB48BD8B544631DE5D87B84DF3ED04A8309

Function 00007FF6E8DE2A10 Relevance: 21.1, APIs: 8, Strings: 4, Instructions: 61libraryloaderCOMMON

Download Yara Rule

APIs

InitializeCriticalSectionAndSpinCount.KERNEL32 ref: 00007FF6E8DE2A26
GetModuleHandleW.KERNEL32 ref: 00007FF6E8DE2A33
GetModuleHandleW.KERNEL32 ref: 00007FF6E8DE2A48
GetProcAddress.KERNEL32 ref: 00007FF6E8DE2A60
GetProcAddress.KERNEL32 ref: 00007FF6E8DE2A73
CreateEventW.KERNEL32 ref: 00007FF6E8DE2A9F
DeleteCriticalSection.KERNEL32 ref: 00007FF6E8DE2AEB
CloseHandle.KERNEL32 ref: 00007FF6E8DE2AFD

Strings

SleepConditionVariableCS, xrefs: 00007FF6E8DE2A56
WakeAllConditionVariable, xrefs: 00007FF6E8DE2A66
api-ms-win-core-synch-l1-2-0.dll, xrefs: 00007FF6E8DE2A2C
kernel32.dll, xrefs: 00007FF6E8DE2A41

Memory Dump Source

Source File: 00000003.00000002.1704265649.00007FF6E8DB1000.00000020.00000001.01000000.00000009.sdmp, Offset: 00007FF6E8DB0000, based on PE: true

Associated: 00000003.00000002.1704240339.00007FF6E8DB0000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.1704351194.00007FF6E8DF8000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.1704386188.00007FF6E8E0B000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.1704386188.00007FF6E8E14000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.1704433121.00007FF6E8E1A000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.1704433121.00007FF6E8E1E000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_7ff6e8db0000_clamer.jbxd

Similarity

API ID: Handle$AddressCriticalModuleProcSection$CloseCountCreateDeleteEventInitializeSpin
String ID: SleepConditionVariableCS$WakeAllConditionVariable$api-ms-win-core-synch-l1-2-0.dll$kernel32.dll
API String ID: 2565136772-3242537097
Opcode ID: 6e1e709f092c3aabc6fb1c9db3d7c09c3ef1a4a7bf2af41e7ac9402dec2f511f
Instruction ID: 3155466db0b709e6c97905adbc456cf67b5ad3bcf070239e4722657eb76d73b5
Opcode Fuzzy Hash: 6e1e709f092c3aabc6fb1c9db3d7c09c3ef1a4a7bf2af41e7ac9402dec2f511f
Instruction Fuzzy Hash: 0B215E66F19A0785FE249B31E85477863A0AF68780F540234E84ED26A0DF3EE49D930F

Function 00007FF6E8DC6A0C Relevance: 16.2, APIs: 6, Strings: 3, Instructions: 444COMMON

Download Yara Rule

APIs

_invalid_parameter_noinfo_noreturn.LIBCMT ref: 00007FF6E8DC70A6

Part of subcall function 00007FF6E8DB2004: std::_Xinvalid_argument.LIBCPMT ref: 00007FF6E8DB200F

_invalid_parameter_noinfo_noreturn.LIBCMT ref: 00007FF6E8DC70B2
_invalid_parameter_noinfo_noreturn.LIBCMT ref: 00007FF6E8DC70B8
_invalid_parameter_noinfo_noreturn.LIBCMT ref: 00007FF6E8DC70C4
_invalid_parameter_noinfo_noreturn.LIBCMT ref: 00007FF6E8DC70D6
_invalid_parameter_noinfo_noreturn.LIBCMT ref: 00007FF6E8DC70DC

Strings

DXGIDebug.dll, xrefs: 00007FF6E8DC6A18
UNC, xrefs: 00007FF6E8DC6BBF
\\?\, xrefs: 00007FF6E8DC6A57, 00007FF6E8DC6A66

Memory Dump Source

Source File: 00000003.00000002.1704265649.00007FF6E8DB1000.00000020.00000001.01000000.00000009.sdmp, Offset: 00007FF6E8DB0000, based on PE: true

Associated: 00000003.00000002.1704240339.00007FF6E8DB0000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.1704351194.00007FF6E8DF8000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.1704386188.00007FF6E8E0B000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.1704386188.00007FF6E8E14000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.1704433121.00007FF6E8E1A000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.1704433121.00007FF6E8E1E000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_7ff6e8db0000_clamer.jbxd

Similarity

API ID: _invalid_parameter_noinfo_noreturn$Xinvalid_argumentstd::_
String ID: DXGIDebug.dll$UNC$\\?\
API String ID: 4097890229-4048004291
Opcode ID: caeda946b173b290eeb0eea351584ffd7bcd35d17f0c3fb79cdbd079912c01be
Instruction ID: ffcae6b0985fda70c8f0cd57f3ed24f5d845242cb05d457e519befd89e0209d1
Opcode Fuzzy Hash: caeda946b173b290eeb0eea351584ffd7bcd35d17f0c3fb79cdbd079912c01be
Instruction Fuzzy Hash: 1412AD23B08A4284EE10DB79E4402AD6371EB85B98F504235DA5D8BAEADF3ED549C34D

Function 00007FF6E8DE72EC Relevance: 10.6, APIs: 5, Strings: 1, Instructions: 88libraryloaderCOMMONLIBRARYCODE

Download Yara Rule

APIs

LoadLibraryExW.KERNEL32(?,?,00000000,00007FF6E8DE74F3,?,?,?,00007FF6E8DE525E,?,?,?,00007FF6E8DE5219), ref: 00007FF6E8DE7371
GetLastError.KERNEL32(?,?,00000000,00007FF6E8DE74F3,?,?,?,00007FF6E8DE525E,?,?,?,00007FF6E8DE5219), ref: 00007FF6E8DE737F
LoadLibraryExW.KERNEL32(?,?,00000000,00007FF6E8DE74F3,?,?,?,00007FF6E8DE525E,?,?,?,00007FF6E8DE5219), ref: 00007FF6E8DE73A9
FreeLibrary.KERNEL32(?,?,00000000,00007FF6E8DE74F3,?,?,?,00007FF6E8DE525E,?,?,?,00007FF6E8DE5219), ref: 00007FF6E8DE73EF
GetProcAddress.KERNEL32(?,?,00000000,00007FF6E8DE74F3,?,?,?,00007FF6E8DE525E,?,?,?,00007FF6E8DE5219), ref: 00007FF6E8DE73FB

Strings

api-ms-, xrefs: 00007FF6E8DE7391

Memory Dump Source

Source File: 00000003.00000002.1704265649.00007FF6E8DB1000.00000020.00000001.01000000.00000009.sdmp, Offset: 00007FF6E8DB0000, based on PE: true

Associated: 00000003.00000002.1704240339.00007FF6E8DB0000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.1704351194.00007FF6E8DF8000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.1704386188.00007FF6E8E0B000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.1704386188.00007FF6E8E14000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.1704433121.00007FF6E8E1A000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.1704433121.00007FF6E8E1E000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_7ff6e8db0000_clamer.jbxd

Similarity

API ID: Library$Load$AddressErrorFreeLastProc
String ID: api-ms-
API String ID: 2559590344-2084034818
Opcode ID: eedfc97f7024c66fbeb39a7219499b253e22696fd1fdab2c5f769bf1fd383016
Instruction ID: 38963517f1208c8de50f9236db0e77d98c89edf89b8a731931124133e194644a
Opcode Fuzzy Hash: eedfc97f7024c66fbeb39a7219499b253e22696fd1fdab2c5f769bf1fd383016
Instruction Fuzzy Hash: AE31D433E1A64281EE919B26A8007796294FF04BB0F198735DD2D87784DF3DE448831E

Function 00007FF6E8DD7B28 Relevance: 8.9, APIs: 4, Strings: 1, Instructions: 122COMMON

Download Yara Rule

APIs

ShowWindow.USER32 ref: 00007FF6E8DD7B6F
GetWindowRect.USER32 ref: 00007FF6E8DD7BC0
ShowWindow.USER32 ref: 00007FF6E8DD7C96
ShowWindow.USER32 ref: 00007FF6E8DD7CC3

Strings

RarHtmlClassName, xrefs: 00007FF6E8DD7C4B

Memory Dump Source

Source File: 00000003.00000002.1704265649.00007FF6E8DB1000.00000020.00000001.01000000.00000009.sdmp, Offset: 00007FF6E8DB0000, based on PE: true

Associated: 00000003.00000002.1704240339.00007FF6E8DB0000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.1704351194.00007FF6E8DF8000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.1704386188.00007FF6E8E0B000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.1704386188.00007FF6E8E14000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.1704433121.00007FF6E8E1A000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.1704433121.00007FF6E8E1E000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_7ff6e8db0000_clamer.jbxd

Similarity

API ID: Window$Show$Rect
String ID: RarHtmlClassName
API String ID: 2396740005-1658105358
Opcode ID: 7e152e90957d1346e93cce3b53dfbd480fa38e990bdf0b518984ba75781cfd03
Instruction ID: da1fbd6ec8cf3f72fc7dce2f337ca83c6d6c504ea45e177675e077e13f5436f8
Opcode Fuzzy Hash: 7e152e90957d1346e93cce3b53dfbd480fa38e990bdf0b518984ba75781cfd03
Instruction Fuzzy Hash: 16519933A09B428AE7649B35E45437AA360FF85790F004635DE8E87B95DF3DE0498F09

Function 00007FF6E8DC3AF8 Relevance: 7.7, APIs: 5, Instructions: 164filetimeCOMMON

Download Yara Rule

APIs

CreateFileW.KERNEL32 ref: 00007FF6E8DC3BBB
CreateFileW.KERNEL32 ref: 00007FF6E8DC3C24
SetFileTime.KERNEL32 ref: 00007FF6E8DC3CEC
CloseHandle.KERNEL32 ref: 00007FF6E8DC3CF6
_invalid_parameter_noinfo_noreturn.LIBCMT ref: 00007FF6E8DC3D2C

Memory Dump Source

Source File: 00000003.00000002.1704265649.00007FF6E8DB1000.00000020.00000001.01000000.00000009.sdmp, Offset: 00007FF6E8DB0000, based on PE: true

Associated: 00000003.00000002.1704240339.00007FF6E8DB0000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.1704351194.00007FF6E8DF8000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.1704386188.00007FF6E8E0B000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.1704386188.00007FF6E8E14000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.1704433121.00007FF6E8E1A000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.1704433121.00007FF6E8E1E000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_7ff6e8db0000_clamer.jbxd

Similarity

API ID: File$Create$CloseHandleTime_invalid_parameter_noinfo_noreturn
String ID:
API String ID: 2398171386-0
Opcode ID: 14fdea18fdcf977c61dce6ecaccc8aa35300d093acc7d7c713630260d7cb0aba
Instruction ID: 6da8d4fbc7f97eee50da5e8016ed14b0bc484a343c0731ee7386041b9620eb7b
Opcode Fuzzy Hash: 14fdea18fdcf977c61dce6ecaccc8aa35300d093acc7d7c713630260d7cb0aba
Instruction Fuzzy Hash: 0C51E323B04B4249FB54DBB5E4403BD2371EB447A8F004735DE1D9A7E6DE399459830E

Function 00007FF6E8DBD1A8 Relevance: 6.2, APIs: 4, Instructions: 238timeCOMMON

Download Yara Rule

APIs

SetFileTime.KERNEL32 ref: 00007FF6E8DBD46C
_invalid_parameter_noinfo_noreturn.LIBCMT ref: 00007FF6E8DBD554
_invalid_parameter_noinfo_noreturn.LIBCMT ref: 00007FF6E8DBD55A
_invalid_parameter_noinfo_noreturn.LIBCMT ref: 00007FF6E8DBD560

Memory Dump Source

Source File: 00000003.00000002.1704265649.00007FF6E8DB1000.00000020.00000001.01000000.00000009.sdmp, Offset: 00007FF6E8DB0000, based on PE: true

Associated: 00000003.00000002.1704240339.00007FF6E8DB0000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.1704351194.00007FF6E8DF8000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.1704386188.00007FF6E8E0B000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.1704386188.00007FF6E8E14000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.1704433121.00007FF6E8E1A000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.1704433121.00007FF6E8E1E000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_7ff6e8db0000_clamer.jbxd

Similarity

API ID: _invalid_parameter_noinfo_noreturn$FileTime
String ID:
API String ID: 1137671866-0
Opcode ID: 6a66750d7d38e285348c6a4672a5517d432b12a502a6a2b91e6f62eece89d76d
Instruction ID: d3ab300639c02fb914c35945f963d161f95be9e69f8184476bdb2816f00783c7
Opcode Fuzzy Hash: 6a66750d7d38e285348c6a4672a5517d432b12a502a6a2b91e6f62eece89d76d
Instruction Fuzzy Hash: 96A1C363A18A8281EA10DB75D8403ED6371FF85794F405331EA8C87AA9DF3EE548C30E

Function 00007FF6E8DC3980 Relevance: 6.1, APIs: 4, Instructions: 101fileCOMMON

Download Yara Rule

APIs

MoveFileW.KERNEL32 ref: 00007FF6E8DC39BD
MoveFileW.KERNEL32 ref: 00007FF6E8DC3A34
_invalid_parameter_noinfo_noreturn.LIBCMT ref: 00007FF6E8DC3AEB
_invalid_parameter_noinfo_noreturn.LIBCMT ref: 00007FF6E8DC3AF1

Memory Dump Source

Source File: 00000003.00000002.1704265649.00007FF6E8DB1000.00000020.00000001.01000000.00000009.sdmp, Offset: 00007FF6E8DB0000, based on PE: true

Associated: 00000003.00000002.1704240339.00007FF6E8DB0000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.1704351194.00007FF6E8DF8000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.1704386188.00007FF6E8E0B000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.1704386188.00007FF6E8E14000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.1704433121.00007FF6E8E1A000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.1704433121.00007FF6E8E1E000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_7ff6e8db0000_clamer.jbxd

Similarity

API ID: FileMove_invalid_parameter_noinfo_noreturn
String ID:
API String ID: 3823481717-0
Opcode ID: 47dbf0decc8272d9a7ae459b130201949f9107b8ec80fb87a20ec63cf3da1f82
Instruction ID: 3589014b369a3148dd131e440fe0301be93b0173b296be8f424ba58e4b66f611
Opcode Fuzzy Hash: 47dbf0decc8272d9a7ae459b130201949f9107b8ec80fb87a20ec63cf3da1f82
Instruction Fuzzy Hash: 8741AE63F1465184FB00CB76E8442AC2371FB44BA8B105335EE5DAAAAADF3AD459C30D

Function 00007FF6E8DCE948 Relevance: 6.0, APIs: 4, Instructions: 31COMMON

Download Yara Rule

APIs

Part of subcall function 00007FF6E8DCECD8: ResetEvent.KERNEL32 ref: 00007FF6E8DCECF1
Part of subcall function 00007FF6E8DCECD8: ReleaseSemaphore.KERNEL32 ref: 00007FF6E8DCED07

ReleaseSemaphore.KERNEL32 ref: 00007FF6E8DCE974
CloseHandle.KERNEL32 ref: 00007FF6E8DCE993
DeleteCriticalSection.KERNEL32 ref: 00007FF6E8DCE9AA
CloseHandle.KERNEL32 ref: 00007FF6E8DCE9B7

Part of subcall function 00007FF6E8DCEA5C: WaitForSingleObject.KERNEL32(?,?,?,?,?,?,?,?,00007FF6E8DCE95F,?,?,?,00007FF6E8DC463A,?,?,?), ref: 00007FF6E8DCEA63
Part of subcall function 00007FF6E8DCEA5C: GetLastError.KERNEL32(?,?,?,?,?,?,?,?,00007FF6E8DCE95F,?,?,?,00007FF6E8DC463A,?,?,?), ref: 00007FF6E8DCEA6E

Memory Dump Source

Source File: 00000003.00000002.1704265649.00007FF6E8DB1000.00000020.00000001.01000000.00000009.sdmp, Offset: 00007FF6E8DB0000, based on PE: true

Associated: 00000003.00000002.1704240339.00007FF6E8DB0000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.1704351194.00007FF6E8DF8000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.1704386188.00007FF6E8E0B000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.1704386188.00007FF6E8E14000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.1704433121.00007FF6E8E1A000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.1704433121.00007FF6E8E1E000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_7ff6e8db0000_clamer.jbxd

Similarity

API ID: CloseHandleReleaseSemaphore$CriticalDeleteErrorEventLastObjectResetSectionSingleWait
String ID:
API String ID: 502429940-0
Opcode ID: 7c4c69b688bb09167c3d8ec6f4195a818a409db0987586a56ae23aa503e7e0cd
Instruction ID: 80d8a1e26205ca4e12a61ba648aa854385c4605d55f019e5a598a07eafa1b2d7
Opcode Fuzzy Hash: 7c4c69b688bb09167c3d8ec6f4195a818a409db0987586a56ae23aa503e7e0cd
Instruction Fuzzy Hash: BA012D33B14E81A2E6589B31E54476DA320FB84B80F104231DB5D97625CF3AE4B8874A

Function 00007FF6E8DEE1F4 Relevance: 5.4, APIs: 1, Strings: 2, Instructions: 138COMMONLIBRARYCODE

Download Yara Rule

APIs

_invalid_parameter_noinfo.LIBCMT ref: 00007FF6E8DEE237

Strings

gfff, xrefs: 00007FF6E8DEE362
e+000, xrefs: 00007FF6E8DEE2DF

Memory Dump Source

Source File: 00000003.00000002.1704265649.00007FF6E8DB1000.00000020.00000001.01000000.00000009.sdmp, Offset: 00007FF6E8DB0000, based on PE: true

Associated: 00000003.00000002.1704240339.00007FF6E8DB0000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.1704351194.00007FF6E8DF8000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.1704386188.00007FF6E8E0B000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.1704386188.00007FF6E8E14000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.1704433121.00007FF6E8E1A000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.1704433121.00007FF6E8E1E000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_7ff6e8db0000_clamer.jbxd

Similarity

API ID: _invalid_parameter_noinfo
String ID: e+000$gfff
API String ID: 3215553584-3030954782
Opcode ID: ffbcb58cc87a1110f60409a8afde5d08377aab6ce8cf060c3284a5669936e3c2
Instruction ID: 9c53c31f80f11408c795788f13b64a97f6a199c8ee4c1946a889b39232fa19b2
Opcode Fuzzy Hash: ffbcb58cc87a1110f60409a8afde5d08377aab6ce8cf060c3284a5669936e3c2
Instruction Fuzzy Hash: BE51E463F18BC146E7258F35994136DAB95EB81B90F089335C69CC7BD6CF2ED448870A

Function 00007FF6E8DEC2C0 Relevance: 5.4, APIs: 2, Strings: 1, Instructions: 107COMMON

Download Yara Rule

APIs

_invalid_parameter_noinfo.LIBCMT ref: 00007FF6E8DEC2EA
GetModuleFileNameA.KERNEL32(?,?,?,?,?,00007FF6E8DE2CD5), ref: 00007FF6E8DEC30B

Strings

C:\Users\user\AppData\Local\Temp\RarSFX0\clamer.exe, xrefs: 00007FF6E8DEC2F9

Memory Dump Source

Source File: 00000003.00000002.1704265649.00007FF6E8DB1000.00000020.00000001.01000000.00000009.sdmp, Offset: 00007FF6E8DB0000, based on PE: true

Associated: 00000003.00000002.1704240339.00007FF6E8DB0000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.1704351194.00007FF6E8DF8000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.1704386188.00007FF6E8E0B000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.1704386188.00007FF6E8E14000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.1704433121.00007FF6E8E1A000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.1704433121.00007FF6E8E1E000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_7ff6e8db0000_clamer.jbxd

Similarity

API ID: FileModuleName_invalid_parameter_noinfo
String ID: C:\Users\user\AppData\Local\Temp\RarSFX0\clamer.exe
API String ID: 3307058713-2740166974
Opcode ID: 2b307fc7043d57580c2760bc14d10e66149d3294dbd6a1f00798eb6953a6f573
Instruction ID: 0b20195872f9be01effbb5556351e3d23cbff188f77d1edce1d38d22a4d75105
Opcode Fuzzy Hash: 2b307fc7043d57580c2760bc14d10e66149d3294dbd6a1f00798eb6953a6f573
Instruction Fuzzy Hash: BD41BD33E18A428AEB15DF35A8402BCB394EF44794F444232E94E87B45DF3EE449830E

Function 00007FF6E8DE0204 Relevance: 5.3, APIs: 2, Strings: 1, Instructions: 75windowCOMMON

Download Yara Rule

APIs

IsWindowVisible.USER32 ref: 00007FF6E8DE026F
DialogBoxParamW.USER32 ref: 00007FF6E8DE02A4

Strings

GETPASSWORD1, xrefs: 00007FF6E8DE029D

Memory Dump Source

Source File: 00000003.00000002.1704265649.00007FF6E8DB1000.00000020.00000001.01000000.00000009.sdmp, Offset: 00007FF6E8DB0000, based on PE: true

Associated: 00000003.00000002.1704240339.00007FF6E8DB0000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.1704351194.00007FF6E8DF8000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.1704386188.00007FF6E8E0B000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.1704386188.00007FF6E8E14000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.1704433121.00007FF6E8E1A000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.1704433121.00007FF6E8E1E000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_7ff6e8db0000_clamer.jbxd

Similarity

API ID: DialogParamVisibleWindow
String ID: GETPASSWORD1
API String ID: 3157717868-3292211884
Opcode ID: 3689008c5ae976a1f3a242e5b1eb30ef9737a63c20829ff4d7ba5964f065d3d0
Instruction ID: e402d040193c8e1fd69ea227e2f9f60378576aa7bcfad1c1e90587417a837125
Opcode Fuzzy Hash: 3689008c5ae976a1f3a242e5b1eb30ef9737a63c20829ff4d7ba5964f065d3d0
Instruction Fuzzy Hash: E7317367A4D7C681EA008B32A8512B96B60BF46F84F580131D9CD87769CE3EE84CC35E

Function 00007FF6E8DEEB04 Relevance: 5.3, APIs: 2, Strings: 1, Instructions: 70COMMON

Download Yara Rule

APIs

GetStdHandle.KERNEL32 ref: 00007FF6E8DEEB76
GetFileType.KERNEL32 ref: 00007FF6E8DEEB8C

Strings

@, xrefs: 00007FF6E8DEEBB7

Memory Dump Source

Source File: 00000003.00000002.1704265649.00007FF6E8DB1000.00000020.00000001.01000000.00000009.sdmp, Offset: 00007FF6E8DB0000, based on PE: true

Associated: 00000003.00000002.1704240339.00007FF6E8DB0000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.1704351194.00007FF6E8DF8000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.1704386188.00007FF6E8E0B000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.1704386188.00007FF6E8E14000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.1704433121.00007FF6E8E1A000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.1704433121.00007FF6E8E1E000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_7ff6e8db0000_clamer.jbxd

Similarity

API ID: FileHandleType
String ID: @
API String ID: 3000768030-2766056989
Opcode ID: 01c4e23626c5bd34e0d32a71787dfe5976e9b76bf070a7e2fa99837352baeece
Instruction ID: 9a52cb6b3f8766a49c3febf03a51918a7452acd41be99205e3cdda60115782fa
Opcode Fuzzy Hash: 01c4e23626c5bd34e0d32a71787dfe5976e9b76bf070a7e2fa99837352baeece
Instruction Fuzzy Hash: 5D219523E08E9241EB608B359490239B659EB45774F280335D66F877D4CF3ED889D34E

Function 00007FF6E8DCEAA4 Relevance: 5.3, APIs: 2, Strings: 1, Instructions: 42threadCOMMON

Download Yara Rule

APIs

CreateThread.KERNEL32 ref: 00007FF6E8DCEAE0
SetThreadPriority.KERNEL32 ref: 00007FF6E8DCEB36

Strings

CreateThread failed, xrefs: 00007FF6E8DCEAEE

Memory Dump Source

Source File: 00000003.00000002.1704265649.00007FF6E8DB1000.00000020.00000001.01000000.00000009.sdmp, Offset: 00007FF6E8DB0000, based on PE: true

Associated: 00000003.00000002.1704240339.00007FF6E8DB0000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.1704351194.00007FF6E8DF8000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.1704386188.00007FF6E8E0B000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.1704386188.00007FF6E8E14000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.1704433121.00007FF6E8E1A000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.1704433121.00007FF6E8E1E000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_7ff6e8db0000_clamer.jbxd

Similarity

API ID: Thread$CreatePriority
String ID: CreateThread failed
API String ID: 2610526550-3849766595
Opcode ID: cf4f3858e1c5421656891f758a667cd72a6f2059ba57d4f8d940dbc9b5e0f540
Instruction ID: 3d99a9a877b5296f15978b54595cc988c1fdbcf84fcc9697ab675e1089a772d3
Opcode Fuzzy Hash: cf4f3858e1c5421656891f758a667cd72a6f2059ba57d4f8d940dbc9b5e0f540
Instruction Fuzzy Hash: 8E118F33A18A4281EB00DF21E8413B97365FB84784F548331EA8E87669DF3EE599C74D

Function 00007FF6E8DCEA5C Relevance: 5.3, APIs: 2, Strings: 1, Instructions: 16synchronizationCOMMON

Download Yara Rule

APIs

WaitForSingleObject.KERNEL32(?,?,?,?,?,?,?,?,00007FF6E8DCE95F,?,?,?,00007FF6E8DC463A,?,?,?), ref: 00007FF6E8DCEA63
GetLastError.KERNEL32(?,?,?,?,?,?,?,?,00007FF6E8DCE95F,?,?,?,00007FF6E8DC463A,?,?,?), ref: 00007FF6E8DCEA6E

Strings

WaitForMultipleObjects error %d, GetLastError %d, xrefs: 00007FF6E8DCEA78

Memory Dump Source

Source File: 00000003.00000002.1704265649.00007FF6E8DB1000.00000020.00000001.01000000.00000009.sdmp, Offset: 00007FF6E8DB0000, based on PE: true

Associated: 00000003.00000002.1704240339.00007FF6E8DB0000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.1704351194.00007FF6E8DF8000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.1704386188.00007FF6E8E0B000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.1704386188.00007FF6E8E14000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.1704433121.00007FF6E8E1A000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.1704433121.00007FF6E8E1E000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_7ff6e8db0000_clamer.jbxd

Similarity

API ID: ErrorLastObjectSingleWait
String ID: WaitForMultipleObjects error %d, GetLastError %d
API String ID: 1211598281-2248577382
Opcode ID: 98ce5a6e9b01a49333d4d7b683bb298ff4a8e953ba0927a3bf2f7aa8eb90df55
Instruction ID: 5fba3fc8800a115835ab837244ba60be8964b4053426b7486b49389a8026b120
Opcode Fuzzy Hash: 98ce5a6e9b01a49333d4d7b683bb298ff4a8e953ba0927a3bf2f7aa8eb90df55
Instruction Fuzzy Hash: DEE01A63E1984281F600A7319C426B82211BFA4770FA44330E03EC61E59F2EA95D830F

Description:	This technique has been deprecated. Please use Command and Scripting Interpreter where appropriate.
Tactics:	Defense Evasion, Execution
Data Sources:
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may abuse task scheduling functionality to facilitate initial or recurring execution of malicious code. Utilities exist within all major operating systems to schedule programs or scripts to be executed at a specified date and time. A task can also be scheduled on a remote system, provided the proper authentication is met (ex: RPC and file and printer sharing in Windows environments). Scheduling a task on a remote system typically may require being a member of an admin or otherwise privileged group on the remote system.
Tactics:	Execution, Persistence, Privilege Escalation
Data Sources:	Command: Command Execution, Container: Container Creation, File: File Creation, File: File Modification, Process: Process Creation, Scheduled Job: Scheduled Job Creation
Platforms:	Containers, Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may execute their own malicious payloads by side-loading DLLs. Similar to DLL Search Order Hijacking , side-loading involves hijacking which DLL a program loads. But rather than just planting the DLL within the search order of a program then waiting for the victim application to be invoked, adversaries may directly side-load their payloads by planting then invoking a legitimate application that executes their payload(s).
Tactics:	Defense Evasion, Persistence, Privilege Escalation
Data Sources:	File: File Creation, File: File Modification, Module: Module Load, Process: Process Creation
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may exploit software vulnerabilities in an attempt to elevate privileges. Exploitation of a software vulnerability occurs when an adversary takes advantage of a programming error in a program, service, or within the operating system software or kernel itself to execute adversary-controlled code. Security constructs such as permission levels will often hinder access to information and use of certain techniques, so adversaries will likely need to perform privilege escalation to include use of software exploitation to circumvent those restrictions.
Tactics:	Privilege Escalation
Data Sources:	Driver: Driver Load, Process: Process Creation
Platforms:	Containers, Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to manipulate features of their artifacts to make them appear legitimate or benign to users and/or security tools. Masquerading occurs when the name or location of an object, legitimate or malicious, is manipulated or abused for the sake of evading defenses and observation. This may include manipulating file metadata, tricking users into misidentifying the file type, and giving legitimate task or service names.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Metadata, File: File Modification, Image: Image Metadata, Process: OS API Execution, Process: Process Creation, Process: Process Metadata, Scheduled Job: Scheduled Job Metadata, Scheduled Job: Scheduled Job Modification, Service: Service Creation, Service: Service Metadata
Platforms:	Containers, Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ various means to detect and avoid virtualization and analysis environments. This may include changing behaviors based on the results of checks for the presence of artifacts indicative of a virtual machine environment (VME) or sandbox. If the adversary detects a VME, they may alter their malware to disengage from the victim or conceal the core functions of the implant. They may also search for VME artifacts before dropping secondary or additional payloads. Adversaries may use the information learned from [Virtualization/Sandbox Evasion](https://attack.mitre.org/techniques/T1497) during automated discovery to shape follow-on behaviors.
Tactics:	Defense Evasion, Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to make an executable or file difficult to discover or analyze by encrypting, encoding, or otherwise obfuscating its contents on the system or in transit. This is common behavior that can be used across different platforms and the network to evade defenses.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Creation, File: File Metadata, Module: Module Load, Process: OS API Execution, Process: Process Creation, Script: Script Execution, WMI: WMI Creation, Windows Registry: Windows Registry Key Creation
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may perform software packing or virtual machine software protection to conceal their code. Software packing is a method of compressing or encrypting an executable. Packing an executable changes the file signature in an attempt to avoid signature-based detection. Most decompression techniques decompress the executable code in memory. Virtual machine software protection translates an executable's original code into a special format that only a special virtual machine can run. A virtual machine is then called to run this code.
Tactics:	Defense Evasion
Data Sources:	File: File Metadata
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	An adversary may gather the system time and/or time zone from a local or remote system. The system time is set and stored by the Windows Time Service within a domain to maintain time synchronization between systems and services in an enterprise network.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to get a listing of security software, configurations, defensive tools, and sensors that are installed on a system or in a cloud environment. This may include things such as firewall rules and anti-virus. Adversaries may use the information from Security Software Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Firewall: Firewall Enumeration, Firewall: Firewall Metadata, Process: OS API Execution, Process: Process Creation
Platforms:	Azure AD, Google Workspace, IaaS, Linux, macOS, Office 365, SaaS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to get information about running processes on a system. Information obtained could be used to gain an understanding of common software/applications running on systems within the network. Adversaries may use the information from Process Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to identify the primary user, currently logged in user, set of users that commonly uses a system, or whether a user is actively using the system. They may do this, for example, by retrieving account usernames or by using OS Credential Dumping . The information may be collected in a number of different ways using other Discovery techniques, because user and username details are prevalent throughout a system and include running process ownership, file/directory ownership, session information, and system logs. Adversaries may use the information from [System Owner/User Discovery](https://attack.mitre.org/techniques/T1033) during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Active Directory: Active Directory Object Access, Command: Command Execution, File: File Access, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow, Process: OS API Execution, Process: Process Access, Process: Process Creation, Windows Registry: Windows Registry Key Access
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may enumerate files and directories or may search in specific locations of a host or network share for certain information within a file system. Adversaries may use the information from File and Directory Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	An adversary may attempt to get detailed information about the operating system and hardware, including version, patches, hotfixes, service packs, and architecture. Adversaries may use the information from System Information Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	IaaS, Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	An adversary may compress and/or encrypt data that is collected prior to exfiltration. Compressing the data can help to obfuscate the collected data and minimize the amount of data sent over the network. Encryption can be used to hide information that is being exfiltrated from detection or make exfiltration less conspicuous upon inspection by a defender.
Tactics:	Collection
Data Sources:	Command: Command Execution, File: File Creation, Process: Process Creation, Script: Script Execution
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using a protocol and port pairing that are typically not associated. For example, HTTPS over port 8088or port 587as opposed to the traditional port 443. Adversaries may make changes to the standard port used by a protocol to bypass filtering or muddle analysis/parsing of network data.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may encode data to make the content of command and control traffic more difficult to detect. Command and control (C2) information can be encoded using a standard data encoding system. Use of data encoding may adhere to existing protocol specifications and includes use of ASCII, Unicode, Base64, MIME, or other binary-to-text and character encoding systems.Some data encoding systems may also result in data compression, such as gzip.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report b2bXo6vmDm.exe

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Threat Intel

Malware Configuration

Threatname: SystemBC

Yara Signatures

Dropped Files

Memory Dumps

Unpacked PEs

Sigma Signatures

System Summary

Snort Signatures

Suricata Signatures

Joe Sandbox Signatures

AV Detection

Compliance

Spreading

Networking

Spam, unwanted Advertisements and Ransom Demands

System Summary

Data Obfuscation

Persistence and Installation Behavior

Boot Survival

Hooking and other Techniques for Hiding and Protection

Malware Analysis System Evasion

Anti Debugging

HIPS / PFW / Operating System Protection Evasion

Language, Device and Operating System Detection

Stealing of Sensitive Information

Remote Access Functionality

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

World Map of Contacted IPs

Public IPs

General Information

Warnings

Simulations

Behavior and APIs

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

C:\ProgramData\flax\xalhg.exe

C:\Users\user\AppData\Local\Temp\RarSFX0\1.bat

C:\Users\user\AppData\Local\Temp\RarSFX0\clamer.exe

C:\Users\user\AppData\Local\Temp\RarSFX1\thkdh.exe

C:\Windows\Tasks\Test Task17.job

Static File Info

General

File Icon

Static PE Info

General

Entrypoint Preview

Rich Headers

Windows Analysis Report
b2bXo6vmDm.exe

Function 00007FF7FF400754 Relevance: 45.9, APIs: 21, Strings: 5, Instructions: 380
filetimewindowCOMMON

Function 00007FF7FF3EA4AC Relevance: 23.0, APIs: 11, Strings: 2, Instructions: 250
COMMON

Function 00007FF7FF3F8624 Relevance: 19.4, APIs: 10, Strings: 1, Instructions: 101
memorywindowCOMMON

Function 00007FF7FF3E40BC Relevance: 10.7, APIs: 7, Instructions: 153
fileCOMMON

Function 00007FF7FF3EDFD0 Relevance: 143.9, APIs: 16, Strings: 66, Instructions: 440
libraryfileloaderCOMMON

Function 00007FF7FF401900 Relevance: 22.9, APIs: 12, Strings: 1, Instructions: 195
libraryCOMMONLIBRARYCODE

Function 00007FF7FF3FF4E0 Relevance: 21.3, APIs: 8, Strings: 4, Instructions: 285
windowCOMMON

Function 00007FF7FF3FF0A4 Relevance: 16.6, APIs: 11, Instructions: 102
COMMON

Function 00007FF7FF3E24C0 Relevance: 9.2, APIs: 6, Instructions: 164
filetimeCOMMON

Function 00007FF7FF3FFD0C Relevance: 8.8, APIs: 3, Strings: 2, Instructions: 76
COMMON

Function 00007FF7FF3FB014 Relevance: 8.8, APIs: 4, Strings: 1, Instructions: 54
windowCOMMON

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may steal data by exfiltrating it over a different protocol than that of the existing command and control channel. The data may also be sent to an alternate network location from the main command and control server.
Tactics:	Exfiltration
Data Sources:	Application Log: Application Log Content, Cloud Storage: Cloud Storage Access, Command: Command Execution, File: File Access, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Google Workspace, IaaS, Linux, macOS, Network, Office 365, SaaS, Windows
Url:	Open detailed description by Mitre