Edit tour

Windows Analysis Report
zdmZjYqz44.exe

Overview

General Information

Sample name:	zdmZjYqz44.exe renamed because original name is a hash value
Original sample name:	8f0fa4ed608acc49175e9c44125b945b5ca2c31071d33f9f100f51d0a961d737.exe
Analysis ID:	1588784
MD5:	e8ebad39e405d8d702c4fce049b5c31c
SHA1:	bffbedfee8318d0da8d427b0385058506c15a84c
SHA256:	8f0fa4ed608acc49175e9c44125b945b5ca2c31071d33f9f100f51d0a961d737
Tags:	AgentTeslaexeuser-adrian__luca
Infos:

Detection

AgentTesla

Score:	100
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

Antivirus / Scanner detection for submitted sample

Found malware configuration

Malicious sample detected (through community Yara rule)

Multi AV Scanner detection for submitted file

Yara detected AgentTesla

AI detected suspicious sample

Contains functionality to register a low level keyboard hook

Installs a global keyboard hook

Machine Learning detection for sample

Queries sensitive network adapter information (via WMI, Win32_NetworkAdapter, often done to detect virtual machines)

Tries to harvest and steal Putty / WinSCP information (sessions, passwords, etc)

Tries to harvest and steal browser information (history, passwords, etc)

Tries to harvest and steal ftp login credentials

Tries to steal Mail credentials (via file / registry access)

Abnormal high CPU Usage

Allocates memory with a write watch (potentially for evading sandboxes)

Contains long sleeps (>= 3 min)

Creates a window with clipboard capturing capabilities

Detected TCP or UDP traffic on non-standard ports

Detected potential crypto function

Enables debug privileges

Found a high number of Window / User specific system calls (may be a loop to detect user behavior)

IP address seen in connection with other malware

Internet Provider seen in connection with other malware

May sleep (evasive loops) to hinder dynamic analysis

Monitors certain registry keys / values for changes (often done to protect autostart functionality)

Queries sensitive BIOS Information (via WMI, Win32_Bios & Win32_BaseBoard, often done to detect virtual machines)

Queries sensitive processor information (via WMI, Win32_Processor, often done to detect virtual machines)

Queries the volume information (name, serial number etc) of a device

Sample file is different than original file name gathered from version info

Sigma detected: Suspicious Outbound SMTP Connections

Uses 32bit PE files

Uses SMTP (mail sending)

Uses code obfuscation techniques (call, push, ret)

Yara detected Credential Stealer

Yara signature match

Classification

Process Tree

System is w10x64

zdmZjYqz44.exe (PID: 7528 cmdline: "C:\Users\user\Desktop\zdmZjYqz44.exe" MD5: E8EBAD39E405D8D702C4FCE049B5C31C)

cleanup

Malware Threat Intel

Provided by

Name	Description	Attribution	Blogpost URLs	Link
Agent Tesla, AgentTesla	A .NET based information stealer readily available to actors due to leaked builders. The malware is able to log keystrokes, can access the host's clipboard and crawls the disk for credentials or other valuable information. It has the capability to send information back to its C&C via HTTP(S), SMTP, FTP, or towards a Telegram channel.	SWEED	http://blog.nsfocus.net/sweed-611/ http://l1v1ngc0d3.wordpress.com/2021/11/12/agenttesla-dropped-via-nsis-installer/ http://ropgadget.com/posts/originlogger.html http://www.secureworks.com/research/threat-profiles/gold-galleon https://0xmrmagnezi.github.io/malware%20analysis/AgentTesla/	https://malpedia.caad.fkie.fraunhofer.de/details/win.agent_tesla

Malware Configuration

Threatname: Agenttesla

{"Exfil Mode": "SMTP", "Port": "587", "Host": "mail.wapination.net", "Username": "wk@wapination.net", "Password": "Leavemealone@26"}

Yara Signatures

Initial Sample

Source	Rule	Description	Author	Strings
zdmZjYqz44.exe	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
zdmZjYqz44.exe	JoeSecurity_AgentTesla_1	Yara detected AgentTesla	Joe Security
zdmZjYqz44.exe	INDICATOR_SUSPICIOUS_EXE_VaultSchemaGUID	Detects executables referencing Windows vault credential objects. Observed in infostealers	ditekSHen	0x33801:$s1: 2F1A6504-0641-44CF-8BB5-3612D865F2E5 0x33873:$s2: 3CCD5499-87A8-4B10-A215-608888DD3B55 0x338fd:$s3: 154E23D0-C644-4E6F-8CE6-5069272F999F 0x3398f:$s4: 4BF4C442-9B8A-41A0-B380-DD4A704DDB28 0x339f9:$s5: 77BC582B-F0A6-4E15-4E80-61736B6F3B29 0x33a6b:$s6: E69D7838-91B5-4FC9-89D5-230D4D4CC2BC 0x33b01:$s7: 3E0E35BE-1B77-43E7-B873-AED901B6275B 0x33b91:$s8: 3C886FF3-2669-4AA2-A8FB-3F6759A77548

Memory Dumps

Source	Rule	Description	Author
00000000.00000000.1417504257.0000000000542000.00000002.00000001.01000000.00000003.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
00000000.00000000.1417504257.0000000000542000.00000002.00000001.01000000.00000003.sdmp	JoeSecurity_AgentTesla_1	Yara detected AgentTesla	Joe Security
00000000.00000002.3867837132.0000000002991000.00000004.00000800.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
00000000.00000002.3867837132.0000000002991000.00000004.00000800.00020000.00000000.sdmp	JoeSecurity_AgentTesla_1	Yara detected AgentTesla	Joe Security
Process Memory Space: zdmZjYqz44.exe PID: 7528	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
Process Memory Space: zdmZjYqz44.exe PID: 7528	JoeSecurity_AgentTesla_1	Yara detected AgentTesla	Joe Security
Click to see the 1 entries

Unpacked PEs

Source	Rule	Description	Author	Strings
0.0.zdmZjYqz44.exe.540000.0.unpack	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
0.0.zdmZjYqz44.exe.540000.0.unpack	JoeSecurity_AgentTesla_1	Yara detected AgentTesla	Joe Security
0.0.zdmZjYqz44.exe.540000.0.unpack	INDICATOR_SUSPICIOUS_EXE_VaultSchemaGUID	Detects executables referencing Windows vault credential objects. Observed in infostealers	ditekSHen	0x33801:$s1: 2F1A6504-0641-44CF-8BB5-3612D865F2E5 0x33873:$s2: 3CCD5499-87A8-4B10-A215-608888DD3B55 0x338fd:$s3: 154E23D0-C644-4E6F-8CE6-5069272F999F 0x3398f:$s4: 4BF4C442-9B8A-41A0-B380-DD4A704DDB28 0x339f9:$s5: 77BC582B-F0A6-4E15-4E80-61736B6F3B29 0x33a6b:$s6: E69D7838-91B5-4FC9-89D5-230D4D4CC2BC 0x33b01:$s7: 3E0E35BE-1B77-43E7-B873-AED901B6275B 0x33b91:$s8: 3C886FF3-2669-4AA2-A8FB-3F6759A77548

Sigma Signatures

System Summary

Sigma detected: Suspicious Outbound SMTP Connections

Source: Network Connection

Author: frack113: Data: DestinationIp: 108.179.234.136, DestinationIsIpv6: false, DestinationPort: 587, EventID: 3, Image: C:\Users\user\Desktop\zdmZjYqz44.exe, Initiated: true, ProcessId: 7528, Protocol: tcp, SourceIp: 192.168.2.8, SourceIsIpv6: false, SourcePort: 49705

Suricata Signatures

⊘No Suricata rule has matched

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

AV Detection

Antivirus / Scanner detection for submitted sample

Source: zdmZjYqz44.exe

Avira: detected

Found malware configuration

Source: zdmZjYqz44.exe

Malware Configuration Extractor: Agenttesla {"Exfil Mode": "SMTP", "Port": "587", "Host": "mail.wapination.net", "Username": "wk@wapination.net", "Password": "Leavemealone@26"}

Multi AV Scanner detection for submitted file

Source: zdmZjYqz44.exe

ReversingLabs: Detection: 76%

AI detected suspicious sample

Source: Submited Sample

Integrated Neural Analysis Model: Matched 100.0% probability

Machine Learning detection for sample

Source: zdmZjYqz44.exe

Joe Sandbox ML: detected

Source: zdmZjYqz44.exe

Static PE information: EXECUTABLE_IMAGE, 32BIT_MACHINE

Source: zdmZjYqz44.exe

Static PE information: DYNAMIC_BASE, NX_COMPAT, NO_SEH, TERMINAL_SERVER_AWARE

Source: global traffic

TCP traffic: 192.168.2.8:49705 -> 108.179.234.136:587

Source: Joe Sandbox View

IP Address: 108.179.234.136 108.179.234.136

Source: Joe Sandbox View

ASN Name: UNIFIEDLAYER-AS-1US UNIFIEDLAYER-AS-1US

Source: global traffic

TCP traffic: 192.168.2.8:49705 -> 108.179.234.136:587

Source: unknown

UDP traffic detected without corresponding DNS query: 1.1.1.1

Source: global traffic

DNS traffic detected: DNS query: mail.wapination.net

Source: zdmZjYqz44.exe, 00000000.00000002.3867837132.0000000002BCC000.00000004.00000800.00020000.00000000.sdmp, zdmZjYqz44.exe, 00000000.00000002.3867837132.0000000002D8A000.00000004.00000800.00020000.00000000.sdmp, zdmZjYqz44.exe, 00000000.00000002.3867837132.0000000002E03000.00000004.00000800.00020000.00000000.sdmp, zdmZjYqz44.exe, 00000000.00000002.3867837132.0000000002B2B000.00000004.00000800.00020000.00000000.sdmp, zdmZjYqz44.exe, 00000000.00000002.3867837132.0000000002ECE000.00000004.00000800.00020000.00000000.sdmp, zdmZjYqz44.exe, 00000000.00000002.3867837132.0000000002B04000.00000004.00000800.00020000.00000000.sdmp, zdmZjYqz44.exe, 00000000.00000002.3867837132.0000000002CEB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mail.wapination.net
Source: zdmZjYqz44.exe, 00000000.00000002.3873822187.000000000B565000.00000004.00000020.00020000.00000000.sdmp, zdmZjYqz44.exe, 00000000.00000002.3873979359.000000000B588000.00000004.00000020.00020000.00000000.sdmp, zdmZjYqz44.exe, 00000000.00000002.3867837132.0000000002B1F000.00000004.00000800.00020000.00000000.sdmp, zdmZjYqz44.exe, 00000000.00000002.3867837132.0000000002BCC000.00000004.00000800.00020000.00000000.sdmp, zdmZjYqz44.exe, 00000000.00000002.3866470554.0000000000B1D000.00000004.00000020.00020000.00000000.sdmp, zdmZjYqz44.exe, 00000000.00000002.3867837132.0000000002D8A000.00000004.00000800.00020000.00000000.sdmp, zdmZjYqz44.exe, 00000000.00000002.3867837132.0000000002E03000.00000004.00000800.00020000.00000000.sdmp, zdmZjYqz44.exe, 00000000.00000002.3871054262.0000000005DF2000.00000004.00000020.00020000.00000000.sdmp, zdmZjYqz44.exe, 00000000.00000002.3867837132.0000000002B2B000.00000004.00000800.00020000.00000000.sdmp, zdmZjYqz44.exe, 00000000.00000002.3867837132.0000000002ECE000.00000004.00000800.00020000.00000000.sdmp, zdmZjYqz44.exe, 00000000.00000002.3867837132.0000000002A43000.00000004.00000800.00020000.00000000.sdmp, zdmZjYqz44.exe, 00000000.00000002.3866028557.0000000000AA4000.00000004.00000020.00020000.00000000.sdmp, zdmZjYqz44.exe, 00000000.00000002.3867837132.0000000002991000.00000004.00000800.00020000.00000000.sdmp, zdmZjYqz44.exe, 00000000.00000002.3867837132.0000000002CEB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://r10.i.lencr.org/0
Source: zdmZjYqz44.exe, 00000000.00000002.3873822187.000000000B565000.00000004.00000020.00020000.00000000.sdmp, zdmZjYqz44.exe, 00000000.00000002.3873979359.000000000B588000.00000004.00000020.00020000.00000000.sdmp, zdmZjYqz44.exe, 00000000.00000002.3867837132.0000000002B1F000.00000004.00000800.00020000.00000000.sdmp, zdmZjYqz44.exe, 00000000.00000002.3867837132.0000000002BCC000.00000004.00000800.00020000.00000000.sdmp, zdmZjYqz44.exe, 00000000.00000002.3866470554.0000000000B1D000.00000004.00000020.00020000.00000000.sdmp, zdmZjYqz44.exe, 00000000.00000002.3867837132.0000000002D8A000.00000004.00000800.00020000.00000000.sdmp, zdmZjYqz44.exe, 00000000.00000002.3867837132.0000000002E03000.00000004.00000800.00020000.00000000.sdmp, zdmZjYqz44.exe, 00000000.00000002.3871054262.0000000005DF2000.00000004.00000020.00020000.00000000.sdmp, zdmZjYqz44.exe, 00000000.00000002.3867837132.0000000002B2B000.00000004.00000800.00020000.00000000.sdmp, zdmZjYqz44.exe, 00000000.00000002.3867837132.0000000002ECE000.00000004.00000800.00020000.00000000.sdmp, zdmZjYqz44.exe, 00000000.00000002.3867837132.0000000002A43000.00000004.00000800.00020000.00000000.sdmp, zdmZjYqz44.exe, 00000000.00000002.3866028557.0000000000AA4000.00000004.00000020.00020000.00000000.sdmp, zdmZjYqz44.exe, 00000000.00000002.3867837132.0000000002991000.00000004.00000800.00020000.00000000.sdmp, zdmZjYqz44.exe, 00000000.00000002.3867837132.0000000002CEB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://r10.o.lencr.org0#
Source: zdmZjYqz44.exe, 00000000.00000002.3873822187.000000000B565000.00000004.00000020.00020000.00000000.sdmp, zdmZjYqz44.exe, 00000000.00000002.3873979359.000000000B588000.00000004.00000020.00020000.00000000.sdmp, zdmZjYqz44.exe, 00000000.00000002.3867837132.0000000002B1F000.00000004.00000800.00020000.00000000.sdmp, zdmZjYqz44.exe, 00000000.00000002.3867837132.0000000002BCC000.00000004.00000800.00020000.00000000.sdmp, zdmZjYqz44.exe, 00000000.00000002.3866470554.0000000000B1D000.00000004.00000020.00020000.00000000.sdmp, zdmZjYqz44.exe, 00000000.00000002.3867837132.0000000002D8A000.00000004.00000800.00020000.00000000.sdmp, zdmZjYqz44.exe, 00000000.00000002.3867837132.0000000002E03000.00000004.00000800.00020000.00000000.sdmp, zdmZjYqz44.exe, 00000000.00000002.3871054262.0000000005DF2000.00000004.00000020.00020000.00000000.sdmp, zdmZjYqz44.exe, 00000000.00000002.3874044927.000000000B5A1000.00000004.00000020.00020000.00000000.sdmp, zdmZjYqz44.exe, 00000000.00000002.3867837132.0000000002B2B000.00000004.00000800.00020000.00000000.sdmp, zdmZjYqz44.exe, 00000000.00000002.3867837132.0000000002ECE000.00000004.00000800.00020000.00000000.sdmp, zdmZjYqz44.exe, 00000000.00000002.3866028557.0000000000AB1000.00000004.00000020.00020000.00000000.sdmp, zdmZjYqz44.exe, 00000000.00000002.3866028557.0000000000B0E000.00000004.00000020.00020000.00000000.sdmp, zdmZjYqz44.exe, 00000000.00000002.3867837132.0000000002CEB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://x1.c.lencr.org/0
Source: zdmZjYqz44.exe, 00000000.00000002.3873822187.000000000B565000.00000004.00000020.00020000.00000000.sdmp, zdmZjYqz44.exe, 00000000.00000002.3873979359.000000000B588000.00000004.00000020.00020000.00000000.sdmp, zdmZjYqz44.exe, 00000000.00000002.3867837132.0000000002B1F000.00000004.00000800.00020000.00000000.sdmp, zdmZjYqz44.exe, 00000000.00000002.3867837132.0000000002BCC000.00000004.00000800.00020000.00000000.sdmp, zdmZjYqz44.exe, 00000000.00000002.3866470554.0000000000B1D000.00000004.00000020.00020000.00000000.sdmp, zdmZjYqz44.exe, 00000000.00000002.3867837132.0000000002D8A000.00000004.00000800.00020000.00000000.sdmp, zdmZjYqz44.exe, 00000000.00000002.3867837132.0000000002E03000.00000004.00000800.00020000.00000000.sdmp, zdmZjYqz44.exe, 00000000.00000002.3871054262.0000000005DF2000.00000004.00000020.00020000.00000000.sdmp, zdmZjYqz44.exe, 00000000.00000002.3874044927.000000000B5A1000.00000004.00000020.00020000.00000000.sdmp, zdmZjYqz44.exe, 00000000.00000002.3867837132.0000000002B2B000.00000004.00000800.00020000.00000000.sdmp, zdmZjYqz44.exe, 00000000.00000002.3867837132.0000000002ECE000.00000004.00000800.00020000.00000000.sdmp, zdmZjYqz44.exe, 00000000.00000002.3866028557.0000000000AB1000.00000004.00000020.00020000.00000000.sdmp, zdmZjYqz44.exe, 00000000.00000002.3866028557.0000000000B0E000.00000004.00000020.00020000.00000000.sdmp, zdmZjYqz44.exe, 00000000.00000002.3867837132.0000000002CEB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://x1.i.lencr.org/0
Source: zdmZjYqz44.exe	String found in binary or memory: https://account.dyn.com/

Key, Mouse, Clipboard, Microphone and Screen Capturing

Contains functionality to register a low level keyboard hook

Source: C:\Users\user\Desktop\zdmZjYqz44.exe

Code function: 0_2_0613AE40 SetWindowsHookExA 0000000D,00000000,?,?,?,?,?,?,?,?,?,0613B498,00000000,00000000

0_2_0613AE40

Installs a global keyboard hook

Source: C:\Users\user\Desktop\zdmZjYqz44.exe

Windows user hook set: 0 keyboard low level C:\Users\user\Desktop\zdmZjYqz44.exe

Jump to behavior

Source: C:\Users\user\Desktop\zdmZjYqz44.exe

Window created: window name: CLIPBRDWNDCLASS

Jump to behavior

System Summary

Malicious sample detected (through community Yara rule)

Source: zdmZjYqz44.exe, type: SAMPLE	Matched rule: Detects executables referencing Windows vault credential objects. Observed in infostealers Author: ditekSHen
Source: 0.0.zdmZjYqz44.exe.540000.0.unpack, type: UNPACKEDPE	Matched rule: Detects executables referencing Windows vault credential objects. Observed in infostealers Author: ditekSHen

Source: C:\Users\user\Desktop\zdmZjYqz44.exe

Process Stats: CPU usage > 49%

Source: C:\Users\user\Desktop\zdmZjYqz44.exe	Code function: 0_2_00E04230	0_2_00E04230
Source: C:\Users\user\Desktop\zdmZjYqz44.exe	Code function: 0_2_00E04B00	0_2_00E04B00
Source: C:\Users\user\Desktop\zdmZjYqz44.exe	Code function: 0_2_00E03EE8	0_2_00E03EE8
Source: C:\Users\user\Desktop\zdmZjYqz44.exe	Code function: 0_2_00E07CD8	0_2_00E07CD8
Source: C:\Users\user\Desktop\zdmZjYqz44.exe	Code function: 0_2_00E0BE08	0_2_00E0BE08
Source: C:\Users\user\Desktop\zdmZjYqz44.exe	Code function: 0_2_00E0BE18	0_2_00E0BE18
Source: C:\Users\user\Desktop\zdmZjYqz44.exe	Code function: 0_2_05FB0498	0_2_05FB0498
Source: C:\Users\user\Desktop\zdmZjYqz44.exe	Code function: 0_2_05FBA670	0_2_05FBA670
Source: C:\Users\user\Desktop\zdmZjYqz44.exe	Code function: 0_2_05FBBE00	0_2_05FBBE00
Source: C:\Users\user\Desktop\zdmZjYqz44.exe	Code function: 0_2_05FB6020	0_2_05FB6020
Source: C:\Users\user\Desktop\zdmZjYqz44.exe	Code function: 0_2_05FBF2B8	0_2_05FBF2B8
Source: C:\Users\user\Desktop\zdmZjYqz44.exe	Code function: 0_2_05FB3A08	0_2_05FB3A08
Source: C:\Users\user\Desktop\zdmZjYqz44.exe	Code function: 0_2_05FBB720	0_2_05FBB720
Source: C:\Users\user\Desktop\zdmZjYqz44.exe	Code function: 0_2_061304D0	0_2_061304D0
Source: C:\Users\user\Desktop\zdmZjYqz44.exe	Code function: 0_2_061374DC	0_2_061374DC
Source: C:\Users\user\Desktop\zdmZjYqz44.exe	Code function: 0_2_06138071	0_2_06138071
Source: C:\Users\user\Desktop\zdmZjYqz44.exe	Code function: 0_2_061329A8	0_2_061329A8

Source: zdmZjYqz44.exe, 00000000.00000002.3866028557.0000000000A7E000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: OriginalFilenameclr.dllT vs zdmZjYqz44.exe
Source: zdmZjYqz44.exe, 00000000.00000000.1417560616.000000000057E000.00000002.00000001.01000000.00000003.sdmp	Binary or memory string: OriginalFilenamef4ce6eba-27b2-4f42-807a-59a27e751d9c.exe4 vs zdmZjYqz44.exe
Source: zdmZjYqz44.exe, 00000000.00000002.3865800549.0000000000939000.00000004.00000010.00020000.00000000.sdmp	Binary or memory string: OriginalFilenameUNKNOWN_FILET vs zdmZjYqz44.exe
Source: zdmZjYqz44.exe	Binary or memory string: OriginalFilenamef4ce6eba-27b2-4f42-807a-59a27e751d9c.exe4 vs zdmZjYqz44.exe

Source: zdmZjYqz44.exe

Static PE information: EXECUTABLE_IMAGE, 32BIT_MACHINE

Source: zdmZjYqz44.exe, type: SAMPLE	Matched rule: INDICATOR_SUSPICIOUS_EXE_VaultSchemaGUID author = ditekSHen, description = Detects executables referencing Windows vault credential objects. Observed in infostealers
Source: 0.0.zdmZjYqz44.exe.540000.0.unpack, type: UNPACKEDPE	Matched rule: INDICATOR_SUSPICIOUS_EXE_VaultSchemaGUID author = ditekSHen, description = Detects executables referencing Windows vault credential objects. Observed in infostealers

Source: zdmZjYqz44.exe

Binary string: ID: 0x{0:X}qSize of the SerializedPropertyStore is less than 8 ({0})/StoreSize: {0} (0x{0X})3\Device\LanmanRedirector\[Failed to retrieve system handle information.

Source: classification engine

Classification label: mal100.troj.spyw.evad.winEXE@1/0@1/1

Source: C:\Users\user\Desktop\zdmZjYqz44.exe

Mutant created: NULL

Source: zdmZjYqz44.exe

Static PE information: Section: .text IMAGE_SCN_CNT_CODE, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ

Source: zdmZjYqz44.exe

Static file information: TRID: Win32 Executable (generic) Net Framework (10011505/4) 49.80%

Source: C:\Users\user\Desktop\zdmZjYqz44.exe	WMI Queries: IWbemServices::CreateInstanceEnum - root\cimv2 : Win32_Processor
Source: C:\Users\user\Desktop\zdmZjYqz44.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_Processor
Source: C:\Users\user\Desktop\zdmZjYqz44.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_Processor
Source: C:\Users\user\Desktop\zdmZjYqz44.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_Processor
Source: C:\Users\user\Desktop\zdmZjYqz44.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_Processor
Source: C:\Users\user\Desktop\zdmZjYqz44.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_Processor
Source: C:\Users\user\Desktop\zdmZjYqz44.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_Processor
Source: C:\Users\user\Desktop\zdmZjYqz44.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_Processor
Source: C:\Users\user\Desktop\zdmZjYqz44.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_Processor
Source: C:\Users\user\Desktop\zdmZjYqz44.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_Processor
Source: C:\Users\user\Desktop\zdmZjYqz44.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_Processor
Source: C:\Users\user\Desktop\zdmZjYqz44.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_Processor
Source: C:\Users\user\Desktop\zdmZjYqz44.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_Processor
Source: C:\Users\user\Desktop\zdmZjYqz44.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_Processor
Source: C:\Users\user\Desktop\zdmZjYqz44.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_Processor
Source: C:\Users\user\Desktop\zdmZjYqz44.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_Processor
Source: C:\Users\user\Desktop\zdmZjYqz44.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_Processor
Source: C:\Users\user\Desktop\zdmZjYqz44.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_Processor
Source: C:\Users\user\Desktop\zdmZjYqz44.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_Processor
Source: C:\Users\user\Desktop\zdmZjYqz44.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_Processor
Source: C:\Users\user\Desktop\zdmZjYqz44.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_Processor
Source: C:\Users\user\Desktop\zdmZjYqz44.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_Processor
Source: C:\Users\user\Desktop\zdmZjYqz44.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_Processor
Source: C:\Users\user\Desktop\zdmZjYqz44.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_Processor
Source: C:\Users\user\Desktop\zdmZjYqz44.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_Processor
Source: C:\Users\user\Desktop\zdmZjYqz44.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_Processor
Source: C:\Users\user\Desktop\zdmZjYqz44.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_Processor
Source: C:\Users\user\Desktop\zdmZjYqz44.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_Processor
Source: C:\Users\user\Desktop\zdmZjYqz44.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_Processor
Source: C:\Users\user\Desktop\zdmZjYqz44.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_Processor
Source: C:\Users\user\Desktop\zdmZjYqz44.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_Processor
Source: C:\Users\user\Desktop\zdmZjYqz44.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_Processor
Source: C:\Users\user\Desktop\zdmZjYqz44.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_Processor
Source: C:\Users\user\Desktop\zdmZjYqz44.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_Processor
Source: C:\Users\user\Desktop\zdmZjYqz44.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_Processor
Source: C:\Users\user\Desktop\zdmZjYqz44.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_Processor
Source: C:\Users\user\Desktop\zdmZjYqz44.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_Processor
Source: C:\Users\user\Desktop\zdmZjYqz44.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_Processor
Source: C:\Users\user\Desktop\zdmZjYqz44.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_Processor
Source: C:\Users\user\Desktop\zdmZjYqz44.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_Processor
Source: C:\Users\user\Desktop\zdmZjYqz44.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_Processor
Source: C:\Users\user\Desktop\zdmZjYqz44.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_Processor

Source: C:\Users\user\Desktop\zdmZjYqz44.exe

File read: C:\Users\user\AppData\Roaming\Mozilla\Firefox\profiles.ini

Jump to behavior

Source: C:\Users\user\Desktop\zdmZjYqz44.exe

Key opened: HKEY_CURRENT_USER\Software\Policies\Microsoft\Windows\Safer\CodeIdentifiers

Jump to behavior

Source: zdmZjYqz44.exe

ReversingLabs: Detection: 76%

Source: C:\Users\user\Desktop\zdmZjYqz44.exe	Section loaded: mscoree.dll	Jump to behavior
Source: C:\Users\user\Desktop\zdmZjYqz44.exe	Section loaded: apphelp.dll	Jump to behavior
Source: C:\Users\user\Desktop\zdmZjYqz44.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Users\user\Desktop\zdmZjYqz44.exe	Section loaded: version.dll	Jump to behavior
Source: C:\Users\user\Desktop\zdmZjYqz44.exe	Section loaded: vcruntime140_clr0400.dll	Jump to behavior
Source: C:\Users\user\Desktop\zdmZjYqz44.exe	Section loaded: ucrtbase_clr0400.dll	Jump to behavior
Source: C:\Users\user\Desktop\zdmZjYqz44.exe	Section loaded: ucrtbase_clr0400.dll	Jump to behavior
Source: C:\Users\user\Desktop\zdmZjYqz44.exe	Section loaded: uxtheme.dll	Jump to behavior
Source: C:\Users\user\Desktop\zdmZjYqz44.exe	Section loaded: windows.storage.dll	Jump to behavior
Source: C:\Users\user\Desktop\zdmZjYqz44.exe	Section loaded: wldp.dll	Jump to behavior
Source: C:\Users\user\Desktop\zdmZjYqz44.exe	Section loaded: profapi.dll	Jump to behavior
Source: C:\Users\user\Desktop\zdmZjYqz44.exe	Section loaded: cryptsp.dll	Jump to behavior
Source: C:\Users\user\Desktop\zdmZjYqz44.exe	Section loaded: rsaenh.dll	Jump to behavior
Source: C:\Users\user\Desktop\zdmZjYqz44.exe	Section loaded: cryptbase.dll	Jump to behavior
Source: C:\Users\user\Desktop\zdmZjYqz44.exe	Section loaded: wbemcomn.dll	Jump to behavior
Source: C:\Users\user\Desktop\zdmZjYqz44.exe	Section loaded: amsi.dll	Jump to behavior
Source: C:\Users\user\Desktop\zdmZjYqz44.exe	Section loaded: userenv.dll	Jump to behavior
Source: C:\Users\user\Desktop\zdmZjYqz44.exe	Section loaded: sspicli.dll	Jump to behavior
Source: C:\Users\user\Desktop\zdmZjYqz44.exe	Section loaded: textshaping.dll	Jump to behavior
Source: C:\Users\user\Desktop\zdmZjYqz44.exe	Section loaded: textinputframework.dll	Jump to behavior
Source: C:\Users\user\Desktop\zdmZjYqz44.exe	Section loaded: coreuicomponents.dll	Jump to behavior
Source: C:\Users\user\Desktop\zdmZjYqz44.exe	Section loaded: coremessaging.dll	Jump to behavior
Source: C:\Users\user\Desktop\zdmZjYqz44.exe	Section loaded: ntmarta.dll	Jump to behavior
Source: C:\Users\user\Desktop\zdmZjYqz44.exe	Section loaded: wintypes.dll	Jump to behavior
Source: C:\Users\user\Desktop\zdmZjYqz44.exe	Section loaded: wintypes.dll	Jump to behavior
Source: C:\Users\user\Desktop\zdmZjYqz44.exe	Section loaded: wintypes.dll	Jump to behavior
Source: C:\Users\user\Desktop\zdmZjYqz44.exe	Section loaded: vaultcli.dll	Jump to behavior
Source: C:\Users\user\Desktop\zdmZjYqz44.exe	Section loaded: iphlpapi.dll	Jump to behavior
Source: C:\Users\user\Desktop\zdmZjYqz44.exe	Section loaded: dnsapi.dll	Jump to behavior
Source: C:\Users\user\Desktop\zdmZjYqz44.exe	Section loaded: dhcpcsvc6.dll	Jump to behavior
Source: C:\Users\user\Desktop\zdmZjYqz44.exe	Section loaded: dhcpcsvc.dll	Jump to behavior
Source: C:\Users\user\Desktop\zdmZjYqz44.exe	Section loaded: winnsi.dll	Jump to behavior
Source: C:\Users\user\Desktop\zdmZjYqz44.exe	Section loaded: mswsock.dll	Jump to behavior
Source: C:\Users\user\Desktop\zdmZjYqz44.exe	Section loaded: rasadhlp.dll	Jump to behavior
Source: C:\Users\user\Desktop\zdmZjYqz44.exe	Section loaded: fwpuclnt.dll	Jump to behavior
Source: C:\Users\user\Desktop\zdmZjYqz44.exe	Section loaded: secur32.dll	Jump to behavior
Source: C:\Users\user\Desktop\zdmZjYqz44.exe	Section loaded: schannel.dll	Jump to behavior
Source: C:\Users\user\Desktop\zdmZjYqz44.exe	Section loaded: mskeyprotect.dll	Jump to behavior
Source: C:\Users\user\Desktop\zdmZjYqz44.exe	Section loaded: ntasn1.dll	Jump to behavior
Source: C:\Users\user\Desktop\zdmZjYqz44.exe	Section loaded: ncrypt.dll	Jump to behavior
Source: C:\Users\user\Desktop\zdmZjYqz44.exe	Section loaded: ncryptsslp.dll	Jump to behavior
Source: C:\Users\user\Desktop\zdmZjYqz44.exe	Section loaded: msasn1.dll	Jump to behavior
Source: C:\Users\user\Desktop\zdmZjYqz44.exe	Section loaded: edputil.dll	Jump to behavior
Source: C:\Users\user\Desktop\zdmZjYqz44.exe	Section loaded: windowscodecs.dll	Jump to behavior
Source: C:\Users\user\Desktop\zdmZjYqz44.exe	Section loaded: gpapi.dll	Jump to behavior

Source: C:\Users\user\Desktop\zdmZjYqz44.exe

Key value queried: HKEY_LOCAL_MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{CF4CC405-E2C5-4DDD-B3CE-5E7582D8C9FA}\InprocServer32

Jump to behavior

Source: Window Recorder

Window detected: More than 3 window changes detected

Source: C:\Users\user\Desktop\zdmZjYqz44.exe

Key opened: HKEY_CURRENT_USER\Software\Microsoft\Office\11.0\Outlook\Profiles

Jump to behavior

Source: zdmZjYqz44.exe

Static PE information: data directory type: IMAGE_DIRECTORY_ENTRY_COM_DESCRIPTOR

Source: zdmZjYqz44.exe

Static PE information: DYNAMIC_BASE, NX_COMPAT, NO_SEH, TERMINAL_SERVER_AWARE

Source: C:\Users\user\Desktop\zdmZjYqz44.exe	Code function: 0_2_00E0E099 push ds; iretd	0_2_00E0E0A2
Source: C:\Users\user\Desktop\zdmZjYqz44.exe	Code function: 0_2_00E00BDD pushfd ; iretd	0_2_00E00BE2
Source: C:\Users\user\Desktop\zdmZjYqz44.exe	Code function: 0_2_05FB3931 push cs; iretd	0_2_05FB393E
Source: C:\Users\user\Desktop\zdmZjYqz44.exe	Code function: 0_2_06138749 push B2900612h; iretd	0_2_06138756
Source: C:\Users\user\Desktop\zdmZjYqz44.exe	Code function: 0_2_0613225D push cs; ret	0_2_0613225E

Source: C:\Users\user\Desktop\zdmZjYqz44.exe

Registry key monitored for changes: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\AutoUpdate

Jump to behavior

Source: C:\Users\user\Desktop\zdmZjYqz44.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\zdmZjYqz44.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\zdmZjYqz44.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\zdmZjYqz44.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\zdmZjYqz44.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\zdmZjYqz44.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\zdmZjYqz44.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\zdmZjYqz44.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\zdmZjYqz44.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\zdmZjYqz44.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\zdmZjYqz44.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\zdmZjYqz44.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\zdmZjYqz44.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\zdmZjYqz44.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\zdmZjYqz44.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\zdmZjYqz44.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\zdmZjYqz44.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\zdmZjYqz44.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\zdmZjYqz44.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\zdmZjYqz44.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\zdmZjYqz44.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\zdmZjYqz44.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\zdmZjYqz44.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\zdmZjYqz44.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\zdmZjYqz44.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\zdmZjYqz44.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\zdmZjYqz44.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\zdmZjYqz44.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\zdmZjYqz44.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\zdmZjYqz44.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\zdmZjYqz44.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\zdmZjYqz44.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\zdmZjYqz44.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\zdmZjYqz44.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\zdmZjYqz44.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\zdmZjYqz44.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\zdmZjYqz44.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\zdmZjYqz44.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\zdmZjYqz44.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\zdmZjYqz44.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\zdmZjYqz44.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\zdmZjYqz44.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\zdmZjYqz44.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\zdmZjYqz44.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\zdmZjYqz44.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\zdmZjYqz44.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\zdmZjYqz44.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\zdmZjYqz44.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\zdmZjYqz44.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\zdmZjYqz44.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\zdmZjYqz44.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\zdmZjYqz44.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\zdmZjYqz44.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\zdmZjYqz44.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\zdmZjYqz44.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\zdmZjYqz44.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\zdmZjYqz44.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\zdmZjYqz44.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\zdmZjYqz44.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\zdmZjYqz44.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\zdmZjYqz44.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\zdmZjYqz44.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior

Malware Analysis System Evasion

Queries sensitive network adapter information (via WMI, Win32_NetworkAdapter, often done to detect virtual machines)

Source: C:\Users\user\Desktop\zdmZjYqz44.exe

WMI Queries: IWbemServices::CreateInstanceEnum - root\cimv2 : Win32_NetworkAdapterConfiguration

Source: C:\Users\user\Desktop\zdmZjYqz44.exe	Memory allocated: E00000 memory reserve \| memory write watch	Jump to behavior
Source: C:\Users\user\Desktop\zdmZjYqz44.exe	Memory allocated: 2990000 memory reserve \| memory write watch	Jump to behavior
Source: C:\Users\user\Desktop\zdmZjYqz44.exe	Memory allocated: F80000 memory reserve \| memory write watch	Jump to behavior

Source: C:\Users\user\Desktop\zdmZjYqz44.exe	Thread delayed: delay time: 922337203685477	Jump to behavior
Source: C:\Users\user\Desktop\zdmZjYqz44.exe	Thread delayed: delay time: 1200000	Jump to behavior
Source: C:\Users\user\Desktop\zdmZjYqz44.exe	Thread delayed: delay time: 1199844	Jump to behavior
Source: C:\Users\user\Desktop\zdmZjYqz44.exe	Thread delayed: delay time: 1199734	Jump to behavior
Source: C:\Users\user\Desktop\zdmZjYqz44.exe	Thread delayed: delay time: 1199625	Jump to behavior
Source: C:\Users\user\Desktop\zdmZjYqz44.exe	Thread delayed: delay time: 1199516	Jump to behavior
Source: C:\Users\user\Desktop\zdmZjYqz44.exe	Thread delayed: delay time: 1199391	Jump to behavior
Source: C:\Users\user\Desktop\zdmZjYqz44.exe	Thread delayed: delay time: 1199266	Jump to behavior
Source: C:\Users\user\Desktop\zdmZjYqz44.exe	Thread delayed: delay time: 1199156	Jump to behavior
Source: C:\Users\user\Desktop\zdmZjYqz44.exe	Thread delayed: delay time: 1199047	Jump to behavior
Source: C:\Users\user\Desktop\zdmZjYqz44.exe	Thread delayed: delay time: 1198938	Jump to behavior
Source: C:\Users\user\Desktop\zdmZjYqz44.exe	Thread delayed: delay time: 1198813	Jump to behavior
Source: C:\Users\user\Desktop\zdmZjYqz44.exe	Thread delayed: delay time: 1198695	Jump to behavior
Source: C:\Users\user\Desktop\zdmZjYqz44.exe	Thread delayed: delay time: 1198578	Jump to behavior
Source: C:\Users\user\Desktop\zdmZjYqz44.exe	Thread delayed: delay time: 1198469	Jump to behavior
Source: C:\Users\user\Desktop\zdmZjYqz44.exe	Thread delayed: delay time: 1198360	Jump to behavior
Source: C:\Users\user\Desktop\zdmZjYqz44.exe	Thread delayed: delay time: 1198235	Jump to behavior
Source: C:\Users\user\Desktop\zdmZjYqz44.exe	Thread delayed: delay time: 1198124	Jump to behavior
Source: C:\Users\user\Desktop\zdmZjYqz44.exe	Thread delayed: delay time: 1198000	Jump to behavior
Source: C:\Users\user\Desktop\zdmZjYqz44.exe	Thread delayed: delay time: 1197891	Jump to behavior
Source: C:\Users\user\Desktop\zdmZjYqz44.exe	Thread delayed: delay time: 1197781	Jump to behavior
Source: C:\Users\user\Desktop\zdmZjYqz44.exe	Thread delayed: delay time: 1197672	Jump to behavior
Source: C:\Users\user\Desktop\zdmZjYqz44.exe	Thread delayed: delay time: 1197535	Jump to behavior
Source: C:\Users\user\Desktop\zdmZjYqz44.exe	Thread delayed: delay time: 1197391	Jump to behavior
Source: C:\Users\user\Desktop\zdmZjYqz44.exe	Thread delayed: delay time: 1197266	Jump to behavior
Source: C:\Users\user\Desktop\zdmZjYqz44.exe	Thread delayed: delay time: 1197141	Jump to behavior
Source: C:\Users\user\Desktop\zdmZjYqz44.exe	Thread delayed: delay time: 1197031	Jump to behavior
Source: C:\Users\user\Desktop\zdmZjYqz44.exe	Thread delayed: delay time: 1196922	Jump to behavior
Source: C:\Users\user\Desktop\zdmZjYqz44.exe	Thread delayed: delay time: 1196813	Jump to behavior
Source: C:\Users\user\Desktop\zdmZjYqz44.exe	Thread delayed: delay time: 1196688	Jump to behavior
Source: C:\Users\user\Desktop\zdmZjYqz44.exe	Thread delayed: delay time: 1196563	Jump to behavior

Source: C:\Users\user\Desktop\zdmZjYqz44.exe	Window / User API: threadDelayed 1620			Jump to behavior
Source: C:\Users\user\Desktop\zdmZjYqz44.exe	Window / User API: threadDelayed 8220			Jump to behavior

Source: C:\Users\user\Desktop\zdmZjYqz44.exe TID: 7720	Thread sleep time: -32281802128991695s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\zdmZjYqz44.exe TID: 7720	Thread sleep time: -100000s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\zdmZjYqz44.exe TID: 7720	Thread sleep time: -99875s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\zdmZjYqz44.exe TID: 7720	Thread sleep time: -99765s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\zdmZjYqz44.exe TID: 7720	Thread sleep time: -99656s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\zdmZjYqz44.exe TID: 7720	Thread sleep time: -99547s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\zdmZjYqz44.exe TID: 7720	Thread sleep time: -99437s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\zdmZjYqz44.exe TID: 7720	Thread sleep time: -99328s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\zdmZjYqz44.exe TID: 7720	Thread sleep time: -99219s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\zdmZjYqz44.exe TID: 7720	Thread sleep time: -99109s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\zdmZjYqz44.exe TID: 7720	Thread sleep time: -99000s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\zdmZjYqz44.exe TID: 7720	Thread sleep time: -98890s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\zdmZjYqz44.exe TID: 7720	Thread sleep time: -98781s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\zdmZjYqz44.exe TID: 7720	Thread sleep time: -98672s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\zdmZjYqz44.exe TID: 7720	Thread sleep time: -98562s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\zdmZjYqz44.exe TID: 7720	Thread sleep time: -98453s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\zdmZjYqz44.exe TID: 7720	Thread sleep time: -98343s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\zdmZjYqz44.exe TID: 7720	Thread sleep time: -98234s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\zdmZjYqz44.exe TID: 7720	Thread sleep time: -98124s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\zdmZjYqz44.exe TID: 7720	Thread sleep time: -97984s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\zdmZjYqz44.exe TID: 7720	Thread sleep time: -97871s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\zdmZjYqz44.exe TID: 7720	Thread sleep time: -97741s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\zdmZjYqz44.exe TID: 7720	Thread sleep time: -1200000s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\zdmZjYqz44.exe TID: 7720	Thread sleep time: -1199844s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\zdmZjYqz44.exe TID: 7720	Thread sleep time: -1199734s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\zdmZjYqz44.exe TID: 7720	Thread sleep time: -1199625s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\zdmZjYqz44.exe TID: 7720	Thread sleep time: -1199516s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\zdmZjYqz44.exe TID: 7720	Thread sleep time: -1199391s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\zdmZjYqz44.exe TID: 7720	Thread sleep time: -1199266s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\zdmZjYqz44.exe TID: 7720	Thread sleep time: -1199156s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\zdmZjYqz44.exe TID: 7720	Thread sleep time: -1199047s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\zdmZjYqz44.exe TID: 7720	Thread sleep time: -1198938s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\zdmZjYqz44.exe TID: 7720	Thread sleep time: -1198813s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\zdmZjYqz44.exe TID: 7720	Thread sleep time: -1198695s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\zdmZjYqz44.exe TID: 7720	Thread sleep time: -1198578s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\zdmZjYqz44.exe TID: 7720	Thread sleep time: -1198469s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\zdmZjYqz44.exe TID: 7720	Thread sleep time: -1198360s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\zdmZjYqz44.exe TID: 7720	Thread sleep time: -1198235s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\zdmZjYqz44.exe TID: 7720	Thread sleep time: -1198124s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\zdmZjYqz44.exe TID: 7720	Thread sleep time: -1198000s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\zdmZjYqz44.exe TID: 7720	Thread sleep time: -1197891s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\zdmZjYqz44.exe TID: 7720	Thread sleep time: -1197781s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\zdmZjYqz44.exe TID: 7720	Thread sleep time: -1197672s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\zdmZjYqz44.exe TID: 7720	Thread sleep time: -1197535s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\zdmZjYqz44.exe TID: 7720	Thread sleep time: -1197391s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\zdmZjYqz44.exe TID: 7720	Thread sleep time: -1197266s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\zdmZjYqz44.exe TID: 7720	Thread sleep time: -1197141s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\zdmZjYqz44.exe TID: 7720	Thread sleep time: -1197031s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\zdmZjYqz44.exe TID: 7720	Thread sleep time: -1196922s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\zdmZjYqz44.exe TID: 7720	Thread sleep time: -1196813s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\zdmZjYqz44.exe TID: 7720	Thread sleep time: -1196688s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\zdmZjYqz44.exe TID: 7720	Thread sleep time: -1196563s >= -30000s	Jump to behavior

Source: C:\Users\user\Desktop\zdmZjYqz44.exe

WMI Queries: IWbemServices::CreateInstanceEnum - root\cimv2 : Win32_BaseBoard

Source: C:\Users\user\Desktop\zdmZjYqz44.exe	WMI Queries: IWbemServices::CreateInstanceEnum - root\cimv2 : Win32_Processor
Source: C:\Users\user\Desktop\zdmZjYqz44.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_Processor
Source: C:\Users\user\Desktop\zdmZjYqz44.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_Processor
Source: C:\Users\user\Desktop\zdmZjYqz44.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_Processor
Source: C:\Users\user\Desktop\zdmZjYqz44.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_Processor
Source: C:\Users\user\Desktop\zdmZjYqz44.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_Processor
Source: C:\Users\user\Desktop\zdmZjYqz44.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_Processor
Source: C:\Users\user\Desktop\zdmZjYqz44.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_Processor
Source: C:\Users\user\Desktop\zdmZjYqz44.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_Processor
Source: C:\Users\user\Desktop\zdmZjYqz44.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_Processor
Source: C:\Users\user\Desktop\zdmZjYqz44.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_Processor
Source: C:\Users\user\Desktop\zdmZjYqz44.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_Processor
Source: C:\Users\user\Desktop\zdmZjYqz44.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_Processor
Source: C:\Users\user\Desktop\zdmZjYqz44.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_Processor
Source: C:\Users\user\Desktop\zdmZjYqz44.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_Processor
Source: C:\Users\user\Desktop\zdmZjYqz44.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_Processor
Source: C:\Users\user\Desktop\zdmZjYqz44.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_Processor
Source: C:\Users\user\Desktop\zdmZjYqz44.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_Processor
Source: C:\Users\user\Desktop\zdmZjYqz44.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_Processor
Source: C:\Users\user\Desktop\zdmZjYqz44.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_Processor
Source: C:\Users\user\Desktop\zdmZjYqz44.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_Processor
Source: C:\Users\user\Desktop\zdmZjYqz44.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_Processor
Source: C:\Users\user\Desktop\zdmZjYqz44.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_Processor
Source: C:\Users\user\Desktop\zdmZjYqz44.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_Processor
Source: C:\Users\user\Desktop\zdmZjYqz44.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_Processor
Source: C:\Users\user\Desktop\zdmZjYqz44.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_Processor
Source: C:\Users\user\Desktop\zdmZjYqz44.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_Processor
Source: C:\Users\user\Desktop\zdmZjYqz44.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_Processor
Source: C:\Users\user\Desktop\zdmZjYqz44.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_Processor
Source: C:\Users\user\Desktop\zdmZjYqz44.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_Processor
Source: C:\Users\user\Desktop\zdmZjYqz44.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_Processor
Source: C:\Users\user\Desktop\zdmZjYqz44.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_Processor
Source: C:\Users\user\Desktop\zdmZjYqz44.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_Processor
Source: C:\Users\user\Desktop\zdmZjYqz44.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_Processor
Source: C:\Users\user\Desktop\zdmZjYqz44.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_Processor
Source: C:\Users\user\Desktop\zdmZjYqz44.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_Processor
Source: C:\Users\user\Desktop\zdmZjYqz44.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_Processor
Source: C:\Users\user\Desktop\zdmZjYqz44.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_Processor
Source: C:\Users\user\Desktop\zdmZjYqz44.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_Processor
Source: C:\Users\user\Desktop\zdmZjYqz44.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_Processor
Source: C:\Users\user\Desktop\zdmZjYqz44.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_Processor
Source: C:\Users\user\Desktop\zdmZjYqz44.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_Processor

Source: C:\Users\user\Desktop\zdmZjYqz44.exe	Thread delayed: delay time: 922337203685477	Jump to behavior
Source: C:\Users\user\Desktop\zdmZjYqz44.exe	Thread delayed: delay time: 100000	Jump to behavior
Source: C:\Users\user\Desktop\zdmZjYqz44.exe	Thread delayed: delay time: 99875	Jump to behavior
Source: C:\Users\user\Desktop\zdmZjYqz44.exe	Thread delayed: delay time: 99765	Jump to behavior
Source: C:\Users\user\Desktop\zdmZjYqz44.exe	Thread delayed: delay time: 99656	Jump to behavior
Source: C:\Users\user\Desktop\zdmZjYqz44.exe	Thread delayed: delay time: 99547	Jump to behavior
Source: C:\Users\user\Desktop\zdmZjYqz44.exe	Thread delayed: delay time: 99437	Jump to behavior
Source: C:\Users\user\Desktop\zdmZjYqz44.exe	Thread delayed: delay time: 99328	Jump to behavior
Source: C:\Users\user\Desktop\zdmZjYqz44.exe	Thread delayed: delay time: 99219	Jump to behavior
Source: C:\Users\user\Desktop\zdmZjYqz44.exe	Thread delayed: delay time: 99109	Jump to behavior
Source: C:\Users\user\Desktop\zdmZjYqz44.exe	Thread delayed: delay time: 99000	Jump to behavior
Source: C:\Users\user\Desktop\zdmZjYqz44.exe	Thread delayed: delay time: 98890	Jump to behavior
Source: C:\Users\user\Desktop\zdmZjYqz44.exe	Thread delayed: delay time: 98781	Jump to behavior
Source: C:\Users\user\Desktop\zdmZjYqz44.exe	Thread delayed: delay time: 98672	Jump to behavior
Source: C:\Users\user\Desktop\zdmZjYqz44.exe	Thread delayed: delay time: 98562	Jump to behavior
Source: C:\Users\user\Desktop\zdmZjYqz44.exe	Thread delayed: delay time: 98453	Jump to behavior
Source: C:\Users\user\Desktop\zdmZjYqz44.exe	Thread delayed: delay time: 98343	Jump to behavior
Source: C:\Users\user\Desktop\zdmZjYqz44.exe	Thread delayed: delay time: 98234	Jump to behavior
Source: C:\Users\user\Desktop\zdmZjYqz44.exe	Thread delayed: delay time: 98124	Jump to behavior
Source: C:\Users\user\Desktop\zdmZjYqz44.exe	Thread delayed: delay time: 97984	Jump to behavior
Source: C:\Users\user\Desktop\zdmZjYqz44.exe	Thread delayed: delay time: 97871	Jump to behavior
Source: C:\Users\user\Desktop\zdmZjYqz44.exe	Thread delayed: delay time: 97741	Jump to behavior
Source: C:\Users\user\Desktop\zdmZjYqz44.exe	Thread delayed: delay time: 1200000	Jump to behavior
Source: C:\Users\user\Desktop\zdmZjYqz44.exe	Thread delayed: delay time: 1199844	Jump to behavior
Source: C:\Users\user\Desktop\zdmZjYqz44.exe	Thread delayed: delay time: 1199734	Jump to behavior
Source: C:\Users\user\Desktop\zdmZjYqz44.exe	Thread delayed: delay time: 1199625	Jump to behavior
Source: C:\Users\user\Desktop\zdmZjYqz44.exe	Thread delayed: delay time: 1199516	Jump to behavior
Source: C:\Users\user\Desktop\zdmZjYqz44.exe	Thread delayed: delay time: 1199391	Jump to behavior
Source: C:\Users\user\Desktop\zdmZjYqz44.exe	Thread delayed: delay time: 1199266	Jump to behavior
Source: C:\Users\user\Desktop\zdmZjYqz44.exe	Thread delayed: delay time: 1199156	Jump to behavior
Source: C:\Users\user\Desktop\zdmZjYqz44.exe	Thread delayed: delay time: 1199047	Jump to behavior
Source: C:\Users\user\Desktop\zdmZjYqz44.exe	Thread delayed: delay time: 1198938	Jump to behavior
Source: C:\Users\user\Desktop\zdmZjYqz44.exe	Thread delayed: delay time: 1198813	Jump to behavior
Source: C:\Users\user\Desktop\zdmZjYqz44.exe	Thread delayed: delay time: 1198695	Jump to behavior
Source: C:\Users\user\Desktop\zdmZjYqz44.exe	Thread delayed: delay time: 1198578	Jump to behavior
Source: C:\Users\user\Desktop\zdmZjYqz44.exe	Thread delayed: delay time: 1198469	Jump to behavior
Source: C:\Users\user\Desktop\zdmZjYqz44.exe	Thread delayed: delay time: 1198360	Jump to behavior
Source: C:\Users\user\Desktop\zdmZjYqz44.exe	Thread delayed: delay time: 1198235	Jump to behavior
Source: C:\Users\user\Desktop\zdmZjYqz44.exe	Thread delayed: delay time: 1198124	Jump to behavior
Source: C:\Users\user\Desktop\zdmZjYqz44.exe	Thread delayed: delay time: 1198000	Jump to behavior
Source: C:\Users\user\Desktop\zdmZjYqz44.exe	Thread delayed: delay time: 1197891	Jump to behavior
Source: C:\Users\user\Desktop\zdmZjYqz44.exe	Thread delayed: delay time: 1197781	Jump to behavior
Source: C:\Users\user\Desktop\zdmZjYqz44.exe	Thread delayed: delay time: 1197672	Jump to behavior
Source: C:\Users\user\Desktop\zdmZjYqz44.exe	Thread delayed: delay time: 1197535	Jump to behavior
Source: C:\Users\user\Desktop\zdmZjYqz44.exe	Thread delayed: delay time: 1197391	Jump to behavior
Source: C:\Users\user\Desktop\zdmZjYqz44.exe	Thread delayed: delay time: 1197266	Jump to behavior
Source: C:\Users\user\Desktop\zdmZjYqz44.exe	Thread delayed: delay time: 1197141	Jump to behavior
Source: C:\Users\user\Desktop\zdmZjYqz44.exe	Thread delayed: delay time: 1197031	Jump to behavior
Source: C:\Users\user\Desktop\zdmZjYqz44.exe	Thread delayed: delay time: 1196922	Jump to behavior
Source: C:\Users\user\Desktop\zdmZjYqz44.exe	Thread delayed: delay time: 1196813	Jump to behavior
Source: C:\Users\user\Desktop\zdmZjYqz44.exe	Thread delayed: delay time: 1196688	Jump to behavior
Source: C:\Users\user\Desktop\zdmZjYqz44.exe	Thread delayed: delay time: 1196563	Jump to behavior

Source: zdmZjYqz44.exe, 00000000.00000002.3867837132.0000000002F66000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: sqEmud
Source: zdmZjYqz44.exe, 00000000.00000002.3871054262.0000000005DF2000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: Hyper-V RAW%SystemRoot%\system32\mswsock.dll

Source: C:\Users\user\Desktop\zdmZjYqz44.exe

Process information queried: ProcessInformation

Jump to behavior

Source: C:\Users\user\Desktop\zdmZjYqz44.exe

Process token adjusted: Debug

Jump to behavior

Source: C:\Users\user\Desktop\zdmZjYqz44.exe

Memory allocated: page read and write | page guard

Jump to behavior

Source: C:\Users\user\Desktop\zdmZjYqz44.exe	Queries volume information: C:\Users\user\Desktop\zdmZjYqz44.exe VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\zdmZjYqz44.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_MSIL\System.Windows.Forms\v4.0_4.0.0.0__b77a5c561934e089\System.Windows.Forms.dll VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\zdmZjYqz44.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_MSIL\System.Drawing\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Drawing.dll VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\zdmZjYqz44.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_MSIL\System.Security\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Security.dll VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\zdmZjYqz44.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_MSIL\Microsoft.VisualBasic\v4.0_10.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.dll VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\zdmZjYqz44.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_MSIL\Accessibility\v4.0_4.0.0.0__b03f5f7f11d50a3a\Accessibility.dll VolumeInformation	Jump to behavior

Source: C:\Users\user\Desktop\zdmZjYqz44.exe

Key value queried: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Cryptography MachineGuid

Jump to behavior

Stealing of Sensitive Information

Yara detected AgentTesla

Source: Yara match	File source: zdmZjYqz44.exe, type: SAMPLE
Source: Yara match	File source: 0.0.zdmZjYqz44.exe.540000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 00000000.00000000.1417504257.0000000000542000.00000002.00000001.01000000.00000003.sdmp, type: MEMORY
Source: Yara match	File source: 00000000.00000002.3867837132.0000000002991000.00000004.00000800.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: Process Memory Space: zdmZjYqz44.exe PID: 7528, type: MEMORYSTR

Tries to harvest and steal Putty / WinSCP information (sessions, passwords, etc)

Source: C:\Users\user\Desktop\zdmZjYqz44.exe

Key opened: HKEY_CURRENT_USER\SOFTWARE\Martin Prikryl\WinSCP 2\Sessions

Jump to behavior

Tries to harvest and steal browser information (history, passwords, etc)

Source: C:\Users\user\Desktop\zdmZjYqz44.exe	File opened: C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Login Data	Jump to behavior
Source: C:\Users\user\Desktop\zdmZjYqz44.exe	File opened: C:\Users\user\AppData\Roaming\8pecxstudios\Cyberfox\profiles.ini	Jump to behavior
Source: C:\Users\user\Desktop\zdmZjYqz44.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\profiles.ini	Jump to behavior
Source: C:\Users\user\Desktop\zdmZjYqz44.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Login Data	Jump to behavior
Source: C:\Users\user\Desktop\zdmZjYqz44.exe	File opened: C:\Users\user\AppData\Roaming\NETGATE Technologies\BlackHawk\profiles.ini	Jump to behavior

Tries to harvest and steal ftp login credentials

Source: C:\Users\user\Desktop\zdmZjYqz44.exe

File opened: C:\FTP Navigator\Ftplist.txt

Jump to behavior

Tries to steal Mail credentials (via file / registry access)

Source: C:\Users\user\Desktop\zdmZjYqz44.exe	File opened: C:\Users\user\AppData\Roaming\Thunderbird\profiles.ini	Jump to behavior
Source: C:\Users\user\Desktop\zdmZjYqz44.exe	File opened: C:\Users\user\AppData\Roaming\Thunderbird\profiles.ini	Jump to behavior
Source: C:\Users\user\Desktop\zdmZjYqz44.exe	Key opened: HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles	Jump to behavior
Source: C:\Users\user\Desktop\zdmZjYqz44.exe	Key opened: HKEY_CURRENT_USER\Software\IncrediMail\Identities	Jump to behavior

Source: Yara match	File source: zdmZjYqz44.exe, type: SAMPLE
Source: Yara match	File source: 0.0.zdmZjYqz44.exe.540000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 00000000.00000000.1417504257.0000000000542000.00000002.00000001.01000000.00000003.sdmp, type: MEMORY
Source: Yara match	File source: 00000000.00000002.3867837132.0000000002991000.00000004.00000800.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: Process Memory Space: zdmZjYqz44.exe PID: 7528, type: MEMORYSTR

Remote Access Functionality

Yara detected AgentTesla

Source: Yara match	File source: zdmZjYqz44.exe, type: SAMPLE
Source: Yara match	File source: 0.0.zdmZjYqz44.exe.540000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 00000000.00000000.1417504257.0000000000542000.00000002.00000001.01000000.00000003.sdmp, type: MEMORY
Source: Yara match	File source: 00000000.00000002.3867837132.0000000002991000.00000004.00000800.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: Process Memory Space: zdmZjYqz44.exe PID: 7528, type: MEMORYSTR

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	121 Windows Management Instrumentation	1 DLL Side-Loading	1 DLL Side-Loading	1 Disable or Modify Tools	2 OS Credential Dumping	1 Query Registry	Remote Services	1 Email Collection	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	Boot or Logon Initialization Scripts	141 Virtualization/Sandbox Evasion	21 Input Capture	111 Security Software Discovery	Remote Desktop Protocol	21 Input Capture	1 Non-Standard Port	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	1 Obfuscated Files or Information	1 Credentials in Registry	1 Process Discovery	SMB/Windows Admin Shares	1 Archive Collected Data	1 Non-Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	1 DLL Side-Loading	NTDS	141 Virtualization/Sandbox Evasion	Distributed Component Object Model	2 Data from Local System	11 Application Layer Protocol	Traffic Duplication	Data Destruction
Gather Victim Network Information	Server	Cloud Accounts	Launchd	Network Logon Script	Network Logon Script	Software Packing	LSA Secrets	1 Application Window Discovery	SSH	1 Clipboard Data	Fallback Channels	Scheduled Transfer	Data Encrypted for Impact
Domain Properties	Botnet	Replication Through Removable Media	Scheduled Task	RC Scripts	RC Scripts	Steganography	Cached Domain Credentials	1 File and Directory Discovery	VNC	GUI Input Capture	Multiband Communication	Data Transfer Size Limits	Service Stop
DNS	Web Services	External Remote Services	Systemd Timers	Startup Items	Startup Items	Compile After Delivery	DCSync	24 System Information Discovery	Windows Remote Management	Web Portal Capture	Commonly Used Port	Exfiltration Over C2 Channel	Inhibit System Recovery

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Source	Detection	Scanner	Label
zdmZjYqz44.exe	76%	ReversingLabs	ByteCode-MSIL.Trojan.AgentTesla
zdmZjYqz44.exe	100%	Avira	TR/Spy.Gen8
zdmZjYqz44.exe	100%	Joe Sandbox ML

Source	Detection	Scanner	Label	Link
http://mail.wapination.net	0%	Avira URL Cloud	safe

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Antivirus Detection	Reputation
mail.wapination.net	108.179.234.136	true	true		unknown

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
http://r10.o.lencr.org0#	zdmZjYqz44.exe, 00000000.00000002.3873822187.000000000B565000.00000004.00000020.00020000.00000000.sdmp, zdmZjYqz44.exe, 00000000.00000002.3873979359.000000000B588000.00000004.00000020.00020000.00000000.sdmp, zdmZjYqz44.exe, 00000000.00000002.3867837132.0000000002B1F000.00000004.00000800.00020000.00000000.sdmp, zdmZjYqz44.exe, 00000000.00000002.3867837132.0000000002BCC000.00000004.00000800.00020000.00000000.sdmp, zdmZjYqz44.exe, 00000000.00000002.3866470554.0000000000B1D000.00000004.00000020.00020000.00000000.sdmp, zdmZjYqz44.exe, 00000000.00000002.3867837132.0000000002D8A000.00000004.00000800.00020000.00000000.sdmp, zdmZjYqz44.exe, 00000000.00000002.3867837132.0000000002E03000.00000004.00000800.00020000.00000000.sdmp, zdmZjYqz44.exe, 00000000.00000002.3871054262.0000000005DF2000.00000004.00000020.00020000.00000000.sdmp, zdmZjYqz44.exe, 00000000.00000002.3867837132.0000000002B2B000.00000004.00000800.00020000.00000000.sdmp, zdmZjYqz44.exe, 00000000.00000002.3867837132.0000000002ECE000.00000004.00000800.00020000.00000000.sdmp, zdmZjYqz44.exe, 00000000.00000002.3867837132.0000000002A43000.00000004.00000800.00020000.00000000.sdmp, zdmZjYqz44.exe, 00000000.00000002.3866028557.0000000000AA4000.00000004.00000020.00020000.00000000.sdmp, zdmZjYqz44.exe, 00000000.00000002.3867837132.0000000002991000.00000004.00000800.00020000.00000000.sdmp, zdmZjYqz44.exe, 00000000.00000002.3867837132.0000000002CEB000.00000004.00000800.00020000.00000000.sdmp	false		high
https://account.dyn.com/	zdmZjYqz44.exe	false		high
http://mail.wapination.net	zdmZjYqz44.exe, 00000000.00000002.3867837132.0000000002BCC000.00000004.00000800.00020000.00000000.sdmp, zdmZjYqz44.exe, 00000000.00000002.3867837132.0000000002D8A000.00000004.00000800.00020000.00000000.sdmp, zdmZjYqz44.exe, 00000000.00000002.3867837132.0000000002E03000.00000004.00000800.00020000.00000000.sdmp, zdmZjYqz44.exe, 00000000.00000002.3867837132.0000000002B2B000.00000004.00000800.00020000.00000000.sdmp, zdmZjYqz44.exe, 00000000.00000002.3867837132.0000000002ECE000.00000004.00000800.00020000.00000000.sdmp, zdmZjYqz44.exe, 00000000.00000002.3867837132.0000000002B04000.00000004.00000800.00020000.00000000.sdmp, zdmZjYqz44.exe, 00000000.00000002.3867837132.0000000002CEB000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://x1.c.lencr.org/0	zdmZjYqz44.exe, 00000000.00000002.3873822187.000000000B565000.00000004.00000020.00020000.00000000.sdmp, zdmZjYqz44.exe, 00000000.00000002.3873979359.000000000B588000.00000004.00000020.00020000.00000000.sdmp, zdmZjYqz44.exe, 00000000.00000002.3867837132.0000000002B1F000.00000004.00000800.00020000.00000000.sdmp, zdmZjYqz44.exe, 00000000.00000002.3867837132.0000000002BCC000.00000004.00000800.00020000.00000000.sdmp, zdmZjYqz44.exe, 00000000.00000002.3866470554.0000000000B1D000.00000004.00000020.00020000.00000000.sdmp, zdmZjYqz44.exe, 00000000.00000002.3867837132.0000000002D8A000.00000004.00000800.00020000.00000000.sdmp, zdmZjYqz44.exe, 00000000.00000002.3867837132.0000000002E03000.00000004.00000800.00020000.00000000.sdmp, zdmZjYqz44.exe, 00000000.00000002.3871054262.0000000005DF2000.00000004.00000020.00020000.00000000.sdmp, zdmZjYqz44.exe, 00000000.00000002.3874044927.000000000B5A1000.00000004.00000020.00020000.00000000.sdmp, zdmZjYqz44.exe, 00000000.00000002.3867837132.0000000002B2B000.00000004.00000800.00020000.00000000.sdmp, zdmZjYqz44.exe, 00000000.00000002.3867837132.0000000002ECE000.00000004.00000800.00020000.00000000.sdmp, zdmZjYqz44.exe, 00000000.00000002.3866028557.0000000000AB1000.00000004.00000020.00020000.00000000.sdmp, zdmZjYqz44.exe, 00000000.00000002.3866028557.0000000000B0E000.00000004.00000020.00020000.00000000.sdmp, zdmZjYqz44.exe, 00000000.00000002.3867837132.0000000002CEB000.00000004.00000800.00020000.00000000.sdmp	false		high
http://x1.i.lencr.org/0	zdmZjYqz44.exe, 00000000.00000002.3873822187.000000000B565000.00000004.00000020.00020000.00000000.sdmp, zdmZjYqz44.exe, 00000000.00000002.3873979359.000000000B588000.00000004.00000020.00020000.00000000.sdmp, zdmZjYqz44.exe, 00000000.00000002.3867837132.0000000002B1F000.00000004.00000800.00020000.00000000.sdmp, zdmZjYqz44.exe, 00000000.00000002.3867837132.0000000002BCC000.00000004.00000800.00020000.00000000.sdmp, zdmZjYqz44.exe, 00000000.00000002.3866470554.0000000000B1D000.00000004.00000020.00020000.00000000.sdmp, zdmZjYqz44.exe, 00000000.00000002.3867837132.0000000002D8A000.00000004.00000800.00020000.00000000.sdmp, zdmZjYqz44.exe, 00000000.00000002.3867837132.0000000002E03000.00000004.00000800.00020000.00000000.sdmp, zdmZjYqz44.exe, 00000000.00000002.3871054262.0000000005DF2000.00000004.00000020.00020000.00000000.sdmp, zdmZjYqz44.exe, 00000000.00000002.3874044927.000000000B5A1000.00000004.00000020.00020000.00000000.sdmp, zdmZjYqz44.exe, 00000000.00000002.3867837132.0000000002B2B000.00000004.00000800.00020000.00000000.sdmp, zdmZjYqz44.exe, 00000000.00000002.3867837132.0000000002ECE000.00000004.00000800.00020000.00000000.sdmp, zdmZjYqz44.exe, 00000000.00000002.3866028557.0000000000AB1000.00000004.00000020.00020000.00000000.sdmp, zdmZjYqz44.exe, 00000000.00000002.3866028557.0000000000B0E000.00000004.00000020.00020000.00000000.sdmp, zdmZjYqz44.exe, 00000000.00000002.3867837132.0000000002CEB000.00000004.00000800.00020000.00000000.sdmp	false		high
http://r10.i.lencr.org/0	zdmZjYqz44.exe, 00000000.00000002.3873822187.000000000B565000.00000004.00000020.00020000.00000000.sdmp, zdmZjYqz44.exe, 00000000.00000002.3873979359.000000000B588000.00000004.00000020.00020000.00000000.sdmp, zdmZjYqz44.exe, 00000000.00000002.3867837132.0000000002B1F000.00000004.00000800.00020000.00000000.sdmp, zdmZjYqz44.exe, 00000000.00000002.3867837132.0000000002BCC000.00000004.00000800.00020000.00000000.sdmp, zdmZjYqz44.exe, 00000000.00000002.3866470554.0000000000B1D000.00000004.00000020.00020000.00000000.sdmp, zdmZjYqz44.exe, 00000000.00000002.3867837132.0000000002D8A000.00000004.00000800.00020000.00000000.sdmp, zdmZjYqz44.exe, 00000000.00000002.3867837132.0000000002E03000.00000004.00000800.00020000.00000000.sdmp, zdmZjYqz44.exe, 00000000.00000002.3871054262.0000000005DF2000.00000004.00000020.00020000.00000000.sdmp, zdmZjYqz44.exe, 00000000.00000002.3867837132.0000000002B2B000.00000004.00000800.00020000.00000000.sdmp, zdmZjYqz44.exe, 00000000.00000002.3867837132.0000000002ECE000.00000004.00000800.00020000.00000000.sdmp, zdmZjYqz44.exe, 00000000.00000002.3867837132.0000000002A43000.00000004.00000800.00020000.00000000.sdmp, zdmZjYqz44.exe, 00000000.00000002.3866028557.0000000000AA4000.00000004.00000020.00020000.00000000.sdmp, zdmZjYqz44.exe, 00000000.00000002.3867837132.0000000002991000.00000004.00000800.00020000.00000000.sdmp, zdmZjYqz44.exe, 00000000.00000002.3867837132.0000000002CEB000.00000004.00000800.00020000.00000000.sdmp	false		high

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	Flag	ASN	ASN Name	Malicious
108.179.234.136	mail.wapination.net	United States		46606	UNIFIEDLAYER-AS-1US	true

General Information

Joe Sandbox version:	42.0.0 Malachite
Analysis ID:	1588784
Start date and time:	2025-01-11 05:27:53 +01:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 6m 34s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	default.jbs
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	6
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Sample name:	zdmZjYqz44.exe renamed because original name is a hash value
Original Sample Name:	8f0fa4ed608acc49175e9c44125b945b5ca2c31071d33f9f100f51d0a961d737.exe
Detection:	MAL
Classification:	mal100.troj.spyw.evad.winEXE@1/0@1/1
EGA Information:	Successful, ratio: 100%
HCA Information:	Successful, ratio: 100% Number of executed functions: 79 Number of non-executed functions: 5
Cookbook Comments:	Found application associated with file extension: .exe Override analysis time to 240000 for current running targets taking high CPU consumption

Warnings

Exclude process from analysis (whitelisted): MpCmdRun.exe, dllhost.exe, WMIADAP.exe, SIHClient.exe, conhost.exe
Excluded IPs from analysis (whitelisted): 52.149.20.212
Excluded domains from analysis (whitelisted): ocsp.digicert.com, slscr.update.microsoft.com, ctldl.windowsupdate.com, fe3cr.delivery.mp.microsoft.com
Not all processes where analyzed, report is missing behavior information
Report size getting too big, too many NtOpenKeyEx calls found.
Report size getting too big, too many NtProtectVirtualMemory calls found.
Report size getting too big, too many NtQueryValueKey calls found.
Report size getting too big, too many NtReadVirtualMemory calls found.
VT rate limit hit for: zdmZjYqz44.exe

Simulations

Behavior and APIs

Time	Type	Description
23:28:55	API Interceptor	10272886x Sleep call for process: zdmZjYqz44.exe modified

Joe Sandbox View / Context

IPs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link
108.179.234.136	Po-AD841.exe	Get hash	malicious	AgentTesla	Browse
	DHL Shipping Documents 0016229753_PDF.exe	Get hash	malicious	AgentTesla	Browse
	95cc26903867ce68cb392ca3fe5ad21e371b8b6b2f1540137d0c6d26e9ca69c7_dump.exe	Get hash	malicious	AgentTesla, PureLog Stealer	Browse
	Shipping Documents_pdf.exe	Get hash	malicious	AgentTesla, PureLog Stealer	Browse
	SecuriteInfo.com.Win32.PWSX-gen.20769.7015.exe	Get hash	malicious	AgentTesla	Browse
	SecuriteInfo.com.Win32.PWSX-gen.12152.17697.exe	Get hash	malicious	AgentTesla	Browse
	Shipping Documents_pdf.scr.exe	Get hash	malicious	AgentTesla	Browse
	Quotation_#432768#_pdf.scr.exe	Get hash	malicious	AgentTesla, PureLog Stealer	Browse
	Payment Advice Copy-EUR 5500,00 20240419165413-docx.pif.exe	Get hash	malicious	AgentTesla, PureLog Stealer	Browse
	Payment_Advice-pdf.exe	Get hash	malicious	AgentTesla, PureLog Stealer, RedLine	Browse

Domains

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
mail.wapination.net	Po-AD841.exe	Get hash	malicious	AgentTesla	Browse	108.179.234.136

ASNs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
UNIFIEDLAYER-AS-1US	ZeAX5i7cGB.exe	Get hash	malicious	AgentTesla, PureLog Stealer	Browse	50.87.139.143
	iNFGd6bDZX.exe	Get hash	malicious	AgentTesla	Browse	192.254.225.136
	RHOqJ5BrHW.exe	Get hash	malicious	AgentTesla	Browse	162.241.62.63
	ru52XOQ1p7.exe	Get hash	malicious	AgentTesla	Browse	192.254.186.165
	28uMwHvbTD.exe	Get hash	malicious	AgentTesla	Browse	162.241.62.63
	https://atpscan.global.hornetsecurity.com/?d=W3rdHn1Og9hhUJnVJzqWF36wMmxswAZldvtx3E21ybg&f=v8m9AqGfgV2Ri7cjqmfsuyl2V2Mu_lVW0BRsqcFw4upagWAQ1C-MqANvN6gf4zNV&i=&k=xREg&m=b_ORYMkPffImCXbCPli-aiR7Ga6rGe55sar2xtigCL4MrowDPSzt7ABKETTGxzegakAfoZ57KD02aVix8V8TVmZ2VcxzjeybXYrPiS2SB73LCKYktj5jv2aw6VcPRslz&n=s4crRkyHC4bab6S3yrgn1E3n-VmdqgfSqNiaCJyPrf6hnyL_SE4PHEo5SUcwwsFGV6rnB35iQFM5FLsE91obvZ0HTAEiqHnB8ROLzY5JVgg&r=oMs_cp4DXIjeQhcPWsPLyR3_oxBVUN4Iok_tSVE4DNNtzqeot7ZzvdXkh4vatwpC&s=bd82eb507a358fd35f72f18b86e67f3bfc1ce64bbeab0c01d700897b1b678efb&u=https%3A%2F%2Fe.trustifi.com%2F%23%2Ffff2af%2F32054d%2F67960f%2Fee6fed%2F5d1d11%2F46c760%2Ff79190%2Fc5ec40%2Fe8666a%2Fef542d%2F85972d%2F627493%2F9a11d6%2F1f4096%2F1d247f%2F818e78%2Fc53383%2Fd59aa0%2Fedfa57%2F7914c7%2Fc38cf6%2Ff74f56%2Ff45915%2F39dbbd%2Ff48710%2F1ddf22%2F37d5f2%2F9de9f7%2F96109e%2F882355%2F854b66%2F9d606d%2F2d0447%2Fad3b01%2F637d1c%2F3c0f2b%2F606f48%2Fa6d904%2F8fefe3%2F00a4bb%2F6520c6%2F9b795c%2Fb7de1a%2Fb5dde6%2F3f5692%2F997c7d%2Fc00925%2F782cce%2F511459%2Fab5aa8%2F91722a%2Feec933%2F3f4f91%2F894088%2F43adfa%2Fb78195%2F0407d0%2F56f022%2Fddf20e%2F946567%2Faa271a%2F507b7a%2Faccd06%2F50d63c%2F485c4b%2F07ced8%2Fd0ec21%2F260ce6%2Fb5edbb%2F79a81e%2F1fd160%2Ff4da41%2F7073e0%2F8a5e9a%2Fdac829%2F521e52%2Fa1a847%2F13ea63%2Fabb5a3%2Fe1901e%2Fd876f6%2F7b0bf4%2Fbd19df%2F89bdcd%2F1874d8%2F0fb7f3%2F72f438%2Fa098c5%2F4e2214%2F4b6e54%2F0c4a8f	Get hash	malicious	HTMLPhisher	Browse	162.241.149.91
	https://atpscan.global.hornetsecurity.com/?d=W3rdHn1Og9hhUJnVJzqWF36wMmxswAZldvtx3E21ybg&f=v8m9AqGfgV2Ri7cjqmfsuyl2V2Mu_lVW0BRsqcFw4upagWAQ1C-MqANvN6gf4zNV&i=&k=xREg&m=b_ORYMkPffImCXbCPli-aiR7Ga6rGe55sar2xtigCL4MrowDPSzt7ABKETTGxzegakAfoZ57KD02aVix8V8TVmZ2VcxzjeybXYrPiS2SB73LCKYktj5jv2aw6VcPRslz&n=s4crRkyHC4bab6S3yrgn1E3n-VmdqgfSqNiaCJyPrf6hnyL_SE4PHEo5SUcwwsFGV6rnB35iQFM5FLsE91obvZ0HTAEiqHnB8ROLzY5JVgg&r=oMs_cp4DXIjeQhcPWsPLyR3_oxBVUN4Iok_tSVE4DNNtzqeot7ZzvdXkh4vatwpC&s=bd82eb507a358fd35f72f18b86e67f3bfc1ce64bbeab0c01d700897b1b678efb&u=https%3A%2F%2Fe.trustifi.com%2F%23%2Ffff2af%2F32054d%2F67960f%2Fee6fed%2F5d1d11%2F46c760%2Ff79190%2Fc5ec40%2Fe8666a%2Fef542d%2F85972d%2F627493%2F9a11d6%2F1f4096%2F1d247f%2F818e78%2Fc53383%2Fd59aa0%2Fedfa57%2F7914c7%2Fc38cf6%2Ff74f56%2Ff45915%2F39dbbd%2Ff48710%2F1ddf22%2F37d5f2%2F9de9f7%2F96109e%2F882355%2F854b66%2F9d606d%2F2d0447%2Fad3b01%2F637d1c%2F3c0f2b%2F606f48%2Fa6d904%2F8fefe3%2F00a4bb%2F6520c6%2F9b795c%2Fb7de1a%2Fb5dde6%2F3f5692%2F997c7d%2Fc00925%2F782cce%2F511459%2Fab5aa8%2F91722a%2Feec933%2F3f4f91%2F894088%2F43adfa%2Fb78195%2F0407d0%2F56f022%2Fddf20e%2F946567%2Faa271a%2F507b7a%2Faccd06%2F50d63c%2F485c4b%2F07ced8%2Fd0ec21%2F260ce6%2Fb5edbb%2F79a81e%2F1fd160%2Ff4da41%2F7073e0%2F8a5e9a%2Fdac829%2F521e52%2Fa1a847%2F13ea63%2Fabb5a3%2Fe1901e%2Fd876f6%2F7b0bf4%2Fbd19df%2F89bdcd%2F1874d8%2F0fb7f3%2F72f438%2Fa098c5%2F4e2214%2F4b6e54%2F0c4a8f	Get hash	malicious	HTMLPhisher	Browse	162.241.149.91
	Bontrageroutdoors_Project_Update_202557516.pdf	Get hash	malicious	Unknown	Browse	108.179.241.236
	e4Iw3lwFJ5.exe	Get hash	malicious	AgentTesla	Browse	162.241.62.63
	https://probashkontho.com/work/Organization/privacy/index_.html	Get hash	malicious	Unknown	Browse	192.185.57.31

File type:	PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows
Entropy (8bit):	5.001163558038953
TrID:	Win32 Executable (generic) Net Framework (10011505/4) 49.80% Win32 Executable (generic) a (10002005/4) 49.75% Generic CIL Executable (.NET, Mono, etc.) (73296/58) 0.36% Windows Screen Saver (13104/52) 0.07% Generic Win/DOS Executable (2004/3) 0.01%
File name:	zdmZjYqz44.exe
File size:	241'152 bytes
MD5:	e8ebad39e405d8d702c4fce049b5c31c
SHA1:	bffbedfee8318d0da8d427b0385058506c15a84c
SHA256:	8f0fa4ed608acc49175e9c44125b945b5ca2c31071d33f9f100f51d0a961d737
SHA512:	7f10bcbbbeb52d7469fe71c50ce0dc9e5aa5c61d66ba6ad0091b52079fcd627f089bee96b9b7a224c5b298c48d0ac742928dfbd7bfe1d7555e2f93784c18c59e
SSDEEP:	3072:cvXgsY8wUeEWxjX8M837k+OEGsX/CPRqsJ5A0BEI0f:cfgsY8w/EWxj8MkD8UaJqslBh
TLSH:	E734FD037E88EB15E1A83D3792EF2D2417B2B0C70633D60B6F49AF5618516866C7E72D
File Content Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......PE..L....)nf............................n.... ........@.. ....................... ............@................................

File Icon


Icon Hash:	00928e8e8686b000

Static PE Info

General

Entrypoint:	0x43c26e
Entrypoint Section:	.text
Digitally signed:	false
Imagebase:	0x400000
Subsystem:	windows gui
Image File Characteristics:	EXECUTABLE_IMAGE, 32BIT_MACHINE
DLL Characteristics:	DYNAMIC_BASE, NX_COMPAT, NO_SEH, TERMINAL_SERVER_AWARE
Time Stamp:	0x666E29F0 [Sat Jun 15 23:55:28 2024 UTC]
TLS Callbacks:
CLR (.Net) Version:
OS Version Major:	4
OS Version Minor:	0
File Version Major:	4
File Version Minor:	0
Subsystem Version Major:	4
Subsystem Version Minor:	0
Import Hash:	f34d5f2d4577ed6d9ceec516c1f5a744

Entrypoint Preview

Instruction
jmp dword ptr [00402000h]
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al

Data Directories

Name	Virtual Address	Virtual Size	Is in Section
IMAGE_DIRECTORY_ENTRY_EXPORT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_IMPORT	0x3c21c	0x4f	.text
IMAGE_DIRECTORY_ENTRY_RESOURCE	0x3e000	0x546	.rsrc
IMAGE_DIRECTORY_ENTRY_EXCEPTION	0x0	0x0
IMAGE_DIRECTORY_ENTRY_SECURITY	0x0	0x0
IMAGE_DIRECTORY_ENTRY_BASERELOC	0x40000	0xc	.reloc
IMAGE_DIRECTORY_ENTRY_DEBUG	0x0	0x0
IMAGE_DIRECTORY_ENTRY_COPYRIGHT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_GLOBALPTR	0x0	0x0
IMAGE_DIRECTORY_ENTRY_TLS	0x0	0x0
IMAGE_DIRECTORY_ENTRY_LOAD_CONFIG	0x0	0x0
IMAGE_DIRECTORY_ENTRY_BOUND_IMPORT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_IAT	0x2000	0x8	.text
IMAGE_DIRECTORY_ENTRY_DELAY_IMPORT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_COM_DESCRIPTOR	0x2008	0x48	.text
IMAGE_DIRECTORY_ENTRY_RESERVED	0x0	0x0

Sections

Name	Virtual Address	Virtual Size	Raw Size	MD5	Xored PE	ZLIB Complexity	File Type	Entropy	Characteristics
.text	0x2000	0x3a274	0x3a400	195c079419dc36dae7569e14bd3e62ae	False	0.3571326783798283	data	5.012557573805123	IMAGE_SCN_CNT_CODE, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ
.rsrc	0x3e000	0x546	0x600	411bb69bcf3bf8c26828988da188c02c	False	0.400390625	data	3.998385202719987	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_READ
.reloc	0x40000	0xc	0x200	8274f993a480bb3c10563c1b17369cda	False	0.044921875	data	0.10191042566270775	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_DISCARDABLE, IMAGE_SCN_MEM_READ

Resources

Name	RVA	Size	Type	Language	Country	ZLIB Complexity
RT_VERSION	0x3e0a0	0x2bc	data			0.43857142857142856
RT_MANIFEST	0x3e35c	0x1ea	XML 1.0 document, Unicode text, UTF-8 (with BOM) text, with CRLF line terminators			0.5469387755102041

Imports

DLL	Import
mscoree.dll	_CorExeMain

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Jan 11, 2025 05:28:56.772679090 CET	49705	587	192.168.2.8	108.179.234.136
Jan 11, 2025 05:28:56.777734995 CET	587	49705	108.179.234.136	192.168.2.8
Jan 11, 2025 05:28:56.777805090 CET	49705	587	192.168.2.8	108.179.234.136
Jan 11, 2025 05:28:57.284774065 CET	587	49705	108.179.234.136	192.168.2.8
Jan 11, 2025 05:28:57.285696030 CET	49705	587	192.168.2.8	108.179.234.136
Jan 11, 2025 05:28:57.291568995 CET	587	49705	108.179.234.136	192.168.2.8
Jan 11, 2025 05:28:57.397438049 CET	587	49705	108.179.234.136	192.168.2.8
Jan 11, 2025 05:28:57.397645950 CET	49705	587	192.168.2.8	108.179.234.136
Jan 11, 2025 05:28:57.402515888 CET	587	49705	108.179.234.136	192.168.2.8
Jan 11, 2025 05:28:57.510670900 CET	587	49705	108.179.234.136	192.168.2.8
Jan 11, 2025 05:28:57.520358086 CET	49705	587	192.168.2.8	108.179.234.136
Jan 11, 2025 05:28:57.525271893 CET	587	49705	108.179.234.136	192.168.2.8
Jan 11, 2025 05:28:57.643465996 CET	587	49705	108.179.234.136	192.168.2.8
Jan 11, 2025 05:28:57.643487930 CET	587	49705	108.179.234.136	192.168.2.8
Jan 11, 2025 05:28:57.643505096 CET	587	49705	108.179.234.136	192.168.2.8
Jan 11, 2025 05:28:57.643579960 CET	49705	587	192.168.2.8	108.179.234.136
Jan 11, 2025 05:28:57.685442924 CET	49705	587	192.168.2.8	108.179.234.136
Jan 11, 2025 05:28:57.690234900 CET	587	49705	108.179.234.136	192.168.2.8
Jan 11, 2025 05:28:57.797549963 CET	587	49705	108.179.234.136	192.168.2.8
Jan 11, 2025 05:28:57.816847086 CET	49705	587	192.168.2.8	108.179.234.136
Jan 11, 2025 05:28:57.821685076 CET	587	49705	108.179.234.136	192.168.2.8
Jan 11, 2025 05:28:57.928329945 CET	587	49705	108.179.234.136	192.168.2.8
Jan 11, 2025 05:28:57.929557085 CET	49705	587	192.168.2.8	108.179.234.136
Jan 11, 2025 05:28:57.934932947 CET	587	49705	108.179.234.136	192.168.2.8
Jan 11, 2025 05:28:58.057776928 CET	587	49705	108.179.234.136	192.168.2.8
Jan 11, 2025 05:28:58.058926105 CET	49705	587	192.168.2.8	108.179.234.136
Jan 11, 2025 05:28:58.063729048 CET	587	49705	108.179.234.136	192.168.2.8
Jan 11, 2025 05:28:58.291039944 CET	587	49705	108.179.234.136	192.168.2.8
Jan 11, 2025 05:28:58.291352034 CET	49705	587	192.168.2.8	108.179.234.136
Jan 11, 2025 05:28:58.296173096 CET	587	49705	108.179.234.136	192.168.2.8
Jan 11, 2025 05:28:58.403381109 CET	587	49705	108.179.234.136	192.168.2.8
Jan 11, 2025 05:28:58.406783104 CET	49705	587	192.168.2.8	108.179.234.136
Jan 11, 2025 05:28:58.411628008 CET	587	49705	108.179.234.136	192.168.2.8
Jan 11, 2025 05:28:58.527638912 CET	587	49705	108.179.234.136	192.168.2.8
Jan 11, 2025 05:28:58.530489922 CET	49705	587	192.168.2.8	108.179.234.136
Jan 11, 2025 05:28:58.535336971 CET	587	49705	108.179.234.136	192.168.2.8
Jan 11, 2025 05:28:58.641881943 CET	587	49705	108.179.234.136	192.168.2.8
Jan 11, 2025 05:28:58.649009943 CET	49705	587	192.168.2.8	108.179.234.136
Jan 11, 2025 05:28:58.653407097 CET	49705	587	192.168.2.8	108.179.234.136
Jan 11, 2025 05:28:58.653425932 CET	49705	587	192.168.2.8	108.179.234.136
Jan 11, 2025 05:28:58.653460979 CET	49705	587	192.168.2.8	108.179.234.136
Jan 11, 2025 05:28:58.653784037 CET	587	49705	108.179.234.136	192.168.2.8
Jan 11, 2025 05:28:58.658246040 CET	587	49705	108.179.234.136	192.168.2.8
Jan 11, 2025 05:28:58.658382893 CET	587	49705	108.179.234.136	192.168.2.8
Jan 11, 2025 05:28:58.658396006 CET	587	49705	108.179.234.136	192.168.2.8
Jan 11, 2025 05:28:58.780653000 CET	587	49705	108.179.234.136	192.168.2.8
Jan 11, 2025 05:28:58.834054947 CET	49705	587	192.168.2.8	108.179.234.136
Jan 11, 2025 05:30:24.805821896 CET	49705	587	192.168.2.8	108.179.234.136
Jan 11, 2025 05:30:24.811319113 CET	587	49705	108.179.234.136	192.168.2.8
Jan 11, 2025 05:30:24.917798042 CET	587	49705	108.179.234.136	192.168.2.8
Jan 11, 2025 05:30:24.925421000 CET	49705	587	192.168.2.8	108.179.234.136
Jan 11, 2025 05:30:24.926853895 CET	49711	587	192.168.2.8	108.179.234.136
Jan 11, 2025 05:30:24.931740999 CET	587	49711	108.179.234.136	192.168.2.8
Jan 11, 2025 05:30:24.934458017 CET	49711	587	192.168.2.8	108.179.234.136
Jan 11, 2025 05:30:25.460222006 CET	587	49711	108.179.234.136	192.168.2.8
Jan 11, 2025 05:30:25.460422993 CET	49711	587	192.168.2.8	108.179.234.136
Jan 11, 2025 05:30:25.465265989 CET	587	49711	108.179.234.136	192.168.2.8
Jan 11, 2025 05:30:25.571384907 CET	587	49711	108.179.234.136	192.168.2.8
Jan 11, 2025 05:30:25.571594954 CET	49711	587	192.168.2.8	108.179.234.136
Jan 11, 2025 05:30:25.576494932 CET	587	49711	108.179.234.136	192.168.2.8
Jan 11, 2025 05:30:25.685120106 CET	587	49711	108.179.234.136	192.168.2.8
Jan 11, 2025 05:30:25.685672045 CET	49711	587	192.168.2.8	108.179.234.136
Jan 11, 2025 05:30:25.690527916 CET	587	49711	108.179.234.136	192.168.2.8
Jan 11, 2025 05:30:25.803668022 CET	587	49711	108.179.234.136	192.168.2.8
Jan 11, 2025 05:30:25.803692102 CET	587	49711	108.179.234.136	192.168.2.8
Jan 11, 2025 05:30:25.803700924 CET	587	49711	108.179.234.136	192.168.2.8
Jan 11, 2025 05:30:25.803711891 CET	587	49711	108.179.234.136	192.168.2.8
Jan 11, 2025 05:30:25.803776026 CET	49711	587	192.168.2.8	108.179.234.136
Jan 11, 2025 05:30:25.803776026 CET	49711	587	192.168.2.8	108.179.234.136
Jan 11, 2025 05:30:25.809911013 CET	49711	587	192.168.2.8	108.179.234.136
Jan 11, 2025 05:30:25.814785957 CET	587	49711	108.179.234.136	192.168.2.8
Jan 11, 2025 05:30:25.921041965 CET	587	49711	108.179.234.136	192.168.2.8
Jan 11, 2025 05:30:25.925246000 CET	49711	587	192.168.2.8	108.179.234.136
Jan 11, 2025 05:30:25.930107117 CET	587	49711	108.179.234.136	192.168.2.8
Jan 11, 2025 05:30:26.036115885 CET	587	49711	108.179.234.136	192.168.2.8
Jan 11, 2025 05:30:26.037348986 CET	49711	587	192.168.2.8	108.179.234.136
Jan 11, 2025 05:30:26.042226076 CET	587	49711	108.179.234.136	192.168.2.8
Jan 11, 2025 05:30:26.148525000 CET	587	49711	108.179.234.136	192.168.2.8
Jan 11, 2025 05:30:26.148871899 CET	49711	587	192.168.2.8	108.179.234.136
Jan 11, 2025 05:30:26.153738976 CET	587	49711	108.179.234.136	192.168.2.8
Jan 11, 2025 05:30:26.363081932 CET	587	49711	108.179.234.136	192.168.2.8
Jan 11, 2025 05:30:26.363346100 CET	49711	587	192.168.2.8	108.179.234.136
Jan 11, 2025 05:30:26.368156910 CET	587	49711	108.179.234.136	192.168.2.8
Jan 11, 2025 05:30:26.476041079 CET	587	49711	108.179.234.136	192.168.2.8
Jan 11, 2025 05:30:26.476392031 CET	49711	587	192.168.2.8	108.179.234.136
Jan 11, 2025 05:30:26.481223106 CET	587	49711	108.179.234.136	192.168.2.8
Jan 11, 2025 05:30:26.596677065 CET	587	49711	108.179.234.136	192.168.2.8
Jan 11, 2025 05:30:26.596956015 CET	49711	587	192.168.2.8	108.179.234.136
Jan 11, 2025 05:30:26.601754904 CET	587	49711	108.179.234.136	192.168.2.8
Jan 11, 2025 05:30:26.707850933 CET	587	49711	108.179.234.136	192.168.2.8
Jan 11, 2025 05:30:26.747205019 CET	49711	587	192.168.2.8	108.179.234.136
Jan 11, 2025 05:30:26.752311945 CET	587	49711	108.179.234.136	192.168.2.8
Jan 11, 2025 05:30:26.761943102 CET	49711	587	192.168.2.8	108.179.234.136
Jan 11, 2025 05:30:26.766776085 CET	587	49711	108.179.234.136	192.168.2.8
Jan 11, 2025 05:30:26.787715912 CET	49711	587	192.168.2.8	108.179.234.136
Jan 11, 2025 05:30:26.787914038 CET	49711	587	192.168.2.8	108.179.234.136
Jan 11, 2025 05:30:26.791466951 CET	49711	587	192.168.2.8	108.179.234.136
Jan 11, 2025 05:30:26.792613983 CET	587	49711	108.179.234.136	192.168.2.8
Jan 11, 2025 05:30:26.792684078 CET	587	49711	108.179.234.136	192.168.2.8
Jan 11, 2025 05:30:26.792752028 CET	49711	587	192.168.2.8	108.179.234.136
Jan 11, 2025 05:30:26.796324015 CET	587	49711	108.179.234.136	192.168.2.8
Jan 11, 2025 05:30:26.796334028 CET	587	49711	108.179.234.136	192.168.2.8
Jan 11, 2025 05:30:26.796443939 CET	587	49711	108.179.234.136	192.168.2.8
Jan 11, 2025 05:30:26.796452999 CET	587	49711	108.179.234.136	192.168.2.8
Jan 11, 2025 05:30:26.796462059 CET	587	49711	108.179.234.136	192.168.2.8
Jan 11, 2025 05:30:26.796466112 CET	587	49711	108.179.234.136	192.168.2.8
Jan 11, 2025 05:30:26.796494961 CET	587	49711	108.179.234.136	192.168.2.8
Jan 11, 2025 05:30:26.796550035 CET	587	49711	108.179.234.136	192.168.2.8
Jan 11, 2025 05:30:26.797832012 CET	49711	587	192.168.2.8	108.179.234.136
Jan 11, 2025 05:30:26.802776098 CET	587	49711	108.179.234.136	192.168.2.8
Jan 11, 2025 05:30:26.802823067 CET	587	49711	108.179.234.136	192.168.2.8
Jan 11, 2025 05:30:26.802865028 CET	587	49711	108.179.234.136	192.168.2.8
Jan 11, 2025 05:30:26.802879095 CET	49711	587	192.168.2.8	108.179.234.136
Jan 11, 2025 05:30:26.802910089 CET	587	49711	108.179.234.136	192.168.2.8
Jan 11, 2025 05:30:26.802920103 CET	49711	587	192.168.2.8	108.179.234.136
Jan 11, 2025 05:30:26.802942991 CET	587	49711	108.179.234.136	192.168.2.8
Jan 11, 2025 05:30:26.802967072 CET	587	49711	108.179.234.136	192.168.2.8
Jan 11, 2025 05:30:26.802988052 CET	49711	587	192.168.2.8	108.179.234.136
Jan 11, 2025 05:30:26.802988052 CET	49711	587	192.168.2.8	108.179.234.136
Jan 11, 2025 05:30:26.803062916 CET	587	49711	108.179.234.136	192.168.2.8
Jan 11, 2025 05:30:26.803073883 CET	587	49711	108.179.234.136	192.168.2.8
Jan 11, 2025 05:30:26.803076982 CET	49711	587	192.168.2.8	108.179.234.136
Jan 11, 2025 05:30:26.803102016 CET	587	49711	108.179.234.136	192.168.2.8
Jan 11, 2025 05:30:26.803143978 CET	587	49711	108.179.234.136	192.168.2.8
Jan 11, 2025 05:30:26.803165913 CET	49711	587	192.168.2.8	108.179.234.136
Jan 11, 2025 05:30:26.803236008 CET	49711	587	192.168.2.8	108.179.234.136
Jan 11, 2025 05:30:26.803236961 CET	49711	587	192.168.2.8	108.179.234.136
Jan 11, 2025 05:30:26.807717085 CET	587	49711	108.179.234.136	192.168.2.8
Jan 11, 2025 05:30:26.807764053 CET	587	49711	108.179.234.136	192.168.2.8
Jan 11, 2025 05:30:26.807790995 CET	49711	587	192.168.2.8	108.179.234.136
Jan 11, 2025 05:30:26.807826042 CET	587	49711	108.179.234.136	192.168.2.8
Jan 11, 2025 05:30:26.807890892 CET	587	49711	108.179.234.136	192.168.2.8
Jan 11, 2025 05:30:26.807975054 CET	587	49711	108.179.234.136	192.168.2.8
Jan 11, 2025 05:30:26.808070898 CET	587	49711	108.179.234.136	192.168.2.8
Jan 11, 2025 05:30:26.808109999 CET	587	49711	108.179.234.136	192.168.2.8
Jan 11, 2025 05:30:26.808182001 CET	587	49711	108.179.234.136	192.168.2.8
Jan 11, 2025 05:30:26.808294058 CET	587	49711	108.179.234.136	192.168.2.8
Jan 11, 2025 05:30:26.808303118 CET	587	49711	108.179.234.136	192.168.2.8
Jan 11, 2025 05:30:26.808343887 CET	587	49711	108.179.234.136	192.168.2.8
Jan 11, 2025 05:30:26.808353901 CET	587	49711	108.179.234.136	192.168.2.8
Jan 11, 2025 05:30:26.808404922 CET	587	49711	108.179.234.136	192.168.2.8
Jan 11, 2025 05:30:26.808414936 CET	587	49711	108.179.234.136	192.168.2.8
Jan 11, 2025 05:30:26.808466911 CET	587	49711	108.179.234.136	192.168.2.8
Jan 11, 2025 05:30:26.808475971 CET	587	49711	108.179.234.136	192.168.2.8
Jan 11, 2025 05:30:26.808521986 CET	587	49711	108.179.234.136	192.168.2.8
Jan 11, 2025 05:30:26.808532000 CET	587	49711	108.179.234.136	192.168.2.8
Jan 11, 2025 05:30:26.808553934 CET	587	49711	108.179.234.136	192.168.2.8
Jan 11, 2025 05:30:26.808594942 CET	587	49711	108.179.234.136	192.168.2.8
Jan 11, 2025 05:30:26.808650017 CET	587	49711	108.179.234.136	192.168.2.8
Jan 11, 2025 05:30:26.808659077 CET	587	49711	108.179.234.136	192.168.2.8
Jan 11, 2025 05:30:26.808732033 CET	587	49711	108.179.234.136	192.168.2.8
Jan 11, 2025 05:30:26.808742046 CET	587	49711	108.179.234.136	192.168.2.8
Jan 11, 2025 05:30:26.808782101 CET	587	49711	108.179.234.136	192.168.2.8
Jan 11, 2025 05:30:26.808792114 CET	587	49711	108.179.234.136	192.168.2.8
Jan 11, 2025 05:30:26.808861017 CET	587	49711	108.179.234.136	192.168.2.8
Jan 11, 2025 05:30:26.808871031 CET	587	49711	108.179.234.136	192.168.2.8
Jan 11, 2025 05:30:26.808923006 CET	587	49711	108.179.234.136	192.168.2.8
Jan 11, 2025 05:30:26.808932066 CET	587	49711	108.179.234.136	192.168.2.8
Jan 11, 2025 05:30:26.812638044 CET	587	49711	108.179.234.136	192.168.2.8
Jan 11, 2025 05:30:26.812649965 CET	587	49711	108.179.234.136	192.168.2.8
Jan 11, 2025 05:30:26.812695980 CET	587	49711	108.179.234.136	192.168.2.8
Jan 11, 2025 05:30:26.812704086 CET	587	49711	108.179.234.136	192.168.2.8
Jan 11, 2025 05:30:27.140722990 CET	587	49711	108.179.234.136	192.168.2.8
Jan 11, 2025 05:30:27.188395023 CET	49711	587	192.168.2.8	108.179.234.136
Jan 11, 2025 05:30:32.683306932 CET	49711	587	192.168.2.8	108.179.234.136
Jan 11, 2025 05:30:32.688334942 CET	587	49711	108.179.234.136	192.168.2.8
Jan 11, 2025 05:30:32.794229031 CET	587	49711	108.179.234.136	192.168.2.8
Jan 11, 2025 05:30:32.795527935 CET	49711	587	192.168.2.8	108.179.234.136
Jan 11, 2025 05:30:32.798800945 CET	49712	587	192.168.2.8	108.179.234.136
Jan 11, 2025 05:30:32.803690910 CET	587	49712	108.179.234.136	192.168.2.8
Jan 11, 2025 05:30:32.803777933 CET	49712	587	192.168.2.8	108.179.234.136
Jan 11, 2025 05:30:33.309045076 CET	587	49712	108.179.234.136	192.168.2.8
Jan 11, 2025 05:30:33.309226990 CET	49712	587	192.168.2.8	108.179.234.136
Jan 11, 2025 05:30:33.314044952 CET	587	49712	108.179.234.136	192.168.2.8
Jan 11, 2025 05:30:33.421813965 CET	587	49712	108.179.234.136	192.168.2.8
Jan 11, 2025 05:30:33.422056913 CET	49712	587	192.168.2.8	108.179.234.136
Jan 11, 2025 05:30:33.427635908 CET	587	49712	108.179.234.136	192.168.2.8
Jan 11, 2025 05:30:33.536293030 CET	587	49712	108.179.234.136	192.168.2.8
Jan 11, 2025 05:30:33.536762953 CET	49712	587	192.168.2.8	108.179.234.136
Jan 11, 2025 05:30:33.542180061 CET	587	49712	108.179.234.136	192.168.2.8
Jan 11, 2025 05:30:33.657110929 CET	587	49712	108.179.234.136	192.168.2.8
Jan 11, 2025 05:30:33.657125950 CET	587	49712	108.179.234.136	192.168.2.8
Jan 11, 2025 05:30:33.657135963 CET	587	49712	108.179.234.136	192.168.2.8
Jan 11, 2025 05:30:33.657188892 CET	49712	587	192.168.2.8	108.179.234.136
Jan 11, 2025 05:30:33.659024000 CET	49712	587	192.168.2.8	108.179.234.136
Jan 11, 2025 05:30:33.663821936 CET	587	49712	108.179.234.136	192.168.2.8
Jan 11, 2025 05:30:33.771404982 CET	587	49712	108.179.234.136	192.168.2.8
Jan 11, 2025 05:30:33.772423983 CET	49712	587	192.168.2.8	108.179.234.136
Jan 11, 2025 05:30:33.777235031 CET	587	49712	108.179.234.136	192.168.2.8
Jan 11, 2025 05:30:33.884772062 CET	587	49712	108.179.234.136	192.168.2.8
Jan 11, 2025 05:30:33.885174036 CET	49712	587	192.168.2.8	108.179.234.136
Jan 11, 2025 05:30:33.890069962 CET	587	49712	108.179.234.136	192.168.2.8
Jan 11, 2025 05:30:33.999150038 CET	587	49712	108.179.234.136	192.168.2.8
Jan 11, 2025 05:30:33.999470949 CET	49712	587	192.168.2.8	108.179.234.136
Jan 11, 2025 05:30:34.004587889 CET	587	49712	108.179.234.136	192.168.2.8
Jan 11, 2025 05:30:34.113337040 CET	587	49712	108.179.234.136	192.168.2.8
Jan 11, 2025 05:30:34.117254972 CET	49712	587	192.168.2.8	108.179.234.136
Jan 11, 2025 05:30:34.122107983 CET	587	49712	108.179.234.136	192.168.2.8
Jan 11, 2025 05:30:34.229280949 CET	587	49712	108.179.234.136	192.168.2.8
Jan 11, 2025 05:30:34.229681969 CET	49712	587	192.168.2.8	108.179.234.136
Jan 11, 2025 05:30:34.234551907 CET	587	49712	108.179.234.136	192.168.2.8
Jan 11, 2025 05:30:34.349404097 CET	587	49712	108.179.234.136	192.168.2.8
Jan 11, 2025 05:30:34.350003958 CET	49712	587	192.168.2.8	108.179.234.136
Jan 11, 2025 05:30:34.354970932 CET	587	49712	108.179.234.136	192.168.2.8
Jan 11, 2025 05:30:34.462215900 CET	587	49712	108.179.234.136	192.168.2.8
Jan 11, 2025 05:30:34.462663889 CET	49712	587	192.168.2.8	108.179.234.136
Jan 11, 2025 05:30:34.462702990 CET	49712	587	192.168.2.8	108.179.234.136
Jan 11, 2025 05:30:34.462727070 CET	49712	587	192.168.2.8	108.179.234.136
Jan 11, 2025 05:30:34.462826967 CET	49712	587	192.168.2.8	108.179.234.136
Jan 11, 2025 05:30:34.464204073 CET	49712	587	192.168.2.8	108.179.234.136
Jan 11, 2025 05:30:34.467891932 CET	587	49712	108.179.234.136	192.168.2.8
Jan 11, 2025 05:30:34.467904091 CET	587	49712	108.179.234.136	192.168.2.8
Jan 11, 2025 05:30:34.467945099 CET	49712	587	192.168.2.8	108.179.234.136
Jan 11, 2025 05:30:34.467972040 CET	49712	587	192.168.2.8	108.179.234.136
Jan 11, 2025 05:30:34.469059944 CET	587	49712	108.179.234.136	192.168.2.8
Jan 11, 2025 05:30:34.469069958 CET	587	49712	108.179.234.136	192.168.2.8
Jan 11, 2025 05:30:34.469082117 CET	587	49712	108.179.234.136	192.168.2.8
Jan 11, 2025 05:30:34.469114065 CET	49712	587	192.168.2.8	108.179.234.136
Jan 11, 2025 05:30:34.469152927 CET	49712	587	192.168.2.8	108.179.234.136
Jan 11, 2025 05:30:34.469175100 CET	587	49712	108.179.234.136	192.168.2.8
Jan 11, 2025 05:30:34.469222069 CET	49712	587	192.168.2.8	108.179.234.136
Jan 11, 2025 05:30:34.472770929 CET	587	49712	108.179.234.136	192.168.2.8
Jan 11, 2025 05:30:34.473018885 CET	49712	587	192.168.2.8	108.179.234.136
Jan 11, 2025 05:30:34.473968983 CET	587	49712	108.179.234.136	192.168.2.8
Jan 11, 2025 05:30:34.474026918 CET	49712	587	192.168.2.8	108.179.234.136
Jan 11, 2025 05:30:34.474066973 CET	587	49712	108.179.234.136	192.168.2.8
Jan 11, 2025 05:30:34.474078894 CET	587	49712	108.179.234.136	192.168.2.8
Jan 11, 2025 05:30:34.474106073 CET	587	49712	108.179.234.136	192.168.2.8
Jan 11, 2025 05:30:34.474112988 CET	49712	587	192.168.2.8	108.179.234.136
Jan 11, 2025 05:30:34.474131107 CET	49712	587	192.168.2.8	108.179.234.136
Jan 11, 2025 05:30:34.474150896 CET	49712	587	192.168.2.8	108.179.234.136
Jan 11, 2025 05:30:34.474172115 CET	587	49712	108.179.234.136	192.168.2.8
Jan 11, 2025 05:30:34.474181890 CET	587	49712	108.179.234.136	192.168.2.8
Jan 11, 2025 05:30:34.474191904 CET	587	49712	108.179.234.136	192.168.2.8
Jan 11, 2025 05:30:34.474236012 CET	49712	587	192.168.2.8	108.179.234.136
Jan 11, 2025 05:30:34.474246025 CET	49712	587	192.168.2.8	108.179.234.136
Jan 11, 2025 05:30:34.474247932 CET	587	49712	108.179.234.136	192.168.2.8
Jan 11, 2025 05:30:34.474472046 CET	49712	587	192.168.2.8	108.179.234.136
Jan 11, 2025 05:30:34.478827953 CET	587	49712	108.179.234.136	192.168.2.8
Jan 11, 2025 05:30:34.478884935 CET	49712	587	192.168.2.8	108.179.234.136
Jan 11, 2025 05:30:34.478888988 CET	587	49712	108.179.234.136	192.168.2.8
Jan 11, 2025 05:30:34.478946924 CET	49712	587	192.168.2.8	108.179.234.136
Jan 11, 2025 05:30:34.478965998 CET	587	49712	108.179.234.136	192.168.2.8
Jan 11, 2025 05:30:34.479006052 CET	49712	587	192.168.2.8	108.179.234.136
Jan 11, 2025 05:30:34.479020119 CET	49712	587	192.168.2.8	108.179.234.136
Jan 11, 2025 05:30:34.479041100 CET	587	49712	108.179.234.136	192.168.2.8
Jan 11, 2025 05:30:34.479101896 CET	587	49712	108.179.234.136	192.168.2.8
Jan 11, 2025 05:30:34.479147911 CET	587	49712	108.179.234.136	192.168.2.8
Jan 11, 2025 05:30:34.479190111 CET	587	49712	108.179.234.136	192.168.2.8
Jan 11, 2025 05:30:34.479207039 CET	587	49712	108.179.234.136	192.168.2.8
Jan 11, 2025 05:30:34.479218960 CET	587	49712	108.179.234.136	192.168.2.8
Jan 11, 2025 05:30:34.479310036 CET	587	49712	108.179.234.136	192.168.2.8
Jan 11, 2025 05:30:34.479403973 CET	587	49712	108.179.234.136	192.168.2.8
Jan 11, 2025 05:30:34.479413033 CET	587	49712	108.179.234.136	192.168.2.8
Jan 11, 2025 05:30:34.479484081 CET	587	49712	108.179.234.136	192.168.2.8
Jan 11, 2025 05:30:34.479492903 CET	587	49712	108.179.234.136	192.168.2.8
Jan 11, 2025 05:30:34.479501963 CET	587	49712	108.179.234.136	192.168.2.8
Jan 11, 2025 05:30:34.479511023 CET	587	49712	108.179.234.136	192.168.2.8
Jan 11, 2025 05:30:34.479527950 CET	587	49712	108.179.234.136	192.168.2.8
Jan 11, 2025 05:30:34.479537010 CET	587	49712	108.179.234.136	192.168.2.8
Jan 11, 2025 05:30:34.479546070 CET	587	49712	108.179.234.136	192.168.2.8
Jan 11, 2025 05:30:34.479554892 CET	587	49712	108.179.234.136	192.168.2.8
Jan 11, 2025 05:30:34.479572058 CET	587	49712	108.179.234.136	192.168.2.8
Jan 11, 2025 05:30:34.479581118 CET	587	49712	108.179.234.136	192.168.2.8
Jan 11, 2025 05:30:34.479612112 CET	587	49712	108.179.234.136	192.168.2.8
Jan 11, 2025 05:30:34.479620934 CET	587	49712	108.179.234.136	192.168.2.8
Jan 11, 2025 05:30:34.483671904 CET	587	49712	108.179.234.136	192.168.2.8
Jan 11, 2025 05:30:34.483712912 CET	587	49712	108.179.234.136	192.168.2.8
Jan 11, 2025 05:30:34.483752012 CET	587	49712	108.179.234.136	192.168.2.8
Jan 11, 2025 05:30:34.483761072 CET	587	49712	108.179.234.136	192.168.2.8
Jan 11, 2025 05:30:34.483872890 CET	587	49712	108.179.234.136	192.168.2.8
Jan 11, 2025 05:30:34.483880997 CET	587	49712	108.179.234.136	192.168.2.8
Jan 11, 2025 05:30:34.483920097 CET	587	49712	108.179.234.136	192.168.2.8
Jan 11, 2025 05:30:34.483928919 CET	587	49712	108.179.234.136	192.168.2.8
Jan 11, 2025 05:30:34.484056950 CET	587	49712	108.179.234.136	192.168.2.8
Jan 11, 2025 05:30:34.484066010 CET	587	49712	108.179.234.136	192.168.2.8
Jan 11, 2025 05:30:34.484075069 CET	587	49712	108.179.234.136	192.168.2.8
Jan 11, 2025 05:30:34.484083891 CET	587	49712	108.179.234.136	192.168.2.8
Jan 11, 2025 05:30:34.484095097 CET	587	49712	108.179.234.136	192.168.2.8
Jan 11, 2025 05:30:34.780575037 CET	587	49712	108.179.234.136	192.168.2.8
Jan 11, 2025 05:30:34.829025984 CET	49712	587	192.168.2.8	108.179.234.136
Jan 11, 2025 05:30:45.759035110 CET	49712	587	192.168.2.8	108.179.234.136
Jan 11, 2025 05:30:45.764146090 CET	587	49712	108.179.234.136	192.168.2.8
Jan 11, 2025 05:30:45.871470928 CET	587	49712	108.179.234.136	192.168.2.8
Jan 11, 2025 05:30:45.873785973 CET	49712	587	192.168.2.8	108.179.234.136
Jan 11, 2025 05:30:45.875364065 CET	49713	587	192.168.2.8	108.179.234.136
Jan 11, 2025 05:30:45.880587101 CET	587	49713	108.179.234.136	192.168.2.8
Jan 11, 2025 05:30:45.883496046 CET	49713	587	192.168.2.8	108.179.234.136
Jan 11, 2025 05:30:46.412092924 CET	587	49713	108.179.234.136	192.168.2.8
Jan 11, 2025 05:30:46.412277937 CET	49713	587	192.168.2.8	108.179.234.136
Jan 11, 2025 05:30:46.418489933 CET	587	49713	108.179.234.136	192.168.2.8
Jan 11, 2025 05:30:46.528939009 CET	587	49713	108.179.234.136	192.168.2.8
Jan 11, 2025 05:30:46.529194117 CET	49713	587	192.168.2.8	108.179.234.136
Jan 11, 2025 05:30:46.534315109 CET	587	49713	108.179.234.136	192.168.2.8
Jan 11, 2025 05:30:46.647268057 CET	587	49713	108.179.234.136	192.168.2.8
Jan 11, 2025 05:30:46.661761999 CET	49713	587	192.168.2.8	108.179.234.136
Jan 11, 2025 05:30:46.666637897 CET	587	49713	108.179.234.136	192.168.2.8
Jan 11, 2025 05:30:46.792424917 CET	587	49713	108.179.234.136	192.168.2.8
Jan 11, 2025 05:30:46.792480946 CET	587	49713	108.179.234.136	192.168.2.8
Jan 11, 2025 05:30:46.792495012 CET	587	49713	108.179.234.136	192.168.2.8
Jan 11, 2025 05:30:46.792516947 CET	49713	587	192.168.2.8	108.179.234.136
Jan 11, 2025 05:30:46.797667980 CET	49713	587	192.168.2.8	108.179.234.136
Jan 11, 2025 05:30:46.802525043 CET	587	49713	108.179.234.136	192.168.2.8
Jan 11, 2025 05:30:46.914625883 CET	587	49713	108.179.234.136	192.168.2.8
Jan 11, 2025 05:30:46.960910082 CET	49713	587	192.168.2.8	108.179.234.136
Jan 11, 2025 05:30:46.966762066 CET	587	49713	108.179.234.136	192.168.2.8
Jan 11, 2025 05:30:47.078360081 CET	587	49713	108.179.234.136	192.168.2.8
Jan 11, 2025 05:30:47.078639984 CET	49713	587	192.168.2.8	108.179.234.136
Jan 11, 2025 05:30:47.083626986 CET	587	49713	108.179.234.136	192.168.2.8
Jan 11, 2025 05:30:47.204229116 CET	587	49713	108.179.234.136	192.168.2.8
Jan 11, 2025 05:30:47.204871893 CET	49713	587	192.168.2.8	108.179.234.136
Jan 11, 2025 05:30:47.212884903 CET	587	49713	108.179.234.136	192.168.2.8
Jan 11, 2025 05:30:47.327240944 CET	587	49713	108.179.234.136	192.168.2.8
Jan 11, 2025 05:30:47.327676058 CET	49713	587	192.168.2.8	108.179.234.136
Jan 11, 2025 05:30:47.332644939 CET	587	49713	108.179.234.136	192.168.2.8
Jan 11, 2025 05:30:47.444159031 CET	587	49713	108.179.234.136	192.168.2.8
Jan 11, 2025 05:30:47.444400072 CET	49713	587	192.168.2.8	108.179.234.136
Jan 11, 2025 05:30:47.449292898 CET	587	49713	108.179.234.136	192.168.2.8
Jan 11, 2025 05:30:47.568804026 CET	587	49713	108.179.234.136	192.168.2.8
Jan 11, 2025 05:30:47.571556091 CET	49713	587	192.168.2.8	108.179.234.136
Jan 11, 2025 05:30:47.576539993 CET	587	49713	108.179.234.136	192.168.2.8
Jan 11, 2025 05:30:47.688290119 CET	587	49713	108.179.234.136	192.168.2.8
Jan 11, 2025 05:30:47.689301014 CET	49713	587	192.168.2.8	108.179.234.136
Jan 11, 2025 05:30:47.689414024 CET	49713	587	192.168.2.8	108.179.234.136
Jan 11, 2025 05:30:47.689414024 CET	49713	587	192.168.2.8	108.179.234.136
Jan 11, 2025 05:30:47.690759897 CET	49713	587	192.168.2.8	108.179.234.136
Jan 11, 2025 05:30:47.690834045 CET	49713	587	192.168.2.8	108.179.234.136
Jan 11, 2025 05:30:47.694417953 CET	587	49713	108.179.234.136	192.168.2.8
Jan 11, 2025 05:30:47.694451094 CET	587	49713	108.179.234.136	192.168.2.8
Jan 11, 2025 05:30:47.694787025 CET	49713	587	192.168.2.8	108.179.234.136
Jan 11, 2025 05:30:47.695636988 CET	587	49713	108.179.234.136	192.168.2.8
Jan 11, 2025 05:30:47.695739031 CET	587	49713	108.179.234.136	192.168.2.8
Jan 11, 2025 05:30:47.695868015 CET	587	49713	108.179.234.136	192.168.2.8
Jan 11, 2025 05:30:47.695874929 CET	49713	587	192.168.2.8	108.179.234.136
Jan 11, 2025 05:30:47.696002960 CET	587	49713	108.179.234.136	192.168.2.8
Jan 11, 2025 05:30:47.696084023 CET	49713	587	192.168.2.8	108.179.234.136
Jan 11, 2025 05:30:47.699172974 CET	587	49713	108.179.234.136	192.168.2.8
Jan 11, 2025 05:30:47.699712992 CET	587	49713	108.179.234.136	192.168.2.8
Jan 11, 2025 05:30:47.700970888 CET	587	49713	108.179.234.136	192.168.2.8
Jan 11, 2025 05:30:47.701000929 CET	587	49713	108.179.234.136	192.168.2.8
Jan 11, 2025 05:30:47.701034069 CET	587	49713	108.179.234.136	192.168.2.8
Jan 11, 2025 05:30:47.701041937 CET	49713	587	192.168.2.8	108.179.234.136
Jan 11, 2025 05:30:47.701087952 CET	49713	587	192.168.2.8	108.179.234.136
Jan 11, 2025 05:30:47.701107025 CET	587	49713	108.179.234.136	192.168.2.8
Jan 11, 2025 05:30:47.701134920 CET	587	49713	108.179.234.136	192.168.2.8
Jan 11, 2025 05:30:47.701141119 CET	49713	587	192.168.2.8	108.179.234.136
Jan 11, 2025 05:30:47.701206923 CET	49713	587	192.168.2.8	108.179.234.136
Jan 11, 2025 05:30:47.701215982 CET	587	49713	108.179.234.136	192.168.2.8
Jan 11, 2025 05:30:47.705401897 CET	49713	587	192.168.2.8	108.179.234.136
Jan 11, 2025 05:30:47.706058025 CET	587	49713	108.179.234.136	192.168.2.8
Jan 11, 2025 05:30:47.706177950 CET	587	49713	108.179.234.136	192.168.2.8
Jan 11, 2025 05:30:47.706178904 CET	49713	587	192.168.2.8	108.179.234.136
Jan 11, 2025 05:30:47.706242085 CET	587	49713	108.179.234.136	192.168.2.8
Jan 11, 2025 05:30:47.706295967 CET	587	49713	108.179.234.136	192.168.2.8
Jan 11, 2025 05:30:47.706331015 CET	587	49713	108.179.234.136	192.168.2.8
Jan 11, 2025 05:30:47.706335068 CET	49713	587	192.168.2.8	108.179.234.136
Jan 11, 2025 05:30:47.706381083 CET	49713	587	192.168.2.8	108.179.234.136
Jan 11, 2025 05:30:47.706383944 CET	587	49713	108.179.234.136	192.168.2.8
Jan 11, 2025 05:30:47.706417084 CET	587	49713	108.179.234.136	192.168.2.8
Jan 11, 2025 05:30:47.706516027 CET	49713	587	192.168.2.8	108.179.234.136
Jan 11, 2025 05:30:47.706569910 CET	587	49713	108.179.234.136	192.168.2.8
Jan 11, 2025 05:30:47.706676006 CET	587	49713	108.179.234.136	192.168.2.8
Jan 11, 2025 05:30:47.706702948 CET	587	49713	108.179.234.136	192.168.2.8
Jan 11, 2025 05:30:47.706732035 CET	587	49713	108.179.234.136	192.168.2.8
Jan 11, 2025 05:30:47.706758976 CET	587	49713	108.179.234.136	192.168.2.8
Jan 11, 2025 05:30:47.706808090 CET	587	49713	108.179.234.136	192.168.2.8
Jan 11, 2025 05:30:47.706834078 CET	587	49713	108.179.234.136	192.168.2.8
Jan 11, 2025 05:30:47.710318089 CET	587	49713	108.179.234.136	192.168.2.8
Jan 11, 2025 05:30:47.711064100 CET	587	49713	108.179.234.136	192.168.2.8
Jan 11, 2025 05:30:47.711095095 CET	587	49713	108.179.234.136	192.168.2.8
Jan 11, 2025 05:30:47.711123943 CET	587	49713	108.179.234.136	192.168.2.8
Jan 11, 2025 05:30:47.711195946 CET	587	49713	108.179.234.136	192.168.2.8
Jan 11, 2025 05:30:47.711369991 CET	587	49713	108.179.234.136	192.168.2.8
Jan 11, 2025 05:30:47.711421013 CET	587	49713	108.179.234.136	192.168.2.8
Jan 11, 2025 05:30:47.711453915 CET	587	49713	108.179.234.136	192.168.2.8
Jan 11, 2025 05:30:47.711611032 CET	587	49713	108.179.234.136	192.168.2.8
Jan 11, 2025 05:30:47.711721897 CET	587	49713	108.179.234.136	192.168.2.8
Jan 11, 2025 05:30:47.711752892 CET	587	49713	108.179.234.136	192.168.2.8
Jan 11, 2025 05:30:47.711802959 CET	587	49713	108.179.234.136	192.168.2.8
Jan 11, 2025 05:30:47.711829901 CET	587	49713	108.179.234.136	192.168.2.8
Jan 11, 2025 05:30:47.711859941 CET	587	49713	108.179.234.136	192.168.2.8
Jan 11, 2025 05:30:47.711886883 CET	587	49713	108.179.234.136	192.168.2.8
Jan 11, 2025 05:30:47.711937904 CET	587	49713	108.179.234.136	192.168.2.8
Jan 11, 2025 05:30:47.711966038 CET	587	49713	108.179.234.136	192.168.2.8
Jan 11, 2025 05:30:47.711994886 CET	587	49713	108.179.234.136	192.168.2.8
Jan 11, 2025 05:30:47.712023020 CET	587	49713	108.179.234.136	192.168.2.8
Jan 11, 2025 05:30:47.712049007 CET	587	49713	108.179.234.136	192.168.2.8
Jan 11, 2025 05:30:47.712074995 CET	587	49713	108.179.234.136	192.168.2.8
Jan 11, 2025 05:30:47.712125063 CET	587	49713	108.179.234.136	192.168.2.8
Jan 11, 2025 05:30:47.712152004 CET	587	49713	108.179.234.136	192.168.2.8
Jan 11, 2025 05:30:47.712178946 CET	587	49713	108.179.234.136	192.168.2.8
Jan 11, 2025 05:30:48.019323111 CET	587	49713	108.179.234.136	192.168.2.8
Jan 11, 2025 05:30:48.065062046 CET	49713	587	192.168.2.8	108.179.234.136
Jan 11, 2025 05:30:48.780589104 CET	49713	587	192.168.2.8	108.179.234.136
Jan 11, 2025 05:30:48.785475016 CET	587	49713	108.179.234.136	192.168.2.8
Jan 11, 2025 05:30:48.896954060 CET	587	49713	108.179.234.136	192.168.2.8
Jan 11, 2025 05:30:48.897568941 CET	49713	587	192.168.2.8	108.179.234.136
Jan 11, 2025 05:30:48.898683071 CET	49714	587	192.168.2.8	108.179.234.136
Jan 11, 2025 05:30:48.903579950 CET	587	49714	108.179.234.136	192.168.2.8
Jan 11, 2025 05:30:48.903646946 CET	49714	587	192.168.2.8	108.179.234.136
Jan 11, 2025 05:30:49.412357092 CET	587	49714	108.179.234.136	192.168.2.8
Jan 11, 2025 05:30:49.412947893 CET	49714	587	192.168.2.8	108.179.234.136
Jan 11, 2025 05:30:49.417772055 CET	587	49714	108.179.234.136	192.168.2.8
Jan 11, 2025 05:30:49.524620056 CET	587	49714	108.179.234.136	192.168.2.8
Jan 11, 2025 05:30:49.524894953 CET	49714	587	192.168.2.8	108.179.234.136
Jan 11, 2025 05:30:49.529933929 CET	587	49714	108.179.234.136	192.168.2.8
Jan 11, 2025 05:30:49.638091087 CET	587	49714	108.179.234.136	192.168.2.8
Jan 11, 2025 05:30:49.638596058 CET	49714	587	192.168.2.8	108.179.234.136
Jan 11, 2025 05:30:49.643500090 CET	587	49714	108.179.234.136	192.168.2.8
Jan 11, 2025 05:30:49.766587973 CET	587	49714	108.179.234.136	192.168.2.8
Jan 11, 2025 05:30:49.766606092 CET	587	49714	108.179.234.136	192.168.2.8
Jan 11, 2025 05:30:49.766618967 CET	587	49714	108.179.234.136	192.168.2.8
Jan 11, 2025 05:30:49.766724110 CET	49714	587	192.168.2.8	108.179.234.136
Jan 11, 2025 05:30:49.772994041 CET	49714	587	192.168.2.8	108.179.234.136
Jan 11, 2025 05:30:49.777954102 CET	587	49714	108.179.234.136	192.168.2.8
Jan 11, 2025 05:30:49.884773970 CET	587	49714	108.179.234.136	192.168.2.8
Jan 11, 2025 05:30:49.887305975 CET	49714	587	192.168.2.8	108.179.234.136
Jan 11, 2025 05:30:49.892199993 CET	587	49714	108.179.234.136	192.168.2.8
Jan 11, 2025 05:30:49.998707056 CET	587	49714	108.179.234.136	192.168.2.8
Jan 11, 2025 05:30:49.999073029 CET	49714	587	192.168.2.8	108.179.234.136
Jan 11, 2025 05:30:50.003935099 CET	587	49714	108.179.234.136	192.168.2.8
Jan 11, 2025 05:30:50.110866070 CET	587	49714	108.179.234.136	192.168.2.8
Jan 11, 2025 05:30:50.111283064 CET	49714	587	192.168.2.8	108.179.234.136
Jan 11, 2025 05:30:50.116085052 CET	587	49714	108.179.234.136	192.168.2.8
Jan 11, 2025 05:30:50.224364996 CET	587	49714	108.179.234.136	192.168.2.8
Jan 11, 2025 05:30:50.224632978 CET	49714	587	192.168.2.8	108.179.234.136
Jan 11, 2025 05:30:50.230345964 CET	587	49714	108.179.234.136	192.168.2.8
Jan 11, 2025 05:30:50.337136030 CET	587	49714	108.179.234.136	192.168.2.8
Jan 11, 2025 05:30:50.337465048 CET	49714	587	192.168.2.8	108.179.234.136
Jan 11, 2025 05:30:50.342372894 CET	587	49714	108.179.234.136	192.168.2.8
Jan 11, 2025 05:30:50.456660032 CET	587	49714	108.179.234.136	192.168.2.8
Jan 11, 2025 05:30:50.456960917 CET	49714	587	192.168.2.8	108.179.234.136
Jan 11, 2025 05:30:50.461935043 CET	587	49714	108.179.234.136	192.168.2.8
Jan 11, 2025 05:30:50.568608999 CET	587	49714	108.179.234.136	192.168.2.8
Jan 11, 2025 05:30:50.569267988 CET	49714	587	192.168.2.8	108.179.234.136
Jan 11, 2025 05:30:50.569380045 CET	49714	587	192.168.2.8	108.179.234.136
Jan 11, 2025 05:30:50.569417953 CET	49714	587	192.168.2.8	108.179.234.136
Jan 11, 2025 05:30:50.569643974 CET	49714	587	192.168.2.8	108.179.234.136
Jan 11, 2025 05:30:50.570926905 CET	49714	587	192.168.2.8	108.179.234.136
Jan 11, 2025 05:30:50.574228048 CET	587	49714	108.179.234.136	192.168.2.8
Jan 11, 2025 05:30:50.574261904 CET	587	49714	108.179.234.136	192.168.2.8
Jan 11, 2025 05:30:50.574274063 CET	587	49714	108.179.234.136	192.168.2.8
Jan 11, 2025 05:30:50.574279070 CET	49714	587	192.168.2.8	108.179.234.136
Jan 11, 2025 05:30:50.574419022 CET	587	49714	108.179.234.136	192.168.2.8
Jan 11, 2025 05:30:50.574457884 CET	49714	587	192.168.2.8	108.179.234.136
Jan 11, 2025 05:30:50.575941086 CET	587	49714	108.179.234.136	192.168.2.8
Jan 11, 2025 05:30:50.575994015 CET	49714	587	192.168.2.8	108.179.234.136
Jan 11, 2025 05:30:50.579005957 CET	587	49714	108.179.234.136	192.168.2.8
Jan 11, 2025 05:30:50.579063892 CET	49714	587	192.168.2.8	108.179.234.136
Jan 11, 2025 05:30:50.580013990 CET	587	49714	108.179.234.136	192.168.2.8
Jan 11, 2025 05:30:50.580071926 CET	49714	587	192.168.2.8	108.179.234.136
Jan 11, 2025 05:30:50.580153942 CET	587	49714	108.179.234.136	192.168.2.8
Jan 11, 2025 05:30:50.580203056 CET	49714	587	192.168.2.8	108.179.234.136
Jan 11, 2025 05:30:50.580873013 CET	587	49714	108.179.234.136	192.168.2.8
Jan 11, 2025 05:30:50.580900908 CET	587	49714	108.179.234.136	192.168.2.8
Jan 11, 2025 05:30:50.580914021 CET	587	49714	108.179.234.136	192.168.2.8
Jan 11, 2025 05:30:50.580930948 CET	49714	587	192.168.2.8	108.179.234.136
Jan 11, 2025 05:30:50.580982924 CET	587	49714	108.179.234.136	192.168.2.8
Jan 11, 2025 05:30:50.581003904 CET	49714	587	192.168.2.8	108.179.234.136
Jan 11, 2025 05:30:50.581037045 CET	49714	587	192.168.2.8	108.179.234.136
Jan 11, 2025 05:30:50.581047058 CET	49714	587	192.168.2.8	108.179.234.136
Jan 11, 2025 05:30:50.583895922 CET	587	49714	108.179.234.136	192.168.2.8
Jan 11, 2025 05:30:50.583955050 CET	49714	587	192.168.2.8	108.179.234.136
Jan 11, 2025 05:30:50.584003925 CET	587	49714	108.179.234.136	192.168.2.8
Jan 11, 2025 05:30:50.584052086 CET	49714	587	192.168.2.8	108.179.234.136
Jan 11, 2025 05:30:50.584976912 CET	587	49714	108.179.234.136	192.168.2.8
Jan 11, 2025 05:30:50.585004091 CET	587	49714	108.179.234.136	192.168.2.8
Jan 11, 2025 05:30:50.585026979 CET	49714	587	192.168.2.8	108.179.234.136
Jan 11, 2025 05:30:50.585057974 CET	49714	587	192.168.2.8	108.179.234.136
Jan 11, 2025 05:30:50.585105896 CET	587	49714	108.179.234.136	192.168.2.8
Jan 11, 2025 05:30:50.585160017 CET	49714	587	192.168.2.8	108.179.234.136
Jan 11, 2025 05:30:50.585361004 CET	587	49714	108.179.234.136	192.168.2.8
Jan 11, 2025 05:30:50.585414886 CET	49714	587	192.168.2.8	108.179.234.136
Jan 11, 2025 05:30:50.585787058 CET	587	49714	108.179.234.136	192.168.2.8
Jan 11, 2025 05:30:50.585839987 CET	49714	587	192.168.2.8	108.179.234.136
Jan 11, 2025 05:30:50.585926056 CET	587	49714	108.179.234.136	192.168.2.8
Jan 11, 2025 05:30:50.585971117 CET	587	49714	108.179.234.136	192.168.2.8
Jan 11, 2025 05:30:50.585982084 CET	587	49714	108.179.234.136	192.168.2.8
Jan 11, 2025 05:30:50.586051941 CET	587	49714	108.179.234.136	192.168.2.8
Jan 11, 2025 05:30:50.586062908 CET	587	49714	108.179.234.136	192.168.2.8
Jan 11, 2025 05:30:50.586074114 CET	587	49714	108.179.234.136	192.168.2.8
Jan 11, 2025 05:30:50.586117029 CET	587	49714	108.179.234.136	192.168.2.8
Jan 11, 2025 05:30:50.588890076 CET	587	49714	108.179.234.136	192.168.2.8
Jan 11, 2025 05:30:50.589756012 CET	587	49714	108.179.234.136	192.168.2.8
Jan 11, 2025 05:30:50.589819908 CET	587	49714	108.179.234.136	192.168.2.8
Jan 11, 2025 05:30:50.589829922 CET	587	49714	108.179.234.136	192.168.2.8
Jan 11, 2025 05:30:50.589890957 CET	587	49714	108.179.234.136	192.168.2.8
Jan 11, 2025 05:30:50.589900970 CET	587	49714	108.179.234.136	192.168.2.8
Jan 11, 2025 05:30:50.589973927 CET	587	49714	108.179.234.136	192.168.2.8
Jan 11, 2025 05:30:50.589983940 CET	587	49714	108.179.234.136	192.168.2.8
Jan 11, 2025 05:30:50.590027094 CET	587	49714	108.179.234.136	192.168.2.8
Jan 11, 2025 05:30:50.590037107 CET	587	49714	108.179.234.136	192.168.2.8
Jan 11, 2025 05:30:50.590097904 CET	587	49714	108.179.234.136	192.168.2.8
Jan 11, 2025 05:30:50.590106964 CET	587	49714	108.179.234.136	192.168.2.8
Jan 11, 2025 05:30:50.590147018 CET	587	49714	108.179.234.136	192.168.2.8
Jan 11, 2025 05:30:50.590168953 CET	587	49714	108.179.234.136	192.168.2.8
Jan 11, 2025 05:30:50.590235949 CET	587	49714	108.179.234.136	192.168.2.8
Jan 11, 2025 05:30:50.590245962 CET	587	49714	108.179.234.136	192.168.2.8
Jan 11, 2025 05:30:50.590277910 CET	587	49714	108.179.234.136	192.168.2.8
Jan 11, 2025 05:30:50.590287924 CET	587	49714	108.179.234.136	192.168.2.8
Jan 11, 2025 05:30:50.590486050 CET	587	49714	108.179.234.136	192.168.2.8
Jan 11, 2025 05:30:50.590495110 CET	587	49714	108.179.234.136	192.168.2.8
Jan 11, 2025 05:30:50.590538025 CET	587	49714	108.179.234.136	192.168.2.8
Jan 11, 2025 05:30:50.590548992 CET	587	49714	108.179.234.136	192.168.2.8
Jan 11, 2025 05:30:50.590572119 CET	587	49714	108.179.234.136	192.168.2.8
Jan 11, 2025 05:30:50.590580940 CET	587	49714	108.179.234.136	192.168.2.8
Jan 11, 2025 05:30:50.590634108 CET	587	49714	108.179.234.136	192.168.2.8
Jan 11, 2025 05:30:50.880738020 CET	587	49714	108.179.234.136	192.168.2.8
Jan 11, 2025 05:30:50.922771931 CET	49714	587	192.168.2.8	108.179.234.136
Jan 11, 2025 05:30:51.778009892 CET	49714	587	192.168.2.8	108.179.234.136
Jan 11, 2025 05:30:51.782998085 CET	587	49714	108.179.234.136	192.168.2.8
Jan 11, 2025 05:30:51.890003920 CET	587	49714	108.179.234.136	192.168.2.8
Jan 11, 2025 05:30:51.890563011 CET	49714	587	192.168.2.8	108.179.234.136
Jan 11, 2025 05:30:51.893078089 CET	49715	587	192.168.2.8	108.179.234.136
Jan 11, 2025 05:30:51.897947073 CET	587	49715	108.179.234.136	192.168.2.8
Jan 11, 2025 05:30:51.898323059 CET	49715	587	192.168.2.8	108.179.234.136
Jan 11, 2025 05:30:52.410563946 CET	587	49715	108.179.234.136	192.168.2.8
Jan 11, 2025 05:30:52.410835981 CET	49715	587	192.168.2.8	108.179.234.136
Jan 11, 2025 05:30:52.415865898 CET	587	49715	108.179.234.136	192.168.2.8
Jan 11, 2025 05:30:52.524573088 CET	587	49715	108.179.234.136	192.168.2.8
Jan 11, 2025 05:30:52.524826050 CET	49715	587	192.168.2.8	108.179.234.136
Jan 11, 2025 05:30:52.529793024 CET	587	49715	108.179.234.136	192.168.2.8
Jan 11, 2025 05:30:52.639161110 CET	587	49715	108.179.234.136	192.168.2.8
Jan 11, 2025 05:30:52.639714956 CET	49715	587	192.168.2.8	108.179.234.136
Jan 11, 2025 05:30:52.644507885 CET	587	49715	108.179.234.136	192.168.2.8
Jan 11, 2025 05:30:52.760293007 CET	587	49715	108.179.234.136	192.168.2.8
Jan 11, 2025 05:30:52.760340929 CET	587	49715	108.179.234.136	192.168.2.8
Jan 11, 2025 05:30:52.760379076 CET	587	49715	108.179.234.136	192.168.2.8
Jan 11, 2025 05:30:52.760387897 CET	49715	587	192.168.2.8	108.179.234.136
Jan 11, 2025 05:30:52.760442019 CET	587	49715	108.179.234.136	192.168.2.8
Jan 11, 2025 05:30:52.760481119 CET	49715	587	192.168.2.8	108.179.234.136
Jan 11, 2025 05:30:52.762804985 CET	49715	587	192.168.2.8	108.179.234.136
Jan 11, 2025 05:30:52.767770052 CET	587	49715	108.179.234.136	192.168.2.8
Jan 11, 2025 05:30:52.876353979 CET	587	49715	108.179.234.136	192.168.2.8
Jan 11, 2025 05:30:52.878415108 CET	49715	587	192.168.2.8	108.179.234.136
Jan 11, 2025 05:30:52.883552074 CET	587	49715	108.179.234.136	192.168.2.8
Jan 11, 2025 05:30:52.991971016 CET	587	49715	108.179.234.136	192.168.2.8
Jan 11, 2025 05:30:52.992285013 CET	49715	587	192.168.2.8	108.179.234.136
Jan 11, 2025 05:30:52.997109890 CET	587	49715	108.179.234.136	192.168.2.8
Jan 11, 2025 05:30:53.105880976 CET	587	49715	108.179.234.136	192.168.2.8
Jan 11, 2025 05:30:53.106219053 CET	49715	587	192.168.2.8	108.179.234.136
Jan 11, 2025 05:30:53.111130953 CET	587	49715	108.179.234.136	192.168.2.8
Jan 11, 2025 05:30:53.221076012 CET	587	49715	108.179.234.136	192.168.2.8
Jan 11, 2025 05:30:53.221345901 CET	49715	587	192.168.2.8	108.179.234.136
Jan 11, 2025 05:30:53.226295948 CET	587	49715	108.179.234.136	192.168.2.8
Jan 11, 2025 05:30:53.334678888 CET	587	49715	108.179.234.136	192.168.2.8
Jan 11, 2025 05:30:53.341375113 CET	49715	587	192.168.2.8	108.179.234.136
Jan 11, 2025 05:30:53.346369028 CET	587	49715	108.179.234.136	192.168.2.8
Jan 11, 2025 05:30:53.463170052 CET	587	49715	108.179.234.136	192.168.2.8
Jan 11, 2025 05:30:53.468996048 CET	49715	587	192.168.2.8	108.179.234.136
Jan 11, 2025 05:30:53.473042011 CET	49715	587	192.168.2.8	108.179.234.136
Jan 11, 2025 05:30:53.473910093 CET	587	49715	108.179.234.136	192.168.2.8
Jan 11, 2025 05:30:53.478269100 CET	587	49715	108.179.234.136	192.168.2.8
Jan 11, 2025 05:30:53.485125065 CET	49715	587	192.168.2.8	108.179.234.136
Jan 11, 2025 05:30:53.530761003 CET	49716	587	192.168.2.8	108.179.234.136
Jan 11, 2025 05:30:53.535721064 CET	587	49716	108.179.234.136	192.168.2.8
Jan 11, 2025 05:30:53.539285898 CET	49716	587	192.168.2.8	108.179.234.136
Jan 11, 2025 05:30:54.049102068 CET	587	49716	108.179.234.136	192.168.2.8
Jan 11, 2025 05:30:54.188636065 CET	49716	587	192.168.2.8	108.179.234.136
Jan 11, 2025 05:30:54.250937939 CET	49716	587	192.168.2.8	108.179.234.136
Jan 11, 2025 05:30:54.257117033 CET	587	49716	108.179.234.136	192.168.2.8
Jan 11, 2025 05:30:54.364556074 CET	587	49716	108.179.234.136	192.168.2.8
Jan 11, 2025 05:30:54.469249964 CET	49716	587	192.168.2.8	108.179.234.136
Jan 11, 2025 05:30:54.474061966 CET	587	49716	108.179.234.136	192.168.2.8
Jan 11, 2025 05:30:54.582786083 CET	587	49716	108.179.234.136	192.168.2.8
Jan 11, 2025 05:30:54.609671116 CET	49716	587	192.168.2.8	108.179.234.136
Jan 11, 2025 05:30:54.614545107 CET	587	49716	108.179.234.136	192.168.2.8
Jan 11, 2025 05:30:54.729294062 CET	587	49716	108.179.234.136	192.168.2.8
Jan 11, 2025 05:30:54.729306936 CET	587	49716	108.179.234.136	192.168.2.8
Jan 11, 2025 05:30:54.729317904 CET	587	49716	108.179.234.136	192.168.2.8
Jan 11, 2025 05:30:54.729330063 CET	587	49716	108.179.234.136	192.168.2.8
Jan 11, 2025 05:30:54.729367018 CET	49716	587	192.168.2.8	108.179.234.136
Jan 11, 2025 05:30:54.729413033 CET	49716	587	192.168.2.8	108.179.234.136
Jan 11, 2025 05:30:54.736275911 CET	49716	587	192.168.2.8	108.179.234.136
Jan 11, 2025 05:30:54.741061926 CET	587	49716	108.179.234.136	192.168.2.8
Jan 11, 2025 05:30:54.849407911 CET	587	49716	108.179.234.136	192.168.2.8
Jan 11, 2025 05:30:54.852574110 CET	49716	587	192.168.2.8	108.179.234.136
Jan 11, 2025 05:30:54.857353926 CET	587	49716	108.179.234.136	192.168.2.8
Jan 11, 2025 05:30:54.964785099 CET	587	49716	108.179.234.136	192.168.2.8
Jan 11, 2025 05:30:54.965034008 CET	49716	587	192.168.2.8	108.179.234.136
Jan 11, 2025 05:30:54.969928026 CET	587	49716	108.179.234.136	192.168.2.8
Jan 11, 2025 05:30:55.077501059 CET	587	49716	108.179.234.136	192.168.2.8
Jan 11, 2025 05:30:55.077915907 CET	49716	587	192.168.2.8	108.179.234.136
Jan 11, 2025 05:30:55.082756996 CET	587	49716	108.179.234.136	192.168.2.8
Jan 11, 2025 05:30:55.191127062 CET	587	49716	108.179.234.136	192.168.2.8
Jan 11, 2025 05:30:55.191339016 CET	49716	587	192.168.2.8	108.179.234.136
Jan 11, 2025 05:30:55.205118895 CET	587	49716	108.179.234.136	192.168.2.8
Jan 11, 2025 05:30:55.312511921 CET	587	49716	108.179.234.136	192.168.2.8
Jan 11, 2025 05:30:55.312715054 CET	49716	587	192.168.2.8	108.179.234.136
Jan 11, 2025 05:30:55.317646027 CET	587	49716	108.179.234.136	192.168.2.8
Jan 11, 2025 05:30:55.432442904 CET	587	49716	108.179.234.136	192.168.2.8
Jan 11, 2025 05:30:55.432655096 CET	49716	587	192.168.2.8	108.179.234.136
Jan 11, 2025 05:30:55.437532902 CET	587	49716	108.179.234.136	192.168.2.8
Jan 11, 2025 05:30:55.544771910 CET	587	49716	108.179.234.136	192.168.2.8
Jan 11, 2025 05:30:55.545212984 CET	49716	587	192.168.2.8	108.179.234.136
Jan 11, 2025 05:30:55.545212984 CET	49716	587	192.168.2.8	108.179.234.136
Jan 11, 2025 05:30:55.545284033 CET	49716	587	192.168.2.8	108.179.234.136
Jan 11, 2025 05:30:55.545284986 CET	49716	587	192.168.2.8	108.179.234.136
Jan 11, 2025 05:30:55.546478033 CET	49716	587	192.168.2.8	108.179.234.136
Jan 11, 2025 05:30:55.550091028 CET	587	49716	108.179.234.136	192.168.2.8
Jan 11, 2025 05:30:55.550153971 CET	587	49716	108.179.234.136	192.168.2.8
Jan 11, 2025 05:30:55.550184011 CET	49716	587	192.168.2.8	108.179.234.136
Jan 11, 2025 05:30:55.550184011 CET	587	49716	108.179.234.136	192.168.2.8
Jan 11, 2025 05:30:55.550223112 CET	587	49716	108.179.234.136	192.168.2.8
Jan 11, 2025 05:30:55.550339937 CET	49716	587	192.168.2.8	108.179.234.136
Jan 11, 2025 05:30:55.551367044 CET	587	49716	108.179.234.136	192.168.2.8
Jan 11, 2025 05:30:55.551471949 CET	587	49716	108.179.234.136	192.168.2.8
Jan 11, 2025 05:30:55.551505089 CET	587	49716	108.179.234.136	192.168.2.8
Jan 11, 2025 05:30:55.551546097 CET	49716	587	192.168.2.8	108.179.234.136
Jan 11, 2025 05:30:55.551614046 CET	587	49716	108.179.234.136	192.168.2.8
Jan 11, 2025 05:30:55.551645994 CET	49716	587	192.168.2.8	108.179.234.136
Jan 11, 2025 05:30:55.551702976 CET	49716	587	192.168.2.8	108.179.234.136
Jan 11, 2025 05:30:55.555146933 CET	587	49716	108.179.234.136	192.168.2.8
Jan 11, 2025 05:30:55.555262089 CET	49716	587	192.168.2.8	108.179.234.136
Jan 11, 2025 05:30:55.556544065 CET	587	49716	108.179.234.136	192.168.2.8
Jan 11, 2025 05:30:55.556574106 CET	587	49716	108.179.234.136	192.168.2.8
Jan 11, 2025 05:30:55.556607008 CET	49716	587	192.168.2.8	108.179.234.136
Jan 11, 2025 05:30:55.556653023 CET	49716	587	192.168.2.8	108.179.234.136
Jan 11, 2025 05:30:55.556694031 CET	587	49716	108.179.234.136	192.168.2.8
Jan 11, 2025 05:30:55.556746006 CET	587	49716	108.179.234.136	192.168.2.8
Jan 11, 2025 05:30:55.556792974 CET	49716	587	192.168.2.8	108.179.234.136
Jan 11, 2025 05:30:55.556838036 CET	587	49716	108.179.234.136	192.168.2.8
Jan 11, 2025 05:30:55.556865931 CET	587	49716	108.179.234.136	192.168.2.8
Jan 11, 2025 05:30:55.556876898 CET	49716	587	192.168.2.8	108.179.234.136
Jan 11, 2025 05:30:55.556895971 CET	49716	587	192.168.2.8	108.179.234.136
Jan 11, 2025 05:30:55.556931019 CET	49716	587	192.168.2.8	108.179.234.136
Jan 11, 2025 05:30:55.560376883 CET	587	49716	108.179.234.136	192.168.2.8
Jan 11, 2025 05:30:55.560489893 CET	49716	587	192.168.2.8	108.179.234.136
Jan 11, 2025 05:30:55.560540915 CET	587	49716	108.179.234.136	192.168.2.8
Jan 11, 2025 05:30:55.560617924 CET	49716	587	192.168.2.8	108.179.234.136
Jan 11, 2025 05:30:55.561404943 CET	587	49716	108.179.234.136	192.168.2.8
Jan 11, 2025 05:30:55.561512947 CET	587	49716	108.179.234.136	192.168.2.8
Jan 11, 2025 05:30:55.561542034 CET	49716	587	192.168.2.8	108.179.234.136
Jan 11, 2025 05:30:55.561650038 CET	587	49716	108.179.234.136	192.168.2.8
Jan 11, 2025 05:30:55.561691999 CET	587	49716	108.179.234.136	192.168.2.8
Jan 11, 2025 05:30:55.561778069 CET	587	49716	108.179.234.136	192.168.2.8
Jan 11, 2025 05:30:55.561809063 CET	587	49716	108.179.234.136	192.168.2.8
Jan 11, 2025 05:30:55.561847925 CET	587	49716	108.179.234.136	192.168.2.8
Jan 11, 2025 05:30:55.561908960 CET	587	49716	108.179.234.136	192.168.2.8
Jan 11, 2025 05:30:55.561950922 CET	587	49716	108.179.234.136	192.168.2.8
Jan 11, 2025 05:30:55.562024117 CET	587	49716	108.179.234.136	192.168.2.8
Jan 11, 2025 05:30:55.562069893 CET	587	49716	108.179.234.136	192.168.2.8
Jan 11, 2025 05:30:55.562077999 CET	587	49716	108.179.234.136	192.168.2.8
Jan 11, 2025 05:30:55.562112093 CET	587	49716	108.179.234.136	192.168.2.8
Jan 11, 2025 05:30:55.562129974 CET	587	49716	108.179.234.136	192.168.2.8
Jan 11, 2025 05:30:55.562179089 CET	587	49716	108.179.234.136	192.168.2.8
Jan 11, 2025 05:30:55.562186956 CET	587	49716	108.179.234.136	192.168.2.8
Jan 11, 2025 05:30:55.562227964 CET	587	49716	108.179.234.136	192.168.2.8
Jan 11, 2025 05:30:55.562237024 CET	587	49716	108.179.234.136	192.168.2.8
Jan 11, 2025 05:30:55.562278032 CET	587	49716	108.179.234.136	192.168.2.8
Jan 11, 2025 05:30:55.562287092 CET	587	49716	108.179.234.136	192.168.2.8
Jan 11, 2025 05:30:55.562325954 CET	587	49716	108.179.234.136	192.168.2.8
Jan 11, 2025 05:30:55.562335014 CET	587	49716	108.179.234.136	192.168.2.8
Jan 11, 2025 05:30:55.565310001 CET	587	49716	108.179.234.136	192.168.2.8
Jan 11, 2025 05:30:55.566210985 CET	587	49716	108.179.234.136	192.168.2.8
Jan 11, 2025 05:30:55.566251993 CET	587	49716	108.179.234.136	192.168.2.8
Jan 11, 2025 05:30:55.566282034 CET	587	49716	108.179.234.136	192.168.2.8
Jan 11, 2025 05:30:55.566339016 CET	587	49716	108.179.234.136	192.168.2.8
Jan 11, 2025 05:30:55.566348076 CET	587	49716	108.179.234.136	192.168.2.8
Jan 11, 2025 05:30:55.566411018 CET	587	49716	108.179.234.136	192.168.2.8
Jan 11, 2025 05:30:55.566418886 CET	587	49716	108.179.234.136	192.168.2.8
Jan 11, 2025 05:30:55.566450119 CET	587	49716	108.179.234.136	192.168.2.8
Jan 11, 2025 05:30:55.566458941 CET	587	49716	108.179.234.136	192.168.2.8
Jan 11, 2025 05:30:55.566498041 CET	587	49716	108.179.234.136	192.168.2.8
Jan 11, 2025 05:30:55.566507101 CET	587	49716	108.179.234.136	192.168.2.8
Jan 11, 2025 05:30:55.862968922 CET	587	49716	108.179.234.136	192.168.2.8
Jan 11, 2025 05:30:55.985342026 CET	49716	587	192.168.2.8	108.179.234.136
Jan 11, 2025 05:30:56.556966066 CET	49716	587	192.168.2.8	108.179.234.136
Jan 11, 2025 05:30:56.562618971 CET	587	49716	108.179.234.136	192.168.2.8
Jan 11, 2025 05:30:56.669066906 CET	587	49716	108.179.234.136	192.168.2.8
Jan 11, 2025 05:30:56.669786930 CET	49716	587	192.168.2.8	108.179.234.136
Jan 11, 2025 05:30:56.671333075 CET	49717	587	192.168.2.8	108.179.234.136
Jan 11, 2025 05:30:56.676139116 CET	587	49717	108.179.234.136	192.168.2.8
Jan 11, 2025 05:30:56.676213980 CET	49717	587	192.168.2.8	108.179.234.136
Jan 11, 2025 05:30:57.182173967 CET	587	49717	108.179.234.136	192.168.2.8
Jan 11, 2025 05:30:57.182320118 CET	49717	587	192.168.2.8	108.179.234.136
Jan 11, 2025 05:30:57.188030958 CET	587	49717	108.179.234.136	192.168.2.8
Jan 11, 2025 05:30:57.296406031 CET	587	49717	108.179.234.136	192.168.2.8
Jan 11, 2025 05:30:57.296575069 CET	49717	587	192.168.2.8	108.179.234.136
Jan 11, 2025 05:30:57.302227020 CET	587	49717	108.179.234.136	192.168.2.8
Jan 11, 2025 05:30:57.409641981 CET	587	49717	108.179.234.136	192.168.2.8
Jan 11, 2025 05:30:57.413427114 CET	49717	587	192.168.2.8	108.179.234.136
Jan 11, 2025 05:30:57.418195963 CET	587	49717	108.179.234.136	192.168.2.8
Jan 11, 2025 05:30:57.532748938 CET	587	49717	108.179.234.136	192.168.2.8
Jan 11, 2025 05:30:57.532771111 CET	587	49717	108.179.234.136	192.168.2.8
Jan 11, 2025 05:30:57.532782078 CET	587	49717	108.179.234.136	192.168.2.8
Jan 11, 2025 05:30:57.532949924 CET	49717	587	192.168.2.8	108.179.234.136
Jan 11, 2025 05:30:57.536971092 CET	49717	587	192.168.2.8	108.179.234.136
Jan 11, 2025 05:30:57.542593002 CET	587	49717	108.179.234.136	192.168.2.8
Jan 11, 2025 05:30:57.649938107 CET	587	49717	108.179.234.136	192.168.2.8
Jan 11, 2025 05:30:57.652971029 CET	49717	587	192.168.2.8	108.179.234.136
Jan 11, 2025 05:30:57.658132076 CET	587	49717	108.179.234.136	192.168.2.8
Jan 11, 2025 05:30:57.765458107 CET	587	49717	108.179.234.136	192.168.2.8
Jan 11, 2025 05:30:57.765706062 CET	49717	587	192.168.2.8	108.179.234.136
Jan 11, 2025 05:30:57.770503044 CET	587	49717	108.179.234.136	192.168.2.8
Jan 11, 2025 05:30:57.878030062 CET	587	49717	108.179.234.136	192.168.2.8
Jan 11, 2025 05:30:57.878381968 CET	49717	587	192.168.2.8	108.179.234.136
Jan 11, 2025 05:30:57.883184910 CET	587	49717	108.179.234.136	192.168.2.8
Jan 11, 2025 05:30:58.092761040 CET	587	49717	108.179.234.136	192.168.2.8
Jan 11, 2025 05:30:58.092992067 CET	49717	587	192.168.2.8	108.179.234.136
Jan 11, 2025 05:30:58.098850012 CET	587	49717	108.179.234.136	192.168.2.8
Jan 11, 2025 05:30:58.206073999 CET	587	49717	108.179.234.136	192.168.2.8
Jan 11, 2025 05:30:58.207788944 CET	49717	587	192.168.2.8	108.179.234.136
Jan 11, 2025 05:30:58.212588072 CET	587	49717	108.179.234.136	192.168.2.8
Jan 11, 2025 05:30:58.327688932 CET	587	49717	108.179.234.136	192.168.2.8
Jan 11, 2025 05:30:58.328169107 CET	49717	587	192.168.2.8	108.179.234.136
Jan 11, 2025 05:30:58.333003998 CET	587	49717	108.179.234.136	192.168.2.8
Jan 11, 2025 05:30:58.440191031 CET	587	49717	108.179.234.136	192.168.2.8
Jan 11, 2025 05:30:58.440588951 CET	49717	587	192.168.2.8	108.179.234.136
Jan 11, 2025 05:30:58.440677881 CET	49717	587	192.168.2.8	108.179.234.136
Jan 11, 2025 05:30:58.440742016 CET	49717	587	192.168.2.8	108.179.234.136
Jan 11, 2025 05:30:58.440804958 CET	49717	587	192.168.2.8	108.179.234.136
Jan 11, 2025 05:30:58.442327976 CET	49717	587	192.168.2.8	108.179.234.136
Jan 11, 2025 05:30:58.445333958 CET	587	49717	108.179.234.136	192.168.2.8
Jan 11, 2025 05:30:58.445377111 CET	49717	587	192.168.2.8	108.179.234.136
Jan 11, 2025 05:30:58.445513964 CET	587	49717	108.179.234.136	192.168.2.8
Jan 11, 2025 05:30:58.445523977 CET	587	49717	108.179.234.136	192.168.2.8
Jan 11, 2025 05:30:58.445664883 CET	587	49717	108.179.234.136	192.168.2.8
Jan 11, 2025 05:30:58.445708036 CET	49717	587	192.168.2.8	108.179.234.136
Jan 11, 2025 05:30:58.447122097 CET	587	49717	108.179.234.136	192.168.2.8
Jan 11, 2025 05:30:58.447130919 CET	587	49717	108.179.234.136	192.168.2.8
Jan 11, 2025 05:30:58.447171926 CET	587	49717	108.179.234.136	192.168.2.8
Jan 11, 2025 05:30:58.447171926 CET	49717	587	192.168.2.8	108.179.234.136
Jan 11, 2025 05:30:58.447180033 CET	587	49717	108.179.234.136	192.168.2.8
Jan 11, 2025 05:30:58.447211027 CET	49717	587	192.168.2.8	108.179.234.136
Jan 11, 2025 05:30:58.447238922 CET	49717	587	192.168.2.8	108.179.234.136
Jan 11, 2025 05:30:58.447277069 CET	587	49717	108.179.234.136	192.168.2.8
Jan 11, 2025 05:30:58.447285891 CET	587	49717	108.179.234.136	192.168.2.8
Jan 11, 2025 05:30:58.447320938 CET	49717	587	192.168.2.8	108.179.234.136
Jan 11, 2025 05:30:58.447340012 CET	587	49717	108.179.234.136	192.168.2.8
Jan 11, 2025 05:30:58.447345018 CET	49717	587	192.168.2.8	108.179.234.136
Jan 11, 2025 05:30:58.447379112 CET	49717	587	192.168.2.8	108.179.234.136
Jan 11, 2025 05:30:58.450187922 CET	587	49717	108.179.234.136	192.168.2.8
Jan 11, 2025 05:30:58.450232983 CET	49717	587	192.168.2.8	108.179.234.136
Jan 11, 2025 05:30:58.452018976 CET	587	49717	108.179.234.136	192.168.2.8
Jan 11, 2025 05:30:58.452066898 CET	49717	587	192.168.2.8	108.179.234.136
Jan 11, 2025 05:30:58.452075958 CET	587	49717	108.179.234.136	192.168.2.8
Jan 11, 2025 05:30:58.452115059 CET	587	49717	108.179.234.136	192.168.2.8
Jan 11, 2025 05:30:58.452126980 CET	49717	587	192.168.2.8	108.179.234.136
Jan 11, 2025 05:30:58.452158928 CET	49717	587	192.168.2.8	108.179.234.136
Jan 11, 2025 05:30:58.452227116 CET	587	49717	108.179.234.136	192.168.2.8
Jan 11, 2025 05:30:58.452235937 CET	587	49717	108.179.234.136	192.168.2.8
Jan 11, 2025 05:30:58.452260017 CET	587	49717	108.179.234.136	192.168.2.8
Jan 11, 2025 05:30:58.452276945 CET	49717	587	192.168.2.8	108.179.234.136
Jan 11, 2025 05:30:58.452290058 CET	49717	587	192.168.2.8	108.179.234.136
Jan 11, 2025 05:30:58.452306032 CET	49717	587	192.168.2.8	108.179.234.136
Jan 11, 2025 05:30:58.452332020 CET	587	49717	108.179.234.136	192.168.2.8
Jan 11, 2025 05:30:58.452363014 CET	587	49717	108.179.234.136	192.168.2.8
Jan 11, 2025 05:30:58.452378035 CET	49717	587	192.168.2.8	108.179.234.136
Jan 11, 2025 05:30:58.452406883 CET	49717	587	192.168.2.8	108.179.234.136
Jan 11, 2025 05:30:58.455065012 CET	587	49717	108.179.234.136	192.168.2.8
Jan 11, 2025 05:30:58.455127001 CET	49717	587	192.168.2.8	108.179.234.136
Jan 11, 2025 05:30:58.456721067 CET	587	49717	108.179.234.136	192.168.2.8
Jan 11, 2025 05:30:58.456763983 CET	49717	587	192.168.2.8	108.179.234.136
Jan 11, 2025 05:30:58.456779003 CET	587	49717	108.179.234.136	192.168.2.8
Jan 11, 2025 05:30:58.456832886 CET	49717	587	192.168.2.8	108.179.234.136
Jan 11, 2025 05:30:58.456835032 CET	587	49717	108.179.234.136	192.168.2.8
Jan 11, 2025 05:30:58.456928015 CET	587	49717	108.179.234.136	192.168.2.8
Jan 11, 2025 05:30:58.456955910 CET	587	49717	108.179.234.136	192.168.2.8
Jan 11, 2025 05:30:58.457001925 CET	587	49717	108.179.234.136	192.168.2.8
Jan 11, 2025 05:30:58.457072020 CET	587	49717	108.179.234.136	192.168.2.8
Jan 11, 2025 05:30:58.457113028 CET	587	49717	108.179.234.136	192.168.2.8
Jan 11, 2025 05:30:58.457179070 CET	587	49717	108.179.234.136	192.168.2.8
Jan 11, 2025 05:30:58.457220078 CET	587	49717	108.179.234.136	192.168.2.8
Jan 11, 2025 05:30:58.457299948 CET	587	49717	108.179.234.136	192.168.2.8
Jan 11, 2025 05:30:58.457351923 CET	587	49717	108.179.234.136	192.168.2.8
Jan 11, 2025 05:30:58.457360029 CET	587	49717	108.179.234.136	192.168.2.8
Jan 11, 2025 05:30:58.457393885 CET	587	49717	108.179.234.136	192.168.2.8
Jan 11, 2025 05:30:58.457452059 CET	587	49717	108.179.234.136	192.168.2.8
Jan 11, 2025 05:30:58.457498074 CET	587	49717	108.179.234.136	192.168.2.8
Jan 11, 2025 05:30:58.457504988 CET	587	49717	108.179.234.136	192.168.2.8
Jan 11, 2025 05:30:58.457545996 CET	587	49717	108.179.234.136	192.168.2.8
Jan 11, 2025 05:30:58.457554102 CET	587	49717	108.179.234.136	192.168.2.8
Jan 11, 2025 05:30:58.457619905 CET	587	49717	108.179.234.136	192.168.2.8
Jan 11, 2025 05:30:58.457628012 CET	587	49717	108.179.234.136	192.168.2.8
Jan 11, 2025 05:30:58.457669020 CET	587	49717	108.179.234.136	192.168.2.8
Jan 11, 2025 05:30:58.457676888 CET	587	49717	108.179.234.136	192.168.2.8
Jan 11, 2025 05:30:58.459949970 CET	587	49717	108.179.234.136	192.168.2.8
Jan 11, 2025 05:30:58.461576939 CET	587	49717	108.179.234.136	192.168.2.8
Jan 11, 2025 05:30:58.461585045 CET	587	49717	108.179.234.136	192.168.2.8
Jan 11, 2025 05:30:58.461647034 CET	587	49717	108.179.234.136	192.168.2.8
Jan 11, 2025 05:30:58.461654902 CET	587	49717	108.179.234.136	192.168.2.8
Jan 11, 2025 05:30:58.461694002 CET	587	49717	108.179.234.136	192.168.2.8
Jan 11, 2025 05:30:58.461700916 CET	587	49717	108.179.234.136	192.168.2.8
Jan 11, 2025 05:30:58.461848021 CET	587	49717	108.179.234.136	192.168.2.8
Jan 11, 2025 05:30:58.461855888 CET	587	49717	108.179.234.136	192.168.2.8
Jan 11, 2025 05:30:58.461863041 CET	587	49717	108.179.234.136	192.168.2.8
Jan 11, 2025 05:30:58.461872101 CET	587	49717	108.179.234.136	192.168.2.8
Jan 11, 2025 05:30:58.461880922 CET	587	49717	108.179.234.136	192.168.2.8
Jan 11, 2025 05:30:58.757358074 CET	587	49717	108.179.234.136	192.168.2.8
Jan 11, 2025 05:30:58.797734976 CET	49717	587	192.168.2.8	108.179.234.136
Jan 11, 2025 05:30:59.797893047 CET	49717	587	192.168.2.8	108.179.234.136
Jan 11, 2025 05:30:59.802901030 CET	587	49717	108.179.234.136	192.168.2.8
Jan 11, 2025 05:30:59.910135984 CET	587	49717	108.179.234.136	192.168.2.8
Jan 11, 2025 05:30:59.910604954 CET	49717	587	192.168.2.8	108.179.234.136
Jan 11, 2025 05:30:59.911809921 CET	49718	587	192.168.2.8	108.179.234.136
Jan 11, 2025 05:30:59.916601896 CET	587	49718	108.179.234.136	192.168.2.8
Jan 11, 2025 05:30:59.916688919 CET	49718	587	192.168.2.8	108.179.234.136
Jan 11, 2025 05:31:00.434396029 CET	587	49718	108.179.234.136	192.168.2.8
Jan 11, 2025 05:31:00.434622049 CET	49718	587	192.168.2.8	108.179.234.136
Jan 11, 2025 05:31:00.439482927 CET	587	49718	108.179.234.136	192.168.2.8
Jan 11, 2025 05:31:00.548203945 CET	587	49718	108.179.234.136	192.168.2.8
Jan 11, 2025 05:31:00.548383951 CET	49718	587	192.168.2.8	108.179.234.136
Jan 11, 2025 05:31:00.553280115 CET	587	49718	108.179.234.136	192.168.2.8
Jan 11, 2025 05:31:00.662817955 CET	587	49718	108.179.234.136	192.168.2.8
Jan 11, 2025 05:31:00.663399935 CET	49718	587	192.168.2.8	108.179.234.136
Jan 11, 2025 05:31:00.668257952 CET	587	49718	108.179.234.136	192.168.2.8
Jan 11, 2025 05:31:00.784125090 CET	587	49718	108.179.234.136	192.168.2.8
Jan 11, 2025 05:31:00.784368038 CET	587	49718	108.179.234.136	192.168.2.8
Jan 11, 2025 05:31:00.784379959 CET	587	49718	108.179.234.136	192.168.2.8
Jan 11, 2025 05:31:00.784408092 CET	49718	587	192.168.2.8	108.179.234.136
Jan 11, 2025 05:31:00.794461012 CET	49718	587	192.168.2.8	108.179.234.136
Jan 11, 2025 05:31:00.799328089 CET	587	49718	108.179.234.136	192.168.2.8
Jan 11, 2025 05:31:00.908066034 CET	587	49718	108.179.234.136	192.168.2.8
Jan 11, 2025 05:31:00.911242962 CET	49718	587	192.168.2.8	108.179.234.136
Jan 11, 2025 05:31:00.916196108 CET	587	49718	108.179.234.136	192.168.2.8
Jan 11, 2025 05:31:01.024811983 CET	587	49718	108.179.234.136	192.168.2.8
Jan 11, 2025 05:31:01.025228024 CET	49718	587	192.168.2.8	108.179.234.136
Jan 11, 2025 05:31:01.030137062 CET	587	49718	108.179.234.136	192.168.2.8
Jan 11, 2025 05:31:01.142874956 CET	587	49718	108.179.234.136	192.168.2.8
Jan 11, 2025 05:31:01.143239021 CET	49718	587	192.168.2.8	108.179.234.136
Jan 11, 2025 05:31:01.148086071 CET	587	49718	108.179.234.136	192.168.2.8
Jan 11, 2025 05:31:01.259406090 CET	587	49718	108.179.234.136	192.168.2.8
Jan 11, 2025 05:31:01.259650946 CET	49718	587	192.168.2.8	108.179.234.136
Jan 11, 2025 05:31:01.265019894 CET	587	49718	108.179.234.136	192.168.2.8
Jan 11, 2025 05:31:01.374773979 CET	587	49718	108.179.234.136	192.168.2.8
Jan 11, 2025 05:31:01.376211882 CET	49718	587	192.168.2.8	108.179.234.136
Jan 11, 2025 05:31:01.381264925 CET	587	49718	108.179.234.136	192.168.2.8
Jan 11, 2025 05:31:01.505546093 CET	587	49718	108.179.234.136	192.168.2.8
Jan 11, 2025 05:31:01.508225918 CET	49718	587	192.168.2.8	108.179.234.136
Jan 11, 2025 05:31:01.513885021 CET	587	49718	108.179.234.136	192.168.2.8
Jan 11, 2025 05:31:01.624443054 CET	587	49718	108.179.234.136	192.168.2.8
Jan 11, 2025 05:31:01.624927044 CET	49718	587	192.168.2.8	108.179.234.136
Jan 11, 2025 05:31:01.624969959 CET	49718	587	192.168.2.8	108.179.234.136
Jan 11, 2025 05:31:01.625073910 CET	49718	587	192.168.2.8	108.179.234.136
Jan 11, 2025 05:31:01.625073910 CET	49718	587	192.168.2.8	108.179.234.136
Jan 11, 2025 05:31:01.628490925 CET	49718	587	192.168.2.8	108.179.234.136
Jan 11, 2025 05:31:01.629817963 CET	587	49718	108.179.234.136	192.168.2.8
Jan 11, 2025 05:31:01.629966021 CET	49718	587	192.168.2.8	108.179.234.136
Jan 11, 2025 05:31:01.629996061 CET	587	49718	108.179.234.136	192.168.2.8
Jan 11, 2025 05:31:01.630011082 CET	587	49718	108.179.234.136	192.168.2.8
Jan 11, 2025 05:31:01.630259991 CET	49718	587	192.168.2.8	108.179.234.136
Jan 11, 2025 05:31:01.633832932 CET	587	49718	108.179.234.136	192.168.2.8
Jan 11, 2025 05:31:01.633867025 CET	587	49718	108.179.234.136	192.168.2.8
Jan 11, 2025 05:31:01.633877993 CET	587	49718	108.179.234.136	192.168.2.8
Jan 11, 2025 05:31:01.633970976 CET	49718	587	192.168.2.8	108.179.234.136
Jan 11, 2025 05:31:01.634036064 CET	49718	587	192.168.2.8	108.179.234.136
Jan 11, 2025 05:31:01.634654045 CET	587	49718	108.179.234.136	192.168.2.8
Jan 11, 2025 05:31:01.634715080 CET	49718	587	192.168.2.8	108.179.234.136
Jan 11, 2025 05:31:01.634800911 CET	587	49718	108.179.234.136	192.168.2.8
Jan 11, 2025 05:31:01.634938002 CET	49718	587	192.168.2.8	108.179.234.136
Jan 11, 2025 05:31:01.638967037 CET	587	49718	108.179.234.136	192.168.2.8
Jan 11, 2025 05:31:01.639039040 CET	587	49718	108.179.234.136	192.168.2.8
Jan 11, 2025 05:31:01.639050007 CET	587	49718	108.179.234.136	192.168.2.8
Jan 11, 2025 05:31:01.639070988 CET	49718	587	192.168.2.8	108.179.234.136
Jan 11, 2025 05:31:01.639259100 CET	49718	587	192.168.2.8	108.179.234.136
Jan 11, 2025 05:31:01.639300108 CET	587	49718	108.179.234.136	192.168.2.8
Jan 11, 2025 05:31:01.639309883 CET	587	49718	108.179.234.136	192.168.2.8
Jan 11, 2025 05:31:01.639374018 CET	49718	587	192.168.2.8	108.179.234.136
Jan 11, 2025 05:31:01.639517069 CET	587	49718	108.179.234.136	192.168.2.8
Jan 11, 2025 05:31:01.639528036 CET	587	49718	108.179.234.136	192.168.2.8
Jan 11, 2025 05:31:01.639580011 CET	49718	587	192.168.2.8	108.179.234.136
Jan 11, 2025 05:31:01.640185118 CET	587	49718	108.179.234.136	192.168.2.8
Jan 11, 2025 05:31:01.640254021 CET	49718	587	192.168.2.8	108.179.234.136
Jan 11, 2025 05:31:01.643678904 CET	587	49718	108.179.234.136	192.168.2.8
Jan 11, 2025 05:31:01.643948078 CET	587	49718	108.179.234.136	192.168.2.8
Jan 11, 2025 05:31:01.643969059 CET	587	49718	108.179.234.136	192.168.2.8
Jan 11, 2025 05:31:01.644047022 CET	587	49718	108.179.234.136	192.168.2.8
Jan 11, 2025 05:31:01.644078970 CET	49718	587	192.168.2.8	108.179.234.136
Jan 11, 2025 05:31:01.644126892 CET	587	49718	108.179.234.136	192.168.2.8
Jan 11, 2025 05:31:01.644207954 CET	587	49718	108.179.234.136	192.168.2.8
Jan 11, 2025 05:31:01.644675970 CET	587	49718	108.179.234.136	192.168.2.8
Jan 11, 2025 05:31:01.644686937 CET	587	49718	108.179.234.136	192.168.2.8
Jan 11, 2025 05:31:01.644695997 CET	587	49718	108.179.234.136	192.168.2.8
Jan 11, 2025 05:31:01.644706011 CET	587	49718	108.179.234.136	192.168.2.8
Jan 11, 2025 05:31:01.644714117 CET	587	49718	108.179.234.136	192.168.2.8
Jan 11, 2025 05:31:01.644722939 CET	587	49718	108.179.234.136	192.168.2.8
Jan 11, 2025 05:31:01.644731998 CET	587	49718	108.179.234.136	192.168.2.8
Jan 11, 2025 05:31:01.644740105 CET	587	49718	108.179.234.136	192.168.2.8
Jan 11, 2025 05:31:01.644747972 CET	587	49718	108.179.234.136	192.168.2.8
Jan 11, 2025 05:31:01.644979000 CET	587	49718	108.179.234.136	192.168.2.8
Jan 11, 2025 05:31:01.644989014 CET	587	49718	108.179.234.136	192.168.2.8
Jan 11, 2025 05:31:01.644998074 CET	587	49718	108.179.234.136	192.168.2.8
Jan 11, 2025 05:31:01.645005941 CET	587	49718	108.179.234.136	192.168.2.8
Jan 11, 2025 05:31:01.645024061 CET	587	49718	108.179.234.136	192.168.2.8
Jan 11, 2025 05:31:01.645037889 CET	587	49718	108.179.234.136	192.168.2.8
Jan 11, 2025 05:31:01.645050049 CET	587	49718	108.179.234.136	192.168.2.8
Jan 11, 2025 05:31:01.645059109 CET	587	49718	108.179.234.136	192.168.2.8
Jan 11, 2025 05:31:01.645066977 CET	587	49718	108.179.234.136	192.168.2.8
Jan 11, 2025 05:31:01.645075083 CET	587	49718	108.179.234.136	192.168.2.8
Jan 11, 2025 05:31:01.645183086 CET	587	49718	108.179.234.136	192.168.2.8
Jan 11, 2025 05:31:01.645200968 CET	587	49718	108.179.234.136	192.168.2.8
Jan 11, 2025 05:31:01.648880005 CET	587	49718	108.179.234.136	192.168.2.8
Jan 11, 2025 05:31:01.648943901 CET	587	49718	108.179.234.136	192.168.2.8
Jan 11, 2025 05:31:01.648953915 CET	587	49718	108.179.234.136	192.168.2.8
Jan 11, 2025 05:31:01.648962021 CET	587	49718	108.179.234.136	192.168.2.8
Jan 11, 2025 05:31:01.648972988 CET	587	49718	108.179.234.136	192.168.2.8
Jan 11, 2025 05:31:01.649077892 CET	587	49718	108.179.234.136	192.168.2.8
Jan 11, 2025 05:31:01.649086952 CET	587	49718	108.179.234.136	192.168.2.8
Jan 11, 2025 05:31:01.649096012 CET	587	49718	108.179.234.136	192.168.2.8
Jan 11, 2025 05:31:01.948829889 CET	587	49718	108.179.234.136	192.168.2.8
Jan 11, 2025 05:31:02.000874996 CET	49718	587	192.168.2.8	108.179.234.136
Jan 11, 2025 05:31:05.877453089 CET	49718	587	192.168.2.8	108.179.234.136
Jan 11, 2025 05:31:05.883259058 CET	587	49718	108.179.234.136	192.168.2.8
Jan 11, 2025 05:31:05.992501020 CET	587	49718	108.179.234.136	192.168.2.8
Jan 11, 2025 05:31:05.993249893 CET	49718	587	192.168.2.8	108.179.234.136
Jan 11, 2025 05:31:05.994168043 CET	49719	587	192.168.2.8	108.179.234.136
Jan 11, 2025 05:31:05.999063015 CET	587	49719	108.179.234.136	192.168.2.8
Jan 11, 2025 05:31:05.999170065 CET	49719	587	192.168.2.8	108.179.234.136
Jan 11, 2025 05:31:06.507355928 CET	587	49719	108.179.234.136	192.168.2.8
Jan 11, 2025 05:31:06.507522106 CET	49719	587	192.168.2.8	108.179.234.136
Jan 11, 2025 05:31:06.512438059 CET	587	49719	108.179.234.136	192.168.2.8
Jan 11, 2025 05:31:06.622246027 CET	587	49719	108.179.234.136	192.168.2.8
Jan 11, 2025 05:31:06.622416019 CET	49719	587	192.168.2.8	108.179.234.136
Jan 11, 2025 05:31:06.627324104 CET	587	49719	108.179.234.136	192.168.2.8
Jan 11, 2025 05:31:06.734621048 CET	587	49719	108.179.234.136	192.168.2.8
Jan 11, 2025 05:31:06.735107899 CET	49719	587	192.168.2.8	108.179.234.136
Jan 11, 2025 05:31:06.739993095 CET	587	49719	108.179.234.136	192.168.2.8
Jan 11, 2025 05:31:06.857079029 CET	587	49719	108.179.234.136	192.168.2.8
Jan 11, 2025 05:31:06.857091904 CET	587	49719	108.179.234.136	192.168.2.8
Jan 11, 2025 05:31:06.857101917 CET	587	49719	108.179.234.136	192.168.2.8
Jan 11, 2025 05:31:06.857182026 CET	49719	587	192.168.2.8	108.179.234.136
Jan 11, 2025 05:31:06.858985901 CET	49719	587	192.168.2.8	108.179.234.136
Jan 11, 2025 05:31:06.864778996 CET	587	49719	108.179.234.136	192.168.2.8
Jan 11, 2025 05:31:06.970552921 CET	587	49719	108.179.234.136	192.168.2.8
Jan 11, 2025 05:31:06.972315073 CET	49719	587	192.168.2.8	108.179.234.136
Jan 11, 2025 05:31:06.977209091 CET	587	49719	108.179.234.136	192.168.2.8
Jan 11, 2025 05:31:07.083826065 CET	587	49719	108.179.234.136	192.168.2.8
Jan 11, 2025 05:31:07.084141016 CET	49719	587	192.168.2.8	108.179.234.136
Jan 11, 2025 05:31:07.088934898 CET	587	49719	108.179.234.136	192.168.2.8
Jan 11, 2025 05:31:07.206343889 CET	587	49719	108.179.234.136	192.168.2.8
Jan 11, 2025 05:31:07.206717014 CET	49719	587	192.168.2.8	108.179.234.136
Jan 11, 2025 05:31:07.212507963 CET	587	49719	108.179.234.136	192.168.2.8
Jan 11, 2025 05:31:07.320409060 CET	587	49719	108.179.234.136	192.168.2.8
Jan 11, 2025 05:31:07.324151039 CET	49719	587	192.168.2.8	108.179.234.136
Jan 11, 2025 05:31:07.329813957 CET	587	49719	108.179.234.136	192.168.2.8
Jan 11, 2025 05:31:07.435966015 CET	587	49719	108.179.234.136	192.168.2.8
Jan 11, 2025 05:31:07.436228037 CET	49719	587	192.168.2.8	108.179.234.136
Jan 11, 2025 05:31:07.441103935 CET	587	49719	108.179.234.136	192.168.2.8
Jan 11, 2025 05:31:07.555119991 CET	587	49719	108.179.234.136	192.168.2.8
Jan 11, 2025 05:31:07.555356026 CET	49719	587	192.168.2.8	108.179.234.136
Jan 11, 2025 05:31:07.560163975 CET	587	49719	108.179.234.136	192.168.2.8
Jan 11, 2025 05:31:07.666917086 CET	587	49719	108.179.234.136	192.168.2.8
Jan 11, 2025 05:31:07.667366028 CET	49719	587	192.168.2.8	108.179.234.136
Jan 11, 2025 05:31:07.667455912 CET	49719	587	192.168.2.8	108.179.234.136
Jan 11, 2025 05:31:07.667455912 CET	49719	587	192.168.2.8	108.179.234.136
Jan 11, 2025 05:31:07.667509079 CET	49719	587	192.168.2.8	108.179.234.136
Jan 11, 2025 05:31:07.670425892 CET	49719	587	192.168.2.8	108.179.234.136
Jan 11, 2025 05:31:07.673023939 CET	587	49719	108.179.234.136	192.168.2.8
Jan 11, 2025 05:31:07.673366070 CET	49719	587	192.168.2.8	108.179.234.136
Jan 11, 2025 05:31:07.675333977 CET	587	49719	108.179.234.136	192.168.2.8
Jan 11, 2025 05:31:07.675398111 CET	49719	587	192.168.2.8	108.179.234.136
Jan 11, 2025 05:31:07.677014112 CET	587	49719	108.179.234.136	192.168.2.8
Jan 11, 2025 05:31:07.677041054 CET	587	49719	108.179.234.136	192.168.2.8
Jan 11, 2025 05:31:07.677105904 CET	587	49719	108.179.234.136	192.168.2.8
Jan 11, 2025 05:31:07.677140951 CET	49719	587	192.168.2.8	108.179.234.136
Jan 11, 2025 05:31:07.677195072 CET	49719	587	192.168.2.8	108.179.234.136
Jan 11, 2025 05:31:07.679270029 CET	587	49719	108.179.234.136	192.168.2.8
Jan 11, 2025 05:31:07.679403067 CET	49719	587	192.168.2.8	108.179.234.136
Jan 11, 2025 05:31:07.680407047 CET	587	49719	108.179.234.136	192.168.2.8
Jan 11, 2025 05:31:07.680540085 CET	49719	587	192.168.2.8	108.179.234.136
Jan 11, 2025 05:31:07.683362961 CET	587	49719	108.179.234.136	192.168.2.8
Jan 11, 2025 05:31:07.683434963 CET	587	49719	108.179.234.136	192.168.2.8
Jan 11, 2025 05:31:07.683443069 CET	49719	587	192.168.2.8	108.179.234.136
Jan 11, 2025 05:31:07.683444977 CET	587	49719	108.179.234.136	192.168.2.8
Jan 11, 2025 05:31:07.683461905 CET	587	49719	108.179.234.136	192.168.2.8
Jan 11, 2025 05:31:07.683510065 CET	49719	587	192.168.2.8	108.179.234.136
Jan 11, 2025 05:31:07.683551073 CET	49719	587	192.168.2.8	108.179.234.136
Jan 11, 2025 05:31:07.686636925 CET	587	49719	108.179.234.136	192.168.2.8
Jan 11, 2025 05:31:07.686655045 CET	587	49719	108.179.234.136	192.168.2.8
Jan 11, 2025 05:31:07.686724901 CET	49719	587	192.168.2.8	108.179.234.136
Jan 11, 2025 05:31:07.687814951 CET	587	49719	108.179.234.136	192.168.2.8
Jan 11, 2025 05:31:07.687877893 CET	49719	587	192.168.2.8	108.179.234.136
Jan 11, 2025 05:31:07.687947035 CET	587	49719	108.179.234.136	192.168.2.8
Jan 11, 2025 05:31:07.688011885 CET	49719	587	192.168.2.8	108.179.234.136
Jan 11, 2025 05:31:07.689121962 CET	587	49719	108.179.234.136	192.168.2.8
Jan 11, 2025 05:31:07.689573050 CET	49719	587	192.168.2.8	108.179.234.136
Jan 11, 2025 05:31:07.690373898 CET	587	49719	108.179.234.136	192.168.2.8
Jan 11, 2025 05:31:07.690445900 CET	49719	587	192.168.2.8	108.179.234.136
Jan 11, 2025 05:31:07.690551043 CET	587	49719	108.179.234.136	192.168.2.8
Jan 11, 2025 05:31:07.690568924 CET	587	49719	108.179.234.136	192.168.2.8
Jan 11, 2025 05:31:07.690694094 CET	587	49719	108.179.234.136	192.168.2.8
Jan 11, 2025 05:31:07.690759897 CET	587	49719	108.179.234.136	192.168.2.8
Jan 11, 2025 05:31:07.690819979 CET	587	49719	108.179.234.136	192.168.2.8
Jan 11, 2025 05:31:07.690900087 CET	587	49719	108.179.234.136	192.168.2.8
Jan 11, 2025 05:31:07.693598032 CET	587	49719	108.179.234.136	192.168.2.8
Jan 11, 2025 05:31:07.694185972 CET	587	49719	108.179.234.136	192.168.2.8
Jan 11, 2025 05:31:07.694726944 CET	587	49719	108.179.234.136	192.168.2.8
Jan 11, 2025 05:31:07.694771051 CET	587	49719	108.179.234.136	192.168.2.8
Jan 11, 2025 05:31:07.695383072 CET	587	49719	108.179.234.136	192.168.2.8
Jan 11, 2025 05:31:07.695393085 CET	587	49719	108.179.234.136	192.168.2.8
Jan 11, 2025 05:31:07.695406914 CET	587	49719	108.179.234.136	192.168.2.8
Jan 11, 2025 05:31:07.695476055 CET	587	49719	108.179.234.136	192.168.2.8
Jan 11, 2025 05:31:07.695977926 CET	587	49719	108.179.234.136	192.168.2.8
Jan 11, 2025 05:31:07.695987940 CET	587	49719	108.179.234.136	192.168.2.8
Jan 11, 2025 05:31:07.696048021 CET	587	49719	108.179.234.136	192.168.2.8
Jan 11, 2025 05:31:07.696057081 CET	587	49719	108.179.234.136	192.168.2.8
Jan 11, 2025 05:31:07.696095943 CET	587	49719	108.179.234.136	192.168.2.8
Jan 11, 2025 05:31:07.696105003 CET	587	49719	108.179.234.136	192.168.2.8
Jan 11, 2025 05:31:07.696167946 CET	587	49719	108.179.234.136	192.168.2.8
Jan 11, 2025 05:31:07.696177006 CET	587	49719	108.179.234.136	192.168.2.8
Jan 11, 2025 05:31:07.697277069 CET	587	49719	108.179.234.136	192.168.2.8
Jan 11, 2025 05:31:07.697285891 CET	587	49719	108.179.234.136	192.168.2.8
Jan 11, 2025 05:31:07.697403908 CET	587	49719	108.179.234.136	192.168.2.8
Jan 11, 2025 05:31:07.697412968 CET	587	49719	108.179.234.136	192.168.2.8
Jan 11, 2025 05:31:07.697422981 CET	587	49719	108.179.234.136	192.168.2.8
Jan 11, 2025 05:31:07.697432041 CET	587	49719	108.179.234.136	192.168.2.8
Jan 11, 2025 05:31:07.697449923 CET	587	49719	108.179.234.136	192.168.2.8
Jan 11, 2025 05:31:07.697458029 CET	587	49719	108.179.234.136	192.168.2.8
Jan 11, 2025 05:31:07.697493076 CET	587	49719	108.179.234.136	192.168.2.8
Jan 11, 2025 05:31:07.697501898 CET	587	49719	108.179.234.136	192.168.2.8
Jan 11, 2025 05:31:07.985403061 CET	587	49719	108.179.234.136	192.168.2.8
Jan 11, 2025 05:31:08.094661951 CET	49719	587	192.168.2.8	108.179.234.136
Jan 11, 2025 05:31:09.506242037 CET	49719	587	192.168.2.8	108.179.234.136
Jan 11, 2025 05:31:09.511198044 CET	587	49719	108.179.234.136	192.168.2.8
Jan 11, 2025 05:31:09.617659092 CET	587	49719	108.179.234.136	192.168.2.8
Jan 11, 2025 05:31:09.618191004 CET	49719	587	192.168.2.8	108.179.234.136
Jan 11, 2025 05:31:09.620970011 CET	49720	587	192.168.2.8	108.179.234.136
Jan 11, 2025 05:31:09.625776052 CET	587	49720	108.179.234.136	192.168.2.8
Jan 11, 2025 05:31:09.629163027 CET	49720	587	192.168.2.8	108.179.234.136
Jan 11, 2025 05:31:10.153199911 CET	587	49720	108.179.234.136	192.168.2.8
Jan 11, 2025 05:31:10.157095909 CET	49720	587	192.168.2.8	108.179.234.136
Jan 11, 2025 05:31:10.161940098 CET	587	49720	108.179.234.136	192.168.2.8
Jan 11, 2025 05:31:10.273530960 CET	587	49720	108.179.234.136	192.168.2.8
Jan 11, 2025 05:31:10.277132034 CET	49720	587	192.168.2.8	108.179.234.136
Jan 11, 2025 05:31:10.282021046 CET	587	49720	108.179.234.136	192.168.2.8
Jan 11, 2025 05:31:10.394321918 CET	587	49720	108.179.234.136	192.168.2.8
Jan 11, 2025 05:31:10.394973993 CET	49720	587	192.168.2.8	108.179.234.136
Jan 11, 2025 05:31:10.399827003 CET	587	49720	108.179.234.136	192.168.2.8
Jan 11, 2025 05:31:10.519159079 CET	587	49720	108.179.234.136	192.168.2.8
Jan 11, 2025 05:31:10.519179106 CET	587	49720	108.179.234.136	192.168.2.8
Jan 11, 2025 05:31:10.519191027 CET	587	49720	108.179.234.136	192.168.2.8
Jan 11, 2025 05:31:10.519243956 CET	49720	587	192.168.2.8	108.179.234.136
Jan 11, 2025 05:31:10.521986008 CET	49720	587	192.168.2.8	108.179.234.136
Jan 11, 2025 05:31:10.526854992 CET	587	49720	108.179.234.136	192.168.2.8
Jan 11, 2025 05:31:10.638354063 CET	587	49720	108.179.234.136	192.168.2.8
Jan 11, 2025 05:31:10.640693903 CET	49720	587	192.168.2.8	108.179.234.136
Jan 11, 2025 05:31:10.645494938 CET	587	49720	108.179.234.136	192.168.2.8
Jan 11, 2025 05:31:10.758639097 CET	587	49720	108.179.234.136	192.168.2.8
Jan 11, 2025 05:31:10.759047985 CET	49720	587	192.168.2.8	108.179.234.136
Jan 11, 2025 05:31:10.763919115 CET	587	49720	108.179.234.136	192.168.2.8
Jan 11, 2025 05:31:10.885608912 CET	587	49720	108.179.234.136	192.168.2.8
Jan 11, 2025 05:31:10.886008024 CET	49720	587	192.168.2.8	108.179.234.136
Jan 11, 2025 05:31:10.890788078 CET	587	49720	108.179.234.136	192.168.2.8
Jan 11, 2025 05:31:11.010967016 CET	587	49720	108.179.234.136	192.168.2.8
Jan 11, 2025 05:31:11.011301994 CET	49720	587	192.168.2.8	108.179.234.136
Jan 11, 2025 05:31:11.016158104 CET	587	49720	108.179.234.136	192.168.2.8
Jan 11, 2025 05:31:11.127424002 CET	587	49720	108.179.234.136	192.168.2.8
Jan 11, 2025 05:31:11.128947973 CET	49720	587	192.168.2.8	108.179.234.136
Jan 11, 2025 05:31:11.133802891 CET	587	49720	108.179.234.136	192.168.2.8
Jan 11, 2025 05:31:11.267565012 CET	587	49720	108.179.234.136	192.168.2.8
Jan 11, 2025 05:31:11.267812014 CET	49720	587	192.168.2.8	108.179.234.136
Jan 11, 2025 05:31:11.272646904 CET	587	49720	108.179.234.136	192.168.2.8
Jan 11, 2025 05:31:11.384109974 CET	587	49720	108.179.234.136	192.168.2.8
Jan 11, 2025 05:31:11.384661913 CET	49720	587	192.168.2.8	108.179.234.136
Jan 11, 2025 05:31:11.384661913 CET	49720	587	192.168.2.8	108.179.234.136
Jan 11, 2025 05:31:11.384661913 CET	49720	587	192.168.2.8	108.179.234.136
Jan 11, 2025 05:31:11.384880066 CET	49720	587	192.168.2.8	108.179.234.136
Jan 11, 2025 05:31:11.389025927 CET	49720	587	192.168.2.8	108.179.234.136
Jan 11, 2025 05:31:11.389724016 CET	587	49720	108.179.234.136	192.168.2.8
Jan 11, 2025 05:31:11.389846087 CET	587	49720	108.179.234.136	192.168.2.8
Jan 11, 2025 05:31:11.390224934 CET	49720	587	192.168.2.8	108.179.234.136
Jan 11, 2025 05:31:11.393943071 CET	587	49720	108.179.234.136	192.168.2.8
Jan 11, 2025 05:31:11.394006014 CET	587	49720	108.179.234.136	192.168.2.8
Jan 11, 2025 05:31:11.394023895 CET	587	49720	108.179.234.136	192.168.2.8
Jan 11, 2025 05:31:11.394471884 CET	587	49720	108.179.234.136	192.168.2.8
Jan 11, 2025 05:31:11.395425081 CET	587	49720	108.179.234.136	192.168.2.8
Jan 11, 2025 05:31:11.395508051 CET	49720	587	192.168.2.8	108.179.234.136
Jan 11, 2025 05:31:11.395716906 CET	49720	587	192.168.2.8	108.179.234.136
Jan 11, 2025 05:31:11.400985003 CET	587	49720	108.179.234.136	192.168.2.8
Jan 11, 2025 05:31:11.401019096 CET	587	49720	108.179.234.136	192.168.2.8
Jan 11, 2025 05:31:11.401030064 CET	587	49720	108.179.234.136	192.168.2.8
Jan 11, 2025 05:31:11.401102066 CET	587	49720	108.179.234.136	192.168.2.8
Jan 11, 2025 05:31:11.401112080 CET	587	49720	108.179.234.136	192.168.2.8
Jan 11, 2025 05:31:11.401169062 CET	587	49720	108.179.234.136	192.168.2.8
Jan 11, 2025 05:31:11.401179075 CET	587	49720	108.179.234.136	192.168.2.8
Jan 11, 2025 05:31:11.401247978 CET	49720	587	192.168.2.8	108.179.234.136
Jan 11, 2025 05:31:11.401305914 CET	49720	587	192.168.2.8	108.179.234.136
Jan 11, 2025 05:31:11.401305914 CET	49720	587	192.168.2.8	108.179.234.136
Jan 11, 2025 05:31:11.401701927 CET	587	49720	108.179.234.136	192.168.2.8
Jan 11, 2025 05:31:11.401746035 CET	587	49720	108.179.234.136	192.168.2.8
Jan 11, 2025 05:31:11.401796103 CET	587	49720	108.179.234.136	192.168.2.8
Jan 11, 2025 05:31:11.401947975 CET	49720	587	192.168.2.8	108.179.234.136
Jan 11, 2025 05:31:11.406091928 CET	587	49720	108.179.234.136	192.168.2.8
Jan 11, 2025 05:31:11.406203032 CET	587	49720	108.179.234.136	192.168.2.8
Jan 11, 2025 05:31:11.406244040 CET	49720	587	192.168.2.8	108.179.234.136
Jan 11, 2025 05:31:11.406261921 CET	587	49720	108.179.234.136	192.168.2.8
Jan 11, 2025 05:31:11.406302929 CET	587	49720	108.179.234.136	192.168.2.8
Jan 11, 2025 05:31:11.406364918 CET	587	49720	108.179.234.136	192.168.2.8
Jan 11, 2025 05:31:11.406414986 CET	587	49720	108.179.234.136	192.168.2.8
Jan 11, 2025 05:31:11.406506062 CET	587	49720	108.179.234.136	192.168.2.8
Jan 11, 2025 05:31:11.406516075 CET	587	49720	108.179.234.136	192.168.2.8
Jan 11, 2025 05:31:11.406518936 CET	587	49720	108.179.234.136	192.168.2.8
Jan 11, 2025 05:31:11.406546116 CET	587	49720	108.179.234.136	192.168.2.8
Jan 11, 2025 05:31:11.406579971 CET	587	49720	108.179.234.136	192.168.2.8
Jan 11, 2025 05:31:11.406589031 CET	587	49720	108.179.234.136	192.168.2.8
Jan 11, 2025 05:31:11.406639099 CET	587	49720	108.179.234.136	192.168.2.8
Jan 11, 2025 05:31:11.406646013 CET	587	49720	108.179.234.136	192.168.2.8
Jan 11, 2025 05:31:11.406670094 CET	587	49720	108.179.234.136	192.168.2.8
Jan 11, 2025 05:31:11.406677961 CET	587	49720	108.179.234.136	192.168.2.8
Jan 11, 2025 05:31:11.406768084 CET	587	49720	108.179.234.136	192.168.2.8
Jan 11, 2025 05:31:11.406778097 CET	587	49720	108.179.234.136	192.168.2.8
Jan 11, 2025 05:31:11.406811953 CET	587	49720	108.179.234.136	192.168.2.8
Jan 11, 2025 05:31:11.406820059 CET	587	49720	108.179.234.136	192.168.2.8
Jan 11, 2025 05:31:11.406862020 CET	587	49720	108.179.234.136	192.168.2.8
Jan 11, 2025 05:31:11.406869888 CET	587	49720	108.179.234.136	192.168.2.8
Jan 11, 2025 05:31:11.406909943 CET	587	49720	108.179.234.136	192.168.2.8
Jan 11, 2025 05:31:11.406943083 CET	587	49720	108.179.234.136	192.168.2.8
Jan 11, 2025 05:31:11.407013893 CET	587	49720	108.179.234.136	192.168.2.8
Jan 11, 2025 05:31:11.407022953 CET	587	49720	108.179.234.136	192.168.2.8
Jan 11, 2025 05:31:11.407027006 CET	587	49720	108.179.234.136	192.168.2.8
Jan 11, 2025 05:31:11.407057047 CET	587	49720	108.179.234.136	192.168.2.8
Jan 11, 2025 05:31:11.407064915 CET	587	49720	108.179.234.136	192.168.2.8
Jan 11, 2025 05:31:11.407073975 CET	587	49720	108.179.234.136	192.168.2.8
Jan 11, 2025 05:31:11.411071062 CET	587	49720	108.179.234.136	192.168.2.8
Jan 11, 2025 05:31:11.411078930 CET	587	49720	108.179.234.136	192.168.2.8
Jan 11, 2025 05:31:11.411151886 CET	587	49720	108.179.234.136	192.168.2.8
Jan 11, 2025 05:31:11.411160946 CET	587	49720	108.179.234.136	192.168.2.8
Jan 11, 2025 05:31:11.715565920 CET	587	49720	108.179.234.136	192.168.2.8
Jan 11, 2025 05:31:11.768973112 CET	49720	587	192.168.2.8	108.179.234.136
Jan 11, 2025 05:31:49.775353909 CET	49720	587	192.168.2.8	108.179.234.136
Jan 11, 2025 05:31:49.780884981 CET	587	49720	108.179.234.136	192.168.2.8
Jan 11, 2025 05:31:49.892286062 CET	587	49720	108.179.234.136	192.168.2.8
Jan 11, 2025 05:31:49.892843008 CET	49720	587	192.168.2.8	108.179.234.136
Jan 11, 2025 05:31:49.893829107 CET	49721	587	192.168.2.8	108.179.234.136
Jan 11, 2025 05:31:49.898751974 CET	587	49721	108.179.234.136	192.168.2.8
Jan 11, 2025 05:31:49.898849010 CET	49721	587	192.168.2.8	108.179.234.136
Jan 11, 2025 05:31:50.400212049 CET	587	49721	108.179.234.136	192.168.2.8
Jan 11, 2025 05:31:50.401120901 CET	49721	587	192.168.2.8	108.179.234.136
Jan 11, 2025 05:31:50.406016111 CET	587	49721	108.179.234.136	192.168.2.8
Jan 11, 2025 05:31:50.512798071 CET	587	49721	108.179.234.136	192.168.2.8
Jan 11, 2025 05:31:50.512974024 CET	49721	587	192.168.2.8	108.179.234.136
Jan 11, 2025 05:31:50.517781019 CET	587	49721	108.179.234.136	192.168.2.8
Jan 11, 2025 05:31:50.626635075 CET	587	49721	108.179.234.136	192.168.2.8
Jan 11, 2025 05:31:50.627264977 CET	49721	587	192.168.2.8	108.179.234.136
Jan 11, 2025 05:31:50.632051945 CET	587	49721	108.179.234.136	192.168.2.8
Jan 11, 2025 05:31:50.746021986 CET	587	49721	108.179.234.136	192.168.2.8
Jan 11, 2025 05:31:50.746045113 CET	587	49721	108.179.234.136	192.168.2.8
Jan 11, 2025 05:31:50.746058941 CET	587	49721	108.179.234.136	192.168.2.8
Jan 11, 2025 05:31:50.746093988 CET	49721	587	192.168.2.8	108.179.234.136
Jan 11, 2025 05:31:50.748610973 CET	49721	587	192.168.2.8	108.179.234.136
Jan 11, 2025 05:31:50.753396034 CET	587	49721	108.179.234.136	192.168.2.8
Jan 11, 2025 05:31:50.860119104 CET	587	49721	108.179.234.136	192.168.2.8
Jan 11, 2025 05:31:50.862965107 CET	49721	587	192.168.2.8	108.179.234.136
Jan 11, 2025 05:31:50.867994070 CET	587	49721	108.179.234.136	192.168.2.8
Jan 11, 2025 05:31:50.974503040 CET	587	49721	108.179.234.136	192.168.2.8
Jan 11, 2025 05:31:50.974809885 CET	49721	587	192.168.2.8	108.179.234.136
Jan 11, 2025 05:31:50.980427027 CET	587	49721	108.179.234.136	192.168.2.8
Jan 11, 2025 05:31:51.184958935 CET	587	49721	108.179.234.136	192.168.2.8
Jan 11, 2025 05:31:51.185265064 CET	49721	587	192.168.2.8	108.179.234.136
Jan 11, 2025 05:31:51.190166950 CET	587	49721	108.179.234.136	192.168.2.8
Jan 11, 2025 05:31:51.402169943 CET	587	49721	108.179.234.136	192.168.2.8
Jan 11, 2025 05:31:51.402439117 CET	49721	587	192.168.2.8	108.179.234.136
Jan 11, 2025 05:31:51.407288074 CET	587	49721	108.179.234.136	192.168.2.8
Jan 11, 2025 05:31:51.513921022 CET	587	49721	108.179.234.136	192.168.2.8
Jan 11, 2025 05:31:51.517841101 CET	49721	587	192.168.2.8	108.179.234.136
Jan 11, 2025 05:31:51.522783995 CET	587	49721	108.179.234.136	192.168.2.8
Jan 11, 2025 05:31:51.637933969 CET	587	49721	108.179.234.136	192.168.2.8
Jan 11, 2025 05:31:51.638283014 CET	49721	587	192.168.2.8	108.179.234.136
Jan 11, 2025 05:31:51.643084049 CET	587	49721	108.179.234.136	192.168.2.8
Jan 11, 2025 05:31:51.749391079 CET	587	49721	108.179.234.136	192.168.2.8
Jan 11, 2025 05:31:51.749773979 CET	49721	587	192.168.2.8	108.179.234.136
Jan 11, 2025 05:31:51.749773979 CET	49721	587	192.168.2.8	108.179.234.136
Jan 11, 2025 05:31:51.749808073 CET	49721	587	192.168.2.8	108.179.234.136
Jan 11, 2025 05:31:51.749943018 CET	49721	587	192.168.2.8	108.179.234.136
Jan 11, 2025 05:31:51.751780033 CET	49721	587	192.168.2.8	108.179.234.136
Jan 11, 2025 05:31:51.754631996 CET	587	49721	108.179.234.136	192.168.2.8
Jan 11, 2025 05:31:51.754643917 CET	587	49721	108.179.234.136	192.168.2.8
Jan 11, 2025 05:31:51.754656076 CET	587	49721	108.179.234.136	192.168.2.8
Jan 11, 2025 05:31:51.754734993 CET	49721	587	192.168.2.8	108.179.234.136
Jan 11, 2025 05:31:51.754787922 CET	587	49721	108.179.234.136	192.168.2.8
Jan 11, 2025 05:31:51.754846096 CET	49721	587	192.168.2.8	108.179.234.136
Jan 11, 2025 05:31:51.756577969 CET	587	49721	108.179.234.136	192.168.2.8
Jan 11, 2025 05:31:51.756587982 CET	587	49721	108.179.234.136	192.168.2.8
Jan 11, 2025 05:31:51.756592989 CET	587	49721	108.179.234.136	192.168.2.8
Jan 11, 2025 05:31:51.756602049 CET	587	49721	108.179.234.136	192.168.2.8
Jan 11, 2025 05:31:51.756649971 CET	49721	587	192.168.2.8	108.179.234.136
Jan 11, 2025 05:31:51.756719112 CET	587	49721	108.179.234.136	192.168.2.8
Jan 11, 2025 05:31:51.756756067 CET	49721	587	192.168.2.8	108.179.234.136
Jan 11, 2025 05:31:51.756949902 CET	49721	587	192.168.2.8	108.179.234.136
Jan 11, 2025 05:31:51.759289026 CET	587	49721	108.179.234.136	192.168.2.8
Jan 11, 2025 05:31:51.759465933 CET	587	49721	108.179.234.136	192.168.2.8
Jan 11, 2025 05:31:51.759587049 CET	49721	587	192.168.2.8	108.179.234.136
Jan 11, 2025 05:31:51.761400938 CET	587	49721	108.179.234.136	192.168.2.8
Jan 11, 2025 05:31:51.761425972 CET	587	49721	108.179.234.136	192.168.2.8
Jan 11, 2025 05:31:51.761533022 CET	587	49721	108.179.234.136	192.168.2.8
Jan 11, 2025 05:31:51.761537075 CET	49721	587	192.168.2.8	108.179.234.136
Jan 11, 2025 05:31:51.761552095 CET	587	49721	108.179.234.136	192.168.2.8
Jan 11, 2025 05:31:51.761759996 CET	587	49721	108.179.234.136	192.168.2.8
Jan 11, 2025 05:31:51.761769056 CET	587	49721	108.179.234.136	192.168.2.8
Jan 11, 2025 05:31:51.761814117 CET	49721	587	192.168.2.8	108.179.234.136
Jan 11, 2025 05:31:51.761837006 CET	49721	587	192.168.2.8	108.179.234.136
Jan 11, 2025 05:31:51.764391899 CET	587	49721	108.179.234.136	192.168.2.8
Jan 11, 2025 05:31:51.764488935 CET	49721	587	192.168.2.8	108.179.234.136
Jan 11, 2025 05:31:51.764513016 CET	587	49721	108.179.234.136	192.168.2.8
Jan 11, 2025 05:31:51.764540911 CET	587	49721	108.179.234.136	192.168.2.8
Jan 11, 2025 05:31:51.764569998 CET	587	49721	108.179.234.136	192.168.2.8
Jan 11, 2025 05:31:51.764578104 CET	49721	587	192.168.2.8	108.179.234.136
Jan 11, 2025 05:31:51.764647961 CET	49721	587	192.168.2.8	108.179.234.136
Jan 11, 2025 05:31:51.764647961 CET	49721	587	192.168.2.8	108.179.234.136
Jan 11, 2025 05:31:51.766320944 CET	587	49721	108.179.234.136	192.168.2.8
Jan 11, 2025 05:31:51.766331911 CET	587	49721	108.179.234.136	192.168.2.8
Jan 11, 2025 05:31:51.766346931 CET	587	49721	108.179.234.136	192.168.2.8
Jan 11, 2025 05:31:51.766355991 CET	587	49721	108.179.234.136	192.168.2.8
Jan 11, 2025 05:31:51.766392946 CET	49721	587	192.168.2.8	108.179.234.136
Jan 11, 2025 05:31:51.766588926 CET	587	49721	108.179.234.136	192.168.2.8
Jan 11, 2025 05:31:51.766628981 CET	587	49721	108.179.234.136	192.168.2.8
Jan 11, 2025 05:31:51.766639948 CET	587	49721	108.179.234.136	192.168.2.8
Jan 11, 2025 05:31:51.766680002 CET	587	49721	108.179.234.136	192.168.2.8
Jan 11, 2025 05:31:51.769166946 CET	587	49721	108.179.234.136	192.168.2.8
Jan 11, 2025 05:31:51.769224882 CET	587	49721	108.179.234.136	192.168.2.8
Jan 11, 2025 05:31:51.769268990 CET	587	49721	108.179.234.136	192.168.2.8
Jan 11, 2025 05:31:51.769277096 CET	587	49721	108.179.234.136	192.168.2.8
Jan 11, 2025 05:31:51.769299984 CET	587	49721	108.179.234.136	192.168.2.8
Jan 11, 2025 05:31:51.769316912 CET	587	49721	108.179.234.136	192.168.2.8
Jan 11, 2025 05:31:51.769362926 CET	587	49721	108.179.234.136	192.168.2.8
Jan 11, 2025 05:31:51.769371033 CET	587	49721	108.179.234.136	192.168.2.8
Jan 11, 2025 05:31:51.769392967 CET	587	49721	108.179.234.136	192.168.2.8
Jan 11, 2025 05:31:51.769402981 CET	587	49721	108.179.234.136	192.168.2.8
Jan 11, 2025 05:31:51.769442081 CET	587	49721	108.179.234.136	192.168.2.8
Jan 11, 2025 05:31:51.769449949 CET	587	49721	108.179.234.136	192.168.2.8
Jan 11, 2025 05:31:51.769462109 CET	587	49721	108.179.234.136	192.168.2.8
Jan 11, 2025 05:31:51.771089077 CET	587	49721	108.179.234.136	192.168.2.8
Jan 11, 2025 05:31:51.771099091 CET	587	49721	108.179.234.136	192.168.2.8
Jan 11, 2025 05:31:51.771115065 CET	587	49721	108.179.234.136	192.168.2.8
Jan 11, 2025 05:31:51.771122932 CET	587	49721	108.179.234.136	192.168.2.8
Jan 11, 2025 05:31:51.771141052 CET	587	49721	108.179.234.136	192.168.2.8
Jan 11, 2025 05:31:51.771150112 CET	587	49721	108.179.234.136	192.168.2.8
Jan 11, 2025 05:31:51.771188974 CET	587	49721	108.179.234.136	192.168.2.8
Jan 11, 2025 05:31:51.771197081 CET	587	49721	108.179.234.136	192.168.2.8
Jan 11, 2025 05:31:51.771240950 CET	587	49721	108.179.234.136	192.168.2.8
Jan 11, 2025 05:31:51.771249056 CET	587	49721	108.179.234.136	192.168.2.8
Jan 11, 2025 05:31:51.771280050 CET	587	49721	108.179.234.136	192.168.2.8
Jan 11, 2025 05:31:51.771289110 CET	587	49721	108.179.234.136	192.168.2.8
Jan 11, 2025 05:31:51.771298885 CET	587	49721	108.179.234.136	192.168.2.8
Jan 11, 2025 05:31:52.064148903 CET	587	49721	108.179.234.136	192.168.2.8
Jan 11, 2025 05:31:52.188354969 CET	49721	587	192.168.2.8	108.179.234.136
Jan 11, 2025 05:32:01.504949093 CET	49721	587	192.168.2.8	108.179.234.136
Jan 11, 2025 05:32:01.510037899 CET	587	49721	108.179.234.136	192.168.2.8
Jan 11, 2025 05:32:01.616331100 CET	587	49721	108.179.234.136	192.168.2.8
Jan 11, 2025 05:32:01.618495941 CET	49721	587	192.168.2.8	108.179.234.136
Jan 11, 2025 05:32:01.618496895 CET	49722	587	192.168.2.8	108.179.234.136
Jan 11, 2025 05:32:01.625842094 CET	587	49722	108.179.234.136	192.168.2.8
Jan 11, 2025 05:32:01.632952929 CET	49722	587	192.168.2.8	108.179.234.136
Jan 11, 2025 05:32:02.142153025 CET	587	49722	108.179.234.136	192.168.2.8
Jan 11, 2025 05:32:02.142425060 CET	49722	587	192.168.2.8	108.179.234.136
Jan 11, 2025 05:32:02.147327900 CET	587	49722	108.179.234.136	192.168.2.8
Jan 11, 2025 05:32:02.255949020 CET	587	49722	108.179.234.136	192.168.2.8
Jan 11, 2025 05:32:02.257920980 CET	49722	587	192.168.2.8	108.179.234.136
Jan 11, 2025 05:32:02.262835979 CET	587	49722	108.179.234.136	192.168.2.8
Jan 11, 2025 05:32:02.372956038 CET	587	49722	108.179.234.136	192.168.2.8
Jan 11, 2025 05:32:02.376997948 CET	49722	587	192.168.2.8	108.179.234.136
Jan 11, 2025 05:32:02.381844997 CET	587	49722	108.179.234.136	192.168.2.8
Jan 11, 2025 05:32:02.497539043 CET	587	49722	108.179.234.136	192.168.2.8
Jan 11, 2025 05:32:02.497556925 CET	587	49722	108.179.234.136	192.168.2.8
Jan 11, 2025 05:32:02.497576952 CET	587	49722	108.179.234.136	192.168.2.8
Jan 11, 2025 05:32:02.497625113 CET	49722	587	192.168.2.8	108.179.234.136
Jan 11, 2025 05:32:02.501055956 CET	49722	587	192.168.2.8	108.179.234.136
Jan 11, 2025 05:32:02.505903006 CET	587	49722	108.179.234.136	192.168.2.8
Jan 11, 2025 05:32:02.614387035 CET	587	49722	108.179.234.136	192.168.2.8
Jan 11, 2025 05:32:02.618714094 CET	49722	587	192.168.2.8	108.179.234.136
Jan 11, 2025 05:32:02.623548985 CET	587	49722	108.179.234.136	192.168.2.8
Jan 11, 2025 05:32:02.732117891 CET	587	49722	108.179.234.136	192.168.2.8
Jan 11, 2025 05:32:02.732445002 CET	49722	587	192.168.2.8	108.179.234.136
Jan 11, 2025 05:32:02.737345934 CET	587	49722	108.179.234.136	192.168.2.8
Jan 11, 2025 05:32:02.814356089 CET	49722	587	192.168.2.8	108.179.234.136
Jan 11, 2025 05:32:02.819499016 CET	587	49722	108.179.234.136	192.168.2.8
Jan 11, 2025 05:32:02.819564104 CET	49722	587	192.168.2.8	108.179.234.136
Jan 11, 2025 05:32:03.410620928 CET	49723	587	192.168.2.8	108.179.234.136
Jan 11, 2025 05:32:03.415621996 CET	587	49723	108.179.234.136	192.168.2.8
Jan 11, 2025 05:32:03.415704966 CET	49723	587	192.168.2.8	108.179.234.136
Jan 11, 2025 05:32:03.940073013 CET	587	49723	108.179.234.136	192.168.2.8
Jan 11, 2025 05:32:03.940455914 CET	49723	587	192.168.2.8	108.179.234.136
Jan 11, 2025 05:32:03.945278883 CET	587	49723	108.179.234.136	192.168.2.8
Jan 11, 2025 05:32:04.055958986 CET	587	49723	108.179.234.136	192.168.2.8
Jan 11, 2025 05:32:04.056144953 CET	49723	587	192.168.2.8	108.179.234.136
Jan 11, 2025 05:32:04.061041117 CET	587	49723	108.179.234.136	192.168.2.8
Jan 11, 2025 05:32:04.172833920 CET	587	49723	108.179.234.136	192.168.2.8
Jan 11, 2025 05:32:04.173518896 CET	49723	587	192.168.2.8	108.179.234.136
Jan 11, 2025 05:32:04.178421974 CET	587	49723	108.179.234.136	192.168.2.8
Jan 11, 2025 05:32:04.300316095 CET	587	49723	108.179.234.136	192.168.2.8
Jan 11, 2025 05:32:04.300371885 CET	587	49723	108.179.234.136	192.168.2.8
Jan 11, 2025 05:32:04.300410032 CET	587	49723	108.179.234.136	192.168.2.8
Jan 11, 2025 05:32:04.300542116 CET	49723	587	192.168.2.8	108.179.234.136
Jan 11, 2025 05:32:04.302604914 CET	49723	587	192.168.2.8	108.179.234.136
Jan 11, 2025 05:32:04.307552099 CET	587	49723	108.179.234.136	192.168.2.8
Jan 11, 2025 05:32:04.418081999 CET	587	49723	108.179.234.136	192.168.2.8
Jan 11, 2025 05:32:04.420754910 CET	49723	587	192.168.2.8	108.179.234.136
Jan 11, 2025 05:32:04.425826073 CET	587	49723	108.179.234.136	192.168.2.8
Jan 11, 2025 05:32:04.536180019 CET	587	49723	108.179.234.136	192.168.2.8
Jan 11, 2025 05:32:04.536465883 CET	49723	587	192.168.2.8	108.179.234.136
Jan 11, 2025 05:32:04.541327953 CET	587	49723	108.179.234.136	192.168.2.8
Jan 11, 2025 05:32:04.658340931 CET	49723	587	192.168.2.8	108.179.234.136
Jan 11, 2025 05:32:04.663625002 CET	587	49723	108.179.234.136	192.168.2.8
Jan 11, 2025 05:32:04.663713932 CET	49723	587	192.168.2.8	108.179.234.136
Jan 11, 2025 05:32:04.720392942 CET	49724	587	192.168.2.8	108.179.234.136
Jan 11, 2025 05:32:04.725260019 CET	587	49724	108.179.234.136	192.168.2.8
Jan 11, 2025 05:32:04.725668907 CET	49724	587	192.168.2.8	108.179.234.136
Jan 11, 2025 05:32:05.252976894 CET	587	49724	108.179.234.136	192.168.2.8
Jan 11, 2025 05:32:05.253130913 CET	49724	587	192.168.2.8	108.179.234.136
Jan 11, 2025 05:32:05.257905006 CET	587	49724	108.179.234.136	192.168.2.8
Jan 11, 2025 05:32:05.369505882 CET	587	49724	108.179.234.136	192.168.2.8
Jan 11, 2025 05:32:05.369666100 CET	49724	587	192.168.2.8	108.179.234.136
Jan 11, 2025 05:32:05.374469042 CET	587	49724	108.179.234.136	192.168.2.8
Jan 11, 2025 05:32:05.488171101 CET	587	49724	108.179.234.136	192.168.2.8
Jan 11, 2025 05:32:05.488673925 CET	49724	587	192.168.2.8	108.179.234.136
Jan 11, 2025 05:32:05.493455887 CET	587	49724	108.179.234.136	192.168.2.8
Jan 11, 2025 05:32:05.614686012 CET	587	49724	108.179.234.136	192.168.2.8
Jan 11, 2025 05:32:05.614742041 CET	587	49724	108.179.234.136	192.168.2.8
Jan 11, 2025 05:32:05.614780903 CET	587	49724	108.179.234.136	192.168.2.8
Jan 11, 2025 05:32:05.615073919 CET	49724	587	192.168.2.8	108.179.234.136
Jan 11, 2025 05:32:05.616931915 CET	49724	587	192.168.2.8	108.179.234.136
Jan 11, 2025 05:32:05.621872902 CET	587	49724	108.179.234.136	192.168.2.8
Jan 11, 2025 05:32:05.733437061 CET	587	49724	108.179.234.136	192.168.2.8
Jan 11, 2025 05:32:05.738305092 CET	49724	587	192.168.2.8	108.179.234.136
Jan 11, 2025 05:32:05.743249893 CET	587	49724	108.179.234.136	192.168.2.8
Jan 11, 2025 05:32:05.854985952 CET	587	49724	108.179.234.136	192.168.2.8
Jan 11, 2025 05:32:05.857141018 CET	49724	587	192.168.2.8	108.179.234.136
Jan 11, 2025 05:32:05.862108946 CET	587	49724	108.179.234.136	192.168.2.8
Jan 11, 2025 05:32:09.974728107 CET	587	49724	108.179.234.136	192.168.2.8
Jan 11, 2025 05:32:09.975166082 CET	49724	587	192.168.2.8	108.179.234.136
Jan 11, 2025 05:32:09.980114937 CET	587	49724	108.179.234.136	192.168.2.8
Jan 11, 2025 05:32:10.092925072 CET	587	49724	108.179.234.136	192.168.2.8
Jan 11, 2025 05:32:10.093194008 CET	49724	587	192.168.2.8	108.179.234.136
Jan 11, 2025 05:32:10.098139048 CET	587	49724	108.179.234.136	192.168.2.8
Jan 11, 2025 05:32:10.211786985 CET	587	49724	108.179.234.136	192.168.2.8
Jan 11, 2025 05:32:10.212194920 CET	49724	587	192.168.2.8	108.179.234.136
Jan 11, 2025 05:32:10.217050076 CET	587	49724	108.179.234.136	192.168.2.8
Jan 11, 2025 05:32:10.336582899 CET	587	49724	108.179.234.136	192.168.2.8
Jan 11, 2025 05:32:10.336810112 CET	49724	587	192.168.2.8	108.179.234.136
Jan 11, 2025 05:32:10.341780901 CET	587	49724	108.179.234.136	192.168.2.8
Jan 11, 2025 05:32:10.453214884 CET	587	49724	108.179.234.136	192.168.2.8
Jan 11, 2025 05:32:10.453639984 CET	49724	587	192.168.2.8	108.179.234.136
Jan 11, 2025 05:32:10.453640938 CET	49724	587	192.168.2.8	108.179.234.136
Jan 11, 2025 05:32:10.453742027 CET	49724	587	192.168.2.8	108.179.234.136
Jan 11, 2025 05:32:10.453845024 CET	49724	587	192.168.2.8	108.179.234.136
Jan 11, 2025 05:32:10.454993010 CET	49724	587	192.168.2.8	108.179.234.136
Jan 11, 2025 05:32:10.458626032 CET	587	49724	108.179.234.136	192.168.2.8
Jan 11, 2025 05:32:10.458674908 CET	587	49724	108.179.234.136	192.168.2.8
Jan 11, 2025 05:32:10.458703041 CET	587	49724	108.179.234.136	192.168.2.8
Jan 11, 2025 05:32:10.458735943 CET	587	49724	108.179.234.136	192.168.2.8
Jan 11, 2025 05:32:10.458745956 CET	49724	587	192.168.2.8	108.179.234.136
Jan 11, 2025 05:32:10.458832026 CET	49724	587	192.168.2.8	108.179.234.136
Jan 11, 2025 05:32:10.459937096 CET	587	49724	108.179.234.136	192.168.2.8
Jan 11, 2025 05:32:10.459968090 CET	587	49724	108.179.234.136	192.168.2.8
Jan 11, 2025 05:32:10.459996939 CET	587	49724	108.179.234.136	192.168.2.8
Jan 11, 2025 05:32:10.460027933 CET	587	49724	108.179.234.136	192.168.2.8
Jan 11, 2025 05:32:10.460061073 CET	587	49724	108.179.234.136	192.168.2.8
Jan 11, 2025 05:32:10.460063934 CET	49724	587	192.168.2.8	108.179.234.136
Jan 11, 2025 05:32:10.460063934 CET	49724	587	192.168.2.8	108.179.234.136
Jan 11, 2025 05:32:10.460124969 CET	49724	587	192.168.2.8	108.179.234.136
Jan 11, 2025 05:32:10.460155010 CET	49724	587	192.168.2.8	108.179.234.136
Jan 11, 2025 05:32:10.463386059 CET	587	49724	108.179.234.136	192.168.2.8
Jan 11, 2025 05:32:10.463620901 CET	49724	587	192.168.2.8	108.179.234.136
Jan 11, 2025 05:32:10.463675976 CET	587	49724	108.179.234.136	192.168.2.8
Jan 11, 2025 05:32:10.465046883 CET	587	49724	108.179.234.136	192.168.2.8
Jan 11, 2025 05:32:10.465130091 CET	587	49724	108.179.234.136	192.168.2.8
Jan 11, 2025 05:32:10.465163946 CET	587	49724	108.179.234.136	192.168.2.8
Jan 11, 2025 05:32:10.465245962 CET	49724	587	192.168.2.8	108.179.234.136
Jan 11, 2025 05:32:10.465255976 CET	587	49724	108.179.234.136	192.168.2.8
Jan 11, 2025 05:32:10.465286970 CET	587	49724	108.179.234.136	192.168.2.8
Jan 11, 2025 05:32:10.465317965 CET	587	49724	108.179.234.136	192.168.2.8
Jan 11, 2025 05:32:10.465389013 CET	49724	587	192.168.2.8	108.179.234.136
Jan 11, 2025 05:32:10.465436935 CET	49724	587	192.168.2.8	108.179.234.136
Jan 11, 2025 05:32:10.468569994 CET	587	49724	108.179.234.136	192.168.2.8
Jan 11, 2025 05:32:10.468600035 CET	587	49724	108.179.234.136	192.168.2.8
Jan 11, 2025 05:32:10.468647957 CET	49724	587	192.168.2.8	108.179.234.136
Jan 11, 2025 05:32:10.468724966 CET	49724	587	192.168.2.8	108.179.234.136
Jan 11, 2025 05:32:10.470208883 CET	587	49724	108.179.234.136	192.168.2.8
Jan 11, 2025 05:32:10.470237017 CET	587	49724	108.179.234.136	192.168.2.8
Jan 11, 2025 05:32:10.470278978 CET	587	49724	108.179.234.136	192.168.2.8
Jan 11, 2025 05:32:10.470330954 CET	49724	587	192.168.2.8	108.179.234.136
Jan 11, 2025 05:32:10.470331907 CET	49724	587	192.168.2.8	108.179.234.136
Jan 11, 2025 05:32:10.470346928 CET	587	49724	108.179.234.136	192.168.2.8
Jan 11, 2025 05:32:10.470397949 CET	587	49724	108.179.234.136	192.168.2.8
Jan 11, 2025 05:32:10.470424891 CET	587	49724	108.179.234.136	192.168.2.8
Jan 11, 2025 05:32:10.470439911 CET	49724	587	192.168.2.8	108.179.234.136
Jan 11, 2025 05:32:10.470453978 CET	587	49724	108.179.234.136	192.168.2.8
Jan 11, 2025 05:32:10.470485926 CET	587	49724	108.179.234.136	192.168.2.8
Jan 11, 2025 05:32:10.470535994 CET	587	49724	108.179.234.136	192.168.2.8
Jan 11, 2025 05:32:10.470565081 CET	587	49724	108.179.234.136	192.168.2.8
Jan 11, 2025 05:32:10.470613003 CET	587	49724	108.179.234.136	192.168.2.8
Jan 11, 2025 05:32:10.470640898 CET	587	49724	108.179.234.136	192.168.2.8
Jan 11, 2025 05:32:10.470668077 CET	587	49724	108.179.234.136	192.168.2.8
Jan 11, 2025 05:32:10.470701933 CET	587	49724	108.179.234.136	192.168.2.8
Jan 11, 2025 05:32:10.470750093 CET	587	49724	108.179.234.136	192.168.2.8
Jan 11, 2025 05:32:10.470777035 CET	587	49724	108.179.234.136	192.168.2.8
Jan 11, 2025 05:32:10.473588943 CET	587	49724	108.179.234.136	192.168.2.8
Jan 11, 2025 05:32:10.474936008 CET	587	49724	108.179.234.136	192.168.2.8
Jan 11, 2025 05:32:10.474963903 CET	587	49724	108.179.234.136	192.168.2.8
Jan 11, 2025 05:32:10.475013971 CET	587	49724	108.179.234.136	192.168.2.8
Jan 11, 2025 05:32:10.475040913 CET	587	49724	108.179.234.136	192.168.2.8
Jan 11, 2025 05:32:10.475061893 CET	587	49724	108.179.234.136	192.168.2.8
Jan 11, 2025 05:32:10.475074053 CET	587	49724	108.179.234.136	192.168.2.8
Jan 11, 2025 05:32:10.475085974 CET	587	49724	108.179.234.136	192.168.2.8
Jan 11, 2025 05:32:10.475697994 CET	587	49724	108.179.234.136	192.168.2.8
Jan 11, 2025 05:32:10.475725889 CET	587	49724	108.179.234.136	192.168.2.8
Jan 11, 2025 05:32:10.475774050 CET	587	49724	108.179.234.136	192.168.2.8
Jan 11, 2025 05:32:10.475801945 CET	587	49724	108.179.234.136	192.168.2.8
Jan 11, 2025 05:32:10.475828886 CET	587	49724	108.179.234.136	192.168.2.8
Jan 11, 2025 05:32:10.475855112 CET	587	49724	108.179.234.136	192.168.2.8
Jan 11, 2025 05:32:10.475882053 CET	587	49724	108.179.234.136	192.168.2.8
Jan 11, 2025 05:32:10.475929976 CET	587	49724	108.179.234.136	192.168.2.8
Jan 11, 2025 05:32:10.475958109 CET	587	49724	108.179.234.136	192.168.2.8
Jan 11, 2025 05:32:10.475984097 CET	587	49724	108.179.234.136	192.168.2.8
Jan 11, 2025 05:32:10.476010084 CET	587	49724	108.179.234.136	192.168.2.8
Jan 11, 2025 05:32:10.476036072 CET	587	49724	108.179.234.136	192.168.2.8
Jan 11, 2025 05:32:10.476063013 CET	587	49724	108.179.234.136	192.168.2.8
Jan 11, 2025 05:32:10.783200026 CET	587	49724	108.179.234.136	192.168.2.8
Jan 11, 2025 05:32:10.832998037 CET	49724	587	192.168.2.8	108.179.234.136
Jan 11, 2025 05:32:14.037818909 CET	49724	587	192.168.2.8	108.179.234.136
Jan 11, 2025 05:32:14.042932987 CET	587	49724	108.179.234.136	192.168.2.8
Jan 11, 2025 05:32:14.154232025 CET	587	49724	108.179.234.136	192.168.2.8
Jan 11, 2025 05:32:14.154988050 CET	49724	587	192.168.2.8	108.179.234.136
Jan 11, 2025 05:32:14.156080961 CET	49725	587	192.168.2.8	108.179.234.136
Jan 11, 2025 05:32:14.160975933 CET	587	49725	108.179.234.136	192.168.2.8
Jan 11, 2025 05:32:14.165117025 CET	49725	587	192.168.2.8	108.179.234.136
Jan 11, 2025 05:32:14.693000078 CET	587	49725	108.179.234.136	192.168.2.8
Jan 11, 2025 05:32:14.693274975 CET	49725	587	192.168.2.8	108.179.234.136
Jan 11, 2025 05:32:14.698127031 CET	587	49725	108.179.234.136	192.168.2.8
Jan 11, 2025 05:32:14.809756994 CET	587	49725	108.179.234.136	192.168.2.8
Jan 11, 2025 05:32:14.809961081 CET	49725	587	192.168.2.8	108.179.234.136
Jan 11, 2025 05:32:14.814812899 CET	587	49725	108.179.234.136	192.168.2.8
Jan 11, 2025 05:32:14.927463055 CET	587	49725	108.179.234.136	192.168.2.8
Jan 11, 2025 05:32:14.928054094 CET	49725	587	192.168.2.8	108.179.234.136
Jan 11, 2025 05:32:14.932948112 CET	587	49725	108.179.234.136	192.168.2.8
Jan 11, 2025 05:32:15.056324005 CET	587	49725	108.179.234.136	192.168.2.8
Jan 11, 2025 05:32:15.056341887 CET	587	49725	108.179.234.136	192.168.2.8
Jan 11, 2025 05:32:15.056354046 CET	587	49725	108.179.234.136	192.168.2.8
Jan 11, 2025 05:32:15.056365967 CET	587	49725	108.179.234.136	192.168.2.8
Jan 11, 2025 05:32:15.056401014 CET	49725	587	192.168.2.8	108.179.234.136
Jan 11, 2025 05:32:15.056442976 CET	49725	587	192.168.2.8	108.179.234.136
Jan 11, 2025 05:32:15.058772087 CET	49725	587	192.168.2.8	108.179.234.136
Jan 11, 2025 05:32:15.063502073 CET	587	49725	108.179.234.136	192.168.2.8
Jan 11, 2025 05:32:15.175367117 CET	587	49725	108.179.234.136	192.168.2.8
Jan 11, 2025 05:32:15.177423000 CET	49725	587	192.168.2.8	108.179.234.136
Jan 11, 2025 05:32:15.182353973 CET	587	49725	108.179.234.136	192.168.2.8
Jan 11, 2025 05:32:15.293919086 CET	587	49725	108.179.234.136	192.168.2.8
Jan 11, 2025 05:32:15.294164896 CET	49725	587	192.168.2.8	108.179.234.136
Jan 11, 2025 05:32:15.299134970 CET	587	49725	108.179.234.136	192.168.2.8
Jan 11, 2025 05:32:15.410768986 CET	587	49725	108.179.234.136	192.168.2.8
Jan 11, 2025 05:32:15.411335945 CET	49725	587	192.168.2.8	108.179.234.136
Jan 11, 2025 05:32:15.416161060 CET	587	49725	108.179.234.136	192.168.2.8
Jan 11, 2025 05:32:15.627346039 CET	587	49725	108.179.234.136	192.168.2.8
Jan 11, 2025 05:32:15.631963015 CET	49725	587	192.168.2.8	108.179.234.136
Jan 11, 2025 05:32:15.636944056 CET	587	49725	108.179.234.136	192.168.2.8
Jan 11, 2025 05:32:15.748385906 CET	587	49725	108.179.234.136	192.168.2.8
Jan 11, 2025 05:32:15.751269102 CET	49725	587	192.168.2.8	108.179.234.136
Jan 11, 2025 05:32:15.756302118 CET	587	49725	108.179.234.136	192.168.2.8
Jan 11, 2025 05:32:15.877754927 CET	587	49725	108.179.234.136	192.168.2.8
Jan 11, 2025 05:32:15.879225969 CET	49725	587	192.168.2.8	108.179.234.136
Jan 11, 2025 05:32:15.884121895 CET	587	49725	108.179.234.136	192.168.2.8
Jan 11, 2025 05:32:15.995640039 CET	587	49725	108.179.234.136	192.168.2.8
Jan 11, 2025 05:32:15.998260975 CET	49725	587	192.168.2.8	108.179.234.136
Jan 11, 2025 05:32:15.998260975 CET	49725	587	192.168.2.8	108.179.234.136
Jan 11, 2025 05:32:15.998354912 CET	49725	587	192.168.2.8	108.179.234.136
Jan 11, 2025 05:32:15.998461008 CET	49725	587	192.168.2.8	108.179.234.136
Jan 11, 2025 05:32:16.000749111 CET	49725	587	192.168.2.8	108.179.234.136
Jan 11, 2025 05:32:16.003165960 CET	587	49725	108.179.234.136	192.168.2.8
Jan 11, 2025 05:32:16.003176928 CET	587	49725	108.179.234.136	192.168.2.8
Jan 11, 2025 05:32:16.003185034 CET	587	49725	108.179.234.136	192.168.2.8
Jan 11, 2025 05:32:16.003243923 CET	587	49725	108.179.234.136	192.168.2.8
Jan 11, 2025 05:32:16.003276110 CET	49725	587	192.168.2.8	108.179.234.136
Jan 11, 2025 05:32:16.004004955 CET	49725	587	192.168.2.8	108.179.234.136
Jan 11, 2025 05:32:16.005599022 CET	587	49725	108.179.234.136	192.168.2.8
Jan 11, 2025 05:32:16.005665064 CET	587	49725	108.179.234.136	192.168.2.8
Jan 11, 2025 05:32:16.005691051 CET	587	49725	108.179.234.136	192.168.2.8
Jan 11, 2025 05:32:16.005701065 CET	587	49725	108.179.234.136	192.168.2.8
Jan 11, 2025 05:32:16.005708933 CET	587	49725	108.179.234.136	192.168.2.8
Jan 11, 2025 05:32:16.005712032 CET	49725	587	192.168.2.8	108.179.234.136
Jan 11, 2025 05:32:16.005765915 CET	587	49725	108.179.234.136	192.168.2.8
Jan 11, 2025 05:32:16.005789042 CET	49725	587	192.168.2.8	108.179.234.136
Jan 11, 2025 05:32:16.005789042 CET	49725	587	192.168.2.8	108.179.234.136
Jan 11, 2025 05:32:16.006309032 CET	49725	587	192.168.2.8	108.179.234.136
Jan 11, 2025 05:32:16.007771969 CET	587	49725	108.179.234.136	192.168.2.8
Jan 11, 2025 05:32:16.008101940 CET	587	49725	108.179.234.136	192.168.2.8
Jan 11, 2025 05:32:16.008255005 CET	49725	587	192.168.2.8	108.179.234.136
Jan 11, 2025 05:32:16.010514975 CET	587	49725	108.179.234.136	192.168.2.8
Jan 11, 2025 05:32:16.010571003 CET	587	49725	108.179.234.136	192.168.2.8
Jan 11, 2025 05:32:16.010577917 CET	49725	587	192.168.2.8	108.179.234.136
Jan 11, 2025 05:32:16.010668039 CET	49725	587	192.168.2.8	108.179.234.136
Jan 11, 2025 05:32:16.010677099 CET	587	49725	108.179.234.136	192.168.2.8
Jan 11, 2025 05:32:16.010688066 CET	587	49725	108.179.234.136	192.168.2.8
Jan 11, 2025 05:32:16.010698080 CET	587	49725	108.179.234.136	192.168.2.8
Jan 11, 2025 05:32:16.010751009 CET	49725	587	192.168.2.8	108.179.234.136
Jan 11, 2025 05:32:16.010751009 CET	49725	587	192.168.2.8	108.179.234.136
Jan 11, 2025 05:32:16.011168957 CET	587	49725	108.179.234.136	192.168.2.8
Jan 11, 2025 05:32:16.011657000 CET	49725	587	192.168.2.8	108.179.234.136
Jan 11, 2025 05:32:16.013086081 CET	587	49725	108.179.234.136	192.168.2.8
Jan 11, 2025 05:32:16.013107061 CET	587	49725	108.179.234.136	192.168.2.8
Jan 11, 2025 05:32:16.013138056 CET	49725	587	192.168.2.8	108.179.234.136
Jan 11, 2025 05:32:16.013176918 CET	587	49725	108.179.234.136	192.168.2.8
Jan 11, 2025 05:32:16.013185024 CET	587	49725	108.179.234.136	192.168.2.8
Jan 11, 2025 05:32:16.013221025 CET	49725	587	192.168.2.8	108.179.234.136
Jan 11, 2025 05:32:16.013338089 CET	49725	587	192.168.2.8	108.179.234.136
Jan 11, 2025 05:32:16.015352964 CET	587	49725	108.179.234.136	192.168.2.8
Jan 11, 2025 05:32:16.015404940 CET	587	49725	108.179.234.136	192.168.2.8
Jan 11, 2025 05:32:16.015444040 CET	587	49725	108.179.234.136	192.168.2.8
Jan 11, 2025 05:32:16.015475988 CET	49725	587	192.168.2.8	108.179.234.136
Jan 11, 2025 05:32:16.015520096 CET	587	49725	108.179.234.136	192.168.2.8
Jan 11, 2025 05:32:16.015558004 CET	587	49725	108.179.234.136	192.168.2.8
Jan 11, 2025 05:32:16.015608072 CET	587	49725	108.179.234.136	192.168.2.8
Jan 11, 2025 05:32:16.015646935 CET	587	49725	108.179.234.136	192.168.2.8
Jan 11, 2025 05:32:16.015671968 CET	587	49725	108.179.234.136	192.168.2.8
Jan 11, 2025 05:32:16.015918970 CET	587	49725	108.179.234.136	192.168.2.8
Jan 11, 2025 05:32:16.015950918 CET	587	49725	108.179.234.136	192.168.2.8
Jan 11, 2025 05:32:16.016493082 CET	587	49725	108.179.234.136	192.168.2.8
Jan 11, 2025 05:32:16.017774105 CET	587	49725	108.179.234.136	192.168.2.8
Jan 11, 2025 05:32:16.017784119 CET	587	49725	108.179.234.136	192.168.2.8
Jan 11, 2025 05:32:16.017791986 CET	587	49725	108.179.234.136	192.168.2.8
Jan 11, 2025 05:32:16.017889977 CET	587	49725	108.179.234.136	192.168.2.8
Jan 11, 2025 05:32:16.018028021 CET	587	49725	108.179.234.136	192.168.2.8
Jan 11, 2025 05:32:16.018037081 CET	587	49725	108.179.234.136	192.168.2.8
Jan 11, 2025 05:32:16.018081903 CET	587	49725	108.179.234.136	192.168.2.8
Jan 11, 2025 05:32:16.018090010 CET	587	49725	108.179.234.136	192.168.2.8
Jan 11, 2025 05:32:16.018177986 CET	587	49725	108.179.234.136	192.168.2.8
Jan 11, 2025 05:32:16.018187046 CET	587	49725	108.179.234.136	192.168.2.8
Jan 11, 2025 05:32:16.018196106 CET	587	49725	108.179.234.136	192.168.2.8
Jan 11, 2025 05:32:16.020071983 CET	587	49725	108.179.234.136	192.168.2.8
Jan 11, 2025 05:32:16.020114899 CET	587	49725	108.179.234.136	192.168.2.8
Jan 11, 2025 05:32:16.020153999 CET	587	49725	108.179.234.136	192.168.2.8
Jan 11, 2025 05:32:16.020188093 CET	587	49725	108.179.234.136	192.168.2.8
Jan 11, 2025 05:32:16.020245075 CET	587	49725	108.179.234.136	192.168.2.8
Jan 11, 2025 05:32:16.020253897 CET	587	49725	108.179.234.136	192.168.2.8
Jan 11, 2025 05:32:16.020304918 CET	587	49725	108.179.234.136	192.168.2.8
Jan 11, 2025 05:32:16.020313025 CET	587	49725	108.179.234.136	192.168.2.8
Jan 11, 2025 05:32:16.020392895 CET	587	49725	108.179.234.136	192.168.2.8
Jan 11, 2025 05:32:16.020401955 CET	587	49725	108.179.234.136	192.168.2.8
Jan 11, 2025 05:32:16.020442009 CET	587	49725	108.179.234.136	192.168.2.8
Jan 11, 2025 05:32:16.020452023 CET	587	49725	108.179.234.136	192.168.2.8
Jan 11, 2025 05:32:16.327729940 CET	587	49725	108.179.234.136	192.168.2.8
Jan 11, 2025 05:32:16.375925064 CET	49725	587	192.168.2.8	108.179.234.136
Jan 11, 2025 05:32:16.510121107 CET	49725	587	192.168.2.8	108.179.234.136
Jan 11, 2025 05:32:16.514914036 CET	587	49725	108.179.234.136	192.168.2.8
Jan 11, 2025 05:32:16.626220942 CET	587	49725	108.179.234.136	192.168.2.8
Jan 11, 2025 05:32:16.626985073 CET	49725	587	192.168.2.8	108.179.234.136
Jan 11, 2025 05:32:16.628719091 CET	49726	587	192.168.2.8	108.179.234.136
Jan 11, 2025 05:32:16.635142088 CET	587	49726	108.179.234.136	192.168.2.8
Jan 11, 2025 05:32:16.635204077 CET	49726	587	192.168.2.8	108.179.234.136
Jan 11, 2025 05:32:17.136082888 CET	587	49726	108.179.234.136	192.168.2.8
Jan 11, 2025 05:32:17.136285067 CET	49726	587	192.168.2.8	108.179.234.136
Jan 11, 2025 05:32:17.141149044 CET	587	49726	108.179.234.136	192.168.2.8
Jan 11, 2025 05:32:17.247751951 CET	587	49726	108.179.234.136	192.168.2.8
Jan 11, 2025 05:32:17.248061895 CET	49726	587	192.168.2.8	108.179.234.136
Jan 11, 2025 05:32:17.252940893 CET	587	49726	108.179.234.136	192.168.2.8
Jan 11, 2025 05:32:17.360253096 CET	587	49726	108.179.234.136	192.168.2.8
Jan 11, 2025 05:32:17.360686064 CET	49726	587	192.168.2.8	108.179.234.136
Jan 11, 2025 05:32:17.365513086 CET	587	49726	108.179.234.136	192.168.2.8
Jan 11, 2025 05:32:17.479938984 CET	587	49726	108.179.234.136	192.168.2.8
Jan 11, 2025 05:32:17.479959011 CET	587	49726	108.179.234.136	192.168.2.8
Jan 11, 2025 05:32:17.479970932 CET	587	49726	108.179.234.136	192.168.2.8
Jan 11, 2025 05:32:17.479983091 CET	587	49726	108.179.234.136	192.168.2.8
Jan 11, 2025 05:32:17.480027914 CET	49726	587	192.168.2.8	108.179.234.136
Jan 11, 2025 05:32:17.481857061 CET	49726	587	192.168.2.8	108.179.234.136
Jan 11, 2025 05:32:17.487627983 CET	587	49726	108.179.234.136	192.168.2.8
Jan 11, 2025 05:32:17.594535112 CET	587	49726	108.179.234.136	192.168.2.8
Jan 11, 2025 05:32:17.596921921 CET	49726	587	192.168.2.8	108.179.234.136
Jan 11, 2025 05:32:17.601773977 CET	587	49726	108.179.234.136	192.168.2.8
Jan 11, 2025 05:32:17.708295107 CET	587	49726	108.179.234.136	192.168.2.8
Jan 11, 2025 05:32:17.708681107 CET	49726	587	192.168.2.8	108.179.234.136
Jan 11, 2025 05:32:17.713427067 CET	587	49726	108.179.234.136	192.168.2.8
Jan 11, 2025 05:32:17.820301056 CET	587	49726	108.179.234.136	192.168.2.8
Jan 11, 2025 05:32:17.820688963 CET	49726	587	192.168.2.8	108.179.234.136
Jan 11, 2025 05:32:17.825582981 CET	587	49726	108.179.234.136	192.168.2.8
Jan 11, 2025 05:32:17.933068991 CET	587	49726	108.179.234.136	192.168.2.8
Jan 11, 2025 05:32:17.933371067 CET	49726	587	192.168.2.8	108.179.234.136
Jan 11, 2025 05:32:17.938204050 CET	587	49726	108.179.234.136	192.168.2.8
Jan 11, 2025 05:32:18.044734955 CET	587	49726	108.179.234.136	192.168.2.8
Jan 11, 2025 05:32:18.046031952 CET	49726	587	192.168.2.8	108.179.234.136
Jan 11, 2025 05:32:18.050923109 CET	587	49726	108.179.234.136	192.168.2.8
Jan 11, 2025 05:32:18.164760113 CET	587	49726	108.179.234.136	192.168.2.8
Jan 11, 2025 05:32:18.165222883 CET	49726	587	192.168.2.8	108.179.234.136
Jan 11, 2025 05:32:18.170156002 CET	587	49726	108.179.234.136	192.168.2.8
Jan 11, 2025 05:32:18.276381969 CET	587	49726	108.179.234.136	192.168.2.8
Jan 11, 2025 05:32:18.276770115 CET	49726	587	192.168.2.8	108.179.234.136
Jan 11, 2025 05:32:18.276854992 CET	49726	587	192.168.2.8	108.179.234.136
Jan 11, 2025 05:32:18.276854992 CET	49726	587	192.168.2.8	108.179.234.136
Jan 11, 2025 05:32:18.276920080 CET	49726	587	192.168.2.8	108.179.234.136
Jan 11, 2025 05:32:18.278863907 CET	49726	587	192.168.2.8	108.179.234.136
Jan 11, 2025 05:32:18.281677008 CET	587	49726	108.179.234.136	192.168.2.8
Jan 11, 2025 05:32:18.281687975 CET	587	49726	108.179.234.136	192.168.2.8
Jan 11, 2025 05:32:18.281697989 CET	587	49726	108.179.234.136	192.168.2.8
Jan 11, 2025 05:32:18.281708956 CET	587	49726	108.179.234.136	192.168.2.8
Jan 11, 2025 05:32:18.281764030 CET	49726	587	192.168.2.8	108.179.234.136
Jan 11, 2025 05:32:18.283703089 CET	587	49726	108.179.234.136	192.168.2.8
Jan 11, 2025 05:32:18.283754110 CET	587	49726	108.179.234.136	192.168.2.8
Jan 11, 2025 05:32:18.283775091 CET	587	49726	108.179.234.136	192.168.2.8
Jan 11, 2025 05:32:18.283780098 CET	49726	587	192.168.2.8	108.179.234.136
Jan 11, 2025 05:32:18.283819914 CET	587	49726	108.179.234.136	192.168.2.8
Jan 11, 2025 05:32:18.283849001 CET	49726	587	192.168.2.8	108.179.234.136
Jan 11, 2025 05:32:18.283891916 CET	49726	587	192.168.2.8	108.179.234.136
Jan 11, 2025 05:32:18.286590099 CET	587	49726	108.179.234.136	192.168.2.8
Jan 11, 2025 05:32:18.286708117 CET	49726	587	192.168.2.8	108.179.234.136
Jan 11, 2025 05:32:18.288580894 CET	587	49726	108.179.234.136	192.168.2.8
Jan 11, 2025 05:32:18.288741112 CET	587	49726	108.179.234.136	192.168.2.8
Jan 11, 2025 05:32:18.288841963 CET	587	49726	108.179.234.136	192.168.2.8
Jan 11, 2025 05:32:18.288867950 CET	49726	587	192.168.2.8	108.179.234.136
Jan 11, 2025 05:32:18.288947105 CET	587	49726	108.179.234.136	192.168.2.8
Jan 11, 2025 05:32:18.288980961 CET	49726	587	192.168.2.8	108.179.234.136
Jan 11, 2025 05:32:18.289036036 CET	49726	587	192.168.2.8	108.179.234.136
Jan 11, 2025 05:32:18.289051056 CET	587	49726	108.179.234.136	192.168.2.8
Jan 11, 2025 05:32:18.289092064 CET	587	49726	108.179.234.136	192.168.2.8
Jan 11, 2025 05:32:18.289122105 CET	49726	587	192.168.2.8	108.179.234.136
Jan 11, 2025 05:32:18.289165974 CET	587	49726	108.179.234.136	192.168.2.8
Jan 11, 2025 05:32:18.289181948 CET	587	49726	108.179.234.136	192.168.2.8
Jan 11, 2025 05:32:18.289201975 CET	49726	587	192.168.2.8	108.179.234.136
Jan 11, 2025 05:32:18.292284012 CET	587	49726	108.179.234.136	192.168.2.8
Jan 11, 2025 05:32:18.292326927 CET	49726	587	192.168.2.8	108.179.234.136
Jan 11, 2025 05:32:18.292599916 CET	49726	587	192.168.2.8	108.179.234.136
Jan 11, 2025 05:32:18.295949936 CET	587	49726	108.179.234.136	192.168.2.8
Jan 11, 2025 05:32:18.295959949 CET	587	49726	108.179.234.136	192.168.2.8
Jan 11, 2025 05:32:18.295978069 CET	587	49726	108.179.234.136	192.168.2.8
Jan 11, 2025 05:32:18.295985937 CET	587	49726	108.179.234.136	192.168.2.8
Jan 11, 2025 05:32:18.295995951 CET	587	49726	108.179.234.136	192.168.2.8
Jan 11, 2025 05:32:18.296005011 CET	587	49726	108.179.234.136	192.168.2.8
Jan 11, 2025 05:32:18.296013117 CET	587	49726	108.179.234.136	192.168.2.8
Jan 11, 2025 05:32:18.296020985 CET	587	49726	108.179.234.136	192.168.2.8
Jan 11, 2025 05:32:18.296030045 CET	587	49726	108.179.234.136	192.168.2.8
Jan 11, 2025 05:32:18.296044111 CET	587	49726	108.179.234.136	192.168.2.8
Jan 11, 2025 05:32:18.296052933 CET	587	49726	108.179.234.136	192.168.2.8
Jan 11, 2025 05:32:18.296056986 CET	587	49726	108.179.234.136	192.168.2.8
Jan 11, 2025 05:32:18.296061039 CET	587	49726	108.179.234.136	192.168.2.8
Jan 11, 2025 05:32:18.296062946 CET	49726	587	192.168.2.8	108.179.234.136
Jan 11, 2025 05:32:18.296063900 CET	587	49726	108.179.234.136	192.168.2.8
Jan 11, 2025 05:32:18.297144890 CET	587	49726	108.179.234.136	192.168.2.8
Jan 11, 2025 05:32:18.300909996 CET	587	49726	108.179.234.136	192.168.2.8
Jan 11, 2025 05:32:18.300919056 CET	587	49726	108.179.234.136	192.168.2.8
Jan 11, 2025 05:32:18.300932884 CET	587	49726	108.179.234.136	192.168.2.8
Jan 11, 2025 05:32:18.300940990 CET	587	49726	108.179.234.136	192.168.2.8
Jan 11, 2025 05:32:18.300995111 CET	587	49726	108.179.234.136	192.168.2.8
Jan 11, 2025 05:32:18.301002979 CET	587	49726	108.179.234.136	192.168.2.8
Jan 11, 2025 05:32:18.301042080 CET	587	49726	108.179.234.136	192.168.2.8
Jan 11, 2025 05:32:18.301049948 CET	587	49726	108.179.234.136	192.168.2.8
Jan 11, 2025 05:32:18.301146030 CET	587	49726	108.179.234.136	192.168.2.8
Jan 11, 2025 05:32:18.301153898 CET	587	49726	108.179.234.136	192.168.2.8
Jan 11, 2025 05:32:18.301192045 CET	587	49726	108.179.234.136	192.168.2.8
Jan 11, 2025 05:32:18.301201105 CET	587	49726	108.179.234.136	192.168.2.8
Jan 11, 2025 05:32:18.301271915 CET	587	49726	108.179.234.136	192.168.2.8
Jan 11, 2025 05:32:18.301280022 CET	587	49726	108.179.234.136	192.168.2.8
Jan 11, 2025 05:32:18.301314116 CET	587	49726	108.179.234.136	192.168.2.8
Jan 11, 2025 05:32:18.301321983 CET	587	49726	108.179.234.136	192.168.2.8
Jan 11, 2025 05:32:18.301352978 CET	587	49726	108.179.234.136	192.168.2.8
Jan 11, 2025 05:32:18.301361084 CET	587	49726	108.179.234.136	192.168.2.8
Jan 11, 2025 05:32:18.301371098 CET	587	49726	108.179.234.136	192.168.2.8
Jan 11, 2025 05:32:18.591595888 CET	587	49726	108.179.234.136	192.168.2.8
Jan 11, 2025 05:32:18.641459942 CET	49726	587	192.168.2.8	108.179.234.136
Jan 11, 2025 05:32:18.901753902 CET	49726	587	192.168.2.8	108.179.234.136
Jan 11, 2025 05:32:18.906636000 CET	587	49726	108.179.234.136	192.168.2.8
Jan 11, 2025 05:32:19.012943983 CET	587	49726	108.179.234.136	192.168.2.8
Jan 11, 2025 05:32:19.013380051 CET	49726	587	192.168.2.8	108.179.234.136
Jan 11, 2025 05:32:19.014621019 CET	49727	587	192.168.2.8	108.179.234.136
Jan 11, 2025 05:32:19.019511938 CET	587	49727	108.179.234.136	192.168.2.8
Jan 11, 2025 05:32:19.019579887 CET	49727	587	192.168.2.8	108.179.234.136
Jan 11, 2025 05:32:19.544071913 CET	587	49727	108.179.234.136	192.168.2.8
Jan 11, 2025 05:32:19.544858932 CET	49727	587	192.168.2.8	108.179.234.136
Jan 11, 2025 05:32:19.549717903 CET	587	49727	108.179.234.136	192.168.2.8
Jan 11, 2025 05:32:19.660159111 CET	587	49727	108.179.234.136	192.168.2.8
Jan 11, 2025 05:32:19.660898924 CET	49727	587	192.168.2.8	108.179.234.136
Jan 11, 2025 05:32:19.665641069 CET	587	49727	108.179.234.136	192.168.2.8
Jan 11, 2025 05:32:19.776954889 CET	587	49727	108.179.234.136	192.168.2.8
Jan 11, 2025 05:32:19.777919054 CET	49727	587	192.168.2.8	108.179.234.136
Jan 11, 2025 05:32:19.782717943 CET	587	49727	108.179.234.136	192.168.2.8
Jan 11, 2025 05:32:19.901670933 CET	587	49727	108.179.234.136	192.168.2.8
Jan 11, 2025 05:32:19.901688099 CET	587	49727	108.179.234.136	192.168.2.8
Jan 11, 2025 05:32:19.901700974 CET	587	49727	108.179.234.136	192.168.2.8
Jan 11, 2025 05:32:19.901791096 CET	49727	587	192.168.2.8	108.179.234.136
Jan 11, 2025 05:32:19.904836893 CET	49727	587	192.168.2.8	108.179.234.136
Jan 11, 2025 05:32:19.909642935 CET	587	49727	108.179.234.136	192.168.2.8
Jan 11, 2025 05:32:20.020168066 CET	587	49727	108.179.234.136	192.168.2.8
Jan 11, 2025 05:32:20.022677898 CET	49727	587	192.168.2.8	108.179.234.136
Jan 11, 2025 05:32:20.027499914 CET	587	49727	108.179.234.136	192.168.2.8
Jan 11, 2025 05:32:20.138050079 CET	587	49727	108.179.234.136	192.168.2.8
Jan 11, 2025 05:32:20.138791084 CET	49727	587	192.168.2.8	108.179.234.136
Jan 11, 2025 05:32:20.143603086 CET	587	49727	108.179.234.136	192.168.2.8
Jan 11, 2025 05:32:20.254313946 CET	587	49727	108.179.234.136	192.168.2.8
Jan 11, 2025 05:32:20.254735947 CET	49727	587	192.168.2.8	108.179.234.136
Jan 11, 2025 05:32:20.259565115 CET	587	49727	108.179.234.136	192.168.2.8
Jan 11, 2025 05:32:20.371177912 CET	587	49727	108.179.234.136	192.168.2.8
Jan 11, 2025 05:32:20.371494055 CET	49727	587	192.168.2.8	108.179.234.136
Jan 11, 2025 05:32:20.376280069 CET	587	49727	108.179.234.136	192.168.2.8
Jan 11, 2025 05:32:20.486610889 CET	587	49727	108.179.234.136	192.168.2.8
Jan 11, 2025 05:32:20.486901045 CET	49727	587	192.168.2.8	108.179.234.136
Jan 11, 2025 05:32:20.491734982 CET	587	49727	108.179.234.136	192.168.2.8
Jan 11, 2025 05:32:20.612365961 CET	587	49727	108.179.234.136	192.168.2.8
Jan 11, 2025 05:32:20.612561941 CET	49727	587	192.168.2.8	108.179.234.136
Jan 11, 2025 05:32:20.617398024 CET	587	49727	108.179.234.136	192.168.2.8
Jan 11, 2025 05:32:20.727807999 CET	587	49727	108.179.234.136	192.168.2.8
Jan 11, 2025 05:32:20.728306055 CET	49727	587	192.168.2.8	108.179.234.136
Jan 11, 2025 05:32:20.728353024 CET	49727	587	192.168.2.8	108.179.234.136
Jan 11, 2025 05:32:20.728434086 CET	49727	587	192.168.2.8	108.179.234.136
Jan 11, 2025 05:32:20.728496075 CET	49727	587	192.168.2.8	108.179.234.136
Jan 11, 2025 05:32:20.729959011 CET	49727	587	192.168.2.8	108.179.234.136
Jan 11, 2025 05:32:20.733108044 CET	587	49727	108.179.234.136	192.168.2.8
Jan 11, 2025 05:32:20.733190060 CET	49727	587	192.168.2.8	108.179.234.136
Jan 11, 2025 05:32:20.733212948 CET	587	49727	108.179.234.136	192.168.2.8
Jan 11, 2025 05:32:20.733223915 CET	587	49727	108.179.234.136	192.168.2.8
Jan 11, 2025 05:32:20.733366966 CET	587	49727	108.179.234.136	192.168.2.8
Jan 11, 2025 05:32:20.733406067 CET	49727	587	192.168.2.8	108.179.234.136
Jan 11, 2025 05:32:20.734776020 CET	587	49727	108.179.234.136	192.168.2.8
Jan 11, 2025 05:32:20.734793901 CET	587	49727	108.179.234.136	192.168.2.8
Jan 11, 2025 05:32:20.734832048 CET	587	49727	108.179.234.136	192.168.2.8
Jan 11, 2025 05:32:20.734855890 CET	49727	587	192.168.2.8	108.179.234.136
Jan 11, 2025 05:32:20.734894037 CET	49727	587	192.168.2.8	108.179.234.136
Jan 11, 2025 05:32:20.734975100 CET	587	49727	108.179.234.136	192.168.2.8
Jan 11, 2025 05:32:20.735025883 CET	49727	587	192.168.2.8	108.179.234.136
Jan 11, 2025 05:32:20.738013983 CET	587	49727	108.179.234.136	192.168.2.8
Jan 11, 2025 05:32:20.738065958 CET	49727	587	192.168.2.8	108.179.234.136
Jan 11, 2025 05:32:20.739630938 CET	587	49727	108.179.234.136	192.168.2.8
Jan 11, 2025 05:32:20.739701033 CET	49727	587	192.168.2.8	108.179.234.136
Jan 11, 2025 05:32:20.739706993 CET	587	49727	108.179.234.136	192.168.2.8
Jan 11, 2025 05:32:20.739717007 CET	587	49727	108.179.234.136	192.168.2.8
Jan 11, 2025 05:32:20.739743948 CET	587	49727	108.179.234.136	192.168.2.8
Jan 11, 2025 05:32:20.739768982 CET	49727	587	192.168.2.8	108.179.234.136
Jan 11, 2025 05:32:20.739787102 CET	49727	587	192.168.2.8	108.179.234.136
Jan 11, 2025 05:32:20.739797115 CET	49727	587	192.168.2.8	108.179.234.136
Jan 11, 2025 05:32:20.739829063 CET	587	49727	108.179.234.136	192.168.2.8
Jan 11, 2025 05:32:20.739865065 CET	587	49727	108.179.234.136	192.168.2.8
Jan 11, 2025 05:32:20.739881992 CET	587	49727	108.179.234.136	192.168.2.8
Jan 11, 2025 05:32:20.739886045 CET	49727	587	192.168.2.8	108.179.234.136
Jan 11, 2025 05:32:20.739912033 CET	49727	587	192.168.2.8	108.179.234.136
Jan 11, 2025 05:32:20.739917994 CET	587	49727	108.179.234.136	192.168.2.8
Jan 11, 2025 05:32:20.739934921 CET	49727	587	192.168.2.8	108.179.234.136
Jan 11, 2025 05:32:20.739962101 CET	49727	587	192.168.2.8	108.179.234.136
Jan 11, 2025 05:32:20.742820024 CET	587	49727	108.179.234.136	192.168.2.8
Jan 11, 2025 05:32:20.742872000 CET	587	49727	108.179.234.136	192.168.2.8
Jan 11, 2025 05:32:20.742880106 CET	49727	587	192.168.2.8	108.179.234.136
Jan 11, 2025 05:32:20.742940903 CET	49727	587	192.168.2.8	108.179.234.136
Jan 11, 2025 05:32:20.744462967 CET	587	49727	108.179.234.136	192.168.2.8
Jan 11, 2025 05:32:20.744472027 CET	587	49727	108.179.234.136	192.168.2.8
Jan 11, 2025 05:32:20.744517088 CET	49727	587	192.168.2.8	108.179.234.136
Jan 11, 2025 05:32:20.744550943 CET	587	49727	108.179.234.136	192.168.2.8
Jan 11, 2025 05:32:20.744581938 CET	587	49727	108.179.234.136	192.168.2.8
Jan 11, 2025 05:32:20.744622946 CET	587	49727	108.179.234.136	192.168.2.8
Jan 11, 2025 05:32:20.744652033 CET	587	49727	108.179.234.136	192.168.2.8
Jan 11, 2025 05:32:20.744694948 CET	587	49727	108.179.234.136	192.168.2.8
Jan 11, 2025 05:32:20.744720936 CET	587	49727	108.179.234.136	192.168.2.8
Jan 11, 2025 05:32:20.744761944 CET	587	49727	108.179.234.136	192.168.2.8
Jan 11, 2025 05:32:20.744816065 CET	587	49727	108.179.234.136	192.168.2.8
Jan 11, 2025 05:32:20.744832993 CET	587	49727	108.179.234.136	192.168.2.8
Jan 11, 2025 05:32:20.744841099 CET	587	49727	108.179.234.136	192.168.2.8
Jan 11, 2025 05:32:20.744889975 CET	587	49727	108.179.234.136	192.168.2.8
Jan 11, 2025 05:32:20.744900942 CET	587	49727	108.179.234.136	192.168.2.8
Jan 11, 2025 05:32:20.744929075 CET	587	49727	108.179.234.136	192.168.2.8
Jan 11, 2025 05:32:20.744937897 CET	587	49727	108.179.234.136	192.168.2.8
Jan 11, 2025 05:32:20.744955063 CET	587	49727	108.179.234.136	192.168.2.8
Jan 11, 2025 05:32:20.744962931 CET	587	49727	108.179.234.136	192.168.2.8
Jan 11, 2025 05:32:20.744996071 CET	587	49727	108.179.234.136	192.168.2.8
Jan 11, 2025 05:32:20.745003939 CET	587	49727	108.179.234.136	192.168.2.8
Jan 11, 2025 05:32:20.745028019 CET	587	49727	108.179.234.136	192.168.2.8
Jan 11, 2025 05:32:20.745037079 CET	587	49727	108.179.234.136	192.168.2.8
Jan 11, 2025 05:32:20.747082949 CET	49727	587	192.168.2.8	108.179.234.136
Jan 11, 2025 05:32:20.747147083 CET	49727	587	192.168.2.8	108.179.234.136
Jan 11, 2025 05:32:20.747641087 CET	587	49727	108.179.234.136	192.168.2.8
Jan 11, 2025 05:32:20.749239922 CET	587	49727	108.179.234.136	192.168.2.8
Jan 11, 2025 05:32:20.749249935 CET	587	49727	108.179.234.136	192.168.2.8
Jan 11, 2025 05:32:20.749258041 CET	587	49727	108.179.234.136	192.168.2.8
Jan 11, 2025 05:32:20.749267101 CET	587	49727	108.179.234.136	192.168.2.8
Jan 11, 2025 05:32:20.749275923 CET	587	49727	108.179.234.136	192.168.2.8
Jan 11, 2025 05:32:20.749285936 CET	587	49727	108.179.234.136	192.168.2.8
Jan 11, 2025 05:32:20.749306917 CET	587	49727	108.179.234.136	192.168.2.8
Jan 11, 2025 05:32:20.749315977 CET	587	49727	108.179.234.136	192.168.2.8
Jan 11, 2025 05:32:20.749375105 CET	587	49727	108.179.234.136	192.168.2.8
Jan 11, 2025 05:32:20.749383926 CET	587	49727	108.179.234.136	192.168.2.8
Jan 11, 2025 05:32:20.749392986 CET	587	49727	108.179.234.136	192.168.2.8
Jan 11, 2025 05:32:20.751986980 CET	587	49727	108.179.234.136	192.168.2.8
Jan 11, 2025 05:32:20.752022028 CET	587	49727	108.179.234.136	192.168.2.8
Jan 11, 2025 05:32:21.054502964 CET	587	49727	108.179.234.136	192.168.2.8
Jan 11, 2025 05:32:21.094584942 CET	49727	587	192.168.2.8	108.179.234.136
Jan 11, 2025 05:32:39.568176031 CET	49727	587	192.168.2.8	108.179.234.136
Jan 11, 2025 05:32:39.573103905 CET	587	49727	108.179.234.136	192.168.2.8
Jan 11, 2025 05:32:39.684175014 CET	587	49727	108.179.234.136	192.168.2.8
Jan 11, 2025 05:32:39.684904099 CET	49727	587	192.168.2.8	108.179.234.136
Jan 11, 2025 05:32:39.685694933 CET	49728	587	192.168.2.8	108.179.234.136
Jan 11, 2025 05:32:39.690459967 CET	587	49728	108.179.234.136	192.168.2.8
Jan 11, 2025 05:32:39.690910101 CET	49728	587	192.168.2.8	108.179.234.136
Jan 11, 2025 05:32:40.201817036 CET	587	49728	108.179.234.136	192.168.2.8
Jan 11, 2025 05:32:40.202034950 CET	49728	587	192.168.2.8	108.179.234.136
Jan 11, 2025 05:32:40.207600117 CET	587	49728	108.179.234.136	192.168.2.8
Jan 11, 2025 05:32:40.321929932 CET	587	49728	108.179.234.136	192.168.2.8
Jan 11, 2025 05:32:40.322218895 CET	49728	587	192.168.2.8	108.179.234.136
Jan 11, 2025 05:32:40.327075958 CET	587	49728	108.179.234.136	192.168.2.8
Jan 11, 2025 05:32:40.436283112 CET	587	49728	108.179.234.136	192.168.2.8
Jan 11, 2025 05:32:40.437402964 CET	49728	587	192.168.2.8	108.179.234.136
Jan 11, 2025 05:32:40.442306995 CET	587	49728	108.179.234.136	192.168.2.8
Jan 11, 2025 05:32:40.562774897 CET	587	49728	108.179.234.136	192.168.2.8
Jan 11, 2025 05:32:40.562788963 CET	587	49728	108.179.234.136	192.168.2.8
Jan 11, 2025 05:32:40.562800884 CET	587	49728	108.179.234.136	192.168.2.8
Jan 11, 2025 05:32:40.562813997 CET	587	49728	108.179.234.136	192.168.2.8
Jan 11, 2025 05:32:40.562846899 CET	49728	587	192.168.2.8	108.179.234.136
Jan 11, 2025 05:32:40.562884092 CET	49728	587	192.168.2.8	108.179.234.136
Jan 11, 2025 05:32:40.565421104 CET	49728	587	192.168.2.8	108.179.234.136
Jan 11, 2025 05:32:40.570244074 CET	587	49728	108.179.234.136	192.168.2.8
Jan 11, 2025 05:32:40.678855896 CET	587	49728	108.179.234.136	192.168.2.8
Jan 11, 2025 05:32:40.681700945 CET	49728	587	192.168.2.8	108.179.234.136
Jan 11, 2025 05:32:40.686603069 CET	587	49728	108.179.234.136	192.168.2.8
Jan 11, 2025 05:32:40.795131922 CET	587	49728	108.179.234.136	192.168.2.8
Jan 11, 2025 05:32:40.795389891 CET	49728	587	192.168.2.8	108.179.234.136
Jan 11, 2025 05:32:40.800292015 CET	587	49728	108.179.234.136	192.168.2.8
Jan 11, 2025 05:32:40.909060001 CET	587	49728	108.179.234.136	192.168.2.8
Jan 11, 2025 05:32:40.909296036 CET	49728	587	192.168.2.8	108.179.234.136
Jan 11, 2025 05:32:40.914170980 CET	587	49728	108.179.234.136	192.168.2.8
Jan 11, 2025 05:32:41.024437904 CET	587	49728	108.179.234.136	192.168.2.8
Jan 11, 2025 05:32:41.024635077 CET	49728	587	192.168.2.8	108.179.234.136
Jan 11, 2025 05:32:41.029531002 CET	587	49728	108.179.234.136	192.168.2.8
Jan 11, 2025 05:32:41.138298988 CET	587	49728	108.179.234.136	192.168.2.8
Jan 11, 2025 05:32:41.138652086 CET	49728	587	192.168.2.8	108.179.234.136
Jan 11, 2025 05:32:41.143510103 CET	587	49728	108.179.234.136	192.168.2.8
Jan 11, 2025 05:32:41.262023926 CET	587	49728	108.179.234.136	192.168.2.8
Jan 11, 2025 05:32:41.262229919 CET	49728	587	192.168.2.8	108.179.234.136
Jan 11, 2025 05:32:41.267179012 CET	587	49728	108.179.234.136	192.168.2.8
Jan 11, 2025 05:32:41.375334024 CET	587	49728	108.179.234.136	192.168.2.8
Jan 11, 2025 05:32:41.414608955 CET	49728	587	192.168.2.8	108.179.234.136
Jan 11, 2025 05:32:41.414695024 CET	49728	587	192.168.2.8	108.179.234.136
Jan 11, 2025 05:32:41.414695024 CET	49728	587	192.168.2.8	108.179.234.136
Jan 11, 2025 05:32:41.414947987 CET	49728	587	192.168.2.8	108.179.234.136
Jan 11, 2025 05:32:41.416095018 CET	49728	587	192.168.2.8	108.179.234.136
Jan 11, 2025 05:32:41.419450998 CET	587	49728	108.179.234.136	192.168.2.8
Jan 11, 2025 05:32:41.419460058 CET	587	49728	108.179.234.136	192.168.2.8
Jan 11, 2025 05:32:41.419606924 CET	49728	587	192.168.2.8	108.179.234.136
Jan 11, 2025 05:32:41.420190096 CET	587	49728	108.179.234.136	192.168.2.8
Jan 11, 2025 05:32:41.420248985 CET	49728	587	192.168.2.8	108.179.234.136
Jan 11, 2025 05:32:41.421753883 CET	587	49728	108.179.234.136	192.168.2.8
Jan 11, 2025 05:32:41.421834946 CET	49728	587	192.168.2.8	108.179.234.136
Jan 11, 2025 05:32:41.422408104 CET	587	49728	108.179.234.136	192.168.2.8
Jan 11, 2025 05:32:41.422415972 CET	587	49728	108.179.234.136	192.168.2.8
Jan 11, 2025 05:32:41.422478914 CET	49728	587	192.168.2.8	108.179.234.136
Jan 11, 2025 05:32:41.424396992 CET	587	49728	108.179.234.136	192.168.2.8
Jan 11, 2025 05:32:41.424406052 CET	587	49728	108.179.234.136	192.168.2.8
Jan 11, 2025 05:32:41.424462080 CET	49728	587	192.168.2.8	108.179.234.136
Jan 11, 2025 05:32:41.426620007 CET	587	49728	108.179.234.136	192.168.2.8
Jan 11, 2025 05:32:41.426687956 CET	49728	587	192.168.2.8	108.179.234.136
Jan 11, 2025 05:32:41.426919937 CET	587	49728	108.179.234.136	192.168.2.8
Jan 11, 2025 05:32:41.426970959 CET	49728	587	192.168.2.8	108.179.234.136
Jan 11, 2025 05:32:41.427232027 CET	587	49728	108.179.234.136	192.168.2.8
Jan 11, 2025 05:32:41.427287102 CET	49728	587	192.168.2.8	108.179.234.136
Jan 11, 2025 05:32:41.427295923 CET	587	49728	108.179.234.136	192.168.2.8
Jan 11, 2025 05:32:41.427304029 CET	587	49728	108.179.234.136	192.168.2.8
Jan 11, 2025 05:32:41.427375078 CET	49728	587	192.168.2.8	108.179.234.136
Jan 11, 2025 05:32:41.428256989 CET	587	49728	108.179.234.136	192.168.2.8
Jan 11, 2025 05:32:41.428323984 CET	49728	587	192.168.2.8	108.179.234.136
Jan 11, 2025 05:32:41.429653883 CET	587	49728	108.179.234.136	192.168.2.8
Jan 11, 2025 05:32:41.429716110 CET	587	49728	108.179.234.136	192.168.2.8
Jan 11, 2025 05:32:41.429723024 CET	49728	587	192.168.2.8	108.179.234.136
Jan 11, 2025 05:32:41.429729939 CET	587	49728	108.179.234.136	192.168.2.8
Jan 11, 2025 05:32:41.429740906 CET	587	49728	108.179.234.136	192.168.2.8
Jan 11, 2025 05:32:41.429766893 CET	49728	587	192.168.2.8	108.179.234.136
Jan 11, 2025 05:32:41.429805040 CET	49728	587	192.168.2.8	108.179.234.136
Jan 11, 2025 05:32:41.431523085 CET	587	49728	108.179.234.136	192.168.2.8
Jan 11, 2025 05:32:41.431596041 CET	587	49728	108.179.234.136	192.168.2.8
Jan 11, 2025 05:32:41.431621075 CET	49728	587	192.168.2.8	108.179.234.136
Jan 11, 2025 05:32:41.432722092 CET	587	49728	108.179.234.136	192.168.2.8
Jan 11, 2025 05:32:41.432732105 CET	587	49728	108.179.234.136	192.168.2.8
Jan 11, 2025 05:32:41.433298111 CET	587	49728	108.179.234.136	192.168.2.8
Jan 11, 2025 05:32:41.433306932 CET	587	49728	108.179.234.136	192.168.2.8
Jan 11, 2025 05:32:41.433902025 CET	587	49728	108.179.234.136	192.168.2.8
Jan 11, 2025 05:32:41.433912039 CET	587	49728	108.179.234.136	192.168.2.8
Jan 11, 2025 05:32:41.433922052 CET	587	49728	108.179.234.136	192.168.2.8
Jan 11, 2025 05:32:41.433964014 CET	587	49728	108.179.234.136	192.168.2.8
Jan 11, 2025 05:32:41.434005976 CET	587	49728	108.179.234.136	192.168.2.8
Jan 11, 2025 05:32:41.434410095 CET	587	49728	108.179.234.136	192.168.2.8
Jan 11, 2025 05:32:41.434420109 CET	587	49728	108.179.234.136	192.168.2.8
Jan 11, 2025 05:32:41.434436083 CET	587	49728	108.179.234.136	192.168.2.8
Jan 11, 2025 05:32:41.434446096 CET	587	49728	108.179.234.136	192.168.2.8
Jan 11, 2025 05:32:41.434539080 CET	587	49728	108.179.234.136	192.168.2.8
Jan 11, 2025 05:32:41.434549093 CET	587	49728	108.179.234.136	192.168.2.8
Jan 11, 2025 05:32:41.434566021 CET	587	49728	108.179.234.136	192.168.2.8
Jan 11, 2025 05:32:41.434575081 CET	587	49728	108.179.234.136	192.168.2.8
Jan 11, 2025 05:32:41.434614897 CET	587	49728	108.179.234.136	192.168.2.8
Jan 11, 2025 05:32:41.437361002 CET	587	49728	108.179.234.136	192.168.2.8
Jan 11, 2025 05:32:41.437397003 CET	587	49728	108.179.234.136	192.168.2.8
Jan 11, 2025 05:32:41.437406063 CET	587	49728	108.179.234.136	192.168.2.8
Jan 11, 2025 05:32:41.437423944 CET	587	49728	108.179.234.136	192.168.2.8
Jan 11, 2025 05:32:41.437432051 CET	587	49728	108.179.234.136	192.168.2.8
Jan 11, 2025 05:32:41.437465906 CET	587	49728	108.179.234.136	192.168.2.8
Jan 11, 2025 05:32:41.437474966 CET	587	49728	108.179.234.136	192.168.2.8
Jan 11, 2025 05:32:41.437491894 CET	587	49728	108.179.234.136	192.168.2.8
Jan 11, 2025 05:32:41.437503099 CET	587	49728	108.179.234.136	192.168.2.8
Jan 11, 2025 05:32:41.437540054 CET	587	49728	108.179.234.136	192.168.2.8
Jan 11, 2025 05:32:41.437549114 CET	587	49728	108.179.234.136	192.168.2.8
Jan 11, 2025 05:32:41.438036919 CET	587	49728	108.179.234.136	192.168.2.8
Jan 11, 2025 05:32:41.438045025 CET	587	49728	108.179.234.136	192.168.2.8
Jan 11, 2025 05:32:41.734733105 CET	587	49728	108.179.234.136	192.168.2.8
Jan 11, 2025 05:32:41.907366991 CET	49728	587	192.168.2.8	108.179.234.136
Jan 11, 2025 05:32:46.623652935 CET	49728	587	192.168.2.8	108.179.234.136
Jan 11, 2025 05:32:46.628597975 CET	587	49728	108.179.234.136	192.168.2.8
Jan 11, 2025 05:32:46.736905098 CET	587	49728	108.179.234.136	192.168.2.8
Jan 11, 2025 05:32:46.737581968 CET	49728	587	192.168.2.8	108.179.234.136
Jan 11, 2025 05:32:46.738964081 CET	49729	587	192.168.2.8	108.179.234.136
Jan 11, 2025 05:32:46.743798018 CET	587	49729	108.179.234.136	192.168.2.8
Jan 11, 2025 05:32:46.743885994 CET	49729	587	192.168.2.8	108.179.234.136
Jan 11, 2025 05:32:47.273786068 CET	587	49729	108.179.234.136	192.168.2.8
Jan 11, 2025 05:32:47.275084972 CET	49729	587	192.168.2.8	108.179.234.136
Jan 11, 2025 05:32:47.279918909 CET	587	49729	108.179.234.136	192.168.2.8
Jan 11, 2025 05:32:47.392142057 CET	587	49729	108.179.234.136	192.168.2.8
Jan 11, 2025 05:32:47.395308971 CET	49729	587	192.168.2.8	108.179.234.136
Jan 11, 2025 05:32:47.400228977 CET	587	49729	108.179.234.136	192.168.2.8
Jan 11, 2025 05:32:47.513195038 CET	587	49729	108.179.234.136	192.168.2.8
Jan 11, 2025 05:32:47.514390945 CET	49729	587	192.168.2.8	108.179.234.136
Jan 11, 2025 05:32:47.519234896 CET	587	49729	108.179.234.136	192.168.2.8
Jan 11, 2025 05:32:47.640516996 CET	587	49729	108.179.234.136	192.168.2.8
Jan 11, 2025 05:32:47.640532970 CET	587	49729	108.179.234.136	192.168.2.8
Jan 11, 2025 05:32:47.640543938 CET	587	49729	108.179.234.136	192.168.2.8
Jan 11, 2025 05:32:47.640759945 CET	49729	587	192.168.2.8	108.179.234.136
Jan 11, 2025 05:32:47.644897938 CET	49729	587	192.168.2.8	108.179.234.136
Jan 11, 2025 05:32:47.649801016 CET	587	49729	108.179.234.136	192.168.2.8
Jan 11, 2025 05:32:47.762063026 CET	587	49729	108.179.234.136	192.168.2.8
Jan 11, 2025 05:32:47.764868021 CET	49729	587	192.168.2.8	108.179.234.136
Jan 11, 2025 05:32:47.769737959 CET	587	49729	108.179.234.136	192.168.2.8
Jan 11, 2025 05:32:47.882257938 CET	587	49729	108.179.234.136	192.168.2.8
Jan 11, 2025 05:32:47.882540941 CET	49729	587	192.168.2.8	108.179.234.136
Jan 11, 2025 05:32:47.887384892 CET	587	49729	108.179.234.136	192.168.2.8
Jan 11, 2025 05:32:47.999648094 CET	587	49729	108.179.234.136	192.168.2.8
Jan 11, 2025 05:32:48.000072956 CET	49729	587	192.168.2.8	108.179.234.136
Jan 11, 2025 05:32:48.004961967 CET	587	49729	108.179.234.136	192.168.2.8
Jan 11, 2025 05:32:48.224920988 CET	587	49729	108.179.234.136	192.168.2.8
Jan 11, 2025 05:32:48.225281954 CET	49729	587	192.168.2.8	108.179.234.136
Jan 11, 2025 05:32:48.230134010 CET	587	49729	108.179.234.136	192.168.2.8
Jan 11, 2025 05:32:48.342235088 CET	587	49729	108.179.234.136	192.168.2.8
Jan 11, 2025 05:32:48.342556953 CET	49729	587	192.168.2.8	108.179.234.136
Jan 11, 2025 05:32:48.347395897 CET	587	49729	108.179.234.136	192.168.2.8
Jan 11, 2025 05:32:48.468000889 CET	587	49729	108.179.234.136	192.168.2.8
Jan 11, 2025 05:32:48.468280077 CET	49729	587	192.168.2.8	108.179.234.136
Jan 11, 2025 05:32:48.473207951 CET	587	49729	108.179.234.136	192.168.2.8
Jan 11, 2025 05:32:48.585417032 CET	587	49729	108.179.234.136	192.168.2.8
Jan 11, 2025 05:32:48.585804939 CET	49729	587	192.168.2.8	108.179.234.136
Jan 11, 2025 05:32:48.585855961 CET	49729	587	192.168.2.8	108.179.234.136
Jan 11, 2025 05:32:48.585885048 CET	49729	587	192.168.2.8	108.179.234.136
Jan 11, 2025 05:32:48.585947990 CET	49729	587	192.168.2.8	108.179.234.136
Jan 11, 2025 05:32:48.587474108 CET	49729	587	192.168.2.8	108.179.234.136
Jan 11, 2025 05:32:48.590703964 CET	587	49729	108.179.234.136	192.168.2.8
Jan 11, 2025 05:32:48.590714931 CET	587	49729	108.179.234.136	192.168.2.8
Jan 11, 2025 05:32:48.590723991 CET	587	49729	108.179.234.136	192.168.2.8
Jan 11, 2025 05:32:48.590753078 CET	49729	587	192.168.2.8	108.179.234.136
Jan 11, 2025 05:32:48.590799093 CET	587	49729	108.179.234.136	192.168.2.8
Jan 11, 2025 05:32:48.590842009 CET	49729	587	192.168.2.8	108.179.234.136
Jan 11, 2025 05:32:48.592323065 CET	587	49729	108.179.234.136	192.168.2.8
Jan 11, 2025 05:32:48.592333078 CET	587	49729	108.179.234.136	192.168.2.8
Jan 11, 2025 05:32:48.592349052 CET	587	49729	108.179.234.136	192.168.2.8
Jan 11, 2025 05:32:48.592358112 CET	587	49729	108.179.234.136	192.168.2.8
Jan 11, 2025 05:32:48.592431068 CET	587	49729	108.179.234.136	192.168.2.8
Jan 11, 2025 05:32:48.592590094 CET	587	49729	108.179.234.136	192.168.2.8
Jan 11, 2025 05:32:48.594594002 CET	49729	587	192.168.2.8	108.179.234.136
Jan 11, 2025 05:32:48.595469952 CET	587	49729	108.179.234.136	192.168.2.8
Jan 11, 2025 05:32:48.595526934 CET	49729	587	192.168.2.8	108.179.234.136
Jan 11, 2025 05:32:48.595592022 CET	587	49729	108.179.234.136	192.168.2.8
Jan 11, 2025 05:32:48.595642090 CET	49729	587	192.168.2.8	108.179.234.136
Jan 11, 2025 05:32:48.599432945 CET	587	49729	108.179.234.136	192.168.2.8
Jan 11, 2025 05:32:48.599482059 CET	49729	587	192.168.2.8	108.179.234.136
Jan 11, 2025 05:32:48.599488974 CET	587	49729	108.179.234.136	192.168.2.8
Jan 11, 2025 05:32:48.599522114 CET	587	49729	108.179.234.136	192.168.2.8
Jan 11, 2025 05:32:48.599539995 CET	49729	587	192.168.2.8	108.179.234.136
Jan 11, 2025 05:32:48.599577904 CET	49729	587	192.168.2.8	108.179.234.136
Jan 11, 2025 05:32:48.599626064 CET	587	49729	108.179.234.136	192.168.2.8
Jan 11, 2025 05:32:48.599643946 CET	587	49729	108.179.234.136	192.168.2.8
Jan 11, 2025 05:32:48.599674940 CET	49729	587	192.168.2.8	108.179.234.136
Jan 11, 2025 05:32:48.599703074 CET	49729	587	192.168.2.8	108.179.234.136
Jan 11, 2025 05:32:48.599767923 CET	587	49729	108.179.234.136	192.168.2.8
Jan 11, 2025 05:32:48.599817991 CET	49729	587	192.168.2.8	108.179.234.136
Jan 11, 2025 05:32:48.600303888 CET	587	49729	108.179.234.136	192.168.2.8
Jan 11, 2025 05:32:48.600357056 CET	49729	587	192.168.2.8	108.179.234.136
Jan 11, 2025 05:32:48.600524902 CET	587	49729	108.179.234.136	192.168.2.8
Jan 11, 2025 05:32:48.600533009 CET	587	49729	108.179.234.136	192.168.2.8
Jan 11, 2025 05:32:48.600574017 CET	49729	587	192.168.2.8	108.179.234.136
Jan 11, 2025 05:32:48.600600004 CET	49729	587	192.168.2.8	108.179.234.136
Jan 11, 2025 05:32:48.604198933 CET	587	49729	108.179.234.136	192.168.2.8
Jan 11, 2025 05:32:48.604260921 CET	49729	587	192.168.2.8	108.179.234.136
Jan 11, 2025 05:32:48.604269981 CET	587	49729	108.179.234.136	192.168.2.8
Jan 11, 2025 05:32:48.604326963 CET	49729	587	192.168.2.8	108.179.234.136
Jan 11, 2025 05:32:48.604327917 CET	587	49729	108.179.234.136	192.168.2.8
Jan 11, 2025 05:32:48.604387999 CET	587	49729	108.179.234.136	192.168.2.8
Jan 11, 2025 05:32:48.604396105 CET	587	49729	108.179.234.136	192.168.2.8
Jan 11, 2025 05:32:48.604441881 CET	587	49729	108.179.234.136	192.168.2.8
Jan 11, 2025 05:32:48.604487896 CET	587	49729	108.179.234.136	192.168.2.8
Jan 11, 2025 05:32:48.604528904 CET	587	49729	108.179.234.136	192.168.2.8
Jan 11, 2025 05:32:48.604557991 CET	587	49729	108.179.234.136	192.168.2.8
Jan 11, 2025 05:32:48.604615927 CET	587	49729	108.179.234.136	192.168.2.8
Jan 11, 2025 05:32:48.605112076 CET	587	49729	108.179.234.136	192.168.2.8
Jan 11, 2025 05:32:48.605205059 CET	587	49729	108.179.234.136	192.168.2.8
Jan 11, 2025 05:32:48.605214119 CET	587	49729	108.179.234.136	192.168.2.8
Jan 11, 2025 05:32:48.605221987 CET	587	49729	108.179.234.136	192.168.2.8
Jan 11, 2025 05:32:48.605258942 CET	587	49729	108.179.234.136	192.168.2.8
Jan 11, 2025 05:32:48.605267048 CET	587	49729	108.179.234.136	192.168.2.8
Jan 11, 2025 05:32:48.605321884 CET	587	49729	108.179.234.136	192.168.2.8
Jan 11, 2025 05:32:48.605330944 CET	587	49729	108.179.234.136	192.168.2.8
Jan 11, 2025 05:32:48.605519056 CET	587	49729	108.179.234.136	192.168.2.8
Jan 11, 2025 05:32:48.605529070 CET	587	49729	108.179.234.136	192.168.2.8
Jan 11, 2025 05:32:48.605561972 CET	587	49729	108.179.234.136	192.168.2.8
Jan 11, 2025 05:32:48.605571032 CET	587	49729	108.179.234.136	192.168.2.8
Jan 11, 2025 05:32:48.605578899 CET	587	49729	108.179.234.136	192.168.2.8
Jan 11, 2025 05:32:48.605587006 CET	587	49729	108.179.234.136	192.168.2.8
Jan 11, 2025 05:32:48.605603933 CET	587	49729	108.179.234.136	192.168.2.8
Jan 11, 2025 05:32:48.605612040 CET	587	49729	108.179.234.136	192.168.2.8
Jan 11, 2025 05:32:48.609113932 CET	587	49729	108.179.234.136	192.168.2.8
Jan 11, 2025 05:32:48.609138012 CET	587	49729	108.179.234.136	192.168.2.8
Jan 11, 2025 05:32:48.609253883 CET	587	49729	108.179.234.136	192.168.2.8
Jan 11, 2025 05:32:48.609272003 CET	587	49729	108.179.234.136	192.168.2.8
Jan 11, 2025 05:32:48.609281063 CET	587	49729	108.179.234.136	192.168.2.8
Jan 11, 2025 05:32:48.609291077 CET	587	49729	108.179.234.136	192.168.2.8
Jan 11, 2025 05:32:48.609308004 CET	587	49729	108.179.234.136	192.168.2.8
Jan 11, 2025 05:32:48.609318018 CET	587	49729	108.179.234.136	192.168.2.8
Jan 11, 2025 05:32:48.917387009 CET	587	49729	108.179.234.136	192.168.2.8
Jan 11, 2025 05:32:48.969577074 CET	49729	587	192.168.2.8	108.179.234.136
Jan 11, 2025 05:32:54.191091061 CET	49729	587	192.168.2.8	108.179.234.136
Jan 11, 2025 05:32:54.195972919 CET	587	49729	108.179.234.136	192.168.2.8
Jan 11, 2025 05:32:54.308159113 CET	587	49729	108.179.234.136	192.168.2.8
Jan 11, 2025 05:32:54.313478947 CET	49729	587	192.168.2.8	108.179.234.136
Jan 11, 2025 05:32:54.316009045 CET	49730	587	192.168.2.8	108.179.234.136
Jan 11, 2025 05:32:54.320910931 CET	587	49730	108.179.234.136	192.168.2.8
Jan 11, 2025 05:32:54.325042009 CET	49730	587	192.168.2.8	108.179.234.136
Jan 11, 2025 05:32:54.826641083 CET	587	49730	108.179.234.136	192.168.2.8
Jan 11, 2025 05:32:54.826811075 CET	49730	587	192.168.2.8	108.179.234.136
Jan 11, 2025 05:32:54.831563950 CET	587	49730	108.179.234.136	192.168.2.8
Jan 11, 2025 05:32:55.021461964 CET	587	49730	108.179.234.136	192.168.2.8
Jan 11, 2025 05:32:55.021660089 CET	49730	587	192.168.2.8	108.179.234.136
Jan 11, 2025 05:32:55.026484013 CET	587	49730	108.179.234.136	192.168.2.8
Jan 11, 2025 05:32:55.134434938 CET	587	49730	108.179.234.136	192.168.2.8
Jan 11, 2025 05:32:55.135046005 CET	49730	587	192.168.2.8	108.179.234.136
Jan 11, 2025 05:32:55.139956951 CET	587	49730	108.179.234.136	192.168.2.8
Jan 11, 2025 05:32:55.259299994 CET	587	49730	108.179.234.136	192.168.2.8
Jan 11, 2025 05:32:55.259320974 CET	587	49730	108.179.234.136	192.168.2.8
Jan 11, 2025 05:32:55.259335995 CET	587	49730	108.179.234.136	192.168.2.8
Jan 11, 2025 05:32:55.259676933 CET	49730	587	192.168.2.8	108.179.234.136
Jan 11, 2025 05:32:55.261539936 CET	49730	587	192.168.2.8	108.179.234.136
Jan 11, 2025 05:32:55.266340017 CET	587	49730	108.179.234.136	192.168.2.8
Jan 11, 2025 05:32:55.373236895 CET	587	49730	108.179.234.136	192.168.2.8
Jan 11, 2025 05:32:55.375672102 CET	49730	587	192.168.2.8	108.179.234.136
Jan 11, 2025 05:32:55.380542040 CET	587	49730	108.179.234.136	192.168.2.8
Jan 11, 2025 05:32:55.487199068 CET	587	49730	108.179.234.136	192.168.2.8
Jan 11, 2025 05:32:55.487571955 CET	49730	587	192.168.2.8	108.179.234.136
Jan 11, 2025 05:32:55.492439032 CET	587	49730	108.179.234.136	192.168.2.8
Jan 11, 2025 05:32:55.599333048 CET	587	49730	108.179.234.136	192.168.2.8
Jan 11, 2025 05:32:55.599797010 CET	49730	587	192.168.2.8	108.179.234.136
Jan 11, 2025 05:32:55.604621887 CET	587	49730	108.179.234.136	192.168.2.8
Jan 11, 2025 05:32:55.712392092 CET	587	49730	108.179.234.136	192.168.2.8
Jan 11, 2025 05:32:55.712969065 CET	49730	587	192.168.2.8	108.179.234.136
Jan 11, 2025 05:32:55.717842102 CET	587	49730	108.179.234.136	192.168.2.8
Jan 11, 2025 05:32:55.824398994 CET	587	49730	108.179.234.136	192.168.2.8
Jan 11, 2025 05:32:55.891701937 CET	49730	587	192.168.2.8	108.179.234.136
Jan 11, 2025 05:32:56.608192921 CET	49730	587	192.168.2.8	108.179.234.136
Jan 11, 2025 05:32:56.608551025 CET	49730	587	192.168.2.8	108.179.234.136
Jan 11, 2025 05:32:56.613095999 CET	587	49730	108.179.234.136	192.168.2.8
Jan 11, 2025 05:32:56.613672972 CET	587	49730	108.179.234.136	192.168.2.8
Jan 11, 2025 05:32:56.613744974 CET	49730	587	192.168.2.8	108.179.234.136
Jan 11, 2025 05:32:56.660279989 CET	49731	587	192.168.2.8	108.179.234.136
Jan 11, 2025 05:32:56.665110111 CET	587	49731	108.179.234.136	192.168.2.8
Jan 11, 2025 05:32:56.665199995 CET	49731	587	192.168.2.8	108.179.234.136
Jan 11, 2025 05:32:57.172112942 CET	587	49731	108.179.234.136	192.168.2.8
Jan 11, 2025 05:32:57.172278881 CET	49731	587	192.168.2.8	108.179.234.136
Jan 11, 2025 05:32:57.177134991 CET	587	49731	108.179.234.136	192.168.2.8
Jan 11, 2025 05:32:57.283821106 CET	587	49731	108.179.234.136	192.168.2.8
Jan 11, 2025 05:32:57.284066916 CET	49731	587	192.168.2.8	108.179.234.136
Jan 11, 2025 05:32:57.288952112 CET	587	49731	108.179.234.136	192.168.2.8
Jan 11, 2025 05:32:57.396343946 CET	587	49731	108.179.234.136	192.168.2.8
Jan 11, 2025 05:32:57.399765015 CET	49731	587	192.168.2.8	108.179.234.136
Jan 11, 2025 05:32:57.404617071 CET	587	49731	108.179.234.136	192.168.2.8
Jan 11, 2025 05:32:57.518378973 CET	587	49731	108.179.234.136	192.168.2.8
Jan 11, 2025 05:32:57.518399000 CET	587	49731	108.179.234.136	192.168.2.8
Jan 11, 2025 05:32:57.518413067 CET	587	49731	108.179.234.136	192.168.2.8
Jan 11, 2025 05:32:57.518543005 CET	49731	587	192.168.2.8	108.179.234.136
Jan 11, 2025 05:32:57.520102978 CET	49731	587	192.168.2.8	108.179.234.136
Jan 11, 2025 05:32:57.524894953 CET	587	49731	108.179.234.136	192.168.2.8
Jan 11, 2025 05:32:57.631494999 CET	587	49731	108.179.234.136	192.168.2.8
Jan 11, 2025 05:32:57.635835886 CET	49731	587	192.168.2.8	108.179.234.136
Jan 11, 2025 05:32:57.640712023 CET	587	49731	108.179.234.136	192.168.2.8
Jan 11, 2025 05:32:57.747307062 CET	587	49731	108.179.234.136	192.168.2.8
Jan 11, 2025 05:32:57.747533083 CET	49731	587	192.168.2.8	108.179.234.136
Jan 11, 2025 05:32:57.752475023 CET	587	49731	108.179.234.136	192.168.2.8
Jan 11, 2025 05:32:57.859091043 CET	587	49731	108.179.234.136	192.168.2.8
Jan 11, 2025 05:32:57.859385014 CET	49731	587	192.168.2.8	108.179.234.136
Jan 11, 2025 05:32:57.864347935 CET	587	49731	108.179.234.136	192.168.2.8
Jan 11, 2025 05:32:58.152450085 CET	587	49731	108.179.234.136	192.168.2.8
Jan 11, 2025 05:32:58.152839899 CET	49731	587	192.168.2.8	108.179.234.136
Jan 11, 2025 05:32:58.157732964 CET	587	49731	108.179.234.136	192.168.2.8
Jan 11, 2025 05:32:58.264364958 CET	587	49731	108.179.234.136	192.168.2.8
Jan 11, 2025 05:32:58.264805079 CET	49731	587	192.168.2.8	108.179.234.136
Jan 11, 2025 05:32:58.269717932 CET	587	49731	108.179.234.136	192.168.2.8
Jan 11, 2025 05:32:58.390242100 CET	587	49731	108.179.234.136	192.168.2.8
Jan 11, 2025 05:32:58.391297102 CET	49731	587	192.168.2.8	108.179.234.136
Jan 11, 2025 05:32:58.396267891 CET	587	49731	108.179.234.136	192.168.2.8
Jan 11, 2025 05:32:58.502813101 CET	587	49731	108.179.234.136	192.168.2.8
Jan 11, 2025 05:32:58.503276110 CET	49731	587	192.168.2.8	108.179.234.136
Jan 11, 2025 05:32:58.503329039 CET	49731	587	192.168.2.8	108.179.234.136
Jan 11, 2025 05:32:58.503329039 CET	49731	587	192.168.2.8	108.179.234.136
Jan 11, 2025 05:32:58.503371000 CET	49731	587	192.168.2.8	108.179.234.136
Jan 11, 2025 05:32:58.504468918 CET	49731	587	192.168.2.8	108.179.234.136
Jan 11, 2025 05:32:58.508203983 CET	587	49731	108.179.234.136	192.168.2.8
Jan 11, 2025 05:32:58.508214951 CET	587	49731	108.179.234.136	192.168.2.8
Jan 11, 2025 05:32:58.508223057 CET	587	49731	108.179.234.136	192.168.2.8
Jan 11, 2025 05:32:58.508234024 CET	587	49731	108.179.234.136	192.168.2.8
Jan 11, 2025 05:32:58.508277893 CET	49731	587	192.168.2.8	108.179.234.136
Jan 11, 2025 05:32:58.508306026 CET	49731	587	192.168.2.8	108.179.234.136
Jan 11, 2025 05:32:58.509392977 CET	587	49731	108.179.234.136	192.168.2.8
Jan 11, 2025 05:32:58.509402037 CET	587	49731	108.179.234.136	192.168.2.8
Jan 11, 2025 05:32:58.509419918 CET	587	49731	108.179.234.136	192.168.2.8
Jan 11, 2025 05:32:58.509428024 CET	587	49731	108.179.234.136	192.168.2.8
Jan 11, 2025 05:32:58.509452105 CET	587	49731	108.179.234.136	192.168.2.8
Jan 11, 2025 05:32:58.509455919 CET	49731	587	192.168.2.8	108.179.234.136
Jan 11, 2025 05:32:58.509460926 CET	587	49731	108.179.234.136	192.168.2.8
Jan 11, 2025 05:32:58.509502888 CET	49731	587	192.168.2.8	108.179.234.136
Jan 11, 2025 05:32:58.512907028 CET	587	49731	108.179.234.136	192.168.2.8
Jan 11, 2025 05:32:58.512963057 CET	49731	587	192.168.2.8	108.179.234.136
Jan 11, 2025 05:32:58.513199091 CET	587	49731	108.179.234.136	192.168.2.8
Jan 11, 2025 05:32:58.513254881 CET	49731	587	192.168.2.8	108.179.234.136
Jan 11, 2025 05:32:58.514241934 CET	587	49731	108.179.234.136	192.168.2.8
Jan 11, 2025 05:32:58.514282942 CET	587	49731	108.179.234.136	192.168.2.8
Jan 11, 2025 05:32:58.514288902 CET	49731	587	192.168.2.8	108.179.234.136
Jan 11, 2025 05:32:58.514339924 CET	49731	587	192.168.2.8	108.179.234.136
Jan 11, 2025 05:32:58.514343023 CET	587	49731	108.179.234.136	192.168.2.8
Jan 11, 2025 05:32:58.514353991 CET	587	49731	108.179.234.136	192.168.2.8
Jan 11, 2025 05:32:58.514405966 CET	49731	587	192.168.2.8	108.179.234.136
Jan 11, 2025 05:32:58.514517069 CET	587	49731	108.179.234.136	192.168.2.8
Jan 11, 2025 05:32:58.514525890 CET	587	49731	108.179.234.136	192.168.2.8
Jan 11, 2025 05:32:58.514569044 CET	49731	587	192.168.2.8	108.179.234.136
Jan 11, 2025 05:32:58.517776012 CET	587	49731	108.179.234.136	192.168.2.8
Jan 11, 2025 05:32:58.517810106 CET	587	49731	108.179.234.136	192.168.2.8
Jan 11, 2025 05:32:58.517843962 CET	49731	587	192.168.2.8	108.179.234.136
Jan 11, 2025 05:32:58.517882109 CET	49731	587	192.168.2.8	108.179.234.136
Jan 11, 2025 05:32:58.518156052 CET	587	49731	108.179.234.136	192.168.2.8
Jan 11, 2025 05:32:58.518210888 CET	49731	587	192.168.2.8	108.179.234.136
Jan 11, 2025 05:32:58.519007921 CET	587	49731	108.179.234.136	192.168.2.8
Jan 11, 2025 05:32:58.519068003 CET	587	49731	108.179.234.136	192.168.2.8
Jan 11, 2025 05:32:58.519082069 CET	49731	587	192.168.2.8	108.179.234.136
Jan 11, 2025 05:32:58.519114017 CET	49731	587	192.168.2.8	108.179.234.136
Jan 11, 2025 05:32:58.519120932 CET	587	49731	108.179.234.136	192.168.2.8
Jan 11, 2025 05:32:58.519176006 CET	587	49731	108.179.234.136	192.168.2.8
Jan 11, 2025 05:32:58.519224882 CET	587	49731	108.179.234.136	192.168.2.8
Jan 11, 2025 05:32:58.519233942 CET	587	49731	108.179.234.136	192.168.2.8
Jan 11, 2025 05:32:58.519243956 CET	587	49731	108.179.234.136	192.168.2.8
Jan 11, 2025 05:32:58.519463062 CET	587	49731	108.179.234.136	192.168.2.8
Jan 11, 2025 05:32:58.519535065 CET	587	49731	108.179.234.136	192.168.2.8
Jan 11, 2025 05:32:58.519543886 CET	587	49731	108.179.234.136	192.168.2.8
Jan 11, 2025 05:32:58.519553900 CET	587	49731	108.179.234.136	192.168.2.8
Jan 11, 2025 05:32:58.519602060 CET	587	49731	108.179.234.136	192.168.2.8
Jan 11, 2025 05:32:58.519610882 CET	587	49731	108.179.234.136	192.168.2.8
Jan 11, 2025 05:32:58.519627094 CET	587	49731	108.179.234.136	192.168.2.8
Jan 11, 2025 05:32:58.519635916 CET	587	49731	108.179.234.136	192.168.2.8
Jan 11, 2025 05:32:58.522677898 CET	587	49731	108.179.234.136	192.168.2.8
Jan 11, 2025 05:32:58.523008108 CET	587	49731	108.179.234.136	192.168.2.8
Jan 11, 2025 05:32:58.523017883 CET	587	49731	108.179.234.136	192.168.2.8
Jan 11, 2025 05:32:58.523097992 CET	587	49731	108.179.234.136	192.168.2.8
Jan 11, 2025 05:32:58.523107052 CET	587	49731	108.179.234.136	192.168.2.8
Jan 11, 2025 05:32:58.523117065 CET	587	49731	108.179.234.136	192.168.2.8
Jan 11, 2025 05:32:58.523127079 CET	587	49731	108.179.234.136	192.168.2.8
Jan 11, 2025 05:32:58.523134947 CET	587	49731	108.179.234.136	192.168.2.8
Jan 11, 2025 05:32:58.523812056 CET	587	49731	108.179.234.136	192.168.2.8
Jan 11, 2025 05:32:58.523821115 CET	587	49731	108.179.234.136	192.168.2.8
Jan 11, 2025 05:32:58.523838043 CET	587	49731	108.179.234.136	192.168.2.8
Jan 11, 2025 05:32:58.523845911 CET	587	49731	108.179.234.136	192.168.2.8
Jan 11, 2025 05:32:58.523993969 CET	587	49731	108.179.234.136	192.168.2.8
Jan 11, 2025 05:32:58.524002075 CET	587	49731	108.179.234.136	192.168.2.8
Jan 11, 2025 05:32:58.524010897 CET	587	49731	108.179.234.136	192.168.2.8
Jan 11, 2025 05:32:58.524095058 CET	587	49731	108.179.234.136	192.168.2.8
Jan 11, 2025 05:32:58.524104118 CET	587	49731	108.179.234.136	192.168.2.8
Jan 11, 2025 05:32:58.524137020 CET	587	49731	108.179.234.136	192.168.2.8
Jan 11, 2025 05:32:58.524146080 CET	587	49731	108.179.234.136	192.168.2.8
Jan 11, 2025 05:32:58.524156094 CET	587	49731	108.179.234.136	192.168.2.8
Jan 11, 2025 05:32:58.817572117 CET	587	49731	108.179.234.136	192.168.2.8
Jan 11, 2025 05:32:58.860430002 CET	49731	587	192.168.2.8	108.179.234.136
Jan 11, 2025 05:32:59.100379944 CET	587	49731	108.179.234.136	192.168.2.8
Jan 11, 2025 05:32:59.100507021 CET	49731	587	192.168.2.8	108.179.234.136

UDP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Jan 11, 2025 05:28:56.526782990 CET	56786	53	192.168.2.8	1.1.1.1
Jan 11, 2025 05:28:56.762262106 CET	53	56786	1.1.1.1	192.168.2.8

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Jan 11, 2025 05:28:56.526782990 CET	192.168.2.8	1.1.1.1	0xe7e3	Standard query (0)	mail.wapination.net	A (IP address)	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Jan 11, 2025 05:28:56.762262106 CET	1.1.1.1	192.168.2.8	0xe7e3	No error (0)	mail.wapination.net		108.179.234.136	A (IP address)	IN (0x0001)	false

SMTP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP	Commands
Jan 11, 2025 05:28:57.284774065 CET	587	49705	108.179.234.136	192.168.2.8	220-gator4249.hostgator.com ESMTP Exim 4.96.2 #2 Fri, 10 Jan 2025 22:28:57 -0600 220-We do not authorize the use of this system to transport unsolicited, 220 and/or bulk e-mail.
Jan 11, 2025 05:28:57.285696030 CET	49705	587	192.168.2.8	108.179.234.136	EHLO 305090
Jan 11, 2025 05:28:57.397438049 CET	587	49705	108.179.234.136	192.168.2.8	250-gator4249.hostgator.com Hello 305090 [8.46.123.189] 250-SIZE 52428800 250-8BITMIME 250-PIPELINING 250-PIPECONNECT 250-AUTH PLAIN LOGIN 250-STARTTLS 250 HELP
Jan 11, 2025 05:28:57.397645950 CET	49705	587	192.168.2.8	108.179.234.136	STARTTLS
Jan 11, 2025 05:28:57.510670900 CET	587	49705	108.179.234.136	192.168.2.8	220 TLS go ahead
Jan 11, 2025 05:30:25.460222006 CET	587	49711	108.179.234.136	192.168.2.8	220-gator4249.hostgator.com ESMTP Exim 4.96.2 #2 Fri, 10 Jan 2025 22:30:25 -0600 220-We do not authorize the use of this system to transport unsolicited, 220 and/or bulk e-mail.
Jan 11, 2025 05:30:25.460422993 CET	49711	587	192.168.2.8	108.179.234.136	EHLO 305090
Jan 11, 2025 05:30:25.571384907 CET	587	49711	108.179.234.136	192.168.2.8	250-gator4249.hostgator.com Hello 305090 [8.46.123.189] 250-SIZE 52428800 250-8BITMIME 250-PIPELINING 250-PIPECONNECT 250-AUTH PLAIN LOGIN 250-STARTTLS 250 HELP
Jan 11, 2025 05:30:25.571594954 CET	49711	587	192.168.2.8	108.179.234.136	STARTTLS
Jan 11, 2025 05:30:25.685120106 CET	587	49711	108.179.234.136	192.168.2.8	220 TLS go ahead
Jan 11, 2025 05:30:33.309045076 CET	587	49712	108.179.234.136	192.168.2.8	220-gator4249.hostgator.com ESMTP Exim 4.96.2 #2 Fri, 10 Jan 2025 22:30:33 -0600 220-We do not authorize the use of this system to transport unsolicited, 220 and/or bulk e-mail.
Jan 11, 2025 05:30:33.309226990 CET	49712	587	192.168.2.8	108.179.234.136	EHLO 305090
Jan 11, 2025 05:30:33.421813965 CET	587	49712	108.179.234.136	192.168.2.8	250-gator4249.hostgator.com Hello 305090 [8.46.123.189] 250-SIZE 52428800 250-8BITMIME 250-PIPELINING 250-PIPECONNECT 250-AUTH PLAIN LOGIN 250-STARTTLS 250 HELP
Jan 11, 2025 05:30:33.422056913 CET	49712	587	192.168.2.8	108.179.234.136	STARTTLS
Jan 11, 2025 05:30:33.536293030 CET	587	49712	108.179.234.136	192.168.2.8	220 TLS go ahead
Jan 11, 2025 05:30:46.412092924 CET	587	49713	108.179.234.136	192.168.2.8	220-gator4249.hostgator.com ESMTP Exim 4.96.2 #2 Fri, 10 Jan 2025 22:30:46 -0600 220-We do not authorize the use of this system to transport unsolicited, 220 and/or bulk e-mail.
Jan 11, 2025 05:30:46.412277937 CET	49713	587	192.168.2.8	108.179.234.136	EHLO 305090
Jan 11, 2025 05:30:46.528939009 CET	587	49713	108.179.234.136	192.168.2.8	250-gator4249.hostgator.com Hello 305090 [8.46.123.189] 250-SIZE 52428800 250-8BITMIME 250-PIPELINING 250-PIPECONNECT 250-AUTH PLAIN LOGIN 250-STARTTLS 250 HELP
Jan 11, 2025 05:30:46.529194117 CET	49713	587	192.168.2.8	108.179.234.136	STARTTLS
Jan 11, 2025 05:30:46.647268057 CET	587	49713	108.179.234.136	192.168.2.8	220 TLS go ahead
Jan 11, 2025 05:30:49.412357092 CET	587	49714	108.179.234.136	192.168.2.8	220-gator4249.hostgator.com ESMTP Exim 4.96.2 #2 Fri, 10 Jan 2025 22:30:49 -0600 220-We do not authorize the use of this system to transport unsolicited, 220 and/or bulk e-mail.
Jan 11, 2025 05:30:49.412947893 CET	49714	587	192.168.2.8	108.179.234.136	EHLO 305090
Jan 11, 2025 05:30:49.524620056 CET	587	49714	108.179.234.136	192.168.2.8	250-gator4249.hostgator.com Hello 305090 [8.46.123.189] 250-SIZE 52428800 250-8BITMIME 250-PIPELINING 250-PIPECONNECT 250-AUTH PLAIN LOGIN 250-STARTTLS 250 HELP
Jan 11, 2025 05:30:49.524894953 CET	49714	587	192.168.2.8	108.179.234.136	STARTTLS
Jan 11, 2025 05:30:49.638091087 CET	587	49714	108.179.234.136	192.168.2.8	220 TLS go ahead
Jan 11, 2025 05:30:52.410563946 CET	587	49715	108.179.234.136	192.168.2.8	220-gator4249.hostgator.com ESMTP Exim 4.96.2 #2 Fri, 10 Jan 2025 22:30:52 -0600 220-We do not authorize the use of this system to transport unsolicited, 220 and/or bulk e-mail.
Jan 11, 2025 05:30:52.410835981 CET	49715	587	192.168.2.8	108.179.234.136	EHLO 305090
Jan 11, 2025 05:30:52.524573088 CET	587	49715	108.179.234.136	192.168.2.8	250-gator4249.hostgator.com Hello 305090 [8.46.123.189] 250-SIZE 52428800 250-8BITMIME 250-PIPELINING 250-PIPECONNECT 250-AUTH PLAIN LOGIN 250-STARTTLS 250 HELP
Jan 11, 2025 05:30:52.524826050 CET	49715	587	192.168.2.8	108.179.234.136	STARTTLS
Jan 11, 2025 05:30:52.639161110 CET	587	49715	108.179.234.136	192.168.2.8	220 TLS go ahead
Jan 11, 2025 05:30:54.049102068 CET	587	49716	108.179.234.136	192.168.2.8	220-gator4249.hostgator.com ESMTP Exim 4.96.2 #2 Fri, 10 Jan 2025 22:30:53 -0600 220-We do not authorize the use of this system to transport unsolicited, 220 and/or bulk e-mail.
Jan 11, 2025 05:30:54.250937939 CET	49716	587	192.168.2.8	108.179.234.136	EHLO 305090
Jan 11, 2025 05:30:54.364556074 CET	587	49716	108.179.234.136	192.168.2.8	250-gator4249.hostgator.com Hello 305090 [8.46.123.189] 250-SIZE 52428800 250-8BITMIME 250-PIPELINING 250-PIPECONNECT 250-AUTH PLAIN LOGIN 250-STARTTLS 250 HELP
Jan 11, 2025 05:30:54.469249964 CET	49716	587	192.168.2.8	108.179.234.136	STARTTLS
Jan 11, 2025 05:30:54.582786083 CET	587	49716	108.179.234.136	192.168.2.8	220 TLS go ahead
Jan 11, 2025 05:30:57.182173967 CET	587	49717	108.179.234.136	192.168.2.8	220-gator4249.hostgator.com ESMTP Exim 4.96.2 #2 Fri, 10 Jan 2025 22:30:57 -0600 220-We do not authorize the use of this system to transport unsolicited, 220 and/or bulk e-mail.
Jan 11, 2025 05:30:57.182320118 CET	49717	587	192.168.2.8	108.179.234.136	EHLO 305090
Jan 11, 2025 05:30:57.296406031 CET	587	49717	108.179.234.136	192.168.2.8	250-gator4249.hostgator.com Hello 305090 [8.46.123.189] 250-SIZE 52428800 250-8BITMIME 250-PIPELINING 250-PIPECONNECT 250-AUTH PLAIN LOGIN 250-STARTTLS 250 HELP
Jan 11, 2025 05:30:57.296575069 CET	49717	587	192.168.2.8	108.179.234.136	STARTTLS
Jan 11, 2025 05:30:57.409641981 CET	587	49717	108.179.234.136	192.168.2.8	220 TLS go ahead
Jan 11, 2025 05:31:00.434396029 CET	587	49718	108.179.234.136	192.168.2.8	220-gator4249.hostgator.com ESMTP Exim 4.96.2 #2 Fri, 10 Jan 2025 22:31:00 -0600 220-We do not authorize the use of this system to transport unsolicited, 220 and/or bulk e-mail.
Jan 11, 2025 05:31:00.434622049 CET	49718	587	192.168.2.8	108.179.234.136	EHLO 305090
Jan 11, 2025 05:31:00.548203945 CET	587	49718	108.179.234.136	192.168.2.8	250-gator4249.hostgator.com Hello 305090 [8.46.123.189] 250-SIZE 52428800 250-8BITMIME 250-PIPELINING 250-PIPECONNECT 250-AUTH PLAIN LOGIN 250-STARTTLS 250 HELP
Jan 11, 2025 05:31:00.548383951 CET	49718	587	192.168.2.8	108.179.234.136	STARTTLS
Jan 11, 2025 05:31:00.662817955 CET	587	49718	108.179.234.136	192.168.2.8	220 TLS go ahead
Jan 11, 2025 05:31:06.507355928 CET	587	49719	108.179.234.136	192.168.2.8	220-gator4249.hostgator.com ESMTP Exim 4.96.2 #2 Fri, 10 Jan 2025 22:31:06 -0600 220-We do not authorize the use of this system to transport unsolicited, 220 and/or bulk e-mail.
Jan 11, 2025 05:31:06.507522106 CET	49719	587	192.168.2.8	108.179.234.136	EHLO 305090
Jan 11, 2025 05:31:06.622246027 CET	587	49719	108.179.234.136	192.168.2.8	250-gator4249.hostgator.com Hello 305090 [8.46.123.189] 250-SIZE 52428800 250-8BITMIME 250-PIPELINING 250-PIPECONNECT 250-AUTH PLAIN LOGIN 250-STARTTLS 250 HELP
Jan 11, 2025 05:31:06.622416019 CET	49719	587	192.168.2.8	108.179.234.136	STARTTLS
Jan 11, 2025 05:31:06.734621048 CET	587	49719	108.179.234.136	192.168.2.8	220 TLS go ahead
Jan 11, 2025 05:31:10.153199911 CET	587	49720	108.179.234.136	192.168.2.8	220-gator4249.hostgator.com ESMTP Exim 4.96.2 #2 Fri, 10 Jan 2025 22:31:10 -0600 220-We do not authorize the use of this system to transport unsolicited, 220 and/or bulk e-mail.
Jan 11, 2025 05:31:10.157095909 CET	49720	587	192.168.2.8	108.179.234.136	EHLO 305090
Jan 11, 2025 05:31:10.273530960 CET	587	49720	108.179.234.136	192.168.2.8	250-gator4249.hostgator.com Hello 305090 [8.46.123.189] 250-SIZE 52428800 250-8BITMIME 250-PIPELINING 250-PIPECONNECT 250-AUTH PLAIN LOGIN 250-STARTTLS 250 HELP
Jan 11, 2025 05:31:10.277132034 CET	49720	587	192.168.2.8	108.179.234.136	STARTTLS
Jan 11, 2025 05:31:10.394321918 CET	587	49720	108.179.234.136	192.168.2.8	220 TLS go ahead
Jan 11, 2025 05:31:50.400212049 CET	587	49721	108.179.234.136	192.168.2.8	220-gator4249.hostgator.com ESMTP Exim 4.96.2 #2 Fri, 10 Jan 2025 22:31:50 -0600 220-We do not authorize the use of this system to transport unsolicited, 220 and/or bulk e-mail.
Jan 11, 2025 05:31:50.401120901 CET	49721	587	192.168.2.8	108.179.234.136	EHLO 305090
Jan 11, 2025 05:31:50.512798071 CET	587	49721	108.179.234.136	192.168.2.8	250-gator4249.hostgator.com Hello 305090 [8.46.123.189] 250-SIZE 52428800 250-8BITMIME 250-PIPELINING 250-PIPECONNECT 250-AUTH PLAIN LOGIN 250-STARTTLS 250 HELP
Jan 11, 2025 05:31:50.512974024 CET	49721	587	192.168.2.8	108.179.234.136	STARTTLS
Jan 11, 2025 05:31:50.626635075 CET	587	49721	108.179.234.136	192.168.2.8	220 TLS go ahead
Jan 11, 2025 05:32:02.142153025 CET	587	49722	108.179.234.136	192.168.2.8	220-gator4249.hostgator.com ESMTP Exim 4.96.2 #2 Fri, 10 Jan 2025 22:32:02 -0600 220-We do not authorize the use of this system to transport unsolicited, 220 and/or bulk e-mail.
Jan 11, 2025 05:32:02.142425060 CET	49722	587	192.168.2.8	108.179.234.136	EHLO 305090
Jan 11, 2025 05:32:02.255949020 CET	587	49722	108.179.234.136	192.168.2.8	250-gator4249.hostgator.com Hello 305090 [8.46.123.189] 250-SIZE 52428800 250-8BITMIME 250-PIPELINING 250-PIPECONNECT 250-AUTH PLAIN LOGIN 250-STARTTLS 250 HELP
Jan 11, 2025 05:32:02.257920980 CET	49722	587	192.168.2.8	108.179.234.136	STARTTLS
Jan 11, 2025 05:32:02.372956038 CET	587	49722	108.179.234.136	192.168.2.8	220 TLS go ahead
Jan 11, 2025 05:32:03.940073013 CET	587	49723	108.179.234.136	192.168.2.8	220-gator4249.hostgator.com ESMTP Exim 4.96.2 #2 Fri, 10 Jan 2025 22:32:03 -0600 220-We do not authorize the use of this system to transport unsolicited, 220 and/or bulk e-mail.
Jan 11, 2025 05:32:03.940455914 CET	49723	587	192.168.2.8	108.179.234.136	EHLO 305090
Jan 11, 2025 05:32:04.055958986 CET	587	49723	108.179.234.136	192.168.2.8	250-gator4249.hostgator.com Hello 305090 [8.46.123.189] 250-SIZE 52428800 250-8BITMIME 250-PIPELINING 250-PIPECONNECT 250-AUTH PLAIN LOGIN 250-STARTTLS 250 HELP
Jan 11, 2025 05:32:04.056144953 CET	49723	587	192.168.2.8	108.179.234.136	STARTTLS
Jan 11, 2025 05:32:04.172833920 CET	587	49723	108.179.234.136	192.168.2.8	220 TLS go ahead
Jan 11, 2025 05:32:05.252976894 CET	587	49724	108.179.234.136	192.168.2.8	220-gator4249.hostgator.com ESMTP Exim 4.96.2 #2 Fri, 10 Jan 2025 22:32:05 -0600 220-We do not authorize the use of this system to transport unsolicited, 220 and/or bulk e-mail.
Jan 11, 2025 05:32:05.253130913 CET	49724	587	192.168.2.8	108.179.234.136	EHLO 305090
Jan 11, 2025 05:32:05.369505882 CET	587	49724	108.179.234.136	192.168.2.8	250-gator4249.hostgator.com Hello 305090 [8.46.123.189] 250-SIZE 52428800 250-8BITMIME 250-PIPELINING 250-PIPECONNECT 250-AUTH PLAIN LOGIN 250-STARTTLS 250 HELP
Jan 11, 2025 05:32:05.369666100 CET	49724	587	192.168.2.8	108.179.234.136	STARTTLS
Jan 11, 2025 05:32:05.488171101 CET	587	49724	108.179.234.136	192.168.2.8	220 TLS go ahead
Jan 11, 2025 05:32:14.693000078 CET	587	49725	108.179.234.136	192.168.2.8	220-gator4249.hostgator.com ESMTP Exim 4.96.2 #2 Fri, 10 Jan 2025 22:32:14 -0600 220-We do not authorize the use of this system to transport unsolicited, 220 and/or bulk e-mail.
Jan 11, 2025 05:32:14.693274975 CET	49725	587	192.168.2.8	108.179.234.136	EHLO 305090
Jan 11, 2025 05:32:14.809756994 CET	587	49725	108.179.234.136	192.168.2.8	250-gator4249.hostgator.com Hello 305090 [8.46.123.189] 250-SIZE 52428800 250-8BITMIME 250-PIPELINING 250-PIPECONNECT 250-AUTH PLAIN LOGIN 250-STARTTLS 250 HELP
Jan 11, 2025 05:32:14.809961081 CET	49725	587	192.168.2.8	108.179.234.136	STARTTLS
Jan 11, 2025 05:32:14.927463055 CET	587	49725	108.179.234.136	192.168.2.8	220 TLS go ahead
Jan 11, 2025 05:32:17.136082888 CET	587	49726	108.179.234.136	192.168.2.8	220-gator4249.hostgator.com ESMTP Exim 4.96.2 #2 Fri, 10 Jan 2025 22:32:17 -0600 220-We do not authorize the use of this system to transport unsolicited, 220 and/or bulk e-mail.
Jan 11, 2025 05:32:17.136285067 CET	49726	587	192.168.2.8	108.179.234.136	EHLO 305090
Jan 11, 2025 05:32:17.247751951 CET	587	49726	108.179.234.136	192.168.2.8	250-gator4249.hostgator.com Hello 305090 [8.46.123.189] 250-SIZE 52428800 250-8BITMIME 250-PIPELINING 250-PIPECONNECT 250-AUTH PLAIN LOGIN 250-STARTTLS 250 HELP
Jan 11, 2025 05:32:17.248061895 CET	49726	587	192.168.2.8	108.179.234.136	STARTTLS
Jan 11, 2025 05:32:17.360253096 CET	587	49726	108.179.234.136	192.168.2.8	220 TLS go ahead
Jan 11, 2025 05:32:19.544071913 CET	587	49727	108.179.234.136	192.168.2.8	220-gator4249.hostgator.com ESMTP Exim 4.96.2 #2 Fri, 10 Jan 2025 22:32:19 -0600 220-We do not authorize the use of this system to transport unsolicited, 220 and/or bulk e-mail.
Jan 11, 2025 05:32:19.544858932 CET	49727	587	192.168.2.8	108.179.234.136	EHLO 305090
Jan 11, 2025 05:32:19.660159111 CET	587	49727	108.179.234.136	192.168.2.8	250-gator4249.hostgator.com Hello 305090 [8.46.123.189] 250-SIZE 52428800 250-8BITMIME 250-PIPELINING 250-PIPECONNECT 250-AUTH PLAIN LOGIN 250-STARTTLS 250 HELP
Jan 11, 2025 05:32:19.660898924 CET	49727	587	192.168.2.8	108.179.234.136	STARTTLS
Jan 11, 2025 05:32:19.776954889 CET	587	49727	108.179.234.136	192.168.2.8	220 TLS go ahead
Jan 11, 2025 05:32:40.201817036 CET	587	49728	108.179.234.136	192.168.2.8	220-gator4249.hostgator.com ESMTP Exim 4.96.2 #2 Fri, 10 Jan 2025 22:32:40 -0600 220-We do not authorize the use of this system to transport unsolicited, 220 and/or bulk e-mail.
Jan 11, 2025 05:32:40.202034950 CET	49728	587	192.168.2.8	108.179.234.136	EHLO 305090
Jan 11, 2025 05:32:40.321929932 CET	587	49728	108.179.234.136	192.168.2.8	250-gator4249.hostgator.com Hello 305090 [8.46.123.189] 250-SIZE 52428800 250-8BITMIME 250-PIPELINING 250-PIPECONNECT 250-AUTH PLAIN LOGIN 250-STARTTLS 250 HELP
Jan 11, 2025 05:32:40.322218895 CET	49728	587	192.168.2.8	108.179.234.136	STARTTLS
Jan 11, 2025 05:32:40.436283112 CET	587	49728	108.179.234.136	192.168.2.8	220 TLS go ahead
Jan 11, 2025 05:32:47.273786068 CET	587	49729	108.179.234.136	192.168.2.8	220-gator4249.hostgator.com ESMTP Exim 4.96.2 #2 Fri, 10 Jan 2025 22:32:47 -0600 220-We do not authorize the use of this system to transport unsolicited, 220 and/or bulk e-mail.
Jan 11, 2025 05:32:47.275084972 CET	49729	587	192.168.2.8	108.179.234.136	EHLO 305090
Jan 11, 2025 05:32:47.392142057 CET	587	49729	108.179.234.136	192.168.2.8	250-gator4249.hostgator.com Hello 305090 [8.46.123.189] 250-SIZE 52428800 250-8BITMIME 250-PIPELINING 250-PIPECONNECT 250-AUTH PLAIN LOGIN 250-STARTTLS 250 HELP
Jan 11, 2025 05:32:47.395308971 CET	49729	587	192.168.2.8	108.179.234.136	STARTTLS
Jan 11, 2025 05:32:47.513195038 CET	587	49729	108.179.234.136	192.168.2.8	220 TLS go ahead
Jan 11, 2025 05:32:54.826641083 CET	587	49730	108.179.234.136	192.168.2.8	220-gator4249.hostgator.com ESMTP Exim 4.96.2 #2 Fri, 10 Jan 2025 22:32:54 -0600 220-We do not authorize the use of this system to transport unsolicited, 220 and/or bulk e-mail.
Jan 11, 2025 05:32:54.826811075 CET	49730	587	192.168.2.8	108.179.234.136	EHLO 305090
Jan 11, 2025 05:32:55.021461964 CET	587	49730	108.179.234.136	192.168.2.8	250-gator4249.hostgator.com Hello 305090 [8.46.123.189] 250-SIZE 52428800 250-8BITMIME 250-PIPELINING 250-PIPECONNECT 250-AUTH PLAIN LOGIN 250-STARTTLS 250 HELP
Jan 11, 2025 05:32:55.021660089 CET	49730	587	192.168.2.8	108.179.234.136	STARTTLS
Jan 11, 2025 05:32:55.134434938 CET	587	49730	108.179.234.136	192.168.2.8	220 TLS go ahead
Jan 11, 2025 05:32:57.172112942 CET	587	49731	108.179.234.136	192.168.2.8	220-gator4249.hostgator.com ESMTP Exim 4.96.2 #2 Fri, 10 Jan 2025 22:32:57 -0600 220-We do not authorize the use of this system to transport unsolicited, 220 and/or bulk e-mail.
Jan 11, 2025 05:32:57.172278881 CET	49731	587	192.168.2.8	108.179.234.136	EHLO 305090
Jan 11, 2025 05:32:57.283821106 CET	587	49731	108.179.234.136	192.168.2.8	250-gator4249.hostgator.com Hello 305090 [8.46.123.189] 250-SIZE 52428800 250-8BITMIME 250-PIPELINING 250-PIPECONNECT 250-AUTH PLAIN LOGIN 250-STARTTLS 250 HELP
Jan 11, 2025 05:32:57.284066916 CET	49731	587	192.168.2.8	108.179.234.136	STARTTLS
Jan 11, 2025 05:32:57.396343946 CET	587	49731	108.179.234.136	192.168.2.8	220 TLS go ahead

Target ID:	0
Start time:	23:28:50
Start date:	10/01/2025
Path:	C:\Users\user\Desktop\zdmZjYqz44.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\Desktop\zdmZjYqz44.exe"
Imagebase:	0x540000
File size:	241'152 bytes
MD5 hash:	E8EBAD39E405D8D702C4FCE049B5C31C
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 00000000.00000000.1417504257.0000000000542000.00000002.00000001.01000000.00000003.sdmp, Author: Joe Security Rule: JoeSecurity_AgentTesla_1, Description: Yara detected AgentTesla, Source: 00000000.00000000.1417504257.0000000000542000.00000002.00000001.01000000.00000003.sdmp, Author: Joe Security Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 00000000.00000002.3867837132.0000000002991000.00000004.00000800.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_AgentTesla_1, Description: Yara detected AgentTesla, Source: 00000000.00000002.3867837132.0000000002991000.00000004.00000800.00020000.00000000.sdmp, Author: Joe Security
Reputation:	low
Has exited:	false

Show Windows behavior

Execution Graph

Execution Coverage:	10.8%
Dynamic/Decrypted Code Coverage:	100%
Signature Coverage:	1.3%
Total number of Nodes:	238
Total number of Limit Nodes:	36

Executed Functions

Function 05FB0498 Relevance: 3.0, Instructions: 2973COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.3871285253.0000000005FB0000.00000040.00000800.00020000.00000000.sdmp, Offset: 05FB0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_5fb0000_zdmZjYqz44.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 4015922859d71e0f5188eee2a2dec726e8a67a85df20dfbc69795871ba101cc4
Instruction ID: b7a61ba686bda9b806ac6d4860f50248e3e7f6ba9843b37f569aafff382d1d5b
Opcode Fuzzy Hash: 4015922859d71e0f5188eee2a2dec726e8a67a85df20dfbc69795871ba101cc4
Instruction Fuzzy Hash: C863FA31D10A1ACADB51EB69C8849E9F7B1FF99300F51C79AE45877121EB70AAC4CF81

Function 05FB3A08 Relevance: 2.2, Instructions: 2222COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.3871285253.0000000005FB0000.00000040.00000800.00020000.00000000.sdmp, Offset: 05FB0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_5fb0000_zdmZjYqz44.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 5aa60e335569f48de3e1a0cbabc31f044383f3d459f5eb4777088938c9ef3239
Instruction ID: e2cced769fadf94e3d11e400703e0e5c5a7b7c4c070e17ea3ddbf859457051a1
Opcode Fuzzy Hash: 5aa60e335569f48de3e1a0cbabc31f044383f3d459f5eb4777088938c9ef3239
Instruction Fuzzy Hash: CE231C31D10719CADB11EF69C884AEDF7B1FF89300F15C69AE449A7211EB74AAC5CB81

Function 0613AE40 Relevance: 1.6, APIs: 1, Instructions: 60
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

SetWindowsHookExA.USER32(0000000D,00000000,?,?,?,?,?,?,?,?,?,0613B498,00000000,00000000), ref: 0613B6AB

Memory Dump Source

Source File: 00000000.00000002.3871355120.0000000006130000.00000040.00000800.00020000.00000000.sdmp, Offset: 06130000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6130000_zdmZjYqz44.jbxd

Similarity

API ID: HookWindows
String ID:
API String ID: 2559412058-0
Opcode ID: 1f34aecd55bd006c33245d1b1b5168b036bf01d0efe45523465715b691892027
Instruction ID: f1caca172e8d667adbb76579ae1a45958c8d523f4b5d130251916da961984b1b
Opcode Fuzzy Hash: 1f34aecd55bd006c33245d1b1b5168b036bf01d0efe45523465715b691892027
Instruction Fuzzy Hash: 112152B1D002599FDB14CF9AD844BEEFBF4EB88310F10842AE419A7250D778A900CFA1

Function 05FB6020 Relevance: 1.5, Instructions: 1470COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.3871285253.0000000005FB0000.00000040.00000800.00020000.00000000.sdmp, Offset: 05FB0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_5fb0000_zdmZjYqz44.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 89cd612d744ee3e121087ac98e52857263e2e8b3e3d656411596fc9b8e5f2fbe
Instruction ID: 7408b46d4145025548dd620e0a2fc714ef1ef6bb7b3daf3a89f506424f08fb62
Opcode Fuzzy Hash: 89cd612d744ee3e121087ac98e52857263e2e8b3e3d656411596fc9b8e5f2fbe
Instruction Fuzzy Hash: A8D25A30E00205CFEB24DB69C594AADB7B2FF89300F54C5A9D40AEB265DB75ED85CB90

Function 05FBA670 Relevance: .8, Instructions: 814COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.3871285253.0000000005FB0000.00000040.00000800.00020000.00000000.sdmp, Offset: 05FB0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_5fb0000_zdmZjYqz44.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: efe2baffba3cbb2878a6352945168f3571457aa15abbde411c437fec55893fc6
Instruction ID: a0c6db111a2115d22352494322dc697eabeb45935f4b74bddc1409dcb92ae490
Opcode Fuzzy Hash: efe2baffba3cbb2878a6352945168f3571457aa15abbde411c437fec55893fc6
Instruction Fuzzy Hash: B6626B34B00204DFEB24DB69D584AADB7F2FF88314F148469E446AB395DB79EC46CB90

Function 05FBF2B8 Relevance: .7, Instructions: 746COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.3871285253.0000000005FB0000.00000040.00000800.00020000.00000000.sdmp, Offset: 05FB0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_5fb0000_zdmZjYqz44.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: d54878892d58fe116befdece23a0ea7dc2fcb49f7ba8ea3eecba01dd06ec42fb
Instruction ID: 6c14c3ac977d393817bc123c1440513007009c15002fb90a8605788b1bd25f42
Opcode Fuzzy Hash: d54878892d58fe116befdece23a0ea7dc2fcb49f7ba8ea3eecba01dd06ec42fb
Instruction Fuzzy Hash: 4E524070E00209DFEB24DBA9D880BEEB7B2FB85310F248526D405DB395DB79DD818B51

Function 061304D0 Relevance: .6, Instructions: 644COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.3871355120.0000000006130000.00000040.00000800.00020000.00000000.sdmp, Offset: 06130000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6130000_zdmZjYqz44.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 0ec50946c350bb9375985a87d4be3206483d9531a7bb907a3bf87cf0598a75bc
Instruction ID: 97d61c3b1d42111cd0f63cd4a6c1edd8db437d8fa9feb130d5eb4d9da416921d
Opcode Fuzzy Hash: 0ec50946c350bb9375985a87d4be3206483d9531a7bb907a3bf87cf0598a75bc
Instruction Fuzzy Hash: AF323F34B102199FDB54EB68E890BAEB7F2FB88311F108529E406EB355DB35ED41CB91

Function 05FBBE00 Relevance: .5, Instructions: 471COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.3871285253.0000000005FB0000.00000040.00000800.00020000.00000000.sdmp, Offset: 05FB0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_5fb0000_zdmZjYqz44.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 8cc864d7a1a5e2d78959393cd029e396a63aa53f2e1b59a5970b46a5d7885123
Instruction ID: 4514e4094ea21d27e196fc2acc42b19a887881d9c055e61097f94aa08aa193d0
Opcode Fuzzy Hash: 8cc864d7a1a5e2d78959393cd029e396a63aa53f2e1b59a5970b46a5d7885123
Instruction Fuzzy Hash: 0F029F31B04206DFEB14DB69D450AAEB7A2FF88304F148569D406DB394DB7AEC468B90

Function 00E04230 Relevance: .3, Instructions: 281COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.3867205613.0000000000E00000.00000040.00000800.00020000.00000000.sdmp, Offset: 00E00000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_e00000_zdmZjYqz44.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: a569daa5ed183ff2951d4c50a212728a38f1d1df1d288586fcf01719f9fd22be
Instruction ID: 364831dc4f1077290811384d950d01bba8e0b870879664e52fdba5e792fc8744
Opcode Fuzzy Hash: a569daa5ed183ff2951d4c50a212728a38f1d1df1d288586fcf01719f9fd22be
Instruction Fuzzy Hash: 67B14EF0E00209CFDB10DFA9D9857ADBBF2AF88714F149129E515BB2D4EB749885CB81

Function 00E04B00 Relevance: .3, Instructions: 266COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.3867205613.0000000000E00000.00000040.00000800.00020000.00000000.sdmp, Offset: 00E00000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_e00000_zdmZjYqz44.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 2136e940509840766ff27fb3f4f0252b9cbe00c0563f2fa091729822b8f35257
Instruction ID: 1c2be10be0d427d268574fd250a5b48ddd396e106ca9c2dae379e46b30e8d3d5
Opcode Fuzzy Hash: 2136e940509840766ff27fb3f4f0252b9cbe00c0563f2fa091729822b8f35257
Instruction Fuzzy Hash: 2FB13AF0E00209DFEB10DFA9D98179DBBF2BB88714F149529D515BB2D4EB749881CB81

Function 061374DC Relevance: .3, Instructions: 253COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.3871355120.0000000006130000.00000040.00000800.00020000.00000000.sdmp, Offset: 06130000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6130000_zdmZjYqz44.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 3616e07743dcc4e59e53cb902909d70b0842dd7d931fd4a65cb99667285472e7
Instruction ID: 6ca2b0f13b24c8160bc8fbe03b4bf1458c3e21eb1ee11ecd0ac4c1b1d608e5c0
Opcode Fuzzy Hash: 3616e07743dcc4e59e53cb902909d70b0842dd7d931fd4a65cb99667285472e7
Instruction Fuzzy Hash: 53A17D75E00319CFCB44EFB4D894ADDBBBAFF89310F158619E416AB2A4DB30A945CB50

Function 00E03EE8 Relevance: .2, Instructions: 238COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.3867205613.0000000000E00000.00000040.00000800.00020000.00000000.sdmp, Offset: 00E00000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_e00000_zdmZjYqz44.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 08d6558b13b51c818b8bb3d7f16bf011924b411de7b3a299b17d20d511e7134c
Instruction ID: f8b0204d2ea6e4ac5ae78eb01e583e36333b75d0d996c983652b169e84e8f2cc
Opcode Fuzzy Hash: 08d6558b13b51c818b8bb3d7f16bf011924b411de7b3a299b17d20d511e7134c
Instruction Fuzzy Hash: FC9159B0E00209DFDB14DFA9C9817DEBBF2AF88314F149129E515BB2D4EB749985CB81

Function 06138071 Relevance: .2, Instructions: 216COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.3871355120.0000000006130000.00000040.00000800.00020000.00000000.sdmp, Offset: 06130000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6130000_zdmZjYqz44.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: ebc7927768838a9605af474385bb2e6ab4308919404542596d76aea4b50f3796
Instruction ID: dff517c6da1f036e5bb29526a4e2d9854c8aa26c2fb76c758fd2d48f2f123caf
Opcode Fuzzy Hash: ebc7927768838a9605af474385bb2e6ab4308919404542596d76aea4b50f3796
Instruction Fuzzy Hash: 26917035E00319CFCB55DFB4D8949DDFBBAFF89310B158619E416AB2A4DB30A841CB50

Function 06134C2F Relevance: 3.6, APIs: 1, Strings: 1, Instructions: 70
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

GlobalMemoryStatusEx.KERNEL32(?,?,?,?,?,?,?,?,?,06134BE2), ref: 06134CCF

Strings

y, xrefs: 06134C34

Memory Dump Source

Source File: 00000000.00000002.3871355120.0000000006130000.00000040.00000800.00020000.00000000.sdmp, Offset: 06130000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6130000_zdmZjYqz44.jbxd

Similarity

API ID: GlobalMemoryStatus
String ID: y
API String ID: 1890195054-4225443349
Opcode ID: 90fc97e673de77de046b3db08e59c9f4e8135546e5ce287a091133df89ccef41
Instruction ID: 9f138a4fbe9f8339abe077569b95c9e6bf89e506ad40ed217885626ea4f5b649
Opcode Fuzzy Hash: 90fc97e673de77de046b3db08e59c9f4e8135546e5ce287a091133df89ccef41
Instruction Fuzzy Hash: 392198B1C00299DFDB20DFAAD84479EFBF4BF08220F14815AE858A7241D3789984CFA1

Function 00E09C92 Relevance: 1.8, APIs: 1, Instructions: 328
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

GetActiveWindow.USER32 ref: 00E09E27

Memory Dump Source

Source File: 00000000.00000002.3867205613.0000000000E00000.00000040.00000800.00020000.00000000.sdmp, Offset: 00E00000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_e00000_zdmZjYqz44.jbxd

Similarity

API ID: ActiveWindow
String ID:
API String ID: 2558294473-0
Opcode ID: 04ca967e713ba60fd94cecba38940d82ec0e3f154d044c12157e031bc1ee008f
Instruction ID: fc7dbb9c2682cfe6f194501b26f2e6d72cb887da42e0b90f3970b150ccdd9f41
Opcode Fuzzy Hash: 04ca967e713ba60fd94cecba38940d82ec0e3f154d044c12157e031bc1ee008f
Instruction Fuzzy Hash: DDC18070B002099FDB189FB4D4547AE77E6EFC8300F148429E446EB386EF799D868B65

Function 06137D70 Relevance: 1.6, APIs: 1, Instructions: 113
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

CreateWindowExW.USER32(?,?,?,?,?,?,0000000C,?,?,?,?,?), ref: 06137E82

Memory Dump Source

Source File: 00000000.00000002.3871355120.0000000006130000.00000040.00000800.00020000.00000000.sdmp, Offset: 06130000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6130000_zdmZjYqz44.jbxd

Similarity

API ID: CreateWindow
String ID:
API String ID: 716092398-0
Opcode ID: 1b2eaba9c9b0b59f4955aa8bc30ced0db661c5c0d9d6ac0d57598fdcdc20aae1
Instruction ID: 4088cdaa9a24c58ee395fc39bfd6889aef5d2e3be8f9a4cc15a69327aafab55e
Opcode Fuzzy Hash: 1b2eaba9c9b0b59f4955aa8bc30ced0db661c5c0d9d6ac0d57598fdcdc20aae1
Instruction Fuzzy Hash: 9741EFB1D00319EFDB14CF9AC880ADEFBB5BF48310F24852AE819AB250D7759845CF94

Function 06137D6F Relevance: 1.6, APIs: 1, Instructions: 111
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

CreateWindowExW.USER32(?,?,?,?,?,?,0000000C,?,?,?,?,?), ref: 06137E82

Memory Dump Source

Source File: 00000000.00000002.3871355120.0000000006130000.00000040.00000800.00020000.00000000.sdmp, Offset: 06130000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6130000_zdmZjYqz44.jbxd

Similarity

API ID: CreateWindow
String ID:
API String ID: 716092398-0
Opcode ID: 124ef93c9a1f9f21296e448432821b44c0a1e7b1b62bdd3a74dc52adc2e6bc58
Instruction ID: 1e6e31f84b00707e11ef37a3c049b1699ede7cf75e22bf92f74aee65cbe8fc13
Opcode Fuzzy Hash: 124ef93c9a1f9f21296e448432821b44c0a1e7b1b62bdd3a74dc52adc2e6bc58
Instruction Fuzzy Hash: FA41EEB5D00319EFDB14CFAAC880ADEBBB5BF48310F24852AE819AB250D7759845CF94

Function 061375CC Relevance: 1.6, APIs: 1, Instructions: 97
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

CallWindowProcW.USER32(?,?,?,?,?), ref: 06138F49

Memory Dump Source

Source File: 00000000.00000002.3871355120.0000000006130000.00000040.00000800.00020000.00000000.sdmp, Offset: 06130000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6130000_zdmZjYqz44.jbxd

Similarity

API ID: CallProcWindow
String ID:
API String ID: 2714655100-0
Opcode ID: c1ead03873530230df8694908070cbc54ca44f9996e73b6587de3ac326499e2a
Instruction ID: e8e1cd8c04fcb3558d1cb0f32888dd672268f9755e890fe9f7a0d24dcb69b9ec
Opcode Fuzzy Hash: c1ead03873530230df8694908070cbc54ca44f9996e73b6587de3ac326499e2a
Instruction Fuzzy Hash: 2A416DB4900319DFDB54CF99C488AAABBF9FF88314F15C859E519AB321D334A840CFA0

Function 06137D64 Relevance: 1.6, APIs: 1, Instructions: 93
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

CreateWindowExW.USER32(?,?,?,?,?,?,0000000C,?,?,?,?,?), ref: 06137E82

Memory Dump Source

Source File: 00000000.00000002.3871355120.0000000006130000.00000040.00000800.00020000.00000000.sdmp, Offset: 06130000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6130000_zdmZjYqz44.jbxd

Similarity

API ID: CreateWindow
String ID:
API String ID: 716092398-0
Opcode ID: 73af7b270ce5d3c83bac23178b884573b741f86c57f698608dbe74f65931168b
Instruction ID: fff53508f1b516c66658cc5a29064e531e05148ed7648a5dc4ee1a5ab61a5aeb
Opcode Fuzzy Hash: 73af7b270ce5d3c83bac23178b884573b741f86c57f698608dbe74f65931168b
Instruction Fuzzy Hash: 0D31F5B1D00319EFDF15CF99C884ADEBBB6BF89314F24862AE405AB250D7759845CF90

Function 06139ADC Relevance: 1.6, APIs: 1, Instructions: 79
comclipboardCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

OleGetClipboard.OLE32(?), ref: 06139B70

Memory Dump Source

Source File: 00000000.00000002.3871355120.0000000006130000.00000040.00000800.00020000.00000000.sdmp, Offset: 06130000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6130000_zdmZjYqz44.jbxd

Similarity

API ID: Clipboard
String ID:
API String ID: 220874293-0
Opcode ID: f82979ab75655f9bad98ad42ccf2dc6c00867f0a0d3aa5133c6723b997c72ef1
Instruction ID: 3a5643db748c3ea701da079ae251047114bf08da2635dd264a76cdf5bdc01eb0
Opcode Fuzzy Hash: f82979ab75655f9bad98ad42ccf2dc6c00867f0a0d3aa5133c6723b997c72ef1
Instruction Fuzzy Hash: 8E3121B0D01258EFEB14CF99D884BCEBBF5AF48314F208419E405BB290DBB49845CBA1

Function 0613781C Relevance: 1.6, APIs: 1, Instructions: 74
comclipboardCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

OleGetClipboard.OLE32(?), ref: 06139B70

Memory Dump Source

Source File: 00000000.00000002.3871355120.0000000006130000.00000040.00000800.00020000.00000000.sdmp, Offset: 06130000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6130000_zdmZjYqz44.jbxd

Similarity

API ID: Clipboard
String ID:
API String ID: 220874293-0
Opcode ID: 86de625903956efc70326a2fd73941d4a14fbeaf576b5c273812de27da96b289
Instruction ID: 3329587ed989da03d3c1c5f12e1d4503d4aaa90a04845c1e091dd988eebb1a47
Opcode Fuzzy Hash: 86de625903956efc70326a2fd73941d4a14fbeaf576b5c273812de27da96b289
Instruction Fuzzy Hash: 2D3102B0D01358DFEB14CF99D984B8DBBF5AB48314F248419E405BB394DBB45845CF95

Function 00E0AF40 Relevance: 1.6, APIs: 1, Instructions: 72
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

DuplicateHandle.KERNELBASE(?,?,?,?,?,?,?), ref: 00E0AFCF

Memory Dump Source

Source File: 00000000.00000002.3867205613.0000000000E00000.00000040.00000800.00020000.00000000.sdmp, Offset: 00E00000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_e00000_zdmZjYqz44.jbxd

Similarity

API ID: DuplicateHandle
String ID:
API String ID: 3793708945-0
Opcode ID: a7f629a12880c45d084c53dc72b00e73914d5711a17333d13edba948372c6403
Instruction ID: 4ebc1ce4b98726bc814aba7e8c04f3943d5456ab82286ed9f903479fd11fed9e
Opcode Fuzzy Hash: a7f629a12880c45d084c53dc72b00e73914d5711a17333d13edba948372c6403
Instruction Fuzzy Hash: 573124B59053889FDB11CFA9D884ADEBFF4EB49310F14805AE854A7291C3789944CF62

Function 00E0CC20 Relevance: 1.6, APIs: 1, Instructions: 62
threadCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

EnumThreadWindows.USER32(?,00000000,?,?,?,?,00000E20,?,?,00E0CC08,039960D8,029B5D08), ref: 00E0CC99

Memory Dump Source

Source File: 00000000.00000002.3867205613.0000000000E00000.00000040.00000800.00020000.00000000.sdmp, Offset: 00E00000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_e00000_zdmZjYqz44.jbxd

Similarity

API ID: EnumThreadWindows
String ID:
API String ID: 2941952884-0
Opcode ID: 39efd847d8f3fddd1bea6c809ee81a4e43771ca82dc030124a0180463bf17235
Instruction ID: 504256c27fc5b70d24935d0c471bc40daadc1bc7f0f0abaf1eb7e44e5fcd22e6
Opcode Fuzzy Hash: 39efd847d8f3fddd1bea6c809ee81a4e43771ca82dc030124a0180463bf17235
Instruction Fuzzy Hash: A02118B1D006099FDB14CF9AD884BEEFBF5EB88310F14842AD458A7290D7789945CF65

Function 00E0AF48 Relevance: 1.6, APIs: 1, Instructions: 62
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

DuplicateHandle.KERNELBASE(?,?,?,?,?,?,?), ref: 00E0AFCF

Memory Dump Source

Source File: 00000000.00000002.3867205613.0000000000E00000.00000040.00000800.00020000.00000000.sdmp, Offset: 00E00000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_e00000_zdmZjYqz44.jbxd

Similarity

API ID: DuplicateHandle
String ID:
API String ID: 3793708945-0
Opcode ID: 3d4626a5f775214029c109dee6d9d5bd3ef832eb09a171925c0b215b963eb0ab
Instruction ID: 90d5e20c3ab928cf503e00f08c1bae69a994b669f27506a8bb71bc807e5f4c03
Opcode Fuzzy Hash: 3d4626a5f775214029c109dee6d9d5bd3ef832eb09a171925c0b215b963eb0ab
Instruction Fuzzy Hash: D721C4B5900349EFDB10CFAAD884ADEBBF9FB48310F14841AE954A7350D378A944CF65

Function 00E0B844 Relevance: 1.6, APIs: 1, Instructions: 62
threadCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

EnumThreadWindows.USER32(?,00000000,?,?,?,?,00000E20,?,?,00E0CC08,039960D8,029B5D08), ref: 00E0CC99

Memory Dump Source

Source File: 00000000.00000002.3867205613.0000000000E00000.00000040.00000800.00020000.00000000.sdmp, Offset: 00E00000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_e00000_zdmZjYqz44.jbxd

Similarity

API ID: EnumThreadWindows
String ID:
API String ID: 2941952884-0
Opcode ID: 9e8b5d9bbecd333c50c3cd6e097b3d2effa335f722500f645cd60d4d7255b0ea
Instruction ID: b8aeabaf5063c6dea8027bc14a2ba66abaa349ea5dc36d2965db7d7cf12839c7
Opcode Fuzzy Hash: 9e8b5d9bbecd333c50c3cd6e097b3d2effa335f722500f645cd60d4d7255b0ea
Instruction Fuzzy Hash: 25213A71900209DFDB10CF9AC844BEEFBF5FB88310F14842AE458A7290D778A940CF65

Function 00E0CFB1 Relevance: 1.6, APIs: 1, Instructions: 60
windowCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

MessageBoxW.USER32(?,00000000,00000000,?), ref: 00E0D035

Memory Dump Source

Source File: 00000000.00000002.3867205613.0000000000E00000.00000040.00000800.00020000.00000000.sdmp, Offset: 00E00000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_e00000_zdmZjYqz44.jbxd

Similarity

API ID: Message
String ID:
API String ID: 2030045667-0
Opcode ID: c275f28cf66e47d56ebfb681c192de3d693902c040042b58710097f3b0a7cc64
Instruction ID: 64c72965f0385e598015e75f51402ed025319dad8deb0d03cb0c6974fbb5430e
Opcode Fuzzy Hash: c275f28cf66e47d56ebfb681c192de3d693902c040042b58710097f3b0a7cc64
Instruction Fuzzy Hash: D92113B68017099FDB10CF9AD884ADEFBB5FB88314F14842EE418A7240C379A945CBA1

Function 00E0CFB8 Relevance: 1.6, APIs: 1, Instructions: 57
windowCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

MessageBoxW.USER32(?,00000000,00000000,?), ref: 00E0D035

Memory Dump Source

Source File: 00000000.00000002.3867205613.0000000000E00000.00000040.00000800.00020000.00000000.sdmp, Offset: 00E00000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_e00000_zdmZjYqz44.jbxd

Similarity

API ID: Message
String ID:
API String ID: 2030045667-0
Opcode ID: d557bade68a6d026094f8082497d7277fa38a732d51bd5660b298ed6f571de34
Instruction ID: ede0c8569799fef52059525e466862d97c6c551dfa1010e73578963c422a65e1
Opcode Fuzzy Hash: d557bade68a6d026094f8082497d7277fa38a732d51bd5660b298ed6f571de34
Instruction Fuzzy Hash: A021E3B58003499FDB14CF9AD884ADEFBF5FB88314F14852EE418A7240C375A945CBA5

Function 0613B62F Relevance: 1.6, APIs: 1, Instructions: 55COMMON

Download Yara Rule

APIs

SetWindowsHookExA.USER32(0000000D,00000000,?,?,?,?,?,?,?,?,?,0613B498,00000000,00000000), ref: 0613B6AB

Memory Dump Source

Source File: 00000000.00000002.3871355120.0000000006130000.00000040.00000800.00020000.00000000.sdmp, Offset: 06130000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6130000_zdmZjYqz44.jbxd

Similarity

API ID: HookWindows
String ID:
API String ID: 2559412058-0
Opcode ID: 9dff5a14a2a484d73084d648debd692b06c2965b8c1e401e869d5fe44af1de07
Instruction ID: e1656b21594d87d14910909dba4a69acbfeba189617e65b8f1932b7bb822bcb6
Opcode Fuzzy Hash: 9dff5a14a2a484d73084d648debd692b06c2965b8c1e401e869d5fe44af1de07
Instruction Fuzzy Hash: AF2110B5D00219DFDB14CF9AD944BEEBBF5BB88310F14842AE419A7250D779A940CFA1

Function 06133F3C Relevance: 1.6, APIs: 1, Instructions: 55COMMON

Download Yara Rule

APIs

GlobalMemoryStatusEx.KERNEL32(?,?,?,?,?,?,?,?,?,06134BE2), ref: 06134CCF

Memory Dump Source

Source File: 00000000.00000002.3871355120.0000000006130000.00000040.00000800.00020000.00000000.sdmp, Offset: 06130000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6130000_zdmZjYqz44.jbxd

Similarity

API ID: GlobalMemoryStatus
String ID:
API String ID: 1890195054-0
Opcode ID: 76478ba9a0561001810a258e166803ebc3387722f29d83873dd90b1ab369a4a8
Instruction ID: b7e471fe30535444a6c46fcbf2a10022f9f32843a49132be06a013b08ba2b74a
Opcode Fuzzy Hash: 76478ba9a0561001810a258e166803ebc3387722f29d83873dd90b1ab369a4a8
Instruction Fuzzy Hash: 021142B1C006699BDB10CF9AC444B9EFBF4BB48220F15812AE818B7240D378A944CFE5

Function 06137240 Relevance: 1.5, APIs: 1, Instructions: 47COMMON

Download Yara Rule

APIs

GetModuleHandleW.KERNEL32(00000000), ref: 061372A6

Memory Dump Source

Source File: 00000000.00000002.3871355120.0000000006130000.00000040.00000800.00020000.00000000.sdmp, Offset: 06130000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6130000_zdmZjYqz44.jbxd

Similarity

API ID: HandleModule
String ID:
API String ID: 4139908857-0
Opcode ID: 502b5c3783e8f0248c8cd1a6ec8e85d18f169684e004e5737bc6668d7623e831
Instruction ID: 37faf480f9d5aa7cd17c644b3bd2e7aea4487469e40a7ced9786fb6f377b998f
Opcode Fuzzy Hash: 502b5c3783e8f0248c8cd1a6ec8e85d18f169684e004e5737bc6668d7623e831
Instruction Fuzzy Hash: 4E1110B5C006498FDB10DFAAD944BDEFBF4AB88210F10841AE829B7240D379A545CFA5

Function 06137624 Relevance: 1.5, APIs: 1, Instructions: 46COMMON

Download Yara Rule

APIs

KiUserCallbackDispatcher.NTDLL(?,?,?,?,?,0613919D), ref: 06139227

Memory Dump Source

Source File: 00000000.00000002.3871355120.0000000006130000.00000040.00000800.00020000.00000000.sdmp, Offset: 06130000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6130000_zdmZjYqz44.jbxd

Similarity

API ID: CallbackDispatcherUser
String ID:
API String ID: 2492992576-0
Opcode ID: ef160290e44146568870342387788ca9ae35c4d01bbfcf41deb1291fd75732f3
Instruction ID: 1d3abd8995947877393234ae1b80fc246a1e811c8b1ba3cbe576d5d0c06d3e0e
Opcode Fuzzy Hash: ef160290e44146568870342387788ca9ae35c4d01bbfcf41deb1291fd75732f3
Instruction Fuzzy Hash: E21136B5800648CFDB20DF9AD584BDEBBF4EB48310F208859D519A7340D3B8A940CFA5

Function 00E0B7D8 Relevance: 1.5, APIs: 1, Instructions: 46comCOMMON

Download Yara Rule

APIs

OleInitialize.OLE32(00000000), ref: 00E0BDCD

Memory Dump Source

Source File: 00000000.00000002.3867205613.0000000000E00000.00000040.00000800.00020000.00000000.sdmp, Offset: 00E00000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_e00000_zdmZjYqz44.jbxd

Similarity

API ID: Initialize
String ID:
API String ID: 2538663250-0
Opcode ID: 2f22a46dce9264478d003667a2414cb1f10f1d60609f7491abda175d824053fc
Instruction ID: 953ddb7edef3aad2c42da97baed02c6235567d9dde0d515b2175fa41cf046b7e
Opcode Fuzzy Hash: 2f22a46dce9264478d003667a2414cb1f10f1d60609f7491abda175d824053fc
Instruction Fuzzy Hash: 2611FEB5800648CFDB20DFAAD448BDEFBF8AB48324F208459E558A7240D379A944CBA5

Function 00E0BD70 Relevance: 1.5, APIs: 1, Instructions: 46comCOMMON

Download Yara Rule

APIs

OleInitialize.OLE32(00000000), ref: 00E0BDCD

Memory Dump Source

Source File: 00000000.00000002.3867205613.0000000000E00000.00000040.00000800.00020000.00000000.sdmp, Offset: 00E00000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_e00000_zdmZjYqz44.jbxd

Similarity

API ID: Initialize
String ID:
API String ID: 2538663250-0
Opcode ID: 050f37be05e465352b2ae82c555b75ed0fe9ef30d24601ebcf4f7fa589093303
Instruction ID: 77505da43415596c92eb62d6da33b5c5848771150c19e94e12abf37de48e33e6
Opcode Fuzzy Hash: 050f37be05e465352b2ae82c555b75ed0fe9ef30d24601ebcf4f7fa589093303
Instruction Fuzzy Hash: 971112B5800248CFDB20DFAAD485BDEFBF8EB48324F208419D518A7340D378AA45CFA5

Function 0613723F Relevance: 1.5, APIs: 1, Instructions: 45COMMON

Download Yara Rule

APIs

GetModuleHandleW.KERNEL32(00000000), ref: 061372A6

Memory Dump Source

Source File: 00000000.00000002.3871355120.0000000006130000.00000040.00000800.00020000.00000000.sdmp, Offset: 06130000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6130000_zdmZjYqz44.jbxd

Similarity

API ID: HandleModule
String ID:
API String ID: 4139908857-0
Opcode ID: 387d2d0f7a35c644e2342e84c7045420e5e5df4666120c3f60a0aeef5377ab9b
Instruction ID: 3560e755101d91c3cb5ef6a6620f2f7192cb8cc493000bc634ea4c4d21519788
Opcode Fuzzy Hash: 387d2d0f7a35c644e2342e84c7045420e5e5df4666120c3f60a0aeef5377ab9b
Instruction Fuzzy Hash: F3111DB6C00609CFDB10CFAAD944BDEFBF4AF88210F14841AE829B7240D379A545CFA5

Function 061391C7 Relevance: 1.5, APIs: 1, Instructions: 41COMMON

Download Yara Rule

APIs

KiUserCallbackDispatcher.NTDLL(?,?,?,?,?,0613919D), ref: 06139227

Memory Dump Source

Source File: 00000000.00000002.3871355120.0000000006130000.00000040.00000800.00020000.00000000.sdmp, Offset: 06130000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6130000_zdmZjYqz44.jbxd

Similarity

API ID: CallbackDispatcherUser
String ID:
API String ID: 2492992576-0
Opcode ID: cd06270d598557eaf8878942514e10d7e003b019f72653e7a84c923501487184
Instruction ID: a0d0e4ab2189328e2dc4acf91a0d16126d7871a5d0b5eb87b3afede6fce28900
Opcode Fuzzy Hash: cd06270d598557eaf8878942514e10d7e003b019f72653e7a84c923501487184
Instruction Fuzzy Hash: 721112B5800648CFDB10CF9AE584BDEBBF4AB48310F24885AD559A7340D378A944CFA5

Function 05FBED50 Relevance: .4, Instructions: 391COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.3871285253.0000000005FB0000.00000040.00000800.00020000.00000000.sdmp, Offset: 05FB0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_5fb0000_zdmZjYqz44.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: cdac4da045878a8a14761308e2fd01fd2073e2ecb6b9802f289a0e8297e33973
Instruction ID: 78217a7c0c8f3ee49f779d05566a046c33671b721faf9958e061f1a08d80ef98
Opcode Fuzzy Hash: cdac4da045878a8a14761308e2fd01fd2073e2ecb6b9802f289a0e8297e33973
Instruction Fuzzy Hash: C4E13E30E00209DBEF25DFA9D840AEEB7B6FF89300F108529D506AB355DBB5D946CB91

Function 05FBF2A8 Relevance: .3, Instructions: 298COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.3871285253.0000000005FB0000.00000040.00000800.00020000.00000000.sdmp, Offset: 05FB0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_5fb0000_zdmZjYqz44.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 02337744ffc9ca08771c7a288f25f9b2e089952cfb3c1a7fed944686b46ce324
Instruction ID: 22258e06d2afe61032cc8ed900be29afcada1b691a132e091ab11f1eeca1448a
Opcode Fuzzy Hash: 02337744ffc9ca08771c7a288f25f9b2e089952cfb3c1a7fed944686b46ce324
Instruction Fuzzy Hash: 0DA14034F00109DBFF249AADD990BFE76A3FB89310F644425E406EB395CA79DD818B61

Function 05FB92D7 Relevance: .2, Instructions: 245COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.3871285253.0000000005FB0000.00000040.00000800.00020000.00000000.sdmp, Offset: 05FB0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_5fb0000_zdmZjYqz44.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 83a2410cf53128ec7c2ab035c275f86905e272818b7d3801d63fbf4f710498e2
Instruction ID: 68f365f351b4560bae8a7f630a48308cd528e9a517201770a5223b884de6f99c
Opcode Fuzzy Hash: 83a2410cf53128ec7c2ab035c275f86905e272818b7d3801d63fbf4f710498e2
Instruction Fuzzy Hash: 7781D431E04255CFFF318A6AC680BBDBBA2FB42210F188566D659DB685C2EDDC41C7A1

Function 05FBD1D0 Relevance: .2, Instructions: 231COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.3871285253.0000000005FB0000.00000040.00000800.00020000.00000000.sdmp, Offset: 05FB0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_5fb0000_zdmZjYqz44.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 83cc4c3cada8f4342b513bebb709c61dbd5d0d32aee5d46322f4792acd7f0b1f
Instruction ID: f1bb462a3929141139222a0c644310ffee9fc2c78c200f3cd40a7e641e980bdd
Opcode Fuzzy Hash: 83cc4c3cada8f4342b513bebb709c61dbd5d0d32aee5d46322f4792acd7f0b1f
Instruction Fuzzy Hash: 5A913D30B0420ACFDB54EF69D850BBEB3B6FB89200F5485A9D809EB344EF759D418B91

Function 05FB9E68 Relevance: .2, Instructions: 229COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.3871285253.0000000005FB0000.00000040.00000800.00020000.00000000.sdmp, Offset: 05FB0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_5fb0000_zdmZjYqz44.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 792a6d328e5257dc2efb8165af67548e16ac9dc01a3aedffcfc22df2c9b3a975
Instruction ID: d9d75c3208c72d75bb737971900d976eeb0500caf2df84ad2c2119c5d3daaed1
Opcode Fuzzy Hash: 792a6d328e5257dc2efb8165af67548e16ac9dc01a3aedffcfc22df2c9b3a975
Instruction Fuzzy Hash: A461F871F001118BDF119B7ED944AAEFAD7AFC4620B154439E90ADB360DEBAEC0287D1

Function 05FB7B20 Relevance: .2, Instructions: 223COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.3871285253.0000000005FB0000.00000040.00000800.00020000.00000000.sdmp, Offset: 05FB0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_5fb0000_zdmZjYqz44.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 70204cfb19455349d88c11229e8c3a6770ff1d111cbb7dcba237401ecda9ec46
Instruction ID: eea92b15bdf290c966af3539709641b6bbe6284a0dc27f4e655fb154267f8645
Opcode Fuzzy Hash: 70204cfb19455349d88c11229e8c3a6770ff1d111cbb7dcba237401ecda9ec46
Instruction Fuzzy Hash: 37813D34B05205CBDF54EBB9D4547AEB7B3EB89300F248429D40AEB359EA75DC428B91

Function 05FB7B30 Relevance: .2, Instructions: 218COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.3871285253.0000000005FB0000.00000040.00000800.00020000.00000000.sdmp, Offset: 05FB0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_5fb0000_zdmZjYqz44.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 5c30c33cdd66cd11cc0d143837d3bf452923130e29311a16f9f5806481432b8f
Instruction ID: 75ac73783f31d0db33cffd5192684cfb69908ed3a7e0bfadb00606134930ce8d
Opcode Fuzzy Hash: 5c30c33cdd66cd11cc0d143837d3bf452923130e29311a16f9f5806481432b8f
Instruction Fuzzy Hash: BE812C34B05209CBDF54EBB9D4547AEB7B3EBC9300F148429D40AEB358EA75DC428B91

Function 05FB7E40 Relevance: .2, Instructions: 218COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.3871285253.0000000005FB0000.00000040.00000800.00020000.00000000.sdmp, Offset: 05FB0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_5fb0000_zdmZjYqz44.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: ceaaf7f3b433f572df2053ee1dd69a0fd9eb238a7c3f9f628b0d496038ecf50e
Instruction ID: fb4ea99b9110c807d58cad515667f6b7d21e056586b968230580e9b6592503bb
Opcode Fuzzy Hash: ceaaf7f3b433f572df2053ee1dd69a0fd9eb238a7c3f9f628b0d496038ecf50e
Instruction Fuzzy Hash: 5C914034E00619CBEF20DF68C890BDDB7B1FF89310F208595D549AB251DB75A985CF91

Function 05FB01F8 Relevance: .2, Instructions: 214COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.3871285253.0000000005FB0000.00000040.00000800.00020000.00000000.sdmp, Offset: 05FB0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_5fb0000_zdmZjYqz44.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 3838c2d766f2e04ef8c31dbb92ad1a5cc05e406d877c7f7cf2283976c4acf46c
Instruction ID: 0a76a5976a570850c386d1a2fd962c4dacdf5138713e4958d151c6cc2daf1747
Opcode Fuzzy Hash: 3838c2d766f2e04ef8c31dbb92ad1a5cc05e406d877c7f7cf2283976c4acf46c
Instruction Fuzzy Hash: CA817271A00204CFDB14CF69D888B9EBBF6FF88310F14C165E909AB355DBB49944CB91

Function 05FB7E58 Relevance: .2, Instructions: 210COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.3871285253.0000000005FB0000.00000040.00000800.00020000.00000000.sdmp, Offset: 05FB0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_5fb0000_zdmZjYqz44.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 34f397e50dd7ee893803dce9068d43c94f8f5635a076d4613abc25b4a58225d0
Instruction ID: a1588df81ff14be028e28fc9201d1a8dae40a28512045b338d5b52487358dd1b
Opcode Fuzzy Hash: 34f397e50dd7ee893803dce9068d43c94f8f5635a076d4613abc25b4a58225d0
Instruction Fuzzy Hash: 32914F34E00219CBEF20DF69C890BDDB7B2FF89310F208695D509AB241DB75AA85CF90

Function 05FB87F0 Relevance: .2, Instructions: 186COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.3871285253.0000000005FB0000.00000040.00000800.00020000.00000000.sdmp, Offset: 05FB0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_5fb0000_zdmZjYqz44.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 796ba798cefe3bade5de303ad5600bb238d08a0c498114adde0b385a41a57a01
Instruction ID: 5d11e0b1633a6cfe26d25b2e9137388edd9c5dba81108dc3f675c3c37f5c2d3f
Opcode Fuzzy Hash: 796ba798cefe3bade5de303ad5600bb238d08a0c498114adde0b385a41a57a01
Instruction Fuzzy Hash: C6616371F00209DFEB549FA9C854BAEBBBBFB88740F208429E105AB395DF754C058B51

Function 05FBD1C0 Relevance: .2, Instructions: 170COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.3871285253.0000000005FB0000.00000040.00000800.00020000.00000000.sdmp, Offset: 05FB0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_5fb0000_zdmZjYqz44.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: d1638592d6bda69f0db5a0f1ac9fe9909d55361412203206f52e8b0e05572c77
Instruction ID: 805f2cd73a03272068781bb010d5e6a262757033c3985b02e54cb97a4d6995c0
Opcode Fuzzy Hash: d1638592d6bda69f0db5a0f1ac9fe9909d55361412203206f52e8b0e05572c77
Instruction Fuzzy Hash: B5514E30B04105DFEB54EB79D860BBE73B6EB88300F54846AD809EB394EE75DC428B91

Function 05FB0040 Relevance: .1, Instructions: 143COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.3871285253.0000000005FB0000.00000040.00000800.00020000.00000000.sdmp, Offset: 05FB0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_5fb0000_zdmZjYqz44.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: f739e94d66b27c0aed1132bad5f5dd381f3474174bf85e4705be85a3efb9c485
Instruction ID: ff302777580fff4bd70c8155a00ee0c237f1733969e0346df66dcfe1c3ca26c1
Opcode Fuzzy Hash: f739e94d66b27c0aed1132bad5f5dd381f3474174bf85e4705be85a3efb9c485
Instruction Fuzzy Hash: CA41B430F00206DFEF249A69D884BBFB76AFB45350F60482AD419DB350DA7AD841CB91

Function 05FB0006 Relevance: .1, Instructions: 140COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.3871285253.0000000005FB0000.00000040.00000800.00020000.00000000.sdmp, Offset: 05FB0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_5fb0000_zdmZjYqz44.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 59b2b3bb86f07f1726bb1cb10d5b6a35a4b1a4d8c63cd13f19fd10336ec6e784
Instruction ID: ba6c7311b85853af75d6fff8c30a483408aff174143716cb6e21946f81854222
Opcode Fuzzy Hash: 59b2b3bb86f07f1726bb1cb10d5b6a35a4b1a4d8c63cd13f19fd10336ec6e784
Instruction Fuzzy Hash: 6641E174E04206CFEF258A69C884BBFB776FB42310F64486AD006DB391DA79D841CB91

Function 05FB87E1 Relevance: .1, Instructions: 137COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.3871285253.0000000005FB0000.00000040.00000800.00020000.00000000.sdmp, Offset: 05FB0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_5fb0000_zdmZjYqz44.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: aaa820b1a1aeafc819dee7a16fa0fad53a8ddf2919b870eccc4052edb92ca350
Instruction ID: 7ea79a25536bb1f5edd2011009921f5cebdfbea42df86e51b0c507c2d422ba32
Opcode Fuzzy Hash: aaa820b1a1aeafc819dee7a16fa0fad53a8ddf2919b870eccc4052edb92ca350
Instruction Fuzzy Hash: 5F516171F00208DFEB549FA5C815BAEBAF7FF88740F20852AE505AB395DB758C058B90

Function 05FB90A8 Relevance: .1, Instructions: 126COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.3871285253.0000000005FB0000.00000040.00000800.00020000.00000000.sdmp, Offset: 05FB0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_5fb0000_zdmZjYqz44.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: a1e345f1dc9756512632a27572ec10ded7c45f83e0e964c96a4c182d5518e3d1
Instruction ID: 81d631195b0cf43cd289cc1185bcc90d95495b32f78266ea47597e34eaf283c5
Opcode Fuzzy Hash: a1e345f1dc9756512632a27572ec10ded7c45f83e0e964c96a4c182d5518e3d1
Instruction Fuzzy Hash: 5A417135E00609CBEF30CEAAD984AFFF7B6FB45310F10492AE215D7650D3B5A9458B90

Function 05FB5E85 Relevance: .1, Instructions: 112COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.3871285253.0000000005FB0000.00000040.00000800.00020000.00000000.sdmp, Offset: 05FB0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_5fb0000_zdmZjYqz44.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 7bbd4bde0ef5451910ba17a57a414cb134e9690199dd11c51b81ef1d52f359a5
Instruction ID: 4e96fbdd5d6b71247e0fed60b14df6a29a647463b8a59b4c7c952150fe4840b4
Opcode Fuzzy Hash: 7bbd4bde0ef5451910ba17a57a414cb134e9690199dd11c51b81ef1d52f359a5
Instruction Fuzzy Hash: 1E313331B00205CFEB549B75D8546AE7BA7FF85600F248469E002DB390EF7ACC06CBA0

Function 05FB5E98 Relevance: .1, Instructions: 105COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.3871285253.0000000005FB0000.00000040.00000800.00020000.00000000.sdmp, Offset: 05FB0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_5fb0000_zdmZjYqz44.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 8aae1c14b2562f0a74bfb96168bc8418c0f3c343777c87c183897064a8da12f6
Instruction ID: b95324d8e988ede6d2b40a2793bc4c64ecdcf88c0f15ec648b66916106f8ba0f
Opcode Fuzzy Hash: 8aae1c14b2562f0a74bfb96168bc8418c0f3c343777c87c183897064a8da12f6
Instruction Fuzzy Hash: 2A31E430B00205CFEB54AB79D4546AE76A7FF89610F208569E407DB394EF7ACC06CBA1

Function 05FB5D49 Relevance: .1, Instructions: 98COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.3871285253.0000000005FB0000.00000040.00000800.00020000.00000000.sdmp, Offset: 05FB0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_5fb0000_zdmZjYqz44.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 96213d97c50695647a81557dc1ab8df81cb96d4c72fb6f9f20adb88af36c800e
Instruction ID: 3cbaa5c86e342c6fda57d2c828deafa9ea30ddf242eba15147bf359f957a1f92
Opcode Fuzzy Hash: 96213d97c50695647a81557dc1ab8df81cb96d4c72fb6f9f20adb88af36c800e
Instruction Fuzzy Hash: BA31AF30E14206DBDB14CFA5C494AAEB7B2FF89300F148529E806E7750EB75EC46CB50

Function 05FB5D58 Relevance: .1, Instructions: 91COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.3871285253.0000000005FB0000.00000040.00000800.00020000.00000000.sdmp, Offset: 05FB0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_5fb0000_zdmZjYqz44.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 85d2959343191608ab766a9a7745c6ef77b555899968f5f86af46570f9b2ca7e
Instruction ID: 89cb76a1063680eb7486b1c39cd9875adc00ec6d46f8827e94ff51874c969725
Opcode Fuzzy Hash: 85d2959343191608ab766a9a7745c6ef77b555899968f5f86af46570f9b2ca7e
Instruction Fuzzy Hash: FA318034E14206DBDB14DFA9D454AEEB7B2FF89300F148519E806E7744EBB5AC46CB50

Function 05FB772A Relevance: .1, Instructions: 80COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.3871285253.0000000005FB0000.00000040.00000800.00020000.00000000.sdmp, Offset: 05FB0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_5fb0000_zdmZjYqz44.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 2fad6a1c3b57371a7a15fef9cf60265118f19df3fdbcba5ba344cf77a8addf48
Instruction ID: a7fb84cfa21bef43ca870cce4bcb1395781872a1b9077f7401cf58fabf3987bf
Opcode Fuzzy Hash: 2fad6a1c3b57371a7a15fef9cf60265118f19df3fdbcba5ba344cf77a8addf48
Instruction Fuzzy Hash: 21217F75F05205DFEB10EF69D881AEEBBF6FB88210F248425E905EB390D775D8058B90

Function 05FB7738 Relevance: .1, Instructions: 78COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.3871285253.0000000005FB0000.00000040.00000800.00020000.00000000.sdmp, Offset: 05FB0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_5fb0000_zdmZjYqz44.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 2d04f4c828680a84c2741558ca4f39a6f6017c8a5e50ffded2197ed5f8533531
Instruction ID: 22aefdae5871921d5c65fb2256b38d725be3cf32d6101b26a596f91b7218ea0e
Opcode Fuzzy Hash: 2d04f4c828680a84c2741558ca4f39a6f6017c8a5e50ffded2197ed5f8533531
Instruction Fuzzy Hash: DC217C75F05215DFEB10EF69D980AEEB7F5FB88210F208425E905EB380E775D8408B90

Function 00D7D47C Relevance: .1, Instructions: 72COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.3866879859.0000000000D7D000.00000040.00000800.00020000.00000000.sdmp, Offset: 00D7D000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_d7d000_zdmZjYqz44.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 4051b74f12422d5de99180db78f7f44e337e9633cbf0ca1e23d357d30a1e265a
Instruction ID: 6c2f4655265cbfd0190fcc5d179923ece6b42545278934a2738a5cd71a4ec1ec
Opcode Fuzzy Hash: 4051b74f12422d5de99180db78f7f44e337e9633cbf0ca1e23d357d30a1e265a
Instruction Fuzzy Hash: B621F275504204EFDB14DF24D980B26BBB6FF84318F28C5A9E84D4B296D336D846CA72

Function 00D7D104 Relevance: .1, Instructions: 72COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.3866879859.0000000000D7D000.00000040.00000800.00020000.00000000.sdmp, Offset: 00D7D000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_d7d000_zdmZjYqz44.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: e65bb385d34623e9a8825b01c514e14946c914bd8e671d9a53d1cf09c3c9907a
Instruction ID: 40f1bdbd923ead3f193ee04f70f2ebb2f7f053b701e396eef3d0ca012a8276ac
Opcode Fuzzy Hash: e65bb385d34623e9a8825b01c514e14946c914bd8e671d9a53d1cf09c3c9907a
Instruction Fuzzy Hash: 4B21AFB5604344EFEB04DF64D980B26BBB6FF84314F64C5A9EC4D4A252D336D846CA72

Function 00D7D2CC Relevance: .1, Instructions: 72COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.3866879859.0000000000D7D000.00000040.00000800.00020000.00000000.sdmp, Offset: 00D7D000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_d7d000_zdmZjYqz44.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 126f0d39b5acbffa1f4767c47a1d34473cda1af81f899ac326a94f081405e8c2
Instruction ID: 36086256ebb427032994daab7267152e43d9e57b8f3de64de407297ac107334f
Opcode Fuzzy Hash: 126f0d39b5acbffa1f4767c47a1d34473cda1af81f899ac326a94f081405e8c2
Instruction Fuzzy Hash: 7A21C2B5504244EFDB109F14D9C4B2ABB76FB84724F28C569D84D0B242D336D846CAB2

Function 05FB7A80 Relevance: .1, Instructions: 72COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.3871285253.0000000005FB0000.00000040.00000800.00020000.00000000.sdmp, Offset: 05FB0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_5fb0000_zdmZjYqz44.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 0e1d8e18938d110f605b94cd18a46bcd17b0481e2ef26f99ca4fbe10b7632977
Instruction ID: c83e922dc5247d9373e8f3dfe4f04192f8555afd4d992642f65d305c15689aab
Opcode Fuzzy Hash: 0e1d8e18938d110f605b94cd18a46bcd17b0481e2ef26f99ca4fbe10b7632977
Instruction Fuzzy Hash: F011E7367000108FEB14A67DE454FAE77EBEBC8711F14843AF00AC7391DAA9DC028751

Function 05FB7837 Relevance: .1, Instructions: 60COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.3871285253.0000000005FB0000.00000040.00000800.00020000.00000000.sdmp, Offset: 05FB0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_5fb0000_zdmZjYqz44.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 77fa975a84cb6cfba7fb25bae3ee26a2ec0898c79e380466de607be1b21b569b
Instruction ID: ce4f5d220bb3c5e9b2de4f7726ecea2d5171024dfce77bc7d29be3e5b620ad75
Opcode Fuzzy Hash: 77fa975a84cb6cfba7fb25bae3ee26a2ec0898c79e380466de607be1b21b569b
Instruction Fuzzy Hash: 6101A132F05015DBEF14A56AAC106FF73ABDBC4610F244036D50AE7344EA65E8028791

Function 05FB7848 Relevance: .1, Instructions: 59COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.3871285253.0000000005FB0000.00000040.00000800.00020000.00000000.sdmp, Offset: 05FB0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_5fb0000_zdmZjYqz44.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: f2f156c0e6632b4d427fbd17562954bd9a6a9b8b3df7f6141dc86b52d235c0ba
Instruction ID: cde792874ab44ae88f8e7825d2294f0561e2591368daceac32ab7641bd624ff0
Opcode Fuzzy Hash: f2f156c0e6632b4d427fbd17562954bd9a6a9b8b3df7f6141dc86b52d235c0ba
Instruction Fuzzy Hash: B9115232F001198FDF55AA69D8146FF73ABEBC8711F244535D406EB354DA79EC018791

Function 05FB7502 Relevance: .1, Instructions: 54COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.3871285253.0000000005FB0000.00000040.00000800.00020000.00000000.sdmp, Offset: 05FB0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_5fb0000_zdmZjYqz44.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 748ac57157c359e5a1d81b468b8ae39d1622994a0712831537b3757233af3522
Instruction ID: 7d6d8958ad516b7673b67b2dcdb3399e5d2afbdb0e00dee3d4f339cf9e7ff826
Opcode Fuzzy Hash: 748ac57157c359e5a1d81b468b8ae39d1622994a0712831537b3757233af3522
Instruction Fuzzy Hash: B921C2B5D01259EFDB00DF9AD884ACEFBB4FB48310F10812AE518A7340D378AA44CBA5

Function 00D7D477 Relevance: .1, Instructions: 53COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.3866879859.0000000000D7D000.00000040.00000800.00020000.00000000.sdmp, Offset: 00D7D000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_d7d000_zdmZjYqz44.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: a6f14a2633b0976cf55fba98dc8f49a251bcab79b87bdac7509de7911a20ab2c
Instruction ID: da02161cd39150f9fec524f366643a7656c4072b78c671898c189f855c25e907
Opcode Fuzzy Hash: a6f14a2633b0976cf55fba98dc8f49a251bcab79b87bdac7509de7911a20ab2c
Instruction Fuzzy Hash: 2C117975504280DFDB05CF14D584B15BBB2FB85318F28C6AAD8494B656C33AD84ACB62

Function 00D7D0FF Relevance: .1, Instructions: 53COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.3866879859.0000000000D7D000.00000040.00000800.00020000.00000000.sdmp, Offset: 00D7D000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_d7d000_zdmZjYqz44.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: a6f14a2633b0976cf55fba98dc8f49a251bcab79b87bdac7509de7911a20ab2c
Instruction ID: bffbb460866871f09c29e0239fcd777fa10df260a054273673ee6bd199589125
Opcode Fuzzy Hash: a6f14a2633b0976cf55fba98dc8f49a251bcab79b87bdac7509de7911a20ab2c
Instruction Fuzzy Hash: BD117975904284DFDB05CF10D9C4B15BBB2FB84314F28C6A9DC494B656C33AD85ACB62

Function 00D7D2C7 Relevance: .1, Instructions: 53COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.3866879859.0000000000D7D000.00000040.00000800.00020000.00000000.sdmp, Offset: 00D7D000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_d7d000_zdmZjYqz44.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 0087aa9c0370ffbcc44a91c72dac69a08dec4055da452c00f01411939cf63ad0
Instruction ID: 7697e06df8d1a4bbefad34706fd0db83f85c5849ae3286f67a1e997dfc034548
Opcode Fuzzy Hash: 0087aa9c0370ffbcc44a91c72dac69a08dec4055da452c00f01411939cf63ad0
Instruction Fuzzy Hash: 6611BF76504680DFCB11CF10D5C4B19FFB2FB84324F28C6AAD8494B656C33AD84ACBA2

Function 05FB90A7 Relevance: .1, Instructions: 53COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.3871285253.0000000005FB0000.00000040.00000800.00020000.00000000.sdmp, Offset: 05FB0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_5fb0000_zdmZjYqz44.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: dc5b807f50bd5465a5451d300cd0c8414ffe3dfc4ab7a58222400a04151e5100
Instruction ID: c9e0690399fdb7f029486a1526be4381baa4079c9dc902c7786ef91f9908605c
Opcode Fuzzy Hash: dc5b807f50bd5465a5451d300cd0c8414ffe3dfc4ab7a58222400a04151e5100
Instruction Fuzzy Hash: 16115E75A00709CBDB20CFEADDC5AEFFBB6BB88200B108929D21597650D7B1A9058B90

Function 05FBE380 Relevance: .1, Instructions: 52COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.3871285253.0000000005FB0000.00000040.00000800.00020000.00000000.sdmp, Offset: 05FB0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_5fb0000_zdmZjYqz44.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 339f95fa2b273f6bb771e3ba32ed09e9e9b4697b39e0b0531582a1875f87ed27
Instruction ID: 8f615e87cdbb9b9f74b18c8efb9bbdb957a57d3678a963f8bbca61d98f30a222
Opcode Fuzzy Hash: 339f95fa2b273f6bb771e3ba32ed09e9e9b4697b39e0b0531582a1875f87ed27
Instruction Fuzzy Hash: 0001F235B000148BEB10A67DE451BEE7BDAE788710F148939F10ACB340EA69EC428381

Function 05FB7508 Relevance: .1, Instructions: 52COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.3871285253.0000000005FB0000.00000040.00000800.00020000.00000000.sdmp, Offset: 05FB0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_5fb0000_zdmZjYqz44.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 142ccf4c7e90eff533252908da63b7df7e0d69fa68224987b18ae4d66bd7fd8f
Instruction ID: 1b5bb26e5041061e424f23e55c38d3672583578f0d2b980006daf4faa85bac4c
Opcode Fuzzy Hash: 142ccf4c7e90eff533252908da63b7df7e0d69fa68224987b18ae4d66bd7fd8f
Instruction Fuzzy Hash: 4D11A2B5D01659EFDB10DF9AD884ADEFBB4FB48310F10812AE518A7240D378AA54CBA5

Function 05FB7A90 Relevance: .1, Instructions: 51COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.3871285253.0000000005FB0000.00000040.00000800.00020000.00000000.sdmp, Offset: 05FB0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_5fb0000_zdmZjYqz44.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 72ede86909711dc54981980de19b59eb5d500624e12c8a62e8609becdbb8e1a5
Instruction ID: 3eef72a113a513c53b1c8674d3ca3325079721f034f9e9ffb058ab55d8e39fec
Opcode Fuzzy Hash: 72ede86909711dc54981980de19b59eb5d500624e12c8a62e8609becdbb8e1a5
Instruction Fuzzy Hash: 3B01D634B000104BEB10A57ED454BABB3DBDBC8710F14C839E00EC7384DEA9DC024795

Function 05FBE390 Relevance: .0, Instructions: 46COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.3871285253.0000000005FB0000.00000040.00000800.00020000.00000000.sdmp, Offset: 05FB0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_5fb0000_zdmZjYqz44.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 372af27a307a039762e159dbdca9fe9c06e70b73b0257aedf7eb12fa1e383c93
Instruction ID: 3765d0d1d8c925fb901bad3b07e261a755f98221ecdbf3d447ce5c4c0be643d6
Opcode Fuzzy Hash: 372af27a307a039762e159dbdca9fe9c06e70b73b0257aedf7eb12fa1e383c93
Instruction Fuzzy Hash: 8A018134B000148BEB50E67DE454BAE77DAEB89714F148939E50ACB344EA65EC428395

Function 00D6D8C5 Relevance: .0, Instructions: 45COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.3866802395.0000000000D6D000.00000040.00000800.00020000.00000000.sdmp, Offset: 00D6D000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_d6d000_zdmZjYqz44.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 3af48fc292f01a1f6f927ea068977fee789ba765d680537e00aab539f6c5b731
Instruction ID: 89d646dfa8cef563d7e8bdd4a748ca70455abae9f6e6609a8fa553aa485283be
Opcode Fuzzy Hash: 3af48fc292f01a1f6f927ea068977fee789ba765d680537e00aab539f6c5b731
Instruction Fuzzy Hash: 5001F731A04344ABE7108E25ED84B66BB98EF45720F18C41BED490A287C278D800CE72

Function 00D6D8C4 Relevance: .0, Instructions: 36COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.3866802395.0000000000D6D000.00000040.00000800.00020000.00000000.sdmp, Offset: 00D6D000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_d6d000_zdmZjYqz44.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: fecc2459ab0887f9dfed129241865978dbcc47c39406a6845c02cac0d5b618b8
Instruction ID: cd642933df6db38712c25046cc8f982b0dbe8137c086b8637bf5a028988dcd56
Opcode Fuzzy Hash: fecc2459ab0887f9dfed129241865978dbcc47c39406a6845c02cac0d5b618b8
Instruction Fuzzy Hash: 0DF0CD32504344AFE7108E16E884B62FFE8EB41734F18C45AED480E287C2789840CEB1

Function 05FBC347 Relevance: .0, Instructions: 31COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.3871285253.0000000005FB0000.00000040.00000800.00020000.00000000.sdmp, Offset: 05FB0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_5fb0000_zdmZjYqz44.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 816a5775a9383fd713b9413a31f49923f8bcacf3dacac7a9aee1798319232f0c
Instruction ID: 7d5bcc171a335df33eda5878c1f77eebc058e64e6a94625abcbaa36fc047641f
Opcode Fuzzy Hash: 816a5775a9383fd713b9413a31f49923f8bcacf3dacac7a9aee1798319232f0c
Instruction Fuzzy Hash: D8F0BE36A48106DFEF248A96D4406FEB775FB44211F9C8262C802D7140C3BA8E42CB01

Function 05FBA47B Relevance: .0, Instructions: 31COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.3871285253.0000000005FB0000.00000040.00000800.00020000.00000000.sdmp, Offset: 05FB0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_5fb0000_zdmZjYqz44.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: aed4661159cfa1a3d93d0f233529f762a180cfff365ff50d803ad7ae80dd27d0
Instruction ID: 56719e8e7f0d85b37d5ce7931f815162293f15359ce58ce8d6bf9e534468f2cf
Opcode Fuzzy Hash: aed4661159cfa1a3d93d0f233529f762a180cfff365ff50d803ad7ae80dd27d0
Instruction Fuzzy Hash: 0FF09B5390D2948FFB125AB9ECA17E53B15EF82218F0505D3D4C4CB152D459CB16C793

Function 05FBA4EB Relevance: .0, Instructions: 30COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.3871285253.0000000005FB0000.00000040.00000800.00020000.00000000.sdmp, Offset: 05FB0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_5fb0000_zdmZjYqz44.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 3b212d322ee9a5b0b78a4200afd8557331fa88258f2af15127d20ab05e634bc9
Instruction ID: b3d852a817b8c7bcce3db117a0aa35db4d259ec1c1f77ba4a734c8c1a917dd01
Opcode Fuzzy Hash: 3b212d322ee9a5b0b78a4200afd8557331fa88258f2af15127d20ab05e634bc9
Instruction Fuzzy Hash: 6AE04872A11108ABEB20D975CD477AA766AE701208F648475D445C7241E57ACB025B50

Function 05FB86D9 Relevance: .0, Instructions: 25COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.3871285253.0000000005FB0000.00000040.00000800.00020000.00000000.sdmp, Offset: 05FB0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_5fb0000_zdmZjYqz44.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: b7b1c9b448c1b1e4dad40abe51334771e372d34e6ac6412884de1dbaa37c86cf
Instruction ID: af59006814f9de4c722c70e0bb0e12ead603fcb67a78b0500bc9a333b7457817
Opcode Fuzzy Hash: b7b1c9b448c1b1e4dad40abe51334771e372d34e6ac6412884de1dbaa37c86cf
Instruction Fuzzy Hash: 33F05830A2011ADBDB14DF95E859BEDBBB6FF88744F20051AE002B7390CBB40C02DB80

Function 05FBA500 Relevance: .0, Instructions: 22COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.3871285253.0000000005FB0000.00000040.00000800.00020000.00000000.sdmp, Offset: 05FB0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_5fb0000_zdmZjYqz44.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 5364ce9a97fb1aefd025db6e6f581f378321ede36c20ab600cd88912ad76a581
Instruction ID: 794e7a70f565fc9e07194025b193134c2654ccc37128a14ca2292c8382c0d39d
Opcode Fuzzy Hash: 5364ce9a97fb1aefd025db6e6f581f378321ede36c20ab600cd88912ad76a581
Instruction Fuzzy Hash: 69E01271E00208EBEF20DEB6CD45BAA77AEEB01214F2088A5D449C7201E5BADB014B40

Non-executed Functions

Function 05FBB720 Relevance: .5, Instructions: 468COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.3871285253.0000000005FB0000.00000040.00000800.00020000.00000000.sdmp, Offset: 05FB0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_5fb0000_zdmZjYqz44.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 83f3027cd5b4c0c1b4ad6a940442b8a2b953878b2bd6481c53952dead77feea1
Instruction ID: 782644d8c19fb3d9ab6ed516aa467ae76857134053313c573ffb6cf55af20897
Opcode Fuzzy Hash: 83f3027cd5b4c0c1b4ad6a940442b8a2b953878b2bd6481c53952dead77feea1
Instruction Fuzzy Hash: BA122F30E04219CFEB24DF66D854BAEB7B2BF88700F2085A9D406AB355DB75DD85CB50

Function 061329A8 Relevance: .4, Instructions: 359COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.3871355120.0000000006130000.00000040.00000800.00020000.00000000.sdmp, Offset: 06130000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6130000_zdmZjYqz44.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: ae1b97e93fbde279bff892a49056e2e16547d15fcd571ad084547a4cfbcd7193
Instruction ID: 59c9ca85677728efc3591b490a3723b8bbd959e4132e00dc8c4f9e1c1a7a6c30
Opcode Fuzzy Hash: ae1b97e93fbde279bff892a49056e2e16547d15fcd571ad084547a4cfbcd7193
Instruction Fuzzy Hash: 29C1A430F002198FDF64EB68D4507AEB3A2EB89310F24C92AD417EB395DB75DD418B91

Function 00E0BE18 Relevance: .3, Instructions: 315COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.3867205613.0000000000E00000.00000040.00000800.00020000.00000000.sdmp, Offset: 00E00000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_e00000_zdmZjYqz44.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: cb839647246adf0367e89503b0380682722f15084ceda0bd3fee9d6781550617
Instruction ID: cc34eaaf083378428274413b992120c8ba553a1d8dc86d56f79cbfbea58a1fdb
Opcode Fuzzy Hash: cb839647246adf0367e89503b0380682722f15084ceda0bd3fee9d6781550617
Instruction Fuzzy Hash: 0B127FB04117498EE330EF65ED4C1897AB9BB85328B904709D2E16B2F9DBBE154BCF44

Function 00E0BE08 Relevance: .2, Instructions: 223COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.3867205613.0000000000E00000.00000040.00000800.00020000.00000000.sdmp, Offset: 00E00000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_e00000_zdmZjYqz44.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 3a52668b3b67c023fdbf8c17fb2fe6e436df1ae9dbdb7879f12a6a1f7193a861
Instruction ID: 501eb4e732dd38f1b4f5900edfe93db83fecca5fbde99ae60e9cc68a3f93ba94
Opcode Fuzzy Hash: 3a52668b3b67c023fdbf8c17fb2fe6e436df1ae9dbdb7879f12a6a1f7193a861
Instruction Fuzzy Hash: A1C1D2B08117498EE730EF25EC4C1897BB9BB85328B514719D1A12B2F8DBBE154ACF44

Function 00E07CD8 Relevance: .1, Instructions: 118COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.3867205613.0000000000E00000.00000040.00000800.00020000.00000000.sdmp, Offset: 00E00000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_e00000_zdmZjYqz44.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 8a431debb80736b3ae465057678805cb0263844b92f538ddd683cbfef0d1f609
Instruction ID: 259c3c9fe79348da3deffbd2a1722d67d717ee284f6e81578506076d3a0273bf
Opcode Fuzzy Hash: 8a431debb80736b3ae465057678805cb0263844b92f538ddd683cbfef0d1f609
Instruction Fuzzy Hash: D431E4A2C0D798CBEB120E7948A41D67B51DB2731C714738AD1A87F2E2E23624C3DB56

Description:	Adversaries may abuse Windows Management Instrumentation (WMI) to execute malicious commands and payloads. WMI is an administration feature that provides a uniform environment to access Windows system components. The WMI service enables both local and remote access, though the latter is facilitated by Remote Services such as Distributed Component Object Model (DCOM) and Windows Remote Management (WinRM).Remote WMI over DCOM operates using port 135, whereas WMI over WinRM operates over port 5985 when using HTTP and 5986 for HTTPS.
Tactics:	Execution
Data Sources:	Command: Command Execution, Network Traffic: Network Connection Creation, Process: Process Creation, WMI: WMI Creation
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may execute their own malicious payloads by side-loading DLLs. Similar to DLL Search Order Hijacking , side-loading involves hijacking which DLL a program loads. But rather than just planting the DLL within the search order of a program then waiting for the victim application to be invoked, adversaries may directly side-load their payloads by planting then invoking a legitimate application that executes their payload(s).
Tactics:	Defense Evasion, Persistence, Privilege Escalation
Data Sources:	File: File Creation, File: File Modification, Module: Module Load, Process: Process Creation
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may modify and/or disable security tools to avoid possible detection of their malware/tools and activities. This may take many forms, such as killing security software processes or services, modifying / deleting Registry keys or configuration files so that tools do not operate properly, or other methods to interfere with security tools scanning or reporting information. Adversaries may also disable updates to prevent the latest security patches from reaching tools on victim systems.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, Driver: Driver Load, Process: Process Creation, Process: Process Termination, Sensor Health: Host Status, Service: Service Metadata, Windows Registry: Windows Registry Key Deletion, Windows Registry: Windows Registry Key Modification
Platforms:	Containers, IaaS, Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ various means to detect and avoid virtualization and analysis environments. This may include changing behaviors based on the results of checks for the presence of artifacts indicative of a virtual machine environment (VME) or sandbox. If the adversary detects a VME, they may alter their malware to disengage from the victim or conceal the core functions of the implant. They may also search for VME artifacts before dropping secondary or additional payloads. Adversaries may use the information learned from [Virtualization/Sandbox Evasion](https://attack.mitre.org/techniques/T1497) during automated discovery to shape follow-on behaviors.
Tactics:	Defense Evasion, Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to make an executable or file difficult to discover or analyze by encrypting, encoding, or otherwise obfuscating its contents on the system or in transit. This is common behavior that can be used across different platforms and the network to evade defenses.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Creation, File: File Metadata, Module: Module Load, Process: OS API Execution, Process: Process Creation, Script: Script Execution, WMI: WMI Creation, Windows Registry: Windows Registry Key Creation
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to dump credentials to obtain account login and credential material, normally in the form of a hash or a clear text password, from the operating system and software. Credentials can then be used to perform Lateral Movement and access restricted information.
Tactics:	Credential Access
Data Sources:	Active Directory: Active Directory Object Access, Command: Command Execution, File: File Access, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow, Process: OS API Execution, Process: Process Access, Process: Process Creation, Windows Registry: Windows Registry Key Access
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use methods of capturing user input to obtain credentials or collect information. During normal system usage, users often provide credentials to various different locations, such as login pages/portals or system dialog boxes. Input capture mechanisms may be transparent to the user (e.g. Credential API Hooking ) or rely on deceiving the user into providing input into what they believe to be a genuine service (e.g. Web Portal Capture ).
Tactics:	Collection, Credential Access
Data Sources:	Driver: Driver Load, File: File Modification, Process: OS API Execution, Process: Process Creation, Process: Process Metadata, Windows Registry: Windows Registry Key Modification
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may search the Registry on compromised systems for insecurely stored credentials. The Windows Registry stores configuration information that can be used by the system or other programs. Adversaries may query the Registry looking for credentials and passwords that have been stored for use by other programs or services. Sometimes these credentials are used for automatic logons.
Tactics:	Credential Access
Data Sources:	Command: Command Execution, Process: Process Creation, Windows Registry: Windows Registry Key Access
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may interact with the Windows Registry to gather information about the system, configuration, and installed software.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation, Windows Registry: Windows Registry Key Access
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to get a listing of security software, configurations, defensive tools, and sensors that are installed on a system or in a cloud environment. This may include things such as firewall rules and anti-virus. Adversaries may use the information from Security Software Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Firewall: Firewall Enumeration, Firewall: Firewall Metadata, Process: OS API Execution, Process: Process Creation
Platforms:	Azure AD, Google Workspace, IaaS, Linux, macOS, Office 365, SaaS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to get information about running processes on a system. Information obtained could be used to gain an understanding of common software/applications running on systems within the network. Adversaries may use the information from Process Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may enumerate files and directories or may search in specific locations of a host or network share for certain information within a file system. Adversaries may use the information from File and Directory Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	An adversary may attempt to get detailed information about the operating system and hardware, including version, patches, hotfixes, service packs, and architecture. Adversaries may use the information from System Information Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	IaaS, Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may target user email to collect sensitive information. Emails may contain sensitive data, including trade secrets or personal information, that can prove valuable to adversaries. Adversaries can collect or forward email from mail servers or clients.
Tactics:	Collection
Data Sources:	Application Log: Application Log Content, Command: Command Execution, File: File Access, Logon Session: Logon Session Creation, Network Traffic: Network Connection Creation
Platforms:	Google Workspace, Linux, macOS, Office 365, Windows
Url:	Open detailed description by Mitre

Description:	An adversary may compress and/or encrypt data that is collected prior to exfiltration. Compressing the data can help to obfuscate the collected data and minimize the amount of data sent over the network. Encryption can be used to hide information that is being exfiltrated from detection or make exfiltration less conspicuous upon inspection by a defender.
Tactics:	Collection
Data Sources:	Command: Command Execution, File: File Creation, Process: Process Creation, Script: Script Execution
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may search local system sources, such as file systems and configuration files or local databases, to find files of interest and sensitive data prior to Exfiltration.
Tactics:	Collection
Data Sources:	Command: Command Execution, File: File Access, Process: OS API Execution, Process: Process Creation, Script: Script Execution
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may collect data stored in the clipboard from users copying information within or between applications.
Tactics:	Collection
Data Sources:	Command: Command Execution, Process: OS API Execution
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using a protocol and port pairing that are typically not associated. For example, HTTPS over port 8088or port 587as opposed to the traditional port 443. Adversaries may make changes to the standard port used by a protocol to bypass filtering or muddle analysis/parsing of network data.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report zdmZjYqz44.exe

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Threat Intel

Malware Configuration

Threatname: Agenttesla

Yara Signatures

Initial Sample

Memory Dumps

Unpacked PEs

Sigma Signatures

System Summary

Suricata Signatures

Joe Sandbox Signatures

AV Detection

Compliance

Networking

Key, Mouse, Clipboard, Microphone and Screen Capturing

System Summary

Data Obfuscation

Hooking and other Techniques for Hiding and Protection

Malware Analysis System Evasion

Anti Debugging

Language, Device and Operating System Detection

Stealing of Sensitive Information

Remote Access Functionality

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

General Information

Warnings

Simulations

Behavior and APIs

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

Static File Info

General

File Icon

Static PE Info

General

Entrypoint Preview

Data Directories

Sections

Resources

Imports

Network Behavior

Network Port Distribution

TCP Packets

UDP Packets

DNS Queries

DNS Answers

SMTP Packets

Windows Analysis Report
zdmZjYqz44.exe

Function 0613AE40 Relevance: 1.6, APIs: 1, Instructions: 60
COMMON

Function 06134C2F Relevance: 3.6, APIs: 1, Strings: 1, Instructions: 70
COMMON

Function 00E09C92 Relevance: 1.8, APIs: 1, Instructions: 328
COMMON

Function 06137D70 Relevance: 1.6, APIs: 1, Instructions: 113
COMMON

Function 06137D6F Relevance: 1.6, APIs: 1, Instructions: 111
COMMON

Function 061375CC Relevance: 1.6, APIs: 1, Instructions: 97
COMMON

Function 06137D64 Relevance: 1.6, APIs: 1, Instructions: 93
COMMON

Function 06139ADC Relevance: 1.6, APIs: 1, Instructions: 79
comclipboardCOMMON

Function 0613781C Relevance: 1.6, APIs: 1, Instructions: 74
comclipboardCOMMON

Function 00E0AF40 Relevance: 1.6, APIs: 1, Instructions: 72
COMMON

Function 00E0CC20 Relevance: 1.6, APIs: 1, Instructions: 62
threadCOMMON

Function 00E0AF48 Relevance: 1.6, APIs: 1, Instructions: 62
COMMON

Function 00E0B844 Relevance: 1.6, APIs: 1, Instructions: 62
threadCOMMON

Function 00E0CFB1 Relevance: 1.6, APIs: 1, Instructions: 60
windowCOMMON

Function 00E0CFB8 Relevance: 1.6, APIs: 1, Instructions: 57
windowCOMMON