Edit tour

Windows Analysis Report
IXi8q1gF78.exe

Overview

General Information

Sample name:	IXi8q1gF78.exe renamed because original name is a hash value
Original sample name:	378059b27606eae8b78d0ebcd8cf469ece63a8e36459ebb060739ac3bdb35d62.exe
Analysis ID:	1542346
MD5:	4a877b33da7992ee741897eb26ce07f1
SHA1:	c951f9b852a6ee975f5e66ce6d9b3671fbffd989
SHA256:	378059b27606eae8b78d0ebcd8cf469ece63a8e36459ebb060739ac3bdb35d62
Tags:	217-195-153-196exekoiloaderTMBackdooruser-JAMESWT_MHT
Infos:

Detection

Score:	96
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

Antivirus / Scanner detection for submitted sample

Detected unpacking (creates a PE file in dynamic memory)

Malicious sample detected (through community Yara rule)

Multi AV Scanner detection for submitted file

Suricata IDS alerts for network traffic

AI detected suspicious sample

Found evasive API chain (may stop execution after checking mutex)

Machine Learning detection for sample

Sigma detected: Potential Persistence Via COM Hijacking From Suspicious Locations

Checks if the current process is being debugged

Contains functionality to create an SMB header

Contains functionality to dynamically determine API calls

Detected TCP or UDP traffic on non-standard ports

Detected potential crypto function

Found a high number of Window / User specific system calls (may be a loop to detect user behavior)

Found decision node followed by non-executed suspicious APIs

Found evasive API chain (may stop execution after accessing registry keys)

Found evasive API chain (may stop execution after checking a module file name)

May sleep (evasive loops) to hinder dynamic analysis

PE file contains sections with non-standard names

Sample execution stops while process was sleeping (likely an evasion)

Sleep loop found (likely to delay execution)

Uses 32bit PE files

Uses Microsoft's Enhanced Cryptographic Provider

Uses code obfuscation techniques (call, push, ret)

Yara signature match

Classification

Process Tree

System is w10x64

IXi8q1gF78.exe (PID: 616 cmdline: "C:\Users\user\Desktop\IXi8q1gF78.exe" MD5: 4A877B33DA7992EE741897EB26CE07F1)

cleanup

Yara Signatures

Memory Dumps

Source	Rule	Description	Author	Strings
00000000.00000002.2819002500.0000000000520000.00000040.00001000.00020000.00000000.sdmp	Linux_Trojan_Rbot_96625c8c	unknown	unknown	0x559b:$a: 24 28 8B 45 3C 8B 54 05 78 01 EA 8B 4A 18 8B 5A 20 01 EB E3 38 49 8B
00000000.00000003.2077790126.0000000000500000.00000040.00001000.00020000.00000000.sdmp	Linux_Trojan_Rbot_96625c8c	unknown	unknown	0x499b:$a: 24 28 8B 45 3C 8B 54 05 78 01 EA 8B 4A 18 8B 5A 20 01 EB E3 38 49 8B

Unpacked PEs

Source	Rule	Description	Author	Strings
0.3.IXi8q1gF78.exe.500000.0.raw.unpack	Linux_Trojan_Rbot_96625c8c	unknown	unknown	0x499b:$a: 24 28 8B 45 3C 8B 54 05 78 01 EA 8B 4A 18 8B 5A 20 01 EB E3 38 49 8B
0.3.IXi8q1gF78.exe.500000.0.unpack	Linux_Trojan_Rbot_96625c8c	unknown	unknown	0x3d9b:$a: 24 28 8B 45 3C 8B 54 05 78 01 EA 8B 4A 18 8B 5A 20 01 EB E3 38 49 8B
0.2.IXi8q1gF78.exe.520000.1.unpack	Linux_Trojan_Rbot_96625c8c	unknown	unknown	0x499b:$a: 24 28 8B 45 3C 8B 54 05 78 01 EA 8B 4A 18 8B 5A 20 01 EB E3 38 49 8B
0.2.IXi8q1gF78.exe.520000.1.raw.unpack	Linux_Trojan_Rbot_96625c8c	unknown	unknown	0x559b:$a: 24 28 8B 45 3C 8B 54 05 78 01 EA 8B 4A 18 8B 5A 20 01 EB E3 38 49 8B

Sigma Signatures

System Summary

Sigma detected: Potential Persistence Via COM Hijacking From Suspicious Locations

Source: Registry Key set

Author: Nasreddine Bencherchali (Nextron Systems): Data: Details: C:\Users\user\Desktop\IXi8q1gF78.exe, EventID: 13, EventType: SetValue, Image: C:\Users\user\Desktop\IXi8q1gF78.exe, ProcessId: 616, TargetObject: HKEY_LOCAL_MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{40B8DCCB-895E-2CDC-AE7F-E3C71F72764D}\LocalServer32\(Default)

Suricata Signatures

ET WORM Allaple ICMP Sweep Ping Outbound

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-10-25T20:05:06.117817+0200	2003292	1	A Network Trojan was detected	192.168.2.5	0	130.195.71.161	0	ICMP
2024-10-25T20:06:06.120413+0200	2003292	1	A Network Trojan was detected	192.168.2.5	0	130.195.19.157	0	ICMP

ET WORM Allaple ICMP Sweep Reply Inbound

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-10-25T20:05:09.038043+0200	2003293	1	A Network Trojan was detected	130.195.243.25	0	192.168.2.5	0	ICMP
2024-10-25T20:06:10.951308+0200	2003293	1	A Network Trojan was detected	130.195.245.1	0	192.168.2.5	0	ICMP

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

AV Detection

Antivirus / Scanner detection for submitted sample

Source: IXi8q1gF78.exe

Avira: detected

Multi AV Scanner detection for submitted file

Source: IXi8q1gF78.exe

ReversingLabs: Detection: 100%

AI detected suspicious sample

Source: Submited Sample

Integrated Neural Analysis Model: Matched 100.0% probability

Machine Learning detection for sample

Source: IXi8q1gF78.exe

Joe Sandbox ML: detected

Source: C:\Users\user\Desktop\IXi8q1gF78.exe	Code function: 0_2_005233E0 CryptAcquireContextA,CryptGenRandom,CryptReleaseContext,	0_2_005233E0
Source: C:\Users\user\Desktop\IXi8q1gF78.exe	Code function: 0_2_0052285E CryptAcquireContextA,socket,gethostbyname,htons,htons,CryptGenRandom,CryptGenRandom,htons,memcpy,connect,send,closesocket,CryptReleaseContext,socket,gethostbyname,htons,connect,send,closesocket,	0_2_0052285E
Source: C:\Users\user\Desktop\IXi8q1gF78.exe	Code function: 0_2_0052EBB0 CryptAcquireContextA,CryptGenRandom,CryptReleaseContext,	0_2_0052EBB0

Source: C:\Users\user\Desktop\IXi8q1gF78.exe	Code function: mov dword ptr [esi], 424D53FFh	0_2_00530A80
Source: C:\Users\user\Desktop\IXi8q1gF78.exe	Code function: cmp dword ptr [edi+04h], 424D53FFh	0_2_0052EF90
Source: C:\Users\user\Desktop\IXi8q1gF78.exe	Code function: mov dword ptr [edi], 424D53FFh	0_2_00527860
Source: C:\Users\user\Desktop\IXi8q1gF78.exe	Code function: mov dword ptr [esi], 424D53FFh	0_2_00530460
Source: C:\Users\user\Desktop\IXi8q1gF78.exe	Code function: mov dword ptr [esi], 424D53FFh	0_2_005324C0
Source: C:\Users\user\Desktop\IXi8q1gF78.exe	Code function: mov dword ptr [esi], 424D53FFh	0_2_0052F510
Source: C:\Users\user\Desktop\IXi8q1gF78.exe	Code function: mov dword ptr [esi], 424D53FFh	0_2_00530510
Source: C:\Users\user\Desktop\IXi8q1gF78.exe	Code function: mov dword ptr [esi], 424D53FFh	0_2_0052F100
Source: C:\Users\user\Desktop\IXi8q1gF78.exe	Code function: mov dword ptr [esi], 424D53FFh	0_2_00530590
Source: C:\Users\user\Desktop\IXi8q1gF78.exe	Code function: mov dword ptr [esi], 424D53FFh	0_2_0052F250
Source: C:\Users\user\Desktop\IXi8q1gF78.exe	Code function: mov dword ptr [esi], 424D53FFh	0_2_00530640
Source: C:\Users\user\Desktop\IXi8q1gF78.exe	Code function: mov dword ptr [esi], 424D53FFh	0_2_0052FB50
Source: C:\Users\user\Desktop\IXi8q1gF78.exe	Code function: mov dword ptr [esi], 424D53FFh	0_2_005323D0
Source: C:\Users\user\Desktop\IXi8q1gF78.exe	Code function: mov dword ptr [edi], 424D53FFh	0_2_00527790
Source: C:\Users\user\Desktop\IXi8q1gF78.exe	Code function: mov dword ptr [esi], 424D53FFh	0_2_0052F3B0

Compliance

Detected unpacking (creates a PE file in dynamic memory)

Source: C:\Users\user\Desktop\IXi8q1gF78.exe

Unpacked PE file: 0.2.IXi8q1gF78.exe.520000.1.unpack

Source: IXi8q1gF78.exe

Static PE information: RELOCS_STRIPPED, EXECUTABLE_IMAGE, LINE_NUMS_STRIPPED, LOCAL_SYMS_STRIPPED, 32BIT_MACHINE

Source: C:\Users\user\Desktop\IXi8q1gF78.exe

Code function: 0_2_00522100 CoTaskMemAlloc,wsprintfA,FindFirstFileA,wsprintfA,Sleep,CharLowerA,lstrlenA,CoTaskMemAlloc,lstrcpyA,CreateThread,SetThreadPriority,WaitForSingleObject,CloseHandle,FindNextFileA,FindClose,CoTaskMemFree,

0_2_00522100

Source: C:\Users\user\Desktop\IXi8q1gF78.exe

Code function: 0_2_00522040 GetLogicalDriveStringsA,GetDriveTypeA,CoTaskMemAlloc,lstrcpyA,CreateThread,CreateThread,SetThreadPriority,WaitForSingleObject,lstrlenA,Sleep,

0_2_00522040

Source: C:\Users\user\Desktop\IXi8q1gF78.exe	File opened: C:\Documents and Settings\user\AppData\Local\Adobe\Acrobat\	Jump to behavior
Source: C:\Users\user\Desktop\IXi8q1gF78.exe	File opened: C:\Documents and Settings\user\AppData\Local\Adobe\Acrobat\DC\	Jump to behavior
Source: C:\Users\user\Desktop\IXi8q1gF78.exe	File opened: C:\Documents and Settings\user\AppData\Local\Adobe\	Jump to behavior
Source: C:\Users\user\Desktop\IXi8q1gF78.exe	File opened: C:\Documents and Settings\user\AppData\Local\Adobe\Acrobat\DC\Cache\	Jump to behavior
Source: C:\Users\user\Desktop\IXi8q1gF78.exe	File opened: C:\Documents and Settings\user\AppData\Local\	Jump to behavior
Source: C:\Users\user\Desktop\IXi8q1gF78.exe	File opened: C:\Documents and Settings\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\	Jump to behavior

Networking

Suricata IDS alerts for network traffic

Source: Network traffic	Suricata IDS: 2003292 - Severity 1 - ET WORM Allaple ICMP Sweep Ping Outbound : 192.168.2.5:0 -> 130.195.71.161:0
Source: Network traffic	Suricata IDS: 2003293 - Severity 1 - ET WORM Allaple ICMP Sweep Reply Inbound : 130.195.243.25:0 -> 192.168.2.5:0
Source: Network traffic	Suricata IDS: 2003292 - Severity 1 - ET WORM Allaple ICMP Sweep Ping Outbound : 192.168.2.5:0 -> 130.195.19.157:0
Source: Network traffic	Suricata IDS: 2003293 - Severity 1 - ET WORM Allaple ICMP Sweep Reply Inbound : 130.195.245.1:0 -> 192.168.2.5:0

Source: global traffic	TCP traffic: 192.168.2.5:49704 -> 130.195.243.25:139
Source: global traffic	TCP traffic: 192.168.2.5:49705 -> 130.195.5.5:139
Source: global traffic	TCP traffic: 192.168.2.5:49706 -> 130.195.196.194:139
Source: global traffic	TCP traffic: 192.168.2.5:49711 -> 130.195.213.54:139
Source: global traffic	TCP traffic: 192.168.2.5:49713 -> 130.195.244.10:139
Source: global traffic	TCP traffic: 192.168.2.5:49717 -> 130.195.213.58:139
Source: global traffic	TCP traffic: 192.168.2.5:49718 -> 130.195.213.23:139
Source: global traffic	TCP traffic: 192.168.2.5:49797 -> 130.195.250.100:139
Source: global traffic	TCP traffic: 192.168.2.5:49798 -> 130.195.240.22:139
Source: global traffic	TCP traffic: 192.168.2.5:49807 -> 130.195.245.29:139
Source: global traffic	TCP traffic: 192.168.2.5:49822 -> 130.195.5.24:139
Source: global traffic	TCP traffic: 192.168.2.5:49856 -> 130.195.216.21:139
Source: global traffic	TCP traffic: 192.168.2.5:49859 -> 130.195.245.14:139
Source: global traffic	TCP traffic: 192.168.2.5:49873 -> 130.195.243.14:139
Source: global traffic	TCP traffic: 192.168.2.5:49877 -> 130.195.213.9:139
Source: global traffic	TCP traffic: 192.168.2.5:49955 -> 130.195.3.26:139
Source: global traffic	TCP traffic: 192.168.2.5:49983 -> 130.195.216.10:139
Source: global traffic	TCP traffic: 192.168.2.5:50021 -> 130.195.211.50:139
Source: global traffic	TCP traffic: 192.168.2.5:50022 -> 130.195.60.1:139
Source: global traffic	TCP traffic: 192.168.2.5:50072 -> 130.195.211.53:139
Source: global traffic	TCP traffic: 192.168.2.5:50088 -> 130.195.241.20:139
Source: global traffic	TCP traffic: 192.168.2.5:50104 -> 130.195.48.77:139
Source: global traffic	TCP traffic: 192.168.2.5:50105 -> 130.195.218.45:139
Source: global traffic	TCP traffic: 192.168.2.5:50107 -> 130.195.218.60:139
Source: global traffic	TCP traffic: 192.168.2.5:50135 -> 130.195.249.17:139
Source: global traffic	TCP traffic: 192.168.2.5:50143 -> 130.195.245.1:139
Source: global traffic	TCP traffic: 192.168.2.5:50162 -> 130.195.217.8:139

Source: unknown	TCP traffic detected without corresponding DNS query: 130.195.243.25
Source: unknown	TCP traffic detected without corresponding DNS query: 130.195.243.25
Source: unknown	TCP traffic detected without corresponding DNS query: 130.195.5.5
Source: unknown	TCP traffic detected without corresponding DNS query: 130.195.243.25
Source: unknown	TCP traffic detected without corresponding DNS query: 130.195.5.5
Source: unknown	TCP traffic detected without corresponding DNS query: 130.195.5.5
Source: unknown	TCP traffic detected without corresponding DNS query: 130.195.196.194
Source: unknown	TCP traffic detected without corresponding DNS query: 130.195.243.25
Source: unknown	TCP traffic detected without corresponding DNS query: 130.195.243.25
Source: unknown	TCP traffic detected without corresponding DNS query: 130.195.243.25
Source: unknown	TCP traffic detected without corresponding DNS query: 130.195.243.25
Source: unknown	TCP traffic detected without corresponding DNS query: 130.195.196.194
Source: unknown	TCP traffic detected without corresponding DNS query: 130.195.243.25
Source: unknown	TCP traffic detected without corresponding DNS query: 130.195.5.5
Source: unknown	TCP traffic detected without corresponding DNS query: 130.195.5.5
Source: unknown	TCP traffic detected without corresponding DNS query: 130.195.5.5
Source: unknown	TCP traffic detected without corresponding DNS query: 130.195.5.5
Source: unknown	TCP traffic detected without corresponding DNS query: 130.195.213.54
Source: unknown	TCP traffic detected without corresponding DNS query: 130.195.196.194
Source: unknown	TCP traffic detected without corresponding DNS query: 130.195.243.25
Source: unknown	TCP traffic detected without corresponding DNS query: 130.195.5.5
Source: unknown	TCP traffic detected without corresponding DNS query: 130.195.213.54
Source: unknown	TCP traffic detected without corresponding DNS query: 130.195.5.5
Source: unknown	TCP traffic detected without corresponding DNS query: 130.195.244.10
Source: unknown	TCP traffic detected without corresponding DNS query: 130.195.213.54
Source: unknown	TCP traffic detected without corresponding DNS query: 130.195.196.194
Source: unknown	TCP traffic detected without corresponding DNS query: 130.195.243.25
Source: unknown	TCP traffic detected without corresponding DNS query: 130.195.244.10
Source: unknown	TCP traffic detected without corresponding DNS query: 130.195.196.194
Source: unknown	TCP traffic detected without corresponding DNS query: 130.195.196.194
Source: unknown	TCP traffic detected without corresponding DNS query: 130.195.243.25
Source: unknown	TCP traffic detected without corresponding DNS query: 130.195.243.25
Source: unknown	TCP traffic detected without corresponding DNS query: 130.195.196.194
Source: unknown	TCP traffic detected without corresponding DNS query: 130.195.213.58
Source: unknown	TCP traffic detected without corresponding DNS query: 130.195.213.23
Source: unknown	TCP traffic detected without corresponding DNS query: 130.195.196.194
Source: unknown	TCP traffic detected without corresponding DNS query: 130.195.213.58
Source: unknown	TCP traffic detected without corresponding DNS query: 130.195.213.23
Source: unknown	TCP traffic detected without corresponding DNS query: 130.195.5.5
Source: unknown	TCP traffic detected without corresponding DNS query: 130.195.5.5
Source: unknown	TCP traffic detected without corresponding DNS query: 130.195.5.5
Source: unknown	TCP traffic detected without corresponding DNS query: 130.195.244.10
Source: unknown	TCP traffic detected without corresponding DNS query: 130.195.213.54
Source: unknown	TCP traffic detected without corresponding DNS query: 130.195.213.54
Source: unknown	TCP traffic detected without corresponding DNS query: 130.195.213.54
Source: unknown	TCP traffic detected without corresponding DNS query: 130.195.213.54
Source: unknown	TCP traffic detected without corresponding DNS query: 130.195.196.194
Source: unknown	TCP traffic detected without corresponding DNS query: 130.195.213.54
Source: unknown	TCP traffic detected without corresponding DNS query: 130.195.213.23
Source: unknown	TCP traffic detected without corresponding DNS query: 130.195.213.58

Source: C:\Users\user\Desktop\IXi8q1gF78.exe

Code function: 0_2_0052F6B0 inet_addr,socket,htons,ioctlsocket,setsockopt,connect,WSAGetLastError,select,send,select,recv,closesocket,socket,htons,ioctlsocket,setsockopt,connect,WSAGetLastError,select,shutdown,closesocket,

0_2_0052F6B0

System Summary

Malicious sample detected (through community Yara rule)

Source: 0.3.IXi8q1gF78.exe.500000.0.raw.unpack, type: UNPACKEDPE	Matched rule: Linux_Trojan_Rbot_96625c8c Author: unknown
Source: 0.3.IXi8q1gF78.exe.500000.0.unpack, type: UNPACKEDPE	Matched rule: Linux_Trojan_Rbot_96625c8c Author: unknown
Source: 0.2.IXi8q1gF78.exe.520000.1.unpack, type: UNPACKEDPE	Matched rule: Linux_Trojan_Rbot_96625c8c Author: unknown
Source: 0.2.IXi8q1gF78.exe.520000.1.raw.unpack, type: UNPACKEDPE	Matched rule: Linux_Trojan_Rbot_96625c8c Author: unknown
Source: 00000000.00000002.2819002500.0000000000520000.00000040.00001000.00020000.00000000.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Rbot_96625c8c Author: unknown
Source: 00000000.00000003.2077790126.0000000000500000.00000040.00001000.00020000.00000000.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Rbot_96625c8c Author: unknown

Source: C:\Users\user\Desktop\IXi8q1gF78.exe	Code function: 0_2_00401754	0_2_00401754
Source: C:\Users\user\Desktop\IXi8q1gF78.exe	Code function: 0_2_004017AA	0_2_004017AA
Source: C:\Users\user\Desktop\IXi8q1gF78.exe	Code function: 0_2_00532640	0_2_00532640
Source: C:\Users\user\Desktop\IXi8q1gF78.exe	Code function: 0_2_0052BA3C	0_2_0052BA3C
Source: C:\Users\user\Desktop\IXi8q1gF78.exe	Code function: 0_2_0052B6F0	0_2_0052B6F0
Source: C:\Users\user\Desktop\IXi8q1gF78.exe	Code function: 0_2_0052B6FF	0_2_0052B6FF
Source: C:\Users\user\Desktop\IXi8q1gF78.exe	Code function: 0_2_004017F7	0_2_004017F7

Source: IXi8q1gF78.exe

Static PE information: RELOCS_STRIPPED, EXECUTABLE_IMAGE, LINE_NUMS_STRIPPED, LOCAL_SYMS_STRIPPED, 32BIT_MACHINE

Source: 0.3.IXi8q1gF78.exe.500000.0.raw.unpack, type: UNPACKEDPE	Matched rule: Linux_Trojan_Rbot_96625c8c reference_sample = a052cfad3034d851c6fad62cc8f9c65bceedc73f3e6a37c9befe52720fd0890e, os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Rbot, fingerprint = 5dfabf693c87742ffa212573dded84a2c341628b79c7d11c16be493957c71a69, id = 96625c8c-897c-4bf0-97e7-0dc04595cb94, last_modified = 2021-09-16
Source: 0.3.IXi8q1gF78.exe.500000.0.unpack, type: UNPACKEDPE	Matched rule: Linux_Trojan_Rbot_96625c8c reference_sample = a052cfad3034d851c6fad62cc8f9c65bceedc73f3e6a37c9befe52720fd0890e, os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Rbot, fingerprint = 5dfabf693c87742ffa212573dded84a2c341628b79c7d11c16be493957c71a69, id = 96625c8c-897c-4bf0-97e7-0dc04595cb94, last_modified = 2021-09-16
Source: 0.2.IXi8q1gF78.exe.520000.1.unpack, type: UNPACKEDPE	Matched rule: Linux_Trojan_Rbot_96625c8c reference_sample = a052cfad3034d851c6fad62cc8f9c65bceedc73f3e6a37c9befe52720fd0890e, os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Rbot, fingerprint = 5dfabf693c87742ffa212573dded84a2c341628b79c7d11c16be493957c71a69, id = 96625c8c-897c-4bf0-97e7-0dc04595cb94, last_modified = 2021-09-16
Source: 0.2.IXi8q1gF78.exe.520000.1.raw.unpack, type: UNPACKEDPE	Matched rule: Linux_Trojan_Rbot_96625c8c reference_sample = a052cfad3034d851c6fad62cc8f9c65bceedc73f3e6a37c9befe52720fd0890e, os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Rbot, fingerprint = 5dfabf693c87742ffa212573dded84a2c341628b79c7d11c16be493957c71a69, id = 96625c8c-897c-4bf0-97e7-0dc04595cb94, last_modified = 2021-09-16
Source: 00000000.00000002.2819002500.0000000000520000.00000040.00001000.00020000.00000000.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Rbot_96625c8c reference_sample = a052cfad3034d851c6fad62cc8f9c65bceedc73f3e6a37c9befe52720fd0890e, os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Rbot, fingerprint = 5dfabf693c87742ffa212573dded84a2c341628b79c7d11c16be493957c71a69, id = 96625c8c-897c-4bf0-97e7-0dc04595cb94, last_modified = 2021-09-16
Source: 00000000.00000003.2077790126.0000000000500000.00000040.00001000.00020000.00000000.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Rbot_96625c8c reference_sample = a052cfad3034d851c6fad62cc8f9c65bceedc73f3e6a37c9befe52720fd0890e, os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Rbot, fingerprint = 5dfabf693c87742ffa212573dded84a2c341628b79c7d11c16be493957c71a69, id = 96625c8c-897c-4bf0-97e7-0dc04595cb94, last_modified = 2021-09-16

Source: IXi8q1gF78.exe

Static PE information: Section: .data ZLIB complexity 0.9975120907738095

Source: classification engine

Classification label: mal96.evad.winEXE@1/0@0/100

Source: C:\Users\user\Desktop\IXi8q1gF78.exe

Mutant created: \Sessions\1\BaseNamedObjects\jhdheruhfrthkgjhtjkghjk5trh

Source: IXi8q1gF78.exe

Static PE information: Section: .text IMAGE_SCN_CNT_CODE, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ

Source: C:\Users\user\Desktop\IXi8q1gF78.exe

Key opened: HKEY_CURRENT_USER\Software\Policies\Microsoft\Windows\Safer\CodeIdentifiers

Jump to behavior

Source: IXi8q1gF78.exe

ReversingLabs: Detection: 100%

Source: IXi8q1gF78.exe	String found in binary or memory: /installservice
Source: IXi8q1gF78.exe	String found in binary or memory: /stop
Source: IXi8q1gF78.exe	String found in binary or memory: /stop

Source: C:\Users\user\Desktop\IXi8q1gF78.exe	Section loaded: apphelp.dll	Jump to behavior
Source: C:\Users\user\Desktop\IXi8q1gF78.exe	Section loaded: icmp.dll	Jump to behavior
Source: C:\Users\user\Desktop\IXi8q1gF78.exe	Section loaded: iphlpapi.dll	Jump to behavior
Source: C:\Users\user\Desktop\IXi8q1gF78.exe	Section loaded: cryptsp.dll	Jump to behavior
Source: C:\Users\user\Desktop\IXi8q1gF78.exe	Section loaded: rsaenh.dll	Jump to behavior
Source: C:\Users\user\Desktop\IXi8q1gF78.exe	Section loaded: cryptbase.dll	Jump to behavior
Source: C:\Users\user\Desktop\IXi8q1gF78.exe	Section loaded: winnsi.dll	Jump to behavior
Source: C:\Users\user\Desktop\IXi8q1gF78.exe	Section loaded: mswsock.dll	Jump to behavior

Data Obfuscation

Detected unpacking (creates a PE file in dynamic memory)

Source: C:\Users\user\Desktop\IXi8q1gF78.exe

Unpacked PE file: 0.2.IXi8q1gF78.exe.520000.1.unpack

Source: C:\Users\user\Desktop\IXi8q1gF78.exe

Code function: 0_2_00527FC0 GetModuleFileNameA,LoadLibraryA,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,InitializeCriticalSection,InitializeCriticalSection,

0_2_00527FC0

Source: IXi8q1gF78.exe

Static PE information: section name: .rdatap

Source: C:\Users\user\Desktop\IXi8q1gF78.exe	Code function: 0_2_004041DB pushfd ; retf	0_2_004041E2
Source: C:\Users\user\Desktop\IXi8q1gF78.exe	Code function: 0_2_004041EF push edi; ret	0_2_004041F0
Source: C:\Users\user\Desktop\IXi8q1gF78.exe	Code function: 0_2_00404074 push es; retf	0_2_00404084
Source: C:\Users\user\Desktop\IXi8q1gF78.exe	Code function: 0_2_0053A648 push 12345678h; ret	0_2_0053A655
Source: C:\Users\user\Desktop\IXi8q1gF78.exe	Code function: 0_2_0053A638 push 12345678h; ret	0_2_0053A655
Source: C:\Users\user\Desktop\IXi8q1gF78.exe	Code function: 0_2_0053A620 push 12345678h; ret	0_2_0053A655
Source: C:\Users\user\Desktop\IXi8q1gF78.exe	Code function: 0_2_0053A620 push 12345678h; ret	0_2_0053A655

Source: C:\Users\user\Desktop\IXi8q1gF78.exe

Process information set: NOGPFAULTERRORBOX | NOOPENFILEERRORBOX

Jump to behavior

Malware Analysis System Evasion

Found evasive API chain (may stop execution after checking mutex)

Source: C:\Users\user\Desktop\IXi8q1gF78.exe	Evasive API call chain: CreateMutex,DecisionNodes,ExitProcess			graph_0-4669
Source: C:\Users\user\Desktop\IXi8q1gF78.exe	Evasive API call chain: CreateMutex,DecisionNodes,Sleep			graph_0-4669

Source: C:\Users\user\Desktop\IXi8q1gF78.exe

Window / User API: threadDelayed 1325

Jump to behavior

Source: C:\Users\user\Desktop\IXi8q1gF78.exe

Decision node followed by non-executed suspicious API: DecisionNode, Non Executed (send or recv or WinExec)

graph_0-5211

Source: C:\Users\user\Desktop\IXi8q1gF78.exe

Evasive API call chain: RegOpenKey,DecisionNodes,ExitProcess

graph_0-4726

Source: C:\Users\user\Desktop\IXi8q1gF78.exe

Evasive API call chain: GetModuleFileName,DecisionNodes,ExitProcess

graph_0-4708

Source: C:\Users\user\Desktop\IXi8q1gF78.exe TID: 6464

Thread sleep count: 1325 > 30

Jump to behavior

Source: C:\Users\user\Desktop\IXi8q1gF78.exe

Last function: Thread delayed

Source: C:\Users\user\Desktop\IXi8q1gF78.exe

Thread sleep count: Count: 1325 delay: -20

Jump to behavior

Source: C:\Users\user\Desktop\IXi8q1gF78.exe

0_2_00522100

Source: C:\Users\user\Desktop\IXi8q1gF78.exe

Code function: 0_2_00522040 GetLogicalDriveStringsA,GetDriveTypeA,CoTaskMemAlloc,lstrcpyA,CreateThread,CreateThread,SetThreadPriority,WaitForSingleObject,lstrlenA,Sleep,

0_2_00522040

Source: C:\Users\user\Desktop\IXi8q1gF78.exe	File opened: C:\Documents and Settings\user\AppData\Local\Adobe\Acrobat\	Jump to behavior
Source: C:\Users\user\Desktop\IXi8q1gF78.exe	File opened: C:\Documents and Settings\user\AppData\Local\Adobe\Acrobat\DC\	Jump to behavior
Source: C:\Users\user\Desktop\IXi8q1gF78.exe	File opened: C:\Documents and Settings\user\AppData\Local\Adobe\	Jump to behavior
Source: C:\Users\user\Desktop\IXi8q1gF78.exe	File opened: C:\Documents and Settings\user\AppData\Local\Adobe\Acrobat\DC\Cache\	Jump to behavior
Source: C:\Users\user\Desktop\IXi8q1gF78.exe	File opened: C:\Documents and Settings\user\AppData\Local\	Jump to behavior
Source: C:\Users\user\Desktop\IXi8q1gF78.exe	File opened: C:\Documents and Settings\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\	Jump to behavior

Source: IXi8q1gF78.exe, 00000000.00000003.2077790126.0000000000500000.00000040.00001000.00020000.00000000.sdmp	Binary or memory string: vmware
Source: IXi8q1gF78.exe, 00000000.00000003.2077790126.0000000000500000.00000040.00001000.00020000.00000000.sdmp	Binary or memory string: \lsarpc\\*SMBSERVER\IPC$Administratorpassword\\%skrbtgtSUPPORT_388945a0TelnetClientsHelpAssistantHelpServicesGroupTsInternetUserSQLDebuggerSQLServerSQLAgentCmdExecNetShowServicesASPNETVUSRILS_IIS_IUSR_IWAM_OWS_ASPNETDHCPWINS WEB POP3 SQL$??vmware-group-user Authors Admins Browsers Guests Users Developers Administrators
Source: IXi8q1gF78.exe, 00000000.00000002.2819286515.000000000063E000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: Hyper-V RAW%SystemRoot%\system32\mswsock.dll=

Source: C:\Users\user\Desktop\IXi8q1gF78.exe	API call chain: ExitProcess graph end node	graph_0-4584
Source: C:\Users\user\Desktop\IXi8q1gF78.exe	API call chain: ExitProcess graph end node	graph_0-4768
Source: C:\Users\user\Desktop\IXi8q1gF78.exe	API call chain: ExitProcess graph end node	graph_0-4672
Source: C:\Users\user\Desktop\IXi8q1gF78.exe	API call chain: ExitProcess graph end node	graph_0-5937
Source: C:\Users\user\Desktop\IXi8q1gF78.exe	API call chain: ExitProcess graph end node	graph_0-4760

Source: C:\Users\user\Desktop\IXi8q1gF78.exe

Process queried: DebugPort

Jump to behavior

Source: C:\Users\user\Desktop\IXi8q1gF78.exe

Code function: 0_2_00527FC0 GetModuleFileNameA,LoadLibraryA,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,InitializeCriticalSection,InitializeCriticalSection,

0_2_00527FC0

Source: C:\Users\user\Desktop\IXi8q1gF78.exe

Code function: 0_2_00527A10 EntryPoint,SetErrorMode,InitializeCriticalSection,InitializeCriticalSection,InitializeCriticalSection,InitializeCriticalSection,InitializeCriticalSection,WSAStartup,GetVersionExA,CreateEventA,ExitProcess,CreateMutexA,GetLastError,CloseHandle,ExitProcess,CoTaskMemAlloc,CreateEventA,CreateThread,CreateThread,CloseHandle,CreateThread,CloseHandle,CreateThread,WaitForSingleObject,Sleep,ExitProcess,Sleep,CoTaskMemFree,WaitForSingleObject,ResumeThread,SuspendThread,

0_2_00527A10

Source: C:\Users\user\Desktop\IXi8q1gF78.exe

Key value queried: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Cryptography MachineGuid

Jump to behavior

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	2 Command and Scripting Interpreter	1 DLL Side-Loading	1 DLL Side-Loading	3 Virtualization/Sandbox Evasion	OS Credential Dumping	11 Security Software Discovery	1 Exploitation of Remote Services	1 Archive Collected Data	2 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	12 Native API	Boot or Logon Initialization Scripts	Boot or Logon Initialization Scripts	1 Obfuscated Files or Information	LSASS Memory	3 Virtualization/Sandbox Evasion	Remote Desktop Protocol	Data from Removable Media	1 Non-Standard Port	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	11 Software Packing	Security Account Manager	1 Application Window Discovery	SMB/Windows Admin Shares	Data from Network Shared Drive	1 Ingress Tool Transfer	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	1 DLL Side-Loading	NTDS	3 File and Directory Discovery	Distributed Component Object Model	Input Capture	Protocol Impersonation	Traffic Duplication	Data Destruction
Gather Victim Network Information	Server	Cloud Accounts	Launchd	Network Logon Script	Network Logon Script	Software Packing	LSA Secrets	3 System Information Discovery	SSH	Keylogging	Fallback Channels	Scheduled Transfer	Data Encrypted for Impact

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Source	Detection	Scanner	Label
IXi8q1gF78.exe	100%	ReversingLabs	Win32.Worm.RaHack
IXi8q1gF78.exe	100%	Avira	TR/Dropper.Gen
IXi8q1gF78.exe	100%	Joe Sandbox ML

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
130.195.21.41	unknown	New Zealand	23905	VUW-AS-APVictoriaUniversityofWellingtonNZ	false
130.195.56.182	unknown	New Zealand	23905	VUW-AS-APVictoriaUniversityofWellingtonNZ	false
130.195.110.242	unknown	New Zealand	23905	VUW-AS-APVictoriaUniversityofWellingtonNZ	false
130.195.89.70	unknown	New Zealand	23905	VUW-AS-APVictoriaUniversityofWellingtonNZ	false
130.195.126.159	unknown	New Zealand	23905	VUW-AS-APVictoriaUniversityofWellingtonNZ	false
130.195.148.219	unknown	New Zealand	23905	VUW-AS-APVictoriaUniversityofWellingtonNZ	false
130.195.63.134	unknown	New Zealand	207957	A2-CUSA2-CustomerNL	false
130.195.196.126	unknown	New Zealand	23905	VUW-AS-APVictoriaUniversityofWellingtonNZ	false
130.195.110.244	unknown	New Zealand	23905	VUW-AS-APVictoriaUniversityofWellingtonNZ	false
130.195.223.153	unknown	New Zealand	23905	VUW-AS-APVictoriaUniversityofWellingtonNZ	false
130.195.89.73	unknown	New Zealand	23905	VUW-AS-APVictoriaUniversityofWellingtonNZ	false
130.195.223.156	unknown	New Zealand	23905	VUW-AS-APVictoriaUniversityofWellingtonNZ	false
130.195.110.249	unknown	New Zealand	23905	VUW-AS-APVictoriaUniversityofWellingtonNZ	false
130.195.31.221	unknown	New Zealand	23905	VUW-AS-APVictoriaUniversityofWellingtonNZ	false
130.195.180.24	unknown	New Zealand	23905	VUW-AS-APVictoriaUniversityofWellingtonNZ	false
130.195.189.176	unknown	New Zealand	23905	VUW-AS-APVictoriaUniversityofWellingtonNZ	false
130.195.173.250	unknown	New Zealand	23905	VUW-AS-APVictoriaUniversityofWellingtonNZ	false
130.195.101.203	unknown	New Zealand	23905	VUW-AS-APVictoriaUniversityofWellingtonNZ	false
130.195.148.229	unknown	New Zealand	23905	VUW-AS-APVictoriaUniversityofWellingtonNZ	false
130.195.230.118	unknown	New Zealand	23905	VUW-AS-APVictoriaUniversityofWellingtonNZ	false
130.195.63.146	unknown	New Zealand	207957	A2-CUSA2-CustomerNL	false
130.195.179.20	unknown	New Zealand	23905	VUW-AS-APVictoriaUniversityofWellingtonNZ	false
130.195.117.106	unknown	New Zealand	23905	VUW-AS-APVictoriaUniversityofWellingtonNZ	false
130.195.31.236	unknown	New Zealand	23905	VUW-AS-APVictoriaUniversityofWellingtonNZ	false
130.195.154.5	unknown	New Zealand	23905	VUW-AS-APVictoriaUniversityofWellingtonNZ	false
130.195.154.1	unknown	New Zealand	23905	VUW-AS-APVictoriaUniversityofWellingtonNZ	false
130.195.167.38	unknown	New Zealand	23905	VUW-AS-APVictoriaUniversityofWellingtonNZ	false
130.195.90.59	unknown	New Zealand	23905	VUW-AS-APVictoriaUniversityofWellingtonNZ	false
130.195.229.213	unknown	New Zealand	23905	VUW-AS-APVictoriaUniversityofWellingtonNZ	false
130.195.0.70	unknown	New Zealand	23905	VUW-AS-APVictoriaUniversityofWellingtonNZ	false
130.195.167.42	unknown	New Zealand	23905	VUW-AS-APVictoriaUniversityofWellingtonNZ	false
130.195.207.158	unknown	New Zealand	23905	VUW-AS-APVictoriaUniversityofWellingtonNZ	false
130.195.148.212	unknown	New Zealand	23905	VUW-AS-APVictoriaUniversityofWellingtonNZ	false
130.195.117.133	unknown	New Zealand	23905	VUW-AS-APVictoriaUniversityofWellingtonNZ	false
130.195.117.135	unknown	New Zealand	23905	VUW-AS-APVictoriaUniversityofWellingtonNZ	false
130.195.90.80	unknown	New Zealand	23905	VUW-AS-APVictoriaUniversityofWellingtonNZ	false
130.195.21.20	unknown	New Zealand	23905	VUW-AS-APVictoriaUniversityofWellingtonNZ	false
130.195.63.112	unknown	New Zealand	207957	A2-CUSA2-CustomerNL	false
130.195.89.94	unknown	New Zealand	23905	VUW-AS-APVictoriaUniversityofWellingtonNZ	false
130.195.223.172	unknown	New Zealand	23905	VUW-AS-APVictoriaUniversityofWellingtonNZ	false
130.195.94.220	unknown	New Zealand	23905	VUW-AS-APVictoriaUniversityofWellingtonNZ	false
130.195.31.243	unknown	New Zealand	23905	VUW-AS-APVictoriaUniversityofWellingtonNZ	false
130.195.230.137	unknown	New Zealand	23905	VUW-AS-APVictoriaUniversityofWellingtonNZ	false
130.195.232.189	unknown	New Zealand	23905	VUW-AS-APVictoriaUniversityofWellingtonNZ	false
130.195.201.33	unknown	New Zealand	23905	VUW-AS-APVictoriaUniversityofWellingtonNZ	false
130.195.252.2	unknown	New Zealand	23905	VUW-AS-APVictoriaUniversityofWellingtonNZ	false
130.195.249.17	unknown	New Zealand	23905	VUW-AS-APVictoriaUniversityofWellingtonNZ	false
130.195.21.29	unknown	New Zealand	23905	VUW-AS-APVictoriaUniversityofWellingtonNZ	false
130.195.249.13	unknown	New Zealand	23905	VUW-AS-APVictoriaUniversityofWellingtonNZ	false
130.195.131.87	unknown	New Zealand	23905	VUW-AS-APVictoriaUniversityofWellingtonNZ	false
130.195.213.23	unknown	New Zealand	23905	VUW-AS-APVictoriaUniversityofWellingtonNZ	false
130.195.119.190	unknown	New Zealand	23905	VUW-AS-APVictoriaUniversityofWellingtonNZ	false
130.195.143.76	unknown	New Zealand	23905	VUW-AS-APVictoriaUniversityofWellingtonNZ	false
130.195.232.196	unknown	New Zealand	23905	VUW-AS-APVictoriaUniversityofWellingtonNZ	false
130.195.201.47	unknown	New Zealand	23905	VUW-AS-APVictoriaUniversityofWellingtonNZ	false
130.195.230.121	unknown	New Zealand	23905	VUW-AS-APVictoriaUniversityofWellingtonNZ	false
130.195.180.205	unknown	New Zealand	23905	VUW-AS-APVictoriaUniversityofWellingtonNZ	false
130.195.90.74	unknown	New Zealand	23905	VUW-AS-APVictoriaUniversityofWellingtonNZ	false
130.195.245.235	unknown	New Zealand	23905	VUW-AS-APVictoriaUniversityofWellingtonNZ	false
130.195.111.22	unknown	New Zealand	23905	VUW-AS-APVictoriaUniversityofWellingtonNZ	false
130.195.94.208	unknown	New Zealand	23905	VUW-AS-APVictoriaUniversityofWellingtonNZ	false
130.195.131.97	unknown	New Zealand	23905	VUW-AS-APVictoriaUniversityofWellingtonNZ	false
130.195.131.55	unknown	New Zealand	23905	VUW-AS-APVictoriaUniversityofWellingtonNZ	false
130.195.180.67	unknown	New Zealand	23905	VUW-AS-APVictoriaUniversityofWellingtonNZ	false
130.195.110.201	unknown	New Zealand	23905	VUW-AS-APVictoriaUniversityofWellingtonNZ	false
130.195.155.20	unknown	New Zealand	23905	VUW-AS-APVictoriaUniversityofWellingtonNZ	false
130.195.213.78	unknown	New Zealand	23905	VUW-AS-APVictoriaUniversityofWellingtonNZ	false
130.195.81.184	unknown	New Zealand	23905	VUW-AS-APVictoriaUniversityofWellingtonNZ	false
130.195.72.135	unknown	New Zealand	23905	VUW-AS-APVictoriaUniversityofWellingtonNZ	false
130.195.143.44	unknown	New Zealand	23905	VUW-AS-APVictoriaUniversityofWellingtonNZ	false
130.195.72.142	unknown	New Zealand	23905	VUW-AS-APVictoriaUniversityofWellingtonNZ	false
130.195.171.216	unknown	New Zealand	23905	VUW-AS-APVictoriaUniversityofWellingtonNZ	false
130.195.118.82	unknown	New Zealand	23905	VUW-AS-APVictoriaUniversityofWellingtonNZ	false
130.195.133.153	unknown	New Zealand	23905	VUW-AS-APVictoriaUniversityofWellingtonNZ	false
130.195.142.194	unknown	New Zealand	23905	VUW-AS-APVictoriaUniversityofWellingtonNZ	false
130.195.187.124	unknown	New Zealand	23905	VUW-AS-APVictoriaUniversityofWellingtonNZ	false
130.195.47.179	unknown	New Zealand	23905	VUW-AS-APVictoriaUniversityofWellingtonNZ	false
130.195.38.128	unknown	New Zealand	23905	VUW-AS-APVictoriaUniversityofWellingtonNZ	false
130.195.198.163	unknown	New Zealand	23905	VUW-AS-APVictoriaUniversityofWellingtonNZ	false
130.195.110.7	unknown	New Zealand	23905	VUW-AS-APVictoriaUniversityofWellingtonNZ	false
130.195.38.125	unknown	New Zealand	23905	VUW-AS-APVictoriaUniversityofWellingtonNZ	false
130.195.126.127	unknown	New Zealand	23905	VUW-AS-APVictoriaUniversityofWellingtonNZ	false
130.195.24.249	unknown	New Zealand	23905	VUW-AS-APVictoriaUniversityofWellingtonNZ	false
130.195.87.235	unknown	New Zealand	23905	VUW-AS-APVictoriaUniversityofWellingtonNZ	false
130.195.110.4	unknown	New Zealand	23905	VUW-AS-APVictoriaUniversityofWellingtonNZ	false
130.195.56.129	unknown	New Zealand	23905	VUW-AS-APVictoriaUniversityofWellingtonNZ	false
130.195.143.55	unknown	New Zealand	23905	VUW-AS-APVictoriaUniversityofWellingtonNZ	false
130.195.5.5	unknown	New Zealand	23905	VUW-AS-APVictoriaUniversityofWellingtonNZ	false
130.195.171.205	unknown	New Zealand	23905	VUW-AS-APVictoriaUniversityofWellingtonNZ	false
130.195.56.126	unknown	New Zealand	23905	VUW-AS-APVictoriaUniversityofWellingtonNZ	false
130.195.198.164	unknown	New Zealand	23905	VUW-AS-APVictoriaUniversityofWellingtonNZ	false
130.195.213.54	unknown	New Zealand	23905	VUW-AS-APVictoriaUniversityofWellingtonNZ	false
130.195.180.88	unknown	New Zealand	23905	VUW-AS-APVictoriaUniversityofWellingtonNZ	false
130.195.180.86	unknown	New Zealand	23905	VUW-AS-APVictoriaUniversityofWellingtonNZ	false
130.195.189.9	unknown	New Zealand	23905	VUW-AS-APVictoriaUniversityofWellingtonNZ	false
130.195.175.91	unknown	New Zealand	23905	VUW-AS-APVictoriaUniversityofWellingtonNZ	false
130.195.213.58	unknown	New Zealand	23905	VUW-AS-APVictoriaUniversityofWellingtonNZ	false
130.195.175.97	unknown	New Zealand	23905	VUW-AS-APVictoriaUniversityofWellingtonNZ	false
130.195.24.255	unknown	New Zealand	23905	VUW-AS-APVictoriaUniversityofWellingtonNZ	false
130.195.175.98	unknown	New Zealand	23905	VUW-AS-APVictoriaUniversityofWellingtonNZ	false

General Information

Joe Sandbox version:	41.0.0 Charoite
Analysis ID:	1542346
Start date and time:	2024-10-25 20:04:08 +02:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 4m 33s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	default.jbs
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	4
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Sample name:	IXi8q1gF78.exe renamed because original name is a hash value
Original Sample Name:	378059b27606eae8b78d0ebcd8cf469ece63a8e36459ebb060739ac3bdb35d62.exe
Detection:	MAL
Classification:	mal96.evad.winEXE@1/0@0/100
EGA Information:	Successful, ratio: 100%
HCA Information:	Successful, ratio: 95% Number of executed functions: 28 Number of non-executed functions: 76
Cookbook Comments:	Found application associated with file extension: .exe

Warnings

Exclude process from analysis (whitelisted): dllhost.exe, WMIADAP.exe, SIHClient.exe
Excluded domains from analysis (whitelisted): ocsp.digicert.com, otelrules.azureedge.net, slscr.update.microsoft.com, ctldl.windowsupdate.com, fe3cr.delivery.mp.microsoft.com
VT rate limit hit for: IXi8q1gF78.exe

Simulations

Behavior and APIs

Time	Type	Description
14:05:53	API Interceptor	847x Sleep call for process: IXi8q1gF78.exe modified

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
VUW-AS-APVictoriaUniversityofWellingtonNZ	bin.armv7l.elf	Get hash	malicious	Mirai	Browse	130.195.142.185
	AvLj9c169F.elf	Get hash	malicious	Mirai, Moobot	Browse	130.195.101.206
	HgihoxqKX2.elf	Get hash	malicious	Gafgyt	Browse	130.195.148.227
	piHWNOmnbm.elf	Get hash	malicious	Mirai	Browse	130.195.72.182
	pn3mD4TOA5.elf	Get hash	malicious	Mirai	Browse	130.195.72.169
	5Yq5yucG5n.elf	Get hash	malicious	Mirai	Browse	130.195.236.215
	nog1a19oc3.elf	Get hash	malicious	Mirai	Browse	130.195.72.180
	TaNPXR0Onz.elf	Get hash	malicious	Mirai	Browse	130.195.72.158
	qpkbji2IL1.elf	Get hash	malicious	Mirai	Browse	130.195.24.245
	uRbPYsZ1j9.elf	Get hash	malicious	Mirai	Browse	130.195.72.151
VUW-AS-APVictoriaUniversityofWellingtonNZ	bin.armv7l.elf	Get hash	malicious	Mirai	Browse	130.195.142.185
	AvLj9c169F.elf	Get hash	malicious	Mirai, Moobot	Browse	130.195.101.206
	HgihoxqKX2.elf	Get hash	malicious	Gafgyt	Browse	130.195.148.227
	piHWNOmnbm.elf	Get hash	malicious	Mirai	Browse	130.195.72.182
	pn3mD4TOA5.elf	Get hash	malicious	Mirai	Browse	130.195.72.169
	5Yq5yucG5n.elf	Get hash	malicious	Mirai	Browse	130.195.236.215
	nog1a19oc3.elf	Get hash	malicious	Mirai	Browse	130.195.72.180
	TaNPXR0Onz.elf	Get hash	malicious	Mirai	Browse	130.195.72.158
	qpkbji2IL1.elf	Get hash	malicious	Mirai	Browse	130.195.24.245
	uRbPYsZ1j9.elf	Get hash	malicious	Mirai	Browse	130.195.72.151

File type:	PE32 executable (GUI) Intel 80386, for MS Windows
Entropy (8bit):	7.760165842078616
TrID:	Win32 Executable (generic) a (10002005/4) 99.96% Generic Win/DOS Executable (2004/3) 0.02% DOS Executable Generic (2002/1) 0.02% Autodesk FLIC Image File (extensions: flc, fli, cel) (7/3) 0.00%
File name:	IXi8q1gF78.exe
File size:	209'610 bytes
MD5:	4a877b33da7992ee741897eb26ce07f1
SHA1:	c951f9b852a6ee975f5e66ce6d9b3671fbffd989
SHA256:	378059b27606eae8b78d0ebcd8cf469ece63a8e36459ebb060739ac3bdb35d62
SHA512:	98b1055dd25dd9f8e7a556e2ebecb83642d27d60296ff810b560c3a0aaed8556f49364416387f15cc0c5a65c596734254721fadecd3bea9e0652d90073061382
SSDEEP:	6144:Sapf3t9bio6l0LFpOA+dQ41MEL9888889ygxQQonEem2SX8:Sapf3ni1lJA+dQ4XL98888815o/Ss
TLSH:	12249DCE9A94DCC3F997293A054471FBF274415936F9A055BEF04AECE0A0F9242B82DD
File Content Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$............p...p...p...o...p...o...p..Rich.g..........PE..L....2.%.................6...................P....@........................

File Icon


Icon Hash:	00928e8e8686b000

Static PE Info

General

Entrypoint:	0x4017f7
Entrypoint Section:	.text
Digitally signed:	false
Imagebase:	0x400000
Subsystem:	windows gui
Image File Characteristics:	RELOCS_STRIPPED, EXECUTABLE_IMAGE, LINE_NUMS_STRIPPED, LOCAL_SYMS_STRIPPED, 32BIT_MACHINE
DLL Characteristics:
Time Stamp:	0x25F632F9 [Thu Mar 8 10:24:57 1990 UTC]
TLS Callbacks:
CLR (.Net) Version:
OS Version Major:	4
OS Version Minor:	0
File Version Major:	4
File Version Minor:	0
Subsystem Version Major:	4
Subsystem Version Minor:	0
Import Hash:	be4dffb3bd263b236b578907d68239c6

Entrypoint Preview

Instruction
or ecx, ecx
movsx eax, ch
mov dword ptr [esp-10h], 0040D7F9h
or ecx, ecx
mov ebx, dword ptr [esp-10h]
mov dword ptr [ebx], C7D28B66h
movsx eax, ch
xor edx, edx
mov dl, 04h
add dword ptr [esp-10h], edx
mov ebp, ebp
add bp, bp
mov edx, dword ptr [esp-10h]
add dword ptr [edx], F9F02444h
add bp, bp
xor edx, edx
mov dl, 04h
add dword ptr [esp-10h], edx
ror ebx, 02h
mov ecx, dword ptr [esp-10h]
mov dword ptr [ecx], 660040A7h
movzx ebx, al
movsx ebx, ah
xor ebx, ebx
mov bl, 04h
add dword ptr [esp-10h], ebx
movsx ebx, ah
mov ecx, dword ptr [esp-10h]
add dword ptr [ecx], 5C8BD28Bh
neg esi
sub si, di
lea edx, dword ptr [edi+0040FC69h]
xor ebx, ebx
mov bl, 04h
add dword ptr [esp-10h], ebx
sub si, di
mov eax, dword ptr [esp-10h]
mov dword ptr [eax], 0381F024h
lea edx, dword ptr [edi+0040FC69h]
xor edx, edx
mov dl, 04h
add dword ptr [esp-10h], edx
lea edi, dword ptr [edx+0040FE69h]
mov edi, dword ptr [esp-10h]
mov eax, 5E876A03h
stosd
test bx, bp
xor ecx, ecx
mov cl, 04h
add dword ptr [esp-10h], ecx
add eax, eax
add cx, bp
mov edi, dword ptr [esp-10h]
mov eax, D4933381h
stosd
add cx, bp
movsx edx, dh
xor eax, eax
mov al, 04h

Rich Headers

Programming Language:

[ C ] VS98 (6.0) build 8168

Data Directories

Name	Virtual Address	Virtual Size
IMAGE_DIRECTORY_ENTRY_EXPORT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_IMPORT	0x4434	0x28
IMAGE_DIRECTORY_ENTRY_RESOURCE	0x0	0x0
IMAGE_DIRECTORY_ENTRY_EXCEPTION	0x0	0x0
IMAGE_DIRECTORY_ENTRY_SECURITY	0x0	0x0
IMAGE_DIRECTORY_ENTRY_BASERELOC	0x0	0x0
IMAGE_DIRECTORY_ENTRY_DEBUG	0x0	0x0
IMAGE_DIRECTORY_ENTRY_COPYRIGHT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_GLOBALPTR	0x0	0x0
IMAGE_DIRECTORY_ENTRY_TLS	0x0	0x0
IMAGE_DIRECTORY_ENTRY_LOAD_CONFIG	0x0	0x0
IMAGE_DIRECTORY_ENTRY_BOUND_IMPORT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_IAT	0x4484	0x28
IMAGE_DIRECTORY_ENTRY_DELAY_IMPORT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_COM_DESCRIPTOR	0x0	0x0
IMAGE_DIRECTORY_ENTRY_RESERVED	0x0	0x0

Sections

Name	Virtual Address	Virtual Size	Raw Size	MD5	Xored PE	ZLIB Complexity	File Type	Entropy	Characteristics
.text	0x1000	0x3428	0x3600	e6aea469ddd8daab162b059431db92b1	False	0.5013020833333334	data	6.594341169297741	IMAGE_SCN_CNT_CODE, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ
.rdatap	0x5000	0x10000	0x0	d41d8cd98f00b204e9800998ecf8427e	False	0	empty	0.0	IMAGE_SCN_CNT_UNINITIALIZED_DATA, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
.data	0x15000	0xa65a	0xa800	e8e6d48f60abb463715408eaf48cec2a	False	0.9975120907738095	data	7.99518483988409	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE

Imports

DLL	Import
KERNEL32.dll	EnumerateLocalComputerNamesW, Toolhelp32ReadProcessMemory, HeapWalk, GetVolumePathNamesForVolumeNameA, LocalHandle, ReadConsoleOutputCharacterA, SystemTimeToTzSpecificLocalTime, SetDefaultCommConfigA, OpenJobObjectA

Network Behavior

Suricata IDS Alerts

Timestamp	SID	Signature	Severity	Source IP	Dest IP	Protocol
2024-10-25T20:05:06.117817+0200	2003292	ET WORM Allaple ICMP Sweep Ping Outbound	1	192.168.2.5	130.195.71.161	ICMP
2024-10-25T20:05:09.038043+0200	2003293	ET WORM Allaple ICMP Sweep Reply Inbound	1	130.195.243.25	192.168.2.5	ICMP
2024-10-25T20:06:06.120413+0200	2003292	ET WORM Allaple ICMP Sweep Ping Outbound	1	192.168.2.5	130.195.19.157	ICMP
2024-10-25T20:06:10.951308+0200	2003293	ET WORM Allaple ICMP Sweep Reply Inbound	1	130.195.245.1	192.168.2.5	ICMP

Network Port Distribution

TCP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Oct 25, 2024 20:05:09.066755056 CEST	49704	139	192.168.2.5	130.195.243.25
Oct 25, 2024 20:05:10.073054075 CEST	49704	139	192.168.2.5	130.195.243.25
Oct 25, 2024 20:05:11.116619110 CEST	49705	139	192.168.2.5	130.195.5.5
Oct 25, 2024 20:05:12.073052883 CEST	49704	139	192.168.2.5	130.195.243.25
Oct 25, 2024 20:05:12.104258060 CEST	49705	139	192.168.2.5	130.195.5.5
Oct 25, 2024 20:05:14.119863987 CEST	49705	139	192.168.2.5	130.195.5.5
Oct 25, 2024 20:05:14.648582935 CEST	49706	139	192.168.2.5	130.195.196.194
Oct 25, 2024 20:05:15.073308945 CEST	49707	445	192.168.2.5	130.195.243.25
Oct 25, 2024 20:05:15.078752041 CEST	445	49707	130.195.243.25	192.168.2.5
Oct 25, 2024 20:05:15.078840017 CEST	49707	445	192.168.2.5	130.195.243.25
Oct 25, 2024 20:05:15.078900099 CEST	49707	445	192.168.2.5	130.195.243.25
Oct 25, 2024 20:05:15.079021931 CEST	49708	139	192.168.2.5	130.195.243.25
Oct 25, 2024 20:05:15.651118040 CEST	49706	139	192.168.2.5	130.195.196.194
Oct 25, 2024 20:05:16.088608980 CEST	49708	139	192.168.2.5	130.195.243.25
Oct 25, 2024 20:05:17.120166063 CEST	49709	445	192.168.2.5	130.195.5.5
Oct 25, 2024 20:05:17.125690937 CEST	445	49709	130.195.5.5	192.168.2.5
Oct 25, 2024 20:05:17.125855923 CEST	49709	445	192.168.2.5	130.195.5.5
Oct 25, 2024 20:05:17.126444101 CEST	49709	445	192.168.2.5	130.195.5.5
Oct 25, 2024 20:05:17.126642942 CEST	49710	139	192.168.2.5	130.195.5.5
Oct 25, 2024 20:05:17.466365099 CEST	49711	139	192.168.2.5	130.195.213.54
Oct 25, 2024 20:05:17.651398897 CEST	49706	139	192.168.2.5	130.195.196.194
Oct 25, 2024 20:05:18.088989973 CEST	49708	139	192.168.2.5	130.195.243.25
Oct 25, 2024 20:05:18.135601044 CEST	49710	139	192.168.2.5	130.195.5.5
Oct 25, 2024 20:05:18.479243040 CEST	49711	139	192.168.2.5	130.195.213.54
Oct 25, 2024 20:05:20.135643959 CEST	49710	139	192.168.2.5	130.195.5.5
Oct 25, 2024 20:05:20.178905964 CEST	49713	139	192.168.2.5	130.195.244.10
Oct 25, 2024 20:05:20.479242086 CEST	49711	139	192.168.2.5	130.195.213.54
Oct 25, 2024 20:05:20.651498079 CEST	49714	445	192.168.2.5	130.195.196.194
Oct 25, 2024 20:05:21.073334932 CEST	49715	445	192.168.2.5	130.195.243.25
Oct 25, 2024 20:05:21.182338953 CEST	49713	139	192.168.2.5	130.195.244.10
Oct 25, 2024 20:05:21.450634956 CEST	445	49714	130.195.196.194	192.168.2.5
Oct 25, 2024 20:05:21.451822996 CEST	445	49715	130.195.243.25	192.168.2.5
Oct 25, 2024 20:05:21.451932907 CEST	49714	445	192.168.2.5	130.195.196.194
Oct 25, 2024 20:05:21.452045918 CEST	49714	445	192.168.2.5	130.195.196.194
Oct 25, 2024 20:05:21.452048063 CEST	49715	445	192.168.2.5	130.195.243.25
Oct 25, 2024 20:05:21.452099085 CEST	49715	445	192.168.2.5	130.195.243.25
Oct 25, 2024 20:05:21.452208042 CEST	49716	139	192.168.2.5	130.195.196.194
Oct 25, 2024 20:05:21.457344055 CEST	445	49715	130.195.243.25	192.168.2.5
Oct 25, 2024 20:05:21.506117105 CEST	49717	139	192.168.2.5	130.195.213.58
Oct 25, 2024 20:05:21.507090092 CEST	49718	139	192.168.2.5	130.195.213.23
Oct 25, 2024 20:05:22.447993994 CEST	49716	139	192.168.2.5	130.195.196.194
Oct 25, 2024 20:05:22.510534048 CEST	49717	139	192.168.2.5	130.195.213.58
Oct 25, 2024 20:05:22.515016079 CEST	49718	139	192.168.2.5	130.195.213.23
Oct 25, 2024 20:05:23.136029005 CEST	49721	445	192.168.2.5	130.195.5.5
Oct 25, 2024 20:05:23.141570091 CEST	445	49721	130.195.5.5	192.168.2.5
Oct 25, 2024 20:05:23.141695023 CEST	49721	445	192.168.2.5	130.195.5.5
Oct 25, 2024 20:05:23.141751051 CEST	49721	445	192.168.2.5	130.195.5.5
Oct 25, 2024 20:05:23.147380114 CEST	445	49721	130.195.5.5	192.168.2.5
Oct 25, 2024 20:05:23.197983027 CEST	49713	139	192.168.2.5	130.195.244.10
Oct 25, 2024 20:05:23.463928938 CEST	49728	445	192.168.2.5	130.195.213.54
Oct 25, 2024 20:05:23.469476938 CEST	445	49728	130.195.213.54	192.168.2.5
Oct 25, 2024 20:05:23.469548941 CEST	49728	445	192.168.2.5	130.195.213.54
Oct 25, 2024 20:05:23.469588041 CEST	49728	445	192.168.2.5	130.195.213.54
Oct 25, 2024 20:05:23.469860077 CEST	49729	139	192.168.2.5	130.195.213.54
Oct 25, 2024 20:05:24.463727951 CEST	49716	139	192.168.2.5	130.195.196.194
Oct 25, 2024 20:05:24.479249954 CEST	49729	139	192.168.2.5	130.195.213.54
Oct 25, 2024 20:05:24.510482073 CEST	49718	139	192.168.2.5	130.195.213.23
Oct 25, 2024 20:05:24.510617018 CEST	49717	139	192.168.2.5	130.195.213.58
Oct 25, 2024 20:05:26.182642937 CEST	49748	445	192.168.2.5	130.195.244.10
Oct 25, 2024 20:05:26.188219070 CEST	445	49748	130.195.244.10	192.168.2.5
Oct 25, 2024 20:05:26.188318968 CEST	49748	445	192.168.2.5	130.195.244.10
Oct 25, 2024 20:05:26.188402891 CEST	49748	445	192.168.2.5	130.195.244.10
Oct 25, 2024 20:05:26.188564062 CEST	49749	139	192.168.2.5	130.195.244.10
Oct 25, 2024 20:05:26.494849920 CEST	49729	139	192.168.2.5	130.195.213.54
Oct 25, 2024 20:05:27.197964907 CEST	49749	139	192.168.2.5	130.195.244.10
Oct 25, 2024 20:05:27.448040962 CEST	49715	445	192.168.2.5	130.195.243.25
Oct 25, 2024 20:05:27.448507071 CEST	49756	445	192.168.2.5	130.195.196.194
Oct 25, 2024 20:05:27.450262070 CEST	49757	139	192.168.2.5	130.195.243.25
Oct 25, 2024 20:05:27.454454899 CEST	445	49756	130.195.196.194	192.168.2.5
Oct 25, 2024 20:05:27.454528093 CEST	49756	445	192.168.2.5	130.195.196.194
Oct 25, 2024 20:05:27.454593897 CEST	49756	445	192.168.2.5	130.195.196.194
Oct 25, 2024 20:05:27.459932089 CEST	445	49756	130.195.196.194	192.168.2.5
Oct 25, 2024 20:05:27.510680914 CEST	49758	445	192.168.2.5	130.195.213.58
Oct 25, 2024 20:05:27.510858059 CEST	49759	445	192.168.2.5	130.195.213.23
Oct 25, 2024 20:05:27.516022921 CEST	445	49758	130.195.213.58	192.168.2.5
Oct 25, 2024 20:05:27.516091108 CEST	49758	445	192.168.2.5	130.195.213.58
Oct 25, 2024 20:05:27.516134024 CEST	49758	445	192.168.2.5	130.195.213.58
Oct 25, 2024 20:05:27.516141891 CEST	445	49759	130.195.213.23	192.168.2.5
Oct 25, 2024 20:05:27.516264915 CEST	49759	445	192.168.2.5	130.195.213.23
Oct 25, 2024 20:05:27.516311884 CEST	49760	139	192.168.2.5	130.195.213.58
Oct 25, 2024 20:05:27.516380072 CEST	49759	445	192.168.2.5	130.195.213.23
Oct 25, 2024 20:05:27.516489983 CEST	49761	139	192.168.2.5	130.195.213.23
Oct 25, 2024 20:05:28.126163006 CEST	445	49756	130.195.196.194	192.168.2.5
Oct 25, 2024 20:05:28.126243114 CEST	49756	445	192.168.2.5	130.195.196.194
Oct 25, 2024 20:05:28.126305103 CEST	49756	445	192.168.2.5	130.195.196.194
Oct 25, 2024 20:05:28.126482010 CEST	49766	139	192.168.2.5	130.195.196.194
Oct 25, 2024 20:05:28.447997093 CEST	49757	139	192.168.2.5	130.195.243.25
Oct 25, 2024 20:05:28.510473967 CEST	49760	139	192.168.2.5	130.195.213.58
Oct 25, 2024 20:05:28.510529041 CEST	49761	139	192.168.2.5	130.195.213.23
Oct 25, 2024 20:05:29.135584116 CEST	49766	139	192.168.2.5	130.195.196.194
Oct 25, 2024 20:05:29.135588884 CEST	49721	445	192.168.2.5	130.195.5.5
Oct 25, 2024 20:05:29.144767046 CEST	49773	139	192.168.2.5	130.195.5.5
Oct 25, 2024 20:05:29.198256969 CEST	49749	139	192.168.2.5	130.195.244.10
Oct 25, 2024 20:05:29.464396000 CEST	49774	445	192.168.2.5	130.195.213.54
Oct 25, 2024 20:05:29.470057964 CEST	445	49774	130.195.213.54	192.168.2.5
Oct 25, 2024 20:05:29.470202923 CEST	49774	445	192.168.2.5	130.195.213.54
Oct 25, 2024 20:05:29.470204115 CEST	49774	445	192.168.2.5	130.195.213.54
Oct 25, 2024 20:05:29.476241112 CEST	445	49774	130.195.213.54	192.168.2.5
Oct 25, 2024 20:05:30.135601044 CEST	49773	139	192.168.2.5	130.195.5.5
Oct 25, 2024 20:05:30.463612080 CEST	49757	139	192.168.2.5	130.195.243.25
Oct 25, 2024 20:05:30.510520935 CEST	49760	139	192.168.2.5	130.195.213.58
Oct 25, 2024 20:05:30.510524988 CEST	49761	139	192.168.2.5	130.195.213.23
Oct 25, 2024 20:05:31.135616064 CEST	49766	139	192.168.2.5	130.195.196.194
Oct 25, 2024 20:05:32.135510921 CEST	49773	139	192.168.2.5	130.195.5.5
Oct 25, 2024 20:05:32.182931900 CEST	49790	445	192.168.2.5	130.195.244.10
Oct 25, 2024 20:05:32.188373089 CEST	445	49790	130.195.244.10	192.168.2.5
Oct 25, 2024 20:05:32.188600063 CEST	49790	445	192.168.2.5	130.195.244.10
Oct 25, 2024 20:05:32.188600063 CEST	49790	445	192.168.2.5	130.195.244.10
Oct 25, 2024 20:05:32.193996906 CEST	445	49790	130.195.244.10	192.168.2.5
Oct 25, 2024 20:05:32.720855951 CEST	445	49790	130.195.244.10	192.168.2.5
Oct 25, 2024 20:05:32.722732067 CEST	49790	445	192.168.2.5	130.195.244.10
Oct 25, 2024 20:05:32.722732067 CEST	49790	445	192.168.2.5	130.195.244.10
Oct 25, 2024 20:05:32.722852945 CEST	49796	139	192.168.2.5	130.195.244.10
Oct 25, 2024 20:05:32.728991985 CEST	49797	139	192.168.2.5	130.195.250.100
Oct 25, 2024 20:05:32.957331896 CEST	49798	139	192.168.2.5	130.195.240.22
Oct 25, 2024 20:05:33.464344025 CEST	49804	445	192.168.2.5	130.195.243.25
Oct 25, 2024 20:05:33.469755888 CEST	445	49804	130.195.243.25	192.168.2.5
Oct 25, 2024 20:05:33.469836950 CEST	49804	445	192.168.2.5	130.195.243.25
Oct 25, 2024 20:05:33.469923019 CEST	49804	445	192.168.2.5	130.195.243.25
Oct 25, 2024 20:05:33.475280046 CEST	445	49804	130.195.243.25	192.168.2.5
Oct 25, 2024 20:05:33.521450043 CEST	49805	445	192.168.2.5	130.195.213.23
Oct 25, 2024 20:05:33.521579027 CEST	49806	445	192.168.2.5	130.195.213.58
Oct 25, 2024 20:05:33.527066946 CEST	445	49805	130.195.213.23	192.168.2.5
Oct 25, 2024 20:05:33.527107000 CEST	445	49806	130.195.213.58	192.168.2.5
Oct 25, 2024 20:05:33.527169943 CEST	49805	445	192.168.2.5	130.195.213.23
Oct 25, 2024 20:05:33.527203083 CEST	49806	445	192.168.2.5	130.195.213.58
Oct 25, 2024 20:05:33.527276039 CEST	49805	445	192.168.2.5	130.195.213.23
Oct 25, 2024 20:05:33.527326107 CEST	49806	445	192.168.2.5	130.195.213.58
Oct 25, 2024 20:05:33.532679081 CEST	445	49805	130.195.213.23	192.168.2.5
Oct 25, 2024 20:05:33.532820940 CEST	445	49806	130.195.213.58	192.168.2.5
Oct 25, 2024 20:05:33.713618040 CEST	49796	139	192.168.2.5	130.195.244.10
Oct 25, 2024 20:05:33.729373932 CEST	49797	139	192.168.2.5	130.195.250.100
Oct 25, 2024 20:05:33.878103018 CEST	49807	139	192.168.2.5	130.195.245.29
Oct 25, 2024 20:05:33.963740110 CEST	49798	139	192.168.2.5	130.195.240.22
Oct 25, 2024 20:05:34.121988058 CEST	49809	445	192.168.2.5	130.195.196.194
Oct 25, 2024 20:05:34.127708912 CEST	445	49809	130.195.196.194	192.168.2.5
Oct 25, 2024 20:05:34.127782106 CEST	49809	445	192.168.2.5	130.195.196.194
Oct 25, 2024 20:05:34.127871990 CEST	49809	445	192.168.2.5	130.195.196.194
Oct 25, 2024 20:05:34.133605003 CEST	445	49809	130.195.196.194	192.168.2.5
Oct 25, 2024 20:05:34.801516056 CEST	445	49809	130.195.196.194	192.168.2.5
Oct 25, 2024 20:05:34.801579952 CEST	49809	445	192.168.2.5	130.195.196.194
Oct 25, 2024 20:05:34.801625013 CEST	49809	445	192.168.2.5	130.195.196.194
Oct 25, 2024 20:05:34.801825047 CEST	49814	139	192.168.2.5	130.195.196.194
Oct 25, 2024 20:05:34.885510921 CEST	49807	139	192.168.2.5	130.195.245.29
Oct 25, 2024 20:05:35.135977030 CEST	49818	445	192.168.2.5	130.195.5.5
Oct 25, 2024 20:05:35.141776085 CEST	445	49818	130.195.5.5	192.168.2.5
Oct 25, 2024 20:05:35.141864061 CEST	49818	445	192.168.2.5	130.195.5.5
Oct 25, 2024 20:05:35.142016888 CEST	49818	445	192.168.2.5	130.195.5.5
Oct 25, 2024 20:05:35.147450924 CEST	445	49818	130.195.5.5	192.168.2.5
Oct 25, 2024 20:05:35.463726044 CEST	49774	445	192.168.2.5	130.195.213.54
Oct 25, 2024 20:05:35.463952065 CEST	49821	139	192.168.2.5	130.195.213.54
Oct 25, 2024 20:05:35.512159109 CEST	49822	139	192.168.2.5	130.195.5.24
Oct 25, 2024 20:05:35.713742971 CEST	49796	139	192.168.2.5	130.195.244.10
Oct 25, 2024 20:05:35.744868994 CEST	49797	139	192.168.2.5	130.195.250.100
Oct 25, 2024 20:05:35.807420015 CEST	49814	139	192.168.2.5	130.195.196.194
Oct 25, 2024 20:05:35.963610888 CEST	49798	139	192.168.2.5	130.195.240.22
Oct 25, 2024 20:05:36.463664055 CEST	49821	139	192.168.2.5	130.195.213.54
Oct 25, 2024 20:05:36.510476112 CEST	49822	139	192.168.2.5	130.195.5.24
Oct 25, 2024 20:05:36.885494947 CEST	49807	139	192.168.2.5	130.195.245.29
Oct 25, 2024 20:05:37.807359934 CEST	49814	139	192.168.2.5	130.195.196.194
Oct 25, 2024 20:05:38.463799953 CEST	49821	139	192.168.2.5	130.195.213.54
Oct 25, 2024 20:05:38.512423038 CEST	49822	139	192.168.2.5	130.195.5.24
Oct 25, 2024 20:05:38.729855061 CEST	49842	445	192.168.2.5	130.195.244.10
Oct 25, 2024 20:05:38.729870081 CEST	49841	445	192.168.2.5	130.195.250.100
Oct 25, 2024 20:05:38.735588074 CEST	445	49842	130.195.244.10	192.168.2.5
Oct 25, 2024 20:05:38.735620975 CEST	445	49841	130.195.250.100	192.168.2.5
Oct 25, 2024 20:05:38.735886097 CEST	49842	445	192.168.2.5	130.195.244.10
Oct 25, 2024 20:05:38.736355066 CEST	49841	445	192.168.2.5	130.195.250.100
Oct 25, 2024 20:05:38.736442089 CEST	49841	445	192.168.2.5	130.195.250.100
Oct 25, 2024 20:05:38.736449957 CEST	49842	445	192.168.2.5	130.195.244.10
Oct 25, 2024 20:05:38.736565113 CEST	49843	139	192.168.2.5	130.195.250.100
Oct 25, 2024 20:05:38.741914988 CEST	445	49842	130.195.244.10	192.168.2.5
Oct 25, 2024 20:05:38.964180946 CEST	49845	445	192.168.2.5	130.195.240.22
Oct 25, 2024 20:05:38.969664097 CEST	445	49845	130.195.240.22	192.168.2.5
Oct 25, 2024 20:05:38.969753981 CEST	49845	445	192.168.2.5	130.195.240.22
Oct 25, 2024 20:05:38.969876051 CEST	49845	445	192.168.2.5	130.195.240.22
Oct 25, 2024 20:05:38.970024109 CEST	49846	139	192.168.2.5	130.195.240.22
Oct 25, 2024 20:05:39.314019918 CEST	445	49842	130.195.244.10	192.168.2.5
Oct 25, 2024 20:05:39.314105034 CEST	49842	445	192.168.2.5	130.195.244.10
Oct 25, 2024 20:05:39.314135075 CEST	49842	445	192.168.2.5	130.195.244.10
Oct 25, 2024 20:05:39.314317942 CEST	49847	139	192.168.2.5	130.195.244.10
Oct 25, 2024 20:05:39.463738918 CEST	49804	445	192.168.2.5	130.195.243.25
Oct 25, 2024 20:05:39.467590094 CEST	49850	139	192.168.2.5	130.195.243.25
Oct 25, 2024 20:05:39.526156902 CEST	49805	445	192.168.2.5	130.195.213.23
Oct 25, 2024 20:05:39.526160002 CEST	49806	445	192.168.2.5	130.195.213.58
Oct 25, 2024 20:05:39.526417971 CEST	49851	139	192.168.2.5	130.195.213.23
Oct 25, 2024 20:05:39.526473045 CEST	49852	139	192.168.2.5	130.195.213.58
Oct 25, 2024 20:05:39.737205029 CEST	49856	139	192.168.2.5	130.195.216.21
Oct 25, 2024 20:05:39.744854927 CEST	49843	139	192.168.2.5	130.195.250.100
Oct 25, 2024 20:05:39.870266914 CEST	49857	445	192.168.2.5	130.195.245.29
Oct 25, 2024 20:05:39.876110077 CEST	445	49857	130.195.245.29	192.168.2.5
Oct 25, 2024 20:05:39.876454115 CEST	49857	445	192.168.2.5	130.195.245.29
Oct 25, 2024 20:05:39.876519918 CEST	49857	445	192.168.2.5	130.195.245.29
Oct 25, 2024 20:05:39.876686096 CEST	49858	139	192.168.2.5	130.195.245.29
Oct 25, 2024 20:05:39.979249954 CEST	49846	139	192.168.2.5	130.195.240.22
Oct 25, 2024 20:05:40.133435965 CEST	49859	139	192.168.2.5	130.195.245.14
Oct 25, 2024 20:05:40.323076010 CEST	49847	139	192.168.2.5	130.195.244.10
Oct 25, 2024 20:05:40.479229927 CEST	49850	139	192.168.2.5	130.195.243.25
Oct 25, 2024 20:05:40.526335001 CEST	49852	139	192.168.2.5	130.195.213.58
Oct 25, 2024 20:05:40.526335001 CEST	49851	139	192.168.2.5	130.195.213.23
Oct 25, 2024 20:05:40.744882107 CEST	49856	139	192.168.2.5	130.195.216.21
Oct 25, 2024 20:05:40.807878017 CEST	49865	445	192.168.2.5	130.195.196.194
Oct 25, 2024 20:05:40.813771009 CEST	445	49865	130.195.196.194	192.168.2.5
Oct 25, 2024 20:05:40.816478968 CEST	49865	445	192.168.2.5	130.195.196.194
Oct 25, 2024 20:05:40.816843987 CEST	49865	445	192.168.2.5	130.195.196.194
Oct 25, 2024 20:05:40.822320938 CEST	445	49865	130.195.196.194	192.168.2.5
Oct 25, 2024 20:05:40.885623932 CEST	49858	139	192.168.2.5	130.195.245.29
Oct 25, 2024 20:05:41.119842052 CEST	49859	139	192.168.2.5	130.195.245.14
Oct 25, 2024 20:05:41.151212931 CEST	49818	445	192.168.2.5	130.195.5.5
Oct 25, 2024 20:05:41.153260946 CEST	49866	139	192.168.2.5	130.195.5.5
Oct 25, 2024 20:05:41.479741096 CEST	49870	445	192.168.2.5	130.195.213.54
Oct 25, 2024 20:05:41.482059956 CEST	445	49865	130.195.196.194	192.168.2.5
Oct 25, 2024 20:05:41.482212067 CEST	49865	445	192.168.2.5	130.195.196.194
Oct 25, 2024 20:05:41.482242107 CEST	49865	445	192.168.2.5	130.195.196.194
Oct 25, 2024 20:05:41.482547998 CEST	49871	139	192.168.2.5	130.195.196.194
Oct 25, 2024 20:05:41.485266924 CEST	445	49870	130.195.213.54	192.168.2.5
Oct 25, 2024 20:05:41.488476992 CEST	49870	445	192.168.2.5	130.195.213.54
Oct 25, 2024 20:05:41.489402056 CEST	49870	445	192.168.2.5	130.195.213.54
Oct 25, 2024 20:05:41.495393991 CEST	445	49870	130.195.213.54	192.168.2.5
Oct 25, 2024 20:05:41.513775110 CEST	49873	139	192.168.2.5	130.195.243.14
Oct 25, 2024 20:05:41.526314974 CEST	49874	445	192.168.2.5	130.195.5.24
Oct 25, 2024 20:05:41.531861067 CEST	445	49874	130.195.5.24	192.168.2.5
Oct 25, 2024 20:05:41.531933069 CEST	49874	445	192.168.2.5	130.195.5.24
Oct 25, 2024 20:05:41.531961918 CEST	49874	445	192.168.2.5	130.195.5.24
Oct 25, 2024 20:05:41.532099962 CEST	49875	139	192.168.2.5	130.195.5.24
Oct 25, 2024 20:05:41.716167927 CEST	49877	139	192.168.2.5	130.195.213.9
Oct 25, 2024 20:05:41.760462046 CEST	49843	139	192.168.2.5	130.195.250.100
Oct 25, 2024 20:05:41.979334116 CEST	49846	139	192.168.2.5	130.195.240.22
Oct 25, 2024 20:05:42.166910887 CEST	49866	139	192.168.2.5	130.195.5.5
Oct 25, 2024 20:05:42.338723898 CEST	49847	139	192.168.2.5	130.195.244.10
Oct 25, 2024 20:05:42.479223013 CEST	49850	139	192.168.2.5	130.195.243.25
Oct 25, 2024 20:05:42.479250908 CEST	49871	139	192.168.2.5	130.195.196.194
Oct 25, 2024 20:05:42.526190042 CEST	49873	139	192.168.2.5	130.195.243.14
Oct 25, 2024 20:05:42.526302099 CEST	49852	139	192.168.2.5	130.195.213.58
Oct 25, 2024 20:05:42.526303053 CEST	49851	139	192.168.2.5	130.195.213.23
Oct 25, 2024 20:05:42.528393984 CEST	49875	139	192.168.2.5	130.195.5.24
Oct 25, 2024 20:05:42.729336977 CEST	49877	139	192.168.2.5	130.195.213.9
Oct 25, 2024 20:05:42.760487080 CEST	49856	139	192.168.2.5	130.195.216.21
Oct 25, 2024 20:05:42.885508060 CEST	49858	139	192.168.2.5	130.195.245.29
Oct 25, 2024 20:05:43.135469913 CEST	49859	139	192.168.2.5	130.195.245.14
Oct 25, 2024 20:05:44.182342052 CEST	49866	139	192.168.2.5	130.195.5.5
Oct 25, 2024 20:05:44.479262114 CEST	49871	139	192.168.2.5	130.195.196.194
Oct 25, 2024 20:05:44.541733980 CEST	49873	139	192.168.2.5	130.195.243.14
Oct 25, 2024 20:05:44.542665958 CEST	49875	139	192.168.2.5	130.195.5.24
Oct 25, 2024 20:05:44.729373932 CEST	49877	139	192.168.2.5	130.195.213.9
Oct 25, 2024 20:05:44.745163918 CEST	49894	445	192.168.2.5	130.195.250.100
Oct 25, 2024 20:05:44.750694036 CEST	445	49894	130.195.250.100	192.168.2.5
Oct 25, 2024 20:05:44.756467104 CEST	49894	445	192.168.2.5	130.195.250.100
Oct 25, 2024 20:05:44.756556988 CEST	49894	445	192.168.2.5	130.195.250.100
Oct 25, 2024 20:05:44.762463093 CEST	445	49894	130.195.250.100	192.168.2.5
Oct 25, 2024 20:05:44.979738951 CEST	49897	445	192.168.2.5	130.195.240.22
Oct 25, 2024 20:05:44.985641956 CEST	445	49897	130.195.240.22	192.168.2.5
Oct 25, 2024 20:05:44.985732079 CEST	49897	445	192.168.2.5	130.195.240.22
Oct 25, 2024 20:05:44.985852003 CEST	49897	445	192.168.2.5	130.195.240.22
Oct 25, 2024 20:05:44.991384029 CEST	445	49897	130.195.240.22	192.168.2.5
Oct 25, 2024 20:05:45.323553085 CEST	49900	445	192.168.2.5	130.195.244.10
Oct 25, 2024 20:05:45.329160929 CEST	445	49900	130.195.244.10	192.168.2.5
Oct 25, 2024 20:05:45.331600904 CEST	49900	445	192.168.2.5	130.195.244.10
Oct 25, 2024 20:05:45.331600904 CEST	49900	445	192.168.2.5	130.195.244.10
Oct 25, 2024 20:05:45.337244987 CEST	445	49900	130.195.244.10	192.168.2.5
Oct 25, 2024 20:05:45.481053114 CEST	49901	445	192.168.2.5	130.195.243.25
Oct 25, 2024 20:05:45.486536026 CEST	445	49901	130.195.243.25	192.168.2.5
Oct 25, 2024 20:05:45.486649036 CEST	49901	445	192.168.2.5	130.195.243.25
Oct 25, 2024 20:05:45.487348080 CEST	49901	445	192.168.2.5	130.195.243.25
Oct 25, 2024 20:05:45.492779016 CEST	445	49901	130.195.243.25	192.168.2.5
Oct 25, 2024 20:05:45.541955948 CEST	49902	445	192.168.2.5	130.195.213.58
Oct 25, 2024 20:05:45.542053938 CEST	49903	445	192.168.2.5	130.195.213.23
Oct 25, 2024 20:05:45.547517061 CEST	445	49902	130.195.213.58	192.168.2.5
Oct 25, 2024 20:05:45.547635078 CEST	49902	445	192.168.2.5	130.195.213.58
Oct 25, 2024 20:05:45.547696114 CEST	49902	445	192.168.2.5	130.195.213.58
Oct 25, 2024 20:05:45.548650026 CEST	445	49903	130.195.213.23	192.168.2.5
Oct 25, 2024 20:05:45.548753977 CEST	49903	445	192.168.2.5	130.195.213.23
Oct 25, 2024 20:05:45.548767090 CEST	49903	445	192.168.2.5	130.195.213.23
Oct 25, 2024 20:05:45.553143024 CEST	445	49902	130.195.213.58	192.168.2.5
Oct 25, 2024 20:05:45.554589033 CEST	445	49903	130.195.213.23	192.168.2.5
Oct 25, 2024 20:05:45.745237112 CEST	49906	445	192.168.2.5	130.195.216.21
Oct 25, 2024 20:05:45.752437115 CEST	445	49906	130.195.216.21	192.168.2.5
Oct 25, 2024 20:05:45.755095005 CEST	49906	445	192.168.2.5	130.195.216.21
Oct 25, 2024 20:05:45.755212069 CEST	49906	445	192.168.2.5	130.195.216.21
Oct 25, 2024 20:05:45.755409956 CEST	49907	139	192.168.2.5	130.195.216.21
Oct 25, 2024 20:05:45.854535103 CEST	445	49900	130.195.244.10	192.168.2.5
Oct 25, 2024 20:05:45.854844093 CEST	49900	445	192.168.2.5	130.195.244.10
Oct 25, 2024 20:05:45.854844093 CEST	49900	445	192.168.2.5	130.195.244.10
Oct 25, 2024 20:05:45.854914904 CEST	49909	139	192.168.2.5	130.195.244.10
Oct 25, 2024 20:05:45.870065928 CEST	49910	445	192.168.2.5	130.195.245.29
Oct 25, 2024 20:05:45.875731945 CEST	445	49910	130.195.245.29	192.168.2.5
Oct 25, 2024 20:05:45.875809908 CEST	49910	445	192.168.2.5	130.195.245.29
Oct 25, 2024 20:05:45.875885010 CEST	49910	445	192.168.2.5	130.195.245.29
Oct 25, 2024 20:05:45.881459951 CEST	445	49910	130.195.245.29	192.168.2.5
Oct 25, 2024 20:05:46.135842085 CEST	49913	445	192.168.2.5	130.195.245.14
Oct 25, 2024 20:05:46.141638994 CEST	445	49913	130.195.245.14	192.168.2.5
Oct 25, 2024 20:05:46.141881943 CEST	49913	445	192.168.2.5	130.195.245.14
Oct 25, 2024 20:05:46.141882896 CEST	49913	445	192.168.2.5	130.195.245.14
Oct 25, 2024 20:05:46.142041922 CEST	49914	139	192.168.2.5	130.195.245.14
Oct 25, 2024 20:05:46.760498047 CEST	49907	139	192.168.2.5	130.195.216.21
Oct 25, 2024 20:05:46.854228020 CEST	49909	139	192.168.2.5	130.195.244.10
Oct 25, 2024 20:05:47.151236057 CEST	49914	139	192.168.2.5	130.195.245.14
Oct 25, 2024 20:05:47.167172909 CEST	49919	445	192.168.2.5	130.195.5.5
Oct 25, 2024 20:05:47.172899961 CEST	445	49919	130.195.5.5	192.168.2.5
Oct 25, 2024 20:05:47.172986031 CEST	49919	445	192.168.2.5	130.195.5.5
Oct 25, 2024 20:05:47.173047066 CEST	49919	445	192.168.2.5	130.195.5.5
Oct 25, 2024 20:05:47.178539038 CEST	445	49919	130.195.5.5	192.168.2.5
Oct 25, 2024 20:05:47.479428053 CEST	49870	445	192.168.2.5	130.195.213.54
Oct 25, 2024 20:05:47.479530096 CEST	49923	139	192.168.2.5	130.195.213.54
Oct 25, 2024 20:05:47.479633093 CEST	49922	445	192.168.2.5	130.195.196.194
Oct 25, 2024 20:05:47.485241890 CEST	445	49922	130.195.196.194	192.168.2.5
Oct 25, 2024 20:05:47.485482931 CEST	49922	445	192.168.2.5	130.195.196.194
Oct 25, 2024 20:05:47.485483885 CEST	49922	445	192.168.2.5	130.195.196.194
Oct 25, 2024 20:05:47.491343021 CEST	445	49922	130.195.196.194	192.168.2.5
Oct 25, 2024 20:05:47.526777983 CEST	49925	445	192.168.2.5	130.195.243.14
Oct 25, 2024 20:05:47.532651901 CEST	445	49925	130.195.243.14	192.168.2.5
Oct 25, 2024 20:05:47.532732964 CEST	49925	445	192.168.2.5	130.195.243.14
Oct 25, 2024 20:05:47.532799959 CEST	49925	445	192.168.2.5	130.195.243.14
Oct 25, 2024 20:05:47.532937050 CEST	49926	139	192.168.2.5	130.195.243.14
Oct 25, 2024 20:05:47.542047024 CEST	49927	445	192.168.2.5	130.195.5.24
Oct 25, 2024 20:05:47.547665119 CEST	445	49927	130.195.5.24	192.168.2.5
Oct 25, 2024 20:05:47.547875881 CEST	49927	445	192.168.2.5	130.195.5.24
Oct 25, 2024 20:05:47.547877073 CEST	49927	445	192.168.2.5	130.195.5.24
Oct 25, 2024 20:05:47.553554058 CEST	445	49927	130.195.5.24	192.168.2.5
Oct 25, 2024 20:05:47.713860035 CEST	49930	445	192.168.2.5	130.195.213.9
Oct 25, 2024 20:05:47.719469070 CEST	445	49930	130.195.213.9	192.168.2.5
Oct 25, 2024 20:05:47.719739914 CEST	49930	445	192.168.2.5	130.195.213.9
Oct 25, 2024 20:05:47.719741106 CEST	49930	445	192.168.2.5	130.195.213.9
Oct 25, 2024 20:05:47.719919920 CEST	49931	139	192.168.2.5	130.195.213.9
Oct 25, 2024 20:05:48.150156975 CEST	445	49922	130.195.196.194	192.168.2.5
Oct 25, 2024 20:05:48.150394917 CEST	49922	445	192.168.2.5	130.195.196.194
Oct 25, 2024 20:05:48.164505005 CEST	49922	445	192.168.2.5	130.195.196.194
Oct 25, 2024 20:05:48.164716959 CEST	49933	139	192.168.2.5	130.195.196.194
Oct 25, 2024 20:05:48.479250908 CEST	49923	139	192.168.2.5	130.195.213.54
Oct 25, 2024 20:05:48.541724920 CEST	49926	139	192.168.2.5	130.195.243.14
Oct 25, 2024 20:05:48.729238033 CEST	49931	139	192.168.2.5	130.195.213.9
Oct 25, 2024 20:05:48.760529995 CEST	49907	139	192.168.2.5	130.195.216.21
Oct 25, 2024 20:05:48.869874001 CEST	49909	139	192.168.2.5	130.195.244.10
Oct 25, 2024 20:05:49.166933060 CEST	49914	139	192.168.2.5	130.195.245.14
Oct 25, 2024 20:05:49.170227051 CEST	49933	139	192.168.2.5	130.195.196.194
Oct 25, 2024 20:05:50.479232073 CEST	49923	139	192.168.2.5	130.195.213.54
Oct 25, 2024 20:05:50.541735888 CEST	49926	139	192.168.2.5	130.195.243.14
Oct 25, 2024 20:05:50.744852066 CEST	49931	139	192.168.2.5	130.195.213.9
Oct 25, 2024 20:05:50.744999886 CEST	49894	445	192.168.2.5	130.195.250.100
Oct 25, 2024 20:05:50.745110989 CEST	49949	139	192.168.2.5	130.195.250.100
Oct 25, 2024 20:05:50.979386091 CEST	49897	445	192.168.2.5	130.195.240.22
Oct 25, 2024 20:05:50.979729891 CEST	49950	139	192.168.2.5	130.195.240.22
Oct 25, 2024 20:05:51.166843891 CEST	49933	139	192.168.2.5	130.195.196.194
Oct 25, 2024 20:05:51.429604053 CEST	49955	139	192.168.2.5	130.195.3.26
Oct 25, 2024 20:05:51.479396105 CEST	49901	445	192.168.2.5	130.195.243.25
Oct 25, 2024 20:05:51.481981993 CEST	49956	139	192.168.2.5	130.195.243.25
Oct 25, 2024 20:05:51.557409048 CEST	49903	445	192.168.2.5	130.195.213.23
Oct 25, 2024 20:05:51.557579994 CEST	49902	445	192.168.2.5	130.195.213.58
Oct 25, 2024 20:05:51.557679892 CEST	49957	139	192.168.2.5	130.195.213.23
Oct 25, 2024 20:05:51.557836056 CEST	49958	139	192.168.2.5	130.195.213.58
Oct 25, 2024 20:05:51.745085955 CEST	49949	139	192.168.2.5	130.195.250.100
Oct 25, 2024 20:05:51.745239019 CEST	49960	445	192.168.2.5	130.195.216.21
Oct 25, 2024 20:05:51.750910997 CEST	445	49960	130.195.216.21	192.168.2.5
Oct 25, 2024 20:05:51.751009941 CEST	49960	445	192.168.2.5	130.195.216.21
Oct 25, 2024 20:05:51.751059055 CEST	49960	445	192.168.2.5	130.195.216.21
Oct 25, 2024 20:05:51.756455898 CEST	445	49960	130.195.216.21	192.168.2.5
Oct 25, 2024 20:05:51.854877949 CEST	49961	445	192.168.2.5	130.195.244.10
Oct 25, 2024 20:05:51.860258102 CEST	445	49961	130.195.244.10	192.168.2.5
Oct 25, 2024 20:05:51.860482931 CEST	49961	445	192.168.2.5	130.195.244.10
Oct 25, 2024 20:05:51.860712051 CEST	49961	445	192.168.2.5	130.195.244.10
Oct 25, 2024 20:05:51.866117001 CEST	445	49961	130.195.244.10	192.168.2.5
Oct 25, 2024 20:05:51.869985104 CEST	49910	445	192.168.2.5	130.195.245.29
Oct 25, 2024 20:05:51.870481014 CEST	49963	139	192.168.2.5	130.195.245.29
Oct 25, 2024 20:05:51.979290962 CEST	49950	139	192.168.2.5	130.195.240.22
Oct 25, 2024 20:05:52.151492119 CEST	49966	445	192.168.2.5	130.195.245.14
Oct 25, 2024 20:05:52.157118082 CEST	445	49966	130.195.245.14	192.168.2.5
Oct 25, 2024 20:05:52.157706022 CEST	49966	445	192.168.2.5	130.195.245.14
Oct 25, 2024 20:05:52.157788992 CEST	49966	445	192.168.2.5	130.195.245.14
Oct 25, 2024 20:05:52.163274050 CEST	445	49966	130.195.245.14	192.168.2.5
Oct 25, 2024 20:05:52.378611088 CEST	445	49961	130.195.244.10	192.168.2.5
Oct 25, 2024 20:05:52.378679991 CEST	49961	445	192.168.2.5	130.195.244.10
Oct 25, 2024 20:05:52.378709078 CEST	49961	445	192.168.2.5	130.195.244.10
Oct 25, 2024 20:05:52.378907919 CEST	49967	139	192.168.2.5	130.195.244.10
Oct 25, 2024 20:05:52.432379007 CEST	49955	139	192.168.2.5	130.195.3.26
Oct 25, 2024 20:05:52.494860888 CEST	49956	139	192.168.2.5	130.195.243.25
Oct 25, 2024 20:05:52.557461977 CEST	49957	139	192.168.2.5	130.195.213.23
Oct 25, 2024 20:05:52.559195042 CEST	49958	139	192.168.2.5	130.195.213.58
Oct 25, 2024 20:05:52.869896889 CEST	49963	139	192.168.2.5	130.195.245.29
Oct 25, 2024 20:05:53.166798115 CEST	49919	445	192.168.2.5	130.195.5.5
Oct 25, 2024 20:05:53.168554068 CEST	49973	139	192.168.2.5	130.195.5.5
Oct 25, 2024 20:05:53.385514975 CEST	49967	139	192.168.2.5	130.195.244.10
Oct 25, 2024 20:05:53.479510069 CEST	49975	445	192.168.2.5	130.195.213.54
Oct 25, 2024 20:05:53.486310005 CEST	445	49975	130.195.213.54	192.168.2.5
Oct 25, 2024 20:05:53.488091946 CEST	49975	445	192.168.2.5	130.195.213.54
Oct 25, 2024 20:05:53.488149881 CEST	49975	445	192.168.2.5	130.195.213.54
Oct 25, 2024 20:05:53.495001078 CEST	445	49975	130.195.213.54	192.168.2.5
Oct 25, 2024 20:05:53.526372910 CEST	49976	445	192.168.2.5	130.195.243.14
Oct 25, 2024 20:05:53.531820059 CEST	445	49976	130.195.243.14	192.168.2.5
Oct 25, 2024 20:05:53.531919003 CEST	49976	445	192.168.2.5	130.195.243.14
Oct 25, 2024 20:05:53.531968117 CEST	49976	445	192.168.2.5	130.195.243.14
Oct 25, 2024 20:05:53.537379026 CEST	445	49976	130.195.243.14	192.168.2.5
Oct 25, 2024 20:05:53.541856050 CEST	49927	445	192.168.2.5	130.195.5.24
Oct 25, 2024 20:05:53.541882038 CEST	49977	139	192.168.2.5	130.195.5.24
Oct 25, 2024 20:05:53.729470015 CEST	49981	445	192.168.2.5	130.195.213.9
Oct 25, 2024 20:05:53.734846115 CEST	445	49981	130.195.213.9	192.168.2.5
Oct 25, 2024 20:05:53.736474037 CEST	49981	445	192.168.2.5	130.195.213.9
Oct 25, 2024 20:05:53.736561060 CEST	49981	445	192.168.2.5	130.195.213.9
Oct 25, 2024 20:05:53.742007971 CEST	445	49981	130.195.213.9	192.168.2.5
Oct 25, 2024 20:05:53.744851112 CEST	49949	139	192.168.2.5	130.195.250.100
Oct 25, 2024 20:05:53.994868994 CEST	49950	139	192.168.2.5	130.195.240.22
Oct 25, 2024 20:05:54.037538052 CEST	49983	139	192.168.2.5	130.195.216.10
Oct 25, 2024 20:05:54.167027950 CEST	49984	445	192.168.2.5	130.195.196.194
Oct 25, 2024 20:05:54.172405958 CEST	445	49984	130.195.196.194	192.168.2.5
Oct 25, 2024 20:05:54.172478914 CEST	49984	445	192.168.2.5	130.195.196.194
Oct 25, 2024 20:05:54.172534943 CEST	49984	445	192.168.2.5	130.195.196.194
Oct 25, 2024 20:05:54.175657988 CEST	49973	139	192.168.2.5	130.195.5.5
Oct 25, 2024 20:05:54.177831888 CEST	445	49984	130.195.196.194	192.168.2.5
Oct 25, 2024 20:05:54.448015928 CEST	49955	139	192.168.2.5	130.195.3.26
Oct 25, 2024 20:05:54.494992018 CEST	49956	139	192.168.2.5	130.195.243.25
Oct 25, 2024 20:05:54.541800976 CEST	49977	139	192.168.2.5	130.195.5.24
Oct 25, 2024 20:05:54.573012114 CEST	49957	139	192.168.2.5	130.195.213.23
Oct 25, 2024 20:05:54.573194027 CEST	49958	139	192.168.2.5	130.195.213.58
Oct 25, 2024 20:05:54.869947910 CEST	49963	139	192.168.2.5	130.195.245.29
Oct 25, 2024 20:05:55.041750908 CEST	49983	139	192.168.2.5	130.195.216.10
Oct 25, 2024 20:05:55.385539055 CEST	49967	139	192.168.2.5	130.195.244.10
Oct 25, 2024 20:05:55.858851910 CEST	445	49984	130.195.196.194	192.168.2.5
Oct 25, 2024 20:05:55.858935118 CEST	49984	445	192.168.2.5	130.195.196.194
Oct 25, 2024 20:05:55.858971119 CEST	49984	445	192.168.2.5	130.195.196.194
Oct 25, 2024 20:05:55.859149933 CEST	49995	139	192.168.2.5	130.195.196.194
Oct 25, 2024 20:05:56.182353020 CEST	49973	139	192.168.2.5	130.195.5.5
Oct 25, 2024 20:05:56.541994095 CEST	49977	139	192.168.2.5	130.195.5.24
Oct 25, 2024 20:05:56.760751009 CEST	50001	445	192.168.2.5	130.195.250.100
Oct 25, 2024 20:05:56.767700911 CEST	445	50001	130.195.250.100	192.168.2.5
Oct 25, 2024 20:05:56.767780066 CEST	50001	445	192.168.2.5	130.195.250.100
Oct 25, 2024 20:05:56.767853022 CEST	50001	445	192.168.2.5	130.195.250.100
Oct 25, 2024 20:05:56.775764942 CEST	445	50001	130.195.250.100	192.168.2.5
Oct 25, 2024 20:05:56.869967937 CEST	49995	139	192.168.2.5	130.195.196.194
Oct 25, 2024 20:05:56.995079994 CEST	50003	445	192.168.2.5	130.195.240.22
Oct 25, 2024 20:05:57.000516891 CEST	445	50003	130.195.240.22	192.168.2.5
Oct 25, 2024 20:05:57.000588894 CEST	50003	445	192.168.2.5	130.195.240.22
Oct 25, 2024 20:05:57.000642061 CEST	50003	445	192.168.2.5	130.195.240.22
Oct 25, 2024 20:05:57.006201029 CEST	445	50003	130.195.240.22	192.168.2.5
Oct 25, 2024 20:05:57.041749954 CEST	49983	139	192.168.2.5	130.195.216.10
Oct 25, 2024 20:05:57.432907104 CEST	50008	445	192.168.2.5	130.195.3.26
Oct 25, 2024 20:05:57.438375950 CEST	445	50008	130.195.3.26	192.168.2.5
Oct 25, 2024 20:05:57.438558102 CEST	50008	445	192.168.2.5	130.195.3.26
Oct 25, 2024 20:05:57.438558102 CEST	50008	445	192.168.2.5	130.195.3.26
Oct 25, 2024 20:05:57.438802958 CEST	50009	139	192.168.2.5	130.195.3.26
Oct 25, 2024 20:05:57.495245934 CEST	50010	445	192.168.2.5	130.195.243.25
Oct 25, 2024 20:05:57.500793934 CEST	445	50010	130.195.243.25	192.168.2.5
Oct 25, 2024 20:05:57.501027107 CEST	50010	445	192.168.2.5	130.195.243.25
Oct 25, 2024 20:05:57.501028061 CEST	50010	445	192.168.2.5	130.195.243.25
Oct 25, 2024 20:05:57.506417036 CEST	445	50010	130.195.243.25	192.168.2.5
Oct 25, 2024 20:05:57.573364973 CEST	50011	445	192.168.2.5	130.195.213.58
Oct 25, 2024 20:05:57.573365927 CEST	50012	445	192.168.2.5	130.195.213.23
Oct 25, 2024 20:05:57.578763008 CEST	445	50011	130.195.213.58	192.168.2.5
Oct 25, 2024 20:05:57.578778028 CEST	445	50012	130.195.213.23	192.168.2.5
Oct 25, 2024 20:05:57.578866959 CEST	50011	445	192.168.2.5	130.195.213.58
Oct 25, 2024 20:05:57.578866959 CEST	50012	445	192.168.2.5	130.195.213.23
Oct 25, 2024 20:05:57.578907967 CEST	50012	445	192.168.2.5	130.195.213.23
Oct 25, 2024 20:05:57.578941107 CEST	50011	445	192.168.2.5	130.195.213.58
Oct 25, 2024 20:05:57.584741116 CEST	445	50012	130.195.213.23	192.168.2.5
Oct 25, 2024 20:05:57.584753036 CEST	445	50011	130.195.213.58	192.168.2.5
Oct 25, 2024 20:05:57.760528088 CEST	49960	445	192.168.2.5	130.195.216.21
Oct 25, 2024 20:05:57.760729074 CEST	50013	139	192.168.2.5	130.195.216.21
Oct 25, 2024 20:05:57.885941029 CEST	50015	445	192.168.2.5	130.195.245.29
Oct 25, 2024 20:05:57.891711950 CEST	445	50015	130.195.245.29	192.168.2.5
Oct 25, 2024 20:05:57.892704964 CEST	50015	445	192.168.2.5	130.195.245.29
Oct 25, 2024 20:05:57.892704964 CEST	50015	445	192.168.2.5	130.195.245.29
Oct 25, 2024 20:05:57.898169994 CEST	445	50015	130.195.245.29	192.168.2.5
Oct 25, 2024 20:05:58.159830093 CEST	49966	445	192.168.2.5	130.195.245.14
Oct 25, 2024 20:05:58.160080910 CEST	50017	139	192.168.2.5	130.195.245.14
Oct 25, 2024 20:05:58.372536898 CEST	50018	445	192.168.2.5	130.195.244.10
Oct 25, 2024 20:05:58.378056049 CEST	445	50018	130.195.244.10	192.168.2.5
Oct 25, 2024 20:05:58.380582094 CEST	50018	445	192.168.2.5	130.195.244.10
Oct 25, 2024 20:05:58.381320000 CEST	50018	445	192.168.2.5	130.195.244.10
Oct 25, 2024 20:05:58.386715889 CEST	445	50018	130.195.244.10	192.168.2.5
Oct 25, 2024 20:05:58.440685034 CEST	50021	139	192.168.2.5	130.195.211.50
Oct 25, 2024 20:05:58.448435068 CEST	50009	139	192.168.2.5	130.195.3.26
Oct 25, 2024 20:05:58.509309053 CEST	50022	139	192.168.2.5	130.195.60.1
Oct 25, 2024 20:05:58.760510921 CEST	50013	139	192.168.2.5	130.195.216.21
Oct 25, 2024 20:05:58.869863033 CEST	49995	139	192.168.2.5	130.195.196.194
Oct 25, 2024 20:05:58.894946098 CEST	445	50018	130.195.244.10	192.168.2.5
Oct 25, 2024 20:05:58.895034075 CEST	50018	445	192.168.2.5	130.195.244.10
Oct 25, 2024 20:05:58.895034075 CEST	50018	445	192.168.2.5	130.195.244.10
Oct 25, 2024 20:05:58.895240068 CEST	50026	139	192.168.2.5	130.195.244.10
Oct 25, 2024 20:05:59.166764021 CEST	50017	139	192.168.2.5	130.195.245.14
Oct 25, 2024 20:05:59.182709932 CEST	50027	445	192.168.2.5	130.195.5.5
Oct 25, 2024 20:05:59.188214064 CEST	445	50027	130.195.5.5	192.168.2.5
Oct 25, 2024 20:05:59.188297033 CEST	50027	445	192.168.2.5	130.195.5.5
Oct 25, 2024 20:05:59.188376904 CEST	50027	445	192.168.2.5	130.195.5.5
Oct 25, 2024 20:05:59.197787046 CEST	445	50027	130.195.5.5	192.168.2.5
Oct 25, 2024 20:05:59.447974920 CEST	50021	139	192.168.2.5	130.195.211.50
Oct 25, 2024 20:05:59.494916916 CEST	49975	445	192.168.2.5	130.195.213.54
Oct 25, 2024 20:05:59.495174885 CEST	50031	139	192.168.2.5	130.195.213.54
Oct 25, 2024 20:05:59.510616064 CEST	50022	139	192.168.2.5	130.195.60.1
Oct 25, 2024 20:05:59.542042971 CEST	49976	445	192.168.2.5	130.195.243.14
Oct 25, 2024 20:05:59.542126894 CEST	50032	139	192.168.2.5	130.195.243.14
Oct 25, 2024 20:05:59.542201042 CEST	50033	445	192.168.2.5	130.195.5.24
Oct 25, 2024 20:05:59.548401117 CEST	445	50033	130.195.5.24	192.168.2.5
Oct 25, 2024 20:05:59.548485994 CEST	50033	445	192.168.2.5	130.195.5.24
Oct 25, 2024 20:05:59.548669100 CEST	50033	445	192.168.2.5	130.195.5.24
Oct 25, 2024 20:05:59.554513931 CEST	445	50033	130.195.5.24	192.168.2.5
Oct 25, 2024 20:05:59.729291916 CEST	49981	445	192.168.2.5	130.195.213.9
Oct 25, 2024 20:05:59.729477882 CEST	50035	139	192.168.2.5	130.195.213.9
Oct 25, 2024 20:05:59.885607004 CEST	50026	139	192.168.2.5	130.195.244.10
Oct 25, 2024 20:06:00.026438951 CEST	50037	445	192.168.2.5	130.195.216.10
Oct 25, 2024 20:06:00.032249928 CEST	445	50037	130.195.216.10	192.168.2.5
Oct 25, 2024 20:06:00.032468081 CEST	50037	445	192.168.2.5	130.195.216.10
Oct 25, 2024 20:06:00.032916069 CEST	50037	445	192.168.2.5	130.195.216.10
Oct 25, 2024 20:06:00.033124924 CEST	50038	139	192.168.2.5	130.195.216.10
Oct 25, 2024 20:06:00.463624954 CEST	50009	139	192.168.2.5	130.195.3.26
Oct 25, 2024 20:06:00.494900942 CEST	50031	139	192.168.2.5	130.195.213.54
Oct 25, 2024 20:06:00.541820049 CEST	50032	139	192.168.2.5	130.195.243.14
Oct 25, 2024 20:06:00.729362965 CEST	50035	139	192.168.2.5	130.195.213.9
Oct 25, 2024 20:06:00.760512114 CEST	50013	139	192.168.2.5	130.195.216.21
Oct 25, 2024 20:06:01.041865110 CEST	50038	139	192.168.2.5	130.195.216.10
Oct 25, 2024 20:06:01.166733980 CEST	50017	139	192.168.2.5	130.195.245.14
Oct 25, 2024 20:06:01.463716984 CEST	50021	139	192.168.2.5	130.195.211.50
Oct 25, 2024 20:06:01.510514975 CEST	50022	139	192.168.2.5	130.195.60.1
Oct 25, 2024 20:06:01.854620934 CEST	50050	445	192.168.2.5	130.195.196.194
Oct 25, 2024 20:06:01.862328053 CEST	445	50050	130.195.196.194	192.168.2.5
Oct 25, 2024 20:06:01.862438917 CEST	50050	445	192.168.2.5	130.195.196.194
Oct 25, 2024 20:06:01.862565041 CEST	50050	445	192.168.2.5	130.195.196.194
Oct 25, 2024 20:06:01.868448973 CEST	445	50050	130.195.196.194	192.168.2.5
Oct 25, 2024 20:06:01.885602951 CEST	50026	139	192.168.2.5	130.195.244.10
Oct 25, 2024 20:06:02.510513067 CEST	50031	139	192.168.2.5	130.195.213.54
Oct 25, 2024 20:06:02.528522015 CEST	445	50050	130.195.196.194	192.168.2.5
Oct 25, 2024 20:06:02.528609037 CEST	50050	445	192.168.2.5	130.195.196.194
Oct 25, 2024 20:06:02.528649092 CEST	50050	445	192.168.2.5	130.195.196.194
Oct 25, 2024 20:06:02.528836012 CEST	50056	139	192.168.2.5	130.195.196.194
Oct 25, 2024 20:06:02.541758060 CEST	50032	139	192.168.2.5	130.195.243.14
Oct 25, 2024 20:06:02.729252100 CEST	50035	139	192.168.2.5	130.195.213.9
Oct 25, 2024 20:06:02.760559082 CEST	50001	445	192.168.2.5	130.195.250.100
Oct 25, 2024 20:06:02.760895967 CEST	50057	139	192.168.2.5	130.195.250.100
Oct 25, 2024 20:06:03.010540009 CEST	50003	445	192.168.2.5	130.195.240.22
Oct 25, 2024 20:06:03.010772943 CEST	50061	139	192.168.2.5	130.195.240.22
Oct 25, 2024 20:06:03.041794062 CEST	50038	139	192.168.2.5	130.195.216.10
Oct 25, 2024 20:06:03.448340893 CEST	50064	445	192.168.2.5	130.195.3.26
Oct 25, 2024 20:06:03.453876972 CEST	445	50064	130.195.3.26	192.168.2.5
Oct 25, 2024 20:06:03.453959942 CEST	50064	445	192.168.2.5	130.195.3.26
Oct 25, 2024 20:06:03.454122066 CEST	50064	445	192.168.2.5	130.195.3.26
Oct 25, 2024 20:06:03.459434032 CEST	445	50064	130.195.3.26	192.168.2.5
Oct 25, 2024 20:06:03.513241053 CEST	50010	445	192.168.2.5	130.195.243.25
Oct 25, 2024 20:06:03.524966955 CEST	50065	139	192.168.2.5	130.195.243.25
Oct 25, 2024 20:06:03.529364109 CEST	50056	139	192.168.2.5	130.195.196.194
Oct 25, 2024 20:06:03.591736078 CEST	50011	445	192.168.2.5	130.195.213.58
Oct 25, 2024 20:06:03.592029095 CEST	50066	139	192.168.2.5	130.195.213.58
Oct 25, 2024 20:06:03.592061043 CEST	50012	445	192.168.2.5	130.195.213.23
Oct 25, 2024 20:06:03.595587969 CEST	50067	139	192.168.2.5	130.195.213.23
Oct 25, 2024 20:06:03.760898113 CEST	50068	445	192.168.2.5	130.195.216.21
Oct 25, 2024 20:06:03.766549110 CEST	445	50068	130.195.216.21	192.168.2.5
Oct 25, 2024 20:06:03.766654015 CEST	50068	445	192.168.2.5	130.195.216.21
Oct 25, 2024 20:06:03.766737938 CEST	50068	445	192.168.2.5	130.195.216.21
Oct 25, 2024 20:06:03.772270918 CEST	445	50068	130.195.216.21	192.168.2.5
Oct 25, 2024 20:06:03.776098013 CEST	50057	139	192.168.2.5	130.195.250.100
Oct 25, 2024 20:06:03.887893915 CEST	50072	139	192.168.2.5	130.195.211.53
Oct 25, 2024 20:06:03.901254892 CEST	50015	445	192.168.2.5	130.195.245.29
Oct 25, 2024 20:06:03.901283979 CEST	50073	139	192.168.2.5	130.195.245.29
Oct 25, 2024 20:06:04.010538101 CEST	50061	139	192.168.2.5	130.195.240.22
Oct 25, 2024 20:06:04.166969061 CEST	50075	445	192.168.2.5	130.195.245.14
Oct 25, 2024 20:06:04.173953056 CEST	445	50075	130.195.245.14	192.168.2.5
Oct 25, 2024 20:06:04.174022913 CEST	50075	445	192.168.2.5	130.195.245.14
Oct 25, 2024 20:06:04.174087048 CEST	50075	445	192.168.2.5	130.195.245.14
Oct 25, 2024 20:06:04.179639101 CEST	445	50075	130.195.245.14	192.168.2.5
Oct 25, 2024 20:06:04.432780027 CEST	50077	445	192.168.2.5	130.195.211.50
Oct 25, 2024 20:06:04.438221931 CEST	445	50077	130.195.211.50	192.168.2.5
Oct 25, 2024 20:06:04.438314915 CEST	50077	445	192.168.2.5	130.195.211.50
Oct 25, 2024 20:06:04.438384056 CEST	50077	445	192.168.2.5	130.195.211.50
Oct 25, 2024 20:06:04.438641071 CEST	50078	139	192.168.2.5	130.195.211.50
Oct 25, 2024 20:06:04.510919094 CEST	50079	445	192.168.2.5	130.195.60.1
Oct 25, 2024 20:06:04.516366959 CEST	445	50079	130.195.60.1	192.168.2.5
Oct 25, 2024 20:06:04.516560078 CEST	50079	445	192.168.2.5	130.195.60.1
Oct 25, 2024 20:06:04.516560078 CEST	50079	445	192.168.2.5	130.195.60.1
Oct 25, 2024 20:06:04.516665936 CEST	50080	139	192.168.2.5	130.195.60.1
Oct 25, 2024 20:06:04.526115894 CEST	50065	139	192.168.2.5	130.195.243.25
Oct 25, 2024 20:06:04.604238987 CEST	50067	139	192.168.2.5	130.195.213.23
Oct 25, 2024 20:06:04.604360104 CEST	50066	139	192.168.2.5	130.195.213.58
Oct 25, 2024 20:06:04.885689974 CEST	50085	445	192.168.2.5	130.195.244.10
Oct 25, 2024 20:06:04.891127110 CEST	445	50085	130.195.244.10	192.168.2.5
Oct 25, 2024 20:06:04.891195059 CEST	50085	445	192.168.2.5	130.195.244.10
Oct 25, 2024 20:06:04.891271114 CEST	50085	445	192.168.2.5	130.195.244.10
Oct 25, 2024 20:06:04.896636963 CEST	445	50085	130.195.244.10	192.168.2.5
Oct 25, 2024 20:06:04.901115894 CEST	50072	139	192.168.2.5	130.195.211.53
Oct 25, 2024 20:06:04.901117086 CEST	50073	139	192.168.2.5	130.195.245.29
Oct 25, 2024 20:06:05.182440042 CEST	50027	445	192.168.2.5	130.195.5.5
Oct 25, 2024 20:06:05.184606075 CEST	50087	139	192.168.2.5	130.195.5.5
Oct 25, 2024 20:06:05.408911943 CEST	445	50085	130.195.244.10	192.168.2.5
Oct 25, 2024 20:06:05.408909082 CEST	50088	139	192.168.2.5	130.195.241.20
Oct 25, 2024 20:06:05.409059048 CEST	50085	445	192.168.2.5	130.195.244.10
Oct 25, 2024 20:06:05.409101963 CEST	50085	445	192.168.2.5	130.195.244.10
Oct 25, 2024 20:06:05.409209013 CEST	50089	139	192.168.2.5	130.195.244.10
Oct 25, 2024 20:06:05.448029995 CEST	50078	139	192.168.2.5	130.195.211.50
Oct 25, 2024 20:06:05.510960102 CEST	50090	445	192.168.2.5	130.195.213.54
Oct 25, 2024 20:06:05.517236948 CEST	445	50090	130.195.213.54	192.168.2.5
Oct 25, 2024 20:06:05.517332077 CEST	50090	445	192.168.2.5	130.195.213.54
Oct 25, 2024 20:06:05.517393112 CEST	50090	445	192.168.2.5	130.195.213.54
Oct 25, 2024 20:06:05.523660898 CEST	445	50090	130.195.213.54	192.168.2.5
Oct 25, 2024 20:06:05.526129961 CEST	50080	139	192.168.2.5	130.195.60.1
Oct 25, 2024 20:06:05.541722059 CEST	50056	139	192.168.2.5	130.195.196.194
Oct 25, 2024 20:06:05.557552099 CEST	50033	445	192.168.2.5	130.195.5.24
Oct 25, 2024 20:06:05.557734013 CEST	50091	139	192.168.2.5	130.195.5.24
Oct 25, 2024 20:06:05.557902098 CEST	50092	445	192.168.2.5	130.195.243.14
Oct 25, 2024 20:06:05.563294888 CEST	445	50092	130.195.243.14	192.168.2.5
Oct 25, 2024 20:06:05.563373089 CEST	50092	445	192.168.2.5	130.195.243.14
Oct 25, 2024 20:06:05.563467026 CEST	50092	445	192.168.2.5	130.195.243.14
Oct 25, 2024 20:06:05.569288015 CEST	445	50092	130.195.243.14	192.168.2.5
Oct 25, 2024 20:06:05.732050896 CEST	50096	445	192.168.2.5	130.195.213.9
Oct 25, 2024 20:06:05.737833977 CEST	445	50096	130.195.213.9	192.168.2.5
Oct 25, 2024 20:06:05.738579035 CEST	50096	445	192.168.2.5	130.195.213.9
Oct 25, 2024 20:06:05.738645077 CEST	50096	445	192.168.2.5	130.195.213.9
Oct 25, 2024 20:06:05.744002104 CEST	445	50096	130.195.213.9	192.168.2.5
Oct 25, 2024 20:06:05.776113033 CEST	50057	139	192.168.2.5	130.195.250.100
Oct 25, 2024 20:06:06.010652065 CEST	50061	139	192.168.2.5	130.195.240.22
Oct 25, 2024 20:06:06.042042017 CEST	50099	445	192.168.2.5	130.195.216.10
Oct 25, 2024 20:06:06.047626019 CEST	445	50099	130.195.216.10	192.168.2.5
Oct 25, 2024 20:06:06.050803900 CEST	50099	445	192.168.2.5	130.195.216.10
Oct 25, 2024 20:06:06.050848007 CEST	50099	445	192.168.2.5	130.195.216.10
Oct 25, 2024 20:06:06.056359053 CEST	445	50099	130.195.216.10	192.168.2.5
Oct 25, 2024 20:06:06.197976112 CEST	50087	139	192.168.2.5	130.195.5.5
Oct 25, 2024 20:06:06.401135921 CEST	50089	139	192.168.2.5	130.195.244.10
Oct 25, 2024 20:06:06.401140928 CEST	50088	139	192.168.2.5	130.195.241.20
Oct 25, 2024 20:06:06.526137114 CEST	50065	139	192.168.2.5	130.195.243.25
Oct 25, 2024 20:06:06.572992086 CEST	50091	139	192.168.2.5	130.195.5.24
Oct 25, 2024 20:06:06.619885921 CEST	50066	139	192.168.2.5	130.195.213.58
Oct 25, 2024 20:06:06.619896889 CEST	50067	139	192.168.2.5	130.195.213.23
Oct 25, 2024 20:06:06.660140038 CEST	50104	139	192.168.2.5	130.195.48.77
Oct 25, 2024 20:06:06.728118896 CEST	50105	139	192.168.2.5	130.195.218.45
Oct 25, 2024 20:06:06.858302116 CEST	50107	139	192.168.2.5	130.195.218.60
Oct 25, 2024 20:06:06.901218891 CEST	50073	139	192.168.2.5	130.195.245.29
Oct 25, 2024 20:06:06.916762114 CEST	50072	139	192.168.2.5	130.195.211.53
Oct 25, 2024 20:06:07.447979927 CEST	50078	139	192.168.2.5	130.195.211.50
Oct 25, 2024 20:06:07.526106119 CEST	50080	139	192.168.2.5	130.195.60.1
Oct 25, 2024 20:06:07.651097059 CEST	50104	139	192.168.2.5	130.195.48.77
Oct 25, 2024 20:06:07.729331017 CEST	50105	139	192.168.2.5	130.195.218.45
Oct 25, 2024 20:06:07.869891882 CEST	50107	139	192.168.2.5	130.195.218.60
Oct 25, 2024 20:06:08.197987080 CEST	50087	139	192.168.2.5	130.195.5.5
Oct 25, 2024 20:06:08.416738987 CEST	50089	139	192.168.2.5	130.195.244.10
Oct 25, 2024 20:06:08.416758060 CEST	50088	139	192.168.2.5	130.195.241.20
Oct 25, 2024 20:06:08.541964054 CEST	50117	445	192.168.2.5	130.195.196.194
Oct 25, 2024 20:06:08.547578096 CEST	445	50117	130.195.196.194	192.168.2.5
Oct 25, 2024 20:06:08.547650099 CEST	50117	445	192.168.2.5	130.195.196.194
Oct 25, 2024 20:06:08.547734976 CEST	50117	445	192.168.2.5	130.195.196.194
Oct 25, 2024 20:06:08.553253889 CEST	445	50117	130.195.196.194	192.168.2.5
Oct 25, 2024 20:06:08.573018074 CEST	50091	139	192.168.2.5	130.195.5.24
Oct 25, 2024 20:06:08.776444912 CEST	50119	445	192.168.2.5	130.195.250.100
Oct 25, 2024 20:06:08.782896996 CEST	445	50119	130.195.250.100	192.168.2.5
Oct 25, 2024 20:06:08.782999992 CEST	50119	445	192.168.2.5	130.195.250.100
Oct 25, 2024 20:06:08.783046007 CEST	50119	445	192.168.2.5	130.195.250.100
Oct 25, 2024 20:06:08.789612055 CEST	445	50119	130.195.250.100	192.168.2.5
Oct 25, 2024 20:06:09.011025906 CEST	50120	445	192.168.2.5	130.195.240.22
Oct 25, 2024 20:06:09.016503096 CEST	445	50120	130.195.240.22	192.168.2.5
Oct 25, 2024 20:06:09.016606092 CEST	50120	445	192.168.2.5	130.195.240.22
Oct 25, 2024 20:06:09.016670942 CEST	50120	445	192.168.2.5	130.195.240.22
Oct 25, 2024 20:06:09.022063971 CEST	445	50120	130.195.240.22	192.168.2.5
Oct 25, 2024 20:06:09.221971989 CEST	445	50117	130.195.196.194	192.168.2.5
Oct 25, 2024 20:06:09.222611904 CEST	50117	445	192.168.2.5	130.195.196.194
Oct 25, 2024 20:06:09.224461079 CEST	50117	445	192.168.2.5	130.195.196.194
Oct 25, 2024 20:06:09.224833965 CEST	50122	139	192.168.2.5	130.195.196.194
Oct 25, 2024 20:06:09.448075056 CEST	50064	445	192.168.2.5	130.195.3.26
Oct 25, 2024 20:06:09.448376894 CEST	50125	139	192.168.2.5	130.195.3.26
Oct 25, 2024 20:06:09.510859013 CEST	50126	445	192.168.2.5	130.195.243.25
Oct 25, 2024 20:06:09.516371012 CEST	445	50126	130.195.243.25	192.168.2.5
Oct 25, 2024 20:06:09.516616106 CEST	50126	445	192.168.2.5	130.195.243.25
Oct 25, 2024 20:06:09.516738892 CEST	50126	445	192.168.2.5	130.195.243.25
Oct 25, 2024 20:06:09.522140980 CEST	445	50126	130.195.243.25	192.168.2.5
Oct 25, 2024 20:06:09.588923931 CEST	50128	445	192.168.2.5	130.195.213.23
Oct 25, 2024 20:06:09.589040995 CEST	50129	445	192.168.2.5	130.195.213.58
Oct 25, 2024 20:06:09.594696045 CEST	445	50128	130.195.213.23	192.168.2.5
Oct 25, 2024 20:06:09.594738960 CEST	445	50129	130.195.213.58	192.168.2.5
Oct 25, 2024 20:06:09.594772100 CEST	50128	445	192.168.2.5	130.195.213.23
Oct 25, 2024 20:06:09.594825029 CEST	50129	445	192.168.2.5	130.195.213.58
Oct 25, 2024 20:06:09.594927073 CEST	50128	445	192.168.2.5	130.195.213.23
Oct 25, 2024 20:06:09.594963074 CEST	50129	445	192.168.2.5	130.195.213.58
Oct 25, 2024 20:06:09.600318909 CEST	445	50128	130.195.213.23	192.168.2.5
Oct 25, 2024 20:06:09.600354910 CEST	445	50129	130.195.213.58	192.168.2.5
Oct 25, 2024 20:06:09.651149035 CEST	50104	139	192.168.2.5	130.195.48.77
Oct 25, 2024 20:06:09.744862080 CEST	50105	139	192.168.2.5	130.195.218.45
Oct 25, 2024 20:06:09.760551929 CEST	50068	445	192.168.2.5	130.195.216.21
Oct 25, 2024 20:06:09.760772943 CEST	50130	139	192.168.2.5	130.195.216.21
Oct 25, 2024 20:06:09.885524035 CEST	50107	139	192.168.2.5	130.195.218.60
Oct 25, 2024 20:06:09.885822058 CEST	50131	445	192.168.2.5	130.195.211.53
Oct 25, 2024 20:06:09.891506910 CEST	445	50131	130.195.211.53	192.168.2.5
Oct 25, 2024 20:06:09.892474890 CEST	50131	445	192.168.2.5	130.195.211.53
Oct 25, 2024 20:06:09.892539978 CEST	50131	445	192.168.2.5	130.195.211.53
Oct 25, 2024 20:06:09.892664909 CEST	50132	139	192.168.2.5	130.195.211.53
Oct 25, 2024 20:06:09.917421103 CEST	50133	445	192.168.2.5	130.195.245.29
Oct 25, 2024 20:06:09.923372984 CEST	445	50133	130.195.245.29	192.168.2.5
Oct 25, 2024 20:06:09.924510002 CEST	50133	445	192.168.2.5	130.195.245.29
Oct 25, 2024 20:06:09.926497936 CEST	50133	445	192.168.2.5	130.195.245.29
Oct 25, 2024 20:06:09.931891918 CEST	445	50133	130.195.245.29	192.168.2.5
Oct 25, 2024 20:06:10.127413988 CEST	50135	139	192.168.2.5	130.195.249.17
Oct 25, 2024 20:06:10.182398081 CEST	50075	445	192.168.2.5	130.195.245.14
Oct 25, 2024 20:06:10.182710886 CEST	50137	139	192.168.2.5	130.195.245.14
Oct 25, 2024 20:06:10.229237080 CEST	50122	139	192.168.2.5	130.195.196.194
Oct 25, 2024 20:06:10.432682037 CEST	50140	445	192.168.2.5	130.195.211.50
Oct 25, 2024 20:06:10.438309908 CEST	445	50140	130.195.211.50	192.168.2.5
Oct 25, 2024 20:06:10.438385010 CEST	50140	445	192.168.2.5	130.195.211.50
Oct 25, 2024 20:06:10.438497066 CEST	50140	445	192.168.2.5	130.195.211.50
Oct 25, 2024 20:06:10.443908930 CEST	445	50140	130.195.211.50	192.168.2.5
Oct 25, 2024 20:06:10.447998047 CEST	50125	139	192.168.2.5	130.195.3.26
Oct 25, 2024 20:06:10.510761976 CEST	50141	445	192.168.2.5	130.195.60.1
Oct 25, 2024 20:06:10.516386986 CEST	445	50141	130.195.60.1	192.168.2.5
Oct 25, 2024 20:06:10.516457081 CEST	50141	445	192.168.2.5	130.195.60.1
Oct 25, 2024 20:06:10.516567945 CEST	50141	445	192.168.2.5	130.195.60.1
Oct 25, 2024 20:06:10.521966934 CEST	445	50141	130.195.60.1	192.168.2.5
Oct 25, 2024 20:06:10.760540962 CEST	50130	139	192.168.2.5	130.195.216.21
Oct 25, 2024 20:06:10.885548115 CEST	50132	139	192.168.2.5	130.195.211.53
Oct 25, 2024 20:06:10.979161978 CEST	50143	139	192.168.2.5	130.195.245.1
Oct 25, 2024 20:06:11.103565931 CEST	445	50141	130.195.60.1	192.168.2.5
Oct 25, 2024 20:06:11.104552984 CEST	50141	445	192.168.2.5	130.195.60.1
Oct 25, 2024 20:06:11.104581118 CEST	50141	445	192.168.2.5	130.195.60.1
Oct 25, 2024 20:06:11.104751110 CEST	50145	139	192.168.2.5	130.195.60.1
Oct 25, 2024 20:06:11.135947943 CEST	50135	139	192.168.2.5	130.195.249.17
Oct 25, 2024 20:06:11.197995901 CEST	50137	139	192.168.2.5	130.195.245.14
Oct 25, 2024 20:06:11.198369980 CEST	50146	445	192.168.2.5	130.195.5.5
Oct 25, 2024 20:06:11.203790903 CEST	445	50146	130.195.5.5	192.168.2.5
Oct 25, 2024 20:06:11.203859091 CEST	50146	445	192.168.2.5	130.195.5.5
Oct 25, 2024 20:06:11.203975916 CEST	50146	445	192.168.2.5	130.195.5.5
Oct 25, 2024 20:06:11.209336042 CEST	445	50146	130.195.5.5	192.168.2.5
Oct 25, 2024 20:06:11.417046070 CEST	50147	445	192.168.2.5	130.195.241.20
Oct 25, 2024 20:06:11.417292118 CEST	50148	445	192.168.2.5	130.195.244.10
Oct 25, 2024 20:06:11.422504902 CEST	445	50147	130.195.241.20	192.168.2.5
Oct 25, 2024 20:06:11.422643900 CEST	50147	445	192.168.2.5	130.195.241.20
Oct 25, 2024 20:06:11.422735929 CEST	50147	445	192.168.2.5	130.195.241.20
Oct 25, 2024 20:06:11.422768116 CEST	445	50148	130.195.244.10	192.168.2.5
Oct 25, 2024 20:06:11.422887087 CEST	50148	445	192.168.2.5	130.195.244.10
Oct 25, 2024 20:06:11.422916889 CEST	50149	139	192.168.2.5	130.195.241.20
Oct 25, 2024 20:06:11.423177958 CEST	50148	445	192.168.2.5	130.195.244.10
Oct 25, 2024 20:06:11.428554058 CEST	445	50148	130.195.244.10	192.168.2.5
Oct 25, 2024 20:06:11.526308060 CEST	50090	445	192.168.2.5	130.195.213.54
Oct 25, 2024 20:06:11.526613951 CEST	50150	139	192.168.2.5	130.195.213.54
Oct 25, 2024 20:06:11.557461977 CEST	50092	445	192.168.2.5	130.195.243.14
Oct 25, 2024 20:06:11.557940960 CEST	50151	139	192.168.2.5	130.195.243.14
Oct 25, 2024 20:06:11.557976007 CEST	50152	445	192.168.2.5	130.195.5.24
Oct 25, 2024 20:06:11.563477039 CEST	445	50152	130.195.5.24	192.168.2.5
Oct 25, 2024 20:06:11.563585043 CEST	50152	445	192.168.2.5	130.195.5.24
Oct 25, 2024 20:06:11.563694954 CEST	50152	445	192.168.2.5	130.195.5.24
Oct 25, 2024 20:06:11.569447994 CEST	445	50152	130.195.5.24	192.168.2.5
Oct 25, 2024 20:06:11.729460001 CEST	50096	445	192.168.2.5	130.195.213.9
Oct 25, 2024 20:06:11.729684114 CEST	50153	139	192.168.2.5	130.195.213.9
Oct 25, 2024 20:06:11.965940952 CEST	445	50148	130.195.244.10	192.168.2.5
Oct 25, 2024 20:06:11.968487978 CEST	50148	445	192.168.2.5	130.195.244.10
Oct 25, 2024 20:06:11.975446939 CEST	50148	445	192.168.2.5	130.195.244.10
Oct 25, 2024 20:06:11.975860119 CEST	50154	139	192.168.2.5	130.195.244.10
Oct 25, 2024 20:06:11.979240894 CEST	50143	139	192.168.2.5	130.195.245.1
Oct 25, 2024 20:06:12.041786909 CEST	50099	445	192.168.2.5	130.195.216.10
Oct 25, 2024 20:06:12.042005062 CEST	50155	139	192.168.2.5	130.195.216.10
Oct 25, 2024 20:06:12.104274035 CEST	50145	139	192.168.2.5	130.195.60.1
Oct 25, 2024 20:06:12.244894981 CEST	50122	139	192.168.2.5	130.195.196.194
Oct 25, 2024 20:06:12.432401896 CEST	50149	139	192.168.2.5	130.195.241.20
Oct 25, 2024 20:06:12.466711998 CEST	50125	139	192.168.2.5	130.195.3.26
Oct 25, 2024 20:06:12.541744947 CEST	50150	139	192.168.2.5	130.195.213.54
Oct 25, 2024 20:06:12.557363033 CEST	50151	139	192.168.2.5	130.195.243.14
Oct 25, 2024 20:06:12.651390076 CEST	50156	445	192.168.2.5	130.195.48.77
Oct 25, 2024 20:06:12.657036066 CEST	445	50156	130.195.48.77	192.168.2.5
Oct 25, 2024 20:06:12.657133102 CEST	50156	445	192.168.2.5	130.195.48.77
Oct 25, 2024 20:06:12.657205105 CEST	50156	445	192.168.2.5	130.195.48.77
Oct 25, 2024 20:06:12.657346964 CEST	50157	139	192.168.2.5	130.195.48.77
Oct 25, 2024 20:06:12.713903904 CEST	50158	445	192.168.2.5	130.195.218.45
Oct 25, 2024 20:06:12.719352007 CEST	445	50158	130.195.218.45	192.168.2.5
Oct 25, 2024 20:06:12.719435930 CEST	50158	445	192.168.2.5	130.195.218.45
Oct 25, 2024 20:06:12.719477892 CEST	50158	445	192.168.2.5	130.195.218.45
Oct 25, 2024 20:06:12.719666004 CEST	50159	139	192.168.2.5	130.195.218.45
Oct 25, 2024 20:06:12.744942904 CEST	50153	139	192.168.2.5	130.195.213.9
Oct 25, 2024 20:06:12.760510921 CEST	50130	139	192.168.2.5	130.195.216.21
Oct 25, 2024 20:06:12.854969978 CEST	50160	445	192.168.2.5	130.195.218.60
Oct 25, 2024 20:06:12.860400915 CEST	445	50160	130.195.218.60	192.168.2.5
Oct 25, 2024 20:06:12.860650063 CEST	50160	445	192.168.2.5	130.195.218.60
Oct 25, 2024 20:06:12.860869884 CEST	50160	445	192.168.2.5	130.195.218.60
Oct 25, 2024 20:06:12.860871077 CEST	50161	139	192.168.2.5	130.195.218.60
Oct 25, 2024 20:06:12.873104095 CEST	50162	139	192.168.2.5	130.195.217.8
Oct 25, 2024 20:06:12.885556936 CEST	50132	139	192.168.2.5	130.195.211.53
Oct 25, 2024 20:06:12.979259968 CEST	50154	139	192.168.2.5	130.195.244.10
Oct 25, 2024 20:06:13.057519913 CEST	50155	139	192.168.2.5	130.195.216.10
Oct 25, 2024 20:06:13.151133060 CEST	50135	139	192.168.2.5	130.195.249.17
Oct 25, 2024 20:06:13.198015928 CEST	50137	139	192.168.2.5	130.195.245.14
Oct 25, 2024 20:06:13.651104927 CEST	50157	139	192.168.2.5	130.195.48.77
Oct 25, 2024 20:06:13.729237080 CEST	50159	139	192.168.2.5	130.195.218.45
Oct 25, 2024 20:06:13.869854927 CEST	50161	139	192.168.2.5	130.195.218.60
Oct 25, 2024 20:06:13.869910002 CEST	50162	139	192.168.2.5	130.195.217.8
Oct 25, 2024 20:06:13.979227066 CEST	50143	139	192.168.2.5	130.195.245.1
Oct 25, 2024 20:06:14.119884014 CEST	50145	139	192.168.2.5	130.195.60.1
Oct 25, 2024 20:06:14.432408094 CEST	50149	139	192.168.2.5	130.195.241.20
Oct 25, 2024 20:06:14.542120934 CEST	50150	139	192.168.2.5	130.195.213.54
Oct 25, 2024 20:06:14.573009968 CEST	50151	139	192.168.2.5	130.195.243.14
Oct 25, 2024 20:06:14.760520935 CEST	50153	139	192.168.2.5	130.195.213.9
Oct 25, 2024 20:06:14.793430090 CEST	50119	445	192.168.2.5	130.195.250.100
Oct 25, 2024 20:06:14.794123888 CEST	50163	139	192.168.2.5	130.195.250.100
Oct 25, 2024 20:06:14.979262114 CEST	50154	139	192.168.2.5	130.195.244.10
Oct 25, 2024 20:06:15.026957989 CEST	50120	445	192.168.2.5	130.195.240.22
Oct 25, 2024 20:06:15.027158976 CEST	50164	139	192.168.2.5	130.195.240.22
Oct 25, 2024 20:06:15.057415009 CEST	50155	139	192.168.2.5	130.195.216.10
Oct 25, 2024 20:06:15.229557991 CEST	50165	445	192.168.2.5	130.195.196.194
Oct 25, 2024 20:06:15.235167027 CEST	445	50165	130.195.196.194	192.168.2.5
Oct 25, 2024 20:06:15.235246897 CEST	50165	445	192.168.2.5	130.195.196.194
Oct 25, 2024 20:06:15.235377073 CEST	50165	445	192.168.2.5	130.195.196.194
Oct 25, 2024 20:06:15.240699053 CEST	445	50165	130.195.196.194	192.168.2.5
Oct 25, 2024 20:06:15.448636055 CEST	50166	445	192.168.2.5	130.195.3.26
Oct 25, 2024 20:06:15.454030991 CEST	445	50166	130.195.3.26	192.168.2.5
Oct 25, 2024 20:06:15.454127073 CEST	50166	445	192.168.2.5	130.195.3.26
Oct 25, 2024 20:06:15.454231024 CEST	50166	445	192.168.2.5	130.195.3.26
Oct 25, 2024 20:06:15.459527969 CEST	445	50166	130.195.3.26	192.168.2.5
Oct 25, 2024 20:06:15.526241064 CEST	50126	445	192.168.2.5	130.195.243.25
Oct 25, 2024 20:06:15.528563023 CEST	50167	139	192.168.2.5	130.195.243.25
Oct 25, 2024 20:06:15.604275942 CEST	50128	445	192.168.2.5	130.195.213.23
Oct 25, 2024 20:06:15.604439974 CEST	50129	445	192.168.2.5	130.195.213.58
Oct 25, 2024 20:06:15.604559898 CEST	50168	139	192.168.2.5	130.195.213.58
Oct 25, 2024 20:06:15.604671955 CEST	50169	139	192.168.2.5	130.195.213.23
Oct 25, 2024 20:06:15.666874886 CEST	50157	139	192.168.2.5	130.195.48.77
Oct 25, 2024 20:06:15.729291916 CEST	50159	139	192.168.2.5	130.195.218.45
Oct 25, 2024 20:06:15.776664972 CEST	50170	445	192.168.2.5	130.195.216.21
Oct 25, 2024 20:06:15.782077074 CEST	445	50170	130.195.216.21	192.168.2.5
Oct 25, 2024 20:06:15.782161951 CEST	50170	445	192.168.2.5	130.195.216.21
Oct 25, 2024 20:06:15.782218933 CEST	50170	445	192.168.2.5	130.195.216.21
Oct 25, 2024 20:06:15.787565947 CEST	445	50170	130.195.216.21	192.168.2.5
Oct 25, 2024 20:06:15.807374954 CEST	50163	139	192.168.2.5	130.195.250.100
Oct 25, 2024 20:06:15.885499001 CEST	50161	139	192.168.2.5	130.195.218.60
Oct 25, 2024 20:06:15.885571957 CEST	50162	139	192.168.2.5	130.195.217.8
Oct 25, 2024 20:06:15.885937929 CEST	50171	445	192.168.2.5	130.195.211.53
Oct 25, 2024 20:06:15.892218113 CEST	445	50171	130.195.211.53	192.168.2.5
Oct 25, 2024 20:06:15.892291069 CEST	50171	445	192.168.2.5	130.195.211.53
Oct 25, 2024 20:06:15.892374992 CEST	50171	445	192.168.2.5	130.195.211.53
Oct 25, 2024 20:06:15.898838043 CEST	445	50171	130.195.211.53	192.168.2.5
Oct 25, 2024 20:06:15.928942919 CEST	445	50165	130.195.196.194	192.168.2.5
Oct 25, 2024 20:06:15.932226896 CEST	50165	445	192.168.2.5	130.195.196.194
Oct 25, 2024 20:06:15.932267904 CEST	50165	445	192.168.2.5	130.195.196.194
Oct 25, 2024 20:06:15.932621956 CEST	50133	445	192.168.2.5	130.195.245.29
Oct 25, 2024 20:06:15.932791948 CEST	50172	139	192.168.2.5	130.195.196.194
Oct 25, 2024 20:06:15.932811975 CEST	50173	139	192.168.2.5	130.195.245.29
Oct 25, 2024 20:06:16.041740894 CEST	50164	139	192.168.2.5	130.195.240.22
Oct 25, 2024 20:06:16.136096001 CEST	50174	445	192.168.2.5	130.195.249.17
Oct 25, 2024 20:06:16.142015934 CEST	445	50174	130.195.249.17	192.168.2.5
Oct 25, 2024 20:06:16.144514084 CEST	50174	445	192.168.2.5	130.195.249.17
Oct 25, 2024 20:06:16.144531012 CEST	50174	445	192.168.2.5	130.195.249.17
Oct 25, 2024 20:06:16.144675016 CEST	50175	139	192.168.2.5	130.195.249.17
Oct 25, 2024 20:06:16.183058977 CEST	50176	445	192.168.2.5	130.195.245.14
Oct 25, 2024 20:06:16.188716888 CEST	445	50176	130.195.245.14	192.168.2.5
Oct 25, 2024 20:06:16.192487955 CEST	50176	445	192.168.2.5	130.195.245.14
Oct 25, 2024 20:06:16.193694115 CEST	50176	445	192.168.2.5	130.195.245.14
Oct 25, 2024 20:06:16.199218988 CEST	445	50176	130.195.245.14	192.168.2.5
Oct 25, 2024 20:06:16.448034048 CEST	50140	445	192.168.2.5	130.195.211.50
Oct 25, 2024 20:06:16.448235035 CEST	50177	139	192.168.2.5	130.195.211.50
Oct 25, 2024 20:06:16.541749001 CEST	50167	139	192.168.2.5	130.195.243.25
Oct 25, 2024 20:06:16.604266882 CEST	50169	139	192.168.2.5	130.195.213.23
Oct 25, 2024 20:06:16.604269981 CEST	50168	139	192.168.2.5	130.195.213.58
Oct 25, 2024 20:06:16.948024988 CEST	50173	139	192.168.2.5	130.195.245.29
Oct 25, 2024 20:06:16.948043108 CEST	50172	139	192.168.2.5	130.195.196.194
Oct 25, 2024 20:06:16.979484081 CEST	50178	445	192.168.2.5	130.195.245.1
Oct 25, 2024 20:06:16.984879017 CEST	445	50178	130.195.245.1	192.168.2.5
Oct 25, 2024 20:06:16.988473892 CEST	50178	445	192.168.2.5	130.195.245.1
Oct 25, 2024 20:06:16.988507032 CEST	50178	445	192.168.2.5	130.195.245.1
Oct 25, 2024 20:06:16.988646984 CEST	50179	139	192.168.2.5	130.195.245.1
Oct 25, 2024 20:06:17.120225906 CEST	50180	445	192.168.2.5	130.195.60.1
Oct 25, 2024 20:06:17.125906944 CEST	445	50180	130.195.60.1	192.168.2.5
Oct 25, 2024 20:06:17.125994921 CEST	50180	445	192.168.2.5	130.195.60.1
Oct 25, 2024 20:06:17.126060963 CEST	50180	445	192.168.2.5	130.195.60.1
Oct 25, 2024 20:06:17.131434917 CEST	445	50180	130.195.60.1	192.168.2.5
Oct 25, 2024 20:06:17.151113987 CEST	50175	139	192.168.2.5	130.195.249.17
Oct 25, 2024 20:06:17.198460102 CEST	50146	445	192.168.2.5	130.195.5.5
Oct 25, 2024 20:06:17.209631920 CEST	50181	139	192.168.2.5	130.195.5.5
Oct 25, 2024 20:06:17.432852983 CEST	50182	445	192.168.2.5	130.195.241.20
Oct 25, 2024 20:06:17.439132929 CEST	445	50182	130.195.241.20	192.168.2.5
Oct 25, 2024 20:06:17.440494061 CEST	50182	445	192.168.2.5	130.195.241.20
Oct 25, 2024 20:06:17.440582037 CEST	50182	445	192.168.2.5	130.195.241.20
Oct 25, 2024 20:06:17.447421074 CEST	445	50182	130.195.241.20	192.168.2.5
Oct 25, 2024 20:06:17.463653088 CEST	50177	139	192.168.2.5	130.195.211.50
Oct 25, 2024 20:06:17.526622057 CEST	50183	445	192.168.2.5	130.195.213.54
Oct 25, 2024 20:06:17.532449961 CEST	445	50183	130.195.213.54	192.168.2.5
Oct 25, 2024 20:06:17.532566071 CEST	50183	445	192.168.2.5	130.195.213.54
Oct 25, 2024 20:06:17.532654047 CEST	50183	445	192.168.2.5	130.195.213.54
Oct 25, 2024 20:06:17.538383007 CEST	445	50183	130.195.213.54	192.168.2.5
Oct 25, 2024 20:06:17.574575901 CEST	50152	445	192.168.2.5	130.195.5.24
Oct 25, 2024 20:06:17.574896097 CEST	50184	139	192.168.2.5	130.195.5.24
Oct 25, 2024 20:06:17.575063944 CEST	50185	445	192.168.2.5	130.195.243.14
Oct 25, 2024 20:06:17.580682993 CEST	445	50185	130.195.243.14	192.168.2.5
Oct 25, 2024 20:06:17.584201097 CEST	50185	445	192.168.2.5	130.195.243.14
Oct 25, 2024 20:06:17.584328890 CEST	50185	445	192.168.2.5	130.195.243.14
Oct 25, 2024 20:06:17.589935064 CEST	445	50185	130.195.243.14	192.168.2.5
Oct 25, 2024 20:06:17.713681936 CEST	445	50180	130.195.60.1	192.168.2.5
Oct 25, 2024 20:06:17.713758945 CEST	50180	445	192.168.2.5	130.195.60.1
Oct 25, 2024 20:06:17.713802099 CEST	50180	445	192.168.2.5	130.195.60.1
Oct 25, 2024 20:06:17.713959932 CEST	50186	139	192.168.2.5	130.195.60.1
Oct 25, 2024 20:06:17.729451895 CEST	50187	445	192.168.2.5	130.195.213.9
Oct 25, 2024 20:06:17.734864950 CEST	445	50187	130.195.213.9	192.168.2.5
Oct 25, 2024 20:06:17.736454964 CEST	50187	445	192.168.2.5	130.195.213.9
Oct 25, 2024 20:06:17.736527920 CEST	50187	445	192.168.2.5	130.195.213.9
Oct 25, 2024 20:06:17.742103100 CEST	445	50187	130.195.213.9	192.168.2.5
Oct 25, 2024 20:06:17.823030949 CEST	50163	139	192.168.2.5	130.195.250.100
Oct 25, 2024 20:06:17.979506016 CEST	50188	445	192.168.2.5	130.195.244.10
Oct 25, 2024 20:06:17.985601902 CEST	445	50188	130.195.244.10	192.168.2.5
Oct 25, 2024 20:06:17.988589048 CEST	50188	445	192.168.2.5	130.195.244.10
Oct 25, 2024 20:06:17.988699913 CEST	50188	445	192.168.2.5	130.195.244.10
Oct 25, 2024 20:06:17.994117022 CEST	445	50188	130.195.244.10	192.168.2.5
Oct 25, 2024 20:06:17.994890928 CEST	50179	139	192.168.2.5	130.195.245.1
Oct 25, 2024 20:06:18.041764021 CEST	50164	139	192.168.2.5	130.195.240.22
Oct 25, 2024 20:06:18.057643890 CEST	50189	445	192.168.2.5	130.195.216.10
Oct 25, 2024 20:06:18.063411951 CEST	445	50189	130.195.216.10	192.168.2.5
Oct 25, 2024 20:06:18.064457893 CEST	50189	445	192.168.2.5	130.195.216.10
Oct 25, 2024 20:06:18.064512014 CEST	50189	445	192.168.2.5	130.195.216.10
Oct 25, 2024 20:06:18.070046902 CEST	445	50189	130.195.216.10	192.168.2.5
Oct 25, 2024 20:06:18.213686943 CEST	50181	139	192.168.2.5	130.195.5.5
Oct 25, 2024 20:06:18.503590107 CEST	445	50188	130.195.244.10	192.168.2.5
Oct 25, 2024 20:06:18.503969908 CEST	50188	445	192.168.2.5	130.195.244.10
Oct 25, 2024 20:06:18.503969908 CEST	50188	445	192.168.2.5	130.195.244.10
Oct 25, 2024 20:06:18.504209995 CEST	50190	139	192.168.2.5	130.195.244.10
Oct 25, 2024 20:06:18.541740894 CEST	50167	139	192.168.2.5	130.195.243.25
Oct 25, 2024 20:06:18.588638067 CEST	50184	139	192.168.2.5	130.195.5.24
Oct 25, 2024 20:06:18.604239941 CEST	50168	139	192.168.2.5	130.195.213.58
Oct 25, 2024 20:06:18.604305029 CEST	50169	139	192.168.2.5	130.195.213.23
Oct 25, 2024 20:06:18.666955948 CEST	50191	445	192.168.2.5	130.195.48.77
Oct 25, 2024 20:06:18.672230959 CEST	445	50191	130.195.48.77	192.168.2.5
Oct 25, 2024 20:06:18.672301054 CEST	50191	445	192.168.2.5	130.195.48.77
Oct 25, 2024 20:06:18.672352076 CEST	50191	445	192.168.2.5	130.195.48.77
Oct 25, 2024 20:06:18.677670002 CEST	445	50191	130.195.48.77	192.168.2.5
Oct 25, 2024 20:06:18.713614941 CEST	50186	139	192.168.2.5	130.195.60.1
Oct 25, 2024 20:06:18.729485035 CEST	50192	445	192.168.2.5	130.195.218.45
Oct 25, 2024 20:06:18.734922886 CEST	445	50192	130.195.218.45	192.168.2.5
Oct 25, 2024 20:06:18.734989882 CEST	50192	445	192.168.2.5	130.195.218.45
Oct 25, 2024 20:06:18.735044956 CEST	50192	445	192.168.2.5	130.195.218.45
Oct 25, 2024 20:06:18.741285086 CEST	445	50192	130.195.218.45	192.168.2.5
Oct 25, 2024 20:06:18.870157957 CEST	50193	445	192.168.2.5	130.195.218.60
Oct 25, 2024 20:06:18.875579119 CEST	445	50193	130.195.218.60	192.168.2.5
Oct 25, 2024 20:06:18.875643969 CEST	50193	445	192.168.2.5	130.195.218.60
Oct 25, 2024 20:06:18.875724077 CEST	50193	445	192.168.2.5	130.195.218.60
Oct 25, 2024 20:06:18.881144047 CEST	445	50193	130.195.218.60	192.168.2.5
Oct 25, 2024 20:06:18.885727882 CEST	50194	445	192.168.2.5	130.195.217.8
Oct 25, 2024 20:06:18.891168118 CEST	445	50194	130.195.217.8	192.168.2.5
Oct 25, 2024 20:06:18.891225100 CEST	50194	445	192.168.2.5	130.195.217.8
Oct 25, 2024 20:06:18.891285896 CEST	50194	445	192.168.2.5	130.195.217.8
Oct 25, 2024 20:06:18.891541004 CEST	50195	139	192.168.2.5	130.195.217.8
Oct 25, 2024 20:06:18.948121071 CEST	50172	139	192.168.2.5	130.195.196.194
Oct 25, 2024 20:06:18.948257923 CEST	50173	139	192.168.2.5	130.195.245.29
Oct 25, 2024 20:06:19.166775942 CEST	50175	139	192.168.2.5	130.195.249.17
Oct 25, 2024 20:06:19.463649988 CEST	50177	139	192.168.2.5	130.195.211.50
Oct 25, 2024 20:06:19.510499001 CEST	50190	139	192.168.2.5	130.195.244.10
Oct 25, 2024 20:06:19.901170015 CEST	50195	139	192.168.2.5	130.195.217.8
Oct 25, 2024 20:06:20.010502100 CEST	50179	139	192.168.2.5	130.195.245.1
Oct 25, 2024 20:06:20.213654995 CEST	50181	139	192.168.2.5	130.195.5.5
Oct 25, 2024 20:06:20.457834959 CEST	50189	445	192.168.2.5	130.195.216.10
Oct 25, 2024 20:06:20.457988024 CEST	50193	445	192.168.2.5	130.195.218.60
Oct 25, 2024 20:06:20.458159924 CEST	50171	445	192.168.2.5	130.195.211.53
Oct 25, 2024 20:06:20.458268881 CEST	50176	445	192.168.2.5	130.195.245.14
Oct 25, 2024 20:06:20.458304882 CEST	50183	445	192.168.2.5	130.195.213.54
Oct 25, 2024 20:06:20.458329916 CEST	50185	445	192.168.2.5	130.195.243.14
Oct 25, 2024 20:06:20.458363056 CEST	50166	445	192.168.2.5	130.195.3.26
Oct 25, 2024 20:06:20.458425045 CEST	50187	445	192.168.2.5	130.195.213.9
Oct 25, 2024 20:06:20.458457947 CEST	50182	445	192.168.2.5	130.195.241.20
Oct 25, 2024 20:06:20.458498955 CEST	50192	445	192.168.2.5	130.195.218.45
Oct 25, 2024 20:06:20.458494902 CEST	50191	445	192.168.2.5	130.195.48.77
Oct 25, 2024 20:06:20.458532095 CEST	50170	445	192.168.2.5	130.195.216.21

ICMP Packets

Timestamp	Source IP	Dest IP	Checksum	Type
Oct 25, 2024 20:05:06.117816925 CEST	192.168.2.5	130.195.71.161	1253	Echo
Oct 25, 2024 20:05:06.136879921 CEST	192.168.2.5	130.195.220.123	1252	Echo
Oct 25, 2024 20:05:06.167866945 CEST	192.168.2.5	130.195.105.217	1251	Echo
Oct 25, 2024 20:05:06.204288960 CEST	192.168.2.5	130.195.239.155	1250	Echo
Oct 25, 2024 20:05:06.230549097 CEST	192.168.2.5	130.195.138.60	124f	Echo
Oct 25, 2024 20:05:06.261661053 CEST	192.168.2.5	130.195.174.68	124e	Echo
Oct 25, 2024 20:05:06.292846918 CEST	192.168.2.5	130.195.191.174	124d	Echo
Oct 25, 2024 20:05:06.324327946 CEST	192.168.2.5	130.195.136.191	124c	Echo
Oct 25, 2024 20:05:06.355084896 CEST	192.168.2.5	130.195.46.192	124b	Echo
Oct 25, 2024 20:05:06.386568069 CEST	192.168.2.5	130.195.205.216	124a	Echo
Oct 25, 2024 20:05:06.418351889 CEST	192.168.2.5	130.195.23.166	1249	Echo
Oct 25, 2024 20:05:06.449565887 CEST	192.168.2.5	130.195.2.218	1248	Echo
Oct 25, 2024 20:05:06.481329918 CEST	192.168.2.5	130.195.135.31	1247	Echo
Oct 25, 2024 20:05:06.511349916 CEST	192.168.2.5	130.195.128.134	1246	Echo
Oct 25, 2024 20:05:06.563535929 CEST	192.168.2.5	130.195.22.204	1245	Echo
Oct 25, 2024 20:05:06.574059963 CEST	192.168.2.5	130.195.64.33	1244	Echo
Oct 25, 2024 20:05:06.606817007 CEST	192.168.2.5	130.195.184.122	1243	Echo
Oct 25, 2024 20:05:06.637340069 CEST	192.168.2.5	130.195.232.189	1242	Echo
Oct 25, 2024 20:05:06.668261051 CEST	192.168.2.5	130.195.54.167	1241	Echo
Oct 25, 2024 20:05:06.699291945 CEST	192.168.2.5	130.195.80.237	1240	Echo
Oct 25, 2024 20:05:06.730282068 CEST	192.168.2.5	130.195.64.114	123f	Echo
Oct 25, 2024 20:05:06.762063980 CEST	192.168.2.5	130.195.2.17	123e	Echo
Oct 25, 2024 20:05:06.793706894 CEST	192.168.2.5	130.195.15.10	123d	Echo
Oct 25, 2024 20:05:06.824718952 CEST	192.168.2.5	130.195.207.41	123c	Echo
Oct 25, 2024 20:05:06.880985975 CEST	192.168.2.5	130.195.84.14	123b	Echo
Oct 25, 2024 20:05:06.902528048 CEST	192.168.2.5	130.195.103.189	123a	Echo
Oct 25, 2024 20:05:06.936897039 CEST	192.168.2.5	130.195.170.200	1239	Echo
Oct 25, 2024 20:05:06.965140104 CEST	192.168.2.5	130.195.64.66	1238	Echo
Oct 25, 2024 20:05:07.001992941 CEST	192.168.2.5	130.195.97.210	1237	Echo
Oct 25, 2024 20:05:07.027345896 CEST	192.168.2.5	130.195.197.97	1236	Echo
Oct 25, 2024 20:05:07.058864117 CEST	192.168.2.5	130.195.71.194	1235	Echo
Oct 25, 2024 20:05:07.089917898 CEST	192.168.2.5	130.195.62.54	1234	Echo
Oct 25, 2024 20:05:07.121217966 CEST	192.168.2.5	130.195.211.231	1233	Echo
Oct 25, 2024 20:05:07.152534008 CEST	192.168.2.5	130.195.52.231	1232	Echo
Oct 25, 2024 20:05:07.183876991 CEST	192.168.2.5	130.195.185.153	1231	Echo
Oct 25, 2024 20:05:07.222105980 CEST	192.168.2.5	130.195.67.253	1230	Echo
Oct 25, 2024 20:05:07.246301889 CEST	192.168.2.5	130.195.154.23	122f	Echo
Oct 25, 2024 20:05:07.277327061 CEST	192.168.2.5	130.195.219.46	122e	Echo
Oct 25, 2024 20:05:07.308608055 CEST	192.168.2.5	130.195.140.170	122d	Echo
Oct 25, 2024 20:05:07.343225956 CEST	192.168.2.5	130.195.149.110	122c	Echo
Oct 25, 2024 20:05:07.372656107 CEST	192.168.2.5	130.195.123.234	122b	Echo
Oct 25, 2024 20:05:07.403645039 CEST	192.168.2.5	130.195.187.124	122a	Echo
Oct 25, 2024 20:05:07.433880091 CEST	192.168.2.5	130.195.3.205	1229	Echo
Oct 25, 2024 20:05:07.464711905 CEST	192.168.2.5	130.195.210.181	1228	Echo
Oct 25, 2024 20:05:07.497250080 CEST	192.168.2.5	130.195.52.167	1227	Echo
Oct 25, 2024 20:05:07.527231932 CEST	192.168.2.5	130.195.214.152	1226	Echo
Oct 25, 2024 20:05:07.577804089 CEST	192.168.2.5	130.195.224.1	1225	Echo
Oct 25, 2024 20:05:07.605922937 CEST	192.168.2.5	130.195.69.178	1224	Echo
Oct 25, 2024 20:05:07.637109995 CEST	192.168.2.5	130.195.113.4	1223	Echo
Oct 25, 2024 20:05:07.668164968 CEST	192.168.2.5	130.195.25.236	1222	Echo
Oct 25, 2024 20:05:07.702881098 CEST	192.168.2.5	130.195.218.233	1221	Echo
Oct 25, 2024 20:05:07.731709957 CEST	192.168.2.5	130.195.27.235	1220	Echo
Oct 25, 2024 20:05:07.763254881 CEST	192.168.2.5	130.195.112.224	121f	Echo
Oct 25, 2024 20:05:07.794540882 CEST	192.168.2.5	130.195.77.126	121e	Echo
Oct 25, 2024 20:05:07.824448109 CEST	192.168.2.5	130.195.3.185	121d	Echo
Oct 25, 2024 20:05:07.871546984 CEST	192.168.2.5	130.195.115.172	121c	Echo
Oct 25, 2024 20:05:07.962035894 CEST	192.168.2.5	130.195.104.80	121b	Echo
Oct 25, 2024 20:05:07.964183092 CEST	192.168.2.5	130.195.89.118	121a	Echo
Oct 25, 2024 20:05:07.965657949 CEST	192.168.2.5	130.195.71.161	1219	Echo
Oct 25, 2024 20:05:07.965848923 CEST	192.168.2.5	130.195.220.123	1218	Echo
Oct 25, 2024 20:05:07.966005087 CEST	192.168.2.5	130.195.105.217	1217	Echo
Oct 25, 2024 20:05:07.966054916 CEST	192.168.2.5	130.195.239.155	1216	Echo
Oct 25, 2024 20:05:07.966171026 CEST	192.168.2.5	130.195.138.60	1215	Echo
Oct 25, 2024 20:05:07.966331005 CEST	192.168.2.5	130.195.174.68	1214	Echo
Oct 25, 2024 20:05:07.966362953 CEST	192.168.2.5	130.195.191.174	1213	Echo
Oct 25, 2024 20:05:07.966595888 CEST	192.168.2.5	130.195.136.191	1212	Echo
Oct 25, 2024 20:05:07.966718912 CEST	192.168.2.5	130.195.46.192	1211	Echo
Oct 25, 2024 20:05:07.966720104 CEST	192.168.2.5	130.195.205.216	1210	Echo
Oct 25, 2024 20:05:07.966847897 CEST	192.168.2.5	130.195.23.166	120f	Echo
Oct 25, 2024 20:05:07.966907024 CEST	192.168.2.5	130.195.2.218	120e	Echo
Oct 25, 2024 20:05:07.996388912 CEST	192.168.2.5	130.195.103.210	120d	Echo
Oct 25, 2024 20:05:08.158332109 CEST	192.168.2.5	130.195.119.90	120c	Echo
Oct 25, 2024 20:05:08.229053020 CEST	192.168.2.5	130.195.37.176	120b	Echo
Oct 25, 2024 20:05:08.327574015 CEST	192.168.2.5	130.195.183.171	120a	Echo
Oct 25, 2024 20:05:08.351865053 CEST	192.168.2.5	130.195.33.47	1209	Echo
Oct 25, 2024 20:05:08.375205040 CEST	192.168.2.5	130.195.9.183	1208	Echo
Oct 25, 2024 20:05:08.408584118 CEST	192.168.2.5	130.195.40.74	1207	Echo
Oct 25, 2024 20:05:08.437805891 CEST	192.168.2.5	130.195.121.28	1206	Echo
Oct 25, 2024 20:05:08.465015888 CEST	192.168.2.5	130.195.135.31	1205	Echo
Oct 25, 2024 20:05:08.465250015 CEST	192.168.2.5	130.195.128.134	1204	Echo
Oct 25, 2024 20:05:08.466059923 CEST	192.168.2.5	130.195.17.191	1203	Echo
Oct 25, 2024 20:05:08.466059923 CEST	192.168.2.5	130.195.22.204	1202	Echo
Oct 25, 2024 20:05:08.466128111 CEST	192.168.2.5	130.195.64.33	1201	Echo
Oct 25, 2024 20:05:08.466372967 CEST	192.168.2.5	130.195.184.122	1200	Echo
Oct 25, 2024 20:05:08.466423988 CEST	192.168.2.5	130.195.54.167	11fe	Echo
Oct 25, 2024 20:05:08.466435909 CEST	192.168.2.5	130.195.232.189	11ff	Echo
Oct 25, 2024 20:05:08.466536045 CEST	192.168.2.5	130.195.80.237	11fd	Echo
Oct 25, 2024 20:05:08.466629982 CEST	192.168.2.5	130.195.64.114	11fc	Echo
Oct 25, 2024 20:05:08.466816902 CEST	192.168.2.5	130.195.15.10	11fa	Echo
Oct 25, 2024 20:05:08.466835022 CEST	192.168.2.5	130.195.2.17	11fb	Echo
Oct 25, 2024 20:05:08.466993093 CEST	192.168.2.5	130.195.84.14	11f8	Echo
Oct 25, 2024 20:05:08.467025995 CEST	192.168.2.5	130.195.207.41	11f9	Echo
Oct 25, 2024 20:05:08.467089891 CEST	192.168.2.5	130.195.103.189	11f7	Echo
Oct 25, 2024 20:05:08.467185020 CEST	192.168.2.5	130.195.170.200	11f6	Echo
Oct 25, 2024 20:05:08.496109962 CEST	192.168.2.5	130.195.113.37	11f5	Echo
Oct 25, 2024 20:05:08.527750969 CEST	192.168.2.5	130.195.93.95	11f4	Echo
Oct 25, 2024 20:05:08.558607101 CEST	192.168.2.5	130.195.35.204	11f3	Echo
Oct 25, 2024 20:05:08.611892939 CEST	192.168.2.5	130.195.187.168	11f2	Echo
Oct 25, 2024 20:05:08.637552977 CEST	192.168.2.5	130.195.55.169	11f1	Echo
Oct 25, 2024 20:05:08.668495893 CEST	192.168.2.5	130.195.209.235	11f0	Echo
Oct 25, 2024 20:05:08.700069904 CEST	192.168.2.5	130.195.243.25	11ef	Echo
Oct 25, 2024 20:05:08.730671883 CEST	192.168.2.5	130.195.220.239	11ee	Echo
Oct 25, 2024 20:05:08.761492014 CEST	192.168.2.5	130.195.27.221	11ed	Echo
Oct 25, 2024 20:05:08.792628050 CEST	192.168.2.5	130.195.13.206	11ec	Echo
Oct 25, 2024 20:05:08.824071884 CEST	192.168.2.5	130.195.144.91	11eb	Echo
Oct 25, 2024 20:05:08.855828047 CEST	192.168.2.5	130.195.48.160	11ea	Echo
Oct 25, 2024 20:05:08.886615992 CEST	192.168.2.5	130.195.180.205	11e9	Echo
Oct 25, 2024 20:05:08.918018103 CEST	192.168.2.5	130.195.45.181	11e8	Echo
Oct 25, 2024 20:05:08.949389935 CEST	192.168.2.5	130.195.148.219	11e7	Echo
Oct 25, 2024 20:05:08.964193106 CEST	192.168.2.5	130.195.64.66	11e6	Echo
Oct 25, 2024 20:05:08.964361906 CEST	192.168.2.5	130.195.97.210	11e5	Echo
Oct 25, 2024 20:05:08.964365959 CEST	192.168.2.5	130.195.197.97	11e4	Echo
Oct 25, 2024 20:05:08.964545965 CEST	192.168.2.5	130.195.62.54	11e2	Echo
Oct 25, 2024 20:05:08.964576960 CEST	192.168.2.5	130.195.211.231	11e1	Echo
Oct 25, 2024 20:05:08.964590073 CEST	192.168.2.5	130.195.71.194	11e3	Echo
Oct 25, 2024 20:05:08.964777946 CEST	192.168.2.5	130.195.185.153	11df	Echo
Oct 25, 2024 20:05:08.964849949 CEST	192.168.2.5	130.195.52.231	11e0	Echo
Oct 25, 2024 20:05:08.965051889 CEST	192.168.2.5	130.195.67.253	11de	Echo
Oct 25, 2024 20:05:08.965118885 CEST	192.168.2.5	130.195.154.23	11dd	Echo
Oct 25, 2024 20:05:08.965339899 CEST	192.168.2.5	130.195.219.46	11dc	Echo
Oct 25, 2024 20:05:08.965421915 CEST	192.168.2.5	130.195.140.170	11db	Echo
Oct 25, 2024 20:05:08.966377974 CEST	192.168.2.5	130.195.149.110	11da	Echo
Oct 25, 2024 20:05:08.966511965 CEST	192.168.2.5	130.195.123.234	11d9	Echo
Oct 25, 2024 20:05:08.966626883 CEST	192.168.2.5	130.195.3.205	11d7	Echo
Oct 25, 2024 20:05:08.966696024 CEST	192.168.2.5	130.195.187.124	11d8	Echo
Oct 25, 2024 20:05:08.980385065 CEST	192.168.2.5	130.195.248.181	11d6	Echo
Oct 25, 2024 20:05:09.011889935 CEST	192.168.2.5	130.195.28.165	11d5	Echo
Oct 25, 2024 20:05:09.038043022 CEST	130.195.243.25	192.168.2.5	19ef	Echo Reply
Oct 25, 2024 20:05:09.038819075 CEST	192.168.2.5	130.195.243.25	11d4	Echo
Oct 25, 2024 20:05:09.042924881 CEST	192.168.2.5	130.195.8.189	11d3	Echo
Oct 25, 2024 20:05:09.064551115 CEST	130.195.243.25	192.168.2.5	19d4	Echo Reply
Oct 25, 2024 20:05:09.074181080 CEST	192.168.2.5	130.195.42.135	11d2	Echo
Oct 25, 2024 20:05:09.105195999 CEST	192.168.2.5	130.195.147.144	11d1	Echo
Oct 25, 2024 20:05:09.136718035 CEST	192.168.2.5	130.195.125.177	11d0	Echo
Oct 25, 2024 20:05:09.168009043 CEST	192.168.2.5	130.195.156.120	11cf	Echo
Oct 25, 2024 20:05:09.199795008 CEST	192.168.2.5	130.195.154.156	11ce	Echo
Oct 25, 2024 20:05:09.236859083 CEST	192.168.2.5	130.195.189.245	11cd	Echo
Oct 25, 2024 20:05:09.263307095 CEST	192.168.2.5	130.195.221.206	11cc	Echo
Oct 25, 2024 20:05:09.297131062 CEST	192.168.2.5	130.195.35.108	11cb	Echo
Oct 25, 2024 20:05:09.311574936 CEST	192.168.2.5	130.195.9.183	11ca	Echo
Oct 25, 2024 20:05:09.324395895 CEST	192.168.2.5	130.195.188.182	11c9	Echo
Oct 25, 2024 20:05:09.355676889 CEST	192.168.2.5	130.195.153.216	11c8	Echo
Oct 25, 2024 20:05:09.387100935 CEST	192.168.2.5	130.195.0.70	11c7	Echo
Oct 25, 2024 20:05:09.417887926 CEST	192.168.2.5	130.195.92.25	11c6	Echo
Oct 25, 2024 20:05:09.449443102 CEST	192.168.2.5	130.195.55.225	11c5	Echo
Oct 25, 2024 20:05:09.463926077 CEST	192.168.2.5	130.195.210.181	11c4	Echo
Oct 25, 2024 20:05:09.464257002 CEST	192.168.2.5	130.195.52.167	11c3	Echo
Oct 25, 2024 20:05:09.464257002 CEST	192.168.2.5	130.195.214.152	11c2	Echo
Oct 25, 2024 20:05:09.464358091 CEST	192.168.2.5	130.195.224.1	11c1	Echo
Oct 25, 2024 20:05:09.464621067 CEST	192.168.2.5	130.195.69.178	11c0	Echo
Oct 25, 2024 20:05:09.464701891 CEST	192.168.2.5	130.195.113.4	11bf	Echo
Oct 25, 2024 20:05:09.464701891 CEST	192.168.2.5	130.195.25.236	11be	Echo
Oct 25, 2024 20:05:09.464831114 CEST	192.168.2.5	130.195.27.235	11bc	Echo
Oct 25, 2024 20:05:09.464832067 CEST	192.168.2.5	130.195.218.233	11bd	Echo
Oct 25, 2024 20:05:09.464929104 CEST	192.168.2.5	130.195.77.126	11ba	Echo
Oct 25, 2024 20:05:09.464977026 CEST	192.168.2.5	130.195.112.224	11bb	Echo
Oct 25, 2024 20:05:09.465006113 CEST	192.168.2.5	130.195.3.185	11b9	Echo
Oct 25, 2024 20:05:09.465085983 CEST	192.168.2.5	130.195.115.172	11b8	Echo
Oct 25, 2024 20:05:09.465187073 CEST	192.168.2.5	130.195.104.80	11b7	Echo
Oct 25, 2024 20:05:09.480436087 CEST	192.168.2.5	130.195.203.57	11b6	Echo
Oct 25, 2024 20:05:09.511571884 CEST	192.168.2.5	130.195.72.245	11b5	Echo
Oct 25, 2024 20:05:09.543087959 CEST	192.168.2.5	130.195.60.84	11b4	Echo
Oct 25, 2024 20:05:09.574369907 CEST	192.168.2.5	130.195.63.21	11b3	Echo
Oct 25, 2024 20:05:09.605432987 CEST	192.168.2.5	130.195.79.155	11b2	Echo
Oct 25, 2024 20:05:09.637168884 CEST	192.168.2.5	130.195.155.88	11b1	Echo
Oct 25, 2024 20:05:09.668435097 CEST	192.168.2.5	130.195.49.255	11b0	Echo
Oct 25, 2024 20:05:09.699840069 CEST	192.168.2.5	130.195.31.221	11af	Echo
Oct 25, 2024 20:05:09.730642080 CEST	192.168.2.5	130.195.200.37	11ae	Echo
Oct 25, 2024 20:05:09.761739969 CEST	192.168.2.5	130.195.17.51	11ad	Echo
Oct 25, 2024 20:05:09.793253899 CEST	192.168.2.5	130.195.3.180	11ac	Echo
Oct 25, 2024 20:05:09.824405909 CEST	192.168.2.5	130.195.130.203	11ab	Echo
Oct 25, 2024 20:05:09.860352039 CEST	192.168.2.5	130.195.226.175	11aa	Echo
Oct 25, 2024 20:05:09.887124062 CEST	192.168.2.5	130.195.16.227	11a9	Echo
Oct 25, 2024 20:05:09.918493032 CEST	192.168.2.5	130.195.1.17	11a8	Echo
Oct 25, 2024 20:05:09.949285984 CEST	192.168.2.5	130.195.1.245	11a7	Echo
Oct 25, 2024 20:05:09.964672089 CEST	192.168.2.5	130.195.89.118	11a6	Echo
Oct 25, 2024 20:05:09.968959093 CEST	192.168.2.5	130.195.103.210	11a5	Echo
Oct 25, 2024 20:05:09.968962908 CEST	192.168.2.5	130.195.119.90	11a4	Echo
Oct 25, 2024 20:05:09.969060898 CEST	192.168.2.5	130.195.37.176	11a3	Echo
Oct 25, 2024 20:05:09.969333887 CEST	192.168.2.5	130.195.33.47	11a1	Echo
Oct 25, 2024 20:05:09.969404936 CEST	192.168.2.5	130.195.183.171	11a2	Echo
Oct 25, 2024 20:05:09.969439983 CEST	192.168.2.5	130.195.40.74	11a0	Echo
Oct 25, 2024 20:05:09.969526052 CEST	192.168.2.5	130.195.121.28	119f	Echo
Oct 25, 2024 20:05:09.980449915 CEST	192.168.2.5	130.195.68.173	119e	Echo
Oct 25, 2024 20:05:10.012269020 CEST	192.168.2.5	130.195.13.209	119d	Echo
Oct 25, 2024 20:05:10.043113947 CEST	192.168.2.5	130.195.23.19	119c	Echo
Oct 25, 2024 20:05:10.074369907 CEST	192.168.2.5	130.195.130.227	119b	Echo
Oct 25, 2024 20:05:10.105415106 CEST	192.168.2.5	130.195.176.240	119a	Echo
Oct 25, 2024 20:05:10.136805058 CEST	192.168.2.5	130.195.60.176	1199	Echo
Oct 25, 2024 20:05:10.167901039 CEST	192.168.2.5	130.195.146.118	1198	Echo
Oct 25, 2024 20:05:10.199035883 CEST	192.168.2.5	130.195.74.223	1197	Echo
Oct 25, 2024 20:05:10.230603933 CEST	192.168.2.5	130.195.168.118	1196	Echo
Oct 25, 2024 20:05:10.261765957 CEST	192.168.2.5	130.195.2.22	1195	Echo
Oct 25, 2024 20:05:10.295027971 CEST	192.168.2.5	130.195.184.99	1194	Echo
Oct 25, 2024 20:05:10.324717999 CEST	192.168.2.5	130.195.76.184	1193	Echo
Oct 25, 2024 20:05:10.355231047 CEST	192.168.2.5	130.195.153.27	1192	Echo
Oct 25, 2024 20:05:10.387285948 CEST	192.168.2.5	130.195.52.223	1191	Echo
Oct 25, 2024 20:05:10.418500900 CEST	192.168.2.5	130.195.24.255	1190	Echo
Oct 25, 2024 20:05:10.449439049 CEST	192.168.2.5	130.195.5.5	118f	Echo
Oct 25, 2024 20:05:10.464623928 CEST	192.168.2.5	130.195.17.191	118e	Echo
Oct 25, 2024 20:05:10.468934059 CEST	192.168.2.5	130.195.113.37	118d	Echo
Oct 25, 2024 20:05:10.469022036 CEST	192.168.2.5	130.195.93.95	118c	Echo
Oct 25, 2024 20:05:10.469136953 CEST	192.168.2.5	130.195.35.204	118b	Echo
Oct 25, 2024 20:05:10.469213963 CEST	192.168.2.5	130.195.187.168	118a	Echo
Oct 25, 2024 20:05:10.469269991 CEST	192.168.2.5	130.195.55.169	1189	Echo
Oct 25, 2024 20:05:10.469371080 CEST	192.168.2.5	130.195.209.235	1188	Echo
Oct 25, 2024 20:05:10.469455004 CEST	192.168.2.5	130.195.220.239	1187	Echo
Oct 25, 2024 20:05:10.469525099 CEST	192.168.2.5	130.195.27.221	1186	Echo
Oct 25, 2024 20:05:10.469584942 CEST	192.168.2.5	130.195.13.206	1185	Echo
Oct 25, 2024 20:05:10.469683886 CEST	192.168.2.5	130.195.144.91	1184	Echo
Oct 25, 2024 20:05:10.469748974 CEST	192.168.2.5	130.195.48.160	1183	Echo
Oct 25, 2024 20:05:10.469808102 CEST	192.168.2.5	130.195.180.205	1182	Echo
Oct 25, 2024 20:05:10.469928980 CEST	192.168.2.5	130.195.45.181	1181	Echo
Oct 25, 2024 20:05:10.470012903 CEST	192.168.2.5	130.195.148.219	1180	Echo
Oct 25, 2024 20:05:10.480294943 CEST	192.168.2.5	130.195.81.88	117f	Echo
Oct 25, 2024 20:05:10.512095928 CEST	192.168.2.5	130.195.83.112	117e	Echo
Oct 25, 2024 20:05:10.543075085 CEST	192.168.2.5	130.195.247.143	117d	Echo
Oct 25, 2024 20:05:10.583332062 CEST	192.168.2.5	130.195.203.254	117c	Echo
Oct 25, 2024 20:05:10.606720924 CEST	192.168.2.5	130.195.184.203	117b	Echo
Oct 25, 2024 20:05:10.636687994 CEST	192.168.2.5	130.195.64.1	117a	Echo
Oct 25, 2024 20:05:10.668420076 CEST	192.168.2.5	130.195.106.32	1179	Echo
Oct 25, 2024 20:05:10.700196981 CEST	192.168.2.5	130.195.235.200	1178	Echo
Oct 25, 2024 20:05:10.748783112 CEST	130.195.5.5	192.168.2.5	198f	Echo Reply
Oct 25, 2024 20:05:10.764445066 CEST	192.168.2.5	130.195.5.5	1177	Echo
Oct 25, 2024 20:05:10.766149998 CEST	192.168.2.5	130.195.25.140	1176	Echo
Oct 25, 2024 20:05:10.817815065 CEST	192.168.2.5	130.195.10.76	1175	Echo
Oct 25, 2024 20:05:10.862241983 CEST	192.168.2.5	130.195.39.28	1174	Echo
Oct 25, 2024 20:05:10.871927977 CEST	192.168.2.5	130.195.83.247	1173	Echo
Oct 25, 2024 20:05:10.908462048 CEST	192.168.2.5	130.195.227.83	1172	Echo
Oct 25, 2024 20:05:10.981722116 CEST	192.168.2.5	130.195.163.235	1171	Echo
Oct 25, 2024 20:05:11.013839960 CEST	192.168.2.5	130.195.65.10	1170	Echo
Oct 25, 2024 20:05:11.063797951 CEST	130.195.5.5	192.168.2.5	1977	Echo Reply
Oct 25, 2024 20:05:11.094749928 CEST	192.168.2.5	130.195.39.64	116f	Echo
Oct 25, 2024 20:05:11.108041048 CEST	192.168.2.5	130.195.101.132	116e	Echo
Oct 25, 2024 20:05:11.108570099 CEST	192.168.2.5	130.195.248.181	116d	Echo
Oct 25, 2024 20:05:11.109249115 CEST	192.168.2.5	130.195.28.165	116c	Echo
Oct 25, 2024 20:05:11.109734058 CEST	192.168.2.5	130.195.8.189	116b	Echo
Oct 25, 2024 20:05:11.110194921 CEST	192.168.2.5	130.195.42.135	116a	Echo
Oct 25, 2024 20:05:11.110420942 CEST	192.168.2.5	130.195.147.144	1169	Echo
Oct 25, 2024 20:05:11.110707045 CEST	192.168.2.5	130.195.125.177	1168	Echo
Oct 25, 2024 20:05:11.111414909 CEST	192.168.2.5	130.195.156.120	1167	Echo
Oct 25, 2024 20:05:11.111628056 CEST	192.168.2.5	130.195.154.156	1166	Echo
Oct 25, 2024 20:05:11.111953020 CEST	192.168.2.5	130.195.189.245	1165	Echo
Oct 25, 2024 20:05:11.112143040 CEST	192.168.2.5	130.195.221.206	1164	Echo
Oct 25, 2024 20:05:11.112479925 CEST	192.168.2.5	130.195.35.108	1163	Echo
Oct 25, 2024 20:05:11.113826036 CEST	192.168.2.5	130.195.188.182	1162	Echo
Oct 25, 2024 20:05:11.114845991 CEST	192.168.2.5	130.195.153.216	1161	Echo
Oct 25, 2024 20:05:11.115423918 CEST	192.168.2.5	130.195.0.70	1160	Echo
Oct 25, 2024 20:05:11.115809917 CEST	192.168.2.5	130.195.92.25	115f	Echo
Oct 25, 2024 20:05:11.115890980 CEST	192.168.2.5	130.195.55.225	115e	Echo
Oct 25, 2024 20:05:11.126782894 CEST	192.168.2.5	130.195.10.76	115d	Echo
Oct 25, 2024 20:05:11.153239012 CEST	192.168.2.5	130.195.192.151	115c	Echo
Oct 25, 2024 20:05:11.183681011 CEST	192.168.2.5	130.195.32.117	115b	Echo
Oct 25, 2024 20:05:11.214643955 CEST	192.168.2.5	130.195.129.76	115a	Echo
Oct 25, 2024 20:05:11.246020079 CEST	192.168.2.5	130.195.22.34	1159	Echo
Oct 25, 2024 20:05:11.277175903 CEST	192.168.2.5	130.195.148.24	1158	Echo
Oct 25, 2024 20:05:11.308480978 CEST	192.168.2.5	130.195.84.142	1157	Echo
Oct 25, 2024 20:05:11.339653015 CEST	192.168.2.5	130.195.209.101	1156	Echo
Oct 25, 2024 20:05:11.371592045 CEST	192.168.2.5	130.195.139.209	1155	Echo
Oct 25, 2024 20:05:11.402023077 CEST	192.168.2.5	130.195.31.163	1154	Echo
Oct 25, 2024 20:05:11.434335947 CEST	192.168.2.5	130.195.199.78	1153	Echo
Oct 25, 2024 20:05:11.464978933 CEST	192.168.2.5	130.195.167.198	1152	Echo
Oct 25, 2024 20:05:11.467688084 CEST	192.168.2.5	130.195.203.57	1151	Echo
Oct 25, 2024 20:05:11.467752934 CEST	192.168.2.5	130.195.72.245	1150	Echo
Oct 25, 2024 20:05:11.467933893 CEST	192.168.2.5	130.195.60.84	114f	Echo
Oct 25, 2024 20:05:11.467983961 CEST	192.168.2.5	130.195.63.21	114e	Echo
Oct 25, 2024 20:05:11.467998028 CEST	192.168.2.5	130.195.79.155	114d	Echo
Oct 25, 2024 20:05:11.468099117 CEST	192.168.2.5	130.195.155.88	114c	Echo
Oct 25, 2024 20:05:11.468127012 CEST	192.168.2.5	130.195.49.255	114b	Echo
Oct 25, 2024 20:05:11.468251944 CEST	192.168.2.5	130.195.200.37	1149	Echo
Oct 25, 2024 20:05:11.468317986 CEST	192.168.2.5	130.195.17.51	1148	Echo
Oct 25, 2024 20:05:11.468324900 CEST	192.168.2.5	130.195.31.221	114a	Echo
Oct 25, 2024 20:05:11.468377113 CEST	192.168.2.5	130.195.3.180	1147	Echo
Oct 25, 2024 20:05:11.468424082 CEST	192.168.2.5	130.195.130.203	1146	Echo
Oct 25, 2024 20:05:11.468480110 CEST	192.168.2.5	130.195.226.175	1145	Echo
Oct 25, 2024 20:05:11.468552113 CEST	192.168.2.5	130.195.16.227	1144	Echo
Oct 25, 2024 20:05:11.468605995 CEST	192.168.2.5	130.195.1.17	1143	Echo
Oct 25, 2024 20:05:11.468666077 CEST	192.168.2.5	130.195.1.245	1142	Echo
Oct 25, 2024 20:05:11.495788097 CEST	192.168.2.5	130.195.149.228	1141	Echo
Oct 25, 2024 20:05:11.526971102 CEST	192.168.2.5	130.195.238.66	1140	Echo
Oct 25, 2024 20:05:11.558342934 CEST	192.168.2.5	130.195.85.158	113f	Echo
Oct 25, 2024 20:05:11.589546919 CEST	192.168.2.5	130.195.31.205	113e	Echo
Oct 25, 2024 20:05:11.620800018 CEST	192.168.2.5	130.195.80.24	113d	Echo
Oct 25, 2024 20:05:11.652065039 CEST	192.168.2.5	130.195.11.84	113c	Echo
Oct 25, 2024 20:05:11.683362007 CEST	192.168.2.5	130.195.252.162	113b	Echo
Oct 25, 2024 20:05:11.718853951 CEST	192.168.2.5	130.195.103.94	113a	Echo
Oct 25, 2024 20:05:11.757464886 CEST	192.168.2.5	130.195.92.65	1139	Echo
Oct 25, 2024 20:05:11.793222904 CEST	192.168.2.5	130.195.106.236	1138	Echo
Oct 25, 2024 20:05:11.823795080 CEST	192.168.2.5	130.195.254.122	1137	Echo
Oct 25, 2024 20:05:11.855626106 CEST	192.168.2.5	130.195.172.189	1136	Echo
Oct 25, 2024 20:05:11.886349916 CEST	192.168.2.5	130.195.24.173	1135	Echo
Oct 25, 2024 20:05:11.917587996 CEST	192.168.2.5	130.195.146.206	1134	Echo
Oct 25, 2024 20:05:11.948947906 CEST	192.168.2.5	130.195.247.38	1133	Echo
Oct 25, 2024 20:05:11.965804100 CEST	192.168.2.5	130.195.68.173	1132	Echo
Oct 25, 2024 20:05:11.965913057 CEST	192.168.2.5	130.195.13.209	1131	Echo
Oct 25, 2024 20:05:11.966016054 CEST	192.168.2.5	130.195.23.19	1130	Echo
Oct 25, 2024 20:05:11.966068983 CEST	192.168.2.5	130.195.130.227	112f	Echo
Oct 25, 2024 20:05:11.966149092 CEST	192.168.2.5	130.195.176.240	112e	Echo
Oct 25, 2024 20:05:11.966181040 CEST	192.168.2.5	130.195.60.176	112d	Echo
Oct 25, 2024 20:05:11.966274977 CEST	192.168.2.5	130.195.146.118	112c	Echo
Oct 25, 2024 20:05:11.966356993 CEST	192.168.2.5	130.195.74.223	112b	Echo
Oct 25, 2024 20:05:11.966372967 CEST	192.168.2.5	130.195.168.118	112a	Echo
Oct 25, 2024 20:05:11.966450930 CEST	192.168.2.5	130.195.2.22	1129	Echo
Oct 25, 2024 20:05:11.966540098 CEST	192.168.2.5	130.195.184.99	1128	Echo
Oct 25, 2024 20:05:11.966555119 CEST	192.168.2.5	130.195.76.184	1127	Echo
Oct 25, 2024 20:05:11.966628075 CEST	192.168.2.5	130.195.153.27	1126	Echo
Oct 25, 2024 20:05:11.966684103 CEST	192.168.2.5	130.195.52.223	1125	Echo
Oct 25, 2024 20:05:11.966725111 CEST	192.168.2.5	130.195.24.255	1124	Echo
Oct 25, 2024 20:05:11.974149942 CEST	192.168.2.5	130.195.11.84	1123	Echo
Oct 25, 2024 20:05:11.979953051 CEST	192.168.2.5	130.195.116.82	1122	Echo
Oct 25, 2024 20:05:12.011499882 CEST	192.168.2.5	130.195.125.45	1121	Echo
Oct 25, 2024 20:05:12.042817116 CEST	192.168.2.5	130.195.40.52	1120	Echo
Oct 25, 2024 20:05:12.073822021 CEST	192.168.2.5	130.195.85.10	111f	Echo
Oct 25, 2024 20:05:12.105407000 CEST	192.168.2.5	130.195.44.183	111e	Echo
Oct 25, 2024 20:05:12.136430979 CEST	192.168.2.5	130.195.89.45	111d	Echo
Oct 25, 2024 20:05:12.167584896 CEST	192.168.2.5	130.195.43.89	111c	Echo
Oct 25, 2024 20:05:12.198867083 CEST	192.168.2.5	130.195.33.112	111b	Echo
Oct 25, 2024 20:05:12.230226040 CEST	192.168.2.5	130.195.182.60	111a	Echo
Oct 25, 2024 20:05:12.261945009 CEST	192.168.2.5	130.195.4.54	1119	Echo
Oct 25, 2024 20:05:12.292749882 CEST	192.168.2.5	130.195.86.68	1118	Echo
Oct 25, 2024 20:05:12.324034929 CEST	192.168.2.5	130.195.58.72	1117	Echo
Oct 25, 2024 20:05:12.355052948 CEST	192.168.2.5	130.195.0.207	1116	Echo
Oct 25, 2024 20:05:12.386351109 CEST	192.168.2.5	130.195.199.34	1115	Echo
Oct 25, 2024 20:05:12.417427063 CEST	192.168.2.5	130.195.117.14	1114	Echo
Oct 25, 2024 20:05:12.456192017 CEST	192.168.2.5	130.195.35.209	1113	Echo
Oct 25, 2024 20:05:12.467163086 CEST	192.168.2.5	130.195.81.88	1112	Echo
Oct 25, 2024 20:05:12.467263937 CEST	192.168.2.5	130.195.83.112	1111	Echo
Oct 25, 2024 20:05:12.467391014 CEST	192.168.2.5	130.195.247.143	1110	Echo
Oct 25, 2024 20:05:12.467432022 CEST	192.168.2.5	130.195.203.254	110f	Echo
Oct 25, 2024 20:05:12.467520952 CEST	192.168.2.5	130.195.184.203	110e	Echo
Oct 25, 2024 20:05:12.467577934 CEST	192.168.2.5	130.195.64.1	110d	Echo
Oct 25, 2024 20:05:12.467645884 CEST	192.168.2.5	130.195.106.32	110c	Echo
Oct 25, 2024 20:05:12.467719078 CEST	192.168.2.5	130.195.235.200	110b	Echo
Oct 25, 2024 20:05:12.467751026 CEST	192.168.2.5	130.195.25.140	110a	Echo
Oct 25, 2024 20:05:12.467840910 CEST	192.168.2.5	130.195.39.28	1109	Echo
Oct 25, 2024 20:05:12.467895985 CEST	192.168.2.5	130.195.83.247	1108	Echo
Oct 25, 2024 20:05:12.467950106 CEST	192.168.2.5	130.195.227.83	1107	Echo
Oct 25, 2024 20:05:12.480010986 CEST	192.168.2.5	130.195.242.35	1106	Echo
Oct 25, 2024 20:05:12.511050940 CEST	192.168.2.5	130.195.49.212	1105	Echo
Oct 25, 2024 20:05:12.542603016 CEST	192.168.2.5	130.195.46.227	1104	Echo
Oct 25, 2024 20:05:12.573842049 CEST	192.168.2.5	130.195.171.92	1103	Echo
Oct 25, 2024 20:05:12.605067015 CEST	192.168.2.5	130.195.145.171	1102	Echo
Oct 25, 2024 20:05:12.636142015 CEST	192.168.2.5	130.195.125.14	1101	Echo
Oct 25, 2024 20:05:12.667934895 CEST	192.168.2.5	130.195.44.238	1100	Echo
Oct 25, 2024 20:05:12.698908091 CEST	192.168.2.5	130.195.220.242	10ff	Echo
Oct 25, 2024 20:05:12.730645895 CEST	192.168.2.5	130.195.192.83	10fe	Echo
Oct 25, 2024 20:05:12.761672974 CEST	192.168.2.5	130.195.41.172	10fd	Echo
Oct 25, 2024 20:05:12.793988943 CEST	192.168.2.5	130.195.178.198	10fc	Echo
Oct 25, 2024 20:05:12.824079990 CEST	192.168.2.5	130.195.187.151	10fb	Echo
Oct 25, 2024 20:05:12.855707884 CEST	192.168.2.5	130.195.164.3	10fa	Echo
Oct 25, 2024 20:05:12.886646032 CEST	192.168.2.5	130.195.198.163	10f9	Echo
Oct 25, 2024 20:05:12.917705059 CEST	192.168.2.5	130.195.99.204	10f8	Echo
Oct 25, 2024 20:05:12.949074984 CEST	192.168.2.5	130.195.125.128	10f7	Echo
Oct 25, 2024 20:05:12.964076996 CEST	192.168.2.5	130.195.163.235	10f6	Echo
Oct 25, 2024 20:05:12.964221954 CEST	192.168.2.5	130.195.65.10	10f5	Echo
Oct 25, 2024 20:05:12.964333057 CEST	192.168.2.5	130.195.39.64	10f4	Echo
Oct 25, 2024 20:05:12.964433908 CEST	192.168.2.5	130.195.101.132	10f3	Echo
Oct 25, 2024 20:05:12.968089104 CEST	192.168.2.5	130.195.192.151	10f2	Echo
Oct 25, 2024 20:05:12.968204021 CEST	192.168.2.5	130.195.32.117	10f1	Echo
Oct 25, 2024 20:05:12.968285084 CEST	192.168.2.5	130.195.129.76	10f0	Echo
Oct 25, 2024 20:05:12.968350887 CEST	192.168.2.5	130.195.22.34	10ef	Echo
Oct 25, 2024 20:05:12.968430042 CEST	192.168.2.5	130.195.148.24	10ee	Echo
Oct 25, 2024 20:05:12.968468904 CEST	192.168.2.5	130.195.84.142	10ed	Echo
Oct 25, 2024 20:05:12.968559980 CEST	192.168.2.5	130.195.209.101	10ec	Echo
Oct 25, 2024 20:05:12.968696117 CEST	192.168.2.5	130.195.31.163	10ea	Echo
Oct 25, 2024 20:05:12.968734980 CEST	192.168.2.5	130.195.139.209	10eb	Echo
Oct 25, 2024 20:05:12.968791008 CEST	192.168.2.5	130.195.199.78	10e9	Echo
Oct 25, 2024 20:05:12.980195999 CEST	192.168.2.5	130.195.5.15	10e8	Echo
Oct 25, 2024 20:05:13.011626005 CEST	192.168.2.5	130.195.75.5	10e7	Echo
Oct 25, 2024 20:05:13.042768002 CEST	192.168.2.5	130.195.162.97	10e6	Echo
Oct 25, 2024 20:05:13.074151993 CEST	192.168.2.5	130.195.142.11	10e5	Echo
Oct 25, 2024 20:05:13.105077028 CEST	192.168.2.5	130.195.78.16	10e4	Echo
Oct 25, 2024 20:05:13.136548042 CEST	192.168.2.5	130.195.219.173	10e3	Echo
Oct 25, 2024 20:05:13.169106960 CEST	192.168.2.5	130.195.19.41	10e2	Echo
Oct 25, 2024 20:05:13.199400902 CEST	192.168.2.5	130.195.61.99	10e1	Echo
Oct 25, 2024 20:05:13.229633093 CEST	192.168.2.5	130.195.40.173	10e0	Echo
Oct 25, 2024 20:05:13.260893106 CEST	192.168.2.5	130.195.124.40	10df	Echo
Oct 25, 2024 20:05:13.300141096 CEST	192.168.2.5	130.195.218.123	10de	Echo
Oct 25, 2024 20:05:13.323956013 CEST	192.168.2.5	130.195.231.217	10dd	Echo
Oct 25, 2024 20:05:13.354614019 CEST	192.168.2.5	130.195.79.184	10dc	Echo
Oct 25, 2024 20:05:13.385829926 CEST	192.168.2.5	130.195.106.201	10db	Echo
Oct 25, 2024 20:05:13.417228937 CEST	192.168.2.5	130.195.14.117	10da	Echo
Oct 25, 2024 20:05:13.530828953 CEST	192.168.2.5	130.195.121.27	10d9	Echo
Oct 25, 2024 20:05:13.531244993 CEST	192.168.2.5	130.195.167.198	10d8	Echo
Oct 25, 2024 20:05:13.532002926 CEST	192.168.2.5	130.195.148.121	10d7	Echo
Oct 25, 2024 20:05:13.538456917 CEST	192.168.2.5	130.195.149.228	10d6	Echo
Oct 25, 2024 20:05:13.538619995 CEST	192.168.2.5	130.195.238.66	10d5	Echo
Oct 25, 2024 20:05:13.538739920 CEST	192.168.2.5	130.195.85.158	10d4	Echo
Oct 25, 2024 20:05:13.538882017 CEST	192.168.2.5	130.195.31.205	10d3	Echo
Oct 25, 2024 20:05:13.545665979 CEST	192.168.2.5	130.195.80.24	10d2	Echo
Oct 25, 2024 20:05:13.545845985 CEST	192.168.2.5	130.195.252.162	10d1	Echo
Oct 25, 2024 20:05:13.545953989 CEST	192.168.2.5	130.195.103.94	10d0	Echo
Oct 25, 2024 20:05:13.546053886 CEST	192.168.2.5	130.195.92.65	10cf	Echo
Oct 25, 2024 20:05:13.546153069 CEST	192.168.2.5	130.195.106.236	10ce	Echo
Oct 25, 2024 20:05:13.546277046 CEST	192.168.2.5	130.195.254.122	10cd	Echo
Oct 25, 2024 20:05:13.546525955 CEST	192.168.2.5	130.195.172.189	10cc	Echo
Oct 25, 2024 20:05:13.546658993 CEST	192.168.2.5	130.195.24.173	10cb	Echo
Oct 25, 2024 20:05:13.546776056 CEST	192.168.2.5	130.195.146.206	10ca	Echo
Oct 25, 2024 20:05:13.546885014 CEST	192.168.2.5	130.195.247.38	10c9	Echo
Oct 25, 2024 20:05:13.557666063 CEST	192.168.2.5	130.195.144.148	10c8	Echo
Oct 25, 2024 20:05:13.591238022 CEST	192.168.2.5	130.195.247.117	10c7	Echo
Oct 25, 2024 20:05:13.624408960 CEST	192.168.2.5	130.195.56.110	10c6	Echo
Oct 25, 2024 20:05:13.662251949 CEST	192.168.2.5	130.195.87.235	10c5	Echo
Oct 25, 2024 20:05:13.686599970 CEST	192.168.2.5	130.195.104.38	10c4	Echo
Oct 25, 2024 20:05:13.714270115 CEST	192.168.2.5	130.195.147.233	10c3	Echo
Oct 25, 2024 20:05:13.759378910 CEST	192.168.2.5	130.195.107.131	10c2	Echo
Oct 25, 2024 20:05:13.822526932 CEST	192.168.2.5	130.195.156.26	10c1	Echo
Oct 25, 2024 20:05:13.823368073 CEST	192.168.2.5	130.195.168.90	10c0	Echo
Oct 25, 2024 20:05:13.855134964 CEST	192.168.2.5	130.195.40.143	10bf	Echo
Oct 25, 2024 20:05:13.885843992 CEST	192.168.2.5	130.195.32.104	10be	Echo
Oct 25, 2024 20:05:13.917040110 CEST	192.168.2.5	130.195.9.128	10bd	Echo
Oct 25, 2024 20:05:13.948177099 CEST	192.168.2.5	130.195.185.115	10bc	Echo
Oct 25, 2024 20:05:13.967523098 CEST	192.168.2.5	130.195.116.82	10bb	Echo
Oct 25, 2024 20:05:13.967621088 CEST	192.168.2.5	130.195.125.45	10ba	Echo
Oct 25, 2024 20:05:13.967708111 CEST	192.168.2.5	130.195.40.52	10b9	Echo
Oct 25, 2024 20:05:13.967870951 CEST	192.168.2.5	130.195.85.10	10b8	Echo
Oct 25, 2024 20:05:13.967953920 CEST	192.168.2.5	130.195.44.183	10b7	Echo
Oct 25, 2024 20:05:13.967982054 CEST	192.168.2.5	130.195.89.45	10b6	Echo
Oct 25, 2024 20:05:13.968085051 CEST	192.168.2.5	130.195.43.89	10b5	Echo
Oct 25, 2024 20:05:13.968122959 CEST	192.168.2.5	130.195.33.112	10b4	Echo
Oct 25, 2024 20:05:13.968205929 CEST	192.168.2.5	130.195.182.60	10b3	Echo
Oct 25, 2024 20:05:13.968249083 CEST	192.168.2.5	130.195.4.54	10b2	Echo
Oct 25, 2024 20:05:13.968322039 CEST	192.168.2.5	130.195.86.68	10b1	Echo
Oct 25, 2024 20:05:13.968352079 CEST	192.168.2.5	130.195.58.72	10b0	Echo
Oct 25, 2024 20:05:13.968436003 CEST	192.168.2.5	130.195.0.207	10af	Echo
Oct 25, 2024 20:05:13.968472958 CEST	192.168.2.5	130.195.199.34	10ae	Echo
Oct 25, 2024 20:05:13.968547106 CEST	192.168.2.5	130.195.117.14	10ad	Echo
Oct 25, 2024 20:05:13.968589067 CEST	192.168.2.5	130.195.35.209	10ac	Echo
Oct 25, 2024 20:05:13.979437113 CEST	192.168.2.5	130.195.23.4	10ab	Echo
Oct 25, 2024 20:05:14.010709047 CEST	192.168.2.5	130.195.174.122	10aa	Echo
Oct 25, 2024 20:05:14.042016983 CEST	192.168.2.5	130.195.196.194	10a9	Echo
Oct 25, 2024 20:05:14.073210955 CEST	192.168.2.5	130.195.245.206	10a8	Echo
Oct 25, 2024 20:05:14.104576111 CEST	192.168.2.5	130.195.54.78	10a7	Echo
Oct 25, 2024 20:05:14.135780096 CEST	192.168.2.5	130.195.176.87	10a6	Echo
Oct 25, 2024 20:05:14.167040110 CEST	192.168.2.5	130.195.75.142	10a5	Echo
Oct 25, 2024 20:05:14.198487043 CEST	192.168.2.5	130.195.132.107	10a4	Echo
Oct 25, 2024 20:05:14.215961933 CEST	192.168.2.5	130.195.9.128	10a3	Echo
Oct 25, 2024 20:05:14.229372978 CEST	192.168.2.5	130.195.164.77	10a2	Echo
Oct 25, 2024 20:05:14.260725021 CEST	192.168.2.5	130.195.3.84	10a1	Echo
Oct 25, 2024 20:05:14.292227030 CEST	192.168.2.5	130.195.90.148	10a0	Echo
Oct 25, 2024 20:05:14.323163033 CEST	192.168.2.5	130.195.43.85	109f	Echo
Oct 25, 2024 20:05:14.344666958 CEST	130.195.196.194	192.168.2.5	18a9	Echo Reply
Oct 25, 2024 20:05:14.345020056 CEST	192.168.2.5	130.195.196.194	109e	Echo
Oct 25, 2024 20:05:14.354461908 CEST	192.168.2.5	130.195.197.123	109d	Echo
Oct 25, 2024 20:05:14.385750055 CEST	192.168.2.5	130.195.26.201	109c	Echo
Oct 25, 2024 20:05:14.416975975 CEST	192.168.2.5	130.195.97.239	109b	Echo
Oct 25, 2024 20:05:14.448250055 CEST	192.168.2.5	130.195.33.98	109a	Echo
Oct 25, 2024 20:05:14.467652082 CEST	192.168.2.5	130.195.242.35	1099	Echo
Oct 25, 2024 20:05:14.467691898 CEST	192.168.2.5	130.195.49.212	1098	Echo
Oct 25, 2024 20:05:14.467807055 CEST	192.168.2.5	130.195.46.227	1097	Echo
Oct 25, 2024 20:05:14.467854977 CEST	192.168.2.5	130.195.171.92	1096	Echo
Oct 25, 2024 20:05:14.467921019 CEST	192.168.2.5	130.195.145.171	1095	Echo
Oct 25, 2024 20:05:14.467968941 CEST	192.168.2.5	130.195.125.14	1094	Echo
Oct 25, 2024 20:05:14.468049049 CEST	192.168.2.5	130.195.44.238	1093	Echo
Oct 25, 2024 20:05:14.468096018 CEST	192.168.2.5	130.195.220.242	1092	Echo
Oct 25, 2024 20:05:14.468172073 CEST	192.168.2.5	130.195.192.83	1091	Echo
Oct 25, 2024 20:05:14.468213081 CEST	192.168.2.5	130.195.41.172	1090	Echo
Oct 25, 2024 20:05:14.468314886 CEST	192.168.2.5	130.195.178.198	108f	Echo
Oct 25, 2024 20:05:14.468331099 CEST	192.168.2.5	130.195.187.151	108e	Echo
Oct 25, 2024 20:05:14.468432903 CEST	192.168.2.5	130.195.164.3	108d	Echo
Oct 25, 2024 20:05:14.468470097 CEST	192.168.2.5	130.195.198.163	108c	Echo
Oct 25, 2024 20:05:14.468548059 CEST	192.168.2.5	130.195.99.204	108b	Echo
Oct 25, 2024 20:05:14.468585968 CEST	192.168.2.5	130.195.125.128	108a	Echo
Oct 25, 2024 20:05:14.479429007 CEST	192.168.2.5	130.195.88.33	1089	Echo
Oct 25, 2024 20:05:14.510905981 CEST	192.168.2.5	130.195.200.223	1088	Echo
Oct 25, 2024 20:05:14.542051077 CEST	192.168.2.5	130.195.167.42	1087	Echo
Oct 25, 2024 20:05:14.573360920 CEST	192.168.2.5	130.195.234.166	1086	Echo
Oct 25, 2024 20:05:14.604453087 CEST	192.168.2.5	130.195.193.233	1085	Echo
Oct 25, 2024 20:05:14.635804892 CEST	192.168.2.5	130.195.143.193	1084	Echo
Oct 25, 2024 20:05:14.648108006 CEST	130.195.196.194	192.168.2.5	189e	Echo Reply
Oct 25, 2024 20:05:14.666976929 CEST	192.168.2.5	130.195.58.208	1083	Echo
Oct 25, 2024 20:05:14.698179007 CEST	192.168.2.5	130.195.194.25	1082	Echo
Oct 25, 2024 20:05:14.729446888 CEST	192.168.2.5	130.195.237.174	1081	Echo
Oct 25, 2024 20:05:14.760648966 CEST	192.168.2.5	130.195.27.238	1080	Echo
Oct 25, 2024 20:05:14.791991949 CEST	192.168.2.5	130.195.251.27	107f	Echo
Oct 25, 2024 20:05:14.823287010 CEST	192.168.2.5	130.195.102.76	107e	Echo
Oct 25, 2024 20:05:14.854851007 CEST	192.168.2.5	130.195.236.55	107d	Echo
Oct 25, 2024 20:05:14.885827065 CEST	192.168.2.5	130.195.93.179	107c	Echo
Oct 25, 2024 20:05:14.916961908 CEST	192.168.2.5	130.195.193.93	107b	Echo
Oct 25, 2024 20:05:14.948484898 CEST	192.168.2.5	130.195.84.141	107a	Echo
Oct 25, 2024 20:05:14.970782042 CEST	192.168.2.5	130.195.5.15	1079	Echo
Oct 25, 2024 20:05:14.970843077 CEST	192.168.2.5	130.195.75.5	1078	Echo
Oct 25, 2024 20:05:14.971000910 CEST	192.168.2.5	130.195.162.97	1077	Echo
Oct 25, 2024 20:05:14.971040964 CEST	192.168.2.5	130.195.142.11	1076	Echo
Oct 25, 2024 20:05:14.971221924 CEST	192.168.2.5	130.195.78.16	1075	Echo
Oct 25, 2024 20:05:14.971452951 CEST	192.168.2.5	130.195.219.173	1074	Echo
Oct 25, 2024 20:05:14.971573114 CEST	192.168.2.5	130.195.19.41	1073	Echo
Oct 25, 2024 20:05:14.971704960 CEST	192.168.2.5	130.195.61.99	1072	Echo
Oct 25, 2024 20:05:14.971824884 CEST	192.168.2.5	130.195.40.173	1071	Echo
Oct 25, 2024 20:05:14.971940994 CEST	192.168.2.5	130.195.124.40	1070	Echo
Oct 25, 2024 20:05:14.972093105 CEST	192.168.2.5	130.195.218.123	106f	Echo
Oct 25, 2024 20:05:14.972201109 CEST	192.168.2.5	130.195.231.217	106e	Echo
Oct 25, 2024 20:05:14.972278118 CEST	192.168.2.5	130.195.79.184	106d	Echo
Oct 25, 2024 20:05:14.972497940 CEST	192.168.2.5	130.195.106.201	106c	Echo
Oct 25, 2024 20:05:14.972737074 CEST	192.168.2.5	130.195.14.117	106b	Echo
Oct 25, 2024 20:05:14.979417086 CEST	192.168.2.5	130.195.236.169	106a	Echo
Oct 25, 2024 20:05:15.010658979 CEST	192.168.2.5	130.195.44.173	1069	Echo
Oct 25, 2024 20:05:15.041959047 CEST	192.168.2.5	130.195.60.227	1068	Echo
Oct 25, 2024 20:05:15.073359966 CEST	192.168.2.5	130.195.89.6	1067	Echo
Oct 25, 2024 20:05:15.104424953 CEST	192.168.2.5	130.195.228.187	1066	Echo
Oct 25, 2024 20:05:15.135818005 CEST	192.168.2.5	130.195.218.73	1065	Echo
Oct 25, 2024 20:05:15.167152882 CEST	192.168.2.5	130.195.113.200	1064	Echo
Oct 25, 2024 20:05:15.198425055 CEST	192.168.2.5	130.195.219.164	1063	Echo
Oct 25, 2024 20:05:15.229576111 CEST	192.168.2.5	130.195.154.162	1062	Echo
Oct 25, 2024 20:05:15.260936022 CEST	192.168.2.5	130.195.83.212	1061	Echo
Oct 25, 2024 20:05:15.292155027 CEST	192.168.2.5	130.195.58.108	1060	Echo
Oct 25, 2024 20:05:15.323446989 CEST	192.168.2.5	130.195.89.203	105f	Echo
Oct 25, 2024 20:05:15.354593039 CEST	192.168.2.5	130.195.49.36	105e	Echo
Oct 25, 2024 20:05:15.385955095 CEST	192.168.2.5	130.195.135.149	105d	Echo
Oct 25, 2024 20:05:15.416995049 CEST	192.168.2.5	130.195.250.135	105c	Echo
Oct 25, 2024 20:05:15.448338985 CEST	192.168.2.5	130.195.51.198	105b	Echo
Oct 25, 2024 20:05:15.463980913 CEST	192.168.2.5	130.195.121.27	105a	Echo
Oct 25, 2024 20:05:15.464600086 CEST	192.168.2.5	130.195.148.121	1059	Echo
Oct 25, 2024 20:05:15.468138933 CEST	192.168.2.5	130.195.144.148	1058	Echo
Oct 25, 2024 20:05:15.468240023 CEST	192.168.2.5	130.195.247.117	1057	Echo
Oct 25, 2024 20:05:15.468466997 CEST	192.168.2.5	130.195.56.110	1056	Echo
Oct 25, 2024 20:05:15.468559027 CEST	192.168.2.5	130.195.87.235	1055	Echo
Oct 25, 2024 20:05:15.468619108 CEST	192.168.2.5	130.195.104.38	1054	Echo
Oct 25, 2024 20:05:15.468672991 CEST	192.168.2.5	130.195.147.233	1053	Echo
Oct 25, 2024 20:05:15.468732119 CEST	192.168.2.5	130.195.107.131	1052	Echo
Oct 25, 2024 20:05:15.468801975 CEST	192.168.2.5	130.195.156.26	1051	Echo
Oct 25, 2024 20:05:15.468924046 CEST	192.168.2.5	130.195.168.90	1050	Echo
Oct 25, 2024 20:05:15.469027042 CEST	192.168.2.5	130.195.40.143	104f	Echo
Oct 25, 2024 20:05:15.469116926 CEST	192.168.2.5	130.195.32.104	104e	Echo
Oct 25, 2024 20:05:15.469201088 CEST	192.168.2.5	130.195.185.115	104d	Echo
Oct 25, 2024 20:05:15.479614973 CEST	192.168.2.5	130.195.93.3	104c	Echo
Oct 25, 2024 20:05:15.511475086 CEST	192.168.2.5	130.195.50.184	104b	Echo
Oct 25, 2024 20:05:15.542062044 CEST	192.168.2.5	130.195.80.81	104a	Echo
Oct 25, 2024 20:05:15.573946953 CEST	192.168.2.5	130.195.20.162	1049	Echo
Oct 25, 2024 20:05:15.604978085 CEST	192.168.2.5	130.195.153.20	1048	Echo
Oct 25, 2024 20:05:15.635922909 CEST	192.168.2.5	130.195.25.16	1047	Echo
Oct 25, 2024 20:05:15.667233944 CEST	192.168.2.5	130.195.254.70	1046	Echo
Oct 25, 2024 20:05:15.700207949 CEST	192.168.2.5	130.195.121.37	1045	Echo
Oct 25, 2024 20:05:15.729643106 CEST	192.168.2.5	130.195.140.202	1044	Echo
Oct 25, 2024 20:05:15.760905981 CEST	192.168.2.5	130.195.137.109	1043	Echo
Oct 25, 2024 20:05:15.791919947 CEST	192.168.2.5	130.195.179.235	1042	Echo
Oct 25, 2024 20:05:15.824359894 CEST	192.168.2.5	130.195.141.209	1041	Echo
Oct 25, 2024 20:05:15.884742022 CEST	192.168.2.5	130.195.220.174	1040	Echo
Oct 25, 2024 20:05:15.886090040 CEST	192.168.2.5	130.195.155.6	103f	Echo
Oct 25, 2024 20:05:15.917382956 CEST	192.168.2.5	130.195.102.155	103e	Echo
Oct 25, 2024 20:05:15.949944019 CEST	192.168.2.5	130.195.74.103	103d	Echo
Oct 25, 2024 20:05:15.974761963 CEST	192.168.2.5	130.195.23.4	103c	Echo
Oct 25, 2024 20:05:15.975191116 CEST	192.168.2.5	130.195.174.122	103b	Echo
Oct 25, 2024 20:05:15.975204945 CEST	192.168.2.5	130.195.245.206	103a	Echo
Oct 25, 2024 20:05:15.975298882 CEST	192.168.2.5	130.195.54.78	1039	Echo
Oct 25, 2024 20:05:15.975487947 CEST	192.168.2.5	130.195.176.87	1038	Echo
Oct 25, 2024 20:05:15.975646973 CEST	192.168.2.5	130.195.75.142	1037	Echo
Oct 25, 2024 20:05:15.975807905 CEST	192.168.2.5	130.195.132.107	1036	Echo
Oct 25, 2024 20:05:15.976408005 CEST	192.168.2.5	130.195.3.84	1034	Echo
Oct 25, 2024 20:05:15.976447105 CEST	192.168.2.5	130.195.164.77	1035	Echo
Oct 25, 2024 20:05:15.976488113 CEST	192.168.2.5	130.195.90.148	1033	Echo
Oct 25, 2024 20:05:15.976603031 CEST	192.168.2.5	130.195.43.85	1032	Echo
Oct 25, 2024 20:05:15.976835966 CEST	192.168.2.5	130.195.197.123	1031	Echo
Oct 25, 2024 20:05:15.976923943 CEST	192.168.2.5	130.195.26.201	1030	Echo
Oct 25, 2024 20:05:15.977056980 CEST	192.168.2.5	130.195.97.239	102f	Echo
Oct 25, 2024 20:05:15.977351904 CEST	192.168.2.5	130.195.33.98	102e	Echo
Oct 25, 2024 20:05:15.979629040 CEST	192.168.2.5	130.195.103.74	102d	Echo
Oct 25, 2024 20:05:16.010711908 CEST	192.168.2.5	130.195.11.217	102c	Echo
Oct 25, 2024 20:05:16.043854952 CEST	192.168.2.5	130.195.157.174	102b	Echo
Oct 25, 2024 20:05:16.073246002 CEST	192.168.2.5	130.195.117.22	102a	Echo
Oct 25, 2024 20:05:16.148844004 CEST	192.168.2.5	130.195.160.78	1029	Echo
Oct 25, 2024 20:05:16.168925047 CEST	192.168.2.5	130.195.141.137	1028	Echo
Oct 25, 2024 20:05:16.209911108 CEST	192.168.2.5	130.195.77.209	1027	Echo
Oct 25, 2024 20:05:16.268117905 CEST	192.168.2.5	130.195.190.237	1026	Echo
Oct 25, 2024 20:05:16.294270992 CEST	192.168.2.5	130.195.185.253	1025	Echo
Oct 25, 2024 20:05:16.364397049 CEST	192.168.2.5	130.195.11.217	1024	Echo
Oct 25, 2024 20:05:16.366069078 CEST	192.168.2.5	130.195.24.148	1023	Echo
Oct 25, 2024 20:05:16.400908947 CEST	192.168.2.5	130.195.182.102	1022	Echo
Oct 25, 2024 20:05:16.432775974 CEST	192.168.2.5	130.195.219.125	1021	Echo
Oct 25, 2024 20:05:16.464549065 CEST	192.168.2.5	130.195.226.195	1020	Echo
Oct 25, 2024 20:05:16.467710972 CEST	192.168.2.5	130.195.88.33	101f	Echo
Oct 25, 2024 20:05:16.467740059 CEST	192.168.2.5	130.195.200.223	101e	Echo
Oct 25, 2024 20:05:16.467817068 CEST	192.168.2.5	130.195.167.42	101d	Echo
Oct 25, 2024 20:05:16.467854977 CEST	192.168.2.5	130.195.234.166	101c	Echo
Oct 25, 2024 20:05:16.468053102 CEST	192.168.2.5	130.195.58.208	1019	Echo
Oct 25, 2024 20:05:16.468070984 CEST	192.168.2.5	130.195.193.233	101b	Echo
Oct 25, 2024 20:05:16.468141079 CEST	192.168.2.5	130.195.143.193	101a	Echo
Oct 25, 2024 20:05:16.468238115 CEST	192.168.2.5	130.195.194.25	1018	Echo
Oct 25, 2024 20:05:16.468238115 CEST	192.168.2.5	130.195.27.238	1016	Echo
Oct 25, 2024 20:05:16.468255997 CEST	192.168.2.5	130.195.251.27	1015	Echo
Oct 25, 2024 20:05:16.468274117 CEST	192.168.2.5	130.195.237.174	1017	Echo
Oct 25, 2024 20:05:16.468300104 CEST	192.168.2.5	130.195.102.76	1014	Echo
Oct 25, 2024 20:05:16.468374014 CEST	192.168.2.5	130.195.236.55	1013	Echo
Oct 25, 2024 20:05:16.468404055 CEST	192.168.2.5	130.195.93.179	1012	Echo
Oct 25, 2024 20:05:16.468477964 CEST	192.168.2.5	130.195.193.93	1011	Echo
Oct 25, 2024 20:05:16.468525887 CEST	192.168.2.5	130.195.84.141	1010	Echo
Oct 25, 2024 20:05:16.495215893 CEST	192.168.2.5	130.195.180.86	100f	Echo
Oct 25, 2024 20:05:16.526424885 CEST	192.168.2.5	130.195.118.116	100e	Echo
Oct 25, 2024 20:05:16.557853937 CEST	192.168.2.5	130.195.192.114	100d	Echo
Oct 25, 2024 20:05:16.589126110 CEST	192.168.2.5	130.195.58.168	100c	Echo
Oct 25, 2024 20:05:16.620347977 CEST	192.168.2.5	130.195.119.61	100b	Echo
Oct 25, 2024 20:05:16.663506031 CEST	192.168.2.5	130.195.184.57	100a	Echo
Oct 25, 2024 20:05:16.682630062 CEST	192.168.2.5	130.195.252.2	1009	Echo
Oct 25, 2024 20:05:16.714021921 CEST	192.168.2.5	130.195.24.177	1008	Echo
Oct 25, 2024 20:05:16.745059013 CEST	192.168.2.5	130.195.67.247	1007	Echo
Oct 25, 2024 20:05:16.776325941 CEST	192.168.2.5	130.195.170.165	1006	Echo
Oct 25, 2024 20:05:16.807540894 CEST	192.168.2.5	130.195.145.170	1005	Echo
Oct 25, 2024 20:05:16.839139938 CEST	192.168.2.5	130.195.180.159	1004	Echo
Oct 25, 2024 20:05:16.870048046 CEST	192.168.2.5	130.195.159.28	1003	Echo
Oct 25, 2024 20:05:16.901375055 CEST	192.168.2.5	130.195.152.57	1002	Echo
Oct 25, 2024 20:05:16.932657957 CEST	192.168.2.5	130.195.59.193	1001	Echo
Oct 25, 2024 20:05:16.967405081 CEST	192.168.2.5	130.195.73.191	1000	Echo
Oct 25, 2024 20:05:16.969963074 CEST	192.168.2.5	130.195.236.169	fff	Echo
Oct 25, 2024 20:05:16.970016003 CEST	192.168.2.5	130.195.44.173	ffe	Echo
Oct 25, 2024 20:05:16.970046997 CEST	192.168.2.5	130.195.60.227	ffd	Echo
Oct 25, 2024 20:05:16.970122099 CEST	192.168.2.5	130.195.89.6	ffc	Echo
Oct 25, 2024 20:05:16.970201969 CEST	192.168.2.5	130.195.228.187	ffb	Echo
Oct 25, 2024 20:05:16.970350027 CEST	192.168.2.5	130.195.113.200	ff9	Echo
Oct 25, 2024 20:05:16.970367908 CEST	192.168.2.5	130.195.218.73	ffa	Echo
Oct 25, 2024 20:05:16.970431089 CEST	192.168.2.5	130.195.219.164	ff8	Echo
Oct 25, 2024 20:05:16.970592976 CEST	192.168.2.5	130.195.58.108	ff5	Echo
Oct 25, 2024 20:05:16.970627069 CEST	192.168.2.5	130.195.154.162	ff7	Echo
Oct 25, 2024 20:05:16.970627069 CEST	192.168.2.5	130.195.83.212	ff6	Echo
Oct 25, 2024 20:05:16.970731020 CEST	192.168.2.5	130.195.89.203	ff4	Echo
Oct 25, 2024 20:05:16.970899105 CEST	192.168.2.5	130.195.49.36	ff3	Echo
Oct 25, 2024 20:05:16.970915079 CEST	192.168.2.5	130.195.250.135	ff1	Echo
Oct 25, 2024 20:05:16.970978022 CEST	192.168.2.5	130.195.135.149	ff2	Echo
Oct 25, 2024 20:05:16.971097946 CEST	192.168.2.5	130.195.51.198	ff0	Echo
Oct 25, 2024 20:05:16.995862961 CEST	192.168.2.5	130.195.194.62	fef	Echo
Oct 25, 2024 20:05:17.026504993 CEST	192.168.2.5	130.195.130.22	fee	Echo
Oct 25, 2024 20:05:17.058018923 CEST	192.168.2.5	130.195.60.26	fed	Echo
Oct 25, 2024 20:05:17.088988066 CEST	192.168.2.5	130.195.32.35	fec	Echo
Oct 25, 2024 20:05:17.120385885 CEST	192.168.2.5	130.195.225.147	feb	Echo
Oct 25, 2024 20:05:17.151289940 CEST	192.168.2.5	130.195.105.202	fea	Echo
Oct 25, 2024 20:05:17.182657957 CEST	192.168.2.5	130.195.112.147	fe9	Echo
Oct 25, 2024 20:05:17.213953018 CEST	192.168.2.5	130.195.227.250	fe8	Echo
Oct 25, 2024 20:05:17.245228052 CEST	192.168.2.5	130.195.210.183	fe7	Echo
Oct 25, 2024 20:05:17.276626110 CEST	192.168.2.5	130.195.12.128	fe6	Echo
Oct 25, 2024 20:05:17.307574034 CEST	192.168.2.5	130.195.36.204	fe5	Echo
Oct 25, 2024 20:05:17.339011908 CEST	192.168.2.5	130.195.48.178	fe4	Echo
Oct 25, 2024 20:05:17.370130062 CEST	192.168.2.5	130.195.197.103	fe3	Echo
Oct 25, 2024 20:05:17.401591063 CEST	192.168.2.5	130.195.213.54	fe2	Echo
Oct 25, 2024 20:05:17.432532072 CEST	192.168.2.5	130.195.202.38	fe1	Echo
Oct 25, 2024 20:05:17.433389902 CEST	130.195.213.54	192.168.2.5	17e2	Echo Reply
Oct 25, 2024 20:05:17.433815002 CEST	192.168.2.5	130.195.213.54	fe0	Echo
Oct 25, 2024 20:05:17.464122057 CEST	192.168.2.5	130.195.194.224	fdf	Echo
Oct 25, 2024 20:05:17.465220928 CEST	192.168.2.5	130.195.93.3	fde	Echo
Oct 25, 2024 20:05:17.465297937 CEST	192.168.2.5	130.195.80.81	fdc	Echo
Oct 25, 2024 20:05:17.465363026 CEST	192.168.2.5	130.195.20.162	fdb	Echo
Oct 25, 2024 20:05:17.465393066 CEST	130.195.213.54	192.168.2.5	17e0	Echo Reply
Oct 25, 2024 20:05:17.465447903 CEST	192.168.2.5	130.195.50.184	fdd	Echo
Oct 25, 2024 20:05:17.465447903 CEST	192.168.2.5	130.195.153.20	fda	Echo
Oct 25, 2024 20:05:17.465533018 CEST	192.168.2.5	130.195.25.16	fd9	Echo
Oct 25, 2024 20:05:17.465605974 CEST	192.168.2.5	130.195.254.70	fd8	Echo
Oct 25, 2024 20:05:17.465662003 CEST	192.168.2.5	130.195.121.37	fd7	Echo
Oct 25, 2024 20:05:17.465708971 CEST	192.168.2.5	130.195.140.202	fd6	Echo
Oct 25, 2024 20:05:17.465882063 CEST	192.168.2.5	130.195.179.235	fd4	Echo
Oct 25, 2024 20:05:17.465913057 CEST	192.168.2.5	130.195.137.109	fd5	Echo
Oct 25, 2024 20:05:17.465929985 CEST	192.168.2.5	130.195.141.209	fd3	Echo
Oct 25, 2024 20:05:17.466027021 CEST	192.168.2.5	130.195.220.174	fd2	Echo
Oct 25, 2024 20:05:17.466109991 CEST	192.168.2.5	130.195.155.6	fd1	Echo
Oct 25, 2024 20:05:17.466128111 CEST	192.168.2.5	130.195.102.155	fd0	Echo
Oct 25, 2024 20:05:17.466159105 CEST	192.168.2.5	130.195.74.103	fcf	Echo
Oct 25, 2024 20:05:17.495161057 CEST	192.168.2.5	130.195.193.40	fce	Echo
Oct 25, 2024 20:05:17.526511908 CEST	192.168.2.5	130.195.74.218	fcd	Echo
Oct 25, 2024 20:05:17.557646990 CEST	192.168.2.5	130.195.92.209	fcc	Echo
Oct 25, 2024 20:05:17.588843107 CEST	192.168.2.5	130.195.170.126	fcb	Echo
Oct 25, 2024 20:05:17.620239973 CEST	192.168.2.5	130.195.209.170	fca	Echo
Oct 25, 2024 20:05:17.651484966 CEST	192.168.2.5	130.195.45.209	fc9	Echo
Oct 25, 2024 20:05:17.682991028 CEST	192.168.2.5	130.195.243.87	fc8	Echo
Oct 25, 2024 20:05:17.714211941 CEST	192.168.2.5	130.195.43.109	fc7	Echo
Oct 25, 2024 20:05:17.745196104 CEST	192.168.2.5	130.195.77.237	fc6	Echo
Oct 25, 2024 20:05:17.776352882 CEST	192.168.2.5	130.195.11.129	fc5	Echo
Oct 25, 2024 20:05:17.807601929 CEST	192.168.2.5	130.195.66.3	fc4	Echo
Oct 25, 2024 20:05:17.838840961 CEST	192.168.2.5	130.195.75.160	fc3	Echo
Oct 25, 2024 20:05:17.870234013 CEST	192.168.2.5	130.195.25.150	fc2	Echo
Oct 25, 2024 20:05:17.901360035 CEST	192.168.2.5	130.195.21.29	fc1	Echo
Oct 25, 2024 20:05:17.932873964 CEST	192.168.2.5	130.195.139.20	fc0	Echo
Oct 25, 2024 20:05:17.964514971 CEST	192.168.2.5	130.195.2.64	fbf	Echo
Oct 25, 2024 20:05:17.965858936 CEST	192.168.2.5	130.195.117.22	fbc	Echo
Oct 25, 2024 20:05:17.965864897 CEST	192.168.2.5	130.195.103.74	fbe	Echo
Oct 25, 2024 20:05:17.965864897 CEST	192.168.2.5	130.195.157.174	fbd	Echo
Oct 25, 2024 20:05:17.965924978 CEST	192.168.2.5	130.195.160.78	fbb	Echo
Oct 25, 2024 20:05:17.965985060 CEST	192.168.2.5	130.195.141.137	fba	Echo
Oct 25, 2024 20:05:17.966144085 CEST	192.168.2.5	130.195.77.209	fb9	Echo
Oct 25, 2024 20:05:17.966176033 CEST	192.168.2.5	130.195.185.253	fb7	Echo
Oct 25, 2024 20:05:17.966245890 CEST	192.168.2.5	130.195.190.237	fb8	Echo
Oct 25, 2024 20:05:17.966324091 CEST	192.168.2.5	130.195.24.148	fb6	Echo
Oct 25, 2024 20:05:17.966375113 CEST	192.168.2.5	130.195.182.102	fb5	Echo
Oct 25, 2024 20:05:17.966415882 CEST	192.168.2.5	130.195.219.125	fb4	Echo
Oct 25, 2024 20:05:17.995289087 CEST	192.168.2.5	130.195.207.158	fb3	Echo
Oct 25, 2024 20:05:18.026470900 CEST	192.168.2.5	130.195.194.152	fb2	Echo
Oct 25, 2024 20:05:18.057907104 CEST	192.168.2.5	130.195.28.253	fb1	Echo
Oct 25, 2024 20:05:18.088989973 CEST	192.168.2.5	130.195.20.5	fb0	Echo
Oct 25, 2024 20:05:18.120389938 CEST	192.168.2.5	130.195.62.187	faf	Echo
Oct 25, 2024 20:05:18.151427984 CEST	192.168.2.5	130.195.237.62	fae	Echo
Oct 25, 2024 20:05:18.182792902 CEST	192.168.2.5	130.195.165.237	fad	Echo
Oct 25, 2024 20:05:18.213990927 CEST	192.168.2.5	130.195.149.165	fac	Echo
Oct 25, 2024 20:05:18.245254040 CEST	192.168.2.5	130.195.95.149	fab	Echo
Oct 25, 2024 20:05:18.276336908 CEST	192.168.2.5	130.195.22.95	faa	Echo
Oct 25, 2024 20:05:18.307785988 CEST	192.168.2.5	130.195.2.247	fa9	Echo
Oct 25, 2024 20:05:18.339083910 CEST	192.168.2.5	130.195.99.86	fa8	Echo
Oct 25, 2024 20:05:18.370661020 CEST	192.168.2.5	130.195.59.208	fa7	Echo
Oct 25, 2024 20:05:18.401540041 CEST	192.168.2.5	130.195.36.5	fa6	Echo
Oct 25, 2024 20:05:18.432646036 CEST	192.168.2.5	130.195.160.174	fa5	Echo
Oct 25, 2024 20:05:18.464260101 CEST	192.168.2.5	130.195.226.195	fa4	Echo
Oct 25, 2024 20:05:18.464318037 CEST	192.168.2.5	130.195.171.115	fa3	Echo
Oct 25, 2024 20:05:18.465760946 CEST	192.168.2.5	130.195.180.86	fa2	Echo
Oct 25, 2024 20:05:18.465760946 CEST	192.168.2.5	130.195.118.116	fa1	Echo
Oct 25, 2024 20:05:18.465805054 CEST	192.168.2.5	130.195.192.114	fa0	Echo
Oct 25, 2024 20:05:18.465922117 CEST	192.168.2.5	130.195.119.61	f9e	Echo
Oct 25, 2024 20:05:18.465989113 CEST	192.168.2.5	130.195.184.57	f9d	Echo
Oct 25, 2024 20:05:18.465993881 CEST	192.168.2.5	130.195.58.168	f9f	Echo
Oct 25, 2024 20:05:18.466042995 CEST	192.168.2.5	130.195.252.2	f9c	Echo
Oct 25, 2024 20:05:18.466161013 CEST	192.168.2.5	130.195.67.247	f9a	Echo
Oct 25, 2024 20:05:18.466209888 CEST	192.168.2.5	130.195.24.177	f9b	Echo
Oct 25, 2024 20:05:18.466228008 CEST	192.168.2.5	130.195.170.165	f99	Echo
Oct 25, 2024 20:05:18.466289043 CEST	192.168.2.5	130.195.145.170	f98	Echo
Oct 25, 2024 20:05:18.466473103 CEST	192.168.2.5	130.195.180.159	f97	Echo
Oct 25, 2024 20:05:18.466473103 CEST	192.168.2.5	130.195.159.28	f96	Echo
Oct 25, 2024 20:05:18.466528893 CEST	192.168.2.5	130.195.59.193	f94	Echo
Oct 25, 2024 20:05:18.466613054 CEST	192.168.2.5	130.195.152.57	f95	Echo
Oct 25, 2024 20:05:18.495068073 CEST	192.168.2.5	130.195.16.79	f93	Echo
Oct 25, 2024 20:05:18.526504040 CEST	192.168.2.5	130.195.91.157	f92	Echo
Oct 25, 2024 20:05:18.557647943 CEST	192.168.2.5	130.195.38.91	f91	Echo
Oct 25, 2024 20:05:18.589035034 CEST	192.168.2.5	130.195.167.38	f90	Echo
Oct 25, 2024 20:05:18.620145082 CEST	192.168.2.5	130.195.94.45	f8f	Echo
Oct 25, 2024 20:05:18.651421070 CEST	192.168.2.5	130.195.12.178	f8e	Echo
Oct 25, 2024 20:05:18.685412884 CEST	192.168.2.5	130.195.246.12	f8d	Echo
Oct 25, 2024 20:05:18.717274904 CEST	192.168.2.5	130.195.71.69	f8c	Echo
Oct 25, 2024 20:05:18.745224953 CEST	192.168.2.5	130.195.29.116	f8b	Echo
Oct 25, 2024 20:05:18.777466059 CEST	192.168.2.5	130.195.144.45	f8a	Echo
Oct 25, 2024 20:05:18.809232950 CEST	192.168.2.5	130.195.93.154	f89	Echo
Oct 25, 2024 20:05:18.839904070 CEST	192.168.2.5	130.195.90.59	f88	Echo
Oct 25, 2024 20:05:18.870266914 CEST	192.168.2.5	130.195.200.74	f87	Echo
Oct 25, 2024 20:05:18.901887894 CEST	192.168.2.5	130.195.210.178	f86	Echo
Oct 25, 2024 20:05:18.933036089 CEST	192.168.2.5	130.195.147.210	f85	Echo
Oct 25, 2024 20:05:18.964009047 CEST	192.168.2.5	130.195.73.191	f84	Echo
Oct 25, 2024 20:05:18.964180946 CEST	192.168.2.5	130.195.107.241	f83	Echo
Oct 25, 2024 20:05:18.965487003 CEST	192.168.2.5	130.195.194.62	f82	Echo
Oct 25, 2024 20:05:18.965570927 CEST	192.168.2.5	130.195.130.22	f81	Echo
Oct 25, 2024 20:05:18.965599060 CEST	192.168.2.5	130.195.60.26	f80	Echo
Oct 25, 2024 20:05:18.965679884 CEST	192.168.2.5	130.195.32.35	f7f	Echo
Oct 25, 2024 20:05:18.965737104 CEST	192.168.2.5	130.195.225.147	f7e	Echo
Oct 25, 2024 20:05:18.965784073 CEST	192.168.2.5	130.195.105.202	f7d	Echo
Oct 25, 2024 20:05:18.965857983 CEST	192.168.2.5	130.195.112.147	f7c	Echo
Oct 25, 2024 20:05:18.965894938 CEST	192.168.2.5	130.195.227.250	f7b	Echo
Oct 25, 2024 20:05:18.965939999 CEST	192.168.2.5	130.195.210.183	f7a	Echo
Oct 25, 2024 20:05:18.965991974 CEST	192.168.2.5	130.195.12.128	f79	Echo
Oct 25, 2024 20:05:18.966039896 CEST	192.168.2.5	130.195.36.204	f78	Echo
Oct 25, 2024 20:05:18.966087103 CEST	192.168.2.5	130.195.48.178	f77	Echo
Oct 25, 2024 20:05:18.966134071 CEST	192.168.2.5	130.195.197.103	f76	Echo
Oct 25, 2024 20:05:18.966190100 CEST	192.168.2.5	130.195.202.38	f75	Echo
Oct 25, 2024 20:05:18.995400906 CEST	192.168.2.5	130.195.192.64	f74	Echo
Oct 25, 2024 20:05:19.026562929 CEST	192.168.2.5	130.195.107.175	f73	Echo
Oct 25, 2024 20:05:19.057811975 CEST	192.168.2.5	130.195.33.4	f72	Echo
Oct 25, 2024 20:05:19.088980913 CEST	192.168.2.5	130.195.96.63	f71	Echo
Oct 25, 2024 20:05:19.109369040 CEST	192.168.2.5	130.195.11.129	f70	Echo
Oct 25, 2024 20:05:19.120054007 CEST	192.168.2.5	130.195.77.181	f6f	Echo
Oct 25, 2024 20:05:19.151340008 CEST	192.168.2.5	130.195.150.136	f6e	Echo
Oct 25, 2024 20:05:19.182749033 CEST	192.168.2.5	130.195.16.15	f6d	Echo
Oct 25, 2024 20:05:19.214016914 CEST	192.168.2.5	130.195.5.215	f6c	Echo
Oct 25, 2024 20:05:19.245208025 CEST	192.168.2.5	130.195.197.111	f6b	Echo
Oct 25, 2024 20:05:19.276438951 CEST	192.168.2.5	130.195.237.197	f6a	Echo
Oct 25, 2024 20:05:19.307810068 CEST	192.168.2.5	130.195.241.66	f69	Echo
Oct 25, 2024 20:05:19.339023113 CEST	192.168.2.5	130.195.200.131	f68	Echo
Oct 25, 2024 20:05:19.370544910 CEST	192.168.2.5	130.195.244.169	f67	Echo
Oct 25, 2024 20:05:19.401561975 CEST	192.168.2.5	130.195.74.186	f66	Echo
Oct 25, 2024 20:05:19.432862997 CEST	192.168.2.5	130.195.211.112	f65	Echo
Oct 25, 2024 20:05:19.464246988 CEST	192.168.2.5	130.195.194.224	f64	Echo
Oct 25, 2024 20:05:19.464632988 CEST	192.168.2.5	130.195.183.23	f63	Echo
Oct 25, 2024 20:05:19.466016054 CEST	192.168.2.5	130.195.193.40	f62	Echo
Oct 25, 2024 20:05:19.466058016 CEST	192.168.2.5	130.195.74.218	f61	Echo
Oct 25, 2024 20:05:19.466114998 CEST	192.168.2.5	130.195.92.209	f60	Echo
Oct 25, 2024 20:05:19.466204882 CEST	192.168.2.5	130.195.170.126	f5f	Echo
Oct 25, 2024 20:05:19.466280937 CEST	192.168.2.5	130.195.209.170	f5e	Echo
Oct 25, 2024 20:05:19.466325045 CEST	192.168.2.5	130.195.45.209	f5d	Echo
Oct 25, 2024 20:05:19.466346979 CEST	192.168.2.5	130.195.243.87	f5c	Echo
Oct 25, 2024 20:05:19.466459990 CEST	192.168.2.5	130.195.43.109	f5b	Echo
Oct 25, 2024 20:05:19.466484070 CEST	192.168.2.5	130.195.77.237	f5a	Echo
Oct 25, 2024 20:05:19.466556072 CEST	192.168.2.5	130.195.66.3	f59	Echo
Oct 25, 2024 20:05:19.466624022 CEST	192.168.2.5	130.195.75.160	f58	Echo
Oct 25, 2024 20:05:19.466697931 CEST	192.168.2.5	130.195.25.150	f57	Echo
Oct 25, 2024 20:05:19.466723919 CEST	192.168.2.5	130.195.21.29	f56	Echo
Oct 25, 2024 20:05:19.466804028 CEST	192.168.2.5	130.195.139.20	f55	Echo
Oct 25, 2024 20:05:19.495404005 CEST	192.168.2.5	130.195.243.43	f54	Echo
Oct 25, 2024 20:05:19.526334047 CEST	192.168.2.5	130.195.170.172	f53	Echo
Oct 25, 2024 20:05:19.557761908 CEST	192.168.2.5	130.195.72.142	f52	Echo
Oct 25, 2024 20:05:19.588937044 CEST	192.168.2.5	130.195.202.247	f51	Echo
Oct 25, 2024 20:05:19.620256901 CEST	192.168.2.5	130.195.208.144	f50	Echo
Oct 25, 2024 20:05:19.651417017 CEST	192.168.2.5	130.195.210.208	f4f	Echo
Oct 25, 2024 20:05:19.682770967 CEST	192.168.2.5	130.195.124.245	f4e	Echo
Oct 25, 2024 20:05:19.716783047 CEST	192.168.2.5	130.195.8.117	f4d	Echo
Oct 25, 2024 20:05:19.745403051 CEST	192.168.2.5	130.195.243.197	f4c	Echo
Oct 25, 2024 20:05:19.776441097 CEST	192.168.2.5	130.195.246.121	f4b	Echo
Oct 25, 2024 20:05:19.807605028 CEST	192.168.2.5	130.195.149.240	f4a	Echo
Oct 25, 2024 20:05:19.838973045 CEST	192.168.2.5	130.195.128.89	f49	Echo
Oct 25, 2024 20:05:19.870246887 CEST	192.168.2.5	130.195.124.152	f48	Echo
Oct 25, 2024 20:05:19.901509047 CEST	192.168.2.5	130.195.223.153	f47	Echo
Oct 25, 2024 20:05:19.932966948 CEST	192.168.2.5	130.195.46.118	f46	Echo
Oct 25, 2024 20:05:19.964896917 CEST	192.168.2.5	130.195.2.64	f45	Echo
Oct 25, 2024 20:05:19.965024948 CEST	192.168.2.5	130.195.10.176	f44	Echo
Oct 25, 2024 20:05:19.966957092 CEST	192.168.2.5	130.195.207.158	f43	Echo
Oct 25, 2024 20:05:19.967116117 CEST	192.168.2.5	130.195.194.152	f42	Echo
Oct 25, 2024 20:05:19.967272043 CEST	192.168.2.5	130.195.28.253	f41	Echo
Oct 25, 2024 20:05:19.967590094 CEST	192.168.2.5	130.195.20.5	f40	Echo
Oct 25, 2024 20:05:19.967936039 CEST	192.168.2.5	130.195.237.62	f3e	Echo
Oct 25, 2024 20:05:19.967936993 CEST	192.168.2.5	130.195.62.187	f3f	Echo
Oct 25, 2024 20:05:19.968019962 CEST	192.168.2.5	130.195.165.237	f3d	Echo
Oct 25, 2024 20:05:19.968219042 CEST	192.168.2.5	130.195.149.165	f3c	Echo
Oct 25, 2024 20:05:19.968471050 CEST	192.168.2.5	130.195.95.149	f3b	Echo
Oct 25, 2024 20:05:19.968478918 CEST	192.168.2.5	130.195.22.95	f3a	Echo
Oct 25, 2024 20:05:19.968673944 CEST	192.168.2.5	130.195.2.247	f39	Echo
Oct 25, 2024 20:05:19.969053984 CEST	192.168.2.5	130.195.99.86	f38	Echo
Oct 25, 2024 20:05:19.969095945 CEST	192.168.2.5	130.195.59.208	f37	Echo
Oct 25, 2024 20:05:19.969369888 CEST	192.168.2.5	130.195.36.5	f36	Echo
Oct 25, 2024 20:05:19.969408989 CEST	192.168.2.5	130.195.160.174	f35	Echo
Oct 25, 2024 20:05:19.995270014 CEST	192.168.2.5	130.195.244.10	f34	Echo
Oct 25, 2024 20:05:20.019902945 CEST	192.168.2.5	130.195.8.117	f33	Echo
Oct 25, 2024 20:05:20.026478052 CEST	192.168.2.5	130.195.58.158	f32	Echo
Oct 25, 2024 20:05:20.058490038 CEST	192.168.2.5	130.195.109.234	f31	Echo
Oct 25, 2024 20:05:20.086432934 CEST	130.195.244.10	192.168.2.5	1734	Echo Reply
Oct 25, 2024 20:05:20.087852955 CEST	192.168.2.5	130.195.244.10	f30	Echo
Oct 25, 2024 20:05:20.090743065 CEST	192.168.2.5	130.195.240.155	f2f	Echo
Oct 25, 2024 20:05:20.120488882 CEST	192.168.2.5	130.195.117.72	f2e	Echo
Oct 25, 2024 20:05:20.151637077 CEST	192.168.2.5	130.195.166.178	f2d	Echo
Oct 25, 2024 20:05:20.178478003 CEST	130.195.244.10	192.168.2.5	1730	Echo Reply
Oct 25, 2024 20:05:20.182651043 CEST	192.168.2.5	130.195.131.87	f2c	Echo
Oct 25, 2024 20:05:20.214008093 CEST	192.168.2.5	130.195.205.80	f2b	Echo
Oct 25, 2024 20:05:20.245210886 CEST	192.168.2.5	130.195.238.121	f2a	Echo
Oct 25, 2024 20:05:20.276746035 CEST	192.168.2.5	130.195.68.62	f29	Echo
Oct 25, 2024 20:05:20.307842970 CEST	192.168.2.5	130.195.140.147	f28	Echo
Oct 25, 2024 20:05:20.339066982 CEST	192.168.2.5	130.195.248.140	f27	Echo
Oct 25, 2024 20:05:20.370373964 CEST	192.168.2.5	130.195.222.153	f26	Echo
Oct 25, 2024 20:05:20.401590109 CEST	192.168.2.5	130.195.116.234	f25	Echo
Oct 25, 2024 20:05:20.446902990 CEST	192.168.2.5	130.195.213.23	f24	Echo
Oct 25, 2024 20:05:20.464611053 CEST	192.168.2.5	130.195.3.246	f23	Echo
Oct 25, 2024 20:05:20.465925932 CEST	192.168.2.5	130.195.16.79	f21	Echo
Oct 25, 2024 20:05:20.466032982 CEST	192.168.2.5	130.195.171.115	f22	Echo
Oct 25, 2024 20:05:20.466032982 CEST	192.168.2.5	130.195.91.157	f20	Echo
Oct 25, 2024 20:05:20.466084957 CEST	192.168.2.5	130.195.38.91	f1f	Echo
Oct 25, 2024 20:05:20.466259003 CEST	192.168.2.5	130.195.167.38	f1e	Echo
Oct 25, 2024 20:05:20.466259003 CEST	192.168.2.5	130.195.94.45	f1d	Echo
Oct 25, 2024 20:05:20.466442108 CEST	192.168.2.5	130.195.246.12	f1b	Echo
Oct 25, 2024 20:05:20.466506004 CEST	192.168.2.5	130.195.12.178	f1c	Echo
Oct 25, 2024 20:05:20.466515064 CEST	192.168.2.5	130.195.71.69	f1a	Echo
Oct 25, 2024 20:05:20.466685057 CEST	192.168.2.5	130.195.144.45	f18	Echo
Oct 25, 2024 20:05:20.466737986 CEST	192.168.2.5	130.195.29.116	f19	Echo
Oct 25, 2024 20:05:20.466837883 CEST	192.168.2.5	130.195.90.59	f16	Echo
Oct 25, 2024 20:05:20.466862917 CEST	192.168.2.5	130.195.93.154	f17	Echo
Oct 25, 2024 20:05:20.466921091 CEST	192.168.2.5	130.195.200.74	f15	Echo
Oct 25, 2024 20:05:20.467073917 CEST	192.168.2.5	130.195.210.178	f14	Echo
Oct 25, 2024 20:05:20.467257023 CEST	192.168.2.5	130.195.147.210	f13	Echo
Oct 25, 2024 20:05:20.496207952 CEST	192.168.2.5	130.195.46.8	f12	Echo
Oct 25, 2024 20:05:20.526494980 CEST	192.168.2.5	130.195.96.177	f11	Echo
Oct 25, 2024 20:05:20.557904959 CEST	192.168.2.5	130.195.226.247	f10	Echo
Oct 25, 2024 20:05:20.588844061 CEST	192.168.2.5	130.195.149.187	f0f	Echo
Oct 25, 2024 20:05:20.620150089 CEST	192.168.2.5	130.195.29.17	f0e	Echo
Oct 25, 2024 20:05:20.651501894 CEST	192.168.2.5	130.195.252.75	f0d	Echo
Oct 25, 2024 20:05:20.682760954 CEST	192.168.2.5	130.195.203.231	f0c	Echo
Oct 25, 2024 20:05:20.713891983 CEST	192.168.2.5	130.195.62.231	f0b	Echo
Oct 25, 2024 20:05:20.745449066 CEST	192.168.2.5	130.195.41.118	f0a	Echo
Oct 25, 2024 20:05:20.776947975 CEST	192.168.2.5	130.195.72.251	f09	Echo
Oct 25, 2024 20:05:20.807815075 CEST	192.168.2.5	130.195.111.22	f08	Echo
Oct 25, 2024 20:05:20.839539051 CEST	192.168.2.5	130.195.164.100	f07	Echo
Oct 25, 2024 20:05:20.870397091 CEST	192.168.2.5	130.195.228.42	f06	Echo
Oct 25, 2024 20:05:20.901915073 CEST	192.168.2.5	130.195.213.58	f05	Echo
Oct 25, 2024 20:05:20.932724953 CEST	192.168.2.5	130.195.134.74	f04	Echo
Oct 25, 2024 20:05:20.964704037 CEST	192.168.2.5	130.195.16.138	f03	Echo
Oct 25, 2024 20:05:20.964787960 CEST	192.168.2.5	130.195.107.241	f02	Echo
Oct 25, 2024 20:05:20.966475010 CEST	192.168.2.5	130.195.107.175	f00	Echo
Oct 25, 2024 20:05:20.966480970 CEST	192.168.2.5	130.195.192.64	f01	Echo
Oct 25, 2024 20:05:20.966583014 CEST	192.168.2.5	130.195.33.4	eff	Echo
Oct 25, 2024 20:05:20.966653109 CEST	192.168.2.5	130.195.96.63	efe	Echo
Oct 25, 2024 20:05:20.966845036 CEST	192.168.2.5	130.195.150.136	efc	Echo
Oct 25, 2024 20:05:20.966846943 CEST	192.168.2.5	130.195.77.181	efd	Echo
Oct 25, 2024 20:05:20.966921091 CEST	192.168.2.5	130.195.16.15	efb	Echo
Oct 25, 2024 20:05:20.967017889 CEST	192.168.2.5	130.195.5.215	efa	Echo
Oct 25, 2024 20:05:20.967184067 CEST	192.168.2.5	130.195.197.111	ef9	Echo
Oct 25, 2024 20:05:20.967284918 CEST	192.168.2.5	130.195.237.197	ef8	Echo
Oct 25, 2024 20:05:20.967338085 CEST	192.168.2.5	130.195.241.66	ef7	Echo
Oct 25, 2024 20:05:20.967398882 CEST	192.168.2.5	130.195.200.131	ef6	Echo
Oct 25, 2024 20:05:20.967565060 CEST	192.168.2.5	130.195.244.169	ef5	Echo
Oct 25, 2024 20:05:20.967583895 CEST	192.168.2.5	130.195.74.186	ef4	Echo
Oct 25, 2024 20:05:20.967679977 CEST	192.168.2.5	130.195.211.112	ef3	Echo
Oct 25, 2024 20:05:20.995172977 CEST	192.168.2.5	130.195.3.189	ef2	Echo
Oct 25, 2024 20:05:21.026340008 CEST	192.168.2.5	130.195.54.21	ef1	Echo
Oct 25, 2024 20:05:21.057651043 CEST	192.168.2.5	130.195.209.47	ef0	Echo
Oct 25, 2024 20:05:21.092048883 CEST	192.168.2.5	130.195.224.237	eef	Echo
Oct 25, 2024 20:05:21.121372938 CEST	192.168.2.5	130.195.85.100	eee	Echo
Oct 25, 2024 20:05:21.151701927 CEST	192.168.2.5	130.195.245.131	eed	Echo
Oct 25, 2024 20:05:21.182601929 CEST	192.168.2.5	130.195.23.186	eec	Echo
Oct 25, 2024 20:05:21.213936090 CEST	192.168.2.5	130.195.19.233	eeb	Echo
Oct 25, 2024 20:05:21.245117903 CEST	192.168.2.5	130.195.2.153	eea	Echo
Oct 25, 2024 20:05:21.276400089 CEST	192.168.2.5	130.195.23.82	ee9	Echo
Oct 25, 2024 20:05:21.307600021 CEST	192.168.2.5	130.195.6.155	ee8	Echo
Oct 25, 2024 20:05:21.338895082 CEST	192.168.2.5	130.195.185.102	ee7	Echo
Oct 25, 2024 20:05:21.370291948 CEST	192.168.2.5	130.195.75.223	ee6	Echo
Oct 25, 2024 20:05:21.401474953 CEST	192.168.2.5	130.195.29.0	ee5	Echo
Oct 25, 2024 20:05:21.432807922 CEST	192.168.2.5	130.195.155.227	ee4	Echo
Oct 25, 2024 20:05:21.472708941 CEST	192.168.2.5	130.195.203.158	ee3	Echo
Oct 25, 2024 20:05:21.472712994 CEST	192.168.2.5	130.195.183.23	ee2	Echo
Oct 25, 2024 20:05:21.473845959 CEST	130.195.213.23	192.168.2.5	1724	Echo Reply
Oct 25, 2024 20:05:21.473922968 CEST	192.168.2.5	130.195.243.43	ee1	Echo
Oct 25, 2024 20:05:21.474114895 CEST	192.168.2.5	130.195.170.172	ee0	Echo
Oct 25, 2024 20:05:21.474215984 CEST	192.168.2.5	130.195.72.142	edf	Echo
Oct 25, 2024 20:05:21.474297047 CEST	192.168.2.5	130.195.202.247	ede	Echo
Oct 25, 2024 20:05:21.474375010 CEST	192.168.2.5	130.195.208.144	edd	Echo
Oct 25, 2024 20:05:21.474492073 CEST	192.168.2.5	130.195.210.208	edc	Echo
Oct 25, 2024 20:05:21.474550009 CEST	192.168.2.5	130.195.124.245	edb	Echo
Oct 25, 2024 20:05:21.474647045 CEST	192.168.2.5	130.195.243.197	eda	Echo
Oct 25, 2024 20:05:21.474720955 CEST	192.168.2.5	130.195.246.121	ed9	Echo
Oct 25, 2024 20:05:21.474813938 CEST	192.168.2.5	130.195.149.240	ed8	Echo
Oct 25, 2024 20:05:21.474857092 CEST	130.195.213.58	192.168.2.5	1705	Echo Reply
Oct 25, 2024 20:05:21.474909067 CEST	192.168.2.5	130.195.128.89	ed7	Echo
Oct 25, 2024 20:05:21.475100040 CEST	192.168.2.5	130.195.124.152	ed6	Echo
Oct 25, 2024 20:05:21.475188017 CEST	192.168.2.5	130.195.223.153	ed5	Echo
Oct 25, 2024 20:05:21.475291967 CEST	192.168.2.5	130.195.46.118	ed4	Echo
Oct 25, 2024 20:05:21.475378036 CEST	192.168.2.5	130.195.213.23	ed3	Echo
Oct 25, 2024 20:05:21.475474119 CEST	192.168.2.5	130.195.213.58	ed2	Echo
Oct 25, 2024 20:05:21.495191097 CEST	192.168.2.5	130.195.86.126	ed1	Echo
Oct 25, 2024 20:05:21.505618095 CEST	130.195.213.58	192.168.2.5	16d2	Echo Reply
Oct 25, 2024 20:05:21.506782055 CEST	130.195.213.23	192.168.2.5	16d3	Echo Reply
Oct 25, 2024 20:05:21.526472092 CEST	192.168.2.5	130.195.111.86	ed0	Echo
Oct 25, 2024 20:05:21.557683945 CEST	192.168.2.5	130.195.153.159	ecf	Echo
Oct 25, 2024 20:05:21.588861942 CEST	192.168.2.5	130.195.63.167	ece	Echo
Oct 25, 2024 20:05:21.620112896 CEST	192.168.2.5	130.195.0.102	ecd	Echo
Oct 25, 2024 20:05:21.651365995 CEST	192.168.2.5	130.195.86.44	ecc	Echo
Oct 25, 2024 20:05:21.682528019 CEST	192.168.2.5	130.195.231.214	ecb	Echo
Oct 25, 2024 20:05:21.713996887 CEST	192.168.2.5	130.195.130.74	eca	Echo
Oct 25, 2024 20:05:21.745589018 CEST	192.168.2.5	130.195.115.118	ec9	Echo
Oct 25, 2024 20:05:21.746632099 CEST	192.168.2.5	130.195.6.155	ec8	Echo
Oct 25, 2024 20:05:21.779620886 CEST	192.168.2.5	130.195.179.52	ec7	Echo
Oct 25, 2024 20:05:21.808559895 CEST	192.168.2.5	130.195.47.179	ec6	Echo
Oct 25, 2024 20:05:21.839728117 CEST	192.168.2.5	130.195.55.132	ec5	Echo
Oct 25, 2024 20:05:21.870217085 CEST	192.168.2.5	130.195.70.52	ec4	Echo
Oct 25, 2024 20:05:21.901367903 CEST	192.168.2.5	130.195.241.158	ec3	Echo
Oct 25, 2024 20:05:21.932693005 CEST	192.168.2.5	130.195.253.187	ec2	Echo
Oct 25, 2024 20:05:21.964469910 CEST	192.168.2.5	130.195.159.59	ec1	Echo
Oct 25, 2024 20:05:21.964498997 CEST	192.168.2.5	130.195.10.176	ec0	Echo
Oct 25, 2024 20:05:21.966100931 CEST	192.168.2.5	130.195.58.158	ebf	Echo
Oct 25, 2024 20:05:21.966239929 CEST	192.168.2.5	130.195.240.155	ebd	Echo
Oct 25, 2024 20:05:21.966269016 CEST	192.168.2.5	130.195.109.234	ebe	Echo
Oct 25, 2024 20:05:21.966301918 CEST	192.168.2.5	130.195.117.72	ebc	Echo
Oct 25, 2024 20:05:21.966527939 CEST	192.168.2.5	130.195.205.80	eb9	Echo
Oct 25, 2024 20:05:21.966547012 CEST	192.168.2.5	130.195.166.178	ebb	Echo
Oct 25, 2024 20:05:21.966625929 CEST	192.168.2.5	130.195.131.87	eba	Echo
Oct 25, 2024 20:05:21.966768026 CEST	192.168.2.5	130.195.238.121	eb8	Echo
Oct 25, 2024 20:05:21.966797113 CEST	192.168.2.5	130.195.140.147	eb6	Echo
Oct 25, 2024 20:05:21.966888905 CEST	192.168.2.5	130.195.68.62	eb7	Echo
Oct 25, 2024 20:05:21.966888905 CEST	192.168.2.5	130.195.248.140	eb5	Echo
Oct 25, 2024 20:05:21.967031002 CEST	192.168.2.5	130.195.116.234	eb4	Echo
Oct 25, 2024 20:05:21.967233896 CEST	192.168.2.5	130.195.222.153	eb3	Echo
Oct 25, 2024 20:05:21.995203972 CEST	192.168.2.5	130.195.235.159	eb2	Echo
Oct 25, 2024 20:05:22.026645899 CEST	192.168.2.5	130.195.194.36	eb1	Echo
Oct 25, 2024 20:05:22.057768106 CEST	192.168.2.5	130.195.224.195	eb0	Echo
Oct 25, 2024 20:05:22.089977980 CEST	192.168.2.5	130.195.178.44	eaf	Echo
Oct 25, 2024 20:05:22.128897905 CEST	192.168.2.5	130.195.197.84	eae	Echo
Oct 25, 2024 20:05:22.152575970 CEST	192.168.2.5	130.195.68.75	ead	Echo
Oct 25, 2024 20:05:22.182966948 CEST	192.168.2.5	130.195.17.174	eac	Echo
Oct 25, 2024 20:05:22.213948011 CEST	192.168.2.5	130.195.108.252	eab	Echo
Oct 25, 2024 20:05:22.245558977 CEST	192.168.2.5	130.195.187.160	eaa	Echo
Oct 25, 2024 20:05:22.276493073 CEST	192.168.2.5	130.195.7.202	ea9	Echo
Oct 25, 2024 20:05:22.307724953 CEST	192.168.2.5	130.195.217.255	ea8	Echo
Oct 25, 2024 20:05:22.338860989 CEST	192.168.2.5	130.195.166.130	ea7	Echo
Oct 25, 2024 20:05:22.365408897 CEST	192.168.2.5	130.195.253.187	ea6	Echo
Oct 25, 2024 20:05:22.371162891 CEST	192.168.2.5	130.195.141.160	ea5	Echo
Oct 25, 2024 20:05:22.401537895 CEST	192.168.2.5	130.195.16.255	ea4	Echo
Oct 25, 2024 20:05:22.432625055 CEST	192.168.2.5	130.195.97.198	ea3	Echo
Oct 25, 2024 20:05:22.465053082 CEST	192.168.2.5	130.195.3.246	ea2	Echo
Oct 25, 2024 20:05:22.465249062 CEST	192.168.2.5	130.195.12.34	ea1	Echo
Oct 25, 2024 20:05:22.467731953 CEST	192.168.2.5	130.195.46.8	ea0	Echo
Oct 25, 2024 20:05:22.467853069 CEST	192.168.2.5	130.195.96.177	e9f	Echo
Oct 25, 2024 20:05:22.467921972 CEST	192.168.2.5	130.195.226.247	e9e	Echo
Oct 25, 2024 20:05:22.468013048 CEST	192.168.2.5	130.195.149.187	e9d	Echo
Oct 25, 2024 20:05:22.468159914 CEST	192.168.2.5	130.195.29.17	e9c	Echo
Oct 25, 2024 20:05:22.468169928 CEST	192.168.2.5	130.195.252.75	e9b	Echo
Oct 25, 2024 20:05:22.468326092 CEST	192.168.2.5	130.195.62.231	e99	Echo
Oct 25, 2024 20:05:22.468358040 CEST	192.168.2.5	130.195.203.231	e9a	Echo
Oct 25, 2024 20:05:22.468426943 CEST	192.168.2.5	130.195.41.118	e98	Echo
Oct 25, 2024 20:05:22.468527079 CEST	192.168.2.5	130.195.72.251	e97	Echo
Oct 25, 2024 20:05:22.468703032 CEST	192.168.2.5	130.195.111.22	e96	Echo
Oct 25, 2024 20:05:22.468791962 CEST	192.168.2.5	130.195.164.100	e95	Echo
Oct 25, 2024 20:05:22.468791962 CEST	192.168.2.5	130.195.228.42	e94	Echo
Oct 25, 2024 20:05:22.468847036 CEST	192.168.2.5	130.195.134.74	e93	Echo
Oct 25, 2024 20:05:22.500602961 CEST	192.168.2.5	130.195.197.10	e92	Echo
Oct 25, 2024 20:05:22.527254105 CEST	192.168.2.5	130.195.158.182	e91	Echo
Oct 25, 2024 20:05:22.557856083 CEST	192.168.2.5	130.195.60.55	e90	Echo
Oct 25, 2024 20:05:22.589199066 CEST	192.168.2.5	130.195.15.20	e8f	Echo
Oct 25, 2024 20:05:22.620229006 CEST	192.168.2.5	130.195.37.192	e8e	Echo
Oct 25, 2024 20:05:22.651413918 CEST	192.168.2.5	130.195.35.133	e8d	Echo
Oct 25, 2024 20:05:22.682924986 CEST	192.168.2.5	130.195.11.138	e8c	Echo
Oct 25, 2024 20:05:22.713886023 CEST	192.168.2.5	130.195.212.86	e8b	Echo
Oct 25, 2024 20:05:22.745565891 CEST	192.168.2.5	130.195.134.4	e8a	Echo
Oct 25, 2024 20:05:22.776392937 CEST	192.168.2.5	130.195.68.129	e89	Echo
Oct 25, 2024 20:05:22.808237076 CEST	192.168.2.5	130.195.205.81	e88	Echo
Oct 25, 2024 20:05:22.840281010 CEST	192.168.2.5	130.195.82.98	e87	Echo
Oct 25, 2024 20:05:22.870527029 CEST	192.168.2.5	130.195.34.244	e86	Echo
Oct 25, 2024 20:05:22.906462908 CEST	192.168.2.5	130.195.143.159	e85	Echo
Oct 25, 2024 20:05:22.932998896 CEST	192.168.2.5	130.195.6.40	e84	Echo
Oct 25, 2024 20:05:22.965455055 CEST	192.168.2.5	130.195.16.138	e83	Echo
Oct 25, 2024 20:05:22.966191053 CEST	192.168.2.5	130.195.42.91	e82	Echo
Oct 25, 2024 20:05:22.970987082 CEST	192.168.2.5	130.195.3.189	e81	Echo
Oct 25, 2024 20:05:22.971235991 CEST	192.168.2.5	130.195.54.21	e80	Echo
Oct 25, 2024 20:05:22.971388102 CEST	192.168.2.5	130.195.209.47	e7f	Echo
Oct 25, 2024 20:05:22.971714973 CEST	192.168.2.5	130.195.224.237	e7e	Echo
Oct 25, 2024 20:05:22.971997023 CEST	192.168.2.5	130.195.85.100	e7d	Echo
Oct 25, 2024 20:05:22.972124100 CEST	192.168.2.5	130.195.245.131	e7c	Echo
Oct 25, 2024 20:05:22.972285986 CEST	192.168.2.5	130.195.23.186	e7b	Echo
Oct 25, 2024 20:05:22.972651958 CEST	192.168.2.5	130.195.19.233	e7a	Echo
Oct 25, 2024 20:05:22.972929955 CEST	192.168.2.5	130.195.2.153	e79	Echo
Oct 25, 2024 20:05:22.973135948 CEST	192.168.2.5	130.195.23.82	e78	Echo
Oct 25, 2024 20:05:22.973148108 CEST	192.168.2.5	130.195.185.102	e77	Echo
Oct 25, 2024 20:05:22.973382950 CEST	192.168.2.5	130.195.75.223	e76	Echo
Oct 25, 2024 20:05:22.973560095 CEST	192.168.2.5	130.195.29.0	e75	Echo
Oct 25, 2024 20:05:22.974827051 CEST	192.168.2.5	130.195.155.227	e74	Echo
Oct 25, 2024 20:05:22.984395027 CEST	192.168.2.5	130.195.11.138	e73	Echo
Oct 25, 2024 20:05:22.995739937 CEST	192.168.2.5	130.195.53.201	e72	Echo
Oct 25, 2024 20:05:23.026387930 CEST	192.168.2.5	130.195.92.199	e71	Echo
Oct 25, 2024 20:05:23.058090925 CEST	192.168.2.5	130.195.64.52	e70	Echo
Oct 25, 2024 20:05:23.088875055 CEST	192.168.2.5	130.195.32.170	e6f	Echo
Oct 25, 2024 20:05:23.120239019 CEST	192.168.2.5	130.195.129.236	e6e	Echo
Oct 25, 2024 20:05:23.155128956 CEST	192.168.2.5	130.195.93.166	e6d	Echo
Oct 25, 2024 20:05:23.198018074 CEST	192.168.2.5	130.195.68.160	e6c	Echo
Oct 25, 2024 20:05:23.231101990 CEST	192.168.2.5	130.195.7.83	e6b	Echo
Oct 25, 2024 20:05:23.261113882 CEST	192.168.2.5	130.195.248.168	e6a	Echo
Oct 25, 2024 20:05:23.292272091 CEST	192.168.2.5	130.195.217.236	e69	Echo
Oct 25, 2024 20:05:23.323374987 CEST	192.168.2.5	130.195.127.0	e68	Echo
Oct 25, 2024 20:05:23.354832888 CEST	192.168.2.5	130.195.182.198	e67	Echo
Oct 25, 2024 20:05:23.386090040 CEST	192.168.2.5	130.195.189.176	e66	Echo
Oct 25, 2024 20:05:23.417463064 CEST	192.168.2.5	130.195.141.39	e65	Echo
Oct 25, 2024 20:05:23.448335886 CEST	192.168.2.5	130.195.19.72	e64	Echo
Oct 25, 2024 20:05:23.464349031 CEST	192.168.2.5	130.195.203.158	e63	Echo
Oct 25, 2024 20:05:23.465687037 CEST	192.168.2.5	130.195.86.126	e62	Echo
Oct 25, 2024 20:05:23.465886116 CEST	192.168.2.5	130.195.111.86	e61	Echo
Oct 25, 2024 20:05:23.465962887 CEST	192.168.2.5	130.195.63.167	e5f	Echo
Oct 25, 2024 20:05:23.465979099 CEST	192.168.2.5	130.195.153.159	e60	Echo
Oct 25, 2024 20:05:23.466033936 CEST	192.168.2.5	130.195.0.102	e5e	Echo
Oct 25, 2024 20:05:23.466134071 CEST	192.168.2.5	130.195.86.44	e5d	Echo
Oct 25, 2024 20:05:23.466423988 CEST	192.168.2.5	130.195.231.214	e5c	Echo
Oct 25, 2024 20:05:23.466423988 CEST	192.168.2.5	130.195.130.74	e5b	Echo
Oct 25, 2024 20:05:23.466465950 CEST	192.168.2.5	130.195.115.118	e5a	Echo
Oct 25, 2024 20:05:23.466607094 CEST	192.168.2.5	130.195.47.179	e58	Echo
Oct 25, 2024 20:05:23.466604948 CEST	192.168.2.5	130.195.179.52	e59	Echo
Oct 25, 2024 20:05:23.466664076 CEST	192.168.2.5	130.195.55.132	e57	Echo
Oct 25, 2024 20:05:23.466741085 CEST	192.168.2.5	130.195.70.52	e56	Echo
Oct 25, 2024 20:05:23.466789007 CEST	192.168.2.5	130.195.241.158	e55	Echo
Oct 25, 2024 20:05:23.479485035 CEST	192.168.2.5	130.195.119.72	e54	Echo
Oct 25, 2024 20:05:23.511063099 CEST	192.168.2.5	130.195.70.114	e53	Echo
Oct 25, 2024 20:05:23.539062977 CEST	192.168.2.5	130.195.7.83	e52	Echo
Oct 25, 2024 20:05:23.542006969 CEST	192.168.2.5	130.195.124.71	e51	Echo
Oct 25, 2024 20:05:23.573721886 CEST	192.168.2.5	130.195.36.124	e50	Echo
Oct 25, 2024 20:05:23.604707003 CEST	192.168.2.5	130.195.17.5	e4f	Echo
Oct 25, 2024 20:05:23.635787964 CEST	192.168.2.5	130.195.182.210	e4e	Echo
Oct 25, 2024 20:05:23.666990995 CEST	192.168.2.5	130.195.142.204	e4d	Echo
Oct 25, 2024 20:05:23.698282003 CEST	192.168.2.5	130.195.12.175	e4c	Echo
Oct 25, 2024 20:05:23.729806900 CEST	192.168.2.5	130.195.65.127	e4b	Echo
Oct 25, 2024 20:05:23.760911942 CEST	192.168.2.5	130.195.45.194	e4a	Echo
Oct 25, 2024 20:05:23.792057037 CEST	192.168.2.5	130.195.21.41	e49	Echo
Oct 25, 2024 20:05:23.823244095 CEST	192.168.2.5	130.195.79.18	e48	Echo
Oct 25, 2024 20:05:23.854590893 CEST	192.168.2.5	130.195.7.16	e47	Echo
Oct 25, 2024 20:05:23.886455059 CEST	192.168.2.5	130.195.229.213	e46	Echo
Oct 25, 2024 20:05:23.917241096 CEST	192.168.2.5	130.195.152.229	e45	Echo
Oct 25, 2024 20:05:23.948446989 CEST	192.168.2.5	130.195.122.138	e44	Echo
Oct 25, 2024 20:05:23.964510918 CEST	192.168.2.5	130.195.159.59	e43	Echo
Oct 25, 2024 20:05:23.965722084 CEST	192.168.2.5	130.195.235.159	e42	Echo
Oct 25, 2024 20:05:23.965838909 CEST	192.168.2.5	130.195.194.36	e41	Echo
Oct 25, 2024 20:05:23.966000080 CEST	192.168.2.5	130.195.224.195	e40	Echo
Oct 25, 2024 20:05:23.966072083 CEST	192.168.2.5	130.195.178.44	e3f	Echo
Oct 25, 2024 20:05:23.966197968 CEST	192.168.2.5	130.195.197.84	e3e	Echo
Oct 25, 2024 20:05:23.966284037 CEST	192.168.2.5	130.195.68.75	e3d	Echo
Oct 25, 2024 20:05:23.966391087 CEST	192.168.2.5	130.195.17.174	e3c	Echo
Oct 25, 2024 20:05:23.966624022 CEST	192.168.2.5	130.195.187.160	e3a	Echo
Oct 25, 2024 20:05:23.966685057 CEST	192.168.2.5	130.195.108.252	e3b	Echo
Oct 25, 2024 20:05:23.966754913 CEST	192.168.2.5	130.195.217.255	e38	Echo
Oct 25, 2024 20:05:23.966830969 CEST	192.168.2.5	130.195.166.130	e37	Echo
Oct 25, 2024 20:05:23.966877937 CEST	192.168.2.5	130.195.7.202	e39	Echo
Oct 25, 2024 20:05:23.967078924 CEST	192.168.2.5	130.195.141.160	e36	Echo
Oct 25, 2024 20:05:23.967227936 CEST	192.168.2.5	130.195.16.255	e35	Echo
Oct 25, 2024 20:05:23.967247963 CEST	192.168.2.5	130.195.97.198	e34	Echo
Oct 25, 2024 20:05:23.979717016 CEST	192.168.2.5	130.195.135.135	e33	Echo
Oct 25, 2024 20:05:24.010675907 CEST	192.168.2.5	130.195.55.219	e32	Echo
Oct 25, 2024 20:05:24.041980982 CEST	192.168.2.5	130.195.98.174	e31	Echo
Oct 25, 2024 20:05:24.073170900 CEST	192.168.2.5	130.195.117.227	e30	Echo
Oct 25, 2024 20:05:24.104510069 CEST	192.168.2.5	130.195.190.159	e2f	Echo
Oct 25, 2024 20:05:24.140369892 CEST	192.168.2.5	130.195.193.79	e2e	Echo
Oct 25, 2024 20:05:24.155813932 CEST	192.168.2.5	130.195.7.16	e2d	Echo
Oct 25, 2024 20:05:24.167088032 CEST	192.168.2.5	130.195.14.191	e2c	Echo
Oct 25, 2024 20:05:24.198939085 CEST	192.168.2.5	130.195.56.15	e2b	Echo
Oct 25, 2024 20:05:24.229502916 CEST	192.168.2.5	130.195.24.249	e2a	Echo
Oct 25, 2024 20:05:24.260833979 CEST	192.168.2.5	130.195.12.179	e29	Echo
Oct 25, 2024 20:05:24.292135000 CEST	192.168.2.5	130.195.152.80	e28	Echo
Oct 25, 2024 20:05:24.323232889 CEST	192.168.2.5	130.195.190.229	e27	Echo
Oct 25, 2024 20:05:24.354636908 CEST	192.168.2.5	130.195.7.155	e26	Echo
Oct 25, 2024 20:05:24.385826111 CEST	192.168.2.5	130.195.254.104	e25	Echo
Oct 25, 2024 20:05:24.416933060 CEST	192.168.2.5	130.195.68.102	e24	Echo
Oct 25, 2024 20:05:24.448240042 CEST	192.168.2.5	130.195.40.96	e23	Echo
Oct 25, 2024 20:05:24.464167118 CEST	192.168.2.5	130.195.12.34	e22	Echo
Oct 25, 2024 20:05:24.465948105 CEST	192.168.2.5	130.195.197.10	e21	Echo
Oct 25, 2024 20:05:24.466160059 CEST	192.168.2.5	130.195.158.182	e20	Echo
Oct 25, 2024 20:05:24.466171026 CEST	192.168.2.5	130.195.60.55	e1f	Echo
Oct 25, 2024 20:05:24.466346025 CEST	192.168.2.5	130.195.15.20	e1e	Echo
Oct 25, 2024 20:05:24.466350079 CEST	192.168.2.5	130.195.37.192	e1d	Echo
Oct 25, 2024 20:05:24.466496944 CEST	192.168.2.5	130.195.212.86	e1b	Echo
Oct 25, 2024 20:05:24.466557026 CEST	192.168.2.5	130.195.35.133	e1c	Echo
Oct 25, 2024 20:05:24.466686010 CEST	192.168.2.5	130.195.134.4	e1a	Echo
Oct 25, 2024 20:05:24.466712952 CEST	192.168.2.5	130.195.68.129	e19	Echo
Oct 25, 2024 20:05:24.466824055 CEST	192.168.2.5	130.195.205.81	e18	Echo
Oct 25, 2024 20:05:24.466927052 CEST	192.168.2.5	130.195.82.98	e17	Echo
Oct 25, 2024 20:05:24.467020035 CEST	192.168.2.5	130.195.34.244	e16	Echo
Oct 25, 2024 20:05:24.467092037 CEST	192.168.2.5	130.195.143.159	e15	Echo
Oct 25, 2024 20:05:24.467232943 CEST	192.168.2.5	130.195.6.40	e14	Echo
Oct 25, 2024 20:05:24.479573965 CEST	192.168.2.5	130.195.27.136	e13	Echo
Oct 25, 2024 20:05:24.510803938 CEST	192.168.2.5	130.195.244.246	e12	Echo
Oct 25, 2024 20:05:24.542068958 CEST	192.168.2.5	130.195.238.57	e11	Echo
Oct 25, 2024 20:05:24.573684931 CEST	192.168.2.5	130.195.226.149	e10	Echo
Oct 25, 2024 20:05:24.605381012 CEST	192.168.2.5	130.195.24.186	e0f	Echo
Oct 25, 2024 20:05:24.635823011 CEST	192.168.2.5	130.195.129.16	e0e	Echo
Oct 25, 2024 20:05:24.655926943 CEST	192.168.2.5	130.195.7.155	e0d	Echo
Oct 25, 2024 20:05:24.667150021 CEST	192.168.2.5	130.195.173.121	e0c	Echo
Oct 25, 2024 20:05:24.699672937 CEST	192.168.2.5	130.195.61.182	e0b	Echo
Oct 25, 2024 20:05:24.730623960 CEST	192.168.2.5	130.195.62.211	e0a	Echo
Oct 25, 2024 20:05:24.765804052 CEST	192.168.2.5	130.195.38.217	e09	Echo
Oct 25, 2024 20:05:24.792223930 CEST	192.168.2.5	130.195.255.213	e08	Echo
Oct 25, 2024 20:05:24.823762894 CEST	192.168.2.5	130.195.55.23	e07	Echo
Oct 25, 2024 20:05:24.855465889 CEST	192.168.2.5	130.195.17.55	e06	Echo
Oct 25, 2024 20:05:24.889681101 CEST	192.168.2.5	130.195.113.164	e05	Echo
Oct 25, 2024 20:05:24.919756889 CEST	192.168.2.5	130.195.60.207	e04	Echo
Oct 25, 2024 20:05:24.948455095 CEST	192.168.2.5	130.195.238.18	e03	Echo
Oct 25, 2024 20:05:24.964262009 CEST	192.168.2.5	130.195.42.91	e02	Echo
Oct 25, 2024 20:05:24.965812922 CEST	192.168.2.5	130.195.92.199	e00	Echo
Oct 25, 2024 20:05:24.965919018 CEST	192.168.2.5	130.195.53.201	e01	Echo
Oct 25, 2024 20:05:24.966044903 CEST	192.168.2.5	130.195.32.170	dfe	Echo
Oct 25, 2024 20:05:24.966106892 CEST	192.168.2.5	130.195.64.52	dff	Echo
Oct 25, 2024 20:05:24.966181993 CEST	192.168.2.5	130.195.129.236	dfd	Echo
Oct 25, 2024 20:05:24.966190100 CEST	192.168.2.5	130.195.93.166	dfc	Echo
Oct 25, 2024 20:05:24.966474056 CEST	192.168.2.5	130.195.68.160	dfb	Echo
Oct 25, 2024 20:05:24.966552973 CEST	192.168.2.5	130.195.248.168	dfa	Echo
Oct 25, 2024 20:05:24.966594934 CEST	192.168.2.5	130.195.127.0	df8	Echo
Oct 25, 2024 20:05:24.966598034 CEST	192.168.2.5	130.195.217.236	df9	Echo
Oct 25, 2024 20:05:24.966799021 CEST	192.168.2.5	130.195.182.198	df7	Echo
Oct 25, 2024 20:05:24.966813087 CEST	192.168.2.5	130.195.141.39	df5	Echo
Oct 25, 2024 20:05:24.966837883 CEST	192.168.2.5	130.195.189.176	df6	Echo
Oct 25, 2024 20:05:24.967056990 CEST	192.168.2.5	130.195.19.72	df4	Echo
Oct 25, 2024 20:05:24.979526043 CEST	192.168.2.5	130.195.3.78	df3	Echo
Oct 25, 2024 20:05:25.011048079 CEST	192.168.2.5	130.195.80.186	df2	Echo
Oct 25, 2024 20:05:25.042237043 CEST	192.168.2.5	130.195.70.80	df1	Echo
Oct 25, 2024 20:05:25.073220015 CEST	192.168.2.5	130.195.126.19	df0	Echo
Oct 25, 2024 20:05:25.104856014 CEST	192.168.2.5	130.195.135.137	def	Echo
Oct 25, 2024 20:05:25.135986090 CEST	192.168.2.5	130.195.118.178	dee	Echo
Oct 25, 2024 20:05:25.167150974 CEST	192.168.2.5	130.195.203.78	ded	Echo
Oct 25, 2024 20:05:25.198373079 CEST	192.168.2.5	130.195.96.59	dec	Echo
Oct 25, 2024 20:05:25.230148077 CEST	192.168.2.5	130.195.8.246	deb	Echo
Oct 25, 2024 20:05:25.261141062 CEST	192.168.2.5	130.195.74.7	dea	Echo
Oct 25, 2024 20:05:25.292140007 CEST	192.168.2.5	130.195.3.149	de9	Echo
Oct 25, 2024 20:05:25.323278904 CEST	192.168.2.5	130.195.37.81	de8	Echo
Oct 25, 2024 20:05:25.354988098 CEST	192.168.2.5	130.195.222.64	de7	Echo
Oct 25, 2024 20:05:25.385760069 CEST	192.168.2.5	130.195.203.220	de6	Echo
Oct 25, 2024 20:05:25.417298079 CEST	192.168.2.5	130.195.132.34	de5	Echo
Oct 25, 2024 20:05:25.448267937 CEST	192.168.2.5	130.195.201.186	de4	Echo
Oct 25, 2024 20:05:25.470604897 CEST	192.168.2.5	130.195.119.72	de3	Echo
Oct 25, 2024 20:05:25.471204996 CEST	192.168.2.5	130.195.70.114	de2	Echo
Oct 25, 2024 20:05:25.471405983 CEST	192.168.2.5	130.195.124.71	de1	Echo
Oct 25, 2024 20:05:25.471620083 CEST	192.168.2.5	130.195.36.124	de0	Echo
Oct 25, 2024 20:05:25.472047091 CEST	192.168.2.5	130.195.142.204	ddd	Echo
Oct 25, 2024 20:05:25.472050905 CEST	192.168.2.5	130.195.182.210	dde	Echo
Oct 25, 2024 20:05:25.472162008 CEST	192.168.2.5	130.195.65.127	ddb	Echo
Oct 25, 2024 20:05:25.472182035 CEST	192.168.2.5	130.195.17.5	ddf	Echo
Oct 25, 2024 20:05:25.472182035 CEST	192.168.2.5	130.195.12.175	ddc	Echo
Oct 25, 2024 20:05:25.472332954 CEST	192.168.2.5	130.195.45.194	dda	Echo
Oct 25, 2024 20:05:25.472410917 CEST	192.168.2.5	130.195.21.41	dd9	Echo
Oct 25, 2024 20:05:25.472496033 CEST	192.168.2.5	130.195.79.18	dd8	Echo
Oct 25, 2024 20:05:25.472603083 CEST	192.168.2.5	130.195.229.213	dd7	Echo
Oct 25, 2024 20:05:25.472831964 CEST	192.168.2.5	130.195.152.229	dd6	Echo
Oct 25, 2024 20:05:25.473004103 CEST	192.168.2.5	130.195.122.138	dd5	Echo
Oct 25, 2024 20:05:25.479852915 CEST	192.168.2.5	130.195.195.5	dd4	Echo
Oct 25, 2024 20:05:25.523485899 CEST	192.168.2.5	130.195.176.47	dd3	Echo
Oct 25, 2024 20:05:25.544385910 CEST	192.168.2.5	130.195.229.166	dd2	Echo
Oct 25, 2024 20:05:25.606631994 CEST	192.168.2.5	130.195.2.81	dd1	Echo
Oct 25, 2024 20:05:25.635947943 CEST	192.168.2.5	130.195.241.169	dd0	Echo
Oct 25, 2024 20:05:25.671037912 CEST	192.168.2.5	130.195.119.149	dcf	Echo
Oct 25, 2024 20:05:25.698307037 CEST	192.168.2.5	130.195.254.186	dce	Echo
Oct 25, 2024 20:05:25.729547024 CEST	192.168.2.5	130.195.96.215	dcd	Echo
Oct 25, 2024 20:05:25.760835886 CEST	192.168.2.5	130.195.129.58	dcc	Echo
Oct 25, 2024 20:05:25.792155981 CEST	192.168.2.5	130.195.95.129	dcb	Echo
Oct 25, 2024 20:05:25.823452950 CEST	192.168.2.5	130.195.165.94	dca	Echo
Oct 25, 2024 20:05:25.854470968 CEST	192.168.2.5	130.195.79.171	dc9	Echo
Oct 25, 2024 20:05:25.885790110 CEST	192.168.2.5	130.195.163.34	dc8	Echo
Oct 25, 2024 20:05:25.917340994 CEST	192.168.2.5	130.195.82.28	dc7	Echo
Oct 25, 2024 20:05:25.948571920 CEST	192.168.2.5	130.195.39.145	dc6	Echo
Oct 25, 2024 20:05:25.966428995 CEST	192.168.2.5	130.195.135.135	dc5	Echo
Oct 25, 2024 20:05:25.966651917 CEST	192.168.2.5	130.195.55.219	dc4	Echo
Oct 25, 2024 20:05:25.966824055 CEST	192.168.2.5	130.195.117.227	dc2	Echo
Oct 25, 2024 20:05:25.966881037 CEST	192.168.2.5	130.195.98.174	dc3	Echo
Oct 25, 2024 20:05:25.966908932 CEST	192.168.2.5	130.195.190.159	dc1	Echo
Oct 25, 2024 20:05:25.967020035 CEST	192.168.2.5	130.195.193.79	dc0	Echo
Oct 25, 2024 20:05:25.967473984 CEST	192.168.2.5	130.195.14.191	dbf	Echo
Oct 25, 2024 20:05:25.967698097 CEST	192.168.2.5	130.195.24.249	dbd	Echo
Oct 25, 2024 20:05:25.967706919 CEST	192.168.2.5	130.195.56.15	dbe	Echo
Oct 25, 2024 20:05:25.967824936 CEST	192.168.2.5	130.195.12.179	dbc	Echo
Oct 25, 2024 20:05:25.967946053 CEST	192.168.2.5	130.195.152.80	dbb	Echo
Oct 25, 2024 20:05:25.968092918 CEST	192.168.2.5	130.195.254.104	db9	Echo
Oct 25, 2024 20:05:25.968158007 CEST	192.168.2.5	130.195.190.229	dba	Echo
Oct 25, 2024 20:05:25.968242884 CEST	192.168.2.5	130.195.68.102	db8	Echo
Oct 25, 2024 20:05:25.968388081 CEST	192.168.2.5	130.195.40.96	db7	Echo
Oct 25, 2024 20:05:25.979582071 CEST	192.168.2.5	130.195.28.130	db6	Echo
Oct 25, 2024 20:05:26.010845900 CEST	192.168.2.5	130.195.146.140	db5	Echo
Oct 25, 2024 20:05:26.042315960 CEST	192.168.2.5	130.195.71.204	db4	Echo
Oct 25, 2024 20:05:26.076359987 CEST	192.168.2.5	130.195.103.71	db3	Echo
Oct 25, 2024 20:05:26.104542971 CEST	192.168.2.5	130.195.156.183	db2	Echo
Oct 25, 2024 20:05:26.135994911 CEST	192.168.2.5	130.195.163.156	db1	Echo
Oct 25, 2024 20:05:26.167181015 CEST	192.168.2.5	130.195.218.163	db0	Echo
Oct 25, 2024 20:05:26.198201895 CEST	192.168.2.5	130.195.240.218	daf	Echo
Oct 25, 2024 20:05:26.229485035 CEST	192.168.2.5	130.195.89.172	dae	Echo
Oct 25, 2024 20:05:26.260876894 CEST	192.168.2.5	130.195.74.247	dad	Echo
Oct 25, 2024 20:05:26.301722050 CEST	192.168.2.5	130.195.73.182	dac	Echo
Oct 25, 2024 20:05:26.323657990 CEST	192.168.2.5	130.195.102.43	dab	Echo
Oct 25, 2024 20:05:26.354772091 CEST	192.168.2.5	130.195.85.96	daa	Echo
Oct 25, 2024 20:05:26.385741949 CEST	192.168.2.5	130.195.100.1	da9	Echo
Oct 25, 2024 20:05:26.417020082 CEST	192.168.2.5	130.195.209.151	da8	Echo
Oct 25, 2024 20:05:26.448194981 CEST	192.168.2.5	130.195.99.205	da7	Echo
Oct 25, 2024 20:05:26.465394020 CEST	192.168.2.5	130.195.27.136	da6	Echo
Oct 25, 2024 20:05:26.465454102 CEST	192.168.2.5	130.195.244.246	da5	Echo
Oct 25, 2024 20:05:26.465517044 CEST	192.168.2.5	130.195.238.57	da4	Echo
Oct 25, 2024 20:05:26.465631008 CEST	192.168.2.5	130.195.226.149	da3	Echo
Oct 25, 2024 20:05:26.465780020 CEST	192.168.2.5	130.195.24.186	da2	Echo
Oct 25, 2024 20:05:26.465780020 CEST	192.168.2.5	130.195.129.16	da1	Echo
Oct 25, 2024 20:05:26.465964079 CEST	192.168.2.5	130.195.173.121	da0	Echo
Oct 25, 2024 20:05:26.466043949 CEST	192.168.2.5	130.195.61.182	d9f	Echo
Oct 25, 2024 20:05:26.466072083 CEST	192.168.2.5	130.195.62.211	d9e	Echo
Oct 25, 2024 20:05:26.466166019 CEST	192.168.2.5	130.195.38.217	d9d	Echo
Oct 25, 2024 20:05:26.466244936 CEST	192.168.2.5	130.195.255.213	d9c	Echo
Oct 25, 2024 20:05:26.466295958 CEST	192.168.2.5	130.195.55.23	d9b	Echo
Oct 25, 2024 20:05:26.466336966 CEST	192.168.2.5	130.195.17.55	d9a	Echo
Oct 25, 2024 20:05:26.466413021 CEST	192.168.2.5	130.195.113.164	d99	Echo
Oct 25, 2024 20:05:26.466487885 CEST	192.168.2.5	130.195.60.207	d98	Echo
Oct 25, 2024 20:05:26.466612101 CEST	192.168.2.5	130.195.238.18	d97	Echo
Oct 25, 2024 20:05:26.479471922 CEST	192.168.2.5	130.195.13.188	d96	Echo
Oct 25, 2024 20:05:26.510747910 CEST	192.168.2.5	130.195.14.66	d95	Echo
Oct 25, 2024 20:05:26.541956902 CEST	192.168.2.5	130.195.250.7	d94	Echo
Oct 25, 2024 20:05:26.573312998 CEST	192.168.2.5	130.195.100.187	d93	Echo
Oct 25, 2024 20:05:26.604445934 CEST	192.168.2.5	130.195.26.10	d92	Echo
Oct 25, 2024 20:05:26.635839939 CEST	192.168.2.5	130.195.59.29	d91	Echo
Oct 25, 2024 20:05:26.667562008 CEST	192.168.2.5	130.195.91.134	d90	Echo
Oct 25, 2024 20:05:26.698474884 CEST	192.168.2.5	130.195.54.76	d8f	Echo
Oct 25, 2024 20:05:26.729583025 CEST	192.168.2.5	130.195.33.206	d8e	Echo
Oct 25, 2024 20:05:26.760907888 CEST	192.168.2.5	130.195.240.115	d8d	Echo
Oct 25, 2024 20:05:26.792133093 CEST	192.168.2.5	130.195.88.141	d8c	Echo
Oct 25, 2024 20:05:26.823437929 CEST	192.168.2.5	130.195.171.205	d8b	Echo
Oct 25, 2024 20:05:26.854899883 CEST	192.168.2.5	130.195.55.162	d8a	Echo
Oct 25, 2024 20:05:26.885987043 CEST	192.168.2.5	130.195.7.35	d89	Echo
Oct 25, 2024 20:05:26.917236090 CEST	192.168.2.5	130.195.90.7	d88	Echo
Oct 25, 2024 20:05:26.948524952 CEST	192.168.2.5	130.195.29.220	d87	Echo
Oct 25, 2024 20:05:26.975474119 CEST	192.168.2.5	130.195.3.78	d86	Echo
Oct 25, 2024 20:05:26.975877047 CEST	192.168.2.5	130.195.80.186	d85	Echo
Oct 25, 2024 20:05:26.976139069 CEST	192.168.2.5	130.195.126.19	d83	Echo
Oct 25, 2024 20:05:26.976190090 CEST	192.168.2.5	130.195.70.80	d84	Echo
Oct 25, 2024 20:05:26.976234913 CEST	192.168.2.5	130.195.135.137	d82	Echo
Oct 25, 2024 20:05:26.976330996 CEST	192.168.2.5	130.195.118.178	d81	Echo
Oct 25, 2024 20:05:26.976613045 CEST	192.168.2.5	130.195.203.78	d80	Echo
Oct 25, 2024 20:05:26.976613045 CEST	192.168.2.5	130.195.96.59	d7f	Echo
Oct 25, 2024 20:05:26.976707935 CEST	192.168.2.5	130.195.74.7	d7d	Echo
Oct 25, 2024 20:05:26.976715088 CEST	192.168.2.5	130.195.8.246	d7e	Echo
Oct 25, 2024 20:05:26.976881981 CEST	192.168.2.5	130.195.3.149	d7c	Echo
Oct 25, 2024 20:05:26.977029085 CEST	192.168.2.5	130.195.37.81	d7b	Echo
Oct 25, 2024 20:05:26.977121115 CEST	192.168.2.5	130.195.222.64	d7a	Echo
Oct 25, 2024 20:05:26.977173090 CEST	192.168.2.5	130.195.203.220	d79	Echo
Oct 25, 2024 20:05:26.977238894 CEST	192.168.2.5	130.195.132.34	d78	Echo
Oct 25, 2024 20:05:26.977379084 CEST	192.168.2.5	130.195.201.186	d77	Echo
Oct 25, 2024 20:05:26.979756117 CEST	192.168.2.5	130.195.23.200	d76	Echo
Oct 25, 2024 20:05:27.010960102 CEST	192.168.2.5	130.195.14.39	d75	Echo
Oct 25, 2024 20:05:27.042208910 CEST	192.168.2.5	130.195.253.250	d74	Echo
Oct 25, 2024 20:05:27.073595047 CEST	192.168.2.5	130.195.183.254	d73	Echo
Oct 25, 2024 20:05:27.104757071 CEST	192.168.2.5	130.195.43.184	d72	Echo
Oct 25, 2024 20:05:27.136048079 CEST	192.168.2.5	130.195.149.65	d71	Echo
Oct 25, 2024 20:05:27.167290926 CEST	192.168.2.5	130.195.1.50	d70	Echo
Oct 25, 2024 20:05:27.198211908 CEST	192.168.2.5	130.195.107.214	d6f	Echo
Oct 25, 2024 20:05:27.229563951 CEST	192.168.2.5	130.195.49.160	d6e	Echo
Oct 25, 2024 20:05:27.260783911 CEST	192.168.2.5	130.195.88.174	d6d	Echo
Oct 25, 2024 20:05:27.292048931 CEST	192.168.2.5	130.195.8.108	d6c	Echo
Oct 25, 2024 20:05:27.324033022 CEST	192.168.2.5	130.195.41.39	d6b	Echo
Oct 25, 2024 20:05:27.354737043 CEST	192.168.2.5	130.195.56.83	d6a	Echo
Oct 25, 2024 20:05:27.385885000 CEST	192.168.2.5	130.195.128.55	d69	Echo
Oct 25, 2024 20:05:27.417074919 CEST	192.168.2.5	130.195.38.128	d68	Echo
Oct 25, 2024 20:05:27.448785067 CEST	192.168.2.5	130.195.155.7	d67	Echo
Oct 25, 2024 20:05:27.466197968 CEST	192.168.2.5	130.195.195.5	d66	Echo
Oct 25, 2024 20:05:27.466489077 CEST	192.168.2.5	130.195.176.47	d65	Echo
Oct 25, 2024 20:05:27.466597080 CEST	192.168.2.5	130.195.229.166	d64	Echo
Oct 25, 2024 20:05:27.466651917 CEST	192.168.2.5	130.195.2.81	d63	Echo
Oct 25, 2024 20:05:27.466725111 CEST	192.168.2.5	130.195.241.169	d62	Echo
Oct 25, 2024 20:05:27.466839075 CEST	192.168.2.5	130.195.119.149	d61	Echo
Oct 25, 2024 20:05:27.466941118 CEST	192.168.2.5	130.195.254.186	d60	Echo
Oct 25, 2024 20:05:27.466989994 CEST	192.168.2.5	130.195.96.215	d5f	Echo
Oct 25, 2024 20:05:27.467194080 CEST	192.168.2.5	130.195.129.58	d5e	Echo
Oct 25, 2024 20:05:27.467351913 CEST	192.168.2.5	130.195.95.129	d5d	Echo
Oct 25, 2024 20:05:27.467418909 CEST	192.168.2.5	130.195.165.94	d5c	Echo
Oct 25, 2024 20:05:27.467475891 CEST	192.168.2.5	130.195.79.171	d5b	Echo
Oct 25, 2024 20:05:27.467691898 CEST	192.168.2.5	130.195.163.34	d5a	Echo
Oct 25, 2024 20:05:27.467730999 CEST	192.168.2.5	130.195.82.28	d59	Echo
Oct 25, 2024 20:05:27.467837095 CEST	192.168.2.5	130.195.39.145	d58	Echo
Oct 25, 2024 20:05:27.479530096 CEST	192.168.2.5	130.195.44.156	d57	Echo
Oct 25, 2024 20:05:27.510941982 CEST	192.168.2.5	130.195.71.31	d56	Echo
Oct 25, 2024 20:05:27.542001009 CEST	192.168.2.5	130.195.70.6	d55	Echo
Oct 25, 2024 20:05:27.573178053 CEST	192.168.2.5	130.195.227.149	d54	Echo
Oct 25, 2024 20:05:27.604468107 CEST	192.168.2.5	130.195.108.130	d53	Echo
Oct 25, 2024 20:05:27.635778904 CEST	192.168.2.5	130.195.71.52	d52	Echo
Oct 25, 2024 20:05:27.667337894 CEST	192.168.2.5	130.195.47.103	d51	Echo
Oct 25, 2024 20:05:27.698297024 CEST	192.168.2.5	130.195.3.159	d50	Echo
Oct 25, 2024 20:05:27.729521036 CEST	192.168.2.5	130.195.72.58	d4f	Echo
Oct 25, 2024 20:05:27.760745049 CEST	192.168.2.5	130.195.112.187	d4e	Echo
Oct 25, 2024 20:05:27.792172909 CEST	192.168.2.5	130.195.12.96	d4d	Echo
Oct 25, 2024 20:05:27.823209047 CEST	192.168.2.5	130.195.129.151	d4c	Echo
Oct 25, 2024 20:05:27.854846954 CEST	192.168.2.5	130.195.230.227	d4b	Echo
Oct 25, 2024 20:05:27.885683060 CEST	192.168.2.5	130.195.110.242	d4a	Echo
Oct 25, 2024 20:05:27.916985035 CEST	192.168.2.5	130.195.23.159	d49	Echo
Oct 25, 2024 20:05:27.948164940 CEST	192.168.2.5	130.195.98.13	d48	Echo
Oct 25, 2024 20:05:27.969032049 CEST	192.168.2.5	130.195.28.130	d47	Echo
Oct 25, 2024 20:05:27.969221115 CEST	192.168.2.5	130.195.146.140	d46	Echo
Oct 25, 2024 20:05:27.969327927 CEST	192.168.2.5	130.195.71.204	d45	Echo
Oct 25, 2024 20:05:27.969625950 CEST	192.168.2.5	130.195.103.71	d44	Echo
Oct 25, 2024 20:05:27.969707966 CEST	192.168.2.5	130.195.156.183	d43	Echo
Oct 25, 2024 20:05:27.969794035 CEST	192.168.2.5	130.195.163.156	d42	Echo
Oct 25, 2024 20:05:27.969863892 CEST	192.168.2.5	130.195.218.163	d41	Echo
Oct 25, 2024 20:05:27.970119953 CEST	192.168.2.5	130.195.240.218	d40	Echo
Oct 25, 2024 20:05:27.970246077 CEST	192.168.2.5	130.195.89.172	d3f	Echo
Oct 25, 2024 20:05:27.970396996 CEST	192.168.2.5	130.195.74.247	d3e	Echo
Oct 25, 2024 20:05:27.970558882 CEST	192.168.2.5	130.195.73.182	d3d	Echo
Oct 25, 2024 20:05:27.970662117 CEST	192.168.2.5	130.195.102.43	d3c	Echo
Oct 25, 2024 20:05:27.970959902 CEST	192.168.2.5	130.195.85.96	d3b	Echo
Oct 25, 2024 20:05:27.971039057 CEST	192.168.2.5	130.195.100.1	d3a	Echo
Oct 25, 2024 20:05:27.971120119 CEST	192.168.2.5	130.195.209.151	d39	Echo
Oct 25, 2024 20:05:27.971193075 CEST	192.168.2.5	130.195.99.205	d38	Echo
Oct 25, 2024 20:05:27.979732037 CEST	192.168.2.5	130.195.175.212	d37	Echo
Oct 25, 2024 20:05:28.011015892 CEST	192.168.2.5	130.195.19.158	d36	Echo
Oct 25, 2024 20:05:28.042002916 CEST	192.168.2.5	130.195.7.239	d35	Echo
Oct 25, 2024 20:05:28.073307991 CEST	192.168.2.5	130.195.83.8	d34	Echo
Oct 25, 2024 20:05:28.104645967 CEST	192.168.2.5	130.195.161.75	d33	Echo
Oct 25, 2024 20:05:28.135854959 CEST	192.168.2.5	130.195.84.178	d32	Echo
Oct 25, 2024 20:05:28.167018890 CEST	192.168.2.5	130.195.59.142	d31	Echo
Oct 25, 2024 20:05:28.198299885 CEST	192.168.2.5	130.195.131.255	d30	Echo
Oct 25, 2024 20:05:28.229703903 CEST	192.168.2.5	130.195.62.58	d2f	Echo
Oct 25, 2024 20:05:28.260727882 CEST	192.168.2.5	130.195.231.119	d2e	Echo
Oct 25, 2024 20:05:28.291961908 CEST	192.168.2.5	130.195.138.182	d2d	Echo
Oct 25, 2024 20:05:28.323213100 CEST	192.168.2.5	130.195.150.36	d2c	Echo
Oct 25, 2024 20:05:28.343883991 CEST	192.168.2.5	130.195.7.239	d2b	Echo
Oct 25, 2024 20:05:28.355278969 CEST	192.168.2.5	130.195.10.224	d2a	Echo
Oct 25, 2024 20:05:28.385864019 CEST	192.168.2.5	130.195.222.36	d29	Echo
Oct 25, 2024 20:05:28.417023897 CEST	192.168.2.5	130.195.137.23	d28	Echo
Oct 25, 2024 20:05:28.448288918 CEST	192.168.2.5	130.195.223.61	d27	Echo
Oct 25, 2024 20:05:28.465703964 CEST	192.168.2.5	130.195.13.188	d26	Echo
Oct 25, 2024 20:05:28.465739012 CEST	192.168.2.5	130.195.14.66	d25	Echo
Oct 25, 2024 20:05:28.465823889 CEST	192.168.2.5	130.195.250.7	d24	Echo
Oct 25, 2024 20:05:28.465876102 CEST	192.168.2.5	130.195.100.187	d23	Echo
Oct 25, 2024 20:05:28.465939999 CEST	192.168.2.5	130.195.26.10	d22	Echo
Oct 25, 2024 20:05:28.466068029 CEST	192.168.2.5	130.195.59.29	d21	Echo
Oct 25, 2024 20:05:28.466144085 CEST	192.168.2.5	130.195.91.134	d20	Echo
Oct 25, 2024 20:05:28.466186047 CEST	192.168.2.5	130.195.54.76	d1f	Echo
Oct 25, 2024 20:05:28.466243982 CEST	192.168.2.5	130.195.33.206	d1e	Echo
Oct 25, 2024 20:05:28.466393948 CEST	192.168.2.5	130.195.88.141	d1c	Echo
Oct 25, 2024 20:05:28.466418982 CEST	192.168.2.5	130.195.240.115	d1d	Echo
Oct 25, 2024 20:05:28.466515064 CEST	192.168.2.5	130.195.171.205	d1b	Echo
Oct 25, 2024 20:05:28.466547966 CEST	192.168.2.5	130.195.55.162	d1a	Echo
Oct 25, 2024 20:05:28.466674089 CEST	192.168.2.5	130.195.7.35	d19	Echo
Oct 25, 2024 20:05:28.466767073 CEST	192.168.2.5	130.195.90.7	d18	Echo
Oct 25, 2024 20:05:28.466792107 CEST	192.168.2.5	130.195.29.220	d17	Echo
Oct 25, 2024 20:05:28.479473114 CEST	192.168.2.5	130.195.193.51	d16	Echo
Oct 25, 2024 20:05:28.510756969 CEST	192.168.2.5	130.195.57.180	d15	Echo
Oct 25, 2024 20:05:28.541959047 CEST	192.168.2.5	130.195.70.232	d14	Echo
Oct 25, 2024 20:05:28.573378086 CEST	192.168.2.5	130.195.231.196	d13	Echo
Oct 25, 2024 20:05:28.604495049 CEST	192.168.2.5	130.195.20.17	d12	Echo
Oct 25, 2024 20:05:28.636015892 CEST	192.168.2.5	130.195.179.20	d11	Echo
Oct 25, 2024 20:05:28.667165995 CEST	192.168.2.5	130.195.110.7	d10	Echo
Oct 25, 2024 20:05:28.698520899 CEST	192.168.2.5	130.195.224.168	d0f	Echo
Oct 25, 2024 20:05:28.729952097 CEST	192.168.2.5	130.195.96.34	d0e	Echo
Oct 25, 2024 20:05:28.762682915 CEST	192.168.2.5	130.195.158.25	d0d	Echo
Oct 25, 2024 20:05:28.796516895 CEST	192.168.2.5	130.195.38.158	d0c	Echo
Oct 25, 2024 20:05:28.827496052 CEST	192.168.2.5	130.195.17.249	d0b	Echo
Oct 25, 2024 20:05:28.856374979 CEST	192.168.2.5	130.195.70.224	d0a	Echo
Oct 25, 2024 20:05:28.885916948 CEST	192.168.2.5	130.195.188.17	d09	Echo
Oct 25, 2024 20:05:28.916918993 CEST	192.168.2.5	130.195.41.69	d08	Echo
Oct 25, 2024 20:05:28.948379040 CEST	192.168.2.5	130.195.43.172	d07	Echo
Oct 25, 2024 20:05:28.965307951 CEST	192.168.2.5	130.195.23.200	d06	Echo
Oct 25, 2024 20:05:28.965429068 CEST	192.168.2.5	130.195.14.39	d05	Echo
Oct 25, 2024 20:05:28.965529919 CEST	192.168.2.5	130.195.253.250	d04	Echo
Oct 25, 2024 20:05:28.965652943 CEST	192.168.2.5	130.195.183.254	d03	Echo
Oct 25, 2024 20:05:28.965662003 CEST	192.168.2.5	130.195.43.184	d02	Echo
Oct 25, 2024 20:05:28.965745926 CEST	192.168.2.5	130.195.149.65	d01	Echo
Oct 25, 2024 20:05:28.965745926 CEST	192.168.2.5	130.195.1.50	d00	Echo
Oct 25, 2024 20:05:28.965892076 CEST	192.168.2.5	130.195.107.214	cff	Echo
Oct 25, 2024 20:05:28.965892076 CEST	192.168.2.5	130.195.49.160	cfe	Echo
Oct 25, 2024 20:05:28.966063976 CEST	192.168.2.5	130.195.88.174	cfd	Echo
Oct 25, 2024 20:05:28.966172934 CEST	192.168.2.5	130.195.41.39	cfb	Echo
Oct 25, 2024 20:05:28.966178894 CEST	192.168.2.5	130.195.8.108	cfc	Echo
Oct 25, 2024 20:05:28.966284037 CEST	192.168.2.5	130.195.128.55	cf9	Echo
Oct 25, 2024 20:05:28.966303110 CEST	192.168.2.5	130.195.56.83	cfa	Echo
Oct 25, 2024 20:05:28.966414928 CEST	192.168.2.5	130.195.38.128	cf8	Echo
Oct 25, 2024 20:05:28.966432095 CEST	192.168.2.5	130.195.155.7	cf7	Echo
Oct 25, 2024 20:05:28.979410887 CEST	192.168.2.5	130.195.146.53	cf6	Echo
Oct 25, 2024 20:05:29.010719061 CEST	192.168.2.5	130.195.122.147	cf5	Echo
Oct 25, 2024 20:05:29.043447018 CEST	192.168.2.5	130.195.57.123	cf4	Echo
Oct 25, 2024 20:05:29.073352098 CEST	192.168.2.5	130.195.32.189	cf3	Echo
Oct 25, 2024 20:05:29.104732990 CEST	192.168.2.5	130.195.46.65	cf2	Echo
Oct 25, 2024 20:05:29.136816025 CEST	192.168.2.5	130.195.82.69	cf1	Echo
Oct 25, 2024 20:05:29.166992903 CEST	192.168.2.5	130.195.122.123	cf0	Echo
Oct 25, 2024 20:05:29.198251963 CEST	192.168.2.5	130.195.230.121	cef	Echo
Oct 25, 2024 20:05:29.229500055 CEST	192.168.2.5	130.195.227.224	cee	Echo
Oct 25, 2024 20:05:29.260742903 CEST	192.168.2.5	130.195.73.78	ced	Echo
Oct 25, 2024 20:05:29.292006969 CEST	192.168.2.5	130.195.204.184	cec	Echo
Oct 25, 2024 20:05:29.323376894 CEST	192.168.2.5	130.195.59.22	ceb	Echo
Oct 25, 2024 20:05:29.354581118 CEST	192.168.2.5	130.195.241.45	cea	Echo
Oct 25, 2024 20:05:29.388386011 CEST	192.168.2.5	130.195.57.197	ce9	Echo
Oct 25, 2024 20:05:29.417072058 CEST	192.168.2.5	130.195.9.195	ce8	Echo
Oct 25, 2024 20:05:29.448257923 CEST	192.168.2.5	130.195.178.169	ce7	Echo
Oct 25, 2024 20:05:29.465456009 CEST	192.168.2.5	130.195.44.156	ce6	Echo
Oct 25, 2024 20:05:29.465574026 CEST	192.168.2.5	130.195.71.31	ce5	Echo
Oct 25, 2024 20:05:29.465575933 CEST	192.168.2.5	130.195.70.6	ce4	Echo
Oct 25, 2024 20:05:29.465672970 CEST	192.168.2.5	130.195.227.149	ce3	Echo
Oct 25, 2024 20:05:29.465672970 CEST	192.168.2.5	130.195.108.130	ce2	Echo
Oct 25, 2024 20:05:29.465786934 CEST	192.168.2.5	130.195.71.52	ce1	Echo
Oct 25, 2024 20:05:29.465789080 CEST	192.168.2.5	130.195.47.103	ce0	Echo
Oct 25, 2024 20:05:29.465833902 CEST	192.168.2.5	130.195.3.159	cdf	Echo
Oct 25, 2024 20:05:29.465939045 CEST	192.168.2.5	130.195.72.58	cde	Echo
Oct 25, 2024 20:05:29.465941906 CEST	192.168.2.5	130.195.112.187	cdd	Echo
Oct 25, 2024 20:05:29.466084957 CEST	192.168.2.5	130.195.12.96	cdc	Echo
Oct 25, 2024 20:05:29.466175079 CEST	192.168.2.5	130.195.230.227	cda	Echo
Oct 25, 2024 20:05:29.466181993 CEST	192.168.2.5	130.195.129.151	cdb	Echo
Oct 25, 2024 20:05:29.466317892 CEST	192.168.2.5	130.195.23.159	cd8	Echo
Oct 25, 2024 20:05:29.466331005 CEST	192.168.2.5	130.195.110.242	cd9	Echo
Oct 25, 2024 20:05:29.466393948 CEST	192.168.2.5	130.195.98.13	cd7	Echo
Oct 25, 2024 20:05:29.479425907 CEST	192.168.2.5	130.195.126.242	cd6	Echo
Oct 25, 2024 20:05:29.512367964 CEST	192.168.2.5	130.195.49.95	cd5	Echo
Oct 25, 2024 20:05:29.542398930 CEST	192.168.2.5	130.195.54.37	cd4	Echo
Oct 25, 2024 20:05:29.573271036 CEST	192.168.2.5	130.195.249.125	cd3	Echo
Oct 25, 2024 20:05:29.604928970 CEST	192.168.2.5	130.195.168.175	cd2	Echo
Oct 25, 2024 20:05:29.635864019 CEST	192.168.2.5	130.195.155.255	cd1	Echo
Oct 25, 2024 20:05:29.668453932 CEST	192.168.2.5	130.195.129.155	cd0	Echo
Oct 25, 2024 20:05:29.698388100 CEST	192.168.2.5	130.195.113.143	ccf	Echo
Oct 25, 2024 20:05:29.730077982 CEST	192.168.2.5	130.195.29.24	cce	Echo
Oct 25, 2024 20:05:29.760859013 CEST	192.168.2.5	130.195.9.60	ccd	Echo
Oct 25, 2024 20:05:29.792109966 CEST	192.168.2.5	130.195.224.136	ccc	Echo
Oct 25, 2024 20:05:29.823921919 CEST	192.168.2.5	130.195.143.162	ccb	Echo
Oct 25, 2024 20:05:29.855370998 CEST	192.168.2.5	130.195.201.143	cca	Echo
Oct 25, 2024 20:05:29.887072086 CEST	192.168.2.5	130.195.9.201	cc9	Echo
Oct 25, 2024 20:05:29.918014050 CEST	192.168.2.5	130.195.31.30	cc8	Echo
Oct 25, 2024 20:05:29.948964119 CEST	192.168.2.5	130.195.145.114	cc7	Echo
Oct 25, 2024 20:05:29.965984106 CEST	192.168.2.5	130.195.175.212	cc6	Echo
Oct 25, 2024 20:05:29.966198921 CEST	192.168.2.5	130.195.83.8	cc4	Echo
Oct 25, 2024 20:05:29.966207027 CEST	192.168.2.5	130.195.19.158	cc5	Echo
Oct 25, 2024 20:05:29.966264963 CEST	192.168.2.5	130.195.161.75	cc3	Echo
Oct 25, 2024 20:05:29.966350079 CEST	192.168.2.5	130.195.84.178	cc2	Echo
Oct 25, 2024 20:05:29.966433048 CEST	192.168.2.5	130.195.59.142	cc1	Echo
Oct 25, 2024 20:05:29.966517925 CEST	192.168.2.5	130.195.131.255	cc0	Echo
Oct 25, 2024 20:05:29.966568947 CEST	192.168.2.5	130.195.62.58	cbf	Echo
Oct 25, 2024 20:05:29.966686010 CEST	192.168.2.5	130.195.231.119	cbe	Echo
Oct 25, 2024 20:05:29.966766119 CEST	192.168.2.5	130.195.138.182	cbd	Echo
Oct 25, 2024 20:05:29.966856003 CEST	192.168.2.5	130.195.150.36	cbc	Echo
Oct 25, 2024 20:05:29.967017889 CEST	192.168.2.5	130.195.10.224	cbb	Echo
Oct 25, 2024 20:05:29.967132092 CEST	192.168.2.5	130.195.222.36	cba	Echo
Oct 25, 2024 20:05:29.967281103 CEST	192.168.2.5	130.195.137.23	cb9	Echo
Oct 25, 2024 20:05:29.967350960 CEST	192.168.2.5	130.195.223.61	cb8	Echo
Oct 25, 2024 20:05:29.980241060 CEST	192.168.2.5	130.195.166.235	cb7	Echo
Oct 25, 2024 20:05:30.011567116 CEST	192.168.2.5	130.195.126.1	cb6	Echo
Oct 25, 2024 20:05:30.042057037 CEST	192.168.2.5	130.195.25.222	cb5	Echo
Oct 25, 2024 20:05:30.062838078 CEST	192.168.2.5	130.195.9.60	cb4	Echo
Oct 25, 2024 20:05:30.074894905 CEST	192.168.2.5	130.195.91.18	cb3	Echo
Oct 25, 2024 20:05:30.105164051 CEST	192.168.2.5	130.195.111.59	cb2	Echo
Oct 25, 2024 20:05:30.135804892 CEST	192.168.2.5	130.195.178.242	cb1	Echo
Oct 25, 2024 20:05:30.167078972 CEST	192.168.2.5	130.195.70.250	cb0	Echo
Oct 25, 2024 20:05:30.198410034 CEST	192.168.2.5	130.195.102.54	caf	Echo
Oct 25, 2024 20:05:30.229590893 CEST	192.168.2.5	130.195.115.102	cae	Echo
Oct 25, 2024 20:05:30.260741949 CEST	192.168.2.5	130.195.120.116	cad	Echo
Oct 25, 2024 20:05:30.292004108 CEST	192.168.2.5	130.195.237.8	cac	Echo
Oct 25, 2024 20:05:30.323276997 CEST	192.168.2.5	130.195.111.237	cab	Echo
Oct 25, 2024 20:05:30.354964972 CEST	192.168.2.5	130.195.36.112	caa	Echo
Oct 25, 2024 20:05:30.385863066 CEST	192.168.2.5	130.195.78.139	ca9	Echo
Oct 25, 2024 20:05:30.417360067 CEST	192.168.2.5	130.195.66.110	ca8	Echo
Oct 25, 2024 20:05:30.448385000 CEST	192.168.2.5	130.195.71.66	ca7	Echo
Oct 25, 2024 20:05:30.466293097 CEST	192.168.2.5	130.195.193.51	ca6	Echo
Oct 25, 2024 20:05:30.466367006 CEST	192.168.2.5	130.195.57.180	ca5	Echo
Oct 25, 2024 20:05:30.466413021 CEST	192.168.2.5	130.195.70.232	ca4	Echo
Oct 25, 2024 20:05:30.466501951 CEST	192.168.2.5	130.195.231.196	ca3	Echo
Oct 25, 2024 20:05:30.466610909 CEST	192.168.2.5	130.195.20.17	ca2	Echo
Oct 25, 2024 20:05:30.466619015 CEST	192.168.2.5	130.195.179.20	ca1	Echo
Oct 25, 2024 20:05:30.466651917 CEST	192.168.2.5	130.195.110.7	ca0	Echo
Oct 25, 2024 20:05:30.466732979 CEST	192.168.2.5	130.195.224.168	c9f	Echo
Oct 25, 2024 20:05:30.466762066 CEST	192.168.2.5	130.195.96.34	c9e	Echo
Oct 25, 2024 20:05:30.466989040 CEST	192.168.2.5	130.195.158.25	c9d	Echo
Oct 25, 2024 20:05:30.467084885 CEST	192.168.2.5	130.195.38.158	c9c	Echo
Oct 25, 2024 20:05:30.467358112 CEST	192.168.2.5	130.195.17.249	c9b	Echo
Oct 25, 2024 20:05:30.467360020 CEST	192.168.2.5	130.195.70.224	c9a	Echo
Oct 25, 2024 20:05:30.467474937 CEST	192.168.2.5	130.195.188.17	c99	Echo
Oct 25, 2024 20:05:30.467505932 CEST	192.168.2.5	130.195.41.69	c98	Echo
Oct 25, 2024 20:05:30.467660904 CEST	192.168.2.5	130.195.43.172	c97	Echo
Oct 25, 2024 20:05:30.479628086 CEST	192.168.2.5	130.195.25.185	c96	Echo
Oct 25, 2024 20:05:30.511096954 CEST	192.168.2.5	130.195.234.150	c95	Echo
Oct 25, 2024 20:05:30.542114019 CEST	192.168.2.5	130.195.33.73	c94	Echo
Oct 25, 2024 20:05:30.581758976 CEST	192.168.2.5	130.195.60.82	c93	Echo
Oct 25, 2024 20:05:30.606205940 CEST	192.168.2.5	130.195.47.83	c92	Echo
Oct 25, 2024 20:05:30.636718988 CEST	192.168.2.5	130.195.121.126	c91	Echo
Oct 25, 2024 20:05:30.667676926 CEST	192.168.2.5	130.195.166.199	c90	Echo
Oct 25, 2024 20:05:30.698287010 CEST	192.168.2.5	130.195.185.249	c8f	Echo
Oct 25, 2024 20:05:30.729988098 CEST	192.168.2.5	130.195.88.186	c8e	Echo
Oct 25, 2024 20:05:30.760925055 CEST	192.168.2.5	130.195.172.88	c8d	Echo
Oct 25, 2024 20:05:30.792149067 CEST	192.168.2.5	130.195.235.45	c8c	Echo
Oct 25, 2024 20:05:30.823884964 CEST	192.168.2.5	130.195.94.103	c8b	Echo
Oct 25, 2024 20:05:30.856858969 CEST	192.168.2.5	130.195.98.146	c8a	Echo
Oct 25, 2024 20:05:30.885894060 CEST	192.168.2.5	130.195.233.235	c89	Echo
Oct 25, 2024 20:05:30.917032003 CEST	192.168.2.5	130.195.199.123	c88	Echo
Oct 25, 2024 20:05:30.948404074 CEST	192.168.2.5	130.195.26.215	c87	Echo
Oct 25, 2024 20:05:30.968929052 CEST	192.168.2.5	130.195.146.53	c86	Echo
Oct 25, 2024 20:05:30.969134092 CEST	192.168.2.5	130.195.122.147	c85	Echo
Oct 25, 2024 20:05:30.969263077 CEST	192.168.2.5	130.195.57.123	c84	Echo
Oct 25, 2024 20:05:30.969469070 CEST	192.168.2.5	130.195.32.189	c83	Echo
Oct 25, 2024 20:05:30.969607115 CEST	192.168.2.5	130.195.46.65	c82	Echo
Oct 25, 2024 20:05:30.969744921 CEST	192.168.2.5	130.195.82.69	c81	Echo
Oct 25, 2024 20:05:30.969832897 CEST	192.168.2.5	130.195.122.123	c80	Echo
Oct 25, 2024 20:05:30.970151901 CEST	192.168.2.5	130.195.230.121	c7f	Echo
Oct 25, 2024 20:05:30.970253944 CEST	192.168.2.5	130.195.227.224	c7e	Echo
Oct 25, 2024 20:05:30.970331907 CEST	192.168.2.5	130.195.73.78	c7d	Echo
Oct 25, 2024 20:05:30.970748901 CEST	192.168.2.5	130.195.204.184	c7c	Echo
Oct 25, 2024 20:05:30.970788002 CEST	192.168.2.5	130.195.59.22	c7b	Echo
Oct 25, 2024 20:05:30.970923901 CEST	192.168.2.5	130.195.241.45	c7a	Echo
Oct 25, 2024 20:05:30.971015930 CEST	192.168.2.5	130.195.57.197	c79	Echo
Oct 25, 2024 20:05:30.971153021 CEST	192.168.2.5	130.195.9.195	c78	Echo
Oct 25, 2024 20:05:30.971235037 CEST	192.168.2.5	130.195.178.169	c77	Echo
Oct 25, 2024 20:05:30.980792046 CEST	192.168.2.5	130.195.70.35	c76	Echo
Oct 25, 2024 20:05:31.011226892 CEST	192.168.2.5	130.195.189.9	c75	Echo
Oct 25, 2024 20:05:31.048326015 CEST	192.168.2.5	130.195.76.189	c74	Echo
Oct 25, 2024 20:05:31.365642071 CEST	192.168.2.5	130.195.121.73	c73	Echo
Oct 25, 2024 20:05:31.372467041 CEST	192.168.2.5	130.195.235.84	c72	Echo
Oct 25, 2024 20:05:31.401572943 CEST	192.168.2.5	130.195.59.128	c71	Echo
Oct 25, 2024 20:05:31.433548927 CEST	192.168.2.5	130.195.68.14	c70	Echo
Oct 25, 2024 20:05:31.467252016 CEST	192.168.2.5	130.195.19.136	c6f	Echo
Oct 25, 2024 20:05:31.470344067 CEST	192.168.2.5	130.195.126.242	c6e	Echo
Oct 25, 2024 20:05:31.470834970 CEST	192.168.2.5	130.195.49.95	c6d	Echo
Oct 25, 2024 20:05:31.470947981 CEST	192.168.2.5	130.195.54.37	c6c	Echo
Oct 25, 2024 20:05:31.471148014 CEST	192.168.2.5	130.195.249.125	c6b	Echo
Oct 25, 2024 20:05:31.471380949 CEST	192.168.2.5	130.195.155.255	c69	Echo
Oct 25, 2024 20:05:31.471411943 CEST	192.168.2.5	130.195.168.175	c6a	Echo
Oct 25, 2024 20:05:31.471736908 CEST	192.168.2.5	130.195.129.155	c68	Echo
Oct 25, 2024 20:05:31.471895933 CEST	192.168.2.5	130.195.29.24	c66	Echo
Oct 25, 2024 20:05:31.471914053 CEST	192.168.2.5	130.195.113.143	c67	Echo
Oct 25, 2024 20:05:31.472079039 CEST	192.168.2.5	130.195.224.136	c65	Echo
Oct 25, 2024 20:05:31.472352982 CEST	192.168.2.5	130.195.143.162	c64	Echo
Oct 25, 2024 20:05:31.472604990 CEST	192.168.2.5	130.195.201.143	c63	Echo
Oct 25, 2024 20:05:31.473109961 CEST	192.168.2.5	130.195.9.201	c62	Echo
Oct 25, 2024 20:05:31.473191977 CEST	192.168.2.5	130.195.31.30	c61	Echo
Oct 25, 2024 20:05:31.473275900 CEST	192.168.2.5	130.195.145.114	c60	Echo
Oct 25, 2024 20:05:31.495157957 CEST	192.168.2.5	130.195.220.18	c5f	Echo
Oct 25, 2024 20:05:31.526482105 CEST	192.168.2.5	130.195.165.176	c5e	Echo
Oct 25, 2024 20:05:31.557605982 CEST	192.168.2.5	130.195.178.225	c5d	Echo
Oct 25, 2024 20:05:31.588870049 CEST	192.168.2.5	130.195.168.178	c5c	Echo
Oct 25, 2024 20:05:31.620181084 CEST	192.168.2.5	130.195.76.169	c5b	Echo
Oct 25, 2024 20:05:31.651421070 CEST	192.168.2.5	130.195.32.218	c5a	Echo
Oct 25, 2024 20:05:31.682578087 CEST	192.168.2.5	130.195.191.100	c59	Echo
Oct 25, 2024 20:05:31.713927031 CEST	192.168.2.5	130.195.188.191	c58	Echo
Oct 25, 2024 20:05:31.745129108 CEST	192.168.2.5	130.195.185.88	c57	Echo
Oct 25, 2024 20:05:31.776428938 CEST	192.168.2.5	130.195.165.14	c56	Echo
Oct 25, 2024 20:05:31.807709932 CEST	192.168.2.5	130.195.209.207	c55	Echo
Oct 25, 2024 20:05:31.838949919 CEST	192.168.2.5	130.195.31.210	c54	Echo
Oct 25, 2024 20:05:31.870232105 CEST	192.168.2.5	130.195.9.92	c53	Echo
Oct 25, 2024 20:05:31.901335955 CEST	192.168.2.5	130.195.137.183	c52	Echo
Oct 25, 2024 20:05:31.932555914 CEST	192.168.2.5	130.195.9.36	c51	Echo
Oct 25, 2024 20:05:31.964397907 CEST	192.168.2.5	130.195.255.184	c50	Echo
Oct 25, 2024 20:05:31.966022015 CEST	192.168.2.5	130.195.166.235	c4f	Echo
Oct 25, 2024 20:05:31.966022015 CEST	192.168.2.5	130.195.126.1	c4e	Echo
Oct 25, 2024 20:05:31.966036081 CEST	192.168.2.5	130.195.25.222	c4d	Echo
Oct 25, 2024 20:05:31.966257095 CEST	192.168.2.5	130.195.91.18	c4c	Echo
Oct 25, 2024 20:05:31.966430902 CEST	192.168.2.5	130.195.178.242	c4a	Echo
Oct 25, 2024 20:05:31.966473103 CEST	192.168.2.5	130.195.70.250	c49	Echo
Oct 25, 2024 20:05:31.966486931 CEST	192.168.2.5	130.195.111.59	c4b	Echo
Oct 25, 2024 20:05:31.966553926 CEST	192.168.2.5	130.195.102.54	c48	Echo
Oct 25, 2024 20:05:31.966604948 CEST	192.168.2.5	130.195.115.102	c47	Echo
Oct 25, 2024 20:05:31.966715097 CEST	192.168.2.5	130.195.120.116	c46	Echo
Oct 25, 2024 20:05:31.966866016 CEST	192.168.2.5	130.195.111.237	c44	Echo
Oct 25, 2024 20:05:31.966905117 CEST	192.168.2.5	130.195.237.8	c45	Echo
Oct 25, 2024 20:05:31.966950893 CEST	192.168.2.5	130.195.36.112	c43	Echo
Oct 25, 2024 20:05:31.966991901 CEST	192.168.2.5	130.195.78.139	c42	Echo
Oct 25, 2024 20:05:31.967051983 CEST	192.168.2.5	130.195.66.110	c41	Echo
Oct 25, 2024 20:05:31.967158079 CEST	192.168.2.5	130.195.71.66	c40	Echo
Oct 25, 2024 20:05:31.995165110 CEST	192.168.2.5	130.195.41.131	c3f	Echo
Oct 25, 2024 20:05:32.026319981 CEST	192.168.2.5	130.195.167.155	c3e	Echo
Oct 25, 2024 20:05:32.057565928 CEST	192.168.2.5	130.195.66.42	c3d	Echo
Oct 25, 2024 20:05:32.088798046 CEST	192.168.2.5	130.195.104.132	c3c	Echo
Oct 25, 2024 20:05:32.120626926 CEST	192.168.2.5	130.195.98.109	c3b	Echo
Oct 25, 2024 20:05:32.151469946 CEST	192.168.2.5	130.195.96.7	c3a	Echo
Oct 25, 2024 20:05:32.183155060 CEST	192.168.2.5	130.195.145.175	c39	Echo
Oct 25, 2024 20:05:32.213993073 CEST	192.168.2.5	130.195.233.248	c38	Echo
Oct 25, 2024 20:05:32.245114088 CEST	192.168.2.5	130.195.3.234	c37	Echo
Oct 25, 2024 20:05:32.276304960 CEST	192.168.2.5	130.195.29.228	c36	Echo
Oct 25, 2024 20:05:32.307622910 CEST	192.168.2.5	130.195.70.30	c35	Echo
Oct 25, 2024 20:05:32.339021921 CEST	192.168.2.5	130.195.243.45	c34	Echo
Oct 25, 2024 20:05:32.370385885 CEST	192.168.2.5	130.195.145.11	c33	Echo
Oct 25, 2024 20:05:32.401853085 CEST	192.168.2.5	130.195.55.236	c32	Echo
Oct 25, 2024 20:05:32.432598114 CEST	192.168.2.5	130.195.149.7	c31	Echo
Oct 25, 2024 20:05:32.465584040 CEST	192.168.2.5	130.195.211.72	c30	Echo
Oct 25, 2024 20:05:32.467768908 CEST	192.168.2.5	130.195.25.185	c2f	Echo
Oct 25, 2024 20:05:32.467849970 CEST	192.168.2.5	130.195.234.150	c2e	Echo
Oct 25, 2024 20:05:32.468044043 CEST	192.168.2.5	130.195.60.82	c2c	Echo
Oct 25, 2024 20:05:32.468043089 CEST	192.168.2.5	130.195.33.73	c2d	Echo
Oct 25, 2024 20:05:32.468158960 CEST	192.168.2.5	130.195.121.126	c2a	Echo
Oct 25, 2024 20:05:32.468276978 CEST	192.168.2.5	130.195.166.199	c29	Echo
Oct 25, 2024 20:05:32.468317032 CEST	192.168.2.5	130.195.185.249	c28	Echo
Oct 25, 2024 20:05:32.468318939 CEST	192.168.2.5	130.195.47.83	c2b	Echo
Oct 25, 2024 20:05:32.468466043 CEST	192.168.2.5	130.195.88.186	c27	Echo
Oct 25, 2024 20:05:32.468570948 CEST	192.168.2.5	130.195.172.88	c26	Echo
Oct 25, 2024 20:05:32.468730927 CEST	192.168.2.5	130.195.235.45	c25	Echo
Oct 25, 2024 20:05:32.468892097 CEST	192.168.2.5	130.195.94.103	c24	Echo
Oct 25, 2024 20:05:32.468951941 CEST	192.168.2.5	130.195.98.146	c23	Echo
Oct 25, 2024 20:05:32.469062090 CEST	192.168.2.5	130.195.199.123	c21	Echo
Oct 25, 2024 20:05:32.469142914 CEST	192.168.2.5	130.195.26.215	c20	Echo
Oct 25, 2024 20:05:32.469166040 CEST	192.168.2.5	130.195.233.235	c22	Echo
Oct 25, 2024 20:05:32.496666908 CEST	192.168.2.5	130.195.241.205	c1f	Echo
Oct 25, 2024 20:05:32.526391029 CEST	192.168.2.5	130.195.17.77	c1e	Echo
Oct 25, 2024 20:05:32.557650089 CEST	192.168.2.5	130.195.139.114	c1d	Echo
Oct 25, 2024 20:05:32.589437008 CEST	192.168.2.5	130.195.218.142	c1c	Echo
Oct 25, 2024 20:05:32.620640039 CEST	192.168.2.5	130.195.4.166	c1b	Echo
Oct 25, 2024 20:05:32.651777983 CEST	192.168.2.5	130.195.250.100	c1a	Echo
Oct 25, 2024 20:05:32.682907104 CEST	192.168.2.5	130.195.197.250	c19	Echo
Oct 25, 2024 20:05:32.690021992 CEST	130.195.250.100	192.168.2.5	141a	Echo Reply
Oct 25, 2024 20:05:32.690419912 CEST	192.168.2.5	130.195.250.100	c18	Echo
Oct 25, 2024 20:05:32.714251041 CEST	192.168.2.5	130.195.84.198	c17	Echo
Oct 25, 2024 20:05:32.728527069 CEST	130.195.250.100	192.168.2.5	1418	Echo Reply
Oct 25, 2024 20:05:32.745445967 CEST	192.168.2.5	130.195.50.9	c16	Echo
Oct 25, 2024 20:05:32.776503086 CEST	192.168.2.5	130.195.35.115	c15	Echo
Oct 25, 2024 20:05:32.807714939 CEST	192.168.2.5	130.195.246.143	c14	Echo
Oct 25, 2024 20:05:32.839745998 CEST	192.168.2.5	130.195.239.186	c13	Echo
Oct 25, 2024 20:05:32.870285988 CEST	192.168.2.5	130.195.240.22	c12	Echo
Oct 25, 2024 20:05:32.901381969 CEST	192.168.2.5	130.195.160.184	c11	Echo
Oct 25, 2024 20:05:32.912542105 CEST	130.195.240.22	192.168.2.5	1412	Echo Reply
Oct 25, 2024 20:05:32.913234949 CEST	192.168.2.5	130.195.240.22	c10	Echo
Oct 25, 2024 20:05:32.932799101 CEST	192.168.2.5	130.195.26.81	c0f	Echo
Oct 25, 2024 20:05:32.956626892 CEST	130.195.240.22	192.168.2.5	1410	Echo Reply
Oct 25, 2024 20:05:32.964359045 CEST	192.168.2.5	130.195.11.172	c0e	Echo
Oct 25, 2024 20:05:32.965759039 CEST	192.168.2.5	130.195.70.35	c0d	Echo
Oct 25, 2024 20:05:32.965944052 CEST	192.168.2.5	130.195.189.9	c0c	Echo
Oct 25, 2024 20:05:32.966063976 CEST	192.168.2.5	130.195.235.84	c09	Echo
Oct 25, 2024 20:05:32.966075897 CEST	192.168.2.5	130.195.76.189	c0b	Echo
Oct 25, 2024 20:05:32.966146946 CEST	192.168.2.5	130.195.121.73	c0a	Echo
Oct 25, 2024 20:05:32.966190100 CEST	192.168.2.5	130.195.59.128	c08	Echo
Oct 25, 2024 20:05:32.966209888 CEST	192.168.2.5	130.195.68.14	c07	Echo
Oct 25, 2024 20:05:32.996841908 CEST	192.168.2.5	130.195.240.135	c06	Echo
Oct 25, 2024 20:05:33.026462078 CEST	192.168.2.5	130.195.211.240	c05	Echo
Oct 25, 2024 20:05:33.057761908 CEST	192.168.2.5	130.195.250.211	c04	Echo
Oct 25, 2024 20:05:33.088987112 CEST	192.168.2.5	130.195.48.251	c03	Echo
Oct 25, 2024 20:05:33.120242119 CEST	192.168.2.5	130.195.30.49	c02	Echo
Oct 25, 2024 20:05:33.151464939 CEST	192.168.2.5	130.195.75.85	c01	Echo
Oct 25, 2024 20:05:33.197768927 CEST	192.168.2.5	130.195.235.205	c00	Echo
Oct 25, 2024 20:05:33.214001894 CEST	192.168.2.5	130.195.115.235	bff	Echo
Oct 25, 2024 20:05:33.245512962 CEST	192.168.2.5	130.195.187.146	bfe	Echo
Oct 25, 2024 20:05:33.267476082 CEST	192.168.2.5	130.195.11.172	bfd	Echo
Oct 25, 2024 20:05:33.276684999 CEST	192.168.2.5	130.195.246.139	bfc	Echo
Oct 25, 2024 20:05:33.307794094 CEST	192.168.2.5	130.195.9.67	bfb	Echo
Oct 25, 2024 20:05:33.339123011 CEST	192.168.2.5	130.195.135.88	bfa	Echo
Oct 25, 2024 20:05:33.370177031 CEST	192.168.2.5	130.195.117.135	bf9	Echo
Oct 25, 2024 20:05:33.401508093 CEST	192.168.2.5	130.195.162.116	bf8	Echo
Oct 25, 2024 20:05:33.436729908 CEST	192.168.2.5	130.195.143.23	bf7	Echo
Oct 25, 2024 20:05:33.464762926 CEST	192.168.2.5	130.195.19.136	bf6	Echo
Oct 25, 2024 20:05:33.464895010 CEST	192.168.2.5	130.195.71.129	bf5	Echo
Oct 25, 2024 20:05:33.467048883 CEST	192.168.2.5	130.195.220.18	bf4	Echo
Oct 25, 2024 20:05:33.467365980 CEST	192.168.2.5	130.195.165.176	bf3	Echo
Oct 25, 2024 20:05:33.467731953 CEST	192.168.2.5	130.195.178.225	bf2	Echo
Oct 25, 2024 20:05:33.468008995 CEST	192.168.2.5	130.195.168.178	bf1	Echo
Oct 25, 2024 20:05:33.468436956 CEST	192.168.2.5	130.195.76.169	bf0	Echo
Oct 25, 2024 20:05:33.468888998 CEST	192.168.2.5	130.195.32.218	bef	Echo
Oct 25, 2024 20:05:33.469126940 CEST	192.168.2.5	130.195.191.100	bee	Echo
Oct 25, 2024 20:05:33.469691038 CEST	192.168.2.5	130.195.188.191	bed	Echo
Oct 25, 2024 20:05:33.470293999 CEST	192.168.2.5	130.195.185.88	bec	Echo
Oct 25, 2024 20:05:33.470602036 CEST	192.168.2.5	130.195.165.14	beb	Echo
Oct 25, 2024 20:05:33.471061945 CEST	192.168.2.5	130.195.209.207	bea	Echo
Oct 25, 2024 20:05:33.471416950 CEST	192.168.2.5	130.195.31.210	be9	Echo
Oct 25, 2024 20:05:33.471935987 CEST	192.168.2.5	130.195.9.92	be8	Echo
Oct 25, 2024 20:05:33.472417116 CEST	192.168.2.5	130.195.137.183	be7	Echo
Oct 25, 2024 20:05:33.473047018 CEST	192.168.2.5	130.195.9.36	be6	Echo
Oct 25, 2024 20:05:33.498146057 CEST	192.168.2.5	130.195.35.138	be5	Echo
Oct 25, 2024 20:05:33.526479959 CEST	192.168.2.5	130.195.126.2	be4	Echo
Oct 25, 2024 20:05:33.558182955 CEST	192.168.2.5	130.195.50.70	be3	Echo
Oct 25, 2024 20:05:33.589188099 CEST	192.168.2.5	130.195.192.223	be2	Echo
Oct 25, 2024 20:05:33.620769978 CEST	192.168.2.5	130.195.8.62	be1	Echo
Oct 25, 2024 20:05:33.651462078 CEST	192.168.2.5	130.195.176.209	be0	Echo
Oct 25, 2024 20:05:33.683017969 CEST	192.168.2.5	130.195.157.176	bdf	Echo
Oct 25, 2024 20:05:33.805227995 CEST	192.168.2.5	130.195.239.157	bde	Echo
Oct 25, 2024 20:05:33.805996895 CEST	192.168.2.5	130.195.245.29	bdd	Echo
Oct 25, 2024 20:05:33.824362040 CEST	130.195.245.29	192.168.2.5	13dd	Echo Reply
Oct 25, 2024 20:05:33.851130962 CEST	192.168.2.5	130.195.245.29	bdc	Echo
Oct 25, 2024 20:05:33.869131088 CEST	130.195.245.29	192.168.2.5	13dc	Echo Reply
Oct 25, 2024 20:05:33.873565912 CEST	192.168.2.5	130.195.224.5	bdb	Echo
Oct 25, 2024 20:05:33.902723074 CEST	192.168.2.5	130.195.170.179	bda	Echo
Oct 25, 2024 20:05:33.952441931 CEST	192.168.2.5	130.195.169.79	bd9	Echo
Oct 25, 2024 20:05:33.970849991 CEST	192.168.2.5	130.195.255.184	bd8	Echo
Oct 25, 2024 20:05:33.971159935 CEST	192.168.2.5	130.195.70.63	bd7	Echo
Oct 25, 2024 20:05:33.975518942 CEST	192.168.2.5	130.195.41.131	bd6	Echo
Oct 25, 2024 20:05:33.975764990 CEST	192.168.2.5	130.195.167.155	bd5	Echo
Oct 25, 2024 20:05:34.022810936 CEST	192.168.2.5	130.195.66.42	bd4	Echo
Oct 25, 2024 20:05:34.023195028 CEST	192.168.2.5	130.195.104.132	bd3	Echo
Oct 25, 2024 20:05:34.023351908 CEST	192.168.2.5	130.195.215.95	bd2	Echo
Oct 25, 2024 20:05:34.023433924 CEST	192.168.2.5	130.195.98.109	bd1	Echo
Oct 25, 2024 20:05:34.023524046 CEST	192.168.2.5	130.195.96.7	bd0	Echo
Oct 25, 2024 20:05:34.023753881 CEST	192.168.2.5	130.195.145.175	bcf	Echo
Oct 25, 2024 20:05:34.037874937 CEST	192.168.2.5	130.195.233.248	bce	Echo
Oct 25, 2024 20:05:34.037942886 CEST	192.168.2.5	130.195.3.234	bcd	Echo
Oct 25, 2024 20:05:34.038242102 CEST	192.168.2.5	130.195.29.228	bcc	Echo
Oct 25, 2024 20:05:34.048394918 CEST	192.168.2.5	130.195.70.30	bcb	Echo
Oct 25, 2024 20:05:34.048917055 CEST	192.168.2.5	130.195.243.45	bca	Echo
Oct 25, 2024 20:05:34.049024105 CEST	192.168.2.5	130.195.145.11	bc9	Echo
Oct 25, 2024 20:05:34.049242973 CEST	192.168.2.5	130.195.149.7	bc7	Echo
Oct 25, 2024 20:05:34.049283981 CEST	192.168.2.5	130.195.55.236	bc8	Echo
Oct 25, 2024 20:05:34.081072092 CEST	192.168.2.5	130.195.116.154	bc6	Echo
Oct 25, 2024 20:05:34.111468077 CEST	192.168.2.5	130.195.208.107	bc5	Echo
Oct 25, 2024 20:05:34.138535023 CEST	192.168.2.5	130.195.30.155	bc4	Echo
Oct 25, 2024 20:05:34.167185068 CEST	192.168.2.5	130.195.236.44	bc3	Echo
Oct 25, 2024 20:05:34.198412895 CEST	192.168.2.5	130.195.76.103	bc2	Echo
Oct 25, 2024 20:05:34.229640961 CEST	192.168.2.5	130.195.125.76	bc1	Echo
Oct 25, 2024 20:05:34.260819912 CEST	192.168.2.5	130.195.109.178	bc0	Echo
Oct 25, 2024 20:05:34.292190075 CEST	192.168.2.5	130.195.23.117	bbf	Echo
Oct 25, 2024 20:05:34.323435068 CEST	192.168.2.5	130.195.231.95	bbe	Echo
Oct 25, 2024 20:05:34.354609966 CEST	192.168.2.5	130.195.145.31	bbd	Echo
Oct 25, 2024 20:05:34.386121035 CEST	192.168.2.5	130.195.15.13	bbc	Echo
Oct 25, 2024 20:05:34.416986942 CEST	192.168.2.5	130.195.34.10	bbb	Echo
Oct 25, 2024 20:05:34.448335886 CEST	192.168.2.5	130.195.212.166	bba	Echo
Oct 25, 2024 20:05:34.464059114 CEST	192.168.2.5	130.195.211.72	bb9	Echo
Oct 25, 2024 20:05:34.466097116 CEST	192.168.2.5	130.195.241.205	bb8	Echo
Oct 25, 2024 20:05:34.466213942 CEST	192.168.2.5	130.195.139.114	bb6	Echo
Oct 25, 2024 20:05:34.466236115 CEST	192.168.2.5	130.195.17.77	bb7	Echo
Oct 25, 2024 20:05:34.466316938 CEST	192.168.2.5	130.195.218.142	bb5	Echo
Oct 25, 2024 20:05:34.466536999 CEST	192.168.2.5	130.195.4.166	bb4	Echo
Oct 25, 2024 20:05:34.466583967 CEST	192.168.2.5	130.195.84.198	bb2	Echo
Oct 25, 2024 20:05:34.466658115 CEST	192.168.2.5	130.195.197.250	bb3	Echo
Oct 25, 2024 20:05:34.466661930 CEST	192.168.2.5	130.195.50.9	bb1	Echo
Oct 25, 2024 20:05:34.466842890 CEST	192.168.2.5	130.195.35.115	bb0	Echo
Oct 25, 2024 20:05:34.466943979 CEST	192.168.2.5	130.195.246.143	baf	Echo
Oct 25, 2024 20:05:34.466998100 CEST	192.168.2.5	130.195.239.186	bae	Echo
Oct 25, 2024 20:05:34.467101097 CEST	192.168.2.5	130.195.160.184	bad	Echo
Oct 25, 2024 20:05:34.467129946 CEST	192.168.2.5	130.195.26.81	bac	Echo
Oct 25, 2024 20:05:34.479711056 CEST	192.168.2.5	130.195.169.226	bab	Echo
Oct 25, 2024 20:05:34.510859966 CEST	192.168.2.5	130.195.82.201	baa	Echo
Oct 25, 2024 20:05:34.542000055 CEST	192.168.2.5	130.195.79.54	ba9	Echo
Oct 25, 2024 20:05:34.573704958 CEST	192.168.2.5	130.195.46.97	ba8	Echo
Oct 25, 2024 20:05:34.604784012 CEST	192.168.2.5	130.195.149.45	ba7	Echo
Oct 25, 2024 20:05:34.635884047 CEST	192.168.2.5	130.195.240.41	ba6	Echo
Oct 25, 2024 20:05:34.667148113 CEST	192.168.2.5	130.195.6.49	ba5	Echo
Oct 25, 2024 20:05:34.698447943 CEST	192.168.2.5	130.195.102.85	ba4	Echo
Oct 25, 2024 20:05:34.729595900 CEST	192.168.2.5	130.195.103.17	ba3	Echo
Oct 25, 2024 20:05:34.760915995 CEST	192.168.2.5	130.195.11.103	ba2	Echo
Oct 25, 2024 20:05:34.792134047 CEST	192.168.2.5	130.195.174.11	ba1	Echo
Oct 25, 2024 20:05:34.823293924 CEST	192.168.2.5	130.195.218.146	ba0	Echo
Oct 25, 2024 20:05:34.854553938 CEST	192.168.2.5	130.195.240.91	b9f	Echo
Oct 25, 2024 20:05:34.885977983 CEST	192.168.2.5	130.195.94.208	b9e	Echo
Oct 25, 2024 20:05:34.916996956 CEST	192.168.2.5	130.195.5.24	b9d	Echo
Oct 25, 2024 20:05:34.949079990 CEST	192.168.2.5	130.195.151.5	b9c	Echo
Oct 25, 2024 20:05:34.965045929 CEST	192.168.2.5	130.195.240.135	b9b	Echo
Oct 25, 2024 20:05:34.965133905 CEST	192.168.2.5	130.195.211.240	b9a	Echo
Oct 25, 2024 20:05:34.965205908 CEST	192.168.2.5	130.195.250.211	b99	Echo
Oct 25, 2024 20:05:34.965312004 CEST	192.168.2.5	130.195.48.251	b98	Echo
Oct 25, 2024 20:05:34.965361118 CEST	192.168.2.5	130.195.30.49	b97	Echo
Oct 25, 2024 20:05:34.965493917 CEST	192.168.2.5	130.195.75.85	b96	Echo
Oct 25, 2024 20:05:34.965636015 CEST	192.168.2.5	130.195.235.205	b95	Echo
Oct 25, 2024 20:05:34.965713024 CEST	192.168.2.5	130.195.115.235	b94	Echo
Oct 25, 2024 20:05:34.965756893 CEST	192.168.2.5	130.195.187.146	b93	Echo
Oct 25, 2024 20:05:34.965996027 CEST	192.168.2.5	130.195.246.139	b92	Echo
Oct 25, 2024 20:05:34.966053963 CEST	192.168.2.5	130.195.9.67	b91	Echo
Oct 25, 2024 20:05:34.966237068 CEST	192.168.2.5	130.195.135.88	b90	Echo
Oct 25, 2024 20:05:34.966368914 CEST	192.168.2.5	130.195.117.135	b8f	Echo
Oct 25, 2024 20:05:34.966402054 CEST	192.168.2.5	130.195.162.116	b8e	Echo
Oct 25, 2024 20:05:34.966533899 CEST	192.168.2.5	130.195.143.23	b8d	Echo
Oct 25, 2024 20:05:34.966614962 CEST	192.168.2.5	130.195.6.49	b8c	Echo
Oct 25, 2024 20:05:34.979548931 CEST	192.168.2.5	130.195.7.151	b8b	Echo
Oct 25, 2024 20:05:35.010771036 CEST	192.168.2.5	130.195.151.7	b8a	Echo
Oct 25, 2024 20:05:35.042223930 CEST	192.168.2.5	130.195.154.219	b89	Echo
Oct 25, 2024 20:05:35.073390007 CEST	192.168.2.5	130.195.185.215	b88	Echo
Oct 25, 2024 20:05:35.104465008 CEST	192.168.2.5	130.195.90.186	b87	Echo
Oct 25, 2024 20:05:35.136137009 CEST	192.168.2.5	130.195.7.65	b86	Echo
Oct 25, 2024 20:05:35.166996002 CEST	192.168.2.5	130.195.37.193	b85	Echo
Oct 25, 2024 20:05:35.198497057 CEST	192.168.2.5	130.195.205.139	b84	Echo
Oct 25, 2024 20:05:35.213855982 CEST	130.195.5.24	192.168.2.5	139d	Echo Reply
Oct 25, 2024 20:05:35.214246988 CEST	192.168.2.5	130.195.5.24	b83	Echo
Oct 25, 2024 20:05:35.229446888 CEST	192.168.2.5	130.195.194.132	b82	Echo
Oct 25, 2024 20:05:35.260874987 CEST	192.168.2.5	130.195.40.125	b81	Echo
Oct 25, 2024 20:05:35.292150974 CEST	192.168.2.5	130.195.108.33	b80	Echo
Oct 25, 2024 20:05:35.326989889 CEST	192.168.2.5	130.195.123.231	b7f	Echo
Oct 25, 2024 20:05:35.354581118 CEST	192.168.2.5	130.195.236.243	b7e	Echo
Oct 25, 2024 20:05:35.386012077 CEST	192.168.2.5	130.195.161.111	b7d	Echo
Oct 25, 2024 20:05:35.417223930 CEST	192.168.2.5	130.195.141.12	b7c	Echo
Oct 25, 2024 20:05:35.448440075 CEST	192.168.2.5	130.195.88.187	b7b	Echo
Oct 25, 2024 20:05:35.464401007 CEST	192.168.2.5	130.195.71.129	b7a	Echo
Oct 25, 2024 20:05:35.465775013 CEST	192.168.2.5	130.195.35.138	b79	Echo
Oct 25, 2024 20:05:35.465883970 CEST	192.168.2.5	130.195.126.2	b78	Echo
Oct 25, 2024 20:05:35.465948105 CEST	192.168.2.5	130.195.50.70	b77	Echo
Oct 25, 2024 20:05:35.465992928 CEST	192.168.2.5	130.195.192.223	b76	Echo
Oct 25, 2024 20:05:35.466140985 CEST	192.168.2.5	130.195.176.209	b74	Echo
Oct 25, 2024 20:05:35.466160059 CEST	192.168.2.5	130.195.8.62	b75	Echo
Oct 25, 2024 20:05:35.466267109 CEST	192.168.2.5	130.195.157.176	b73	Echo
Oct 25, 2024 20:05:35.466281891 CEST	192.168.2.5	130.195.239.157	b72	Echo
Oct 25, 2024 20:05:35.466443062 CEST	192.168.2.5	130.195.224.5	b71	Echo
Oct 25, 2024 20:05:35.466541052 CEST	192.168.2.5	130.195.170.179	b70	Echo
Oct 25, 2024 20:05:35.466567039 CEST	192.168.2.5	130.195.169.79	b6f	Echo
Oct 25, 2024 20:05:35.479521990 CEST	192.168.2.5	130.195.124.55	b6e	Echo
Oct 25, 2024 20:05:35.510870934 CEST	192.168.2.5	130.195.64.103	b6d	Echo
Oct 25, 2024 20:05:35.511605024 CEST	130.195.5.24	192.168.2.5	1383	Echo Reply
Oct 25, 2024 20:05:35.542009115 CEST	192.168.2.5	130.195.25.214	b6c	Echo
Oct 25, 2024 20:05:35.573318958 CEST	192.168.2.5	130.195.51.61	b6b	Echo
Oct 25, 2024 20:05:35.605195999 CEST	192.168.2.5	130.195.77.63	b6a	Echo
Oct 25, 2024 20:05:35.635997057 CEST	192.168.2.5	130.195.126.39	b69	Echo
Oct 25, 2024 20:05:35.667148113 CEST	192.168.2.5	130.195.6.22	b68	Echo
Oct 25, 2024 20:05:35.698404074 CEST	192.168.2.5	130.195.111.57	b67	Echo
Oct 25, 2024 20:05:35.729650974 CEST	192.168.2.5	130.195.23.56	b66	Echo
Oct 25, 2024 20:05:35.760849953 CEST	192.168.2.5	130.195.184.2	b65	Echo
Oct 25, 2024 20:05:35.792138100 CEST	192.168.2.5	130.195.29.49	b64	Echo
Oct 25, 2024 20:05:35.823446035 CEST	192.168.2.5	130.195.174.173	b63	Echo
Oct 25, 2024 20:05:35.855204105 CEST	192.168.2.5	130.195.227.0	b62	Echo
Oct 25, 2024 20:05:35.885833979 CEST	192.168.2.5	130.195.140.2	b61	Echo
Oct 25, 2024 20:05:35.917051077 CEST	192.168.2.5	130.195.185.139	b60	Echo
Oct 25, 2024 20:05:35.948398113 CEST	192.168.2.5	130.195.226.218	b5f	Echo
Oct 25, 2024 20:05:35.971040964 CEST	192.168.2.5	130.195.70.63	b5e	Echo
Oct 25, 2024 20:05:35.986504078 CEST	192.168.2.5	130.195.203.71	b5d	Echo
Oct 25, 2024 20:05:35.987894058 CEST	192.168.2.5	130.195.215.95	b5c	Echo
Oct 25, 2024 20:05:35.989557028 CEST	192.168.2.5	130.195.116.154	b5b	Echo
Oct 25, 2024 20:05:35.989677906 CEST	192.168.2.5	130.195.208.107	b5a	Echo
Oct 25, 2024 20:05:35.990047932 CEST	192.168.2.5	130.195.30.155	b59	Echo
Oct 25, 2024 20:05:35.990078926 CEST	192.168.2.5	130.195.236.44	b58	Echo
Oct 25, 2024 20:05:35.990206003 CEST	192.168.2.5	130.195.76.103	b57	Echo
Oct 25, 2024 20:05:35.990237951 CEST	192.168.2.5	130.195.125.76	b56	Echo
Oct 25, 2024 20:05:35.990406036 CEST	192.168.2.5	130.195.109.178	b55	Echo
Oct 25, 2024 20:05:35.990763903 CEST	192.168.2.5	130.195.23.117	b54	Echo
Oct 25, 2024 20:05:35.992263079 CEST	192.168.2.5	130.195.231.95	b53	Echo
Oct 25, 2024 20:05:35.992960930 CEST	192.168.2.5	130.195.145.31	b52	Echo
Oct 25, 2024 20:05:35.993417978 CEST	192.168.2.5	130.195.15.13	b51	Echo
Oct 25, 2024 20:05:35.993583918 CEST	192.168.2.5	130.195.34.10	b50	Echo
Oct 25, 2024 20:05:35.993961096 CEST	192.168.2.5	130.195.212.166	b4f	Echo
Oct 25, 2024 20:05:36.010806084 CEST	192.168.2.5	130.195.46.231	b4e	Echo
Oct 25, 2024 20:05:36.042248964 CEST	192.168.2.5	130.195.37.125	b4d	Echo
Oct 25, 2024 20:05:36.073352098 CEST	192.168.2.5	130.195.155.185	b4c	Echo
Oct 25, 2024 20:05:36.104741096 CEST	192.168.2.5	130.195.109.190	b4b	Echo
Oct 25, 2024 20:05:36.135842085 CEST	192.168.2.5	130.195.155.228	b4a	Echo
Oct 25, 2024 20:05:36.167092085 CEST	192.168.2.5	130.195.227.155	b49	Echo
Oct 25, 2024 20:05:36.198263884 CEST	192.168.2.5	130.195.89.94	b48	Echo
Oct 25, 2024 20:05:36.229429960 CEST	192.168.2.5	130.195.188.118	b47	Echo
Oct 25, 2024 20:05:36.260812998 CEST	192.168.2.5	130.195.27.246	b46	Echo
Oct 25, 2024 20:05:36.292010069 CEST	192.168.2.5	130.195.246.107	b45	Echo
Oct 25, 2024 20:05:36.323415041 CEST	192.168.2.5	130.195.239.138	b44	Echo
Oct 25, 2024 20:05:36.354584932 CEST	192.168.2.5	130.195.99.30	b43	Echo
Oct 25, 2024 20:05:36.387104034 CEST	192.168.2.5	130.195.24.220	b42	Echo
Oct 25, 2024 20:05:36.421000957 CEST	192.168.2.5	130.195.48.60	b41	Echo
Oct 25, 2024 20:05:36.449429989 CEST	192.168.2.5	130.195.186.116	b40	Echo
Oct 25, 2024 20:05:36.472511053 CEST	192.168.2.5	130.195.169.226	b3f	Echo
Oct 25, 2024 20:05:36.473601103 CEST	192.168.2.5	130.195.82.201	b3e	Echo
Oct 25, 2024 20:05:36.473733902 CEST	192.168.2.5	130.195.79.54	b3d	Echo
Oct 25, 2024 20:05:36.473911047 CEST	192.168.2.5	130.195.46.97	b3c	Echo
Oct 25, 2024 20:05:36.473923922 CEST	192.168.2.5	130.195.149.45	b3b	Echo
Oct 25, 2024 20:05:36.474050045 CEST	192.168.2.5	130.195.240.41	b3a	Echo
Oct 25, 2024 20:05:36.474144936 CEST	192.168.2.5	130.195.102.85	b39	Echo
Oct 25, 2024 20:05:36.474219084 CEST	192.168.2.5	130.195.103.17	b38	Echo
Oct 25, 2024 20:05:36.474312067 CEST	192.168.2.5	130.195.11.103	b37	Echo
Oct 25, 2024 20:05:36.474448919 CEST	192.168.2.5	130.195.174.11	b36	Echo
Oct 25, 2024 20:05:36.474467993 CEST	192.168.2.5	130.195.218.146	b35	Echo
Oct 25, 2024 20:05:36.474551916 CEST	192.168.2.5	130.195.240.91	b34	Echo
Oct 25, 2024 20:05:36.474637985 CEST	192.168.2.5	130.195.94.208	b33	Echo
Oct 25, 2024 20:05:36.474709988 CEST	192.168.2.5	130.195.151.5	b32	Echo
Oct 25, 2024 20:05:36.480336905 CEST	192.168.2.5	130.195.84.41	b31	Echo
Oct 25, 2024 20:05:36.511687994 CEST	192.168.2.5	130.195.123.246	b30	Echo
Oct 25, 2024 20:05:36.542632103 CEST	192.168.2.5	130.195.255.112	b2f	Echo
Oct 25, 2024 20:05:36.574214935 CEST	192.168.2.5	130.195.11.255	b2e	Echo
Oct 25, 2024 20:05:36.604973078 CEST	192.168.2.5	130.195.74.148	b2d	Echo
Oct 25, 2024 20:05:36.635947943 CEST	192.168.2.5	130.195.20.129	b2c	Echo
Oct 25, 2024 20:05:36.683463097 CEST	192.168.2.5	130.195.110.244	b2b	Echo
Oct 25, 2024 20:05:36.714075089 CEST	192.168.2.5	130.195.81.76	b2a	Echo
Oct 25, 2024 20:05:36.745187044 CEST	192.168.2.5	130.195.72.237	b29	Echo
Oct 25, 2024 20:05:36.776392937 CEST	192.168.2.5	130.195.22.67	b28	Echo
Oct 25, 2024 20:05:36.808101892 CEST	192.168.2.5	130.195.95.62	b27	Echo
Oct 25, 2024 20:05:36.839181900 CEST	192.168.2.5	130.195.65.25	b26	Echo
Oct 25, 2024 20:05:36.870156050 CEST	192.168.2.5	130.195.232.96	b25	Echo
Oct 25, 2024 20:05:36.901336908 CEST	192.168.2.5	130.195.191.50	b24	Echo
Oct 25, 2024 20:05:36.932662010 CEST	192.168.2.5	130.195.254.52	b23	Echo
Oct 25, 2024 20:05:36.965591908 CEST	192.168.2.5	130.195.53.183	b22	Echo
Oct 25, 2024 20:05:36.967997074 CEST	192.168.2.5	130.195.7.151	b21	Echo
Oct 25, 2024 20:05:36.968028069 CEST	192.168.2.5	130.195.151.7	b20	Echo
Oct 25, 2024 20:05:36.968131065 CEST	192.168.2.5	130.195.154.219	b1f	Echo
Oct 25, 2024 20:05:36.968204021 CEST	192.168.2.5	130.195.185.215	b1e	Echo
Oct 25, 2024 20:05:36.968296051 CEST	192.168.2.5	130.195.90.186	b1d	Echo
Oct 25, 2024 20:05:36.968420029 CEST	192.168.2.5	130.195.37.193	b1b	Echo
Oct 25, 2024 20:05:36.968431950 CEST	192.168.2.5	130.195.7.65	b1c	Echo
Oct 25, 2024 20:05:36.968534946 CEST	192.168.2.5	130.195.194.132	b19	Echo
Oct 25, 2024 20:05:36.968534946 CEST	192.168.2.5	130.195.205.139	b1a	Echo
Oct 25, 2024 20:05:36.968687057 CEST	192.168.2.5	130.195.40.125	b18	Echo
Oct 25, 2024 20:05:36.968826056 CEST	192.168.2.5	130.195.123.231	b16	Echo
Oct 25, 2024 20:05:36.968832016 CEST	192.168.2.5	130.195.108.33	b17	Echo
Oct 25, 2024 20:05:36.968888044 CEST	192.168.2.5	130.195.236.243	b15	Echo
Oct 25, 2024 20:05:36.968961954 CEST	192.168.2.5	130.195.161.111	b14	Echo
Oct 25, 2024 20:05:36.969041109 CEST	192.168.2.5	130.195.141.12	b13	Echo
Oct 25, 2024 20:05:36.969170094 CEST	192.168.2.5	130.195.88.187	b12	Echo
Oct 25, 2024 20:05:36.995225906 CEST	192.168.2.5	130.195.134.122	b11	Echo
Oct 25, 2024 20:05:37.026854038 CEST	192.168.2.5	130.195.16.44	b10	Echo
Oct 25, 2024 20:05:37.057658911 CEST	192.168.2.5	130.195.127.99	b0f	Echo
Oct 25, 2024 20:05:37.088836908 CEST	192.168.2.5	130.195.161.142	b0e	Echo
Oct 25, 2024 20:05:37.120167971 CEST	192.168.2.5	130.195.180.231	b0d	Echo
Oct 25, 2024 20:05:37.151592016 CEST	192.168.2.5	130.195.168.238	b0c	Echo
Oct 25, 2024 20:05:37.182596922 CEST	192.168.2.5	130.195.80.255	b0b	Echo
Oct 25, 2024 20:05:37.214034081 CEST	192.168.2.5	130.195.52.20	b0a	Echo
Oct 25, 2024 20:05:37.245244026 CEST	192.168.2.5	130.195.214.87	b09	Echo
Oct 25, 2024 20:05:37.276576042 CEST	192.168.2.5	130.195.215.199	b08	Echo
Oct 25, 2024 20:05:37.307706118 CEST	192.168.2.5	130.195.88.26	b07	Echo
Oct 25, 2024 20:05:37.338943958 CEST	192.168.2.5	130.195.146.88	b06	Echo
Oct 25, 2024 20:05:37.370279074 CEST	192.168.2.5	130.195.232.146	b05	Echo
Oct 25, 2024 20:05:37.401427031 CEST	192.168.2.5	130.195.162.91	b04	Echo
Oct 25, 2024 20:05:37.432643890 CEST	192.168.2.5	130.195.57.52	b03	Echo
Oct 25, 2024 20:05:37.464310884 CEST	192.168.2.5	130.195.32.195	b02	Echo
Oct 25, 2024 20:05:37.465444088 CEST	192.168.2.5	130.195.124.55	b01	Echo
Oct 25, 2024 20:05:37.465465069 CEST	192.168.2.5	130.195.64.103	b00	Echo
Oct 25, 2024 20:05:37.465599060 CEST	192.168.2.5	130.195.25.214	aff	Echo
Oct 25, 2024 20:05:37.465692043 CEST	192.168.2.5	130.195.51.61	afe	Echo
Oct 25, 2024 20:05:37.465769053 CEST	192.168.2.5	130.195.77.63	afd	Echo
Oct 25, 2024 20:05:37.465837955 CEST	192.168.2.5	130.195.126.39	afc	Echo
Oct 25, 2024 20:05:37.465919018 CEST	192.168.2.5	130.195.6.22	afb	Echo
Oct 25, 2024 20:05:37.465992928 CEST	192.168.2.5	130.195.111.57	afa	Echo
Oct 25, 2024 20:05:37.466085911 CEST	192.168.2.5	130.195.23.56	af9	Echo
Oct 25, 2024 20:05:37.466140032 CEST	192.168.2.5	130.195.184.2	af8	Echo
Oct 25, 2024 20:05:37.466207027 CEST	192.168.2.5	130.195.29.49	af7	Echo
Oct 25, 2024 20:05:37.466288090 CEST	192.168.2.5	130.195.174.173	af6	Echo
Oct 25, 2024 20:05:37.466372967 CEST	192.168.2.5	130.195.227.0	af5	Echo
Oct 25, 2024 20:05:37.466440916 CEST	192.168.2.5	130.195.140.2	af4	Echo
Oct 25, 2024 20:05:37.466509104 CEST	192.168.2.5	130.195.185.139	af3	Echo
Oct 25, 2024 20:05:37.466577053 CEST	192.168.2.5	130.195.226.218	af2	Echo
Oct 25, 2024 20:05:37.495110989 CEST	192.168.2.5	130.195.206.170	af1	Echo
Oct 25, 2024 20:05:37.526384115 CEST	192.168.2.5	130.195.237.59	af0	Echo
Oct 25, 2024 20:05:37.557708979 CEST	192.168.2.5	130.195.176.175	aef	Echo
Oct 25, 2024 20:05:37.588999033 CEST	192.168.2.5	130.195.127.168	aee	Echo
Oct 25, 2024 20:05:37.620110035 CEST	192.168.2.5	130.195.254.10	aed	Echo
Oct 25, 2024 20:05:37.651448011 CEST	192.168.2.5	130.195.20.32	aec	Echo
Oct 25, 2024 20:05:37.682852030 CEST	192.168.2.5	130.195.90.74	aeb	Echo
Oct 25, 2024 20:05:37.713978052 CEST	192.168.2.5	130.195.29.141	aea	Echo
Oct 25, 2024 20:05:37.745217085 CEST	192.168.2.5	130.195.210.22	ae9	Echo
Oct 25, 2024 20:05:37.776422024 CEST	192.168.2.5	130.195.17.210	ae8	Echo
Oct 25, 2024 20:05:37.807630062 CEST	192.168.2.5	130.195.26.18	ae7	Echo
Oct 25, 2024 20:05:37.838992119 CEST	192.168.2.5	130.195.99.248	ae6	Echo
Oct 25, 2024 20:05:37.870232105 CEST	192.168.2.5	130.195.195.118	ae5	Echo
Oct 25, 2024 20:05:37.901510000 CEST	192.168.2.5	130.195.254.34	ae4	Echo
Oct 25, 2024 20:05:37.932642937 CEST	192.168.2.5	130.195.196.39	ae3	Echo
Oct 25, 2024 20:05:37.964276075 CEST	192.168.2.5	130.195.24.20	ae2	Echo
Oct 25, 2024 20:05:37.964380026 CEST	192.168.2.5	130.195.203.71	ae1	Echo
Oct 25, 2024 20:05:37.966135979 CEST	192.168.2.5	130.195.46.231	ae0	Echo
Oct 25, 2024 20:05:37.966255903 CEST	192.168.2.5	130.195.37.125	adf	Echo
Oct 25, 2024 20:05:37.966464996 CEST	192.168.2.5	130.195.155.185	ade	Echo
Oct 25, 2024 20:05:37.966538906 CEST	192.168.2.5	130.195.109.190	add	Echo
Oct 25, 2024 20:05:37.966711998 CEST	192.168.2.5	130.195.227.155	adb	Echo
Oct 25, 2024 20:05:37.966759920 CEST	192.168.2.5	130.195.155.228	adc	Echo
Oct 25, 2024 20:05:37.966836929 CEST	192.168.2.5	130.195.89.94	ada	Echo
Oct 25, 2024 20:05:37.966919899 CEST	192.168.2.5	130.195.188.118	ad9	Echo
Oct 25, 2024 20:05:37.967000961 CEST	192.168.2.5	130.195.27.246	ad8	Echo
Oct 25, 2024 20:05:37.967068911 CEST	192.168.2.5	130.195.246.107	ad7	Echo
Oct 25, 2024 20:05:37.967149019 CEST	192.168.2.5	130.195.239.138	ad6	Echo
Oct 25, 2024 20:05:37.967298985 CEST	192.168.2.5	130.195.24.220	ad4	Echo
Oct 25, 2024 20:05:37.967340946 CEST	192.168.2.5	130.195.99.30	ad5	Echo
Oct 25, 2024 20:05:37.967427969 CEST	192.168.2.5	130.195.186.116	ad2	Echo
Oct 25, 2024 20:05:37.967431068 CEST	192.168.2.5	130.195.48.60	ad3	Echo
Oct 25, 2024 20:05:37.995156050 CEST	192.168.2.5	130.195.233.188	ad1	Echo
Oct 25, 2024 20:05:38.026540041 CEST	192.168.2.5	130.195.47.30	ad0	Echo
Oct 25, 2024 20:05:38.057651997 CEST	192.168.2.5	130.195.218.47	acf	Echo
Oct 25, 2024 20:05:38.088915110 CEST	192.168.2.5	130.195.87.64	ace	Echo
Oct 25, 2024 20:05:38.120244026 CEST	192.168.2.5	130.195.175.211	acd	Echo
Oct 25, 2024 20:05:38.151621103 CEST	192.168.2.5	130.195.28.15	acc	Echo
Oct 25, 2024 20:05:38.182712078 CEST	192.168.2.5	130.195.122.149	acb	Echo
Oct 25, 2024 20:05:38.213846922 CEST	192.168.2.5	130.195.4.53	aca	Echo
Oct 25, 2024 20:05:38.245445967 CEST	192.168.2.5	130.195.74.220	ac9	Echo
Oct 25, 2024 20:05:38.276362896 CEST	192.168.2.5	130.195.119.42	ac8	Echo
Oct 25, 2024 20:05:38.307604074 CEST	192.168.2.5	130.195.101.177	ac7	Echo
Oct 25, 2024 20:05:38.339687109 CEST	192.168.2.5	130.195.159.102	ac6	Echo
Oct 25, 2024 20:05:38.370961905 CEST	192.168.2.5	130.195.5.187	ac5	Echo
Oct 25, 2024 20:05:38.401477098 CEST	192.168.2.5	130.195.24.90	ac4	Echo
Oct 25, 2024 20:05:38.432910919 CEST	192.168.2.5	130.195.125.200	ac3	Echo
Oct 25, 2024 20:05:38.464550972 CEST	192.168.2.5	130.195.215.62	ac2	Echo
Oct 25, 2024 20:05:38.465683937 CEST	192.168.2.5	130.195.84.41	ac1	Echo
Oct 25, 2024 20:05:38.465833902 CEST	192.168.2.5	130.195.123.246	ac0	Echo
Oct 25, 2024 20:05:38.465833902 CEST	192.168.2.5	130.195.255.112	abf	Echo
Oct 25, 2024 20:05:38.466058016 CEST	192.168.2.5	130.195.11.255	abe	Echo
Oct 25, 2024 20:05:38.466104031 CEST	192.168.2.5	130.195.74.148	abd	Echo
Oct 25, 2024 20:05:38.466262102 CEST	192.168.2.5	130.195.20.129	abc	Echo
Oct 25, 2024 20:05:38.466490984 CEST	192.168.2.5	130.195.110.244	abb	Echo
Oct 25, 2024 20:05:38.466528893 CEST	192.168.2.5	130.195.81.76	aba	Echo
Oct 25, 2024 20:05:38.466736078 CEST	192.168.2.5	130.195.22.67	ab8	Echo
Oct 25, 2024 20:05:38.466763973 CEST	192.168.2.5	130.195.72.237	ab9	Echo
Oct 25, 2024 20:05:38.466952085 CEST	192.168.2.5	130.195.65.25	ab6	Echo
Oct 25, 2024 20:05:38.466954947 CEST	192.168.2.5	130.195.95.62	ab7	Echo
Oct 25, 2024 20:05:38.466960907 CEST	192.168.2.5	130.195.232.96	ab5	Echo
Oct 25, 2024 20:05:38.467020035 CEST	192.168.2.5	130.195.191.50	ab4	Echo
Oct 25, 2024 20:05:38.467251062 CEST	192.168.2.5	130.195.254.52	ab3	Echo
Oct 25, 2024 20:05:38.495100021 CEST	192.168.2.5	130.195.98.137	ab2	Echo
Oct 25, 2024 20:05:38.526422977 CEST	192.168.2.5	130.195.0.232	ab1	Echo
Oct 25, 2024 20:05:38.557785988 CEST	192.168.2.5	130.195.231.101	ab0	Echo
Oct 25, 2024 20:05:38.589025021 CEST	192.168.2.5	130.195.106.231	aaf	Echo
Oct 25, 2024 20:05:38.620181084 CEST	192.168.2.5	130.195.193.23	aae	Echo
Oct 25, 2024 20:05:38.651508093 CEST	192.168.2.5	130.195.92.203	aad	Echo
Oct 25, 2024 20:05:38.672674894 CEST	192.168.2.5	130.195.5.187	aac	Echo
Oct 25, 2024 20:05:38.682714939 CEST	192.168.2.5	130.195.63.225	aab	Echo
Oct 25, 2024 20:05:38.713869095 CEST	192.168.2.5	130.195.96.203	aaa	Echo
Oct 25, 2024 20:05:38.745171070 CEST	192.168.2.5	130.195.246.96	aa9	Echo
Oct 25, 2024 20:05:38.776366949 CEST	192.168.2.5	130.195.183.149	aa8	Echo
Oct 25, 2024 20:05:38.807647943 CEST	192.168.2.5	130.195.185.12	aa7	Echo
Oct 25, 2024 20:05:38.838926077 CEST	192.168.2.5	130.195.168.225	aa6	Echo
Oct 25, 2024 20:05:38.870053053 CEST	192.168.2.5	130.195.73.59	aa5	Echo
Oct 25, 2024 20:05:38.901325941 CEST	192.168.2.5	130.195.190.170	aa4	Echo
Oct 25, 2024 20:05:38.932617903 CEST	192.168.2.5	130.195.136.154	aa3	Echo
Oct 25, 2024 20:05:38.964845896 CEST	192.168.2.5	130.195.53.183	aa2	Echo
Oct 25, 2024 20:05:38.965142965 CEST	192.168.2.5	130.195.194.236	aa1	Echo
Oct 25, 2024 20:05:38.968847036 CEST	192.168.2.5	130.195.134.122	aa0	Echo
Oct 25, 2024 20:05:38.969217062 CEST	192.168.2.5	130.195.16.44	a9f	Echo
Oct 25, 2024 20:05:38.969218016 CEST	192.168.2.5	130.195.127.99	a9e	Echo
Oct 25, 2024 20:05:38.969530106 CEST	192.168.2.5	130.195.161.142	a9d	Echo
Oct 25, 2024 20:05:38.969794989 CEST	192.168.2.5	130.195.180.231	a9c	Echo
Oct 25, 2024 20:05:38.969877958 CEST	192.168.2.5	130.195.168.238	a9b	Echo
Oct 25, 2024 20:05:38.970273972 CEST	192.168.2.5	130.195.80.255	a9a	Echo
Oct 25, 2024 20:05:38.970396042 CEST	192.168.2.5	130.195.52.20	a99	Echo
Oct 25, 2024 20:05:38.970539093 CEST	192.168.2.5	130.195.215.199	a97	Echo
Oct 25, 2024 20:05:38.970623016 CEST	192.168.2.5	130.195.214.87	a98	Echo
Oct 25, 2024 20:05:38.970685005 CEST	192.168.2.5	130.195.88.26	a96	Echo
Oct 25, 2024 20:05:38.971065044 CEST	192.168.2.5	130.195.146.88	a95	Echo
Oct 25, 2024 20:05:38.971127987 CEST	192.168.2.5	130.195.232.146	a94	Echo
Oct 25, 2024 20:05:38.971189022 CEST	192.168.2.5	130.195.162.91	a93	Echo
Oct 25, 2024 20:05:38.971266985 CEST	192.168.2.5	130.195.57.52	a92	Echo
Oct 25, 2024 20:05:38.995280027 CEST	192.168.2.5	130.195.215.47	a91	Echo
Oct 25, 2024 20:05:39.028274059 CEST	192.168.2.5	130.195.237.109	a90	Echo
Oct 25, 2024 20:05:39.059155941 CEST	192.168.2.5	130.195.71.210	a8f	Echo
Oct 25, 2024 20:05:39.088937044 CEST	192.168.2.5	130.195.92.206	a8e	Echo
Oct 25, 2024 20:05:39.120218992 CEST	192.168.2.5	130.195.8.93	a8d	Echo
Oct 25, 2024 20:05:39.151411057 CEST	192.168.2.5	130.195.136.142	a8c	Echo
Oct 25, 2024 20:05:39.182673931 CEST	192.168.2.5	130.195.96.110	a8b	Echo
Oct 25, 2024 20:05:39.213962078 CEST	192.168.2.5	130.195.130.101	a8a	Echo
Oct 25, 2024 20:05:39.245212078 CEST	192.168.2.5	130.195.58.209	a89	Echo
Oct 25, 2024 20:05:39.276451111 CEST	192.168.2.5	130.195.67.190	a88	Echo
Oct 25, 2024 20:05:39.307596922 CEST	192.168.2.5	130.195.213.67	a87	Echo
Oct 25, 2024 20:05:39.339009047 CEST	192.168.2.5	130.195.176.212	a86	Echo
Oct 25, 2024 20:05:39.370235920 CEST	192.168.2.5	130.195.90.176	a85	Echo
Oct 25, 2024 20:05:39.401431084 CEST	192.168.2.5	130.195.189.90	a84	Echo
Oct 25, 2024 20:05:39.423615932 CEST	192.168.2.5	130.195.8.93	a83	Echo
Oct 25, 2024 20:05:39.432754040 CEST	192.168.2.5	130.195.206.188	a82	Echo
Oct 25, 2024 20:05:39.464495897 CEST	192.168.2.5	130.195.32.195	a81	Echo
Oct 25, 2024 20:05:39.464528084 CEST	192.168.2.5	130.195.58.148	a80	Echo
Oct 25, 2024 20:05:39.465992928 CEST	192.168.2.5	130.195.237.59	a7e	Echo
Oct 25, 2024 20:05:39.466064930 CEST	192.168.2.5	130.195.206.170	a7f	Echo
Oct 25, 2024 20:05:39.466192007 CEST	192.168.2.5	130.195.176.175	a7d	Echo
Oct 25, 2024 20:05:39.466357946 CEST	192.168.2.5	130.195.127.168	a7b	Echo
Oct 25, 2024 20:05:39.466445923 CEST	192.168.2.5	130.195.254.10	a7c	Echo
Oct 25, 2024 20:05:39.466516018 CEST	192.168.2.5	130.195.20.32	a7a	Echo
Oct 25, 2024 20:05:39.466649055 CEST	192.168.2.5	130.195.90.74	a79	Echo
Oct 25, 2024 20:05:39.466780901 CEST	192.168.2.5	130.195.29.141	a78	Echo
Oct 25, 2024 20:05:39.467000008 CEST	192.168.2.5	130.195.210.22	a77	Echo
Oct 25, 2024 20:05:39.467056036 CEST	192.168.2.5	130.195.26.18	a75	Echo
Oct 25, 2024 20:05:39.467051983 CEST	192.168.2.5	130.195.17.210	a76	Echo
Oct 25, 2024 20:05:39.467171907 CEST	192.168.2.5	130.195.99.248	a74	Echo
Oct 25, 2024 20:05:39.467355967 CEST	192.168.2.5	130.195.254.34	a72	Echo
Oct 25, 2024 20:05:39.467370033 CEST	192.168.2.5	130.195.195.118	a73	Echo
Oct 25, 2024 20:05:39.467483997 CEST	192.168.2.5	130.195.196.39	a71	Echo
Oct 25, 2024 20:05:39.495210886 CEST	192.168.2.5	130.195.127.30	a70	Echo
Oct 25, 2024 20:05:39.526664019 CEST	192.168.2.5	130.195.5.135	a6f	Echo
Oct 25, 2024 20:05:39.557951927 CEST	192.168.2.5	130.195.11.188	a6e	Echo
Oct 25, 2024 20:05:39.588948011 CEST	192.168.2.5	130.195.153.60	a6d	Echo
Oct 25, 2024 20:05:39.620347977 CEST	192.168.2.5	130.195.89.153	a6c	Echo
Oct 25, 2024 20:05:39.651706934 CEST	192.168.2.5	130.195.216.21	a6b	Echo
Oct 25, 2024 20:05:39.682624102 CEST	192.168.2.5	130.195.226.234	a6a	Echo
Oct 25, 2024 20:05:39.693701029 CEST	130.195.216.21	192.168.2.5	126b	Echo Reply
Oct 25, 2024 20:05:39.694180965 CEST	192.168.2.5	130.195.216.21	a69	Echo
Oct 25, 2024 20:05:39.713762999 CEST	192.168.2.5	130.195.143.113	a68	Echo
Oct 25, 2024 20:05:39.736749887 CEST	130.195.216.21	192.168.2.5	1269	Echo Reply
Oct 25, 2024 20:05:39.745217085 CEST	192.168.2.5	130.195.58.86	a67	Echo
Oct 25, 2024 20:05:39.777164936 CEST	192.168.2.5	130.195.81.227	a66	Echo
Oct 25, 2024 20:05:39.807702065 CEST	192.168.2.5	130.195.240.176	a65	Echo
Oct 25, 2024 20:05:39.839139938 CEST	192.168.2.5	130.195.64.241	a64	Echo
Oct 25, 2024 20:05:39.870537043 CEST	192.168.2.5	130.195.156.78	a63	Echo
Oct 25, 2024 20:05:39.901408911 CEST	192.168.2.5	130.195.226.214	a62	Echo
Oct 25, 2024 20:05:39.932688951 CEST	192.168.2.5	130.195.194.176	a61	Echo
Oct 25, 2024 20:05:39.964160919 CEST	192.168.2.5	130.195.24.20	a60	Echo
Oct 25, 2024 20:05:39.964445114 CEST	192.168.2.5	130.195.148.212	a5f	Echo
Oct 25, 2024 20:05:39.966263056 CEST	192.168.2.5	130.195.233.188	a5e	Echo
Oct 25, 2024 20:05:39.966268063 CEST	192.168.2.5	130.195.47.30	a5d	Echo
Oct 25, 2024 20:05:39.966376066 CEST	192.168.2.5	130.195.218.47	a5c	Echo
Oct 25, 2024 20:05:39.966476917 CEST	192.168.2.5	130.195.87.64	a5b	Echo
Oct 25, 2024 20:05:39.966499090 CEST	192.168.2.5	130.195.175.211	a5a	Echo
Oct 25, 2024 20:05:39.966728926 CEST	192.168.2.5	130.195.28.15	a59	Echo
Oct 25, 2024 20:05:39.966733932 CEST	192.168.2.5	130.195.122.149	a58	Echo
Oct 25, 2024 20:05:39.966746092 CEST	192.168.2.5	130.195.4.53	a57	Echo
Oct 25, 2024 20:05:39.966974974 CEST	192.168.2.5	130.195.74.220	a56	Echo
Oct 25, 2024 20:05:39.967125893 CEST	192.168.2.5	130.195.119.42	a55	Echo
Oct 25, 2024 20:05:39.967207909 CEST	192.168.2.5	130.195.101.177	a54	Echo
Oct 25, 2024 20:05:39.967272043 CEST	192.168.2.5	130.195.159.102	a53	Echo
Oct 25, 2024 20:05:39.967359066 CEST	192.168.2.5	130.195.24.90	a52	Echo
Oct 25, 2024 20:05:39.967411995 CEST	192.168.2.5	130.195.125.200	a51	Echo
Oct 25, 2024 20:05:39.995129108 CEST	192.168.2.5	130.195.251.148	a50	Echo
Oct 25, 2024 20:05:40.026401043 CEST	192.168.2.5	130.195.173.250	a4f	Echo
Oct 25, 2024 20:05:40.057706118 CEST	192.168.2.5	130.195.52.236	a4e	Echo
Oct 25, 2024 20:05:40.089009047 CEST	192.168.2.5	130.195.245.14	a4d	Echo
Oct 25, 2024 20:05:40.107903004 CEST	130.195.245.14	192.168.2.5	124d	Echo Reply
Oct 25, 2024 20:05:40.108313084 CEST	192.168.2.5	130.195.245.14	a4c	Echo
Oct 25, 2024 20:05:40.120692968 CEST	192.168.2.5	130.195.180.88	a4b	Echo
Oct 25, 2024 20:05:40.126415968 CEST	130.195.245.14	192.168.2.5	124c	Echo Reply
Oct 25, 2024 20:05:40.151506901 CEST	192.168.2.5	130.195.249.108	a4a	Echo
Oct 25, 2024 20:05:40.182679892 CEST	192.168.2.5	130.195.228.4	a49	Echo
Oct 25, 2024 20:05:40.213958025 CEST	192.168.2.5	130.195.123.227	a48	Echo
Oct 25, 2024 20:05:40.245337009 CEST	192.168.2.5	130.195.123.216	a47	Echo
Oct 25, 2024 20:05:40.276706934 CEST	192.168.2.5	130.195.92.112	a46	Echo
Oct 25, 2024 20:05:40.307969093 CEST	192.168.2.5	130.195.204.206	a45	Echo
Oct 25, 2024 20:05:40.338881016 CEST	192.168.2.5	130.195.93.161	a44	Echo
Oct 25, 2024 20:05:40.370115995 CEST	192.168.2.5	130.195.84.222	a43	Echo
Oct 25, 2024 20:05:40.401582956 CEST	192.168.2.5	130.195.131.133	a42	Echo
Oct 25, 2024 20:05:40.432801008 CEST	192.168.2.5	130.195.223.156	a41	Echo
Oct 25, 2024 20:05:40.474535942 CEST	192.168.2.5	130.195.215.62	a40	Echo
Oct 25, 2024 20:05:40.474639893 CEST	192.168.2.5	130.195.190.149	a3f	Echo
Oct 25, 2024 20:05:40.475816965 CEST	192.168.2.5	130.195.98.137	a3e	Echo
Oct 25, 2024 20:05:40.475863934 CEST	192.168.2.5	130.195.0.232	a3d	Echo
Oct 25, 2024 20:05:40.475944042 CEST	192.168.2.5	130.195.231.101	a3c	Echo
Oct 25, 2024 20:05:40.475985050 CEST	192.168.2.5	130.195.106.231	a3b	Echo
Oct 25, 2024 20:05:40.476037025 CEST	192.168.2.5	130.195.193.23	a3a	Echo
Oct 25, 2024 20:05:40.476098061 CEST	192.168.2.5	130.195.92.203	a39	Echo
Oct 25, 2024 20:05:40.476274967 CEST	192.168.2.5	130.195.63.225	a38	Echo
Oct 25, 2024 20:05:40.476303101 CEST	192.168.2.5	130.195.96.203	a37	Echo
Oct 25, 2024 20:05:40.476346016 CEST	192.168.2.5	130.195.246.96	a36	Echo
Oct 25, 2024 20:05:40.476423025 CEST	192.168.2.5	130.195.183.149	a35	Echo
Oct 25, 2024 20:05:40.476455927 CEST	192.168.2.5	130.195.185.12	a34	Echo
Oct 25, 2024 20:05:40.476521015 CEST	192.168.2.5	130.195.168.225	a33	Echo
Oct 25, 2024 20:05:40.476552010 CEST	192.168.2.5	130.195.73.59	a32	Echo
Oct 25, 2024 20:05:40.476603031 CEST	192.168.2.5	130.195.190.170	a31	Echo
Oct 25, 2024 20:05:40.476660013 CEST	192.168.2.5	130.195.136.154	a30	Echo
Oct 25, 2024 20:05:40.495134115 CEST	192.168.2.5	130.195.168.3	a2f	Echo
Oct 25, 2024 20:05:40.526503086 CEST	192.168.2.5	130.195.146.168	a2e	Echo
Oct 25, 2024 20:05:40.557651043 CEST	192.168.2.5	130.195.202.4	a2d	Echo
Oct 25, 2024 20:05:40.588912010 CEST	192.168.2.5	130.195.107.93	a2c	Echo
Oct 25, 2024 20:05:40.620183945 CEST	192.168.2.5	130.195.114.61	a2b	Echo
Oct 25, 2024 20:05:40.651411057 CEST	192.168.2.5	130.195.106.114	a2a	Echo
Oct 25, 2024 20:05:40.682888985 CEST	192.168.2.5	130.195.117.106	a29	Echo
Oct 25, 2024 20:05:40.714436054 CEST	192.168.2.5	130.195.230.37	a28	Echo
Oct 25, 2024 20:05:40.745218992 CEST	192.168.2.5	130.195.238.97	a27	Echo
Oct 25, 2024 20:05:40.776411057 CEST	192.168.2.5	130.195.18.72	a26	Echo
Oct 25, 2024 20:05:40.817187071 CEST	192.168.2.5	130.195.237.241	a25	Echo
Oct 25, 2024 20:05:40.839374065 CEST	192.168.2.5	130.195.48.163	a24	Echo
Oct 25, 2024 20:05:40.870376110 CEST	192.168.2.5	130.195.79.48	a23	Echo
Oct 25, 2024 20:05:40.902017117 CEST	192.168.2.5	130.195.101.79	a22	Echo
Oct 25, 2024 20:05:40.932748079 CEST	192.168.2.5	130.195.16.85	a21	Echo
Oct 25, 2024 20:05:40.964401007 CEST	192.168.2.5	130.195.35.181	a20	Echo
Oct 25, 2024 20:05:40.964494944 CEST	192.168.2.5	130.195.194.236	a1f	Echo
Oct 25, 2024 20:05:40.966020107 CEST	192.168.2.5	130.195.215.47	a1e	Echo
Oct 25, 2024 20:05:40.966103077 CEST	192.168.2.5	130.195.237.109	a1d	Echo
Oct 25, 2024 20:05:40.966124058 CEST	192.168.2.5	130.195.71.210	a1c	Echo
Oct 25, 2024 20:05:40.966260910 CEST	192.168.2.5	130.195.92.206	a1b	Echo
Oct 25, 2024 20:05:40.966284990 CEST	192.168.2.5	130.195.136.142	a1a	Echo
Oct 25, 2024 20:05:40.966397047 CEST	192.168.2.5	130.195.96.110	a19	Echo
Oct 25, 2024 20:05:40.966420889 CEST	192.168.2.5	130.195.130.101	a18	Echo
Oct 25, 2024 20:05:40.966520071 CEST	192.168.2.5	130.195.58.209	a17	Echo
Oct 25, 2024 20:05:40.966552019 CEST	192.168.2.5	130.195.67.190	a16	Echo
Oct 25, 2024 20:05:40.966649055 CEST	192.168.2.5	130.195.213.67	a15	Echo
Oct 25, 2024 20:05:40.966773033 CEST	192.168.2.5	130.195.176.212	a14	Echo
Oct 25, 2024 20:05:40.966845036 CEST	192.168.2.5	130.195.90.176	a13	Echo
Oct 25, 2024 20:05:40.966999054 CEST	192.168.2.5	130.195.189.90	a12	Echo
Oct 25, 2024 20:05:40.967256069 CEST	192.168.2.5	130.195.206.188	a11	Echo
Oct 25, 2024 20:05:40.995224953 CEST	192.168.2.5	130.195.220.205	a10	Echo
Oct 25, 2024 20:05:41.026457071 CEST	192.168.2.5	130.195.186.237	a0f	Echo
Oct 25, 2024 20:05:41.057602882 CEST	192.168.2.5	130.195.255.69	a0e	Echo
Oct 25, 2024 20:05:41.088898897 CEST	192.168.2.5	130.195.236.90	a0d	Echo
Oct 25, 2024 20:05:41.120131969 CEST	192.168.2.5	130.195.126.93	a0c	Echo
Oct 25, 2024 20:05:41.151727915 CEST	192.168.2.5	130.195.84.17	a0b	Echo
Oct 25, 2024 20:05:41.182764053 CEST	192.168.2.5	130.195.242.77	a0a	Echo
Oct 25, 2024 20:05:41.214390993 CEST	192.168.2.5	130.195.203.106	a09	Echo
Oct 25, 2024 20:05:41.245151997 CEST	192.168.2.5	130.195.46.169	a08	Echo
Oct 25, 2024 20:05:41.276345968 CEST	192.168.2.5	130.195.42.247	a07	Echo
Oct 25, 2024 20:05:41.307626009 CEST	192.168.2.5	130.195.45.43	a06	Echo
Oct 25, 2024 20:05:41.338959932 CEST	192.168.2.5	130.195.14.47	a05	Echo
Oct 25, 2024 20:05:41.370177031 CEST	192.168.2.5	130.195.20.186	a04	Echo
Oct 25, 2024 20:05:41.401345015 CEST	192.168.2.5	130.195.183.127	a03	Echo
Oct 25, 2024 20:05:41.432754040 CEST	192.168.2.5	130.195.40.158	a02	Echo
Oct 25, 2024 20:05:41.465085030 CEST	192.168.2.5	130.195.243.14	a01	Echo
Oct 25, 2024 20:05:41.465085030 CEST	192.168.2.5	130.195.58.148	a00	Echo
Oct 25, 2024 20:05:41.467642069 CEST	192.168.2.5	130.195.127.30	9ff	Echo
Oct 25, 2024 20:05:41.467788935 CEST	192.168.2.5	130.195.5.135	9fe	Echo
Oct 25, 2024 20:05:41.467875957 CEST	192.168.2.5	130.195.11.188	9fd	Echo
Oct 25, 2024 20:05:41.470961094 CEST	192.168.2.5	130.195.153.60	9fc	Echo
Oct 25, 2024 20:05:41.471075058 CEST	192.168.2.5	130.195.89.153	9fb	Echo
Oct 25, 2024 20:05:41.471256971 CEST	192.168.2.5	130.195.226.234	9fa	Echo
Oct 25, 2024 20:05:41.471375942 CEST	192.168.2.5	130.195.143.113	9f9	Echo
Oct 25, 2024 20:05:41.471535921 CEST	192.168.2.5	130.195.58.86	9f8	Echo
Oct 25, 2024 20:05:41.471662045 CEST	192.168.2.5	130.195.81.227	9f7	Echo
Oct 25, 2024 20:05:41.472023964 CEST	192.168.2.5	130.195.240.176	9f6	Echo
Oct 25, 2024 20:05:41.472179890 CEST	192.168.2.5	130.195.64.241	9f5	Echo
Oct 25, 2024 20:05:41.472285032 CEST	192.168.2.5	130.195.156.78	9f4	Echo
Oct 25, 2024 20:05:41.472563982 CEST	192.168.2.5	130.195.226.214	9f3	Echo
Oct 25, 2024 20:05:41.472687960 CEST	192.168.2.5	130.195.194.176	9f2	Echo
Oct 25, 2024 20:05:41.488380909 CEST	130.195.243.14	192.168.2.5	1201	Echo Reply
Oct 25, 2024 20:05:41.490382910 CEST	192.168.2.5	130.195.243.14	9f1	Echo
Oct 25, 2024 20:05:41.495296001 CEST	192.168.2.5	130.195.163.66	9f0	Echo
Oct 25, 2024 20:05:41.513398886 CEST	130.195.243.14	192.168.2.5	11f1	Echo Reply
Oct 25, 2024 20:05:41.526602030 CEST	192.168.2.5	130.195.146.65	9ef	Echo
Oct 25, 2024 20:05:41.557833910 CEST	192.168.2.5	130.195.109.64	9ee	Echo
Oct 25, 2024 20:05:41.588927031 CEST	192.168.2.5	130.195.7.228	9ed	Echo
Oct 25, 2024 20:05:41.620376110 CEST	192.168.2.5	130.195.10.152	9ec	Echo
Oct 25, 2024 20:05:41.651374102 CEST	192.168.2.5	130.195.213.9	9eb	Echo
Oct 25, 2024 20:05:41.682774067 CEST	192.168.2.5	130.195.92.126	9ea	Echo
Oct 25, 2024 20:05:41.683743000 CEST	130.195.213.9	192.168.2.5	11eb	Echo Reply
Oct 25, 2024 20:05:41.684179068 CEST	192.168.2.5	130.195.213.9	9e9	Echo
Oct 25, 2024 20:05:41.713814020 CEST	192.168.2.5	130.195.52.156	9e8	Echo
Oct 25, 2024 20:05:41.715648890 CEST	130.195.213.9	192.168.2.5	11e9	Echo Reply
Oct 25, 2024 20:05:41.745019913 CEST	192.168.2.5	130.195.199.8	9e7	Echo
Oct 25, 2024 20:05:41.776316881 CEST	192.168.2.5	130.195.124.199	9e6	Echo
Oct 25, 2024 20:05:41.807802916 CEST	192.168.2.5	130.195.72.118	9e5	Echo
Oct 25, 2024 20:05:41.839219093 CEST	192.168.2.5	130.195.85.154	9e4	Echo
Oct 25, 2024 20:05:41.870282888 CEST	192.168.2.5	130.195.4.171	9e3	Echo
Oct 25, 2024 20:05:41.901477098 CEST	192.168.2.5	130.195.190.227	9e2	Echo
Oct 25, 2024 20:05:41.932737112 CEST	192.168.2.5	130.195.220.229	9e1	Echo
Oct 25, 2024 20:05:41.964481115 CEST	192.168.2.5	130.195.148.212	9df	Echo
Oct 25, 2024 20:05:41.964514971 CEST	192.168.2.5	130.195.40.147	9e0	Echo
Oct 25, 2024 20:05:41.965565920 CEST	192.168.2.5	130.195.251.148	9de	Echo
Oct 25, 2024 20:05:41.965764046 CEST	192.168.2.5	130.195.52.236	9dc	Echo
Oct 25, 2024 20:05:41.965778112 CEST	192.168.2.5	130.195.173.250	9dd	Echo
Oct 25, 2024 20:05:41.965852022 CEST	192.168.2.5	130.195.249.108	9da	Echo
Oct 25, 2024 20:05:41.965878963 CEST	192.168.2.5	130.195.180.88	9db	Echo
Oct 25, 2024 20:05:41.965904951 CEST	192.168.2.5	130.195.228.4	9d9	Echo
Oct 25, 2024 20:05:41.966048002 CEST	192.168.2.5	130.195.123.216	9d7	Echo
Oct 25, 2024 20:05:41.966114044 CEST	192.168.2.5	130.195.123.227	9d8	Echo
Oct 25, 2024 20:05:41.966140985 CEST	192.168.2.5	130.195.92.112	9d6	Echo
Oct 25, 2024 20:05:41.966207981 CEST	192.168.2.5	130.195.204.206	9d5	Echo
Oct 25, 2024 20:05:41.966243029 CEST	192.168.2.5	130.195.93.161	9d4	Echo
Oct 25, 2024 20:05:41.966366053 CEST	192.168.2.5	130.195.131.133	9d2	Echo
Oct 25, 2024 20:05:41.966455936 CEST	192.168.2.5	130.195.84.222	9d3	Echo
Oct 25, 2024 20:05:41.966479063 CEST	192.168.2.5	130.195.223.156	9d1	Echo
Oct 25, 2024 20:05:41.995106936 CEST	192.168.2.5	130.195.12.196	9d0	Echo
Oct 25, 2024 20:05:42.026309967 CEST	192.168.2.5	130.195.243.206	9cf	Echo
Oct 25, 2024 20:05:42.057979107 CEST	192.168.2.5	130.195.229.13	9ce	Echo
Oct 25, 2024 20:05:42.088881016 CEST	192.168.2.5	130.195.66.124	9cd	Echo
Oct 25, 2024 20:05:42.120105028 CEST	192.168.2.5	130.195.100.66	9cc	Echo
Oct 25, 2024 20:05:42.151480913 CEST	192.168.2.5	130.195.147.32	9cb	Echo
Oct 25, 2024 20:05:42.182735920 CEST	192.168.2.5	130.195.67.140	9ca	Echo
Oct 25, 2024 20:05:42.214029074 CEST	192.168.2.5	130.195.27.10	9c9	Echo
Oct 25, 2024 20:05:42.248089075 CEST	192.168.2.5	130.195.150.169	9c8	Echo
Oct 25, 2024 20:05:42.277354002 CEST	192.168.2.5	130.195.2.221	9c7	Echo
Oct 25, 2024 20:05:42.308593035 CEST	192.168.2.5	130.195.133.153	9c6	Echo
Oct 25, 2024 20:05:42.339459896 CEST	192.168.2.5	130.195.89.228	9c5	Echo
Oct 25, 2024 20:05:42.370242119 CEST	192.168.2.5	130.195.168.201	9c4	Echo
Oct 25, 2024 20:05:42.402704000 CEST	192.168.2.5	130.195.159.169	9c3	Echo
Oct 25, 2024 20:05:42.433067083 CEST	192.168.2.5	130.195.206.64	9c2	Echo
Oct 25, 2024 20:05:42.465285063 CEST	192.168.2.5	130.195.47.93	9c1	Echo
Oct 25, 2024 20:05:42.465598106 CEST	192.168.2.5	130.195.190.149	9c0	Echo
Oct 25, 2024 20:05:42.466943026 CEST	192.168.2.5	130.195.168.3	9bf	Echo
Oct 25, 2024 20:05:42.467102051 CEST	192.168.2.5	130.195.146.168	9be	Echo
Oct 25, 2024 20:05:42.467411995 CEST	192.168.2.5	130.195.202.4	9bd	Echo
Oct 25, 2024 20:05:42.467495918 CEST	192.168.2.5	130.195.107.93	9bc	Echo
Oct 25, 2024 20:05:42.467582941 CEST	192.168.2.5	130.195.114.61	9bb	Echo
Oct 25, 2024 20:05:42.467870951 CEST	192.168.2.5	130.195.106.114	9ba	Echo
Oct 25, 2024 20:05:42.467993975 CEST	192.168.2.5	130.195.117.106	9b9	Echo
Oct 25, 2024 20:05:42.468136072 CEST	192.168.2.5	130.195.230.37	9b8	Echo
Oct 25, 2024 20:05:42.468221903 CEST	192.168.2.5	130.195.238.97	9b7	Echo
Oct 25, 2024 20:05:42.468516111 CEST	192.168.2.5	130.195.18.72	9b6	Echo
Oct 25, 2024 20:05:42.468617916 CEST	192.168.2.5	130.195.237.241	9b5	Echo
Oct 25, 2024 20:05:42.468890905 CEST	192.168.2.5	130.195.48.163	9b4	Echo
Oct 25, 2024 20:05:42.468966961 CEST	192.168.2.5	130.195.79.48	9b3	Echo
Oct 25, 2024 20:05:42.469158888 CEST	192.168.2.5	130.195.101.79	9b2	Echo
Oct 25, 2024 20:05:42.469245911 CEST	192.168.2.5	130.195.16.85	9b1	Echo
Oct 25, 2024 20:05:42.496906042 CEST	192.168.2.5	130.195.10.132	9b0	Echo
Oct 25, 2024 20:05:42.538152933 CEST	192.168.2.5	130.195.18.165	9af	Echo
Oct 25, 2024 20:05:42.573551893 CEST	192.168.2.5	130.195.145.203	9ae	Echo
Oct 25, 2024 20:05:42.629689932 CEST	192.168.2.5	130.195.177.168	9ad	Echo
Oct 25, 2024 20:05:42.661000013 CEST	192.168.2.5	130.195.151.68	9ac	Echo
Oct 25, 2024 20:05:42.692567110 CEST	192.168.2.5	130.195.15.151	9ab	Echo
Oct 25, 2024 20:05:42.720134974 CEST	192.168.2.5	130.195.68.15	9aa	Echo
Oct 25, 2024 20:05:42.768532038 CEST	192.168.2.5	130.195.105.193	9a9	Echo
Oct 25, 2024 20:05:42.797415018 CEST	192.168.2.5	130.195.63.146	9a8	Echo
Oct 25, 2024 20:05:42.804827929 CEST	192.168.2.5	130.195.10.132	9a7	Echo
Oct 25, 2024 20:05:42.827230930 CEST	192.168.2.5	130.195.196.140	9a6	Echo
Oct 25, 2024 20:05:42.898169994 CEST	192.168.2.5	130.195.252.164	9a5	Echo
Oct 25, 2024 20:05:42.934155941 CEST	192.168.2.5	130.195.128.235	9a4	Echo
Oct 25, 2024 20:05:42.963973999 CEST	192.168.2.5	130.195.35.181	9a3	Echo
Oct 25, 2024 20:05:42.964323997 CEST	192.168.2.5	130.195.52.18	9a2	Echo
Oct 25, 2024 20:05:42.965853930 CEST	192.168.2.5	130.195.220.205	9a1	Echo
Oct 25, 2024 20:05:42.965924025 CEST	192.168.2.5	130.195.186.237	9a0	Echo
Oct 25, 2024 20:05:42.966027975 CEST	192.168.2.5	130.195.255.69	99f	Echo
Oct 25, 2024 20:05:42.966094971 CEST	192.168.2.5	130.195.236.90	99e	Echo
Oct 25, 2024 20:05:42.966228962 CEST	192.168.2.5	130.195.126.93	99d	Echo
Oct 25, 2024 20:05:42.966270924 CEST	192.168.2.5	130.195.84.17	99c	Echo
Oct 25, 2024 20:05:42.966399908 CEST	192.168.2.5	130.195.242.77	99b	Echo
Oct 25, 2024 20:05:42.966471910 CEST	192.168.2.5	130.195.203.106	99a	Echo
Oct 25, 2024 20:05:42.966557980 CEST	192.168.2.5	130.195.46.169	999	Echo
Oct 25, 2024 20:05:42.966613054 CEST	192.168.2.5	130.195.42.247	998	Echo
Oct 25, 2024 20:05:42.966694117 CEST	192.168.2.5	130.195.45.43	997	Echo
Oct 25, 2024 20:05:42.966768980 CEST	192.168.2.5	130.195.14.47	996	Echo
Oct 25, 2024 20:05:42.966912985 CEST	192.168.2.5	130.195.20.186	995	Echo
Oct 25, 2024 20:05:42.966974020 CEST	192.168.2.5	130.195.183.127	994	Echo
Oct 25, 2024 20:05:42.967029095 CEST	192.168.2.5	130.195.40.158	993	Echo
Oct 25, 2024 20:05:42.995105982 CEST	192.168.2.5	130.195.91.255	992	Echo
Oct 25, 2024 20:05:43.026400089 CEST	192.168.2.5	130.195.14.179	991	Echo
Oct 25, 2024 20:05:43.057605982 CEST	192.168.2.5	130.195.75.152	990	Echo
Oct 25, 2024 20:05:43.088855982 CEST	192.168.2.5	130.195.102.119	98f	Echo
Oct 25, 2024 20:05:43.120094061 CEST	192.168.2.5	130.195.65.121	98e	Echo
Oct 25, 2024 20:05:43.151346922 CEST	192.168.2.5	130.195.164.65	98d	Echo
Oct 25, 2024 20:05:43.182693958 CEST	192.168.2.5	130.195.128.164	98c	Echo
Oct 25, 2024 20:05:43.213902950 CEST	192.168.2.5	130.195.94.114	98b	Echo
Oct 25, 2024 20:05:43.245126963 CEST	192.168.2.5	130.195.24.133	98a	Echo
Oct 25, 2024 20:05:43.276411057 CEST	192.168.2.5	130.195.117.236	989	Echo
Oct 25, 2024 20:05:43.307658911 CEST	192.168.2.5	130.195.185.51	988	Echo
Oct 25, 2024 20:05:43.338843107 CEST	192.168.2.5	130.195.68.224	987	Echo
Oct 25, 2024 20:05:43.370289087 CEST	192.168.2.5	130.195.188.204	986	Echo
Oct 25, 2024 20:05:43.401396990 CEST	192.168.2.5	130.195.67.138	985	Echo
Oct 25, 2024 20:05:43.432595968 CEST	192.168.2.5	130.195.36.119	984	Echo
Oct 25, 2024 20:05:43.464601994 CEST	192.168.2.5	130.195.102.17	983	Echo
Oct 25, 2024 20:05:43.465747118 CEST	192.168.2.5	130.195.163.66	982	Echo
Oct 25, 2024 20:05:43.465879917 CEST	192.168.2.5	130.195.146.65	981	Echo
Oct 25, 2024 20:05:43.465950966 CEST	192.168.2.5	130.195.109.64	980	Echo
Oct 25, 2024 20:05:43.466041088 CEST	192.168.2.5	130.195.7.228	97f	Echo
Oct 25, 2024 20:05:43.466106892 CEST	192.168.2.5	130.195.10.152	97e	Echo
Oct 25, 2024 20:05:43.466207981 CEST	192.168.2.5	130.195.92.126	97d	Echo
Oct 25, 2024 20:05:43.466279030 CEST	192.168.2.5	130.195.52.156	97c	Echo
Oct 25, 2024 20:05:43.466356993 CEST	192.168.2.5	130.195.199.8	97b	Echo
Oct 25, 2024 20:05:43.466569901 CEST	192.168.2.5	130.195.124.199	97a	Echo
Oct 25, 2024 20:05:43.466569901 CEST	192.168.2.5	130.195.72.118	979	Echo
Oct 25, 2024 20:05:43.466721058 CEST	192.168.2.5	130.195.85.154	978	Echo
Oct 25, 2024 20:05:43.466761112 CEST	192.168.2.5	130.195.4.171	977	Echo
Oct 25, 2024 20:05:43.466881037 CEST	192.168.2.5	130.195.190.227	976	Echo
Oct 25, 2024 20:05:43.466967106 CEST	192.168.2.5	130.195.220.229	975	Echo
Oct 25, 2024 20:05:43.495069027 CEST	192.168.2.5	130.195.26.105	974	Echo
Oct 25, 2024 20:05:43.526406050 CEST	192.168.2.5	130.195.74.234	973	Echo
Oct 25, 2024 20:05:43.557637930 CEST	192.168.2.5	130.195.255.128	972	Echo
Oct 25, 2024 20:05:43.588943958 CEST	192.168.2.5	130.195.30.255	971	Echo
Oct 25, 2024 20:05:43.620054960 CEST	192.168.2.5	130.195.37.31	970	Echo
Oct 25, 2024 20:05:43.651381969 CEST	192.168.2.5	130.195.156.5	96f	Echo
Oct 25, 2024 20:05:43.682549000 CEST	192.168.2.5	130.195.77.242	96e	Echo
Oct 25, 2024 20:05:43.713984966 CEST	192.168.2.5	130.195.12.118	96d	Echo
Oct 25, 2024 20:05:43.745239019 CEST	192.168.2.5	130.195.10.201	96c	Echo
Oct 25, 2024 20:05:43.776375055 CEST	192.168.2.5	130.195.212.67	96b	Echo
Oct 25, 2024 20:05:43.807594061 CEST	192.168.2.5	130.195.137.136	96a	Echo
Oct 25, 2024 20:05:43.838982105 CEST	192.168.2.5	130.195.230.137	969	Echo
Oct 25, 2024 20:05:43.870115995 CEST	192.168.2.5	130.195.81.142	968	Echo
Oct 25, 2024 20:05:43.901499033 CEST	192.168.2.5	130.195.80.87	967	Echo
Oct 25, 2024 20:05:43.932661057 CEST	192.168.2.5	130.195.82.74	966	Echo
Oct 25, 2024 20:05:43.964185953 CEST	192.168.2.5	130.195.40.147	965	Echo
Oct 25, 2024 20:05:43.964435101 CEST	192.168.2.5	130.195.24.203	964	Echo
Oct 25, 2024 20:05:43.966109991 CEST	192.168.2.5	130.195.12.196	963	Echo
Oct 25, 2024 20:05:43.966176987 CEST	192.168.2.5	130.195.243.206	962	Echo
Oct 25, 2024 20:05:43.966334105 CEST	192.168.2.5	130.195.229.13	961	Echo
Oct 25, 2024 20:05:43.966427088 CEST	192.168.2.5	130.195.66.124	960	Echo
Oct 25, 2024 20:05:43.966506004 CEST	192.168.2.5	130.195.100.66	95f	Echo
Oct 25, 2024 20:05:43.966644049 CEST	192.168.2.5	130.195.147.32	95e	Echo
Oct 25, 2024 20:05:43.966725111 CEST	192.168.2.5	130.195.67.140	95d	Echo
Oct 25, 2024 20:05:43.966784000 CEST	192.168.2.5	130.195.27.10	95c	Echo
Oct 25, 2024 20:05:43.966852903 CEST	192.168.2.5	130.195.150.169	95b	Echo
Oct 25, 2024 20:05:43.966917038 CEST	192.168.2.5	130.195.2.221	95a	Echo
Oct 25, 2024 20:05:43.967010975 CEST	192.168.2.5	130.195.133.153	959	Echo
Oct 25, 2024 20:05:43.967113972 CEST	192.168.2.5	130.195.89.228	958	Echo
Oct 25, 2024 20:05:43.967145920 CEST	192.168.2.5	130.195.168.201	957	Echo
Oct 25, 2024 20:05:43.967219114 CEST	192.168.2.5	130.195.159.169	956	Echo
Oct 25, 2024 20:05:43.967273951 CEST	192.168.2.5	130.195.206.64	955	Echo
Oct 25, 2024 20:05:43.995109081 CEST	192.168.2.5	130.195.40.171	954	Echo
Oct 25, 2024 20:05:44.026442051 CEST	192.168.2.5	130.195.57.167	953	Echo
Oct 25, 2024 20:05:44.057856083 CEST	192.168.2.5	130.195.127.128	952	Echo
Oct 25, 2024 20:05:44.088920116 CEST	192.168.2.5	130.195.37.128	951	Echo
Oct 25, 2024 20:05:44.120114088 CEST	192.168.2.5	130.195.69.101	950	Echo
Oct 25, 2024 20:05:44.151356936 CEST	192.168.2.5	130.195.221.71	94f	Echo
Oct 25, 2024 20:05:44.182755947 CEST	192.168.2.5	130.195.46.39	94e	Echo
Oct 25, 2024 20:05:44.213846922 CEST	192.168.2.5	130.195.94.105	94d	Echo
Oct 25, 2024 20:05:44.245234966 CEST	192.168.2.5	130.195.181.72	94c	Echo
Oct 25, 2024 20:05:44.276294947 CEST	192.168.2.5	130.195.12.209	94b	Echo
Oct 25, 2024 20:05:44.307625055 CEST	192.168.2.5	130.195.163.12	94a	Echo
Oct 25, 2024 20:05:44.338819981 CEST	192.168.2.5	130.195.84.143	949	Echo
Oct 25, 2024 20:05:44.370090008 CEST	192.168.2.5	130.195.88.202	948	Echo
Oct 25, 2024 20:05:44.401537895 CEST	192.168.2.5	130.195.32.89	947	Echo
Oct 25, 2024 20:05:44.432771921 CEST	192.168.2.5	130.195.61.32	946	Echo
Oct 25, 2024 20:05:44.464091063 CEST	192.168.2.5	130.195.47.93	945	Echo
Oct 25, 2024 20:05:44.464175940 CEST	192.168.2.5	130.195.50.61	944	Echo
Oct 25, 2024 20:05:44.465512991 CEST	192.168.2.5	130.195.18.165	943	Echo
Oct 25, 2024 20:05:44.465517998 CEST	192.168.2.5	130.195.177.168	941	Echo
Oct 25, 2024 20:05:44.465574026 CEST	192.168.2.5	130.195.151.68	940	Echo
Oct 25, 2024 20:05:44.465637922 CEST	192.168.2.5	130.195.145.203	942	Echo
Oct 25, 2024 20:05:44.465708971 CEST	192.168.2.5	130.195.15.151	93f	Echo
Oct 25, 2024 20:05:44.465786934 CEST	192.168.2.5	130.195.68.15	93e	Echo
Oct 25, 2024 20:05:44.466022968 CEST	192.168.2.5	130.195.105.193	93d	Echo
Oct 25, 2024 20:05:44.466053963 CEST	192.168.2.5	130.195.63.146	93c	Echo
Oct 25, 2024 20:05:44.466088057 CEST	192.168.2.5	130.195.196.140	93b	Echo
Oct 25, 2024 20:05:44.466283083 CEST	192.168.2.5	130.195.252.164	93a	Echo
Oct 25, 2024 20:05:44.466320038 CEST	192.168.2.5	130.195.128.235	939	Echo
Oct 25, 2024 20:05:44.495208979 CEST	192.168.2.5	130.195.45.153	938	Echo
Oct 25, 2024 20:05:44.526380062 CEST	192.168.2.5	130.195.99.5	937	Echo
Oct 25, 2024 20:05:44.557667971 CEST	192.168.2.5	130.195.30.123	936	Echo
Oct 25, 2024 20:05:44.588977098 CEST	192.168.2.5	130.195.83.195	935	Echo
Oct 25, 2024 20:05:44.620276928 CEST	192.168.2.5	130.195.84.144	934	Echo
Oct 25, 2024 20:05:44.651418924 CEST	192.168.2.5	130.195.227.134	933	Echo
Oct 25, 2024 20:05:44.682526112 CEST	192.168.2.5	130.195.142.222	932	Echo
Oct 25, 2024 20:05:44.713851929 CEST	192.168.2.5	130.195.29.239	931	Echo
Oct 25, 2024 20:05:44.745451927 CEST	192.168.2.5	130.195.67.165	930	Echo
Oct 25, 2024 20:05:44.776431084 CEST	192.168.2.5	130.195.222.182	92f	Echo
Oct 25, 2024 20:05:44.807746887 CEST	192.168.2.5	130.195.186.248	92e	Echo
Oct 25, 2024 20:05:44.838989019 CEST	192.168.2.5	130.195.217.107	92d	Echo
Oct 25, 2024 20:05:44.870121002 CEST	192.168.2.5	130.195.35.254	92c	Echo
Oct 25, 2024 20:05:44.901729107 CEST	192.168.2.5	130.195.214.35	92b	Echo
Oct 25, 2024 20:05:44.933360100 CEST	192.168.2.5	130.195.182.115	92a	Echo
Oct 25, 2024 20:05:44.968770027 CEST	192.168.2.5	130.195.52.18	928	Echo
Oct 25, 2024 20:05:44.968775034 CEST	192.168.2.5	130.195.117.133	929	Echo
Oct 25, 2024 20:05:44.975024939 CEST	192.168.2.5	130.195.91.255	927	Echo
Oct 25, 2024 20:05:44.975241899 CEST	192.168.2.5	130.195.14.179	926	Echo
Oct 25, 2024 20:05:44.975326061 CEST	192.168.2.5	130.195.75.152	925	Echo
Oct 25, 2024 20:05:44.975425005 CEST	192.168.2.5	130.195.102.119	924	Echo
Oct 25, 2024 20:05:44.975707054 CEST	192.168.2.5	130.195.65.121	923	Echo
Oct 25, 2024 20:05:44.975791931 CEST	192.168.2.5	130.195.164.65	922	Echo
Oct 25, 2024 20:05:44.976052999 CEST	192.168.2.5	130.195.128.164	921	Echo
Oct 25, 2024 20:05:44.976130009 CEST	192.168.2.5	130.195.94.114	920	Echo
Oct 25, 2024 20:05:44.976232052 CEST	192.168.2.5	130.195.24.133	91f	Echo
Oct 25, 2024 20:05:44.976481915 CEST	192.168.2.5	130.195.117.236	91e	Echo
Oct 25, 2024 20:05:44.976586103 CEST	192.168.2.5	130.195.185.51	91d	Echo
Oct 25, 2024 20:05:44.976706028 CEST	192.168.2.5	130.195.68.224	91c	Echo
Oct 25, 2024 20:05:44.976706028 CEST	192.168.2.5	130.195.188.204	91b	Echo
Oct 25, 2024 20:05:44.977015018 CEST	192.168.2.5	130.195.67.138	91a	Echo
Oct 25, 2024 20:05:44.977124929 CEST	192.168.2.5	130.195.36.119	919	Echo
Oct 25, 2024 20:05:44.995229959 CEST	192.168.2.5	130.195.98.62	918	Echo
Oct 25, 2024 20:05:45.026360989 CEST	192.168.2.5	130.195.243.38	917	Echo
Oct 25, 2024 20:05:45.057838917 CEST	192.168.2.5	130.195.68.55	916	Echo
Oct 25, 2024 20:05:45.089085102 CEST	192.168.2.5	130.195.238.58	915	Echo
Oct 25, 2024 20:05:45.120342016 CEST	192.168.2.5	130.195.71.98	914	Echo
Oct 25, 2024 20:05:45.156456947 CEST	192.168.2.5	130.195.185.80	913	Echo
Oct 25, 2024 20:05:45.206892014 CEST	192.168.2.5	130.195.18.231	912	Echo
Oct 25, 2024 20:05:45.230730057 CEST	192.168.2.5	130.195.31.181	911	Echo
Oct 25, 2024 20:05:45.280757904 CEST	192.168.2.5	130.195.53.106	910	Echo
Oct 25, 2024 20:05:45.292572975 CEST	192.168.2.5	130.195.153.84	90f	Echo
Oct 25, 2024 20:05:45.354567051 CEST	192.168.2.5	130.195.247.203	90e	Echo
Oct 25, 2024 20:05:45.372487068 CEST	192.168.2.5	130.195.62.227	90d	Echo
Oct 25, 2024 20:05:45.415747881 CEST	192.168.2.5	130.195.243.229	90c	Echo
Oct 25, 2024 20:05:45.450809002 CEST	192.168.2.5	130.195.127.183	90b	Echo
Oct 25, 2024 20:05:45.466075897 CEST	192.168.2.5	130.195.102.17	90a	Echo
Oct 25, 2024 20:05:45.485701084 CEST	192.168.2.5	130.195.97.6	909	Echo
Oct 25, 2024 20:05:45.486527920 CEST	192.168.2.5	130.195.26.105	908	Echo
Oct 25, 2024 20:05:45.487418890 CEST	192.168.2.5	130.195.74.234	907	Echo
Oct 25, 2024 20:05:45.488365889 CEST	192.168.2.5	130.195.30.255	905	Echo
Oct 25, 2024 20:05:45.488379955 CEST	192.168.2.5	130.195.255.128	906	Echo
Oct 25, 2024 20:05:45.488594055 CEST	192.168.2.5	130.195.37.31	904	Echo
Oct 25, 2024 20:05:45.489051104 CEST	192.168.2.5	130.195.156.5	903	Echo
Oct 25, 2024 20:05:45.489149094 CEST	192.168.2.5	130.195.77.242	902	Echo
Oct 25, 2024 20:05:45.489294052 CEST	192.168.2.5	130.195.12.118	901	Echo
Oct 25, 2024 20:05:45.490462065 CEST	192.168.2.5	130.195.10.201	900	Echo
Oct 25, 2024 20:05:45.492146969 CEST	192.168.2.5	130.195.212.67	8ff	Echo
Oct 25, 2024 20:05:45.492691040 CEST	192.168.2.5	130.195.230.137	8fd	Echo
Oct 25, 2024 20:05:45.492712021 CEST	192.168.2.5	130.195.137.136	8fe	Echo
Oct 25, 2024 20:05:45.493047953 CEST	192.168.2.5	130.195.81.142	8fc	Echo
Oct 25, 2024 20:05:45.493249893 CEST	192.168.2.5	130.195.80.87	8fb	Echo
Oct 25, 2024 20:05:45.493273973 CEST	192.168.2.5	130.195.82.74	8fa	Echo
Oct 25, 2024 20:05:45.510826111 CEST	192.168.2.5	130.195.178.185	8f9	Echo
Oct 25, 2024 20:05:45.542663097 CEST	192.168.2.5	130.195.109.238	8f8	Echo
Oct 25, 2024 20:05:45.573240995 CEST	192.168.2.5	130.195.92.35	8f7	Echo
Oct 25, 2024 20:05:45.604631901 CEST	192.168.2.5	130.195.255.115	8f6	Echo
Oct 25, 2024 20:05:45.635922909 CEST	192.168.2.5	130.195.246.255	8f5	Echo
Oct 25, 2024 20:05:45.666977882 CEST	192.168.2.5	130.195.211.40	8f4	Echo
Oct 25, 2024 20:05:45.698323965 CEST	192.168.2.5	130.195.13.185	8f3	Echo
Oct 25, 2024 20:05:45.729476929 CEST	192.168.2.5	130.195.249.188	8f2	Echo
Oct 25, 2024 20:05:45.760853052 CEST	192.168.2.5	130.195.49.77	8f1	Echo
Oct 25, 2024 20:05:45.792227983 CEST	192.168.2.5	130.195.164.87	8f0	Echo
Oct 25, 2024 20:05:45.823344946 CEST	192.168.2.5	130.195.108.164	8ef	Echo
Oct 25, 2024 20:05:45.854844093 CEST	192.168.2.5	130.195.71.109	8ee	Echo
Oct 25, 2024 20:05:45.885802031 CEST	192.168.2.5	130.195.26.214	8ed	Echo
Oct 25, 2024 20:05:45.917150974 CEST	192.168.2.5	130.195.53.131	8ec	Echo
Oct 25, 2024 20:05:45.948419094 CEST	192.168.2.5	130.195.136.108	8eb	Echo
Oct 25, 2024 20:05:45.964858055 CEST	192.168.2.5	130.195.24.203	8ea	Echo
Oct 25, 2024 20:05:45.966295004 CEST	192.168.2.5	130.195.40.171	8e9	Echo
Oct 25, 2024 20:05:45.966346025 CEST	192.168.2.5	130.195.57.167	8e8	Echo
Oct 25, 2024 20:05:45.966461897 CEST	192.168.2.5	130.195.127.128	8e7	Echo
Oct 25, 2024 20:05:45.966564894 CEST	192.168.2.5	130.195.37.128	8e6	Echo
Oct 25, 2024 20:05:45.966856003 CEST	192.168.2.5	130.195.69.101	8e5	Echo
Oct 25, 2024 20:05:45.967040062 CEST	192.168.2.5	130.195.46.39	8e3	Echo
Oct 25, 2024 20:05:45.967097044 CEST	192.168.2.5	130.195.221.71	8e4	Echo
Oct 25, 2024 20:05:45.967319012 CEST	192.168.2.5	130.195.94.105	8e2	Echo
Oct 25, 2024 20:05:45.967437029 CEST	192.168.2.5	130.195.181.72	8e1	Echo
Oct 25, 2024 20:05:45.967572927 CEST	192.168.2.5	130.195.12.209	8e0	Echo
Oct 25, 2024 20:05:45.967753887 CEST	192.168.2.5	130.195.163.12	8df	Echo
Oct 25, 2024 20:05:45.967834949 CEST	192.168.2.5	130.195.84.143	8de	Echo
Oct 25, 2024 20:05:45.968192101 CEST	192.168.2.5	130.195.88.202	8dd	Echo
Oct 25, 2024 20:05:45.968272924 CEST	192.168.2.5	130.195.32.89	8dc	Echo
Oct 25, 2024 20:05:45.968482971 CEST	192.168.2.5	130.195.61.32	8db	Echo
Oct 25, 2024 20:05:45.979621887 CEST	192.168.2.5	130.195.26.50	8da	Echo
Oct 25, 2024 20:05:46.010693073 CEST	192.168.2.5	130.195.29.26	8d9	Echo
Oct 25, 2024 20:05:46.041960001 CEST	192.168.2.5	130.195.239.28	8d8	Echo
Oct 25, 2024 20:05:46.086608887 CEST	192.168.2.5	130.195.13.239	8d7	Echo
Oct 25, 2024 20:05:46.105182886 CEST	192.168.2.5	130.195.208.18	8d6	Echo
Oct 25, 2024 20:05:46.136081934 CEST	192.168.2.5	130.195.201.118	8d5	Echo
Oct 25, 2024 20:05:46.167196989 CEST	192.168.2.5	130.195.232.159	8d4	Echo
Oct 25, 2024 20:05:46.198312998 CEST	192.168.2.5	130.195.74.255	8d3	Echo
Oct 25, 2024 20:05:46.229532957 CEST	192.168.2.5	130.195.130.213	8d2	Echo
Oct 25, 2024 20:05:46.260909081 CEST	192.168.2.5	130.195.249.248	8d1	Echo
Oct 25, 2024 20:05:46.292063951 CEST	192.168.2.5	130.195.234.132	8d0	Echo
Oct 25, 2024 20:05:46.323242903 CEST	192.168.2.5	130.195.176.211	8cf	Echo
Oct 25, 2024 20:05:46.354592085 CEST	192.168.2.5	130.195.242.122	8ce	Echo
Oct 25, 2024 20:05:46.385974884 CEST	192.168.2.5	130.195.103.27	8cd	Echo
Oct 25, 2024 20:05:46.417288065 CEST	192.168.2.5	130.195.33.109	8cc	Echo
Oct 25, 2024 20:05:46.448343039 CEST	192.168.2.5	130.195.198.247	8cb	Echo
Oct 25, 2024 20:05:46.464487076 CEST	192.168.2.5	130.195.50.61	8ca	Echo
Oct 25, 2024 20:05:46.465513945 CEST	192.168.2.5	130.195.99.5	8c8	Echo
Oct 25, 2024 20:05:46.465607882 CEST	192.168.2.5	130.195.45.153	8c9	Echo
Oct 25, 2024 20:05:46.465692043 CEST	192.168.2.5	130.195.83.195	8c6	Echo
Oct 25, 2024 20:05:46.465719938 CEST	192.168.2.5	130.195.84.144	8c5	Echo
Oct 25, 2024 20:05:46.465732098 CEST	192.168.2.5	130.195.30.123	8c7	Echo
Oct 25, 2024 20:05:46.465816021 CEST	192.168.2.5	130.195.227.134	8c4	Echo
Oct 25, 2024 20:05:46.465879917 CEST	192.168.2.5	130.195.29.239	8c2	Echo
Oct 25, 2024 20:05:46.465950966 CEST	192.168.2.5	130.195.67.165	8c1	Echo
Oct 25, 2024 20:05:46.465953112 CEST	192.168.2.5	130.195.142.222	8c3	Echo
Oct 25, 2024 20:05:46.466000080 CEST	192.168.2.5	130.195.222.182	8c0	Echo
Oct 25, 2024 20:05:46.466067076 CEST	192.168.2.5	130.195.186.248	8bf	Echo
Oct 25, 2024 20:05:46.466098070 CEST	192.168.2.5	130.195.217.107	8be	Echo
Oct 25, 2024 20:05:46.466226101 CEST	192.168.2.5	130.195.35.254	8bd	Echo
Oct 25, 2024 20:05:46.466258049 CEST	192.168.2.5	130.195.182.115	8bb	Echo
Oct 25, 2024 20:05:46.466310978 CEST	192.168.2.5	130.195.214.35	8bc	Echo
Oct 25, 2024 20:05:46.479602098 CEST	192.168.2.5	130.195.229.29	8ba	Echo
Oct 25, 2024 20:05:46.510901928 CEST	192.168.2.5	130.195.146.143	8b9	Echo
Oct 25, 2024 20:05:46.542109966 CEST	192.168.2.5	130.195.144.29	8b8	Echo
Oct 25, 2024 20:05:46.573615074 CEST	192.168.2.5	130.195.223.172	8b7	Echo
Oct 25, 2024 20:05:46.604576111 CEST	192.168.2.5	130.195.194.233	8b6	Echo
Oct 25, 2024 20:05:46.635936022 CEST	192.168.2.5	130.195.60.112	8b5	Echo
Oct 25, 2024 20:05:46.667083025 CEST	192.168.2.5	130.195.219.159	8b4	Echo
Oct 25, 2024 20:05:46.698285103 CEST	192.168.2.5	130.195.192.219	8b3	Echo
Oct 25, 2024 20:05:46.730165958 CEST	192.168.2.5	130.195.247.192	8b2	Echo
Oct 25, 2024 20:05:46.765903950 CEST	192.168.2.5	130.195.71.50	8b1	Echo
Oct 25, 2024 20:05:46.792064905 CEST	192.168.2.5	130.195.84.102	8b0	Echo
Oct 25, 2024 20:05:46.823342085 CEST	192.168.2.5	130.195.234.13	8af	Echo
Oct 25, 2024 20:05:46.855926037 CEST	192.168.2.5	130.195.211.105	8ae	Echo
Oct 25, 2024 20:05:46.885909081 CEST	192.168.2.5	130.195.214.178	8ad	Echo
Oct 25, 2024 20:05:46.917224884 CEST	192.168.2.5	130.195.95.214	8ac	Echo
Oct 25, 2024 20:05:46.948570967 CEST	192.168.2.5	130.195.63.96	8ab	Echo
Oct 25, 2024 20:05:46.964786053 CEST	192.168.2.5	130.195.117.133	8aa	Echo
Oct 25, 2024 20:05:46.967168093 CEST	192.168.2.5	130.195.98.62	8a9	Echo
Oct 25, 2024 20:05:46.967264891 CEST	192.168.2.5	130.195.243.38	8a8	Echo
Oct 25, 2024 20:05:46.967417955 CEST	192.168.2.5	130.195.68.55	8a7	Echo
Oct 25, 2024 20:05:46.967498064 CEST	192.168.2.5	130.195.238.58	8a6	Echo
Oct 25, 2024 20:05:46.967919111 CEST	192.168.2.5	130.195.71.98	8a5	Echo
Oct 25, 2024 20:05:46.968086004 CEST	192.168.2.5	130.195.185.80	8a4	Echo
Oct 25, 2024 20:05:46.968164921 CEST	192.168.2.5	130.195.18.231	8a3	Echo
Oct 25, 2024 20:05:46.968164921 CEST	192.168.2.5	130.195.31.181	8a2	Echo
Oct 25, 2024 20:05:46.968319893 CEST	192.168.2.5	130.195.53.106	8a1	Echo
Oct 25, 2024 20:05:46.968509912 CEST	192.168.2.5	130.195.153.84	8a0	Echo
Oct 25, 2024 20:05:46.968683004 CEST	192.168.2.5	130.195.247.203	89f	Echo
Oct 25, 2024 20:05:46.968841076 CEST	192.168.2.5	130.195.62.227	89e	Echo
Oct 25, 2024 20:05:46.968924999 CEST	192.168.2.5	130.195.243.229	89d	Echo
Oct 25, 2024 20:05:46.969552040 CEST	192.168.2.5	130.195.127.183	89c	Echo
Oct 25, 2024 20:05:46.982009888 CEST	192.168.2.5	130.195.3.121	89b	Echo
Oct 25, 2024 20:05:47.011034012 CEST	192.168.2.5	130.195.44.81	89a	Echo
Oct 25, 2024 20:05:47.042155981 CEST	192.168.2.5	130.195.135.180	899	Echo
Oct 25, 2024 20:05:47.076215982 CEST	192.168.2.5	130.195.80.85	898	Echo
Oct 25, 2024 20:05:47.104579926 CEST	192.168.2.5	130.195.196.24	897	Echo
Oct 25, 2024 20:05:47.135811090 CEST	192.168.2.5	130.195.17.214	896	Echo
Oct 25, 2024 20:05:47.167393923 CEST	192.168.2.5	130.195.210.239	895	Echo
Oct 25, 2024 20:05:47.198242903 CEST	192.168.2.5	130.195.100.207	894	Echo
Oct 25, 2024 20:05:47.229587078 CEST	192.168.2.5	130.195.21.155	893	Echo
Oct 25, 2024 20:05:47.261038065 CEST	192.168.2.5	130.195.188.107	892	Echo
Oct 25, 2024 20:05:47.292387009 CEST	192.168.2.5	130.195.14.192	891	Echo
Oct 25, 2024 20:05:47.323271990 CEST	192.168.2.5	130.195.118.63	890	Echo
Oct 25, 2024 20:05:47.354614019 CEST	192.168.2.5	130.195.175.97	88f	Echo
Oct 25, 2024 20:05:47.385879040 CEST	192.168.2.5	130.195.140.203	88e	Echo
Oct 25, 2024 20:05:47.417236090 CEST	192.168.2.5	130.195.150.116	88d	Echo
Oct 25, 2024 20:05:47.448533058 CEST	192.168.2.5	130.195.24.207	88c	Echo
Oct 25, 2024 20:05:47.464345932 CEST	192.168.2.5	130.195.97.6	88b	Echo
Oct 25, 2024 20:05:47.465639114 CEST	192.168.2.5	130.195.178.185	88a	Echo
Oct 25, 2024 20:05:47.465795040 CEST	192.168.2.5	130.195.92.35	888	Echo
Oct 25, 2024 20:05:47.465873003 CEST	192.168.2.5	130.195.109.238	889	Echo
Oct 25, 2024 20:05:47.465930939 CEST	192.168.2.5	130.195.246.255	886	Echo
Oct 25, 2024 20:05:47.465938091 CEST	192.168.2.5	130.195.255.115	887	Echo
Oct 25, 2024 20:05:47.466032028 CEST	192.168.2.5	130.195.211.40	885	Echo
Oct 25, 2024 20:05:47.466154099 CEST	192.168.2.5	130.195.13.185	884	Echo
Oct 25, 2024 20:05:47.466162920 CEST	192.168.2.5	130.195.249.188	883	Echo
Oct 25, 2024 20:05:47.466239929 CEST	192.168.2.5	130.195.49.77	882	Echo
Oct 25, 2024 20:05:47.466289043 CEST	192.168.2.5	130.195.164.87	881	Echo
Oct 25, 2024 20:05:47.466336966 CEST	192.168.2.5	130.195.108.164	880	Echo
Oct 25, 2024 20:05:47.466487885 CEST	192.168.2.5	130.195.53.131	87d	Echo
Oct 25, 2024 20:05:47.466526985 CEST	192.168.2.5	130.195.71.109	87f	Echo
Oct 25, 2024 20:05:47.466526985 CEST	192.168.2.5	130.195.26.214	87e	Echo
Oct 25, 2024 20:05:47.466736078 CEST	192.168.2.5	130.195.136.108	87c	Echo
Oct 25, 2024 20:05:47.479908943 CEST	192.168.2.5	130.195.129.128	87b	Echo
Oct 25, 2024 20:05:47.511759996 CEST	192.168.2.5	130.195.32.252	87a	Echo
Oct 25, 2024 20:05:47.542165041 CEST	192.168.2.5	130.195.114.24	879	Echo
Oct 25, 2024 20:05:47.573321104 CEST	192.168.2.5	130.195.154.1	878	Echo
Oct 25, 2024 20:05:47.604757071 CEST	192.168.2.5	130.195.20.11	877	Echo
Oct 25, 2024 20:05:47.636362076 CEST	192.168.2.5	130.195.238.5	876	Echo
Oct 25, 2024 20:05:47.667051077 CEST	192.168.2.5	130.195.31.236	875	Echo
Oct 25, 2024 20:05:47.698463917 CEST	192.168.2.5	130.195.13.32	874	Echo
Oct 25, 2024 20:05:47.729753017 CEST	192.168.2.5	130.195.243.101	873	Echo
Oct 25, 2024 20:05:47.761194944 CEST	192.168.2.5	130.195.59.225	872	Echo
Oct 25, 2024 20:05:47.792284012 CEST	192.168.2.5	130.195.63.134	871	Echo
Oct 25, 2024 20:05:47.823738098 CEST	192.168.2.5	130.195.92.249	870	Echo
Oct 25, 2024 20:05:47.856616974 CEST	192.168.2.5	130.195.116.148	86f	Echo
Oct 25, 2024 20:05:47.885962009 CEST	192.168.2.5	130.195.86.28	86e	Echo
Oct 25, 2024 20:05:47.917071104 CEST	192.168.2.5	130.195.191.97	86d	Echo
Oct 25, 2024 20:05:47.948699951 CEST	192.168.2.5	130.195.72.135	86c	Echo
Oct 25, 2024 20:05:47.966998100 CEST	192.168.2.5	130.195.26.50	86b	Echo
Oct 25, 2024 20:05:47.967142105 CEST	192.168.2.5	130.195.29.26	86a	Echo
Oct 25, 2024 20:05:47.967170954 CEST	192.168.2.5	130.195.239.28	869	Echo
Oct 25, 2024 20:05:47.967242002 CEST	192.168.2.5	130.195.13.239	868	Echo
Oct 25, 2024 20:05:47.967518091 CEST	192.168.2.5	130.195.208.18	867	Echo
Oct 25, 2024 20:05:47.967619896 CEST	192.168.2.5	130.195.201.118	866	Echo
Oct 25, 2024 20:05:47.967921972 CEST	192.168.2.5	130.195.74.255	864	Echo
Oct 25, 2024 20:05:47.967924118 CEST	192.168.2.5	130.195.232.159	865	Echo
Oct 25, 2024 20:05:47.968039036 CEST	192.168.2.5	130.195.130.213	863	Echo
Oct 25, 2024 20:05:47.968071938 CEST	192.168.2.5	130.195.249.248	862	Echo
Oct 25, 2024 20:05:47.968245983 CEST	192.168.2.5	130.195.234.132	861	Echo
Oct 25, 2024 20:05:47.968556881 CEST	192.168.2.5	130.195.242.122	85f	Echo
Oct 25, 2024 20:05:47.968586922 CEST	192.168.2.5	130.195.176.211	860	Echo
Oct 25, 2024 20:05:47.969034910 CEST	192.168.2.5	130.195.33.109	85d	Echo
Oct 25, 2024 20:05:47.969083071 CEST	192.168.2.5	130.195.103.27	85e	Echo
Oct 25, 2024 20:05:47.969173908 CEST	192.168.2.5	130.195.198.247	85c	Echo
Oct 25, 2024 20:05:47.979792118 CEST	192.168.2.5	130.195.243.71	85b	Echo
Oct 25, 2024 20:05:48.011209965 CEST	192.168.2.5	130.195.173.83	85a	Echo
Oct 25, 2024 20:05:48.042083979 CEST	192.168.2.5	130.195.110.4	859	Echo
Oct 25, 2024 20:05:48.074881077 CEST	192.168.2.5	130.195.184.253	858	Echo
Oct 25, 2024 20:05:48.107877970 CEST	192.168.2.5	130.195.118.9	857	Echo
Oct 25, 2024 20:05:48.165425062 CEST	192.168.2.5	130.195.5.246	856	Echo
Oct 25, 2024 20:05:48.198693037 CEST	192.168.2.5	130.195.119.239	855	Echo
Oct 25, 2024 20:05:48.229485989 CEST	192.168.2.5	130.195.228.34	854	Echo
Oct 25, 2024 20:05:48.261147022 CEST	192.168.2.5	130.195.210.86	853	Echo
Oct 25, 2024 20:05:48.292465925 CEST	192.168.2.5	130.195.30.102	852	Echo
Oct 25, 2024 20:05:48.323198080 CEST	192.168.2.5	130.195.60.116	851	Echo
Oct 25, 2024 20:05:48.354574919 CEST	192.168.2.5	130.195.175.60	850	Echo
Oct 25, 2024 20:05:48.385893106 CEST	192.168.2.5	130.195.41.28	84f	Echo
Oct 25, 2024 20:05:48.417157888 CEST	192.168.2.5	130.195.150.157	84e	Echo
Oct 25, 2024 20:05:48.448434114 CEST	192.168.2.5	130.195.165.226	84d	Echo
Oct 25, 2024 20:05:48.462903976 CEST	192.168.2.5	130.195.5.246	84c	Echo
Oct 25, 2024 20:05:48.465641975 CEST	192.168.2.5	130.195.229.29	84b	Echo
Oct 25, 2024 20:05:48.465660095 CEST	192.168.2.5	130.195.146.143	84a	Echo
Oct 25, 2024 20:05:48.465899944 CEST	192.168.2.5	130.195.144.29	849	Echo
Oct 25, 2024 20:05:48.465980053 CEST	192.168.2.5	130.195.194.233	847	Echo
Oct 25, 2024 20:05:48.466062069 CEST	192.168.2.5	130.195.60.112	846	Echo
Oct 25, 2024 20:05:48.466073036 CEST	192.168.2.5	130.195.223.172	848	Echo
Oct 25, 2024 20:05:48.466279030 CEST	192.168.2.5	130.195.219.159	845	Echo
Oct 25, 2024 20:05:48.466444969 CEST	192.168.2.5	130.195.192.219	844	Echo
Oct 25, 2024 20:05:48.466649055 CEST	192.168.2.5	130.195.247.192	843	Echo
Oct 25, 2024 20:05:48.466649055 CEST	192.168.2.5	130.195.71.50	842	Echo
Oct 25, 2024 20:05:48.466804981 CEST	192.168.2.5	130.195.84.102	841	Echo
Oct 25, 2024 20:05:48.466995001 CEST	192.168.2.5	130.195.234.13	840	Echo
Oct 25, 2024 20:05:48.467005968 CEST	192.168.2.5	130.195.211.105	83f	Echo
Oct 25, 2024 20:05:48.467269897 CEST	192.168.2.5	130.195.214.178	83e	Echo
Oct 25, 2024 20:05:48.467274904 CEST	192.168.2.5	130.195.95.214	83d	Echo
Oct 25, 2024 20:05:48.467394114 CEST	192.168.2.5	130.195.63.96	83c	Echo
Oct 25, 2024 20:05:48.481219053 CEST	192.168.2.5	130.195.16.27	83b	Echo
Oct 25, 2024 20:05:48.510812998 CEST	192.168.2.5	130.195.244.7	83a	Echo
Oct 25, 2024 20:05:48.542330980 CEST	192.168.2.5	130.195.45.100	839	Echo
Oct 25, 2024 20:05:48.573491096 CEST	192.168.2.5	130.195.201.33	838	Echo
Oct 25, 2024 20:05:48.604662895 CEST	192.168.2.5	130.195.52.201	837	Echo
Oct 25, 2024 20:05:48.635953903 CEST	192.168.2.5	130.195.6.52	836	Echo
Oct 25, 2024 20:05:48.666985989 CEST	192.168.2.5	130.195.127.12	835	Echo
Oct 25, 2024 20:05:48.698396921 CEST	192.168.2.5	130.195.195.40	834	Echo
Oct 25, 2024 20:05:48.729691982 CEST	192.168.2.5	130.195.255.66	833	Echo
Oct 25, 2024 20:05:48.760719061 CEST	192.168.2.5	130.195.33.222	832	Echo
Oct 25, 2024 20:05:48.792438984 CEST	192.168.2.5	130.195.146.96	831	Echo
Oct 25, 2024 20:05:48.823551893 CEST	192.168.2.5	130.195.208.142	830	Echo
Oct 25, 2024 20:05:48.855470896 CEST	192.168.2.5	130.195.35.7	82f	Echo
Oct 25, 2024 20:05:48.885804892 CEST	192.168.2.5	130.195.241.39	82e	Echo
Oct 25, 2024 20:05:48.917259932 CEST	192.168.2.5	130.195.149.182	82d	Echo
Oct 25, 2024 20:05:48.948251963 CEST	192.168.2.5	130.195.64.39	82c	Echo
Oct 25, 2024 20:05:48.965363026 CEST	192.168.2.5	130.195.3.121	82b	Echo
Oct 25, 2024 20:05:48.965564013 CEST	192.168.2.5	130.195.44.81	82a	Echo
Oct 25, 2024 20:05:48.965692043 CEST	192.168.2.5	130.195.135.180	829	Echo
Oct 25, 2024 20:05:48.965754032 CEST	192.168.2.5	130.195.80.85	828	Echo
Oct 25, 2024 20:05:48.965827942 CEST	192.168.2.5	130.195.196.24	827	Echo
Oct 25, 2024 20:05:48.965852976 CEST	192.168.2.5	130.195.17.214	826	Echo
Oct 25, 2024 20:05:48.965982914 CEST	192.168.2.5	130.195.210.239	825	Echo
Oct 25, 2024 20:05:48.966031075 CEST	192.168.2.5	130.195.100.207	824	Echo
Oct 25, 2024 20:05:48.966120958 CEST	192.168.2.5	130.195.21.155	823	Echo
Oct 25, 2024 20:05:48.966140985 CEST	192.168.2.5	130.195.188.107	822	Echo
Oct 25, 2024 20:05:48.966253042 CEST	192.168.2.5	130.195.14.192	821	Echo
Oct 25, 2024 20:05:48.966346979 CEST	192.168.2.5	130.195.118.63	820	Echo
Oct 25, 2024 20:05:48.966454029 CEST	192.168.2.5	130.195.175.97	81f	Echo
Oct 25, 2024 20:05:48.966454983 CEST	192.168.2.5	130.195.140.203	81e	Echo
Oct 25, 2024 20:05:48.966550112 CEST	192.168.2.5	130.195.150.116	81d	Echo
Oct 25, 2024 20:05:48.966705084 CEST	192.168.2.5	130.195.24.207	81c	Echo
Oct 25, 2024 20:05:48.979646921 CEST	192.168.2.5	130.195.96.3	81b	Echo
Oct 25, 2024 20:05:49.011291027 CEST	192.168.2.5	130.195.76.164	81a	Echo
Oct 25, 2024 20:05:49.041969061 CEST	192.168.2.5	130.195.14.142	819	Echo
Oct 25, 2024 20:05:49.073882103 CEST	192.168.2.5	130.195.40.64	818	Echo
Oct 25, 2024 20:05:49.104809046 CEST	192.168.2.5	130.195.157.144	817	Echo
Oct 25, 2024 20:05:49.140544891 CEST	192.168.2.5	130.195.90.159	816	Echo
Oct 25, 2024 20:05:49.170842886 CEST	192.168.2.5	130.195.37.45	815	Echo
Oct 25, 2024 20:05:49.198899984 CEST	192.168.2.5	130.195.242.64	814	Echo
Oct 25, 2024 20:05:49.229557991 CEST	192.168.2.5	130.195.132.131	813	Echo
Oct 25, 2024 20:05:49.260961056 CEST	192.168.2.5	130.195.168.110	812	Echo
Oct 25, 2024 20:05:49.292109013 CEST	192.168.2.5	130.195.33.172	811	Echo
Oct 25, 2024 20:05:49.323529959 CEST	192.168.2.5	130.195.94.70	810	Echo
Oct 25, 2024 20:05:49.354716063 CEST	192.168.2.5	130.195.158.173	80f	Echo
Oct 25, 2024 20:05:49.385808945 CEST	192.168.2.5	130.195.155.149	80e	Echo
Oct 25, 2024 20:05:49.417339087 CEST	192.168.2.5	130.195.88.14	80d	Echo
Oct 25, 2024 20:05:49.448344946 CEST	192.168.2.5	130.195.219.49	80c	Echo
Oct 25, 2024 20:05:49.465867043 CEST	192.168.2.5	130.195.32.252	80a	Echo
Oct 25, 2024 20:05:49.465917110 CEST	192.168.2.5	130.195.129.128	80b	Echo
Oct 25, 2024 20:05:49.465930939 CEST	192.168.2.5	130.195.114.24	809	Echo
Oct 25, 2024 20:05:49.466037989 CEST	192.168.2.5	130.195.154.1	808	Echo
Oct 25, 2024 20:05:49.466222048 CEST	192.168.2.5	130.195.20.11	807	Echo
Oct 25, 2024 20:05:49.466448069 CEST	192.168.2.5	130.195.31.236	805	Echo
Oct 25, 2024 20:05:49.466533899 CEST	192.168.2.5	130.195.238.5	806	Echo
Oct 25, 2024 20:05:49.466619015 CEST	192.168.2.5	130.195.243.101	803	Echo
Oct 25, 2024 20:05:49.466626883 CEST	192.168.2.5	130.195.59.225	802	Echo
Oct 25, 2024 20:05:49.466622114 CEST	192.168.2.5	130.195.13.32	804	Echo
Oct 25, 2024 20:05:49.466748953 CEST	192.168.2.5	130.195.63.134	801	Echo
Oct 25, 2024 20:05:49.466861963 CEST	192.168.2.5	130.195.92.249	800	Echo
Oct 25, 2024 20:05:49.467010975 CEST	192.168.2.5	130.195.116.148	7ff	Echo
Oct 25, 2024 20:05:49.467048883 CEST	192.168.2.5	130.195.86.28	7fe	Echo
Oct 25, 2024 20:05:49.467097998 CEST	192.168.2.5	130.195.191.97	7fd	Echo
Oct 25, 2024 20:05:49.467334032 CEST	192.168.2.5	130.195.72.135	7fc	Echo
Oct 25, 2024 20:05:49.480437994 CEST	192.168.2.5	130.195.44.244	7fb	Echo
Oct 25, 2024 20:05:49.511311054 CEST	192.168.2.5	130.195.163.150	7fa	Echo
Oct 25, 2024 20:05:49.542115927 CEST	192.168.2.5	130.195.233.182	7f9	Echo
Oct 25, 2024 20:05:49.575345039 CEST	192.168.2.5	130.195.20.179	7f8	Echo
Oct 25, 2024 20:05:49.604618073 CEST	192.168.2.5	130.195.122.159	7f7	Echo
Oct 25, 2024 20:05:49.635911942 CEST	192.168.2.5	130.195.229.105	7f6	Echo
Oct 25, 2024 20:05:49.667197943 CEST	192.168.2.5	130.195.106.19	7f5	Echo
Oct 25, 2024 20:05:49.698467970 CEST	192.168.2.5	130.195.95.229	7f4	Echo
Oct 25, 2024 20:05:49.729742050 CEST	192.168.2.5	130.195.62.130	7f3	Echo
Oct 25, 2024 20:05:49.761190891 CEST	192.168.2.5	130.195.118.145	7f2	Echo
Oct 25, 2024 20:05:49.792574883 CEST	192.168.2.5	130.195.63.26	7f1	Echo
Oct 25, 2024 20:05:49.825092077 CEST	192.168.2.5	130.195.81.209	7f0	Echo
Oct 25, 2024 20:05:49.856368065 CEST	192.168.2.5	130.195.14.145	7ef	Echo
Oct 25, 2024 20:05:49.885852098 CEST	192.168.2.5	130.195.76.181	7ee	Echo
Oct 25, 2024 20:05:49.917387962 CEST	192.168.2.5	130.195.149.254	7ed	Echo
Oct 25, 2024 20:05:49.948281050 CEST	192.168.2.5	130.195.90.33	7ec	Echo
Oct 25, 2024 20:05:49.965945005 CEST	192.168.2.5	130.195.243.71	7eb	Echo
Oct 25, 2024 20:05:49.966010094 CEST	192.168.2.5	130.195.173.83	7ea	Echo
Oct 25, 2024 20:05:49.966010094 CEST	192.168.2.5	130.195.110.4	7e9	Echo
Oct 25, 2024 20:05:49.966108084 CEST	192.168.2.5	130.195.184.253	7e8	Echo
Oct 25, 2024 20:05:49.966236115 CEST	192.168.2.5	130.195.118.9	7e7	Echo
Oct 25, 2024 20:05:49.966408968 CEST	192.168.2.5	130.195.119.239	7e6	Echo
Oct 25, 2024 20:05:49.966430902 CEST	192.168.2.5	130.195.228.34	7e5	Echo
Oct 25, 2024 20:05:49.966644049 CEST	192.168.2.5	130.195.210.86	7e4	Echo
Oct 25, 2024 20:05:49.966685057 CEST	192.168.2.5	130.195.30.102	7e3	Echo
Oct 25, 2024 20:05:49.966685057 CEST	192.168.2.5	130.195.60.116	7e2	Echo
Oct 25, 2024 20:05:49.966798067 CEST	192.168.2.5	130.195.175.60	7e1	Echo
Oct 25, 2024 20:05:49.966859102 CEST	192.168.2.5	130.195.41.28	7e0	Echo
Oct 25, 2024 20:05:49.966943026 CEST	192.168.2.5	130.195.150.157	7df	Echo
Oct 25, 2024 20:05:49.966993093 CEST	192.168.2.5	130.195.165.226	7de	Echo
Oct 25, 2024 20:05:49.979712009 CEST	192.168.2.5	130.195.175.98	7dd	Echo
Oct 25, 2024 20:05:50.010868073 CEST	192.168.2.5	130.195.161.40	7dc	Echo
Oct 25, 2024 20:05:50.042490959 CEST	192.168.2.5	130.195.116.225	7db	Echo
Oct 25, 2024 20:05:50.073631048 CEST	192.168.2.5	130.195.77.64	7da	Echo
Oct 25, 2024 20:05:50.104702950 CEST	192.168.2.5	130.195.21.173	7d9	Echo
Oct 25, 2024 20:05:50.136193991 CEST	192.168.2.5	130.195.123.139	7d8	Echo
Oct 25, 2024 20:05:50.167545080 CEST	192.168.2.5	130.195.244.87	7d7	Echo
Oct 25, 2024 20:05:50.198679924 CEST	192.168.2.5	130.195.9.48	7d6	Echo
Oct 25, 2024 20:05:50.229927063 CEST	192.168.2.5	130.195.186.144	7d5	Echo
Oct 25, 2024 20:05:50.260987997 CEST	192.168.2.5	130.195.41.125	7d4	Echo
Oct 25, 2024 20:05:50.292203903 CEST	192.168.2.5	130.195.1.189	7d3	Echo
Oct 25, 2024 20:05:50.323569059 CEST	192.168.2.5	130.195.116.110	7d2	Echo
Oct 25, 2024 20:05:50.354578972 CEST	192.168.2.5	130.195.30.116	7d1	Echo
Oct 25, 2024 20:05:50.386095047 CEST	192.168.2.5	130.195.254.30	7d0	Echo
Oct 25, 2024 20:05:50.417604923 CEST	192.168.2.5	130.195.106.227	7cf	Echo
Oct 25, 2024 20:05:50.448497057 CEST	192.168.2.5	130.195.159.137	7ce	Echo
Oct 25, 2024 20:05:50.466294050 CEST	192.168.2.5	130.195.16.27	7cd	Echo
Oct 25, 2024 20:05:50.466304064 CEST	192.168.2.5	130.195.244.7	7cc	Echo
Oct 25, 2024 20:05:50.466460943 CEST	192.168.2.5	130.195.45.100	7cb	Echo
Oct 25, 2024 20:05:50.466629028 CEST	192.168.2.5	130.195.201.33	7ca	Echo
Oct 25, 2024 20:05:50.466811895 CEST	192.168.2.5	130.195.6.52	7c8	Echo
Oct 25, 2024 20:05:50.466819048 CEST	192.168.2.5	130.195.52.201	7c9	Echo
Oct 25, 2024 20:05:50.466934919 CEST	192.168.2.5	130.195.127.12	7c7	Echo
Oct 25, 2024 20:05:50.467257977 CEST	192.168.2.5	130.195.195.40	7c6	Echo
Oct 25, 2024 20:05:50.467351913 CEST	192.168.2.5	130.195.146.96	7c3	Echo
Oct 25, 2024 20:05:50.467355967 CEST	192.168.2.5	130.195.33.222	7c4	Echo
Oct 25, 2024 20:05:50.467457056 CEST	192.168.2.5	130.195.35.7	7c1	Echo
Oct 25, 2024 20:05:50.467457056 CEST	192.168.2.5	130.195.255.66	7c5	Echo
Oct 25, 2024 20:05:50.467500925 CEST	192.168.2.5	130.195.208.142	7c2	Echo
Oct 25, 2024 20:05:50.467720032 CEST	192.168.2.5	130.195.241.39	7c0	Echo
Oct 25, 2024 20:05:50.467804909 CEST	192.168.2.5	130.195.149.182	7bf	Echo
Oct 25, 2024 20:05:50.467806101 CEST	192.168.2.5	130.195.64.39	7be	Echo
Oct 25, 2024 20:05:50.479687929 CEST	192.168.2.5	130.195.139.159	7bd	Echo
Oct 25, 2024 20:05:50.498172998 CEST	192.168.2.5	130.195.9.48	7bc	Echo
Oct 25, 2024 20:05:50.510905027 CEST	192.168.2.5	130.195.225.138	7bb	Echo
Oct 25, 2024 20:05:50.542272091 CEST	192.168.2.5	130.195.84.225	7ba	Echo
Oct 25, 2024 20:05:50.573538065 CEST	192.168.2.5	130.195.240.168	7b9	Echo
Oct 25, 2024 20:05:50.604562998 CEST	192.168.2.5	130.195.214.66	7b8	Echo
Oct 25, 2024 20:05:50.635948896 CEST	192.168.2.5	130.195.72.4	7b7	Echo
Oct 25, 2024 20:05:50.667279959 CEST	192.168.2.5	130.195.180.151	7b6	Echo
Oct 25, 2024 20:05:50.698415995 CEST	192.168.2.5	130.195.94.220	7b5	Echo
Oct 25, 2024 20:05:50.729588985 CEST	192.168.2.5	130.195.163.126	7b4	Echo
Oct 25, 2024 20:05:50.760977030 CEST	192.168.2.5	130.195.249.13	7b3	Echo
Oct 25, 2024 20:05:50.792013884 CEST	192.168.2.5	130.195.32.95	7b2	Echo
Oct 25, 2024 20:05:50.823421001 CEST	192.168.2.5	130.195.3.26	7b1	Echo
Oct 25, 2024 20:05:50.855564117 CEST	192.168.2.5	130.195.40.89	7b0	Echo
Oct 25, 2024 20:05:50.886126995 CEST	192.168.2.5	130.195.70.125	7af	Echo
Oct 25, 2024 20:05:50.917258978 CEST	192.168.2.5	130.195.18.232	7ae	Echo
Oct 25, 2024 20:05:50.948432922 CEST	192.168.2.5	130.195.197.252	7ad	Echo
Oct 25, 2024 20:05:50.965723991 CEST	192.168.2.5	130.195.96.3	7ac	Echo
Oct 25, 2024 20:05:50.965831041 CEST	192.168.2.5	130.195.76.164	7ab	Echo
Oct 25, 2024 20:05:50.965873003 CEST	192.168.2.5	130.195.14.142	7aa	Echo
Oct 25, 2024 20:05:50.965929031 CEST	192.168.2.5	130.195.40.64	7a9	Echo
Oct 25, 2024 20:05:50.966057062 CEST	192.168.2.5	130.195.90.159	7a7	Echo
Oct 25, 2024 20:05:50.966186047 CEST	192.168.2.5	130.195.157.144	7a8	Echo
Oct 25, 2024 20:05:50.966224909 CEST	192.168.2.5	130.195.242.64	7a5	Echo
Oct 25, 2024 20:05:50.966262102 CEST	192.168.2.5	130.195.132.131	7a4	Echo
Oct 25, 2024 20:05:50.966304064 CEST	192.168.2.5	130.195.37.45	7a6	Echo
Oct 25, 2024 20:05:50.966424942 CEST	192.168.2.5	130.195.33.172	7a2	Echo
Oct 25, 2024 20:05:50.966491938 CEST	192.168.2.5	130.195.94.70	7a1	Echo
Oct 25, 2024 20:05:50.966523886 CEST	192.168.2.5	130.195.168.110	7a3	Echo
Oct 25, 2024 20:05:50.966610909 CEST	192.168.2.5	130.195.155.149	79f	Echo
Oct 25, 2024 20:05:50.966654062 CEST	192.168.2.5	130.195.158.173	7a0	Echo
Oct 25, 2024 20:05:50.966808081 CEST	192.168.2.5	130.195.88.14	79e	Echo
Oct 25, 2024 20:05:50.966808081 CEST	192.168.2.5	130.195.219.49	79d	Echo
Oct 25, 2024 20:05:50.980046034 CEST	192.168.2.5	130.195.48.87	79c	Echo
Oct 25, 2024 20:05:51.011224031 CEST	192.168.2.5	130.195.241.175	79b	Echo
Oct 25, 2024 20:05:51.043375969 CEST	192.168.2.5	130.195.32.240	79a	Echo
Oct 25, 2024 20:05:51.073477983 CEST	192.168.2.5	130.195.186.178	799	Echo
Oct 25, 2024 20:05:51.104587078 CEST	192.168.2.5	130.195.142.37	798	Echo
Oct 25, 2024 20:05:51.126297951 CEST	130.195.3.26	192.168.2.5	fb1	Echo Reply
Oct 25, 2024 20:05:51.126741886 CEST	192.168.2.5	130.195.3.26	797	Echo
Oct 25, 2024 20:05:51.135834932 CEST	192.168.2.5	130.195.107.184	796	Echo
Oct 25, 2024 20:05:51.166975975 CEST	192.168.2.5	130.195.160.38	795	Echo
Oct 25, 2024 20:05:51.198373079 CEST	192.168.2.5	130.195.81.177	794	Echo
Oct 25, 2024 20:05:51.229679108 CEST	192.168.2.5	130.195.152.255	793	Echo
Oct 25, 2024 20:05:51.260843039 CEST	192.168.2.5	130.195.64.137	792	Echo
Oct 25, 2024 20:05:51.291971922 CEST	192.168.2.5	130.195.186.176	791	Echo
Oct 25, 2024 20:05:51.323570013 CEST	192.168.2.5	130.195.200.209	790	Echo
Oct 25, 2024 20:05:51.354883909 CEST	192.168.2.5	130.195.203.29	78f	Echo
Oct 25, 2024 20:05:51.385797024 CEST	192.168.2.5	130.195.125.150	78e	Echo
Oct 25, 2024 20:05:51.417340040 CEST	192.168.2.5	130.195.30.141	78d	Echo
Oct 25, 2024 20:05:51.428816080 CEST	130.195.3.26	192.168.2.5	f97	Echo Reply
Oct 25, 2024 20:05:51.448518038 CEST	192.168.2.5	130.195.24.153	78c	Echo
Oct 25, 2024 20:05:51.465604067 CEST	192.168.2.5	130.195.44.244	78b	Echo
Oct 25, 2024 20:05:51.465718985 CEST	192.168.2.5	130.195.233.182	789	Echo
Oct 25, 2024 20:05:51.465790987 CEST	192.168.2.5	130.195.163.150	78a	Echo
Oct 25, 2024 20:05:51.465917110 CEST	192.168.2.5	130.195.20.179	788	Echo
Oct 25, 2024 20:05:51.465917110 CEST	192.168.2.5	130.195.229.105	786	Echo
Oct 25, 2024 20:05:51.465953112 CEST	192.168.2.5	130.195.122.159	787	Echo
Oct 25, 2024 20:05:51.465954065 CEST	192.168.2.5	130.195.106.19	785	Echo
Oct 25, 2024 20:05:51.466015100 CEST	192.168.2.5	130.195.95.229	784	Echo
Oct 25, 2024 20:05:51.466015100 CEST	192.168.2.5	130.195.62.130	783	Echo
Oct 25, 2024 20:05:51.466042042 CEST	192.168.2.5	130.195.118.145	782	Echo
Oct 25, 2024 20:05:51.466200113 CEST	192.168.2.5	130.195.81.209	780	Echo
Oct 25, 2024 20:05:51.466218948 CEST	192.168.2.5	130.195.76.181	77e	Echo
Oct 25, 2024 20:05:51.466243982 CEST	192.168.2.5	130.195.63.26	781	Echo
Oct 25, 2024 20:05:51.466304064 CEST	192.168.2.5	130.195.90.33	77c	Echo
Oct 25, 2024 20:05:51.466353893 CEST	192.168.2.5	130.195.14.145	77f	Echo
Oct 25, 2024 20:05:51.466353893 CEST	192.168.2.5	130.195.149.254	77d	Echo
Oct 25, 2024 20:05:51.479940891 CEST	192.168.2.5	130.195.82.225	77b	Echo
Oct 25, 2024 20:05:51.510799885 CEST	192.168.2.5	130.195.193.82	77a	Echo
Oct 25, 2024 20:05:51.542506933 CEST	192.168.2.5	130.195.194.243	779	Echo
Oct 25, 2024 20:05:51.573477030 CEST	192.168.2.5	130.195.9.185	778	Echo
Oct 25, 2024 20:05:51.605618954 CEST	192.168.2.5	130.195.44.135	777	Echo
Oct 25, 2024 20:05:51.638503075 CEST	192.168.2.5	130.195.203.234	776	Echo
Oct 25, 2024 20:05:51.667085886 CEST	192.168.2.5	130.195.89.73	775	Echo
Oct 25, 2024 20:05:51.698360920 CEST	192.168.2.5	130.195.24.45	774	Echo
Oct 25, 2024 20:05:51.729674101 CEST	192.168.2.5	130.195.2.72	773	Echo
Oct 25, 2024 20:05:51.760823011 CEST	192.168.2.5	130.195.223.133	772	Echo
Oct 25, 2024 20:05:51.792319059 CEST	192.168.2.5	130.195.154.223	771	Echo
Oct 25, 2024 20:05:51.823733091 CEST	192.168.2.5	130.195.37.73	770	Echo
Oct 25, 2024 20:05:51.855182886 CEST	192.168.2.5	130.195.182.10	76f	Echo
Oct 25, 2024 20:05:51.875231981 CEST	192.168.2.5	130.195.9.185	76e	Echo
Oct 25, 2024 20:05:51.886244059 CEST	192.168.2.5	130.195.223.34	76d	Echo
Oct 25, 2024 20:05:51.926440954 CEST	192.168.2.5	130.195.217.209	76c	Echo
Oct 25, 2024 20:05:51.948390007 CEST	192.168.2.5	130.195.201.224	76b	Echo
Oct 25, 2024 20:05:51.965281963 CEST	192.168.2.5	130.195.161.40	769	Echo
Oct 25, 2024 20:05:51.965466976 CEST	192.168.2.5	130.195.175.98	76a	Echo
Oct 25, 2024 20:05:51.965507984 CEST	192.168.2.5	130.195.116.225	768	Echo
Oct 25, 2024 20:05:51.965569019 CEST	192.168.2.5	130.195.21.173	766	Echo
Oct 25, 2024 20:05:51.965626955 CEST	192.168.2.5	130.195.77.64	767	Echo
Oct 25, 2024 20:05:51.965687037 CEST	192.168.2.5	130.195.123.139	765	Echo
Oct 25, 2024 20:05:51.965805054 CEST	192.168.2.5	130.195.244.87	764	Echo
Oct 25, 2024 20:05:51.965980053 CEST	192.168.2.5	130.195.186.144	763	Echo
Oct 25, 2024 20:05:51.966423988 CEST	192.168.2.5	130.195.1.189	761	Echo
Oct 25, 2024 20:05:51.966473103 CEST	192.168.2.5	130.195.41.125	762	Echo
Oct 25, 2024 20:05:51.966537952 CEST	192.168.2.5	130.195.30.116	75f	Echo
Oct 25, 2024 20:05:51.966635942 CEST	192.168.2.5	130.195.116.110	760	Echo
Oct 25, 2024 20:05:51.966660023 CEST	192.168.2.5	130.195.254.30	75e	Echo
Oct 25, 2024 20:05:51.966681957 CEST	192.168.2.5	130.195.106.227	75d	Echo
Oct 25, 2024 20:05:51.966862917 CEST	192.168.2.5	130.195.159.137	75c	Echo
Oct 25, 2024 20:05:51.979568958 CEST	192.168.2.5	130.195.96.168	75b	Echo
Oct 25, 2024 20:05:52.010840893 CEST	192.168.2.5	130.195.107.14	75a	Echo
Oct 25, 2024 20:05:52.042073011 CEST	192.168.2.5	130.195.156.147	759	Echo
Oct 25, 2024 20:05:52.073427916 CEST	192.168.2.5	130.195.9.7	758	Echo
Oct 25, 2024 20:05:52.104646921 CEST	192.168.2.5	130.195.114.8	757	Echo
Oct 25, 2024 20:05:52.135924101 CEST	192.168.2.5	130.195.51.114	756	Echo
Oct 25, 2024 20:05:52.167263985 CEST	192.168.2.5	130.195.51.146	755	Echo
Oct 25, 2024 20:05:52.198551893 CEST	192.168.2.5	130.195.223.215	754	Echo
Oct 25, 2024 20:05:52.231173992 CEST	192.168.2.5	130.195.140.104	753	Echo
Oct 25, 2024 20:05:52.260999918 CEST	192.168.2.5	130.195.182.178	752	Echo
Oct 25, 2024 20:05:52.292239904 CEST	192.168.2.5	130.195.209.181	751	Echo
Oct 25, 2024 20:05:52.323167086 CEST	192.168.2.5	130.195.243.98	750	Echo
Oct 25, 2024 20:05:52.354731083 CEST	192.168.2.5	130.195.18.11	74f	Echo
Oct 25, 2024 20:05:52.385770082 CEST	192.168.2.5	130.195.160.65	74e	Echo
Oct 25, 2024 20:05:52.417078018 CEST	192.168.2.5	130.195.130.196	74d	Echo
Oct 25, 2024 20:05:52.448187113 CEST	192.168.2.5	130.195.221.180	74c	Echo
Oct 25, 2024 20:05:52.465979099 CEST	192.168.2.5	130.195.139.159	74b	Echo
Oct 25, 2024 20:05:52.466133118 CEST	192.168.2.5	130.195.225.138	74a	Echo
Oct 25, 2024 20:05:52.466293097 CEST	192.168.2.5	130.195.84.225	749	Echo
Oct 25, 2024 20:05:52.466310024 CEST	192.168.2.5	130.195.240.168	748	Echo
Oct 25, 2024 20:05:52.466384888 CEST	192.168.2.5	130.195.214.66	747	Echo
Oct 25, 2024 20:05:52.466526031 CEST	192.168.2.5	130.195.180.151	745	Echo
Oct 25, 2024 20:05:52.466587067 CEST	192.168.2.5	130.195.72.4	746	Echo
Oct 25, 2024 20:05:52.466587067 CEST	192.168.2.5	130.195.94.220	744	Echo
Oct 25, 2024 20:05:52.466672897 CEST	192.168.2.5	130.195.163.126	743	Echo
Oct 25, 2024 20:05:52.466712952 CEST	192.168.2.5	130.195.249.13	742	Echo
Oct 25, 2024 20:05:52.466938019 CEST	192.168.2.5	130.195.32.95	741	Echo
Oct 25, 2024 20:05:52.466995955 CEST	192.168.2.5	130.195.40.89	740	Echo
Oct 25, 2024 20:05:52.466995955 CEST	192.168.2.5	130.195.70.125	73f	Echo
Oct 25, 2024 20:05:52.467044115 CEST	192.168.2.5	130.195.18.232	73e	Echo
Oct 25, 2024 20:05:52.467087984 CEST	192.168.2.5	130.195.197.252	73d	Echo
Oct 25, 2024 20:05:52.479666948 CEST	192.168.2.5	130.195.93.138	73c	Echo
Oct 25, 2024 20:05:52.510855913 CEST	192.168.2.5	130.195.220.213	73b	Echo
Oct 25, 2024 20:05:52.541908026 CEST	192.168.2.5	130.195.232.230	73a	Echo
Oct 25, 2024 20:05:52.573559046 CEST	192.168.2.5	130.195.53.118	739	Echo
Oct 25, 2024 20:05:52.609643936 CEST	192.168.2.5	130.195.5.109	738	Echo
Oct 25, 2024 20:05:52.635741949 CEST	192.168.2.5	130.195.91.222	737	Echo
Oct 25, 2024 20:05:52.666999102 CEST	192.168.2.5	130.195.175.91	736	Echo
Oct 25, 2024 20:05:52.698626041 CEST	192.168.2.5	130.195.18.175	735	Echo
Oct 25, 2024 20:05:52.729970932 CEST	192.168.2.5	130.195.125.18	734	Echo
Oct 25, 2024 20:05:52.760891914 CEST	192.168.2.5	130.195.232.145	733	Echo
Oct 25, 2024 20:05:52.792234898 CEST	192.168.2.5	130.195.46.141	732	Echo
Oct 25, 2024 20:05:52.823390961 CEST	192.168.2.5	130.195.151.53	731	Echo
Oct 25, 2024 20:05:52.854726076 CEST	192.168.2.5	130.195.119.190	730	Echo
Oct 25, 2024 20:05:52.885854006 CEST	192.168.2.5	130.195.236.227	72f	Echo
Oct 25, 2024 20:05:52.914253950 CEST	192.168.2.5	130.195.5.109	72e	Echo
Oct 25, 2024 20:05:52.917052031 CEST	192.168.2.5	130.195.44.115	72d	Echo
Oct 25, 2024 20:05:52.949026108 CEST	192.168.2.5	130.195.172.43	72c	Echo
Oct 25, 2024 20:05:52.965626001 CEST	192.168.2.5	130.195.48.87	72b	Echo
Oct 25, 2024 20:05:52.965693951 CEST	192.168.2.5	130.195.241.175	72a	Echo
Oct 25, 2024 20:05:52.965718985 CEST	192.168.2.5	130.195.32.240	729	Echo
Oct 25, 2024 20:05:52.965841055 CEST	192.168.2.5	130.195.186.178	728	Echo
Oct 25, 2024 20:05:52.965862036 CEST	192.168.2.5	130.195.142.37	727	Echo
Oct 25, 2024 20:05:52.965915918 CEST	192.168.2.5	130.195.107.184	726	Echo
Oct 25, 2024 20:05:52.966034889 CEST	192.168.2.5	130.195.81.177	724	Echo
Oct 25, 2024 20:05:52.966087103 CEST	192.168.2.5	130.195.152.255	723	Echo
Oct 25, 2024 20:05:52.966120958 CEST	192.168.2.5	130.195.64.137	722	Echo
Oct 25, 2024 20:05:52.966089964 CEST	192.168.2.5	130.195.160.38	725	Echo
Oct 25, 2024 20:05:52.966151953 CEST	192.168.2.5	130.195.186.176	721	Echo
Oct 25, 2024 20:05:52.966279984 CEST	192.168.2.5	130.195.203.29	71f	Echo
Oct 25, 2024 20:05:52.966306925 CEST	192.168.2.5	130.195.125.150	71e	Echo
Oct 25, 2024 20:05:52.966348886 CEST	192.168.2.5	130.195.200.209	720	Echo
Oct 25, 2024 20:05:52.966468096 CEST	192.168.2.5	130.195.30.141	71d	Echo
Oct 25, 2024 20:05:52.966609001 CEST	192.168.2.5	130.195.24.153	71c	Echo
Oct 25, 2024 20:05:52.979865074 CEST	192.168.2.5	130.195.59.172	71b	Echo
Oct 25, 2024 20:05:53.010927916 CEST	192.168.2.5	130.195.40.244	71a	Echo
Oct 25, 2024 20:05:53.042148113 CEST	192.168.2.5	130.195.78.115	719	Echo
Oct 25, 2024 20:05:53.073432922 CEST	192.168.2.5	130.195.105.76	718	Echo
Oct 25, 2024 20:05:53.104490042 CEST	192.168.2.5	130.195.137.246	717	Echo
Oct 25, 2024 20:05:53.135931015 CEST	192.168.2.5	130.195.231.46	716	Echo
Oct 25, 2024 20:05:53.167073965 CEST	192.168.2.5	130.195.130.151	715	Echo
Oct 25, 2024 20:05:53.198328018 CEST	192.168.2.5	130.195.229.101	714	Echo
Oct 25, 2024 20:05:53.229437113 CEST	192.168.2.5	130.195.250.31	713	Echo
Oct 25, 2024 20:05:53.261039972 CEST	192.168.2.5	130.195.104.109	712	Echo
Oct 25, 2024 20:05:53.292340994 CEST	192.168.2.5	130.195.217.155	711	Echo
Oct 25, 2024 20:05:53.323358059 CEST	192.168.2.5	130.195.82.27	710	Echo
Oct 25, 2024 20:05:53.355066061 CEST	192.168.2.5	130.195.72.242	70f	Echo
Oct 25, 2024 20:05:53.387459040 CEST	192.168.2.5	130.195.3.169	70e	Echo
Oct 25, 2024 20:05:53.417464972 CEST	192.168.2.5	130.195.123.201	70d	Echo
Oct 25, 2024 20:05:53.448390007 CEST	192.168.2.5	130.195.38.140	70c	Echo
Oct 25, 2024 20:05:53.465416908 CEST	192.168.2.5	130.195.82.225	70b	Echo
Oct 25, 2024 20:05:53.465496063 CEST	192.168.2.5	130.195.193.82	70a	Echo
Oct 25, 2024 20:05:53.465498924 CEST	192.168.2.5	130.195.194.243	709	Echo
Oct 25, 2024 20:05:53.465648890 CEST	192.168.2.5	130.195.89.73	706	Echo
Oct 25, 2024 20:05:53.465692043 CEST	192.168.2.5	130.195.24.45	705	Echo
Oct 25, 2024 20:05:53.465687037 CEST	192.168.2.5	130.195.203.234	707	Echo
Oct 25, 2024 20:05:53.465719938 CEST	192.168.2.5	130.195.44.135	708	Echo
Oct 25, 2024 20:05:53.465780020 CEST	192.168.2.5	130.195.2.72	704	Echo
Oct 25, 2024 20:05:53.465821981 CEST	192.168.2.5	130.195.223.133	703	Echo
Oct 25, 2024 20:05:53.465903997 CEST	192.168.2.5	130.195.37.73	701	Echo
Oct 25, 2024 20:05:53.465936899 CEST	192.168.2.5	130.195.182.10	700	Echo
Oct 25, 2024 20:05:53.465964079 CEST	192.168.2.5	130.195.154.223	702	Echo
Oct 25, 2024 20:05:53.466056108 CEST	192.168.2.5	130.195.223.34	6ff	Echo
Oct 25, 2024 20:05:53.466094017 CEST	192.168.2.5	130.195.217.209	6fe	Echo
Oct 25, 2024 20:05:53.466154099 CEST	192.168.2.5	130.195.201.224	6fd	Echo
Oct 25, 2024 20:05:53.479691982 CEST	192.168.2.5	130.195.13.241	6fc	Echo
Oct 25, 2024 20:05:53.510890007 CEST	192.168.2.5	130.195.69.120	6fb	Echo
Oct 25, 2024 20:05:53.541990995 CEST	192.168.2.5	130.195.167.199	6fa	Echo
Oct 25, 2024 20:05:53.573178053 CEST	192.168.2.5	130.195.185.189	6f9	Echo
Oct 25, 2024 20:05:53.604800940 CEST	192.168.2.5	130.195.29.225	6f8	Echo
Oct 25, 2024 20:05:53.642940044 CEST	192.168.2.5	130.195.91.111	6f7	Echo
Oct 25, 2024 20:05:53.666958094 CEST	192.168.2.5	130.195.91.84	6f6	Echo
Oct 25, 2024 20:05:53.699459076 CEST	192.168.2.5	130.195.99.91	6f5	Echo
Oct 25, 2024 20:05:53.729654074 CEST	192.168.2.5	130.195.42.205	6f4	Echo
Oct 25, 2024 20:05:53.760737896 CEST	192.168.2.5	130.195.208.21	6f3	Echo
Oct 25, 2024 20:05:53.792027950 CEST	192.168.2.5	130.195.16.208	6f2	Echo
Oct 25, 2024 20:05:53.823417902 CEST	192.168.2.5	130.195.75.17	6f1	Echo
Oct 25, 2024 20:05:53.854609013 CEST	192.168.2.5	130.195.251.190	6f0	Echo
Oct 25, 2024 20:05:53.891767025 CEST	192.168.2.5	130.195.151.119	6ef	Echo
Oct 25, 2024 20:05:53.917803049 CEST	192.168.2.5	130.195.91.132	6ee	Echo
Oct 25, 2024 20:05:53.949353933 CEST	192.168.2.5	130.195.216.10	6ed	Echo
Oct 25, 2024 20:05:53.977205038 CEST	192.168.2.5	130.195.96.168	6ec	Echo
Oct 25, 2024 20:05:53.977454901 CEST	192.168.2.5	130.195.107.14	6eb	Echo
Oct 25, 2024 20:05:53.977785110 CEST	192.168.2.5	130.195.156.147	6ea	Echo
Oct 25, 2024 20:05:53.978028059 CEST	192.168.2.5	130.195.9.7	6e9	Echo
Oct 25, 2024 20:05:53.978296995 CEST	192.168.2.5	130.195.114.8	6e8	Echo
Oct 25, 2024 20:05:53.978514910 CEST	192.168.2.5	130.195.51.114	6e7	Echo
Oct 25, 2024 20:05:53.978933096 CEST	192.168.2.5	130.195.51.146	6e6	Echo
Oct 25, 2024 20:05:53.979068995 CEST	192.168.2.5	130.195.223.215	6e5	Echo
Oct 25, 2024 20:05:53.980076075 CEST	192.168.2.5	130.195.140.104	6e4	Echo
Oct 25, 2024 20:05:53.981251955 CEST	192.168.2.5	130.195.182.178	6e3	Echo
Oct 25, 2024 20:05:53.981394053 CEST	192.168.2.5	130.195.3.224	6e2	Echo
Oct 25, 2024 20:05:53.981758118 CEST	192.168.2.5	130.195.209.181	6e1	Echo
Oct 25, 2024 20:05:53.981878996 CEST	192.168.2.5	130.195.243.98	6e0	Echo
Oct 25, 2024 20:05:53.987668037 CEST	192.168.2.5	130.195.18.11	6df	Echo
Oct 25, 2024 20:05:53.988109112 CEST	192.168.2.5	130.195.160.65	6de	Echo
Oct 25, 2024 20:05:53.988421917 CEST	192.168.2.5	130.195.130.196	6dd	Echo
Oct 25, 2024 20:05:53.988719940 CEST	192.168.2.5	130.195.221.180	6dc	Echo
Oct 25, 2024 20:05:53.992186069 CEST	130.195.216.10	192.168.2.5	eed	Echo Reply
Oct 25, 2024 20:05:53.992530107 CEST	192.168.2.5	130.195.216.10	6db	Echo
Oct 25, 2024 20:05:54.011106014 CEST	192.168.2.5	130.195.105.141	6da	Echo
Oct 25, 2024 20:05:54.037110090 CEST	130.195.216.10	192.168.2.5	edb	Echo Reply
Oct 25, 2024 20:05:54.042292118 CEST	192.168.2.5	130.195.242.44	6d9	Echo
Oct 25, 2024 20:05:54.073877096 CEST	192.168.2.5	130.195.142.241	6d8	Echo
Oct 25, 2024 20:05:54.104970932 CEST	192.168.2.5	130.195.73.100	6d7	Echo
Oct 25, 2024 20:05:54.135987043 CEST	192.168.2.5	130.195.26.24	6d6	Echo
Oct 25, 2024 20:05:54.167202950 CEST	192.168.2.5	130.195.46.220	6d5	Echo
Oct 25, 2024 20:05:54.198204994 CEST	192.168.2.5	130.195.113.30	6d4	Echo
Oct 25, 2024 20:05:54.229446888 CEST	192.168.2.5	130.195.52.27	6d3	Echo
Oct 25, 2024 20:05:54.262341976 CEST	192.168.2.5	130.195.179.83	6d2	Echo
Oct 25, 2024 20:05:54.292057037 CEST	192.168.2.5	130.195.49.81	6d1	Echo
Oct 25, 2024 20:05:54.324337959 CEST	192.168.2.5	130.195.248.49	6d0	Echo
Oct 25, 2024 20:05:54.354490042 CEST	192.168.2.5	130.195.72.248	6cf	Echo
Oct 25, 2024 20:05:54.385790110 CEST	192.168.2.5	130.195.71.73	6ce	Echo
Oct 25, 2024 20:05:54.417226076 CEST	192.168.2.5	130.195.177.174	6cd	Echo
Oct 25, 2024 20:05:54.448308945 CEST	192.168.2.5	130.195.201.47	6cc	Echo
Oct 25, 2024 20:05:54.465389013 CEST	192.168.2.5	130.195.93.138	6cb	Echo
Oct 25, 2024 20:05:54.465413094 CEST	192.168.2.5	130.195.220.213	6ca	Echo
Oct 25, 2024 20:05:54.465603113 CEST	192.168.2.5	130.195.91.222	6c7	Echo
Oct 25, 2024 20:05:54.465626955 CEST	192.168.2.5	130.195.232.230	6c9	Echo
Oct 25, 2024 20:05:54.465645075 CEST	192.168.2.5	130.195.175.91	6c6	Echo
Oct 25, 2024 20:05:54.465677023 CEST	192.168.2.5	130.195.53.118	6c8	Echo
Oct 25, 2024 20:05:54.465715885 CEST	192.168.2.5	130.195.18.175	6c5	Echo
Oct 25, 2024 20:05:54.465744019 CEST	192.168.2.5	130.195.125.18	6c4	Echo
Oct 25, 2024 20:05:54.465811968 CEST	192.168.2.5	130.195.232.145	6c3	Echo
Oct 25, 2024 20:05:54.465918064 CEST	192.168.2.5	130.195.151.53	6c1	Echo
Oct 25, 2024 20:05:54.465951920 CEST	192.168.2.5	130.195.119.190	6c0	Echo
Oct 25, 2024 20:05:54.466020107 CEST	192.168.2.5	130.195.46.141	6c2	Echo
Oct 25, 2024 20:05:54.466021061 CEST	192.168.2.5	130.195.236.227	6bf	Echo
Oct 25, 2024 20:05:54.466129065 CEST	192.168.2.5	130.195.44.115	6be	Echo
Oct 25, 2024 20:05:54.466176033 CEST	192.168.2.5	130.195.172.43	6bd	Echo
Oct 25, 2024 20:05:54.479604006 CEST	192.168.2.5	130.195.114.120	6bc	Echo
Oct 25, 2024 20:05:54.510929108 CEST	192.168.2.5	130.195.92.50	6bb	Echo
Oct 25, 2024 20:05:54.542082071 CEST	192.168.2.5	130.195.134.60	6ba	Echo
Oct 25, 2024 20:05:54.573232889 CEST	192.168.2.5	130.195.95.3	6b9	Echo
Oct 25, 2024 20:05:54.604533911 CEST	192.168.2.5	130.195.145.30	6b8	Echo
Oct 25, 2024 20:05:54.638217926 CEST	192.168.2.5	130.195.120.25	6b7	Echo
Oct 25, 2024 20:05:54.668932915 CEST	192.168.2.5	130.195.92.6	6b6	Echo
Oct 25, 2024 20:05:54.698270082 CEST	192.168.2.5	130.195.103.64	6b5	Echo
Oct 25, 2024 20:05:54.729711056 CEST	192.168.2.5	130.195.163.110	6b4	Echo
Oct 25, 2024 20:05:54.760812044 CEST	192.168.2.5	130.195.155.138	6b3	Echo
Oct 25, 2024 20:05:54.792285919 CEST	192.168.2.5	130.195.23.222	6b2	Echo
Oct 25, 2024 20:05:54.823738098 CEST	192.168.2.5	130.195.86.13	6b1	Echo
Oct 25, 2024 20:05:54.854747057 CEST	192.168.2.5	130.195.11.50	6b0	Echo
Oct 25, 2024 20:05:54.885817051 CEST	192.168.2.5	130.195.144.31	6af	Echo
Oct 25, 2024 20:05:54.917148113 CEST	192.168.2.5	130.195.103.143	6ae	Echo
Oct 25, 2024 20:05:54.948323011 CEST	192.168.2.5	130.195.49.104	6ad	Echo
Oct 25, 2024 20:05:54.965544939 CEST	192.168.2.5	130.195.59.172	6ac	Echo
Oct 25, 2024 20:05:54.965588093 CEST	192.168.2.5	130.195.40.244	6ab	Echo
Oct 25, 2024 20:05:54.965610027 CEST	192.168.2.5	130.195.105.76	6a9	Echo
Oct 25, 2024 20:05:54.965650082 CEST	192.168.2.5	130.195.137.246	6a8	Echo
Oct 25, 2024 20:05:54.965693951 CEST	192.168.2.5	130.195.78.115	6aa	Echo
Oct 25, 2024 20:05:54.965749979 CEST	192.168.2.5	130.195.130.151	6a6	Echo
Oct 25, 2024 20:05:54.965847969 CEST	192.168.2.5	130.195.250.31	6a4	Echo
Oct 25, 2024 20:05:54.965867043 CEST	192.168.2.5	130.195.231.46	6a7	Echo
Oct 25, 2024 20:05:54.965966940 CEST	192.168.2.5	130.195.229.101	6a5	Echo
Oct 25, 2024 20:05:54.966054916 CEST	192.168.2.5	130.195.104.109	6a3	Echo
Oct 25, 2024 20:05:54.966089010 CEST	192.168.2.5	130.195.82.27	6a1	Echo
Oct 25, 2024 20:05:54.966134071 CEST	192.168.2.5	130.195.217.155	6a2	Echo
Oct 25, 2024 20:05:54.966171980 CEST	192.168.2.5	130.195.72.242	6a0	Echo
Oct 25, 2024 20:05:54.966178894 CEST	192.168.2.5	130.195.123.201	69e	Echo
Oct 25, 2024 20:05:54.966172934 CEST	192.168.2.5	130.195.3.169	69f	Echo
Oct 25, 2024 20:05:54.966192961 CEST	192.168.2.5	130.195.38.140	69d	Echo
Oct 25, 2024 20:05:54.979547977 CEST	192.168.2.5	130.195.184.92	69c	Echo
Oct 25, 2024 20:05:55.012976885 CEST	192.168.2.5	130.195.65.120	69b	Echo
Oct 25, 2024 20:05:55.042301893 CEST	192.168.2.5	130.195.208.114	69a	Echo
Oct 25, 2024 20:05:55.073389053 CEST	192.168.2.5	130.195.239.174	699	Echo
Oct 25, 2024 20:05:55.104809999 CEST	192.168.2.5	130.195.246.4	698	Echo
Oct 25, 2024 20:05:55.135854959 CEST	192.168.2.5	130.195.171.245	697	Echo
Oct 25, 2024 20:05:55.166918039 CEST	192.168.2.5	130.195.97.9	696	Echo
Oct 25, 2024 20:05:55.198410034 CEST	192.168.2.5	130.195.129.108	695	Echo
Oct 25, 2024 20:05:55.229707003 CEST	192.168.2.5	130.195.50.183	694	Echo
Oct 25, 2024 20:05:55.261069059 CEST	192.168.2.5	130.195.111.246	693	Echo
Oct 25, 2024 20:05:55.292047977 CEST	192.168.2.5	130.195.26.249	692	Echo
Oct 25, 2024 20:05:55.323446989 CEST	192.168.2.5	130.195.11.36	691	Echo
Oct 25, 2024 20:05:55.360443115 CEST	192.168.2.5	130.195.143.76	690	Echo
Oct 25, 2024 20:05:55.385889053 CEST	192.168.2.5	130.195.48.175	68f	Echo
Oct 25, 2024 20:05:55.417382956 CEST	192.168.2.5	130.195.47.214	68e	Echo
Oct 25, 2024 20:05:55.448302031 CEST	192.168.2.5	130.195.56.32	68d	Echo
Oct 25, 2024 20:05:55.465573072 CEST	192.168.2.5	130.195.13.241	68c	Echo
Oct 25, 2024 20:05:55.465706110 CEST	192.168.2.5	130.195.69.120	68b	Echo
Oct 25, 2024 20:05:55.465800047 CEST	192.168.2.5	130.195.167.199	68a	Echo
Oct 25, 2024 20:05:55.465889931 CEST	192.168.2.5	130.195.185.189	689	Echo
Oct 25, 2024 20:05:55.465956926 CEST	192.168.2.5	130.195.29.225	688	Echo
Oct 25, 2024 20:05:55.466029882 CEST	192.168.2.5	130.195.91.111	687	Echo
Oct 25, 2024 20:05:55.466099024 CEST	192.168.2.5	130.195.91.84	686	Echo
Oct 25, 2024 20:05:55.466221094 CEST	192.168.2.5	130.195.99.91	685	Echo
Oct 25, 2024 20:05:55.466315985 CEST	192.168.2.5	130.195.42.205	684	Echo
Oct 25, 2024 20:05:55.466401100 CEST	192.168.2.5	130.195.208.21	683	Echo
Oct 25, 2024 20:05:55.466502905 CEST	192.168.2.5	130.195.16.208	682	Echo
Oct 25, 2024 20:05:55.466604948 CEST	192.168.2.5	130.195.75.17	681	Echo
Oct 25, 2024 20:05:55.466689110 CEST	192.168.2.5	130.195.251.190	680	Echo
Oct 25, 2024 20:05:55.466774940 CEST	192.168.2.5	130.195.151.119	67f	Echo
Oct 25, 2024 20:05:55.466907978 CEST	192.168.2.5	130.195.91.132	67e	Echo
Oct 25, 2024 20:05:55.479481936 CEST	192.168.2.5	130.195.49.246	67d	Echo
Oct 25, 2024 20:05:55.510848999 CEST	192.168.2.5	130.195.108.125	67c	Echo
Oct 25, 2024 20:05:55.542104959 CEST	192.168.2.5	130.195.197.253	67b	Echo
Oct 25, 2024 20:05:55.573409081 CEST	192.168.2.5	130.195.194.240	67a	Echo
Oct 25, 2024 20:05:55.604664087 CEST	192.168.2.5	130.195.48.90	679	Echo
Oct 25, 2024 20:05:55.627285957 CEST	192.168.2.5	130.195.11.36	678	Echo
Oct 25, 2024 20:05:55.636116028 CEST	192.168.2.5	130.195.82.211	677	Echo
Oct 25, 2024 20:05:55.667121887 CEST	192.168.2.5	130.195.127.254	676	Echo
Oct 25, 2024 20:05:55.698723078 CEST	192.168.2.5	130.195.107.127	675	Echo
Oct 25, 2024 20:05:55.729571104 CEST	192.168.2.5	130.195.80.1	674	Echo
Oct 25, 2024 20:05:55.760956049 CEST	192.168.2.5	130.195.156.215	673	Echo
Oct 25, 2024 20:05:55.792021036 CEST	192.168.2.5	130.195.216.138	672	Echo
Oct 25, 2024 20:05:55.823373079 CEST	192.168.2.5	130.195.12.14	671	Echo
Oct 25, 2024 20:05:55.854625940 CEST	192.168.2.5	130.195.63.12	670	Echo
Oct 25, 2024 20:05:55.885780096 CEST	192.168.2.5	130.195.25.63	66f	Echo
Oct 25, 2024 20:05:55.917167902 CEST	192.168.2.5	130.195.85.227	66e	Echo
Oct 25, 2024 20:05:55.948143005 CEST	192.168.2.5	130.195.236.43	66d	Echo
Oct 25, 2024 20:05:55.964755058 CEST	192.168.2.5	130.195.3.224	66c	Echo
Oct 25, 2024 20:05:55.965127945 CEST	192.168.2.5	130.195.105.141	66b	Echo
Oct 25, 2024 20:05:55.965183020 CEST	192.168.2.5	130.195.242.44	66a	Echo
Oct 25, 2024 20:05:55.965218067 CEST	192.168.2.5	130.195.142.241	669	Echo
Oct 25, 2024 20:05:55.965276957 CEST	192.168.2.5	130.195.73.100	668	Echo
Oct 25, 2024 20:05:55.965341091 CEST	192.168.2.5	130.195.26.24	667	Echo
Oct 25, 2024 20:05:55.965359926 CEST	192.168.2.5	130.195.46.220	666	Echo
Oct 25, 2024 20:05:55.965411901 CEST	192.168.2.5	130.195.113.30	665	Echo
Oct 25, 2024 20:05:55.965445995 CEST	192.168.2.5	130.195.52.27	664	Echo
Oct 25, 2024 20:05:55.965498924 CEST	192.168.2.5	130.195.179.83	663	Echo
Oct 25, 2024 20:05:55.965534925 CEST	192.168.2.5	130.195.49.81	662	Echo
Oct 25, 2024 20:05:55.965595961 CEST	192.168.2.5	130.195.248.49	661	Echo
Oct 25, 2024 20:05:55.965650082 CEST	192.168.2.5	130.195.72.248	660	Echo
Oct 25, 2024 20:05:55.965684891 CEST	192.168.2.5	130.195.71.73	65f	Echo
Oct 25, 2024 20:05:55.965724945 CEST	192.168.2.5	130.195.177.174	65e	Echo
Oct 25, 2024 20:05:55.965755939 CEST	192.168.2.5	130.195.201.47	65d	Echo
Oct 25, 2024 20:05:55.979574919 CEST	192.168.2.5	130.195.176.173	65c	Echo
Oct 25, 2024 20:05:56.013144016 CEST	192.168.2.5	130.195.159.175	65b	Echo
Oct 25, 2024 20:05:56.042407036 CEST	192.168.2.5	130.195.21.185	65a	Echo
Oct 25, 2024 20:05:56.073582888 CEST	192.168.2.5	130.195.70.34	659	Echo
Oct 25, 2024 20:05:56.104582071 CEST	192.168.2.5	130.195.113.175	658	Echo
Oct 25, 2024 20:05:56.135812998 CEST	192.168.2.5	130.195.166.183	657	Echo
Oct 25, 2024 20:05:56.166924000 CEST	192.168.2.5	130.195.170.206	656	Echo
Oct 25, 2024 20:05:56.198859930 CEST	192.168.2.5	130.195.2.101	655	Echo
Oct 25, 2024 20:05:56.230190039 CEST	192.168.2.5	130.195.106.150	654	Echo
Oct 25, 2024 20:05:56.260909081 CEST	192.168.2.5	130.195.87.25	653	Echo
Oct 25, 2024 20:05:56.292057991 CEST	192.168.2.5	130.195.54.132	652	Echo
Oct 25, 2024 20:05:56.323237896 CEST	192.168.2.5	130.195.45.28	651	Echo
Oct 25, 2024 20:05:56.354564905 CEST	192.168.2.5	130.195.57.111	650	Echo
Oct 25, 2024 20:05:56.394470930 CEST	192.168.2.5	130.195.74.231	64f	Echo
Oct 25, 2024 20:05:56.417682886 CEST	192.168.2.5	130.195.131.25	64e	Echo
Oct 25, 2024 20:05:56.448288918 CEST	192.168.2.5	130.195.125.119	64d	Echo
Oct 25, 2024 20:05:56.465810061 CEST	192.168.2.5	130.195.114.120	64c	Echo
Oct 25, 2024 20:05:56.466036081 CEST	192.168.2.5	130.195.92.50	64b	Echo
Oct 25, 2024 20:05:56.466167927 CEST	192.168.2.5	130.195.134.60	64a	Echo
Oct 25, 2024 20:05:56.466212034 CEST	192.168.2.5	130.195.95.3	649	Echo
Oct 25, 2024 20:05:56.466517925 CEST	192.168.2.5	130.195.145.30	648	Echo
Oct 25, 2024 20:05:56.466578960 CEST	192.168.2.5	130.195.120.25	647	Echo
Oct 25, 2024 20:05:56.466672897 CEST	192.168.2.5	130.195.92.6	646	Echo
Oct 25, 2024 20:05:56.466766119 CEST	192.168.2.5	130.195.103.64	645	Echo
Oct 25, 2024 20:05:56.467092037 CEST	192.168.2.5	130.195.163.110	644	Echo
Oct 25, 2024 20:05:56.467187881 CEST	192.168.2.5	130.195.155.138	643	Echo
Oct 25, 2024 20:05:56.467355013 CEST	192.168.2.5	130.195.23.222	642	Echo
Oct 25, 2024 20:05:56.467482090 CEST	192.168.2.5	130.195.86.13	641	Echo
Oct 25, 2024 20:05:56.467536926 CEST	192.168.2.5	130.195.11.50	640	Echo
Oct 25, 2024 20:05:56.467627048 CEST	192.168.2.5	130.195.144.31	63f	Echo
Oct 25, 2024 20:05:56.467875957 CEST	192.168.2.5	130.195.103.143	63e	Echo
Oct 25, 2024 20:05:56.467962980 CEST	192.168.2.5	130.195.49.104	63d	Echo
Oct 25, 2024 20:05:56.479497910 CEST	192.168.2.5	130.195.236.134	63c	Echo
Oct 25, 2024 20:05:56.510777950 CEST	192.168.2.5	130.195.184.71	63b	Echo
Oct 25, 2024 20:05:56.542236090 CEST	192.168.2.5	130.195.159.205	63a	Echo
Oct 25, 2024 20:05:56.573272943 CEST	192.168.2.5	130.195.22.71	639	Echo
Oct 25, 2024 20:05:56.604460001 CEST	192.168.2.5	130.195.38.14	638	Echo
Oct 25, 2024 20:05:56.635797024 CEST	192.168.2.5	130.195.20.249	637	Echo
Oct 25, 2024 20:05:56.667062998 CEST	192.168.2.5	130.195.76.71	636	Echo
Oct 25, 2024 20:05:56.698857069 CEST	192.168.2.5	130.195.235.170	635	Echo
Oct 25, 2024 20:05:56.729827881 CEST	192.168.2.5	130.195.53.236	634	Echo
Oct 25, 2024 20:05:56.761209965 CEST	192.168.2.5	130.195.24.17	633	Echo
Oct 25, 2024 20:05:56.792165995 CEST	192.168.2.5	130.195.41.142	632	Echo
Oct 25, 2024 20:05:56.823215008 CEST	192.168.2.5	130.195.97.160	631	Echo
Oct 25, 2024 20:05:56.854796886 CEST	192.168.2.5	130.195.131.97	630	Echo
Oct 25, 2024 20:05:56.885895967 CEST	192.168.2.5	130.195.82.168	62f	Echo
Oct 25, 2024 20:05:56.917293072 CEST	192.168.2.5	130.195.52.154	62e	Echo
Oct 25, 2024 20:05:56.948553085 CEST	192.168.2.5	130.195.225.2	62d	Echo
Oct 25, 2024 20:05:56.965611935 CEST	192.168.2.5	130.195.184.92	62c	Echo
Oct 25, 2024 20:05:56.965655088 CEST	192.168.2.5	130.195.239.174	629	Echo
Oct 25, 2024 20:05:56.965675116 CEST	192.168.2.5	130.195.65.120	62b	Echo
Oct 25, 2024 20:05:56.965725899 CEST	192.168.2.5	130.195.208.114	62a	Echo
Oct 25, 2024 20:05:56.965815067 CEST	192.168.2.5	130.195.97.9	626	Echo
Oct 25, 2024 20:05:56.965817928 CEST	192.168.2.5	130.195.246.4	628	Echo
Oct 25, 2024 20:05:56.965903997 CEST	192.168.2.5	130.195.171.245	627	Echo
Oct 25, 2024 20:05:56.965965033 CEST	192.168.2.5	130.195.50.183	624	Echo
Oct 25, 2024 20:05:56.966016054 CEST	192.168.2.5	130.195.129.108	625	Echo
Oct 25, 2024 20:05:56.966056108 CEST	192.168.2.5	130.195.26.249	622	Echo
Oct 25, 2024 20:05:56.966144085 CEST	192.168.2.5	130.195.143.76	621	Echo
Oct 25, 2024 20:05:56.966192961 CEST	192.168.2.5	130.195.48.175	620	Echo
Oct 25, 2024 20:05:56.966204882 CEST	192.168.2.5	130.195.111.246	623	Echo
Oct 25, 2024 20:05:56.966320992 CEST	192.168.2.5	130.195.56.32	61e	Echo
Oct 25, 2024 20:05:56.966353893 CEST	192.168.2.5	130.195.47.214	61f	Echo
Oct 25, 2024 20:05:56.980420113 CEST	192.168.2.5	130.195.79.225	61d	Echo
Oct 25, 2024 20:05:57.010869980 CEST	192.168.2.5	130.195.90.80	61c	Echo
Oct 25, 2024 20:05:57.042052984 CEST	192.168.2.5	130.195.136.90	61b	Echo
Oct 25, 2024 20:05:57.074083090 CEST	192.168.2.5	130.195.4.92	61a	Echo
Oct 25, 2024 20:05:57.105303049 CEST	192.168.2.5	130.195.40.98	619	Echo
Oct 25, 2024 20:05:57.136277914 CEST	192.168.2.5	130.195.85.91	618	Echo
Oct 25, 2024 20:05:57.167117119 CEST	192.168.2.5	130.195.162.52	617	Echo
Oct 25, 2024 20:05:57.199359894 CEST	192.168.2.5	130.195.56.105	616	Echo
Oct 25, 2024 20:05:57.229837894 CEST	192.168.2.5	130.195.114.52	615	Echo
Oct 25, 2024 20:05:57.261562109 CEST	192.168.2.5	130.195.35.123	614	Echo
Oct 25, 2024 20:05:57.292043924 CEST	192.168.2.5	130.195.46.86	613	Echo
Oct 25, 2024 20:05:57.323785067 CEST	192.168.2.5	130.195.90.8	612	Echo
Oct 25, 2024 20:05:57.354567051 CEST	192.168.2.5	130.195.162.203	611	Echo
Oct 25, 2024 20:05:57.388686895 CEST	192.168.2.5	130.195.201.176	610	Echo
Oct 25, 2024 20:05:57.426800966 CEST	192.168.2.5	130.195.19.75	60f	Echo
Oct 25, 2024 20:05:57.448462009 CEST	192.168.2.5	130.195.97.67	60e	Echo
Oct 25, 2024 20:05:57.465668917 CEST	192.168.2.5	130.195.49.246	60d	Echo
Oct 25, 2024 20:05:57.465686083 CEST	192.168.2.5	130.195.108.125	60c	Echo
Oct 25, 2024 20:05:57.465826988 CEST	192.168.2.5	130.195.197.253	60b	Echo
Oct 25, 2024 20:05:57.466001034 CEST	192.168.2.5	130.195.194.240	60a	Echo
Oct 25, 2024 20:05:57.466197014 CEST	192.168.2.5	130.195.48.90	609	Echo
Oct 25, 2024 20:05:57.466300011 CEST	192.168.2.5	130.195.82.211	608	Echo
Oct 25, 2024 20:05:57.466387033 CEST	192.168.2.5	130.195.127.254	607	Echo
Oct 25, 2024 20:05:57.466466904 CEST	192.168.2.5	130.195.107.127	606	Echo
Oct 25, 2024 20:05:57.466522932 CEST	192.168.2.5	130.195.80.1	605	Echo
Oct 25, 2024 20:05:57.466562986 CEST	192.168.2.5	130.195.156.215	604	Echo
Oct 25, 2024 20:05:57.466644049 CEST	192.168.2.5	130.195.216.138	603	Echo
Oct 25, 2024 20:05:57.466861963 CEST	192.168.2.5	130.195.25.63	600	Echo
Oct 25, 2024 20:05:57.466902971 CEST	192.168.2.5	130.195.12.14	602	Echo
Oct 25, 2024 20:05:57.466950893 CEST	192.168.2.5	130.195.63.12	601	Echo
Oct 25, 2024 20:05:57.467006922 CEST	192.168.2.5	130.195.85.227	5ff	Echo
Oct 25, 2024 20:05:57.467025995 CEST	192.168.2.5	130.195.236.43	5fe	Echo
Oct 25, 2024 20:05:57.479681015 CEST	192.168.2.5	130.195.199.45	5fd	Echo
Oct 25, 2024 20:05:57.510691881 CEST	192.168.2.5	130.195.58.14	5fc	Echo
Oct 25, 2024 20:05:57.542200089 CEST	192.168.2.5	130.195.154.80	5fb	Echo
Oct 25, 2024 20:05:57.573682070 CEST	192.168.2.5	130.195.72.254	5fa	Echo
Oct 25, 2024 20:05:57.604686022 CEST	192.168.2.5	130.195.24.217	5f9	Echo
Oct 25, 2024 20:05:57.635790110 CEST	192.168.2.5	130.195.156.105	5f8	Echo
Oct 25, 2024 20:05:57.667129993 CEST	192.168.2.5	130.195.203.21	5f7	Echo
Oct 25, 2024 20:05:57.698174000 CEST	192.168.2.5	130.195.221.202	5f6	Echo
Oct 25, 2024 20:05:57.729609966 CEST	192.168.2.5	130.195.166.221	5f5	Echo
Oct 25, 2024 20:05:57.761184931 CEST	192.168.2.5	130.195.36.167	5f4	Echo
Oct 25, 2024 20:05:57.792150974 CEST	192.168.2.5	130.195.34.135	5f3	Echo
Oct 25, 2024 20:05:57.823666096 CEST	192.168.2.5	130.195.132.177	5f2	Echo
Oct 25, 2024 20:05:57.858059883 CEST	192.168.2.5	130.195.85.226	5f1	Echo
Oct 25, 2024 20:05:57.886276007 CEST	192.168.2.5	130.195.197.176	5f0	Echo
Oct 25, 2024 20:05:57.917047977 CEST	192.168.2.5	130.195.11.125	5ef	Echo
Oct 25, 2024 20:05:57.948888063 CEST	192.168.2.5	130.195.124.78	5ee	Echo
Oct 25, 2024 20:05:57.967674017 CEST	192.168.2.5	130.195.176.173	5ed	Echo
Oct 25, 2024 20:05:57.967820883 CEST	192.168.2.5	130.195.21.185	5eb	Echo
Oct 25, 2024 20:05:57.967945099 CEST	192.168.2.5	130.195.159.175	5ec	Echo
Oct 25, 2024 20:05:57.967963934 CEST	192.168.2.5	130.195.70.34	5ea	Echo
Oct 25, 2024 20:05:57.968070030 CEST	192.168.2.5	130.195.113.175	5e9	Echo
Oct 25, 2024 20:05:57.968194008 CEST	192.168.2.5	130.195.166.183	5e8	Echo
Oct 25, 2024 20:05:57.968307018 CEST	192.168.2.5	130.195.170.206	5e7	Echo
Oct 25, 2024 20:05:57.968425035 CEST	192.168.2.5	130.195.2.101	5e6	Echo
Oct 25, 2024 20:05:57.968535900 CEST	192.168.2.5	130.195.106.150	5e5	Echo
Oct 25, 2024 20:05:57.968640089 CEST	192.168.2.5	130.195.87.25	5e4	Echo
Oct 25, 2024 20:05:57.968756914 CEST	192.168.2.5	130.195.54.132	5e3	Echo
Oct 25, 2024 20:05:57.968862057 CEST	192.168.2.5	130.195.45.28	5e2	Echo
Oct 25, 2024 20:05:57.968985081 CEST	192.168.2.5	130.195.57.111	5e1	Echo
Oct 25, 2024 20:05:57.969206095 CEST	192.168.2.5	130.195.131.25	5df	Echo
Oct 25, 2024 20:05:57.969228029 CEST	192.168.2.5	130.195.74.231	5e0	Echo
Oct 25, 2024 20:05:57.969310999 CEST	192.168.2.5	130.195.125.119	5de	Echo
Oct 25, 2024 20:05:57.980593920 CEST	192.168.2.5	130.195.159.76	5dd	Echo
Oct 25, 2024 20:05:58.014830112 CEST	192.168.2.5	130.195.74.129	5dc	Echo
Oct 25, 2024 20:05:58.071369886 CEST	192.168.2.5	130.195.82.183	5db	Echo
Oct 25, 2024 20:05:58.164098024 CEST	192.168.2.5	130.195.211.50	5da	Echo
Oct 25, 2024 20:05:58.196332932 CEST	130.195.211.50	192.168.2.5	dda	Echo Reply
Oct 25, 2024 20:05:58.405503988 CEST	192.168.2.5	130.195.211.50	5d9	Echo
Oct 25, 2024 20:05:58.406635046 CEST	192.168.2.5	130.195.147.188	5d8	Echo
Oct 25, 2024 20:05:58.427645922 CEST	192.168.2.5	130.195.249.147	5d7	Echo
Oct 25, 2024 20:05:58.438018084 CEST	130.195.211.50	192.168.2.5	dd9	Echo Reply
Oct 25, 2024 20:05:58.458578110 CEST	192.168.2.5	130.195.60.1	5d6	Echo
Oct 25, 2024 20:05:58.477504015 CEST	130.195.60.1	192.168.2.5	dd6	Echo Reply
Oct 25, 2024 20:05:58.480603933 CEST	192.168.2.5	130.195.45.180	5d5	Echo
Oct 25, 2024 20:05:58.482770920 CEST	192.168.2.5	130.195.236.134	5d4	Echo
Oct 25, 2024 20:05:58.483378887 CEST	192.168.2.5	130.195.184.71	5d3	Echo
Oct 25, 2024 20:05:58.484164953 CEST	192.168.2.5	130.195.159.205	5d2	Echo
Oct 25, 2024 20:05:58.484793901 CEST	192.168.2.5	130.195.22.71	5d1	Echo
Oct 25, 2024 20:05:58.485977888 CEST	192.168.2.5	130.195.38.14	5d0	Echo
Oct 25, 2024 20:05:58.486479998 CEST	192.168.2.5	130.195.20.249	5cf	Echo
Oct 25, 2024 20:05:58.487117052 CEST	192.168.2.5	130.195.76.71	5ce	Echo
Oct 25, 2024 20:05:58.487351894 CEST	192.168.2.5	130.195.235.170	5cd	Echo
Oct 25, 2024 20:05:58.487946987 CEST	192.168.2.5	130.195.53.236	5cc	Echo
Oct 25, 2024 20:05:58.488447905 CEST	192.168.2.5	130.195.24.17	5cb	Echo
Oct 25, 2024 20:05:58.488538980 CEST	192.168.2.5	130.195.41.142	5ca	Echo
Oct 25, 2024 20:05:58.488663912 CEST	192.168.2.5	130.195.97.160	5c9	Echo
Oct 25, 2024 20:05:58.488955975 CEST	192.168.2.5	130.195.131.97	5c8	Echo
Oct 25, 2024 20:05:58.489434958 CEST	192.168.2.5	130.195.82.168	5c7	Echo
Oct 25, 2024 20:05:58.489933014 CEST	192.168.2.5	130.195.225.2	5c5	Echo
Oct 25, 2024 20:05:58.489938021 CEST	192.168.2.5	130.195.52.154	5c6	Echo
Oct 25, 2024 20:05:58.490052938 CEST	192.168.2.5	130.195.60.1	5c4	Echo
Oct 25, 2024 20:05:58.508941889 CEST	130.195.60.1	192.168.2.5	dc4	Echo Reply
Oct 25, 2024 20:05:58.511635065 CEST	192.168.2.5	130.195.12.50	5c3	Echo
Oct 25, 2024 20:05:58.543549061 CEST	192.168.2.5	130.195.121.171	5c2	Echo
Oct 25, 2024 20:05:58.573513031 CEST	192.168.2.5	130.195.127.2	5c1	Echo
Oct 25, 2024 20:05:58.604501963 CEST	192.168.2.5	130.195.198.164	5c0	Echo
Oct 25, 2024 20:05:58.635773897 CEST	192.168.2.5	130.195.133.198	5bf	Echo
Oct 25, 2024 20:05:58.667201042 CEST	192.168.2.5	130.195.142.91	5be	Echo
Oct 25, 2024 20:05:58.698271990 CEST	192.168.2.5	130.195.29.51	5bd	Echo
Oct 25, 2024 20:05:58.729610920 CEST	192.168.2.5	130.195.1.162	5bc	Echo
Oct 25, 2024 20:05:58.761092901 CEST	192.168.2.5	130.195.100.41	5bb	Echo
Oct 25, 2024 20:05:58.792262077 CEST	192.168.2.5	130.195.229.100	5ba	Echo
Oct 25, 2024 20:05:58.823556900 CEST	192.168.2.5	130.195.229.188	5b9	Echo
Oct 25, 2024 20:05:58.854888916 CEST	192.168.2.5	130.195.149.112	5b8	Echo
Oct 25, 2024 20:05:58.885832071 CEST	192.168.2.5	130.195.125.189	5b7	Echo
Oct 25, 2024 20:05:58.917123079 CEST	192.168.2.5	130.195.242.170	5b6	Echo
Oct 25, 2024 20:05:58.948318958 CEST	192.168.2.5	130.195.96.246	5b5	Echo
Oct 25, 2024 20:05:58.965076923 CEST	192.168.2.5	130.195.79.225	5b4	Echo
Oct 25, 2024 20:05:58.965138912 CEST	192.168.2.5	130.195.90.80	5b3	Echo
Oct 25, 2024 20:05:58.965161085 CEST	192.168.2.5	130.195.136.90	5b2	Echo
Oct 25, 2024 20:05:58.965281010 CEST	192.168.2.5	130.195.4.92	5b1	Echo
Oct 25, 2024 20:05:58.965311050 CEST	192.168.2.5	130.195.40.98	5b0	Echo
Oct 25, 2024 20:05:58.965370893 CEST	192.168.2.5	130.195.85.91	5af	Echo
Oct 25, 2024 20:05:58.965410948 CEST	192.168.2.5	130.195.162.52	5ae	Echo
Oct 25, 2024 20:05:58.965502977 CEST	192.168.2.5	130.195.56.105	5ad	Echo
Oct 25, 2024 20:05:58.965517998 CEST	192.168.2.5	130.195.114.52	5ac	Echo
Oct 25, 2024 20:05:58.965589046 CEST	192.168.2.5	130.195.35.123	5ab	Echo
Oct 25, 2024 20:05:58.965616941 CEST	192.168.2.5	130.195.46.86	5aa	Echo
Oct 25, 2024 20:05:58.965698957 CEST	192.168.2.5	130.195.90.8	5a9	Echo
Oct 25, 2024 20:05:58.965715885 CEST	192.168.2.5	130.195.162.203	5a8	Echo
Oct 25, 2024 20:05:58.965843916 CEST	192.168.2.5	130.195.19.75	5a6	Echo
Oct 25, 2024 20:05:58.965879917 CEST	192.168.2.5	130.195.201.176	5a7	Echo
Oct 25, 2024 20:05:58.965907097 CEST	192.168.2.5	130.195.97.67	5a5	Echo
Oct 25, 2024 20:05:58.979396105 CEST	192.168.2.5	130.195.184.144	5a4	Echo
Oct 25, 2024 20:05:59.010838032 CEST	192.168.2.5	130.195.81.184	5a3	Echo
Oct 25, 2024 20:05:59.042613983 CEST	192.168.2.5	130.195.0.107	5a2	Echo
Oct 25, 2024 20:05:59.073339939 CEST	192.168.2.5	130.195.248.21	5a1	Echo
Oct 25, 2024 20:05:59.106738091 CEST	192.168.2.5	130.195.174.58	5a0	Echo
Oct 25, 2024 20:05:59.136111975 CEST	192.168.2.5	130.195.212.197	59f	Echo
Oct 25, 2024 20:05:59.167146921 CEST	192.168.2.5	130.195.124.212	59e	Echo
Oct 25, 2024 20:05:59.198309898 CEST	192.168.2.5	130.195.42.235	59d	Echo
Oct 25, 2024 20:05:59.229497910 CEST	192.168.2.5	130.195.127.23	59c	Echo
Oct 25, 2024 20:05:59.260727882 CEST	192.168.2.5	130.195.162.126	59b	Echo
Oct 25, 2024 20:05:59.292141914 CEST	192.168.2.5	130.195.59.3	59a	Echo
Oct 25, 2024 20:05:59.323368073 CEST	192.168.2.5	130.195.236.97	599	Echo
Oct 25, 2024 20:05:59.354671955 CEST	192.168.2.5	130.195.232.15	598	Echo
Oct 25, 2024 20:05:59.385781050 CEST	192.168.2.5	130.195.67.83	597	Echo
Oct 25, 2024 20:05:59.417182922 CEST	192.168.2.5	130.195.33.239	596	Echo
Oct 25, 2024 20:05:59.448256016 CEST	192.168.2.5	130.195.88.34	595	Echo
Oct 25, 2024 20:05:59.465976954 CEST	192.168.2.5	130.195.199.45	594	Echo
Oct 25, 2024 20:05:59.466001034 CEST	192.168.2.5	130.195.58.14	593	Echo
Oct 25, 2024 20:05:59.466146946 CEST	192.168.2.5	130.195.154.80	592	Echo
Oct 25, 2024 20:05:59.466146946 CEST	192.168.2.5	130.195.72.254	591	Echo
Oct 25, 2024 20:05:59.466264009 CEST	192.168.2.5	130.195.156.105	58f	Echo
Oct 25, 2024 20:05:59.466299057 CEST	192.168.2.5	130.195.24.217	590	Echo
Oct 25, 2024 20:05:59.466465950 CEST	192.168.2.5	130.195.221.202	58d	Echo
Oct 25, 2024 20:05:59.466510057 CEST	192.168.2.5	130.195.203.21	58e	Echo
Oct 25, 2024 20:05:59.466543913 CEST	192.168.2.5	130.195.166.221	58c	Echo
Oct 25, 2024 20:05:59.466792107 CEST	192.168.2.5	130.195.36.167	58b	Echo
Oct 25, 2024 20:05:59.466792107 CEST	192.168.2.5	130.195.34.135	58a	Echo
Oct 25, 2024 20:05:59.466934919 CEST	192.168.2.5	130.195.132.177	589	Echo
Oct 25, 2024 20:05:59.467011929 CEST	192.168.2.5	130.195.85.226	588	Echo
Oct 25, 2024 20:05:59.467061043 CEST	192.168.2.5	130.195.11.125	586	Echo
Oct 25, 2024 20:05:59.467066050 CEST	192.168.2.5	130.195.197.176	587	Echo
Oct 25, 2024 20:05:59.467123985 CEST	192.168.2.5	130.195.124.78	585	Echo
Oct 25, 2024 20:05:59.479784012 CEST	192.168.2.5	130.195.51.78	584	Echo
Oct 25, 2024 20:05:59.510734081 CEST	192.168.2.5	130.195.128.213	583	Echo
Oct 25, 2024 20:05:59.542392969 CEST	192.168.2.5	130.195.245.235	582	Echo
Oct 25, 2024 20:05:59.573508978 CEST	192.168.2.5	130.195.114.117	581	Echo
Oct 25, 2024 20:05:59.604717016 CEST	192.168.2.5	130.195.135.197	580	Echo
Oct 25, 2024 20:05:59.635924101 CEST	192.168.2.5	130.195.44.196	57f	Echo
Oct 25, 2024 20:05:59.667175055 CEST	192.168.2.5	130.195.161.227	57e	Echo
Oct 25, 2024 20:05:59.698498964 CEST	192.168.2.5	130.195.161.24	57d	Echo
Oct 25, 2024 20:05:59.729587078 CEST	192.168.2.5	130.195.155.5	57c	Echo
Oct 25, 2024 20:05:59.760739088 CEST	192.168.2.5	130.195.230.55	57b	Echo
Oct 25, 2024 20:05:59.792022943 CEST	192.168.2.5	130.195.224.76	57a	Echo
Oct 25, 2024 20:05:59.823447943 CEST	192.168.2.5	130.195.253.136	579	Echo
Oct 25, 2024 20:05:59.854676962 CEST	192.168.2.5	130.195.45.83	578	Echo
Oct 25, 2024 20:05:59.885696888 CEST	192.168.2.5	130.195.210.163	577	Echo
Oct 25, 2024 20:05:59.917023897 CEST	192.168.2.5	130.195.13.50	576	Echo
Oct 25, 2024 20:05:59.948455095 CEST	192.168.2.5	130.195.94.176	575	Echo
Oct 25, 2024 20:05:59.965214014 CEST	192.168.2.5	130.195.159.76	574	Echo
Oct 25, 2024 20:05:59.965261936 CEST	192.168.2.5	130.195.74.129	573	Echo
Oct 25, 2024 20:05:59.965349913 CEST	192.168.2.5	130.195.82.183	572	Echo
Oct 25, 2024 20:05:59.965395927 CEST	192.168.2.5	130.195.147.188	571	Echo
Oct 25, 2024 20:05:59.965445042 CEST	192.168.2.5	130.195.249.147	570	Echo
Oct 25, 2024 20:05:59.979652882 CEST	192.168.2.5	130.195.150.245	56f	Echo
Oct 25, 2024 20:06:00.010730982 CEST	192.168.2.5	130.195.173.150	56e	Echo
Oct 25, 2024 20:06:00.042131901 CEST	192.168.2.5	130.195.53.180	56d	Echo
Oct 25, 2024 20:06:00.073321104 CEST	192.168.2.5	130.195.169.176	56c	Echo
Oct 25, 2024 20:06:00.104504108 CEST	192.168.2.5	130.195.37.72	56b	Echo
Oct 25, 2024 20:06:00.135766029 CEST	192.168.2.5	130.195.102.27	56a	Echo
Oct 25, 2024 20:06:00.167864084 CEST	192.168.2.5	130.195.99.12	569	Echo
Oct 25, 2024 20:06:00.213289022 CEST	192.168.2.5	130.195.52.53	568	Echo
Oct 25, 2024 20:06:00.231717110 CEST	192.168.2.5	130.195.57.55	567	Echo
Oct 25, 2024 20:06:00.262062073 CEST	192.168.2.5	130.195.139.132	566	Echo
Oct 25, 2024 20:06:00.293078899 CEST	192.168.2.5	130.195.155.196	565	Echo
Oct 25, 2024 20:06:00.323544979 CEST	192.168.2.5	130.195.22.251	564	Echo
Oct 25, 2024 20:06:00.355319977 CEST	192.168.2.5	130.195.27.98	563	Echo
Oct 25, 2024 20:06:00.386367083 CEST	192.168.2.5	130.195.134.27	562	Echo
Oct 25, 2024 20:06:00.417469978 CEST	192.168.2.5	130.195.169.133	561	Echo
Oct 25, 2024 20:06:00.448321104 CEST	192.168.2.5	130.195.133.169	560	Echo
Oct 25, 2024 20:06:00.464026928 CEST	192.168.2.5	130.195.45.180	55f	Echo
Oct 25, 2024 20:06:00.465706110 CEST	192.168.2.5	130.195.12.50	55e	Echo
Oct 25, 2024 20:06:00.465783119 CEST	192.168.2.5	130.195.121.171	55d	Echo
Oct 25, 2024 20:06:00.465907097 CEST	192.168.2.5	130.195.127.2	55c	Echo
Oct 25, 2024 20:06:00.465990067 CEST	192.168.2.5	130.195.198.164	55b	Echo
Oct 25, 2024 20:06:00.466084957 CEST	192.168.2.5	130.195.133.198	55a	Echo
Oct 25, 2024 20:06:00.466166973 CEST	192.168.2.5	130.195.142.91	559	Echo
Oct 25, 2024 20:06:00.466259956 CEST	192.168.2.5	130.195.29.51	558	Echo
Oct 25, 2024 20:06:00.466344118 CEST	192.168.2.5	130.195.1.162	557	Echo
Oct 25, 2024 20:06:00.466448069 CEST	192.168.2.5	130.195.100.41	556	Echo
Oct 25, 2024 20:06:00.466526031 CEST	192.168.2.5	130.195.229.100	555	Echo
Oct 25, 2024 20:06:00.466607094 CEST	192.168.2.5	130.195.229.188	554	Echo
Oct 25, 2024 20:06:00.466675043 CEST	192.168.2.5	130.195.149.112	553	Echo
Oct 25, 2024 20:06:00.466856003 CEST	192.168.2.5	130.195.125.189	552	Echo
Oct 25, 2024 20:06:00.466941118 CEST	192.168.2.5	130.195.242.170	551	Echo
Oct 25, 2024 20:06:00.467010975 CEST	192.168.2.5	130.195.96.246	550	Echo
Oct 25, 2024 20:06:00.482137918 CEST	192.168.2.5	130.195.228.175	54f	Echo
Oct 25, 2024 20:06:00.540210009 CEST	192.168.2.5	130.195.197.41	54e	Echo
Oct 25, 2024 20:06:00.560688019 CEST	192.168.2.5	130.195.200.197	54d	Echo
Oct 25, 2024 20:06:00.589121103 CEST	192.168.2.5	130.195.63.223	54c	Echo
Oct 25, 2024 20:06:00.620312929 CEST	192.168.2.5	130.195.176.245	54b	Echo
Oct 25, 2024 20:06:00.651973963 CEST	192.168.2.5	130.195.49.21	54a	Echo
Oct 25, 2024 20:06:00.682894945 CEST	192.168.2.5	130.195.142.194	549	Echo
Oct 25, 2024 20:06:00.714024067 CEST	192.168.2.5	130.195.36.170	548	Echo
Oct 25, 2024 20:06:00.780296087 CEST	192.168.2.5	130.195.82.34	547	Echo
Oct 25, 2024 20:06:00.811306000 CEST	192.168.2.5	130.195.35.187	546	Echo
Oct 25, 2024 20:06:00.939723969 CEST	192.168.2.5	130.195.42.82	545	Echo
Oct 25, 2024 20:06:00.945894957 CEST	192.168.2.5	130.195.103.10	544	Echo
Oct 25, 2024 20:06:01.016760111 CEST	192.168.2.5	130.195.4.42	543	Echo
Oct 25, 2024 20:06:01.019265890 CEST	192.168.2.5	130.195.184.144	542	Echo
Oct 25, 2024 20:06:01.019485950 CEST	192.168.2.5	130.195.81.184	541	Echo
Oct 25, 2024 20:06:01.048485994 CEST	192.168.2.5	130.195.0.107	540	Echo
Oct 25, 2024 20:06:01.049323082 CEST	192.168.2.5	130.195.248.21	53f	Echo
Oct 25, 2024 20:06:01.055515051 CEST	192.168.2.5	130.195.161.186	53e	Echo
Oct 25, 2024 20:06:01.055672884 CEST	192.168.2.5	130.195.174.58	53d	Echo
Oct 25, 2024 20:06:01.071765900 CEST	192.168.2.5	130.195.212.197	53c	Echo
Oct 25, 2024 20:06:01.075339079 CEST	192.168.2.5	130.195.124.212	53b	Echo
Oct 25, 2024 20:06:01.078125954 CEST	192.168.2.5	130.195.248.12	53a	Echo
Oct 25, 2024 20:06:01.080336094 CEST	192.168.2.5	130.195.42.235	539	Echo
Oct 25, 2024 20:06:01.080462933 CEST	192.168.2.5	130.195.127.23	538	Echo
Oct 25, 2024 20:06:01.080598116 CEST	192.168.2.5	130.195.162.126	537	Echo
Oct 25, 2024 20:06:01.080699921 CEST	192.168.2.5	130.195.59.3	536	Echo
Oct 25, 2024 20:06:01.080774069 CEST	192.168.2.5	130.195.236.97	535	Echo
Oct 25, 2024 20:06:01.080878019 CEST	192.168.2.5	130.195.232.15	534	Echo
Oct 25, 2024 20:06:01.080971956 CEST	192.168.2.5	130.195.67.83	533	Echo
Oct 25, 2024 20:06:01.085175037 CEST	192.168.2.5	130.195.33.239	532	Echo
Oct 25, 2024 20:06:01.085818052 CEST	192.168.2.5	130.195.88.34	531	Echo
Oct 25, 2024 20:06:01.107237101 CEST	192.168.2.5	130.195.235.168	530	Echo
Oct 25, 2024 20:06:01.137454987 CEST	192.168.2.5	130.195.124.105	52f	Echo
Oct 25, 2024 20:06:01.167336941 CEST	192.168.2.5	130.195.110.17	52e	Echo
Oct 25, 2024 20:06:01.198275089 CEST	192.168.2.5	130.195.34.80	52d	Echo
Oct 25, 2024 20:06:01.229491949 CEST	192.168.2.5	130.195.236.104	52c	Echo
Oct 25, 2024 20:06:01.260682106 CEST	192.168.2.5	130.195.3.88	52b	Echo
Oct 25, 2024 20:06:01.292279005 CEST	192.168.2.5	130.195.157.15	52a	Echo
Oct 25, 2024 20:06:01.323600054 CEST	192.168.2.5	130.195.127.170	529	Echo
Oct 25, 2024 20:06:01.354572058 CEST	192.168.2.5	130.195.25.245	528	Echo
Oct 25, 2024 20:06:01.385766983 CEST	192.168.2.5	130.195.195.195	527	Echo
Oct 25, 2024 20:06:01.417294025 CEST	192.168.2.5	130.195.58.174	526	Echo
Oct 25, 2024 20:06:01.448272943 CEST	192.168.2.5	130.195.37.164	525	Echo
Oct 25, 2024 20:06:01.465622902 CEST	192.168.2.5	130.195.51.78	524	Echo
Oct 25, 2024 20:06:01.465656996 CEST	192.168.2.5	130.195.128.213	523	Echo
Oct 25, 2024 20:06:01.465759039 CEST	192.168.2.5	130.195.245.235	522	Echo
Oct 25, 2024 20:06:01.465790033 CEST	192.168.2.5	130.195.114.117	521	Echo
Oct 25, 2024 20:06:01.465893984 CEST	192.168.2.5	130.195.135.197	520	Echo
Oct 25, 2024 20:06:01.465941906 CEST	192.168.2.5	130.195.44.196	51f	Echo
Oct 25, 2024 20:06:01.466038942 CEST	192.168.2.5	130.195.161.227	51e	Echo
Oct 25, 2024 20:06:01.466115952 CEST	192.168.2.5	130.195.161.24	51d	Echo
Oct 25, 2024 20:06:01.466187954 CEST	192.168.2.5	130.195.155.5	51c	Echo
Oct 25, 2024 20:06:01.466265917 CEST	192.168.2.5	130.195.230.55	51b	Echo
Oct 25, 2024 20:06:01.466316938 CEST	192.168.2.5	130.195.224.76	51a	Echo
Oct 25, 2024 20:06:01.466377020 CEST	192.168.2.5	130.195.253.136	519	Echo
Oct 25, 2024 20:06:01.466449022 CEST	192.168.2.5	130.195.45.83	518	Echo
Oct 25, 2024 20:06:01.466515064 CEST	192.168.2.5	130.195.210.163	517	Echo
Oct 25, 2024 20:06:01.466598988 CEST	192.168.2.5	130.195.13.50	516	Echo
Oct 25, 2024 20:06:01.466658115 CEST	192.168.2.5	130.195.94.176	515	Echo
Oct 25, 2024 20:06:01.479437113 CEST	192.168.2.5	130.195.86.37	514	Echo
Oct 25, 2024 20:06:01.510797024 CEST	192.168.2.5	130.195.61.86	513	Echo
Oct 25, 2024 20:06:01.542252064 CEST	192.168.2.5	130.195.244.60	512	Echo
Oct 25, 2024 20:06:01.573506117 CEST	192.168.2.5	130.195.101.129	511	Echo
Oct 25, 2024 20:06:01.604582071 CEST	192.168.2.5	130.195.71.144	510	Echo
Oct 25, 2024 20:06:01.636167049 CEST	192.168.2.5	130.195.151.34	50f	Echo
Oct 25, 2024 20:06:01.669064045 CEST	192.168.2.5	130.195.108.10	50e	Echo
Oct 25, 2024 20:06:01.698506117 CEST	192.168.2.5	130.195.62.151	50d	Echo
Oct 25, 2024 20:06:01.729583025 CEST	192.168.2.5	130.195.70.143	50c	Echo
Oct 25, 2024 20:06:01.760905027 CEST	192.168.2.5	130.195.85.155	50b	Echo
Oct 25, 2024 20:06:01.792228937 CEST	192.168.2.5	130.195.57.85	50a	Echo
Oct 25, 2024 20:06:01.823546886 CEST	192.168.2.5	130.195.21.121	509	Echo
Oct 25, 2024 20:06:01.855139017 CEST	192.168.2.5	130.195.224.100	508	Echo
Oct 25, 2024 20:06:01.885864973 CEST	192.168.2.5	130.195.45.224	507	Echo
Oct 25, 2024 20:06:01.917357922 CEST	192.168.2.5	130.195.107.45	506	Echo
Oct 25, 2024 20:06:01.948779106 CEST	192.168.2.5	130.195.37.107	505	Echo
Oct 25, 2024 20:06:01.965141058 CEST	192.168.2.5	130.195.150.245	504	Echo
Oct 25, 2024 20:06:01.965254068 CEST	192.168.2.5	130.195.173.150	503	Echo
Oct 25, 2024 20:06:01.965404987 CEST	192.168.2.5	130.195.53.180	502	Echo
Oct 25, 2024 20:06:01.965501070 CEST	192.168.2.5	130.195.169.176	501	Echo
Oct 25, 2024 20:06:01.965604067 CEST	192.168.2.5	130.195.37.72	500	Echo
Oct 25, 2024 20:06:01.965711117 CEST	192.168.2.5	130.195.102.27	4ff	Echo
Oct 25, 2024 20:06:01.965825081 CEST	192.168.2.5	130.195.99.12	4fe	Echo
Oct 25, 2024 20:06:01.965931892 CEST	192.168.2.5	130.195.52.53	4fd	Echo
Oct 25, 2024 20:06:01.966034889 CEST	192.168.2.5	130.195.57.55	4fc	Echo
Oct 25, 2024 20:06:01.966134071 CEST	192.168.2.5	130.195.139.132	4fb	Echo
Oct 25, 2024 20:06:01.966243982 CEST	192.168.2.5	130.195.155.196	4fa	Echo
Oct 25, 2024 20:06:01.966447115 CEST	192.168.2.5	130.195.22.251	4f9	Echo
Oct 25, 2024 20:06:01.966453075 CEST	192.168.2.5	130.195.27.98	4f8	Echo
Oct 25, 2024 20:06:01.966569901 CEST	192.168.2.5	130.195.134.27	4f7	Echo
Oct 25, 2024 20:06:01.966679096 CEST	192.168.2.5	130.195.169.133	4f6	Echo
Oct 25, 2024 20:06:01.966979980 CEST	192.168.2.5	130.195.133.169	4f5	Echo
Oct 25, 2024 20:06:01.979787111 CEST	192.168.2.5	130.195.204.205	4f4	Echo
Oct 25, 2024 20:06:02.011791945 CEST	192.168.2.5	130.195.220.21	4f3	Echo
Oct 25, 2024 20:06:02.042857885 CEST	192.168.2.5	130.195.244.67	4f2	Echo
Oct 25, 2024 20:06:02.073580980 CEST	192.168.2.5	130.195.53.150	4f1	Echo
Oct 25, 2024 20:06:02.104690075 CEST	192.168.2.5	130.195.137.46	4f0	Echo
Oct 25, 2024 20:06:02.135910988 CEST	192.168.2.5	130.195.73.102	4ef	Echo
Oct 25, 2024 20:06:02.167237997 CEST	192.168.2.5	130.195.50.200	4ee	Echo
Oct 25, 2024 20:06:02.198394060 CEST	192.168.2.5	130.195.77.51	4ed	Echo
Oct 25, 2024 20:06:02.229829073 CEST	192.168.2.5	130.195.73.45	4ec	Echo
Oct 25, 2024 20:06:02.260834932 CEST	192.168.2.5	130.195.110.249	4eb	Echo
Oct 25, 2024 20:06:02.292072058 CEST	192.168.2.5	130.195.193.166	4ea	Echo
Oct 25, 2024 20:06:02.323797941 CEST	192.168.2.5	130.195.213.78	4e9	Echo
Oct 25, 2024 20:06:02.354954004 CEST	192.168.2.5	130.195.236.111	4e8	Echo
Oct 25, 2024 20:06:02.386107922 CEST	192.168.2.5	130.195.75.8	4e7	Echo
Oct 25, 2024 20:06:02.417493105 CEST	192.168.2.5	130.195.221.187	4e6	Echo
Oct 25, 2024 20:06:02.449301958 CEST	192.168.2.5	130.195.177.221	4e5	Echo
Oct 25, 2024 20:06:02.466588974 CEST	192.168.2.5	130.195.228.175	4e4	Echo
Oct 25, 2024 20:06:02.466758966 CEST	192.168.2.5	130.195.200.197	4e2	Echo
Oct 25, 2024 20:06:02.466852903 CEST	192.168.2.5	130.195.197.41	4e3	Echo
Oct 25, 2024 20:06:02.466862917 CEST	192.168.2.5	130.195.63.223	4e1	Echo
Oct 25, 2024 20:06:02.466955900 CEST	192.168.2.5	130.195.176.245	4e0	Echo
Oct 25, 2024 20:06:02.467034101 CEST	192.168.2.5	130.195.49.21	4df	Echo
Oct 25, 2024 20:06:02.467127085 CEST	192.168.2.5	130.195.142.194	4de	Echo
Oct 25, 2024 20:06:02.467189074 CEST	192.168.2.5	130.195.36.170	4dd	Echo
Oct 25, 2024 20:06:02.467274904 CEST	192.168.2.5	130.195.82.34	4dc	Echo
Oct 25, 2024 20:06:02.467540979 CEST	192.168.2.5	130.195.35.187	4db	Echo
Oct 25, 2024 20:06:02.467559099 CEST	192.168.2.5	130.195.42.82	4da	Echo
Oct 25, 2024 20:06:02.467598915 CEST	192.168.2.5	130.195.103.10	4d9	Echo
Oct 25, 2024 20:06:02.479810953 CEST	192.168.2.5	130.195.20.178	4d8	Echo
Oct 25, 2024 20:06:02.510905027 CEST	192.168.2.5	130.195.155.20	4d7	Echo
Oct 25, 2024 20:06:02.542448044 CEST	192.168.2.5	130.195.25.155	4d6	Echo
Oct 25, 2024 20:06:02.574239016 CEST	192.168.2.5	130.195.56.126	4d5	Echo
Oct 25, 2024 20:06:02.604727983 CEST	192.168.2.5	130.195.67.35	4d4	Echo
Oct 25, 2024 20:06:02.636647940 CEST	192.168.2.5	130.195.218.207	4d3	Echo
Oct 25, 2024 20:06:02.667109013 CEST	192.168.2.5	130.195.187.218	4d2	Echo
Oct 25, 2024 20:06:02.699199915 CEST	192.168.2.5	130.195.90.122	4d1	Echo
Oct 25, 2024 20:06:02.730071068 CEST	192.168.2.5	130.195.165.149	4d0	Echo
Oct 25, 2024 20:06:02.761217117 CEST	192.168.2.5	130.195.59.165	4cf	Echo
Oct 25, 2024 20:06:02.792220116 CEST	192.168.2.5	130.195.207.59	4ce	Echo
Oct 25, 2024 20:06:02.823584080 CEST	192.168.2.5	130.195.31.177	4cd	Echo
Oct 25, 2024 20:06:02.856204987 CEST	192.168.2.5	130.195.183.116	4cc	Echo
Oct 25, 2024 20:06:02.885763884 CEST	192.168.2.5	130.195.162.18	4cb	Echo
Oct 25, 2024 20:06:02.917139053 CEST	192.168.2.5	130.195.105.114	4ca	Echo
Oct 25, 2024 20:06:02.949181080 CEST	192.168.2.5	130.195.200.104	4c9	Echo
Oct 25, 2024 20:06:02.964595079 CEST	192.168.2.5	130.195.4.42	4c8	Echo
Oct 25, 2024 20:06:02.965078115 CEST	192.168.2.5	130.195.161.186	4c7	Echo
Oct 25, 2024 20:06:02.965419054 CEST	192.168.2.5	130.195.248.12	4c6	Echo
Oct 25, 2024 20:06:02.966186047 CEST	192.168.2.5	130.195.235.168	4c5	Echo
Oct 25, 2024 20:06:02.966262102 CEST	192.168.2.5	130.195.124.105	4c4	Echo
Oct 25, 2024 20:06:02.966336966 CEST	192.168.2.5	130.195.110.17	4c3	Echo
Oct 25, 2024 20:06:02.966470003 CEST	192.168.2.5	130.195.236.104	4c1	Echo
Oct 25, 2024 20:06:02.966521978 CEST	192.168.2.5	130.195.34.80	4c2	Echo
Oct 25, 2024 20:06:02.966578007 CEST	192.168.2.5	130.195.3.88	4c0	Echo
Oct 25, 2024 20:06:02.966597080 CEST	192.168.2.5	130.195.157.15	4bf	Echo
Oct 25, 2024 20:06:02.966886044 CEST	192.168.2.5	130.195.127.170	4be	Echo
Oct 25, 2024 20:06:02.966918945 CEST	192.168.2.5	130.195.25.245	4bd	Echo
Oct 25, 2024 20:06:02.967075109 CEST	192.168.2.5	130.195.195.195	4bc	Echo
Oct 25, 2024 20:06:02.967133045 CEST	192.168.2.5	130.195.58.174	4bb	Echo
Oct 25, 2024 20:06:02.967253923 CEST	192.168.2.5	130.195.37.164	4ba	Echo
Oct 25, 2024 20:06:02.979882956 CEST	192.168.2.5	130.195.47.104	4b9	Echo
Oct 25, 2024 20:06:03.016397953 CEST	192.168.2.5	130.195.217.123	4b8	Echo
Oct 25, 2024 20:06:03.042337894 CEST	192.168.2.5	130.195.1.195	4b7	Echo
Oct 25, 2024 20:06:03.073436022 CEST	192.168.2.5	130.195.147.209	4b6	Echo
Oct 25, 2024 20:06:03.105139017 CEST	192.168.2.5	130.195.68.195	4b5	Echo
Oct 25, 2024 20:06:03.137134075 CEST	192.168.2.5	130.195.103.36	4b4	Echo
Oct 25, 2024 20:06:03.167135000 CEST	192.168.2.5	130.195.102.29	4b3	Echo
Oct 25, 2024 20:06:03.199624062 CEST	192.168.2.5	130.195.68.120	4b2	Echo
Oct 25, 2024 20:06:03.229857922 CEST	192.168.2.5	130.195.53.194	4b1	Echo
Oct 25, 2024 20:06:03.261034966 CEST	192.168.2.5	130.195.39.122	4b0	Echo
Oct 25, 2024 20:06:03.292593956 CEST	192.168.2.5	130.195.203.101	4af	Echo
Oct 25, 2024 20:06:03.323750973 CEST	192.168.2.5	130.195.78.179	4ae	Echo
Oct 25, 2024 20:06:03.359193087 CEST	192.168.2.5	130.195.56.99	4ad	Echo
Oct 25, 2024 20:06:03.406254053 CEST	192.168.2.5	130.195.81.222	4ac	Echo
Oct 25, 2024 20:06:03.434211016 CEST	192.168.2.5	130.195.177.1	4ab	Echo
Oct 25, 2024 20:06:03.599962950 CEST	192.168.2.5	130.195.128.71	4aa	Echo
Oct 25, 2024 20:06:03.628257990 CEST	192.168.2.5	130.195.186.218	4a9	Echo
Oct 25, 2024 20:06:03.635839939 CEST	192.168.2.5	130.195.86.37	4a8	Echo
Oct 25, 2024 20:06:03.635926008 CEST	192.168.2.5	130.195.61.86	4a7	Echo
Oct 25, 2024 20:06:03.636394024 CEST	192.168.2.5	130.195.71.144	4a4	Echo
Oct 25, 2024 20:06:03.636423111 CEST	192.168.2.5	130.195.101.129	4a5	Echo
Oct 25, 2024 20:06:03.636431932 CEST	192.168.2.5	130.195.244.60	4a6	Echo
Oct 25, 2024 20:06:03.645595074 CEST	192.168.2.5	130.195.151.34	4a3	Echo
Oct 25, 2024 20:06:03.645715952 CEST	192.168.2.5	130.195.108.10	4a2	Echo
Oct 25, 2024 20:06:03.645859003 CEST	192.168.2.5	130.195.62.151	4a1	Echo
Oct 25, 2024 20:06:03.645931959 CEST	192.168.2.5	130.195.70.143	4a0	Echo
Oct 25, 2024 20:06:03.646593094 CEST	192.168.2.5	130.195.57.85	49e	Echo
Oct 25, 2024 20:06:03.646637917 CEST	192.168.2.5	130.195.85.155	49f	Echo
Oct 25, 2024 20:06:03.646707058 CEST	192.168.2.5	130.195.21.121	49d	Echo
Oct 25, 2024 20:06:03.657172918 CEST	192.168.2.5	130.195.224.100	49c	Echo
Oct 25, 2024 20:06:03.657735109 CEST	192.168.2.5	130.195.45.224	49b	Echo
Oct 25, 2024 20:06:03.657872915 CEST	192.168.2.5	130.195.9.0	49a	Echo
Oct 25, 2024 20:06:03.658104897 CEST	192.168.2.5	130.195.107.45	499	Echo
Oct 25, 2024 20:06:03.659552097 CEST	192.168.2.5	130.195.37.107	498	Echo
Oct 25, 2024 20:06:03.689212084 CEST	192.168.2.5	130.195.79.219	497	Echo
Oct 25, 2024 20:06:03.733464003 CEST	192.168.2.5	130.195.188.84	496	Echo
Oct 25, 2024 20:06:03.761051893 CEST	192.168.2.5	130.195.164.34	495	Echo
Oct 25, 2024 20:06:03.792084932 CEST	192.168.2.5	130.195.191.201	494	Echo
Oct 25, 2024 20:06:03.823383093 CEST	192.168.2.5	130.195.211.53	493	Echo
Oct 25, 2024 20:06:03.854614019 CEST	192.168.2.5	130.195.172.214	492	Echo
Oct 25, 2024 20:06:03.855504990 CEST	130.195.211.53	192.168.2.5	c93	Echo Reply
Oct 25, 2024 20:06:03.855947018 CEST	192.168.2.5	130.195.211.53	491	Echo
Oct 25, 2024 20:06:03.885884047 CEST	192.168.2.5	130.195.75.195	490	Echo
Oct 25, 2024 20:06:03.887537003 CEST	130.195.211.53	192.168.2.5	c91	Echo Reply
Oct 25, 2024 20:06:03.917113066 CEST	192.168.2.5	130.195.115.188	48f	Echo
Oct 25, 2024 20:06:03.948251963 CEST	192.168.2.5	130.195.36.154	48e	Echo
Oct 25, 2024 20:06:03.965348005 CEST	192.168.2.5	130.195.204.205	48d	Echo
Oct 25, 2024 20:06:03.965392113 CEST	192.168.2.5	130.195.220.21	48c	Echo
Oct 25, 2024 20:06:03.965456009 CEST	192.168.2.5	130.195.244.67	48b	Echo
Oct 25, 2024 20:06:03.965514898 CEST	192.168.2.5	130.195.53.150	48a	Echo
Oct 25, 2024 20:06:03.965574026 CEST	192.168.2.5	130.195.137.46	489	Echo
Oct 25, 2024 20:06:03.965626001 CEST	192.168.2.5	130.195.73.102	488	Echo
Oct 25, 2024 20:06:03.965666056 CEST	192.168.2.5	130.195.50.200	487	Echo
Oct 25, 2024 20:06:03.965733051 CEST	192.168.2.5	130.195.77.51	486	Echo
Oct 25, 2024 20:06:03.965784073 CEST	192.168.2.5	130.195.73.45	485	Echo
Oct 25, 2024 20:06:03.965831041 CEST	192.168.2.5	130.195.110.249	484	Echo
Oct 25, 2024 20:06:03.965886116 CEST	192.168.2.5	130.195.193.166	483	Echo
Oct 25, 2024 20:06:03.965955973 CEST	192.168.2.5	130.195.213.78	482	Echo
Oct 25, 2024 20:06:03.965985060 CEST	192.168.2.5	130.195.236.111	481	Echo
Oct 25, 2024 20:06:03.966049910 CEST	192.168.2.5	130.195.75.8	480	Echo
Oct 25, 2024 20:06:03.966106892 CEST	192.168.2.5	130.195.221.187	47f	Echo
Oct 25, 2024 20:06:03.966320992 CEST	192.168.2.5	130.195.177.221	47e	Echo
Oct 25, 2024 20:06:03.979536057 CEST	192.168.2.5	130.195.45.220	47d	Echo
Oct 25, 2024 20:06:04.010807037 CEST	192.168.2.5	130.195.163.45	47c	Echo
Oct 25, 2024 20:06:04.042022943 CEST	192.168.2.5	130.195.20.163	47b	Echo
Oct 25, 2024 20:06:04.074084997 CEST	192.168.2.5	130.195.0.226	47a	Echo
Oct 25, 2024 20:06:04.104623079 CEST	192.168.2.5	130.195.156.79	479	Echo
Oct 25, 2024 20:06:04.135900974 CEST	192.168.2.5	130.195.78.205	478	Echo
Oct 25, 2024 20:06:04.167176962 CEST	192.168.2.5	130.195.188.79	477	Echo
Oct 25, 2024 20:06:04.198369980 CEST	192.168.2.5	130.195.234.184	476	Echo
Oct 25, 2024 20:06:04.229607105 CEST	192.168.2.5	130.195.146.138	475	Echo
Oct 25, 2024 20:06:04.260818958 CEST	192.168.2.5	130.195.3.199	474	Echo
Oct 25, 2024 20:06:04.292301893 CEST	192.168.2.5	130.195.48.249	473	Echo
Oct 25, 2024 20:06:04.323698044 CEST	192.168.2.5	130.195.19.10	472	Echo
Oct 25, 2024 20:06:04.354763031 CEST	192.168.2.5	130.195.82.187	471	Echo
Oct 25, 2024 20:06:04.385818958 CEST	192.168.2.5	130.195.11.107	470	Echo
Oct 25, 2024 20:06:04.417454004 CEST	192.168.2.5	130.195.79.116	46f	Echo
Oct 25, 2024 20:06:04.448476076 CEST	192.168.2.5	130.195.107.86	46e	Echo
Oct 25, 2024 20:06:04.465219021 CEST	192.168.2.5	130.195.20.178	46d	Echo
Oct 25, 2024 20:06:04.465262890 CEST	192.168.2.5	130.195.155.20	46c	Echo
Oct 25, 2024 20:06:04.465367079 CEST	192.168.2.5	130.195.25.155	46b	Echo
Oct 25, 2024 20:06:04.465503931 CEST	192.168.2.5	130.195.67.35	469	Echo
Oct 25, 2024 20:06:04.465584040 CEST	192.168.2.5	130.195.56.126	46a	Echo
Oct 25, 2024 20:06:04.465590000 CEST	192.168.2.5	130.195.218.207	468	Echo
Oct 25, 2024 20:06:04.465698957 CEST	192.168.2.5	130.195.187.218	467	Echo
Oct 25, 2024 20:06:04.465760946 CEST	192.168.2.5	130.195.90.122	466	Echo
Oct 25, 2024 20:06:04.465894938 CEST	192.168.2.5	130.195.165.149	465	Echo
Oct 25, 2024 20:06:04.465925932 CEST	192.168.2.5	130.195.59.165	464	Echo
Oct 25, 2024 20:06:04.466010094 CEST	192.168.2.5	130.195.207.59	463	Echo
Oct 25, 2024 20:06:04.466046095 CEST	192.168.2.5	130.195.31.177	462	Echo
Oct 25, 2024 20:06:04.466128111 CEST	192.168.2.5	130.195.183.116	461	Echo
Oct 25, 2024 20:06:04.466191053 CEST	192.168.2.5	130.195.162.18	460	Echo
Oct 25, 2024 20:06:04.466293097 CEST	192.168.2.5	130.195.200.104	45e	Echo
Oct 25, 2024 20:06:04.466361046 CEST	192.168.2.5	130.195.105.114	45f	Echo
Oct 25, 2024 20:06:04.479567051 CEST	192.168.2.5	130.195.157.221	45d	Echo
Oct 25, 2024 20:06:04.510991096 CEST	192.168.2.5	130.195.87.35	45c	Echo
Oct 25, 2024 20:06:04.541920900 CEST	192.168.2.5	130.195.42.160	45b	Echo
Oct 25, 2024 20:06:04.573323965 CEST	192.168.2.5	130.195.35.151	45a	Echo
Oct 25, 2024 20:06:04.604609966 CEST	192.168.2.5	130.195.27.189	459	Echo
Oct 25, 2024 20:06:04.635910988 CEST	192.168.2.5	130.195.78.141	458	Echo
Oct 25, 2024 20:06:04.667123079 CEST	192.168.2.5	130.195.109.40	457	Echo
Oct 25, 2024 20:06:04.688710928 CEST	192.168.2.5	130.195.11.107	456	Echo
Oct 25, 2024 20:06:04.698333979 CEST	192.168.2.5	130.195.58.211	455	Echo
Oct 25, 2024 20:06:04.729476929 CEST	192.168.2.5	130.195.173.193	454	Echo
Oct 25, 2024 20:06:04.761010885 CEST	192.168.2.5	130.195.171.216	453	Echo
Oct 25, 2024 20:06:04.792205095 CEST	192.168.2.5	130.195.208.175	452	Echo
Oct 25, 2024 20:06:04.823343992 CEST	192.168.2.5	130.195.2.178	451	Echo
Oct 25, 2024 20:06:04.855070114 CEST	192.168.2.5	130.195.81.90	450	Echo
Oct 25, 2024 20:06:04.886215925 CEST	192.168.2.5	130.195.8.12	44f	Echo
Oct 25, 2024 20:06:04.917109013 CEST	192.168.2.5	130.195.91.124	44e	Echo
Oct 25, 2024 20:06:04.948266983 CEST	192.168.2.5	130.195.228.180	44d	Echo
Oct 25, 2024 20:06:04.965333939 CEST	192.168.2.5	130.195.47.104	44c	Echo
Oct 25, 2024 20:06:04.965377092 CEST	192.168.2.5	130.195.217.123	44b	Echo
Oct 25, 2024 20:06:04.965425968 CEST	192.168.2.5	130.195.1.195	44a	Echo
Oct 25, 2024 20:06:04.965466022 CEST	192.168.2.5	130.195.147.209	449	Echo
Oct 25, 2024 20:06:04.965538025 CEST	192.168.2.5	130.195.68.195	448	Echo
Oct 25, 2024 20:06:04.965581894 CEST	192.168.2.5	130.195.103.36	447	Echo
Oct 25, 2024 20:06:04.965627909 CEST	192.168.2.5	130.195.102.29	446	Echo
Oct 25, 2024 20:06:04.965689898 CEST	192.168.2.5	130.195.68.120	445	Echo
Oct 25, 2024 20:06:04.965719938 CEST	192.168.2.5	130.195.53.194	444	Echo
Oct 25, 2024 20:06:04.965779066 CEST	192.168.2.5	130.195.39.122	443	Echo
Oct 25, 2024 20:06:04.965818882 CEST	192.168.2.5	130.195.203.101	442	Echo
Oct 25, 2024 20:06:04.965883970 CEST	192.168.2.5	130.195.78.179	441	Echo
Oct 25, 2024 20:06:04.965929985 CEST	192.168.2.5	130.195.56.99	440	Echo
Oct 25, 2024 20:06:04.965986967 CEST	192.168.2.5	130.195.81.222	43f	Echo
Oct 25, 2024 20:06:04.966041088 CEST	192.168.2.5	130.195.177.1	43e	Echo
Oct 25, 2024 20:06:04.979480982 CEST	192.168.2.5	130.195.39.248	43d	Echo
Oct 25, 2024 20:06:05.010917902 CEST	192.168.2.5	130.195.105.218	43c	Echo
Oct 25, 2024 20:06:05.042028904 CEST	192.168.2.5	130.195.15.50	43b	Echo
Oct 25, 2024 20:06:05.074009895 CEST	192.168.2.5	130.195.47.6	43a	Echo
Oct 25, 2024 20:06:05.104701042 CEST	192.168.2.5	130.195.116.159	439	Echo
Oct 25, 2024 20:06:05.135829926 CEST	192.168.2.5	130.195.37.213	438	Echo
Oct 25, 2024 20:06:05.167032957 CEST	192.168.2.5	130.195.128.7	437	Echo
Oct 25, 2024 20:06:05.198486090 CEST	192.168.2.5	130.195.57.171	436	Echo
Oct 25, 2024 20:06:05.229599953 CEST	192.168.2.5	130.195.246.8	435	Echo
Oct 25, 2024 20:06:05.260936022 CEST	192.168.2.5	130.195.39.173	434	Echo
Oct 25, 2024 20:06:05.292146921 CEST	192.168.2.5	130.195.20.188	433	Echo
Oct 25, 2024 20:06:05.323319912 CEST	192.168.2.5	130.195.241.20	432	Echo
Oct 25, 2024 20:06:05.354626894 CEST	192.168.2.5	130.195.161.135	431	Echo
Oct 25, 2024 20:06:05.365231037 CEST	130.195.241.20	192.168.2.5	c32	Echo Reply
Oct 25, 2024 20:06:05.365582943 CEST	192.168.2.5	130.195.241.20	430	Echo
Oct 25, 2024 20:06:05.385746956 CEST	192.168.2.5	130.195.180.67	42f	Echo
Oct 25, 2024 20:06:05.408368111 CEST	130.195.241.20	192.168.2.5	c30	Echo Reply
Oct 25, 2024 20:06:05.416992903 CEST	192.168.2.5	130.195.77.59	42e	Echo
Oct 25, 2024 20:06:05.458486080 CEST	192.168.2.5	130.195.201.122	42d	Echo
Oct 25, 2024 20:06:05.464134932 CEST	192.168.2.5	130.195.128.71	42c	Echo
Oct 25, 2024 20:06:05.464263916 CEST	192.168.2.5	130.195.186.218	42b	Echo
Oct 25, 2024 20:06:05.465747118 CEST	192.168.2.5	130.195.9.0	42a	Echo
Oct 25, 2024 20:06:05.466206074 CEST	192.168.2.5	130.195.79.219	429	Echo
Oct 25, 2024 20:06:05.466387033 CEST	192.168.2.5	130.195.188.84	428	Echo
Oct 25, 2024 20:06:05.466474056 CEST	192.168.2.5	130.195.164.34	427	Echo
Oct 25, 2024 20:06:05.466595888 CEST	192.168.2.5	130.195.191.201	426	Echo
Oct 25, 2024 20:06:05.466675043 CEST	192.168.2.5	130.195.172.214	425	Echo
Oct 25, 2024 20:06:05.466912985 CEST	192.168.2.5	130.195.75.195	424	Echo
Oct 25, 2024 20:06:05.467041016 CEST	192.168.2.5	130.195.115.188	423	Echo
Oct 25, 2024 20:06:05.467355013 CEST	192.168.2.5	130.195.36.154	422	Echo
Oct 25, 2024 20:06:05.479886055 CEST	192.168.2.5	130.195.110.201	421	Echo
Oct 25, 2024 20:06:05.511152029 CEST	192.168.2.5	130.195.189.202	420	Echo
Oct 25, 2024 20:06:05.541953087 CEST	192.168.2.5	130.195.88.90	41f	Echo
Oct 25, 2024 20:06:05.573292017 CEST	192.168.2.5	130.195.55.131	41e	Echo
Oct 25, 2024 20:06:05.604857922 CEST	192.168.2.5	130.195.204.251	41d	Echo
Oct 25, 2024 20:06:05.636056900 CEST	192.168.2.5	130.195.80.204	41c	Echo
Oct 25, 2024 20:06:05.667448997 CEST	192.168.2.5	130.195.8.21	41b	Echo
Oct 25, 2024 20:06:05.682974100 CEST	192.168.2.5	130.195.12.88	41a	Echo
Oct 25, 2024 20:06:05.698362112 CEST	192.168.2.5	130.195.25.65	419	Echo
Oct 25, 2024 20:06:05.715336084 CEST	192.168.2.5	130.195.92.27	418	Echo
Oct 25, 2024 20:06:05.733578920 CEST	192.168.2.5	130.195.161.104	417	Echo
Oct 25, 2024 20:06:05.761027098 CEST	192.168.2.5	130.195.28.243	416	Echo
Oct 25, 2024 20:06:05.776557922 CEST	192.168.2.5	130.195.227.8	415	Echo
Oct 25, 2024 20:06:05.792284966 CEST	192.168.2.5	130.195.66.227	414	Echo
Oct 25, 2024 20:06:05.808074951 CEST	192.168.2.5	130.195.117.66	413	Echo
Oct 25, 2024 20:06:05.823415041 CEST	192.168.2.5	130.195.175.253	412	Echo
Oct 25, 2024 20:06:05.839165926 CEST	192.168.2.5	130.195.162.143	411	Echo
Oct 25, 2024 20:06:05.854701996 CEST	192.168.2.5	130.195.146.120	410	Echo
Oct 25, 2024 20:06:05.870232105 CEST	192.168.2.5	130.195.91.152	40f	Echo
Oct 25, 2024 20:06:05.886694908 CEST	192.168.2.5	130.195.38.125	40e	Echo
Oct 25, 2024 20:06:05.901496887 CEST	192.168.2.5	130.195.22.57	40d	Echo
Oct 25, 2024 20:06:05.917093039 CEST	192.168.2.5	130.195.48.136	40c	Echo
Oct 25, 2024 20:06:05.939610958 CEST	192.168.2.5	130.195.19.108	40b	Echo
Oct 25, 2024 20:06:05.965225935 CEST	192.168.2.5	130.195.211.16	40a	Echo
Oct 25, 2024 20:06:05.966751099 CEST	192.168.2.5	130.195.45.220	409	Echo
Oct 25, 2024 20:06:05.967011929 CEST	192.168.2.5	130.195.163.45	408	Echo
Oct 25, 2024 20:06:05.967150927 CEST	192.168.2.5	130.195.20.163	407	Echo
Oct 25, 2024 20:06:05.967359066 CEST	192.168.2.5	130.195.0.226	406	Echo
Oct 25, 2024 20:06:05.967566967 CEST	192.168.2.5	130.195.156.79	405	Echo
Oct 25, 2024 20:06:05.967585087 CEST	192.168.2.5	130.195.78.205	404	Echo
Oct 25, 2024 20:06:05.967669010 CEST	192.168.2.5	130.195.188.79	403	Echo
Oct 25, 2024 20:06:05.967745066 CEST	192.168.2.5	130.195.234.184	402	Echo
Oct 25, 2024 20:06:05.967854977 CEST	192.168.2.5	130.195.146.138	401	Echo
Oct 25, 2024 20:06:05.967987061 CEST	192.168.2.5	130.195.3.199	400	Echo
Oct 25, 2024 20:06:05.968070030 CEST	192.168.2.5	130.195.48.249	3ff	Echo
Oct 25, 2024 20:06:05.968158960 CEST	192.168.2.5	130.195.19.10	3fe	Echo
Oct 25, 2024 20:06:05.968228102 CEST	192.168.2.5	130.195.82.187	3fd	Echo
Oct 25, 2024 20:06:05.968307972 CEST	192.168.2.5	130.195.79.116	3fc	Echo
Oct 25, 2024 20:06:05.968388081 CEST	192.168.2.5	130.195.107.86	3fb	Echo
Oct 25, 2024 20:06:05.972613096 CEST	192.168.2.5	130.195.8.21	3fa	Echo
Oct 25, 2024 20:06:05.996141911 CEST	192.168.2.5	130.195.15.31	3f9	Echo
Oct 25, 2024 20:06:06.026611090 CEST	192.168.2.5	130.195.127.238	3f8	Echo
Oct 25, 2024 20:06:06.042125940 CEST	192.168.2.5	130.195.58.191	3f7	Echo
Oct 25, 2024 20:06:06.057915926 CEST	192.168.2.5	130.195.49.228	3f6	Echo
Oct 25, 2024 20:06:06.073409081 CEST	192.168.2.5	130.195.140.44	3f5	Echo
Oct 25, 2024 20:06:06.092200041 CEST	192.168.2.5	130.195.73.46	3f4	Echo
Oct 25, 2024 20:06:06.120413065 CEST	192.168.2.5	130.195.19.157	3f3	Echo
Oct 25, 2024 20:06:06.136455059 CEST	192.168.2.5	130.195.163.77	3f2	Echo
Oct 25, 2024 20:06:06.167424917 CEST	192.168.2.5	130.195.46.72	3f1	Echo
Oct 25, 2024 20:06:06.182914019 CEST	192.168.2.5	130.195.32.129	3f0	Echo
Oct 25, 2024 20:06:06.198296070 CEST	192.168.2.5	130.195.115.32	3ef	Echo
Oct 25, 2024 20:06:06.213850021 CEST	192.168.2.5	130.195.91.115	3ee	Echo
Oct 25, 2024 20:06:06.229557037 CEST	192.168.2.5	130.195.196.126	3ed	Echo
Oct 25, 2024 20:06:06.245100975 CEST	192.168.2.5	130.195.148.168	3ec	Echo
Oct 25, 2024 20:06:06.260695934 CEST	192.168.2.5	130.195.13.112	3eb	Echo
Oct 25, 2024 20:06:06.276372910 CEST	192.168.2.5	130.195.42.230	3ea	Echo
Oct 25, 2024 20:06:06.292164087 CEST	192.168.2.5	130.195.197.42	3e9	Echo
Oct 25, 2024 20:06:06.308263063 CEST	192.168.2.5	130.195.112.125	3e8	Echo
Oct 25, 2024 20:06:06.323235035 CEST	192.168.2.5	130.195.6.208	3e7	Echo
Oct 25, 2024 20:06:06.339669943 CEST	192.168.2.5	130.195.56.182	3e6	Echo
Oct 25, 2024 20:06:06.354820967 CEST	192.168.2.5	130.195.225.103	3e5	Echo
Oct 25, 2024 20:06:06.370206118 CEST	192.168.2.5	130.195.14.182	3e4	Echo
Oct 25, 2024 20:06:06.385960102 CEST	192.168.2.5	130.195.59.61	3e3	Echo
Oct 25, 2024 20:06:06.401330948 CEST	192.168.2.5	130.195.0.222	3e2	Echo
Oct 25, 2024 20:06:06.417001009 CEST	192.168.2.5	130.195.178.144	3e1	Echo
Oct 25, 2024 20:06:06.434231043 CEST	192.168.2.5	130.195.143.44	3e0	Echo
Oct 25, 2024 20:06:06.465893984 CEST	192.168.2.5	130.195.84.201	3df	Echo
Oct 25, 2024 20:06:06.467967987 CEST	192.168.2.5	130.195.157.221	3de	Echo
Oct 25, 2024 20:06:06.468060017 CEST	192.168.2.5	130.195.87.35	3dd	Echo
Oct 25, 2024 20:06:06.468139887 CEST	192.168.2.5	130.195.42.160	3dc	Echo
Oct 25, 2024 20:06:06.468230963 CEST	192.168.2.5	130.195.35.151	3db	Echo
Oct 25, 2024 20:06:06.468297958 CEST	192.168.2.5	130.195.27.189	3da	Echo
Oct 25, 2024 20:06:06.468379974 CEST	192.168.2.5	130.195.78.141	3d9	Echo
Oct 25, 2024 20:06:06.468463898 CEST	192.168.2.5	130.195.109.40	3d8	Echo
Oct 25, 2024 20:06:06.468622923 CEST	192.168.2.5	130.195.58.211	3d7	Echo
Oct 25, 2024 20:06:06.468710899 CEST	192.168.2.5	130.195.173.193	3d6	Echo
Oct 25, 2024 20:06:06.468802929 CEST	192.168.2.5	130.195.171.216	3d5	Echo
Oct 25, 2024 20:06:06.468900919 CEST	192.168.2.5	130.195.208.175	3d4	Echo
Oct 25, 2024 20:06:06.474590063 CEST	192.168.2.5	130.195.2.178	3d3	Echo
Oct 25, 2024 20:06:06.474689960 CEST	192.168.2.5	130.195.81.90	3d2	Echo
Oct 25, 2024 20:06:06.474795103 CEST	192.168.2.5	130.195.8.12	3d1	Echo
Oct 25, 2024 20:06:06.474900961 CEST	192.168.2.5	130.195.91.124	3d0	Echo
Oct 25, 2024 20:06:06.474997997 CEST	192.168.2.5	130.195.228.180	3cf	Echo
Oct 25, 2024 20:06:06.495341063 CEST	192.168.2.5	130.195.10.192	3ce	Echo
Oct 25, 2024 20:06:06.510832071 CEST	192.168.2.5	130.195.144.250	3cd	Echo
Oct 25, 2024 20:06:06.526431084 CEST	192.168.2.5	130.195.52.92	3cc	Echo
Oct 25, 2024 20:06:06.541981936 CEST	192.168.2.5	130.195.53.130	3cb	Echo
Oct 25, 2024 20:06:06.557616949 CEST	192.168.2.5	130.195.221.177	3ca	Echo
Oct 25, 2024 20:06:06.573210001 CEST	192.168.2.5	130.195.159.121	3c9	Echo
Oct 25, 2024 20:06:06.589015007 CEST	192.168.2.5	130.195.26.252	3c8	Echo
Oct 25, 2024 20:06:06.604578018 CEST	192.168.2.5	130.195.53.6	3c7	Echo
Oct 25, 2024 20:06:06.620143890 CEST	192.168.2.5	130.195.48.77	3c6	Echo
Oct 25, 2024 20:06:06.622992039 CEST	192.168.2.5	130.195.6.208	3c5	Echo
Oct 25, 2024 20:06:06.635793924 CEST	192.168.2.5	130.195.118.40	3c4	Echo
Oct 25, 2024 20:06:06.640539885 CEST	130.195.48.77	192.168.2.5	bc6	Echo Reply
Oct 25, 2024 20:06:06.640882015 CEST	192.168.2.5	130.195.48.77	3c3	Echo
Oct 25, 2024 20:06:06.651417971 CEST	192.168.2.5	130.195.218.45	3c2	Echo
Oct 25, 2024 20:06:06.659538031 CEST	130.195.48.77	192.168.2.5	bc3	Echo Reply
Oct 25, 2024 20:06:06.667058945 CEST	192.168.2.5	130.195.237.73	3c1	Echo
Oct 25, 2024 20:06:06.687098980 CEST	192.168.2.5	130.195.144.193	3c0	Echo
Oct 25, 2024 20:06:06.688582897 CEST	130.195.218.45	192.168.2.5	bc2	Echo Reply
Oct 25, 2024 20:06:06.689074039 CEST	192.168.2.5	130.195.218.45	3bf	Echo
Oct 25, 2024 20:06:06.698344946 CEST	192.168.2.5	130.195.216.147	3be	Echo
Oct 25, 2024 20:06:06.714096069 CEST	192.168.2.5	130.195.251.216	3bd	Echo
Oct 25, 2024 20:06:06.726023912 CEST	130.195.218.45	192.168.2.5	bbf	Echo Reply
Oct 25, 2024 20:06:06.729557037 CEST	192.168.2.5	130.195.43.220	3bc	Echo
Oct 25, 2024 20:06:06.745373964 CEST	192.168.2.5	130.195.232.196	3bb	Echo
Oct 25, 2024 20:06:06.761548996 CEST	192.168.2.5	130.195.196.77	3ba	Echo
Oct 25, 2024 20:06:06.792196989 CEST	192.168.2.5	130.195.218.60	3b9	Echo
Oct 25, 2024 20:06:06.808085918 CEST	192.168.2.5	130.195.81.47	3b8	Echo
Oct 25, 2024 20:06:06.823502064 CEST	192.168.2.5	130.195.26.159	3b7	Echo
Oct 25, 2024 20:06:06.825709105 CEST	130.195.218.60	192.168.2.5	bb9	Echo Reply
Oct 25, 2024 20:06:06.826103926 CEST	192.168.2.5	130.195.218.60	3b6	Echo
Oct 25, 2024 20:06:06.839049101 CEST	192.168.2.5	130.195.203.249	3b5	Echo
Oct 25, 2024 20:06:06.855274916 CEST	192.168.2.5	130.195.147.176	3b4	Echo
Oct 25, 2024 20:06:06.857790947 CEST	130.195.218.60	192.168.2.5	bb6	Echo Reply
Oct 25, 2024 20:06:06.870192051 CEST	192.168.2.5	130.195.243.223	3b3	Echo
Oct 25, 2024 20:06:06.885730982 CEST	192.168.2.5	130.195.249.199	3b2	Echo
Oct 25, 2024 20:06:06.901442051 CEST	192.168.2.5	130.195.235.141	3b1	Echo
Oct 25, 2024 20:06:06.917102098 CEST	192.168.2.5	130.195.148.229	3b0	Echo
Oct 25, 2024 20:06:06.932687044 CEST	192.168.2.5	130.195.17.165	3af	Echo
Oct 25, 2024 20:06:06.948348999 CEST	192.168.2.5	130.195.41.245	3ae	Echo
Oct 25, 2024 20:06:06.964359045 CEST	192.168.2.5	130.195.55.146	3ad	Echo
Oct 25, 2024 20:06:06.965658903 CEST	192.168.2.5	130.195.39.248	3ac	Echo
Oct 25, 2024 20:06:06.965718031 CEST	192.168.2.5	130.195.105.218	3ab	Echo
Oct 25, 2024 20:06:06.965780020 CEST	192.168.2.5	130.195.15.50	3aa	Echo
Oct 25, 2024 20:06:06.965923071 CEST	192.168.2.5	130.195.47.6	3a9	Echo
Oct 25, 2024 20:06:06.965970993 CEST	192.168.2.5	130.195.116.159	3a8	Echo
Oct 25, 2024 20:06:06.966041088 CEST	192.168.2.5	130.195.37.213	3a7	Echo
Oct 25, 2024 20:06:06.966109037 CEST	192.168.2.5	130.195.128.7	3a6	Echo
Oct 25, 2024 20:06:06.966166019 CEST	192.168.2.5	130.195.57.171	3a5	Echo
Oct 25, 2024 20:06:06.966203928 CEST	192.168.2.5	130.195.246.8	3a4	Echo
Oct 25, 2024 20:06:06.966283083 CEST	192.168.2.5	130.195.39.173	3a3	Echo
Oct 25, 2024 20:06:06.966327906 CEST	192.168.2.5	130.195.20.188	3a2	Echo
Oct 25, 2024 20:06:06.966396093 CEST	192.168.2.5	130.195.161.135	3a1	Echo
Oct 25, 2024 20:06:06.966471910 CEST	192.168.2.5	130.195.180.67	3a0	Echo
Oct 25, 2024 20:06:06.966530085 CEST	192.168.2.5	130.195.77.59	39f	Echo
Oct 25, 2024 20:06:06.966583967 CEST	192.168.2.5	130.195.201.122	39e	Echo
Oct 25, 2024 20:06:06.979468107 CEST	192.168.2.5	130.195.78.82	39d	Echo
Oct 25, 2024 20:06:06.995093107 CEST	192.168.2.5	130.195.16.249	39c	Echo
Oct 25, 2024 20:06:07.010802031 CEST	192.168.2.5	130.195.10.139	39b	Echo
Oct 25, 2024 20:06:07.026392937 CEST	192.168.2.5	130.195.109.197	39a	Echo
Oct 25, 2024 20:06:07.042136908 CEST	192.168.2.5	130.195.25.112	399	Echo
Oct 25, 2024 20:06:07.057790041 CEST	192.168.2.5	130.195.197.114	398	Echo
Oct 25, 2024 20:06:07.073450089 CEST	192.168.2.5	130.195.224.252	397	Echo
Oct 25, 2024 20:06:07.089251041 CEST	192.168.2.5	130.195.71.196	396	Echo
Oct 25, 2024 20:06:07.104614019 CEST	192.168.2.5	130.195.65.130	395	Echo
Oct 25, 2024 20:06:07.120348930 CEST	192.168.2.5	130.195.65.40	394	Echo
Oct 25, 2024 20:06:07.136255980 CEST	192.168.2.5	130.195.182.97	393	Echo
Oct 25, 2024 20:06:07.151815891 CEST	192.168.2.5	130.195.66.56	392	Echo
Oct 25, 2024 20:06:07.167237043 CEST	192.168.2.5	130.195.88.136	391	Echo
Oct 25, 2024 20:06:07.182765007 CEST	192.168.2.5	130.195.35.208	390	Echo
Oct 25, 2024 20:06:07.198332071 CEST	192.168.2.5	130.195.212.34	38f	Echo
Oct 25, 2024 20:06:07.214011908 CEST	192.168.2.5	130.195.10.65	38e	Echo
Oct 25, 2024 20:06:07.229520082 CEST	192.168.2.5	130.195.162.21	38d	Echo
Oct 25, 2024 20:06:07.245249033 CEST	192.168.2.5	130.195.215.161	38c	Echo
Oct 25, 2024 20:06:07.261044025 CEST	192.168.2.5	130.195.14.16	38b	Echo
Oct 25, 2024 20:06:07.276647091 CEST	192.168.2.5	130.195.192.174	38a	Echo
Oct 25, 2024 20:06:07.292140007 CEST	192.168.2.5	130.195.94.153	389	Echo
Oct 25, 2024 20:06:07.307790995 CEST	192.168.2.5	130.195.186.224	388	Echo
Oct 25, 2024 20:06:07.309464931 CEST	192.168.2.5	130.195.10.139	387	Echo
Oct 25, 2024 20:06:07.323489904 CEST	192.168.2.5	130.195.57.218	386	Echo
Oct 25, 2024 20:06:07.339236021 CEST	192.168.2.5	130.195.250.196	385	Echo
Oct 25, 2024 20:06:07.355107069 CEST	192.168.2.5	130.195.78.87	384	Echo
Oct 25, 2024 20:06:07.385874987 CEST	192.168.2.5	130.195.158.191	383	Echo
Oct 25, 2024 20:06:07.401496887 CEST	192.168.2.5	130.195.84.211	382	Echo
Oct 25, 2024 20:06:07.416996956 CEST	192.168.2.5	130.195.116.84	381	Echo
Oct 25, 2024 20:06:07.432786942 CEST	192.168.2.5	130.195.151.225	380	Echo
Oct 25, 2024 20:06:07.448276043 CEST	192.168.2.5	130.195.129.190	37f	Echo
Oct 25, 2024 20:06:07.466779947 CEST	192.168.2.5	130.195.30.6	37e	Echo
Oct 25, 2024 20:06:07.472405910 CEST	192.168.2.5	130.195.110.201	37d	Echo
Oct 25, 2024 20:06:07.472697020 CEST	192.168.2.5	130.195.189.202	37c	Echo
Oct 25, 2024 20:06:07.472927094 CEST	192.168.2.5	130.195.88.90	37b	Echo
Oct 25, 2024 20:06:07.473148108 CEST	192.168.2.5	130.195.55.131	37a	Echo
Oct 25, 2024 20:06:07.473500013 CEST	192.168.2.5	130.195.204.251	379	Echo
Oct 25, 2024 20:06:07.473573923 CEST	192.168.2.5	130.195.80.204	378	Echo
Oct 25, 2024 20:06:07.473663092 CEST	192.168.2.5	130.195.12.88	377	Echo
Oct 25, 2024 20:06:07.473963022 CEST	192.168.2.5	130.195.25.65	376	Echo
Oct 25, 2024 20:06:07.474147081 CEST	192.168.2.5	130.195.92.27	375	Echo
Oct 25, 2024 20:06:07.474312067 CEST	192.168.2.5	130.195.161.104	374	Echo
Oct 25, 2024 20:06:07.474410057 CEST	192.168.2.5	130.195.28.243	373	Echo
Oct 25, 2024 20:06:07.475079060 CEST	192.168.2.5	130.195.227.8	372	Echo
Oct 25, 2024 20:06:07.475203991 CEST	192.168.2.5	130.195.66.227	371	Echo
Oct 25, 2024 20:06:07.475302935 CEST	192.168.2.5	130.195.117.66	370	Echo
Oct 25, 2024 20:06:07.475512028 CEST	192.168.2.5	130.195.175.253	36f	Echo
Oct 25, 2024 20:06:07.475792885 CEST	192.168.2.5	130.195.162.143	36e	Echo
Oct 25, 2024 20:06:07.475925922 CEST	192.168.2.5	130.195.146.120	36d	Echo
Oct 25, 2024 20:06:07.476064920 CEST	192.168.2.5	130.195.91.152	36c	Echo
Oct 25, 2024 20:06:07.476386070 CEST	192.168.2.5	130.195.38.125	36b	Echo
Oct 25, 2024 20:06:07.476475000 CEST	192.168.2.5	130.195.22.57	36a	Echo
Oct 25, 2024 20:06:07.476531982 CEST	192.168.2.5	130.195.48.136	369	Echo
Oct 25, 2024 20:06:07.476578951 CEST	192.168.2.5	130.195.19.108	368	Echo
Oct 25, 2024 20:06:07.498128891 CEST	192.168.2.5	130.195.213.234	367	Echo
Oct 25, 2024 20:06:07.511008024 CEST	192.168.2.5	130.195.70.48	366	Echo
Oct 25, 2024 20:06:07.526575089 CEST	192.168.2.5	130.195.190.118	365	Echo
Oct 25, 2024 20:06:07.542087078 CEST	192.168.2.5	130.195.78.165	364	Echo
Oct 25, 2024 20:06:07.557920933 CEST	192.168.2.5	130.195.219.253	363	Echo
Oct 25, 2024 20:06:07.573270082 CEST	192.168.2.5	130.195.237.85	362	Echo
Oct 25, 2024 20:06:07.589008093 CEST	192.168.2.5	130.195.60.183	361	Echo
Oct 25, 2024 20:06:07.606200933 CEST	192.168.2.5	130.195.40.37	360	Echo
Oct 25, 2024 20:06:07.635226965 CEST	192.168.2.5	130.195.251.165	35f	Echo
Oct 25, 2024 20:06:07.648348093 CEST	192.168.2.5	130.195.40.140	35e	Echo
Oct 25, 2024 20:06:07.667053938 CEST	192.168.2.5	130.195.44.42	35d	Echo
Oct 25, 2024 20:06:07.682802916 CEST	192.168.2.5	130.195.1.57	35c	Echo
Oct 25, 2024 20:06:07.698529959 CEST	192.168.2.5	130.195.205.234	35b	Echo
Oct 25, 2024 20:06:07.713912010 CEST	192.168.2.5	130.195.227.215	35a	Echo
Oct 25, 2024 20:06:07.729732990 CEST	192.168.2.5	130.195.0.237	359	Echo
Oct 25, 2024 20:06:07.745122910 CEST	192.168.2.5	130.195.61.237	358	Echo
Oct 25, 2024 20:06:07.762124062 CEST	192.168.2.5	130.195.149.160	357	Echo
Oct 25, 2024 20:06:07.776370049 CEST	192.168.2.5	130.195.34.76	356	Echo
Oct 25, 2024 20:06:07.792104959 CEST	192.168.2.5	130.195.69.47	355	Echo
Oct 25, 2024 20:06:07.810355902 CEST	192.168.2.5	130.195.88.209	354	Echo
Oct 25, 2024 20:06:07.839106083 CEST	192.168.2.5	130.195.159.128	353	Echo
Oct 25, 2024 20:06:07.854875088 CEST	192.168.2.5	130.195.133.8	352	Echo
Oct 25, 2024 20:06:07.870254040 CEST	192.168.2.5	130.195.5.139	351	Echo
Oct 25, 2024 20:06:07.885867119 CEST	192.168.2.5	130.195.100.155	350	Echo
Oct 25, 2024 20:06:07.901391983 CEST	192.168.2.5	130.195.185.17	34f	Echo
Oct 25, 2024 20:06:07.917175055 CEST	192.168.2.5	130.195.55.145	34e	Echo
Oct 25, 2024 20:06:07.932746887 CEST	192.168.2.5	130.195.66.168	34d	Echo
Oct 25, 2024 20:06:07.948278904 CEST	192.168.2.5	130.195.144.205	34c	Echo
Oct 25, 2024 20:06:07.963970900 CEST	192.168.2.5	130.195.211.16	34b	Echo
Oct 25, 2024 20:06:07.964221954 CEST	192.168.2.5	130.195.96.105	34a	Echo
Oct 25, 2024 20:06:07.966820955 CEST	192.168.2.5	130.195.15.31	349	Echo
Oct 25, 2024 20:06:07.966897011 CEST	192.168.2.5	130.195.127.238	348	Echo
Oct 25, 2024 20:06:07.966969967 CEST	192.168.2.5	130.195.58.191	347	Echo
Oct 25, 2024 20:06:07.967061043 CEST	192.168.2.5	130.195.49.228	346	Echo
Oct 25, 2024 20:06:07.967251062 CEST	192.168.2.5	130.195.140.44	345	Echo
Oct 25, 2024 20:06:07.967257977 CEST	192.168.2.5	130.195.73.46	344	Echo
Oct 25, 2024 20:06:07.967320919 CEST	192.168.2.5	130.195.19.157	343	Echo
Oct 25, 2024 20:06:07.967371941 CEST	192.168.2.5	130.195.163.77	342	Echo
Oct 25, 2024 20:06:07.967420101 CEST	192.168.2.5	130.195.46.72	341	Echo
Oct 25, 2024 20:06:07.967477083 CEST	192.168.2.5	130.195.32.129	340	Echo
Oct 25, 2024 20:06:07.967533112 CEST	192.168.2.5	130.195.115.32	33f	Echo
Oct 25, 2024 20:06:07.967576027 CEST	192.168.2.5	130.195.91.115	33e	Echo
Oct 25, 2024 20:06:07.967628956 CEST	192.168.2.5	130.195.196.126	33d	Echo
Oct 25, 2024 20:06:07.967679024 CEST	192.168.2.5	130.195.148.168	33c	Echo
Oct 25, 2024 20:06:07.967720985 CEST	192.168.2.5	130.195.13.112	33b	Echo
Oct 25, 2024 20:06:07.967791080 CEST	192.168.2.5	130.195.42.230	33a	Echo
Oct 25, 2024 20:06:07.967843056 CEST	192.168.2.5	130.195.197.42	339	Echo
Oct 25, 2024 20:06:07.967878103 CEST	192.168.2.5	130.195.112.125	338	Echo
Oct 25, 2024 20:06:07.967958927 CEST	192.168.2.5	130.195.56.182	337	Echo
Oct 25, 2024 20:06:07.968069077 CEST	192.168.2.5	130.195.225.103	336	Echo
Oct 25, 2024 20:06:07.968147993 CEST	192.168.2.5	130.195.14.182	335	Echo
Oct 25, 2024 20:06:07.968219042 CEST	192.168.2.5	130.195.59.61	334	Echo
Oct 25, 2024 20:06:07.968281984 CEST	192.168.2.5	130.195.0.222	333	Echo
Oct 25, 2024 20:06:07.968359947 CEST	192.168.2.5	130.195.178.144	332	Echo
Oct 25, 2024 20:06:07.968409061 CEST	192.168.2.5	130.195.143.44	331	Echo
Oct 25, 2024 20:06:07.979532003 CEST	192.168.2.5	130.195.129.31	330	Echo
Oct 25, 2024 20:06:07.995024920 CEST	192.168.2.5	130.195.249.251	32f	Echo
Oct 25, 2024 20:06:08.010729074 CEST	192.168.2.5	130.195.212.121	32e	Echo
Oct 25, 2024 20:06:08.026527882 CEST	192.168.2.5	130.195.171.129	32d	Echo
Oct 25, 2024 20:06:08.042045116 CEST	192.168.2.5	130.195.37.163	32c	Echo
Oct 25, 2024 20:06:08.057573080 CEST	192.168.2.5	130.195.99.233	32b	Echo
Oct 25, 2024 20:06:08.073211908 CEST	192.168.2.5	130.195.181.84	32a	Echo
Oct 25, 2024 20:06:08.088840008 CEST	192.168.2.5	130.195.40.194	329	Echo
Oct 25, 2024 20:06:08.104685068 CEST	192.168.2.5	130.195.146.158	328	Echo
Oct 25, 2024 20:06:08.120213032 CEST	192.168.2.5	130.195.108.209	327	Echo
Oct 25, 2024 20:06:08.135792971 CEST	192.168.2.5	130.195.203.108	326	Echo
Oct 25, 2024 20:06:08.151513100 CEST	192.168.2.5	130.195.239.23	325	Echo
Oct 25, 2024 20:06:08.167181969 CEST	192.168.2.5	130.195.30.16	324	Echo
Oct 25, 2024 20:06:08.173585892 CEST	192.168.2.5	130.195.5.139	323	Echo
Oct 25, 2024 20:06:08.182887077 CEST	192.168.2.5	130.195.8.239	322	Echo
Oct 25, 2024 20:06:08.198765993 CEST	192.168.2.5	130.195.194.255	321	Echo
Oct 25, 2024 20:06:08.214174032 CEST	192.168.2.5	130.195.206.86	320	Echo
Oct 25, 2024 20:06:08.229511976 CEST	192.168.2.5	130.195.165.37	31f	Echo
Oct 25, 2024 20:06:08.245441914 CEST	192.168.2.5	130.195.144.99	31e	Echo
Oct 25, 2024 20:06:08.260853052 CEST	192.168.2.5	130.195.228.20	31d	Echo
Oct 25, 2024 20:06:08.276592016 CEST	192.168.2.5	130.195.64.72	31c	Echo
Oct 25, 2024 20:06:08.291970015 CEST	192.168.2.5	130.195.115.216	31b	Echo
Oct 25, 2024 20:06:08.307845116 CEST	192.168.2.5	130.195.181.121	31a	Echo
Oct 25, 2024 20:06:08.323374987 CEST	192.168.2.5	130.195.17.223	319	Echo
Oct 25, 2024 20:06:08.338968992 CEST	192.168.2.5	130.195.57.30	318	Echo
Oct 25, 2024 20:06:08.354741096 CEST	192.168.2.5	130.195.145.216	317	Echo
Oct 25, 2024 20:06:08.370120049 CEST	192.168.2.5	130.195.119.48	316	Echo
Oct 25, 2024 20:06:08.385871887 CEST	192.168.2.5	130.195.59.180	315	Echo
Oct 25, 2024 20:06:08.401420116 CEST	192.168.2.5	130.195.2.167	314	Echo
Oct 25, 2024 20:06:08.417031050 CEST	192.168.2.5	130.195.35.233	313	Echo
Oct 25, 2024 20:06:08.432638884 CEST	192.168.2.5	130.195.184.231	312	Echo
Oct 25, 2024 20:06:08.448307991 CEST	192.168.2.5	130.195.122.172	311	Echo
Oct 25, 2024 20:06:08.464061975 CEST	192.168.2.5	130.195.84.201	310	Echo
Oct 25, 2024 20:06:08.464299917 CEST	192.168.2.5	130.195.89.70	30f	Echo
Oct 25, 2024 20:06:08.465753078 CEST	192.168.2.5	130.195.10.192	30e	Echo
Oct 25, 2024 20:06:08.465768099 CEST	192.168.2.5	130.195.144.250	30d	Echo
Oct 25, 2024 20:06:08.465893030 CEST	192.168.2.5	130.195.52.92	30c	Echo
Oct 25, 2024 20:06:08.465972900 CEST	192.168.2.5	130.195.53.130	30b	Echo
Oct 25, 2024 20:06:08.466089964 CEST	192.168.2.5	130.195.221.177	30a	Echo
Oct 25, 2024 20:06:08.466101885 CEST	192.168.2.5	130.195.159.121	309	Echo
Oct 25, 2024 20:06:08.466221094 CEST	192.168.2.5	130.195.26.252	308	Echo
Oct 25, 2024 20:06:08.466255903 CEST	192.168.2.5	130.195.53.6	307	Echo
Oct 25, 2024 20:06:08.466418982 CEST	192.168.2.5	130.195.118.40	306	Echo
Oct 25, 2024 20:06:08.466484070 CEST	192.168.2.5	130.195.237.73	305	Echo
Oct 25, 2024 20:06:08.466600895 CEST	192.168.2.5	130.195.144.193	304	Echo
Oct 25, 2024 20:06:08.466660976 CEST	192.168.2.5	130.195.216.147	303	Echo
Oct 25, 2024 20:06:08.466711998 CEST	192.168.2.5	130.195.251.216	302	Echo
Oct 25, 2024 20:06:08.466774940 CEST	192.168.2.5	130.195.43.220	301	Echo
Oct 25, 2024 20:06:08.466866970 CEST	192.168.2.5	130.195.232.196	300	Echo
Oct 25, 2024 20:06:08.466902018 CEST	192.168.2.5	130.195.196.77	2ff	Echo
Oct 25, 2024 20:06:08.466996908 CEST	192.168.2.5	130.195.81.47	2fe	Echo
Oct 25, 2024 20:06:08.467029095 CEST	192.168.2.5	130.195.26.159	2fd	Echo
Oct 25, 2024 20:06:08.467123032 CEST	192.168.2.5	130.195.203.249	2fc	Echo
Oct 25, 2024 20:06:08.467242956 CEST	192.168.2.5	130.195.147.176	2fb	Echo
Oct 25, 2024 20:06:08.467291117 CEST	192.168.2.5	130.195.243.223	2fa	Echo
Oct 25, 2024 20:06:08.467340946 CEST	192.168.2.5	130.195.249.199	2f9	Echo
Oct 25, 2024 20:06:08.467405081 CEST	192.168.2.5	130.195.235.141	2f8	Echo
Oct 25, 2024 20:06:08.467439890 CEST	192.168.2.5	130.195.148.229	2f7	Echo
Oct 25, 2024 20:06:08.467562914 CEST	192.168.2.5	130.195.17.165	2f6	Echo
Oct 25, 2024 20:06:08.467623949 CEST	192.168.2.5	130.195.41.245	2f5	Echo
Oct 25, 2024 20:06:08.479593039 CEST	192.168.2.5	130.195.8.89	2f4	Echo
Oct 25, 2024 20:06:08.495469093 CEST	192.168.2.5	130.195.44.126	2f3	Echo
Oct 25, 2024 20:06:08.511405945 CEST	192.168.2.5	130.195.63.242	2f2	Echo
Oct 25, 2024 20:06:08.527678967 CEST	192.168.2.5	130.195.20.49	2f1	Echo
Oct 25, 2024 20:06:08.542160988 CEST	192.168.2.5	130.195.209.136	2f0	Echo
Oct 25, 2024 20:06:08.557764053 CEST	192.168.2.5	130.195.136.209	2ef	Echo
Oct 25, 2024 20:06:08.573582888 CEST	192.168.2.5	130.195.142.49	2ee	Echo
Oct 25, 2024 20:06:08.588896036 CEST	192.168.2.5	130.195.66.85	2ed	Echo
Oct 25, 2024 20:06:08.604542017 CEST	192.168.2.5	130.195.179.99	2ec	Echo
Oct 25, 2024 20:06:08.620086908 CEST	192.168.2.5	130.195.23.54	2eb	Echo
Oct 25, 2024 20:06:08.635723114 CEST	192.168.2.5	130.195.47.206	2ea	Echo
Oct 25, 2024 20:06:08.651432037 CEST	192.168.2.5	130.195.237.168	2e9	Echo
Oct 25, 2024 20:06:08.666989088 CEST	192.168.2.5	130.195.181.106	2e8	Echo
Oct 25, 2024 20:06:08.682626963 CEST	192.168.2.5	130.195.136.83	2e7	Echo
Oct 25, 2024 20:06:08.698359013 CEST	192.168.2.5	130.195.219.64	2e6	Echo
Oct 25, 2024 20:06:08.713774920 CEST	192.168.2.5	130.195.26.164	2e5	Echo
Oct 25, 2024 20:06:08.729429007 CEST	192.168.2.5	130.195.166.201	2e4	Echo
Oct 25, 2024 20:06:08.745300055 CEST	192.168.2.5	130.195.112.106	2e3	Echo
Oct 25, 2024 20:06:08.760792017 CEST	192.168.2.5	130.195.195.175	2e2	Echo
Oct 25, 2024 20:06:08.776529074 CEST	192.168.2.5	130.195.46.114	2e1	Echo
Oct 25, 2024 20:06:08.778388023 CEST	192.168.2.5	130.195.8.89	2e0	Echo
Oct 25, 2024 20:06:08.791964054 CEST	192.168.2.5	130.195.221.9	2df	Echo
Oct 25, 2024 20:06:08.807774067 CEST	192.168.2.5	130.195.102.117	2de	Echo
Oct 25, 2024 20:06:08.823172092 CEST	192.168.2.5	130.195.42.150	2dd	Echo
Oct 25, 2024 20:06:08.839147091 CEST	192.168.2.5	130.195.172.143	2dc	Echo
Oct 25, 2024 20:06:08.854598045 CEST	192.168.2.5	130.195.178.159	2db	Echo
Oct 25, 2024 20:06:08.870564938 CEST	192.168.2.5	130.195.169.178	2da	Echo
Oct 25, 2024 20:06:08.885992050 CEST	192.168.2.5	130.195.6.42	2d9	Echo
Oct 25, 2024 20:06:08.901628017 CEST	192.168.2.5	130.195.118.82	2d8	Echo
Oct 25, 2024 20:06:08.917144060 CEST	192.168.2.5	130.195.189.95	2d7	Echo
Oct 25, 2024 20:06:08.932657957 CEST	192.168.2.5	130.195.88.158	2d6	Echo
Oct 25, 2024 20:06:08.948399067 CEST	192.168.2.5	130.195.93.167	2d5	Echo
Oct 25, 2024 20:06:08.964036942 CEST	192.168.2.5	130.195.55.146	2d4	Echo
Oct 25, 2024 20:06:08.964253902 CEST	192.168.2.5	130.195.41.26	2d3	Echo
Oct 25, 2024 20:06:08.965590954 CEST	192.168.2.5	130.195.78.82	2d2	Echo
Oct 25, 2024 20:06:08.965634108 CEST	192.168.2.5	130.195.16.249	2d1	Echo
Oct 25, 2024 20:06:08.965709925 CEST	192.168.2.5	130.195.109.197	2d0	Echo
Oct 25, 2024 20:06:08.965760946 CEST	192.168.2.5	130.195.25.112	2cf	Echo
Oct 25, 2024 20:06:08.965800047 CEST	192.168.2.5	130.195.197.114	2ce	Echo
Oct 25, 2024 20:06:08.965877056 CEST	192.168.2.5	130.195.224.252	2cd	Echo
Oct 25, 2024 20:06:08.965931892 CEST	192.168.2.5	130.195.71.196	2cc	Echo
Oct 25, 2024 20:06:08.965966940 CEST	192.168.2.5	130.195.65.130	2cb	Echo
Oct 25, 2024 20:06:08.966080904 CEST	192.168.2.5	130.195.65.40	2ca	Echo
Oct 25, 2024 20:06:08.966204882 CEST	192.168.2.5	130.195.182.97	2c9	Echo
Oct 25, 2024 20:06:08.966238022 CEST	192.168.2.5	130.195.66.56	2c8	Echo
Oct 25, 2024 20:06:08.966316938 CEST	192.168.2.5	130.195.88.136	2c7	Echo
Oct 25, 2024 20:06:08.966366053 CEST	192.168.2.5	130.195.35.208	2c6	Echo
Oct 25, 2024 20:06:08.966418028 CEST	192.168.2.5	130.195.212.34	2c5	Echo
Oct 25, 2024 20:06:08.966543913 CEST	192.168.2.5	130.195.10.65	2c4	Echo
Oct 25, 2024 20:06:08.966599941 CEST	192.168.2.5	130.195.162.21	2c3	Echo
Oct 25, 2024 20:06:08.966635942 CEST	192.168.2.5	130.195.215.161	2c2	Echo
Oct 25, 2024 20:06:08.966681957 CEST	192.168.2.5	130.195.14.16	2c1	Echo
Oct 25, 2024 20:06:08.966751099 CEST	192.168.2.5	130.195.192.174	2c0	Echo
Oct 25, 2024 20:06:08.966783047 CEST	192.168.2.5	130.195.94.153	2bf	Echo
Oct 25, 2024 20:06:08.967020988 CEST	192.168.2.5	130.195.186.224	2be	Echo
Oct 25, 2024 20:06:08.967024088 CEST	192.168.2.5	130.195.57.218	2bd	Echo
Oct 25, 2024 20:06:08.967080116 CEST	192.168.2.5	130.195.250.196	2bc	Echo
Oct 25, 2024 20:06:08.967113972 CEST	192.168.2.5	130.195.78.87	2bb	Echo
Oct 25, 2024 20:06:08.967144012 CEST	192.168.2.5	130.195.158.191	2ba	Echo
Oct 25, 2024 20:06:08.967200994 CEST	192.168.2.5	130.195.84.211	2b9	Echo
Oct 25, 2024 20:06:08.967255116 CEST	192.168.2.5	130.195.116.84	2b8	Echo
Oct 25, 2024 20:06:08.967293978 CEST	192.168.2.5	130.195.151.225	2b7	Echo
Oct 25, 2024 20:06:08.967385054 CEST	192.168.2.5	130.195.129.190	2b6	Echo
Oct 25, 2024 20:06:08.979470968 CEST	192.168.2.5	130.195.12.29	2b5	Echo
Oct 25, 2024 20:06:08.995197058 CEST	192.168.2.5	130.195.216.192	2b4	Echo
Oct 25, 2024 20:06:09.011327982 CEST	192.168.2.5	130.195.216.216	2b3	Echo
Oct 25, 2024 20:06:09.026499033 CEST	192.168.2.5	130.195.115.173	2b2	Echo
Oct 25, 2024 20:06:09.042095900 CEST	192.168.2.5	130.195.119.240	2b1	Echo
Oct 25, 2024 20:06:09.057734013 CEST	192.168.2.5	130.195.126.159	2b0	Echo
Oct 25, 2024 20:06:09.073286057 CEST	192.168.2.5	130.195.175.222	2af	Echo
Oct 25, 2024 20:06:09.088968992 CEST	192.168.2.5	130.195.68.225	2ae	Echo
Oct 25, 2024 20:06:09.104907036 CEST	192.168.2.5	130.195.22.156	2ad	Echo
Oct 25, 2024 20:06:09.120526075 CEST	192.168.2.5	130.195.210.111	2ac	Echo
Oct 25, 2024 20:06:09.135885954 CEST	192.168.2.5	130.195.207.84	2ab	Echo
Oct 25, 2024 20:06:09.151463032 CEST	192.168.2.5	130.195.227.206	2aa	Echo
Oct 25, 2024 20:06:09.167119980 CEST	192.168.2.5	130.195.132.96	2a9	Echo
Oct 25, 2024 20:06:09.182868004 CEST	192.168.2.5	130.195.102.211	2a8	Echo
Oct 25, 2024 20:06:09.198549986 CEST	192.168.2.5	130.195.84.162	2a7	Echo
Oct 25, 2024 20:06:09.214298010 CEST	192.168.2.5	130.195.239.137	2a6	Echo
Oct 25, 2024 20:06:09.229756117 CEST	192.168.2.5	130.195.193.193	2a5	Echo
Oct 25, 2024 20:06:09.245244026 CEST	192.168.2.5	130.195.137.59	2a4	Echo
Oct 25, 2024 20:06:09.260874033 CEST	192.168.2.5	130.195.23.138	2a3	Echo
Oct 25, 2024 20:06:09.276554108 CEST	192.168.2.5	130.195.198.69	2a2	Echo
Oct 25, 2024 20:06:09.292102098 CEST	192.168.2.5	130.195.131.55	2a1	Echo
Oct 25, 2024 20:06:09.307758093 CEST	192.168.2.5	130.195.104.69	2a0	Echo
Oct 25, 2024 20:06:09.323489904 CEST	192.168.2.5	130.195.126.127	29f	Echo
Oct 25, 2024 20:06:09.339173079 CEST	192.168.2.5	130.195.79.159	29e	Echo
Oct 25, 2024 20:06:09.354660034 CEST	192.168.2.5	130.195.238.175	29d	Echo
Oct 25, 2024 20:06:09.370270014 CEST	192.168.2.5	130.195.139.238	29c	Echo
Oct 25, 2024 20:06:09.386059999 CEST	192.168.2.5	130.195.160.69	29b	Echo
Oct 25, 2024 20:06:09.401439905 CEST	192.168.2.5	130.195.34.160	29a	Echo
Oct 25, 2024 20:06:09.417102098 CEST	192.168.2.5	130.195.255.203	299	Echo
Oct 25, 2024 20:06:09.432830095 CEST	192.168.2.5	130.195.16.41	298	Echo
Oct 25, 2024 20:06:09.448618889 CEST	192.168.2.5	130.195.146.123	297	Echo
Oct 25, 2024 20:06:09.464670897 CEST	192.168.2.5	130.195.30.6	296	Echo
Oct 25, 2024 20:06:09.464756012 CEST	192.168.2.5	130.195.84.134	295	Echo
Oct 25, 2024 20:06:09.466804981 CEST	192.168.2.5	130.195.213.234	294	Echo
Oct 25, 2024 20:06:09.466906071 CEST	192.168.2.5	130.195.70.48	293	Echo
Oct 25, 2024 20:06:09.467014074 CEST	192.168.2.5	130.195.190.118	292	Echo
Oct 25, 2024 20:06:09.467155933 CEST	192.168.2.5	130.195.78.165	291	Echo
Oct 25, 2024 20:06:09.467178106 CEST	192.168.2.5	130.195.219.253	290	Echo
Oct 25, 2024 20:06:09.467259884 CEST	192.168.2.5	130.195.237.85	28f	Echo
Oct 25, 2024 20:06:09.467303991 CEST	192.168.2.5	130.195.60.183	28e	Echo
Oct 25, 2024 20:06:09.467367887 CEST	192.168.2.5	130.195.40.37	28d	Echo
Oct 25, 2024 20:06:09.467494011 CEST	192.168.2.5	130.195.251.165	28c	Echo
Oct 25, 2024 20:06:09.467569113 CEST	192.168.2.5	130.195.40.140	28b	Echo
Oct 25, 2024 20:06:09.467694998 CEST	192.168.2.5	130.195.44.42	28a	Echo
Oct 25, 2024 20:06:09.467703104 CEST	192.168.2.5	130.195.1.57	289	Echo
Oct 25, 2024 20:06:09.467794895 CEST	192.168.2.5	130.195.205.234	288	Echo
Oct 25, 2024 20:06:09.467919111 CEST	192.168.2.5	130.195.227.215	287	Echo
Oct 25, 2024 20:06:09.468040943 CEST	192.168.2.5	130.195.61.237	285	Echo
Oct 25, 2024 20:06:09.468046904 CEST	192.168.2.5	130.195.0.237	286	Echo
Oct 25, 2024 20:06:09.468106985 CEST	192.168.2.5	130.195.149.160	284	Echo
Oct 25, 2024 20:06:09.468141079 CEST	192.168.2.5	130.195.34.76	283	Echo
Oct 25, 2024 20:06:09.468240976 CEST	192.168.2.5	130.195.69.47	282	Echo
Oct 25, 2024 20:06:09.468317986 CEST	192.168.2.5	130.195.88.209	281	Echo
Oct 25, 2024 20:06:09.468453884 CEST	192.168.2.5	130.195.159.128	280	Echo
Oct 25, 2024 20:06:09.468506098 CEST	192.168.2.5	130.195.133.8	27f	Echo
Oct 25, 2024 20:06:09.468566895 CEST	192.168.2.5	130.195.100.155	27e	Echo
Oct 25, 2024 20:06:09.470768929 CEST	192.168.2.5	130.195.185.17	27d	Echo
Oct 25, 2024 20:06:09.470889091 CEST	192.168.2.5	130.195.55.145	27c	Echo
Oct 25, 2024 20:06:09.471029043 CEST	192.168.2.5	130.195.66.168	27b	Echo
Oct 25, 2024 20:06:09.471051931 CEST	192.168.2.5	130.195.144.205	27a	Echo
Oct 25, 2024 20:06:09.479490995 CEST	192.168.2.5	130.195.26.212	279	Echo
Oct 25, 2024 20:06:09.495336056 CEST	192.168.2.5	130.195.148.32	278	Echo
Oct 25, 2024 20:06:09.511059999 CEST	192.168.2.5	130.195.38.228	277	Echo
Oct 25, 2024 20:06:09.526721954 CEST	192.168.2.5	130.195.24.88	276	Echo
Oct 25, 2024 20:06:09.533096075 CEST	192.168.2.5	130.195.20.49	275	Echo
Oct 25, 2024 20:06:09.542285919 CEST	192.168.2.5	130.195.184.196	274	Echo
Oct 25, 2024 20:06:09.558161974 CEST	192.168.2.5	130.195.56.129	273	Echo
Oct 25, 2024 20:06:09.573420048 CEST	192.168.2.5	130.195.89.33	272	Echo
Oct 25, 2024 20:06:09.589322090 CEST	192.168.2.5	130.195.224.89	271	Echo
Oct 25, 2024 20:06:09.604523897 CEST	192.168.2.5	130.195.195.121	270	Echo
Oct 25, 2024 20:06:09.620222092 CEST	192.168.2.5	130.195.2.5	26f	Echo
Oct 25, 2024 20:06:09.635873079 CEST	192.168.2.5	130.195.70.108	26e	Echo
Oct 25, 2024 20:06:09.651396990 CEST	192.168.2.5	130.195.108.219	26d	Echo
Oct 25, 2024 20:06:09.671479940 CEST	192.168.2.5	130.195.143.55	26c	Echo
Oct 25, 2024 20:06:09.682919979 CEST	192.168.2.5	130.195.124.244	26b	Echo
Oct 25, 2024 20:06:09.698333025 CEST	192.168.2.5	130.195.21.20	26a	Echo
Oct 25, 2024 20:06:09.714160919 CEST	192.168.2.5	130.195.165.123	269	Echo
Oct 25, 2024 20:06:09.729506969 CEST	192.168.2.5	130.195.4.24	268	Echo
Oct 25, 2024 20:06:09.745163918 CEST	192.168.2.5	130.195.146.148	267	Echo
Oct 25, 2024 20:06:09.760876894 CEST	192.168.2.5	130.195.70.147	266	Echo
Oct 25, 2024 20:06:09.776431084 CEST	192.168.2.5	130.195.184.23	265	Echo
Oct 25, 2024 20:06:09.792049885 CEST	192.168.2.5	130.195.113.78	264	Echo
Oct 25, 2024 20:06:09.807609081 CEST	192.168.2.5	130.195.63.218	263	Echo
Oct 25, 2024 20:06:09.823415995 CEST	192.168.2.5	130.195.172.60	262	Echo
Oct 25, 2024 20:06:09.839330912 CEST	192.168.2.5	130.195.142.40	261	Echo
Oct 25, 2024 20:06:09.855726957 CEST	192.168.2.5	130.195.60.79	260	Echo
Oct 25, 2024 20:06:09.870723963 CEST	192.168.2.5	130.195.161.223	25f	Echo
Oct 25, 2024 20:06:09.886044979 CEST	192.168.2.5	130.195.23.182	25e	Echo
Oct 25, 2024 20:06:09.901629925 CEST	192.168.2.5	130.195.133.139	25d	Echo
Oct 25, 2024 20:06:09.917855024 CEST	192.168.2.5	130.195.187.39	25c	Echo
Oct 25, 2024 20:06:09.932842016 CEST	192.168.2.5	130.195.48.187	25b	Echo
Oct 25, 2024 20:06:09.948343992 CEST	192.168.2.5	130.195.188.223	25a	Echo
Oct 25, 2024 20:06:09.964695930 CEST	192.168.2.5	130.195.238.49	259	Echo
Oct 25, 2024 20:06:09.964834929 CEST	192.168.2.5	130.195.96.105	258	Echo
Oct 25, 2024 20:06:09.967159986 CEST	192.168.2.5	130.195.129.31	257	Echo
Oct 25, 2024 20:06:09.967217922 CEST	192.168.2.5	130.195.249.251	256	Echo
Oct 25, 2024 20:06:09.967291117 CEST	192.168.2.5	130.195.212.121	255	Echo
Oct 25, 2024 20:06:09.967408895 CEST	192.168.2.5	130.195.171.129	254	Echo
Oct 25, 2024 20:06:09.967428923 CEST	192.168.2.5	130.195.37.163	253	Echo
Oct 25, 2024 20:06:09.967499018 CEST	192.168.2.5	130.195.99.233	252	Echo
Oct 25, 2024 20:06:09.967660904 CEST	192.168.2.5	130.195.181.84	251	Echo
Oct 25, 2024 20:06:09.967817068 CEST	192.168.2.5	130.195.146.158	24f	Echo
Oct 25, 2024 20:06:09.967910051 CEST	192.168.2.5	130.195.40.194	250	Echo
Oct 25, 2024 20:06:09.967914104 CEST	192.168.2.5	130.195.108.209	24e	Echo
Oct 25, 2024 20:06:09.967981100 CEST	192.168.2.5	130.195.203.108	24d	Echo
Oct 25, 2024 20:06:09.968044996 CEST	192.168.2.5	130.195.239.23	24c	Echo
Oct 25, 2024 20:06:09.968096972 CEST	192.168.2.5	130.195.30.16	24b	Echo
Oct 25, 2024 20:06:09.968225956 CEST	192.168.2.5	130.195.8.239	24a	Echo
Oct 25, 2024 20:06:09.968303919 CEST	192.168.2.5	130.195.194.255	249	Echo
Oct 25, 2024 20:06:09.968350887 CEST	192.168.2.5	130.195.206.86	248	Echo
Oct 25, 2024 20:06:09.968425035 CEST	192.168.2.5	130.195.165.37	247	Echo
Oct 25, 2024 20:06:09.968480110 CEST	192.168.2.5	130.195.144.99	246	Echo
Oct 25, 2024 20:06:09.968534946 CEST	192.168.2.5	130.195.228.20	245	Echo
Oct 25, 2024 20:06:09.968590021 CEST	192.168.2.5	130.195.64.72	244	Echo
Oct 25, 2024 20:06:09.968645096 CEST	192.168.2.5	130.195.115.216	243	Echo
Oct 25, 2024 20:06:09.968697071 CEST	192.168.2.5	130.195.181.121	242	Echo
Oct 25, 2024 20:06:09.968785048 CEST	192.168.2.5	130.195.17.223	241	Echo
Oct 25, 2024 20:06:09.968841076 CEST	192.168.2.5	130.195.57.30	240	Echo
Oct 25, 2024 20:06:09.968900919 CEST	192.168.2.5	130.195.145.216	23f	Echo
Oct 25, 2024 20:06:09.968964100 CEST	192.168.2.5	130.195.119.48	23e	Echo
Oct 25, 2024 20:06:09.969027042 CEST	192.168.2.5	130.195.59.180	23d	Echo
Oct 25, 2024 20:06:09.969091892 CEST	192.168.2.5	130.195.2.167	23c	Echo
Oct 25, 2024 20:06:09.969153881 CEST	192.168.2.5	130.195.35.233	23b	Echo
Oct 25, 2024 20:06:09.969201088 CEST	192.168.2.5	130.195.184.231	23a	Echo
Oct 25, 2024 20:06:09.969237089 CEST	192.168.2.5	130.195.122.172	239	Echo
Oct 25, 2024 20:06:09.979573011 CEST	192.168.2.5	130.195.153.137	238	Echo
Oct 25, 2024 20:06:09.995345116 CEST	192.168.2.5	130.195.83.153	237	Echo
Oct 25, 2024 20:06:10.010864019 CEST	192.168.2.5	130.195.164.83	236	Echo
Oct 25, 2024 20:06:10.026396036 CEST	192.168.2.5	130.195.68.137	235	Echo
Oct 25, 2024 20:06:10.042100906 CEST	192.168.2.5	130.195.26.11	234	Echo
Oct 25, 2024 20:06:10.057728052 CEST	192.168.2.5	130.195.225.241	233	Echo
Oct 25, 2024 20:06:10.073352098 CEST	192.168.2.5	130.195.64.160	232	Echo
Oct 25, 2024 20:06:10.088864088 CEST	192.168.2.5	130.195.249.17	231	Echo
Oct 25, 2024 20:06:10.104712009 CEST	192.168.2.5	130.195.38.33	230	Echo
Oct 25, 2024 20:06:10.107764006 CEST	130.195.249.17	192.168.2.5	a31	Echo Reply
Oct 25, 2024 20:06:10.108124971 CEST	192.168.2.5	130.195.249.17	22f	Echo
Oct 25, 2024 20:06:10.120493889 CEST	192.168.2.5	130.195.161.57	22e	Echo
Oct 25, 2024 20:06:10.126849890 CEST	130.195.249.17	192.168.2.5	a2f	Echo Reply
Oct 25, 2024 20:06:10.135797977 CEST	192.168.2.5	130.195.232.9	22d	Echo
Oct 25, 2024 20:06:10.151736975 CEST	192.168.2.5	130.195.23.119	22c	Echo
Oct 25, 2024 20:06:10.167195082 CEST	192.168.2.5	130.195.107.152	22b	Echo
Oct 25, 2024 20:06:10.182970047 CEST	192.168.2.5	130.195.71.158	22a	Echo
Oct 25, 2024 20:06:10.198384047 CEST	192.168.2.5	130.195.215.113	229	Echo
Oct 25, 2024 20:06:10.214474916 CEST	192.168.2.5	130.195.54.215	228	Echo
Oct 25, 2024 20:06:10.234785080 CEST	192.168.2.5	130.195.63.112	227	Echo
Oct 25, 2024 20:06:10.245614052 CEST	192.168.2.5	130.195.15.15	226	Echo
Oct 25, 2024 20:06:10.261176109 CEST	192.168.2.5	130.195.57.116	225	Echo
Oct 25, 2024 20:06:10.276514053 CEST	192.168.2.5	130.195.162.255	224	Echo
Oct 25, 2024 20:06:10.292387009 CEST	192.168.2.5	130.195.108.115	223	Echo
Oct 25, 2024 20:06:10.307826042 CEST	192.168.2.5	130.195.49.46	222	Echo
Oct 25, 2024 20:06:10.323626995 CEST	192.168.2.5	130.195.171.91	221	Echo
Oct 25, 2024 20:06:10.339137077 CEST	192.168.2.5	130.195.222.149	220	Echo
Oct 25, 2024 20:06:10.354657888 CEST	192.168.2.5	130.195.180.15	21f	Echo
Oct 25, 2024 20:06:10.370307922 CEST	192.168.2.5	130.195.74.142	21e	Echo
Oct 25, 2024 20:06:10.385895967 CEST	192.168.2.5	130.195.94.59	21d	Echo
Oct 25, 2024 20:06:10.401387930 CEST	192.168.2.5	130.195.172.230	21c	Echo
Oct 25, 2024 20:06:10.417118073 CEST	192.168.2.5	130.195.66.30	21b	Echo
Oct 25, 2024 20:06:10.432990074 CEST	192.168.2.5	130.195.249.247	21a	Echo
Oct 25, 2024 20:06:10.448445082 CEST	192.168.2.5	130.195.145.249	219	Echo
Oct 25, 2024 20:06:10.464050055 CEST	192.168.2.5	130.195.200.162	218	Echo
Oct 25, 2024 20:06:10.464652061 CEST	192.168.2.5	130.195.89.70	217	Echo
Oct 25, 2024 20:06:10.467715025 CEST	192.168.2.5	130.195.44.126	216	Echo
Oct 25, 2024 20:06:10.467871904 CEST	192.168.2.5	130.195.63.242	215	Echo
Oct 25, 2024 20:06:10.467947960 CEST	192.168.2.5	130.195.209.136	214	Echo
Oct 25, 2024 20:06:10.467988014 CEST	192.168.2.5	130.195.136.209	213	Echo
Oct 25, 2024 20:06:10.468060970 CEST	192.168.2.5	130.195.142.49	212	Echo
Oct 25, 2024 20:06:10.468110085 CEST	192.168.2.5	130.195.66.85	211	Echo
Oct 25, 2024 20:06:10.468216896 CEST	192.168.2.5	130.195.179.99	210	Echo
Oct 25, 2024 20:06:10.468301058 CEST	192.168.2.5	130.195.23.54	20f	Echo
Oct 25, 2024 20:06:10.468421936 CEST	192.168.2.5	130.195.47.206	20e	Echo
Oct 25, 2024 20:06:10.468509912 CEST	192.168.2.5	130.195.237.168	20d	Echo
Oct 25, 2024 20:06:10.468552113 CEST	192.168.2.5	130.195.181.106	20c	Echo
Oct 25, 2024 20:06:10.468662024 CEST	192.168.2.5	130.195.136.83	20b	Echo
Oct 25, 2024 20:06:10.468713045 CEST	192.168.2.5	130.195.219.64	20a	Echo
Oct 25, 2024 20:06:10.468817949 CEST	192.168.2.5	130.195.26.164	209	Echo
Oct 25, 2024 20:06:10.468858004 CEST	192.168.2.5	130.195.166.201	208	Echo
Oct 25, 2024 20:06:10.468930960 CEST	192.168.2.5	130.195.112.106	207	Echo
Oct 25, 2024 20:06:10.468983889 CEST	192.168.2.5	130.195.195.175	206	Echo
Oct 25, 2024 20:06:10.469082117 CEST	192.168.2.5	130.195.46.114	205	Echo
Oct 25, 2024 20:06:10.469268084 CEST	192.168.2.5	130.195.221.9	204	Echo
Oct 25, 2024 20:06:10.469355106 CEST	192.168.2.5	130.195.102.117	203	Echo
Oct 25, 2024 20:06:10.469402075 CEST	192.168.2.5	130.195.42.150	202	Echo
Oct 25, 2024 20:06:10.469460964 CEST	192.168.2.5	130.195.172.143	201	Echo
Oct 25, 2024 20:06:10.469635963 CEST	192.168.2.5	130.195.178.159	200	Echo
Oct 25, 2024 20:06:10.469739914 CEST	192.168.2.5	130.195.169.178	1ff	Echo
Oct 25, 2024 20:06:10.469835043 CEST	192.168.2.5	130.195.6.42	1fe	Echo
Oct 25, 2024 20:06:10.469913006 CEST	192.168.2.5	130.195.118.82	1fd	Echo
Oct 25, 2024 20:06:10.470024109 CEST	192.168.2.5	130.195.189.95	1fc	Echo
Oct 25, 2024 20:06:10.470103025 CEST	192.168.2.5	130.195.88.158	1fb	Echo
Oct 25, 2024 20:06:10.470177889 CEST	192.168.2.5	130.195.93.167	1fa	Echo
Oct 25, 2024 20:06:10.479583025 CEST	192.168.2.5	130.195.216.78	1f9	Echo
Oct 25, 2024 20:06:10.495157957 CEST	192.168.2.5	130.195.154.5	1f8	Echo
Oct 25, 2024 20:06:10.510931969 CEST	192.168.2.5	130.195.162.2	1f7	Echo
Oct 25, 2024 20:06:10.526464939 CEST	192.168.2.5	130.195.21.151	1f6	Echo
Oct 25, 2024 20:06:10.542166948 CEST	192.168.2.5	130.195.68.93	1f5	Echo
Oct 25, 2024 20:06:10.558140993 CEST	192.168.2.5	130.195.54.190	1f4	Echo
Oct 25, 2024 20:06:10.573837996 CEST	192.168.2.5	130.195.124.54	1f3	Echo
Oct 25, 2024 20:06:10.589241028 CEST	192.168.2.5	130.195.131.198	1f2	Echo
Oct 25, 2024 20:06:10.604851961 CEST	192.168.2.5	130.195.97.207	1f1	Echo
Oct 25, 2024 20:06:10.620279074 CEST	192.168.2.5	130.195.182.74	1f0	Echo
Oct 25, 2024 20:06:10.635891914 CEST	192.168.2.5	130.195.169.238	1ef	Echo
Oct 25, 2024 20:06:10.651550055 CEST	192.168.2.5	130.195.179.111	1ee	Echo
Oct 25, 2024 20:06:10.667062998 CEST	192.168.2.5	130.195.188.246	1ed	Echo
Oct 25, 2024 20:06:10.682981014 CEST	192.168.2.5	130.195.143.126	1ec	Echo
Oct 25, 2024 20:06:10.698726892 CEST	192.168.2.5	130.195.50.89	1eb	Echo
Oct 25, 2024 20:06:10.713920116 CEST	192.168.2.5	130.195.128.222	1ea	Echo
Oct 25, 2024 20:06:10.729496956 CEST	192.168.2.5	130.195.21.141	1e9	Echo
Oct 25, 2024 20:06:10.745066881 CEST	192.168.2.5	130.195.52.250	1e8	Echo
Oct 25, 2024 20:06:10.761073112 CEST	192.168.2.5	130.195.193.53	1e7	Echo
Oct 25, 2024 20:06:10.776424885 CEST	192.168.2.5	130.195.83.5	1e6	Echo
Oct 25, 2024 20:06:10.792009115 CEST	192.168.2.5	130.195.56.40	1e5	Echo
Oct 25, 2024 20:06:10.807809114 CEST	192.168.2.5	130.195.181.105	1e4	Echo
Oct 25, 2024 20:06:10.823266983 CEST	192.168.2.5	130.195.79.30	1e3	Echo
Oct 25, 2024 20:06:10.839070082 CEST	192.168.2.5	130.195.80.236	1e2	Echo
Oct 25, 2024 20:06:10.854696035 CEST	192.168.2.5	130.195.171.103	1e1	Echo
Oct 25, 2024 20:06:10.870266914 CEST	192.168.2.5	130.195.167.245	1e0	Echo
Oct 25, 2024 20:06:10.885839939 CEST	192.168.2.5	130.195.45.62	1df	Echo
Oct 25, 2024 20:06:10.901359081 CEST	192.168.2.5	130.195.53.179	1de	Echo
Oct 25, 2024 20:06:10.916903019 CEST	192.168.2.5	130.195.62.201	1dd	Echo
Oct 25, 2024 20:06:10.932895899 CEST	192.168.2.5	130.195.245.1	1dc	Echo
Oct 25, 2024 20:06:10.948724031 CEST	192.168.2.5	130.195.42.159	1db	Echo
Oct 25, 2024 20:06:10.951308012 CEST	130.195.245.1	192.168.2.5	9dc	Echo Reply
Oct 25, 2024 20:06:10.956981897 CEST	192.168.2.5	130.195.245.1	1da	Echo
Oct 25, 2024 20:06:10.964632034 CEST	192.168.2.5	130.195.136.42	1d9	Echo
Oct 25, 2024 20:06:10.964818954 CEST	192.168.2.5	130.195.41.26	1d8	Echo
Oct 25, 2024 20:06:10.967226982 CEST	192.168.2.5	130.195.12.29	1d7	Echo
Oct 25, 2024 20:06:10.967267036 CEST	192.168.2.5	130.195.216.192	1d6	Echo
Oct 25, 2024 20:06:10.967333078 CEST	192.168.2.5	130.195.216.216	1d5	Echo
Oct 25, 2024 20:06:10.967390060 CEST	192.168.2.5	130.195.115.173	1d4	Echo
Oct 25, 2024 20:06:10.967437983 CEST	192.168.2.5	130.195.119.240	1d3	Echo
Oct 25, 2024 20:06:10.967506886 CEST	192.168.2.5	130.195.126.159	1d2	Echo
Oct 25, 2024 20:06:10.967575073 CEST	192.168.2.5	130.195.175.222	1d1	Echo
Oct 25, 2024 20:06:10.967719078 CEST	192.168.2.5	130.195.68.225	1d0	Echo
Oct 25, 2024 20:06:10.967820883 CEST	192.168.2.5	130.195.22.156	1cf	Echo
Oct 25, 2024 20:06:10.967884064 CEST	192.168.2.5	130.195.210.111	1ce	Echo
Oct 25, 2024 20:06:10.967936039 CEST	192.168.2.5	130.195.207.84	1cd	Echo
Oct 25, 2024 20:06:10.967984915 CEST	192.168.2.5	130.195.227.206	1cc	Echo
Oct 25, 2024 20:06:10.968039989 CEST	192.168.2.5	130.195.132.96	1cb	Echo
Oct 25, 2024 20:06:10.968080044 CEST	192.168.2.5	130.195.102.211	1ca	Echo
Oct 25, 2024 20:06:10.968125105 CEST	192.168.2.5	130.195.84.162	1c9	Echo
Oct 25, 2024 20:06:10.968192101 CEST	192.168.2.5	130.195.239.137	1c8	Echo
Oct 25, 2024 20:06:10.968246937 CEST	192.168.2.5	130.195.193.193	1c7	Echo
Oct 25, 2024 20:06:10.968297958 CEST	192.168.2.5	130.195.137.59	1c6	Echo
Oct 25, 2024 20:06:10.968380928 CEST	192.168.2.5	130.195.23.138	1c5	Echo
Oct 25, 2024 20:06:10.968403101 CEST	192.168.2.5	130.195.198.69	1c4	Echo
Oct 25, 2024 20:06:10.968482018 CEST	192.168.2.5	130.195.131.55	1c3	Echo
Oct 25, 2024 20:06:10.968533993 CEST	192.168.2.5	130.195.104.69	1c2	Echo
Oct 25, 2024 20:06:10.968590975 CEST	192.168.2.5	130.195.126.127	1c1	Echo
Oct 25, 2024 20:06:10.968646049 CEST	192.168.2.5	130.195.79.159	1c0	Echo
Oct 25, 2024 20:06:10.968702078 CEST	192.168.2.5	130.195.238.175	1bf	Echo
Oct 25, 2024 20:06:10.968744040 CEST	192.168.2.5	130.195.139.238	1be	Echo
Oct 25, 2024 20:06:10.968800068 CEST	192.168.2.5	130.195.160.69	1bd	Echo
Oct 25, 2024 20:06:10.968847036 CEST	192.168.2.5	130.195.34.160	1bc	Echo
Oct 25, 2024 20:06:10.968894958 CEST	192.168.2.5	130.195.255.203	1bb	Echo
Oct 25, 2024 20:06:10.968940020 CEST	192.168.2.5	130.195.16.41	1ba	Echo
Oct 25, 2024 20:06:10.968992949 CEST	192.168.2.5	130.195.146.123	1b9	Echo
Oct 25, 2024 20:06:10.976898909 CEST	130.195.245.1	192.168.2.5	9da	Echo Reply
Oct 25, 2024 20:06:10.979454994 CEST	192.168.2.5	130.195.37.132	1b8	Echo
Oct 25, 2024 20:06:10.995142937 CEST	192.168.2.5	130.195.208.245	1b7	Echo
Oct 25, 2024 20:06:11.010762930 CEST	192.168.2.5	130.195.13.51	1b6	Echo
Oct 25, 2024 20:06:11.026345968 CEST	192.168.2.5	130.195.91.197	1b5	Echo
Oct 25, 2024 20:06:11.041904926 CEST	192.168.2.5	130.195.184.230	1b4	Echo
Oct 25, 2024 20:06:11.057600975 CEST	192.168.2.5	130.195.58.163	1b3	Echo
Oct 25, 2024 20:06:11.073312044 CEST	192.168.2.5	130.195.17.22	1b2	Echo
Oct 25, 2024 20:06:11.088879108 CEST	192.168.2.5	130.195.90.24	1b1	Echo
Oct 25, 2024 20:06:11.104518890 CEST	192.168.2.5	130.195.185.209	1b0	Echo
Oct 25, 2024 20:06:11.120050907 CEST	192.168.2.5	130.195.164.185	1af	Echo
Oct 25, 2024 20:06:11.136141062 CEST	192.168.2.5	130.195.96.164	1ae	Echo
Oct 25, 2024 20:06:11.151375055 CEST	192.168.2.5	130.195.132.14	1ad	Echo
Oct 25, 2024 20:06:11.166910887 CEST	192.168.2.5	130.195.235.197	1ac	Echo
Oct 25, 2024 20:06:11.182657003 CEST	192.168.2.5	130.195.227.191	1ab	Echo
Oct 25, 2024 20:06:11.198551893 CEST	192.168.2.5	130.195.24.155	1aa	Echo
Oct 25, 2024 20:06:11.213865042 CEST	192.168.2.5	130.195.76.141	1a9	Echo
Oct 25, 2024 20:06:11.229427099 CEST	192.168.2.5	130.195.31.243	1a8	Echo
Oct 25, 2024 20:06:11.245413065 CEST	192.168.2.5	130.195.122.120	1a7	Echo
Oct 25, 2024 20:06:11.260685921 CEST	192.168.2.5	130.195.89.120	1a6	Echo
Oct 25, 2024 20:06:11.276627064 CEST	192.168.2.5	130.195.89.148	1a5	Echo
Oct 25, 2024 20:06:11.292682886 CEST	192.168.2.5	130.195.219.89	1a4	Echo
Oct 25, 2024 20:06:11.307682037 CEST	192.168.2.5	130.195.227.147	1a3	Echo
Oct 25, 2024 20:06:11.323380947 CEST	192.168.2.5	130.195.19.165	1a2	Echo
Oct 25, 2024 20:06:11.338973045 CEST	192.168.2.5	130.195.108.250	1a1	Echo
Oct 25, 2024 20:06:11.354911089 CEST	192.168.2.5	130.195.209.0	1a0	Echo
Oct 25, 2024 20:06:11.370147943 CEST	192.168.2.5	130.195.71.238	19f	Echo
Oct 25, 2024 20:06:11.385893106 CEST	192.168.2.5	130.195.149.4	19e	Echo
Oct 25, 2024 20:06:11.401362896 CEST	192.168.2.5	130.195.198.211	19d	Echo
Oct 25, 2024 20:06:11.417380095 CEST	192.168.2.5	130.195.78.199	19c	Echo
Oct 25, 2024 20:06:11.433198929 CEST	192.168.2.5	130.195.83.78	19b	Echo
Oct 25, 2024 20:06:11.448400021 CEST	192.168.2.5	130.195.96.189	19a	Echo
Oct 25, 2024 20:06:11.464193106 CEST	192.168.2.5	130.195.157.231	199	Echo
Oct 25, 2024 20:06:11.464960098 CEST	192.168.2.5	130.195.84.134	198	Echo
Oct 25, 2024 20:06:11.469269991 CEST	192.168.2.5	130.195.26.212	197	Echo
Oct 25, 2024 20:06:11.469484091 CEST	192.168.2.5	130.195.148.32	196	Echo
Oct 25, 2024 20:06:11.469707966 CEST	192.168.2.5	130.195.38.228	195	Echo
Oct 25, 2024 20:06:11.470155001 CEST	192.168.2.5	130.195.24.88	194	Echo
Oct 25, 2024 20:06:11.470468998 CEST	192.168.2.5	130.195.184.196	193	Echo
Oct 25, 2024 20:06:11.470958948 CEST	192.168.2.5	130.195.56.129	192	Echo
Oct 25, 2024 20:06:11.471086979 CEST	192.168.2.5	130.195.89.33	191	Echo
Oct 25, 2024 20:06:11.471302986 CEST	192.168.2.5	130.195.224.89	190	Echo
Oct 25, 2024 20:06:11.471451044 CEST	192.168.2.5	130.195.195.121	18f	Echo
Oct 25, 2024 20:06:11.471590042 CEST	192.168.2.5	130.195.2.5	18e	Echo
Oct 25, 2024 20:06:11.471734047 CEST	192.168.2.5	130.195.70.108	18d	Echo
Oct 25, 2024 20:06:11.471796036 CEST	192.168.2.5	130.195.108.219	18c	Echo
Oct 25, 2024 20:06:11.471952915 CEST	192.168.2.5	130.195.143.55	18b	Echo
Oct 25, 2024 20:06:11.472217083 CEST	192.168.2.5	130.195.124.244	18a	Echo
Oct 25, 2024 20:06:11.472326994 CEST	192.168.2.5	130.195.21.20	189	Echo
Oct 25, 2024 20:06:11.472404003 CEST	192.168.2.5	130.195.165.123	188	Echo
Oct 25, 2024 20:06:11.472685099 CEST	192.168.2.5	130.195.4.24	187	Echo
Oct 25, 2024 20:06:11.472862005 CEST	192.168.2.5	130.195.146.148	186	Echo
Oct 25, 2024 20:06:11.473092079 CEST	192.168.2.5	130.195.70.147	185	Echo
Oct 25, 2024 20:06:11.473146915 CEST	192.168.2.5	130.195.184.23	184	Echo
Oct 25, 2024 20:06:11.473298073 CEST	192.168.2.5	130.195.113.78	183	Echo
Oct 25, 2024 20:06:11.473460913 CEST	192.168.2.5	130.195.63.218	182	Echo
Oct 25, 2024 20:06:11.473579884 CEST	192.168.2.5	130.195.172.60	181	Echo
Oct 25, 2024 20:06:11.473642111 CEST	192.168.2.5	130.195.142.40	180	Echo
Oct 25, 2024 20:06:11.473721027 CEST	192.168.2.5	130.195.60.79	17f	Echo
Oct 25, 2024 20:06:11.473906994 CEST	192.168.2.5	130.195.161.223	17e	Echo
Oct 25, 2024 20:06:11.474075079 CEST	192.168.2.5	130.195.23.182	17d	Echo
Oct 25, 2024 20:06:11.474230051 CEST	192.168.2.5	130.195.133.139	17c	Echo
Oct 25, 2024 20:06:11.474348068 CEST	192.168.2.5	130.195.187.39	17b	Echo
Oct 25, 2024 20:06:11.474459887 CEST	192.168.2.5	130.195.48.187	17a	Echo
Oct 25, 2024 20:06:11.474642038 CEST	192.168.2.5	130.195.188.223	179	Echo
Oct 25, 2024 20:06:11.479643106 CEST	192.168.2.5	130.195.43.59	178	Echo
Oct 25, 2024 20:06:11.495177984 CEST	192.168.2.5	130.195.91.43	177	Echo
Oct 25, 2024 20:06:11.510910988 CEST	192.168.2.5	130.195.53.55	176	Echo
Oct 25, 2024 20:06:11.526832104 CEST	192.168.2.5	130.195.201.156	175	Echo
Oct 25, 2024 20:06:11.542004108 CEST	192.168.2.5	130.195.101.203	174	Echo
Oct 25, 2024 20:06:11.558444023 CEST	192.168.2.5	130.195.206.200	173	Echo
Oct 25, 2024 20:06:11.573451996 CEST	192.168.2.5	130.195.6.78	172	Echo
Oct 25, 2024 20:06:11.589787006 CEST	192.168.2.5	130.195.4.187	171	Echo
Oct 25, 2024 20:06:11.605082035 CEST	192.168.2.5	130.195.90.18	170	Echo
Oct 25, 2024 20:06:11.620960951 CEST	192.168.2.5	130.195.26.146	16f	Echo
Oct 25, 2024 20:06:11.636290073 CEST	192.168.2.5	130.195.114.26	16e	Echo
Oct 25, 2024 20:06:11.652878046 CEST	192.168.2.5	130.195.221.114	16d	Echo
Oct 25, 2024 20:06:11.667279005 CEST	192.168.2.5	130.195.124.75	16c	Echo
Oct 25, 2024 20:06:11.684770107 CEST	192.168.2.5	130.195.193.45	16b	Echo
Oct 25, 2024 20:06:11.730802059 CEST	192.168.2.5	130.195.135.193	16a	Echo
Oct 25, 2024 20:06:11.731651068 CEST	192.168.2.5	130.195.67.57	169	Echo
Oct 25, 2024 20:06:11.747420073 CEST	192.168.2.5	130.195.90.206	168	Echo
Oct 25, 2024 20:06:11.763377905 CEST	192.168.2.5	130.195.95.110	167	Echo
Oct 25, 2024 20:06:11.777014971 CEST	192.168.2.5	130.195.12.75	166	Echo
Oct 25, 2024 20:06:11.792315006 CEST	192.168.2.5	130.195.137.33	165	Echo
Oct 25, 2024 20:06:11.808821917 CEST	192.168.2.5	130.195.56.5	164	Echo
Oct 25, 2024 20:06:11.824371099 CEST	192.168.2.5	130.195.176.145	163	Echo
Oct 25, 2024 20:06:11.839309931 CEST	192.168.2.5	130.195.158.89	162	Echo
Oct 25, 2024 20:06:11.855596066 CEST	192.168.2.5	130.195.250.175	161	Echo
Oct 25, 2024 20:06:11.871706963 CEST	192.168.2.5	130.195.151.16	160	Echo
Oct 25, 2024 20:06:11.874336958 CEST	192.168.2.5	130.195.6.78	15f	Echo
Oct 25, 2024 20:06:11.885860920 CEST	192.168.2.5	130.195.177.86	15e	Echo
Oct 25, 2024 20:06:11.919745922 CEST	192.168.2.5	130.195.93.173	15d	Echo
Oct 25, 2024 20:06:11.937328100 CEST	192.168.2.5	130.195.173.136	15c	Echo
Oct 25, 2024 20:06:11.976370096 CEST	192.168.2.5	130.195.238.49	15b	Echo
Oct 25, 2024 20:06:11.976675034 CEST	192.168.2.5	130.195.203.16	15a	Echo
Oct 25, 2024 20:06:11.979531050 CEST	192.168.2.5	130.195.153.137	159	Echo
Oct 25, 2024 20:06:11.979808092 CEST	192.168.2.5	130.195.83.153	158	Echo
Oct 25, 2024 20:06:11.979960918 CEST	192.168.2.5	130.195.164.83	157	Echo
Oct 25, 2024 20:06:11.980117083 CEST	192.168.2.5	130.195.68.137	156	Echo
Oct 25, 2024 20:06:11.980227947 CEST	192.168.2.5	130.195.26.11	155	Echo
Oct 25, 2024 20:06:11.980354071 CEST	192.168.2.5	130.195.225.241	154	Echo
Oct 25, 2024 20:06:11.980443001 CEST	192.168.2.5	130.195.64.160	153	Echo
Oct 25, 2024 20:06:11.980519056 CEST	192.168.2.5	130.195.38.33	152	Echo
Oct 25, 2024 20:06:11.980650902 CEST	192.168.2.5	130.195.161.57	151	Echo
Oct 25, 2024 20:06:11.980732918 CEST	192.168.2.5	130.195.232.9	150	Echo
Oct 25, 2024 20:06:11.980840921 CEST	192.168.2.5	130.195.23.119	14f	Echo
Oct 25, 2024 20:06:11.980904102 CEST	192.168.2.5	130.195.107.152	14e	Echo
Oct 25, 2024 20:06:11.980978012 CEST	192.168.2.5	130.195.71.158	14d	Echo
Oct 25, 2024 20:06:11.981050014 CEST	192.168.2.5	130.195.215.113	14c	Echo
Oct 25, 2024 20:06:11.981120110 CEST	192.168.2.5	130.195.54.215	14b	Echo
Oct 25, 2024 20:06:11.981199980 CEST	192.168.2.5	130.195.63.112	14a	Echo
Oct 25, 2024 20:06:11.981273890 CEST	192.168.2.5	130.195.15.15	149	Echo
Oct 25, 2024 20:06:11.981340885 CEST	192.168.2.5	130.195.57.116	148	Echo
Oct 25, 2024 20:06:11.981411934 CEST	192.168.2.5	130.195.162.255	147	Echo
Oct 25, 2024 20:06:11.981492996 CEST	192.168.2.5	130.195.108.115	146	Echo
Oct 25, 2024 20:06:11.981563091 CEST	192.168.2.5	130.195.49.46	145	Echo
Oct 25, 2024 20:06:11.981636047 CEST	192.168.2.5	130.195.171.91	144	Echo
Oct 25, 2024 20:06:11.981713057 CEST	192.168.2.5	130.195.222.149	143	Echo
Oct 25, 2024 20:06:11.981786966 CEST	192.168.2.5	130.195.180.15	142	Echo
Oct 25, 2024 20:06:11.981854916 CEST	192.168.2.5	130.195.74.142	141	Echo
Oct 25, 2024 20:06:11.981929064 CEST	192.168.2.5	130.195.94.59	140	Echo
Oct 25, 2024 20:06:11.982002020 CEST	192.168.2.5	130.195.172.230	13f	Echo
Oct 25, 2024 20:06:11.982079983 CEST	192.168.2.5	130.195.66.30	13e	Echo
Oct 25, 2024 20:06:11.982163906 CEST	192.168.2.5	130.195.249.247	13d	Echo
Oct 25, 2024 20:06:11.982234955 CEST	192.168.2.5	130.195.145.249	13c	Echo
Oct 25, 2024 20:06:11.999341965 CEST	192.168.2.5	130.195.199.202	13b	Echo
Oct 25, 2024 20:06:12.026972055 CEST	192.168.2.5	130.195.95.120	13a	Echo
Oct 25, 2024 20:06:12.042398930 CEST	192.168.2.5	130.195.84.180	139	Echo
Oct 25, 2024 20:06:12.059703112 CEST	192.168.2.5	130.195.83.58	138	Echo
Oct 25, 2024 20:06:12.076677084 CEST	192.168.2.5	130.195.238.4	137	Echo
Oct 25, 2024 20:06:12.090296984 CEST	192.168.2.5	130.195.113.233	136	Echo
Oct 25, 2024 20:06:12.107387066 CEST	192.168.2.5	130.195.18.71	135	Echo
Oct 25, 2024 20:06:12.127017021 CEST	192.168.2.5	130.195.37.172	134	Echo
Oct 25, 2024 20:06:12.167428970 CEST	192.168.2.5	130.195.167.244	133	Echo
Oct 25, 2024 20:06:12.201649904 CEST	192.168.2.5	130.195.118.144	132	Echo
Oct 25, 2024 20:06:12.214443922 CEST	192.168.2.5	130.195.230.118	131	Echo
Oct 25, 2024 20:06:12.231507063 CEST	192.168.2.5	130.195.2.50	130	Echo
Oct 25, 2024 20:06:12.246268034 CEST	192.168.2.5	130.195.224.54	12f	Echo
Oct 25, 2024 20:06:12.266918898 CEST	192.168.2.5	130.195.114.31	12e	Echo
Oct 25, 2024 20:06:12.278666019 CEST	192.168.2.5	130.195.72.189	12d	Echo
Oct 25, 2024 20:06:12.292838097 CEST	192.168.2.5	130.195.106.15	12c	Echo
Oct 25, 2024 20:06:12.308161020 CEST	192.168.2.5	130.195.50.134	12b	Echo
Oct 25, 2024 20:06:12.331357002 CEST	192.168.2.5	130.195.191.5	12a	Echo
Oct 25, 2024 20:06:12.361573935 CEST	192.168.2.5	130.195.56.228	129	Echo
Oct 25, 2024 20:06:12.386051893 CEST	192.168.2.5	130.195.180.24	128	Echo
Oct 25, 2024 20:06:12.416858912 CEST	192.168.2.5	130.195.117.230	127	Echo
Oct 25, 2024 20:06:12.433320999 CEST	192.168.2.5	130.195.32.182	126	Echo
Oct 25, 2024 20:06:12.451689959 CEST	192.168.2.5	130.195.199.235	125	Echo
Oct 25, 2024 20:06:12.471086025 CEST	192.168.2.5	130.195.200.162	124	Echo
Oct 25, 2024 20:06:12.471255064 CEST	192.168.2.5	130.195.2.217	123	Echo
Oct 25, 2024 20:06:12.478301048 CEST	192.168.2.5	130.195.216.78	122	Echo
Oct 25, 2024 20:06:12.478548050 CEST	192.168.2.5	130.195.154.5	121	Echo
Oct 25, 2024 20:06:12.478720903 CEST	192.168.2.5	130.195.162.2	120	Echo
Oct 25, 2024 20:06:12.478853941 CEST	192.168.2.5	130.195.21.151	11f	Echo
Oct 25, 2024 20:06:12.478924990 CEST	192.168.2.5	130.195.68.93	11e	Echo
Oct 25, 2024 20:06:12.478979111 CEST	192.168.2.5	130.195.54.190	11d	Echo
Oct 25, 2024 20:06:12.479103088 CEST	192.168.2.5	130.195.124.54	11c	Echo
Oct 25, 2024 20:06:12.479114056 CEST	192.168.2.5	130.195.131.198	11b	Echo
Oct 25, 2024 20:06:12.479257107 CEST	192.168.2.5	130.195.97.207	11a	Echo
Oct 25, 2024 20:06:12.479319096 CEST	192.168.2.5	130.195.182.74	119	Echo
Oct 25, 2024 20:06:12.479397058 CEST	192.168.2.5	130.195.169.238	118	Echo
Oct 25, 2024 20:06:12.479480028 CEST	192.168.2.5	130.195.179.111	117	Echo
Oct 25, 2024 20:06:12.479571104 CEST	192.168.2.5	130.195.188.246	116	Echo
Oct 25, 2024 20:06:12.479669094 CEST	192.168.2.5	130.195.143.126	115	Echo
Oct 25, 2024 20:06:12.479760885 CEST	192.168.2.5	130.195.50.89	114	Echo
Oct 25, 2024 20:06:12.479798079 CEST	192.168.2.5	130.195.128.222	113	Echo
Oct 25, 2024 20:06:12.479870081 CEST	192.168.2.5	130.195.21.141	112	Echo
Oct 25, 2024 20:06:12.479917049 CEST	192.168.2.5	130.195.52.250	111	Echo
Oct 25, 2024 20:06:12.479969978 CEST	192.168.2.5	130.195.193.53	110	Echo
Oct 25, 2024 20:06:12.480027914 CEST	192.168.2.5	130.195.83.5	10f	Echo
Oct 25, 2024 20:06:12.480098009 CEST	192.168.2.5	130.195.56.40	10e	Echo
Oct 25, 2024 20:06:12.480199099 CEST	192.168.2.5	130.195.181.105	10d	Echo
Oct 25, 2024 20:06:12.480242968 CEST	192.168.2.5	130.195.79.30	10c	Echo
Oct 25, 2024 20:06:12.480366945 CEST	192.168.2.5	130.195.80.236	10b	Echo
Oct 25, 2024 20:06:12.480405092 CEST	192.168.2.5	130.195.171.103	10a	Echo
Oct 25, 2024 20:06:12.480549097 CEST	192.168.2.5	130.195.45.62	108	Echo
Oct 25, 2024 20:06:12.480572939 CEST	192.168.2.5	130.195.167.245	109	Echo
Oct 25, 2024 20:06:12.480601072 CEST	192.168.2.5	130.195.53.179	107	Echo
Oct 25, 2024 20:06:12.480681896 CEST	192.168.2.5	130.195.62.201	106	Echo
Oct 25, 2024 20:06:12.480727911 CEST	192.168.2.5	130.195.42.159	105	Echo
Oct 25, 2024 20:06:12.495157003 CEST	192.168.2.5	130.195.88.57	104	Echo
Oct 25, 2024 20:06:12.510797024 CEST	192.168.2.5	130.195.18.194	103	Echo
Oct 25, 2024 20:06:12.526412010 CEST	192.168.2.5	130.195.242.60	102	Echo
Oct 25, 2024 20:06:12.542032003 CEST	192.168.2.5	130.195.150.206	101	Echo
Oct 25, 2024 20:06:12.557620049 CEST	192.168.2.5	130.195.180.8	100	Echo
Oct 25, 2024 20:06:12.573259115 CEST	192.168.2.5	130.195.27.65	ff	Echo
Oct 25, 2024 20:06:12.588851929 CEST	192.168.2.5	130.195.81.44	fe	Echo
Oct 25, 2024 20:06:12.604656935 CEST	192.168.2.5	130.195.24.181	fd	Echo
Oct 25, 2024 20:06:12.620193005 CEST	192.168.2.5	130.195.161.21	fc	Echo
Oct 25, 2024 20:06:12.635893106 CEST	192.168.2.5	130.195.12.252	fb	Echo
Oct 25, 2024 20:06:12.651695013 CEST	192.168.2.5	130.195.108.249	fa	Echo
Oct 25, 2024 20:06:12.667085886 CEST	192.168.2.5	130.195.239.125	f9	Echo
Oct 25, 2024 20:06:12.682920933 CEST	192.168.2.5	130.195.230.223	f8	Echo
Oct 25, 2024 20:06:12.698930025 CEST	192.168.2.5	130.195.198.16	f7	Echo
Oct 25, 2024 20:06:12.714099884 CEST	192.168.2.5	130.195.52.198	f6	Echo
Oct 25, 2024 20:06:12.756791115 CEST	192.168.2.5	130.195.70.118	f5	Echo
Oct 25, 2024 20:06:12.757416010 CEST	192.168.2.5	130.195.7.34	f4	Echo
Oct 25, 2024 20:06:12.776812077 CEST	192.168.2.5	130.195.78.120	f3	Echo
Oct 25, 2024 20:06:12.792128086 CEST	192.168.2.5	130.195.217.8	f2	Echo
Oct 25, 2024 20:06:12.808584929 CEST	192.168.2.5	130.195.214.1	f1	Echo
Oct 25, 2024 20:06:12.823896885 CEST	192.168.2.5	130.195.174.187	f0	Echo
Oct 25, 2024 20:06:12.832652092 CEST	130.195.217.8	192.168.2.5	8f2	Echo Reply
Oct 25, 2024 20:06:12.833029032 CEST	192.168.2.5	130.195.217.8	ef	Echo
Oct 25, 2024 20:06:12.839303970 CEST	192.168.2.5	130.195.79.79	ee	Echo
Oct 25, 2024 20:06:12.855212927 CEST	192.168.2.5	130.195.179.106	ed	Echo
Oct 25, 2024 20:06:12.870160103 CEST	192.168.2.5	130.195.121.72	ec	Echo
Oct 25, 2024 20:06:12.872637987 CEST	130.195.217.8	192.168.2.5	8ef	Echo Reply
Oct 25, 2024 20:06:12.964380980 CEST	192.168.2.5	130.195.136.42	eb	Echo
Oct 25, 2024 20:06:12.967192888 CEST	192.168.2.5	130.195.37.132	ea	Echo
Oct 25, 2024 20:06:12.967227936 CEST	192.168.2.5	130.195.208.245	e9	Echo
Oct 25, 2024 20:06:12.967327118 CEST	192.168.2.5	130.195.13.51	e8	Echo
Oct 25, 2024 20:06:12.967360020 CEST	192.168.2.5	130.195.91.197	e7	Echo
Oct 25, 2024 20:06:12.967443943 CEST	192.168.2.5	130.195.184.230	e6	Echo
Oct 25, 2024 20:06:12.967485905 CEST	192.168.2.5	130.195.58.163	e5	Echo
Oct 25, 2024 20:06:12.967533112 CEST	192.168.2.5	130.195.17.22	e4	Echo
Oct 25, 2024 20:06:12.967592001 CEST	192.168.2.5	130.195.90.24	e3	Echo
Oct 25, 2024 20:06:12.967638016 CEST	192.168.2.5	130.195.185.209	e2	Echo
Oct 25, 2024 20:06:12.967698097 CEST	192.168.2.5	130.195.164.185	e1	Echo
Oct 25, 2024 20:06:12.967740059 CEST	192.168.2.5	130.195.96.164	e0	Echo
Oct 25, 2024 20:06:12.967804909 CEST	192.168.2.5	130.195.132.14	df	Echo
Oct 25, 2024 20:06:12.967835903 CEST	192.168.2.5	130.195.235.197	de	Echo
Oct 25, 2024 20:06:12.967910051 CEST	192.168.2.5	130.195.227.191	dd	Echo
Oct 25, 2024 20:06:12.967941999 CEST	192.168.2.5	130.195.24.155	dc	Echo
Oct 25, 2024 20:06:12.968012094 CEST	192.168.2.5	130.195.76.141	db	Echo
Oct 25, 2024 20:06:12.968053102 CEST	192.168.2.5	130.195.31.243	da	Echo
Oct 25, 2024 20:06:12.968111038 CEST	192.168.2.5	130.195.122.120	d9	Echo
Oct 25, 2024 20:06:12.968151093 CEST	192.168.2.5	130.195.89.120	d8	Echo
Oct 25, 2024 20:06:12.968204021 CEST	192.168.2.5	130.195.89.148	d7	Echo
Oct 25, 2024 20:06:12.968241930 CEST	192.168.2.5	130.195.219.89	d6	Echo
Oct 25, 2024 20:06:12.968313932 CEST	192.168.2.5	130.195.227.147	d5	Echo
Oct 25, 2024 20:06:12.968348980 CEST	192.168.2.5	130.195.19.165	d4	Echo
Oct 25, 2024 20:06:12.968420982 CEST	192.168.2.5	130.195.108.250	d3	Echo
Oct 25, 2024 20:06:12.968467951 CEST	192.168.2.5	130.195.209.0	d2	Echo
Oct 25, 2024 20:06:12.968528986 CEST	192.168.2.5	130.195.71.238	d1	Echo
Oct 25, 2024 20:06:12.968569994 CEST	192.168.2.5	130.195.149.4	d0	Echo
Oct 25, 2024 20:06:12.968625069 CEST	192.168.2.5	130.195.198.211	cf	Echo
Oct 25, 2024 20:06:12.968672991 CEST	192.168.2.5	130.195.78.199	ce	Echo
Oct 25, 2024 20:06:12.968732119 CEST	192.168.2.5	130.195.83.78	cd	Echo
Oct 25, 2024 20:06:12.968775988 CEST	192.168.2.5	130.195.96.189	cc	Echo
Oct 25, 2024 20:06:13.464437008 CEST	192.168.2.5	130.195.157.231	cb	Echo
Oct 25, 2024 20:06:13.467479944 CEST	192.168.2.5	130.195.43.59	ca	Echo
Oct 25, 2024 20:06:13.467546940 CEST	192.168.2.5	130.195.91.43	c9	Echo
Oct 25, 2024 20:06:13.467628956 CEST	192.168.2.5	130.195.53.55	c8	Echo
Oct 25, 2024 20:06:13.467715979 CEST	192.168.2.5	130.195.201.156	c7	Echo
Oct 25, 2024 20:06:13.467751980 CEST	192.168.2.5	130.195.101.203	c6	Echo
Oct 25, 2024 20:06:13.467835903 CEST	192.168.2.5	130.195.206.200	c5	Echo
Oct 25, 2024 20:06:13.467868090 CEST	192.168.2.5	130.195.4.187	c4	Echo
Oct 25, 2024 20:06:13.467972040 CEST	192.168.2.5	130.195.90.18	c3	Echo
Oct 25, 2024 20:06:13.468048096 CEST	192.168.2.5	130.195.26.146	c2	Echo
Oct 25, 2024 20:06:13.468173981 CEST	192.168.2.5	130.195.114.26	c1	Echo
Oct 25, 2024 20:06:13.468214989 CEST	192.168.2.5	130.195.221.114	c0	Echo
Oct 25, 2024 20:06:13.468274117 CEST	192.168.2.5	130.195.124.75	bf	Echo
Oct 25, 2024 20:06:13.468305111 CEST	192.168.2.5	130.195.193.45	be	Echo
Oct 25, 2024 20:06:13.468367100 CEST	192.168.2.5	130.195.135.193	bd	Echo
Oct 25, 2024 20:06:13.468441010 CEST	192.168.2.5	130.195.67.57	bc	Echo
Oct 25, 2024 20:06:13.468556881 CEST	192.168.2.5	130.195.90.206	bb	Echo
Oct 25, 2024 20:06:13.468602896 CEST	192.168.2.5	130.195.95.110	ba	Echo
Oct 25, 2024 20:06:13.468664885 CEST	192.168.2.5	130.195.12.75	b9	Echo
Oct 25, 2024 20:06:13.468799114 CEST	192.168.2.5	130.195.137.33	b8	Echo
Oct 25, 2024 20:06:13.468837023 CEST	192.168.2.5	130.195.56.5	b7	Echo
Oct 25, 2024 20:06:13.468934059 CEST	192.168.2.5	130.195.176.145	b6	Echo
Oct 25, 2024 20:06:13.468971014 CEST	192.168.2.5	130.195.158.89	b5	Echo
Oct 25, 2024 20:06:13.469080925 CEST	192.168.2.5	130.195.250.175	b4	Echo
Oct 25, 2024 20:06:13.469116926 CEST	192.168.2.5	130.195.151.16	b3	Echo
Oct 25, 2024 20:06:13.469238997 CEST	192.168.2.5	130.195.177.86	b2	Echo
Oct 25, 2024 20:06:13.469335079 CEST	192.168.2.5	130.195.93.173	b1	Echo
Oct 25, 2024 20:06:13.469422102 CEST	192.168.2.5	130.195.173.136	b0	Echo
Oct 25, 2024 20:06:13.965114117 CEST	192.168.2.5	130.195.203.16	af	Echo
Oct 25, 2024 20:06:13.967360973 CEST	192.168.2.5	130.195.199.202	ae	Echo
Oct 25, 2024 20:06:13.967432022 CEST	192.168.2.5	130.195.95.120	ad	Echo
Oct 25, 2024 20:06:13.967534065 CEST	192.168.2.5	130.195.84.180	ac	Echo
Oct 25, 2024 20:06:13.967592001 CEST	192.168.2.5	130.195.83.58	ab	Echo
Oct 25, 2024 20:06:13.967644930 CEST	192.168.2.5	130.195.238.4	aa	Echo
Oct 25, 2024 20:06:13.967706919 CEST	192.168.2.5	130.195.113.233	a9	Echo
Oct 25, 2024 20:06:13.967772961 CEST	192.168.2.5	130.195.18.71	a8	Echo
Oct 25, 2024 20:06:13.967916012 CEST	192.168.2.5	130.195.37.172	a7	Echo
Oct 25, 2024 20:06:13.967947006 CEST	192.168.2.5	130.195.167.244	a6	Echo
Oct 25, 2024 20:06:13.968028069 CEST	192.168.2.5	130.195.118.144	a5	Echo
Oct 25, 2024 20:06:13.968106985 CEST	192.168.2.5	130.195.230.118	a4	Echo
Oct 25, 2024 20:06:13.968187094 CEST	192.168.2.5	130.195.2.50	a3	Echo
Oct 25, 2024 20:06:13.968270063 CEST	192.168.2.5	130.195.224.54	a2	Echo
Oct 25, 2024 20:06:13.968343973 CEST	192.168.2.5	130.195.114.31	a1	Echo
Oct 25, 2024 20:06:13.968429089 CEST	192.168.2.5	130.195.72.189	a0	Echo
Oct 25, 2024 20:06:13.968548059 CEST	192.168.2.5	130.195.106.15	9f	Echo
Oct 25, 2024 20:06:13.968628883 CEST	192.168.2.5	130.195.50.134	9e	Echo
Oct 25, 2024 20:06:13.968725920 CEST	192.168.2.5	130.195.191.5	9d	Echo
Oct 25, 2024 20:06:13.968802929 CEST	192.168.2.5	130.195.56.228	9c	Echo
Oct 25, 2024 20:06:13.968879938 CEST	192.168.2.5	130.195.180.24	9b	Echo
Oct 25, 2024 20:06:13.968954086 CEST	192.168.2.5	130.195.117.230	9a	Echo
Oct 25, 2024 20:06:13.969038010 CEST	192.168.2.5	130.195.32.182	99	Echo
Oct 25, 2024 20:06:13.969109058 CEST	192.168.2.5	130.195.199.235	98	Echo
Oct 25, 2024 20:06:14.464535952 CEST	192.168.2.5	130.195.2.217	97	Echo
Oct 25, 2024 20:06:14.467396021 CEST	192.168.2.5	130.195.88.57	96	Echo
Oct 25, 2024 20:06:14.467420101 CEST	192.168.2.5	130.195.18.194	95	Echo
Oct 25, 2024 20:06:14.467572927 CEST	192.168.2.5	130.195.242.60	94	Echo
Oct 25, 2024 20:06:14.467664957 CEST	192.168.2.5	130.195.150.206	93	Echo
Oct 25, 2024 20:06:14.467788935 CEST	192.168.2.5	130.195.180.8	92	Echo
Oct 25, 2024 20:06:14.467855930 CEST	192.168.2.5	130.195.27.65	91	Echo
Oct 25, 2024 20:06:14.467952967 CEST	192.168.2.5	130.195.81.44	90	Echo
Oct 25, 2024 20:06:14.468040943 CEST	192.168.2.5	130.195.24.181	8f	Echo
Oct 25, 2024 20:06:14.468179941 CEST	192.168.2.5	130.195.161.21	8e	Echo
Oct 25, 2024 20:06:14.468308926 CEST	192.168.2.5	130.195.12.252	8d	Echo
Oct 25, 2024 20:06:14.468365908 CEST	192.168.2.5	130.195.108.249	8c	Echo
Oct 25, 2024 20:06:14.468429089 CEST	192.168.2.5	130.195.239.125	8b	Echo
Oct 25, 2024 20:06:14.468481064 CEST	192.168.2.5	130.195.230.223	8a	Echo
Oct 25, 2024 20:06:14.468568087 CEST	192.168.2.5	130.195.198.16	89	Echo
Oct 25, 2024 20:06:14.468677998 CEST	192.168.2.5	130.195.52.198	88	Echo
Oct 25, 2024 20:06:14.468813896 CEST	192.168.2.5	130.195.70.118	87	Echo
Oct 25, 2024 20:06:14.468893051 CEST	192.168.2.5	130.195.7.34	86	Echo
Oct 25, 2024 20:06:14.468976021 CEST	192.168.2.5	130.195.78.120	85	Echo
Oct 25, 2024 20:06:14.469010115 CEST	192.168.2.5	130.195.214.1	84	Echo
Oct 25, 2024 20:06:14.469115019 CEST	192.168.2.5	130.195.174.187	83	Echo
Oct 25, 2024 20:06:14.469209909 CEST	192.168.2.5	130.195.79.79	82	Echo
Oct 25, 2024 20:06:14.469243050 CEST	192.168.2.5	130.195.179.106	81	Echo
Oct 25, 2024 20:06:14.469376087 CEST	192.168.2.5	130.195.121.72	80	Echo

Target ID:	0
Start time:	14:05:05
Start date:	25/10/2024
Path:	C:\Users\user\Desktop\IXi8q1gF78.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\Desktop\IXi8q1gF78.exe"
Imagebase:	0x400000
File size:	209'610 bytes
MD5 hash:	4A877B33DA7992EE741897EB26CE07F1
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Yara matches:	Rule: Linux_Trojan_Rbot_96625c8c, Description: unknown, Source: 00000000.00000002.2819002500.0000000000520000.00000040.00001000.00020000.00000000.sdmp, Author: unknown Rule: Linux_Trojan_Rbot_96625c8c, Description: unknown, Source: 00000000.00000003.2077790126.0000000000500000.00000040.00001000.00020000.00000000.sdmp, Author: unknown
Reputation:	low
Has exited:	true

Show Windows behavior

Execution Graph

Execution Coverage:	5.2%
Dynamic/Decrypted Code Coverage:	99.7%
Signature Coverage:	15.3%
Total number of Nodes:	1440
Total number of Limit Nodes:	25

Executed Functions

Function 00527A10 Relevance: 57.9, APIs: 31, Strings: 2, Instructions: 197
threadsynchronizationsleepCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

Part of subcall function 00527D20: IsBadReadPtr.KERNEL32(?,00000400), ref: 00527D40

SetErrorMode.KERNEL32(00008003), ref: 00527A1A

Part of subcall function 00527FC0: GetModuleFileNameA.KERNEL32(00000000,C:\Users\user\Desktop\IXi8q1gF78.exe,00000258,?,?,?,00527A24,00008003), ref: 00527FCF
Part of subcall function 00527FC0: LoadLibraryA.KERNEL32(icmp.dll,00000000,C:\Users\user\Desktop\IXi8q1gF78.exe,00000258,?,?,?,00527A24,00008003), ref: 00527FE3
Part of subcall function 00527FC0: GetProcAddress.KERNEL32(00000000,IcmpCreateFile), ref: 00527FF4
Part of subcall function 00527FC0: GetProcAddress.KERNEL32(00000000,IcmpSendEcho), ref: 00528008
Part of subcall function 00527FC0: GetProcAddress.KERNEL32(00000000,IcmpParseReplies), ref: 0052801C
Part of subcall function 00527FC0: GetProcAddress.KERNEL32(00000000,IcmpCloseHandle), ref: 00528030
Part of subcall function 00527FC0: InitializeCriticalSection.KERNEL32(0053AFD6,icmp.dll,00000000,C:\Users\user\Desktop\IXi8q1gF78.exe,00000258,?,?,?,00527A24,00008003), ref: 0052804D
Part of subcall function 00527FC0: InitializeCriticalSection.KERNEL32(0053AFBE,0053AFD6,icmp.dll,00000000,C:\Users\user\Desktop\IXi8q1gF78.exe,00000258,?,?,?,00527A24,00008003), ref: 00528057

Part of subcall function 00527E30: GetModuleFileNameA.KERNEL32(00000000,?,0000012C,?,0000012C,00000000,?,00000064,00000000,?,?,?,?,00527A29,00008003), ref: 00527E6D

InitializeCriticalSection.KERNEL32(0053B442,00008003), ref: 00527A2E
InitializeCriticalSection.KERNEL32(0053B45A,0053B442,00008003), ref: 00527A38
InitializeCriticalSection.KERNEL32(0053B472,0053B45A,0053B442,00008003), ref: 00527A42
InitializeCriticalSection.KERNEL32(0053B48A,0053B472,0053B45A,0053B442,00008003), ref: 00527A4C
InitializeCriticalSection.KERNEL32(0053B4A2,0053B48A,0053B472,0053B45A,0053B442,00008003), ref: 00527A56
WSAStartup.WS2_32(00000202,0053BA46), ref: 00527A65
GetVersionExA.KERNEL32(0053BCB0,0053B4A2,0053B48A,0053B472,0053B45A,0053B442,00008003), ref: 00527A81

Part of subcall function 005210C0: GetCommandLineW.KERNEL32(?,?,?,?,00527A8B,0053BCB0,0053B4A2,0053B48A,0053B472,0053B45A,0053B442,00008003), ref: 005210CC
Part of subcall function 005210C0: CommandLineToArgvW.SHELL32(00000000,0053BD78,?,?,?,?,00527A8B,0053BCB0,0053B4A2,0053B48A,0053B472,0053B45A,0053B442,00008003), ref: 005210D9

CreateEventA.KERNEL32(00000000,00000000,00000000,00000000,0053BCB0,0053B4A2,0053B48A,0053B472,0053B45A,0053B442,00008003), ref: 00527A98
ExitProcess.KERNEL32(00000000,0053B4A2,0053B48A,0053B472,0053B45A,0053B442,00008003), ref: 00527B60
CreateMutexA.KERNEL32(00000000,00000001,jhdheruhfrthkgjhtjkghjk5trh,-embedding,0053BBE0), ref: 00527B95
GetLastError.KERNEL32(00000000,00000001,jhdheruhfrthkgjhtjkghjk5trh,-embedding,0053BBE0), ref: 00527B9F
CloseHandle.KERNEL32(00000000,00000001,jhdheruhfrthkgjhtjkghjk5trh,-embedding,0053BBE0), ref: 00527BAE
ExitProcess.KERNEL32(00000000,00000000,00000001,jhdheruhfrthkgjhtjkghjk5trh,-embedding,0053BBE0), ref: 00527BB5
CoTaskMemAlloc.OLE32(0000000C,00000000,00000001,jhdheruhfrthkgjhtjkghjk5trh,-embedding,0053BBE0), ref: 00527BBC
CreateEventA.KERNEL32(00000000,00000000,00000000,00000000,0000000C,00000000,00000001,jhdheruhfrthkgjhtjkghjk5trh,-embedding,0053BBE0), ref: 00527BCE
CreateThread.KERNEL32(00000000,00000000,005231F0,00000000,00000001,?), ref: 00527BEB
CreateThread.KERNEL32(00000000,00000000,00522040,00000000,00000001,?), ref: 00527C04
CloseHandle.KERNEL32(00000000,00000000,00000000,00522040,00000000,00000001,?,00000000,00000000,00000000,00000000,0000000C,00000000,00000001,jhdheruhfrthkgjhtjkghjk5trh,-embedding), ref: 00527C0A
CreateThread.KERNEL32(00000000,00000000,00527C90,?,00000001,?), ref: 00527C21
CloseHandle.KERNEL32(00000000,00000000,00000000,00527C90,?,00000001,?,00000000,00000000,00000000,00522040,00000000,00000001,?,00000000,00000000), ref: 00527C27
CreateThread.KERNEL32(00000000,00000000,00522750,00000000,00000004,?), ref: 00527C41
WaitForSingleObject.KERNEL32(000000FF,00000000,00000000,00522750,00000000,00000004,?,00000000,00000000,00000000,00527C90,?,00000001,?,00000000,00000000), ref: 00527C51
Sleep.KERNEL32(000003E8,00000000,00000001,000000FF,00000000,00000000,00522750,00000000,00000004,?,00000000,00000000,00000000,00527C90,?,00000001), ref: 00527C6D
ExitProcess.KERNEL32(00000000,000000FF,00000000,00000000,00522750,00000000,00000004,?,00000000,00000000,00000000,00527C90,?,00000001,?,00000000), ref: 00527C7D
Sleep.KERNEL32(000000C8,?,00000000,00000004), ref: 00527C9E
CoTaskMemFree.OLE32(00000000,?,?,?,000000C8,?,00000000,00000004), ref: 00527CC1
WaitForSingleObject.KERNEL32(00000000,0036EE80,00000000,?,?,?,000000C8,?,00000000,00000004), ref: 00527CCE
ResumeThread.KERNEL32(00000000,00000000,0036EE80,00000000,0036EE80,00000000,?,?,?,000000C8,?,00000000,00000004), ref: 00527CDC
SuspendThread.KERNEL32(00000000,00000000,00000000,0036EE80,00000000,0036EE80,00000000,?,?,?,000000C8,?,00000000,00000004), ref: 00527CE4

Part of subcall function 005213D0: GetLastError.KERNEL32 ref: 0052140C

Strings

-embedding, xrefs: 00527B78
jhdheruhfrthkgjhtjkghjk5trh, xrefs: 00527B8C

Memory Dump Source

Source File: 00000000.00000002.2819002500.0000000000520000.00000040.00001000.00020000.00000000.sdmp, Offset: 00520000, based on PE: true

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_520000_IXi8q1gF78.jbxd

Yara matches

Similarity

API ID: CreateCriticalInitializeSection$Thread$AddressProc$CloseErrorExitHandleProcess$CommandEventFileLastLineModuleNameObjectSingleSleepTaskWait$AllocArgvFreeLibraryLoadModeMutexReadResumeStartupSuspendVersion
String ID: -embedding$jhdheruhfrthkgjhtjkghjk5trh
API String ID: 920258727-2388181652
Opcode ID: 58642c73ead53be2c19e0dd73865ebbb9b0a20a9ff0e022e0910f334765384e3
Instruction ID: cb46b89abfcdd79298e26872a3d9cd0c3cb97aaf675d34911c6d4595184316a0
Opcode Fuzzy Hash: 58642c73ead53be2c19e0dd73865ebbb9b0a20a9ff0e022e0910f334765384e3
Instruction Fuzzy Hash: 0761B43468973AF6EB20FBE0BC4BF6E3E50BFABB50F200505B200251D2DFB11545966A

Function 0052F6B0 Relevance: 38.7, APIs: 21, Strings: 1, Instructions: 187
networkCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

inet_addr.WS2_32(?), ref: 0052F6C6
socket.WS2_32(00000002,00000001,00000006), ref: 0052F6D3
htons.WS2_32(0000008B), ref: 0052F6F2
ioctlsocket.WS2_32(?,8004667E,00000001), ref: 0052F71A
setsockopt.WS2_32(?,0000FFFF,00000080,00000001,00000004), ref: 0052F74A
connect.WS2_32(?,?,00000010), ref: 0052F75B
WSAGetLastError.WS2_32 ref: 0052F769
select.WS2_32(00000000,00000000,00000001,00000000,00000006), ref: 0052F7B7
send.WS2_32(?,0053A970,0000004C,00000000), ref: 0052F7DC
select.WS2_32(00000000,00000001,00000000,00000000,00000006), ref: 0052F829
recv.WS2_32(?,?,00000400,00000000), ref: 0052F84B
closesocket.WS2_32(?), ref: 0052F890
socket.WS2_32(00000002,00000001,00000006), ref: 0052F89B
htons.WS2_32(000001BD), ref: 0052F8B4
ioctlsocket.WS2_32(?,8004667E,00000001), ref: 0052F8DC
setsockopt.WS2_32(?,0000FFFF,00000080,00000001,00000004), ref: 0052F90C
connect.WS2_32(?,?,00000010), ref: 0052F91D
WSAGetLastError.WS2_32(?,?,00000010,?,0000FFFF,00000080,00000001,00000004,?,8004667E,00000001,000001BD,00000002,00000001,00000006), ref: 0052F92B
select.WS2_32(00000000,00000000,00000001,00000000,00000006), ref: 0052F975

Strings

\srvsvc, xrefs: 0052F6B9

Memory Dump Source

Source File: 00000000.00000002.2819002500.0000000000520000.00000040.00001000.00020000.00000000.sdmp, Offset: 00520000, based on PE: true

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_520000_IXi8q1gF78.jbxd

Yara matches

Similarity

API ID: select$ErrorLastconnecthtonsioctlsocketsetsockoptsocket$closesocketinet_addrrecvsend
String ID: \srvsvc
API String ID: 3001725260-3263190950
Opcode ID: 8f56273903123ac52c8a69eee5d7e95abbad0926a307d68e6206866f4373b206
Instruction ID: 60d6e75874926dd0642ef068f11d61e5871f033d2f67d3f6c411e1804eaf5a3e
Opcode Fuzzy Hash: 8f56273903123ac52c8a69eee5d7e95abbad0926a307d68e6206866f4373b206
Instruction Fuzzy Hash: 107171B1A00129AADF30AB60FC45BEDBA74BF06318F5042B5F718A50D1DBB15E889F59

Function 00522100 Relevance: 33.3, APIs: 16, Strings: 3, Instructions: 90
filesleepmemoryCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

CoTaskMemAlloc.OLE32(0000026A), ref: 0052210E
wsprintfA.USER32 ref: 00522130
FindFirstFileA.KERNEL32(0000013E,00000000,0000026A), ref: 00522140
wsprintfA.USER32 ref: 00522169
Sleep.KERNEL32(00000064,?,?,0000013E,00000000,0000026A), ref: 00522184
FindNextFileA.KERNEL32(00000000,00000000,0000013E,00000000,0000026A), ref: 00522208
FindClose.KERNEL32(00000000,00000000,00000000,0000013E,00000000,0000026A), ref: 00522216
CoTaskMemFree.OLE32(00000000,00000000,00000000,00000000,0000013E,00000000,0000026A), ref: 0052221C

Strings

*.*, xrefs: 0052211C
%s\%s, xrefs: 00522124, 0052215D
.htm, xrefs: 005221D0, 005221D3

Memory Dump Source

Source File: 00000000.00000002.2819002500.0000000000520000.00000040.00001000.00020000.00000000.sdmp, Offset: 00520000, based on PE: true

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_520000_IXi8q1gF78.jbxd

Yara matches

Similarity

API ID: Find$FileTaskwsprintf$AllocCloseFirstFreeNextSleep
String ID: %s\%s$*.*$.htm
API String ID: 2299822837-2292242013
Opcode ID: c42a45a86f5a79bcd80633caf5a2fe1d708a35ed5fab958c091bd0448f4b5597
Instruction ID: 56f6698e45d76701ebbb8df4bc82dd4d8b00d1230a83b2a647ae7fe94d659a7f
Opcode Fuzzy Hash: c42a45a86f5a79bcd80633caf5a2fe1d708a35ed5fab958c091bd0448f4b5597
Instruction Fuzzy Hash: 7131D479801726FADB20BBF0AC4AFEA7FACBF56310F500A14F555A10D2DA71A700CB61

Function 00527FC0 Relevance: 24.5, APIs: 8, Strings: 6, Instructions: 46
libraryloaderCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

GetModuleFileNameA.KERNEL32(00000000,C:\Users\user\Desktop\IXi8q1gF78.exe,00000258,?,?,?,00527A24,00008003), ref: 00527FCF
LoadLibraryA.KERNEL32(icmp.dll,00000000,C:\Users\user\Desktop\IXi8q1gF78.exe,00000258,?,?,?,00527A24,00008003), ref: 00527FE3
GetProcAddress.KERNEL32(00000000,IcmpCreateFile), ref: 00527FF4
GetProcAddress.KERNEL32(00000000,IcmpSendEcho), ref: 00528008
GetProcAddress.KERNEL32(00000000,IcmpParseReplies), ref: 0052801C
GetProcAddress.KERNEL32(00000000,IcmpCloseHandle), ref: 00528030
InitializeCriticalSection.KERNEL32(0053AFD6,icmp.dll,00000000,C:\Users\user\Desktop\IXi8q1gF78.exe,00000258,?,?,?,00527A24,00008003), ref: 0052804D
InitializeCriticalSection.KERNEL32(0053AFBE,0053AFD6,icmp.dll,00000000,C:\Users\user\Desktop\IXi8q1gF78.exe,00000258,?,?,?,00527A24,00008003), ref: 00528057

Strings

IcmpCreateFile, xrefs: 00527FEE
icmp.dll, xrefs: 00527FDE
IcmpSendEcho, xrefs: 00528002
IcmpCloseHandle, xrefs: 0052802A
IcmpParseReplies, xrefs: 00528016
C:\Users\user\Desktop\IXi8q1gF78.exe, xrefs: 00527FC8

Memory Dump Source

Source File: 00000000.00000002.2819002500.0000000000520000.00000040.00001000.00020000.00000000.sdmp, Offset: 00520000, based on PE: true

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_520000_IXi8q1gF78.jbxd

Yara matches

Similarity

API ID: AddressProc$CriticalInitializeSection$FileLibraryLoadModuleName
String ID: C:\Users\user\Desktop\IXi8q1gF78.exe$IcmpCloseHandle$IcmpCreateFile$IcmpParseReplies$IcmpSendEcho$icmp.dll
API String ID: 2957778358-113467792
Opcode ID: bea71dedd0c842d0780e53080665b871a592949596300777ddf56d6e87294580
Instruction ID: b931ac97601b8d046787f79e8de463571ff34f7ab14714498c98152eb567baf3
Opcode Fuzzy Hash: bea71dedd0c842d0780e53080665b871a592949596300777ddf56d6e87294580
Instruction Fuzzy Hash: F3F0816068323265E651B7E17C0AF7E2E94BFA3F51F400C16B504A62C5DFB54C4E8BB5

Function 0052EF90 Relevance: 13.6, APIs: 9, Instructions: 114
networkCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

select.WS2_32(00000000,00000000,?,00000000,?), ref: 0052EFD5
send.WS2_32(?,?,?,00000000), ref: 0052EFF2
select.WS2_32(00000000,?,00000000,00000000,?), ref: 0052F029
recv.WS2_32(?,?,?,00000000), ref: 0052F04F
htonl.WS2_32(?), ref: 0052F06E
recv.WS2_32(?,?,-00000004,00000000), ref: 0052F0A3
SetLastError.KERNEL32(45724474,?,?,?,00000000,?,00000000,?,00000000,?,00000000,00000000,?,?,?,?), ref: 0052F0C4
WSAGetLastError.WS2_32(00000000,00000000,?,00000000,?,?,?,?,?), ref: 0052F0E5
SetLastError.KERNEL32(00000000,00000000,00000000,?,00000000,?,?,?,?,?), ref: 0052F0EB

Memory Dump Source

Source File: 00000000.00000002.2819002500.0000000000520000.00000040.00001000.00020000.00000000.sdmp, Offset: 00520000, based on PE: true

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_520000_IXi8q1gF78.jbxd

Yara matches

Similarity

API ID: ErrorLast$recvselect$htonlsend
String ID:
API String ID: 1510305636-0
Opcode ID: feeefbebaaf4dcf895ef92c05063cb3a3736d0a7760648d33a943a45916968d4
Instruction ID: f5af23632cd7a25912896156d76651ef73c6f75b040de0b175d466cbe324ed5f
Opcode Fuzzy Hash: feeefbebaaf4dcf895ef92c05063cb3a3736d0a7760648d33a943a45916968d4
Instruction Fuzzy Hash: 5841447190022AABDF109FA4ED49BFF7E74FF05318F204632F512A62D2D77159509BA1

Function 00522040 Relevance: 13.6, APIs: 9, Instructions: 50
stringthreadsleepCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

GetLogicalDriveStringsA.KERNEL32(0000012C,?), ref: 0052205E
GetDriveTypeA.KERNEL32(?), ref: 0052206C
CoTaskMemAlloc.OLE32(00000032,?), ref: 00522078
lstrcpyA.KERNEL32(?,?,00000032,?), ref: 0052208A
CreateThread.KERNEL32(00000000,00000000,00522100,?,00000001,?), ref: 005220B1
SetThreadPriority.KERNEL32(?,000000FE,00000000,00000000,00522100,?,00000001,?,?,?,00000032,?), ref: 005220C4
WaitForSingleObject.KERNEL32(?,000000FF,?,000000FE,00000000,00000000,00522100,?,00000001,?,?,?,00000032,?), ref: 005220D1
lstrlenA.KERNEL32(?,?), ref: 005220D7
Sleep.KERNEL32(0CDFE600,?,?), ref: 005220E9

Memory Dump Source

Source File: 00000000.00000002.2819002500.0000000000520000.00000040.00001000.00020000.00000000.sdmp, Offset: 00520000, based on PE: true

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_520000_IXi8q1gF78.jbxd

Yara matches

Similarity

API ID: DriveThread$AllocCreateLogicalObjectPrioritySingleSleepStringsTaskTypeWaitlstrcpylstrlen
String ID:
API String ID: 1053226204-0
Opcode ID: 08c511eda4a437c9e5e90e2ba2c2b32f08efef0b099c150d88530f4238e337c0
Instruction ID: e8bc7e1121377939a5ef613a48bf8c61138dc2d4bb62db271b27aa432741c938
Opcode Fuzzy Hash: 08c511eda4a437c9e5e90e2ba2c2b32f08efef0b099c150d88530f4238e337c0
Instruction Fuzzy Hash: 3A115234805239B9DB21EAA09C4AFEE7E78BF57710F600694F518711D2DF711A81CA51

Function 005233E0 Relevance: 4.5, APIs: 3, Instructions: 25encryptionCOMMON

Download Yara Rule

APIs

CryptAcquireContextA.ADVAPI32(?,00000000,00000000,00000001,F0000000), ref: 005233F8
CryptGenRandom.ADVAPI32(?,0001FFFE,?,?,00000000,00000000,00000001,F0000000), ref: 00523408
CryptReleaseContext.ADVAPI32(?,00000000,?,0001FFFE,?,?,00000000,00000000,00000001,F0000000), ref: 00523412

Memory Dump Source

Source File: 00000000.00000002.2819002500.0000000000520000.00000040.00001000.00020000.00000000.sdmp, Offset: 00520000, based on PE: true

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_520000_IXi8q1gF78.jbxd

Yara matches

Similarity

API ID: Crypt$Context$AcquireRandomRelease
String ID:
API String ID: 1815803762-0
Opcode ID: 1ff9c57afbed4dbe4e0e2c5dff1aa484de2a58849191bb7fb9c3f4b52e1cbb71
Instruction ID: 970858e89194f4fb676dce182510d57a10b0cfddbe0679c61c36b03241739b2b
Opcode Fuzzy Hash: 1ff9c57afbed4dbe4e0e2c5dff1aa484de2a58849191bb7fb9c3f4b52e1cbb71
Instruction Fuzzy Hash: 8FE0863264521AB6EE20B6D4AC47FDE7E2DAF42B58F2041217300740D19EA15A109299

Function 00530A80 Relevance: 3.1, APIs: 2, Instructions: 75COMMON

Download Yara Rule

APIs

htonl.WS2_32(00000072), ref: 00530AF1

Part of subcall function 0052EF90: select.WS2_32(00000000,00000000,?,00000000,?), ref: 0052EFD5
Part of subcall function 0052EF90: send.WS2_32(?,?,?,00000000), ref: 0052EFF2
Part of subcall function 0052EF90: select.WS2_32(00000000,?,00000000,00000000,?), ref: 0052F029
Part of subcall function 0052EF90: recv.WS2_32(?,?,?,00000000), ref: 0052F04F
Part of subcall function 0052EF90: htonl.WS2_32(?), ref: 0052F06E

htonl.WS2_32 ref: 00530B15

Memory Dump Source

Source File: 00000000.00000002.2819002500.0000000000520000.00000040.00001000.00020000.00000000.sdmp, Offset: 00520000, based on PE: true

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_520000_IXi8q1gF78.jbxd

Yara matches

Similarity

API ID: htonl$select$recvsend
String ID:
API String ID: 4003896710-0
Opcode ID: 887fea6d654dc0af77cf3160e81ea46f07c73fcd97d0772e4f87cb5d62154064
Instruction ID: f602a1944d009bfc9f3468ebb49fac1ed3376e7bd89ad818d6b13540c2b9e4c4
Opcode Fuzzy Hash: 887fea6d654dc0af77cf3160e81ea46f07c73fcd97d0772e4f87cb5d62154064
Instruction Fuzzy Hash: 3721D672900261ABDB209F699C55B4FBF65FF82324F188625F8686B2C1D775AD10C7A0

Function 005279D0 Relevance: 45.7, APIs: 24, Strings: 2, Instructions: 177
threadmemorysynchronizationCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

WSAStartup.WS2_32(00000202,0053BA46), ref: 00527A65
GetVersionExA.KERNEL32(0053BCB0,0053B4A2,0053B48A,0053B472,0053B45A,0053B442,00008003), ref: 00527A81
CreateEventA.KERNEL32(00000000,00000000,00000000,00000000,0053BCB0,0053B4A2,0053B48A,0053B472,0053B45A,0053B442,00008003), ref: 00527A98
ExitProcess.KERNEL32(00000000,0053B4A2,0053B48A,0053B472,0053B45A,0053B442,00008003), ref: 00527B60
CreateMutexA.KERNEL32(00000000,00000001,jhdheruhfrthkgjhtjkghjk5trh,-embedding,0053BBE0), ref: 00527B95
GetLastError.KERNEL32(00000000,00000001,jhdheruhfrthkgjhtjkghjk5trh,-embedding,0053BBE0), ref: 00527B9F
CloseHandle.KERNEL32(00000000,00000001,jhdheruhfrthkgjhtjkghjk5trh,-embedding,0053BBE0), ref: 00527BAE
ExitProcess.KERNEL32(00000000,00000000,00000001,jhdheruhfrthkgjhtjkghjk5trh,-embedding,0053BBE0), ref: 00527BB5
CoTaskMemAlloc.OLE32(0000000C,00000000,00000001,jhdheruhfrthkgjhtjkghjk5trh,-embedding,0053BBE0), ref: 00527BBC
CreateEventA.KERNEL32(00000000,00000000,00000000,00000000,0000000C,00000000,00000001,jhdheruhfrthkgjhtjkghjk5trh,-embedding,0053BBE0), ref: 00527BCE
CreateThread.KERNEL32(00000000,00000000,005231F0,00000000,00000001,?), ref: 00527BEB
CreateThread.KERNEL32(00000000,00000000,00522040,00000000,00000001,?), ref: 00527C04
CloseHandle.KERNEL32(00000000,00000000,00000000,00522040,00000000,00000001,?,00000000,00000000,00000000,00000000,0000000C,00000000,00000001,jhdheruhfrthkgjhtjkghjk5trh,-embedding), ref: 00527C0A
CreateThread.KERNEL32(00000000,00000000,00527C90,?,00000001,?), ref: 00527C21
CloseHandle.KERNEL32(00000000,00000000,00000000,00527C90,?,00000001,?,00000000,00000000,00000000,00522040,00000000,00000001,?,00000000,00000000), ref: 00527C27

Strings

-embedding, xrefs: 00527B78
jhdheruhfrthkgjhtjkghjk5trh, xrefs: 00527B8C

Memory Dump Source

Source File: 00000000.00000002.2819002500.0000000000520000.00000040.00001000.00020000.00000000.sdmp, Offset: 00520000, based on PE: true

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_520000_IXi8q1gF78.jbxd

Yara matches

Similarity

API ID: Create$CloseHandleThread$EventExitProcess$AllocErrorLastMutexStartupTaskVersion
String ID: -embedding$jhdheruhfrthkgjhtjkghjk5trh
API String ID: 2193678037-2388181652
Opcode ID: a70a6c92277db1458522372004b8992083ed0e92bc22c92b20a265a0da8a5bcb
Instruction ID: 56cb8b0df851dd7877a1ab5e754e8c948c99548d6fdb32e1d5ace855b04bbf2c
Opcode Fuzzy Hash: a70a6c92277db1458522372004b8992083ed0e92bc22c92b20a265a0da8a5bcb
Instruction Fuzzy Hash: 8051F334A8972AFAEB20EBE0AC4BFAD7F64BF96B10F100554F6047A1D2DFB055008755

Function 00527B65 Relevance: 42.1, APIs: 22, Strings: 2, Instructions: 129
threadsynchronizationsleepCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

Part of subcall function 00528060: GetModuleFileNameA.KERNEL32(00000000,?,0000012C,?,?,?,?,00527B73), ref: 0052807A
Part of subcall function 00528060: GetSystemDirectoryA.KERNEL32(?,00000258), ref: 0052809D
Part of subcall function 00528060: lstrcatA.KERNEL32(?,irdvxc.exe ,?,00000258,00000000,?,0000012C,?,?,?,?,00527B73), ref: 005280C1
Part of subcall function 00528060: CopyFileA.KERNEL32(?,?,00000000), ref: 005280D6
Part of subcall function 00528060: lstrcpyA.KERNEL32(?,?,?,irdvxc.exe ,?,00000258,00000000,?,0000012C,?,?,?,?,00527B73), ref: 005280E9
Part of subcall function 00528060: lstrcpyA.KERNEL32(?,?,?,?,?,irdvxc.exe ,?,00000258,00000000,?,0000012C,?,?,?,?,00527B73), ref: 005280FC
Part of subcall function 00528060: lstrcatA.KERNEL32(?,/installservice,?,?,?,?,?,irdvxc.exe ,?,00000258,00000000,?,0000012C), ref: 0052810D
Part of subcall function 00528060: lstrcatA.KERNEL32(?,/start,?,/installservice,?,?,?,?,?,irdvxc.exe ,?,00000258,00000000,?,0000012C), ref: 0052811E
Part of subcall function 00528060: Sleep.KERNEL32(000007D0,?,?,/start,?,/installservice,?,?,?,?,?,irdvxc.exe ,?,00000258,00000000,?), ref: 00528134
Part of subcall function 00528060: ExitProcess.KERNEL32(00000000,?,000007D0,?,?,/start,?,/installservice,?,?,?,?,?,irdvxc.exe ,?,00000258), ref: 00528147

Part of subcall function 00521000: lstrlenA.KERNEL32(?,?,?,?,?,00527B82,-embedding,0053BBE0), ref: 00521011

CreateMutexA.KERNEL32(00000000,00000001,jhdheruhfrthkgjhtjkghjk5trh,-embedding,0053BBE0), ref: 00527B95
GetLastError.KERNEL32(00000000,00000001,jhdheruhfrthkgjhtjkghjk5trh,-embedding,0053BBE0), ref: 00527B9F
CloseHandle.KERNEL32(00000000,00000001,jhdheruhfrthkgjhtjkghjk5trh,-embedding,0053BBE0), ref: 00527BAE
ExitProcess.KERNEL32(00000000,00000000,00000001,jhdheruhfrthkgjhtjkghjk5trh,-embedding,0053BBE0), ref: 00527BB5
CoTaskMemAlloc.OLE32(0000000C,00000000,00000001,jhdheruhfrthkgjhtjkghjk5trh,-embedding,0053BBE0), ref: 00527BBC
CreateEventA.KERNEL32(00000000,00000000,00000000,00000000,0000000C,00000000,00000001,jhdheruhfrthkgjhtjkghjk5trh,-embedding,0053BBE0), ref: 00527BCE
CreateThread.KERNEL32(00000000,00000000,005231F0,00000000,00000001,?), ref: 00527BEB
CreateThread.KERNEL32(00000000,00000000,00522040,00000000,00000001,?), ref: 00527C04
CloseHandle.KERNEL32(00000000,00000000,00000000,00522040,00000000,00000001,?,00000000,00000000,00000000,00000000,0000000C,00000000,00000001,jhdheruhfrthkgjhtjkghjk5trh,-embedding), ref: 00527C0A
CreateThread.KERNEL32(00000000,00000000,00527C90,?,00000001,?), ref: 00527C21
CloseHandle.KERNEL32(00000000,00000000,00000000,00527C90,?,00000001,?,00000000,00000000,00000000,00522040,00000000,00000001,?,00000000,00000000), ref: 00527C27
CreateThread.KERNEL32(00000000,00000000,00522750,00000000,00000004,?), ref: 00527C41
WaitForSingleObject.KERNEL32(000000FF,00000000,00000000,00522750,00000000,00000004,?,00000000,00000000,00000000,00527C90,?,00000001,?,00000000,00000000), ref: 00527C51
Sleep.KERNEL32(000003E8,00000000,00000001,000000FF,00000000,00000000,00522750,00000000,00000004,?,00000000,00000000,00000000,00527C90,?,00000001), ref: 00527C6D
ExitProcess.KERNEL32(00000000,000000FF,00000000,00000000,00522750,00000000,00000004,?,00000000,00000000,00000000,00527C90,?,00000001,?,00000000), ref: 00527C7D
Sleep.KERNEL32(000000C8,?,00000000,00000004), ref: 00527C9E
CoTaskMemFree.OLE32(00000000,?,?,?,000000C8,?,00000000,00000004), ref: 00527CC1
WaitForSingleObject.KERNEL32(00000000,0036EE80,00000000,?,?,?,000000C8,?,00000000,00000004), ref: 00527CCE

Part of subcall function 00527DA0: CoInitialize.OLE32(00000000), ref: 00527DAE
Part of subcall function 00527DA0: CoRegisterClassObject.OLE32(0053B8EA,00000004,00000001,0053BCAC,00539FB8,?,?,?,?,00527B8C,-embedding,0053BBE0), ref: 00527DD6
Part of subcall function 00527DA0: GetModuleFileNameA.KERNEL32(00000000,?,0000012C,0053B8EA,00000004,00000001,0053BCAC,00539FB8,?,?,?,?,00527B8C,-embedding,0053BBE0), ref: 00527DE9
Part of subcall function 00527DA0: CreateProcessA.KERNEL32(00000000,?,00000000,00000000,00000000,00000000,00000000,00000000,00000044,0053BBE0), ref: 00527E19
Part of subcall function 00527DA0: ExitProcess.KERNEL32(00000000,00000000,?,00000000,00000000,00000000,00000000,00000000,00000000,00000044,0053BBE0), ref: 00527E20

ResumeThread.KERNEL32(00000000,00000000,0036EE80,00000000,0036EE80,00000000,?,?,?,000000C8,?,00000000,00000004), ref: 00527CDC
SuspendThread.KERNEL32(00000000,00000000,00000000,0036EE80,00000000,0036EE80,00000000,?,?,?,000000C8,?,00000000,00000004), ref: 00527CE4
ResumeThread.KERNEL32(00000000,00000000,0036EE80,00000000,?,?,?,000000C8,?,00000000,00000004), ref: 00527CFB
SuspendThread.KERNEL32(00000000,00000000,00000000,0036EE80,00000000,?,?,?,000000C8,?,00000000,00000004), ref: 00527D03

Strings

-embedding, xrefs: 00527B78
jhdheruhfrthkgjhtjkghjk5trh, xrefs: 00527B8C

Memory Dump Source

Source File: 00000000.00000002.2819002500.0000000000520000.00000040.00001000.00020000.00000000.sdmp, Offset: 00520000, based on PE: true

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_520000_IXi8q1gF78.jbxd

Yara matches

Similarity

API ID: Thread$Create$Process$Exit$CloseFileHandleObjectSleeplstrcat$ModuleNameResumeSingleSuspendTaskWaitlstrcpy$AllocClassCopyDirectoryErrorEventFreeInitializeLastMutexRegisterSystemlstrlen
String ID: -embedding$jhdheruhfrthkgjhtjkghjk5trh
API String ID: 3284096771-2388181652
Opcode ID: 209cd18a52e3fe847fe479642a7b352dab369413ee14e7c67e48432b4da8d82d
Instruction ID: 36c3bbb15c64bd7973f3c546a24eccc7f428c5049e4eaf50010408ba78191437
Opcode Fuzzy Hash: 209cd18a52e3fe847fe479642a7b352dab369413ee14e7c67e48432b4da8d82d
Instruction Fuzzy Hash: 3841C134A8572AFAEF20BBE0AC0BFAE7E64BF96B00F200514B614790D1DFB169408755

Function 00526F40 Relevance: 35.5, APIs: 11, Strings: 9, Instructions: 484
stringCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

EnterCriticalSection.KERNEL32(0053AFBE), ref: 00526F58
inet_ntoa.WS2_32(?), ref: 00526F69
lstrcpyA.KERNEL32(00523812,00000000), ref: 00526F73
LeaveCriticalSection.KERNEL32(0053AFBE,00523812,00000000), ref: 00526F7D
InterlockedIncrement.KERNEL32(0053BDD0), ref: 00526F87

Part of subcall function 0052F9D0: GetCurrentProcessId.KERNEL32(00000000,?,?,?,?,\srvsvc), ref: 0052FA16
Part of subcall function 0052F9D0: VirtualAlloc.KERNEL32(00000000,00002000,00003000,00000004,00000000,?,?,?,?,\srvsvc), ref: 0052FA2F
Part of subcall function 0052F9D0: CharUpperA.USER32(?,?,?,?,?,00000000,00000060,?,0053A9E8,?,?,00000000,00000060,00000000,00002000,00003000), ref: 0052FAAB
Part of subcall function 0052F9D0: lstrlenA.KERNEL32(?,?,?,?,?,?,00000000,00000060,?,0053A9E8,?,?,00000000,00000060,00000000,00002000), ref: 0052FAB3
Part of subcall function 0052F9D0: closesocket.WS2_32(00000000), ref: 0052FB07
Part of subcall function 0052F9D0: VirtualFree.KERNEL32(00000000,00000000,00008000,00000000,00000000,00002000,00003000,00000004,00000000,?,?,?,?,\srvsvc), ref: 0052FB1C
Part of subcall function 0052F9D0: GetLastError.KERNEL32(00000000,00000000,00008000,00000000,00000000,00002000,00003000,00000004,00000000,?,?,?,?,\srvsvc), ref: 0052FB25

InterlockedDecrement.KERNEL32(0053BDD0), ref: 005276F7

Strings

\epmapper, xrefs: 005273E4
\samr, xrefs: 00527588
\ntsvcs, xrefs: 005271E1, 00527267
\srvsvc, xrefs: 00526F8C, 00527030
Admin, xrefs: 00526F94, 00526F99, 005271E9, 005271EE, 0052736C, 00527371, 00527510, 00527515
\browser, xrefs: 00526FC5, 0052721A
C:\Users\user\Desktop\IXi8q1gF78.exe, xrefs: 0052719F, 00527328, 005274CC, 00527670, 005276CB
\\*SMBSERVER\IPC$, xrefs: 00527005, 0052723C, 005273B9, 0052755D
Wind, xrefs: 00526FE6

Memory Dump Source

Source File: 00000000.00000002.2819002500.0000000000520000.00000040.00001000.00020000.00000000.sdmp, Offset: 00520000, based on PE: true

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_520000_IXi8q1gF78.jbxd

Yara matches

Similarity

API ID: CriticalInterlockedSectionVirtual$AllocCharCurrentDecrementEnterErrorFreeIncrementLastLeaveProcessUpperclosesocketinet_ntoalstrcpylstrlen
String ID: Admin$C:\Users\user\Desktop\IXi8q1gF78.exe$Wind$\\*SMBSERVER\IPC$$\browser$\epmapper$\ntsvcs$\samr$\srvsvc
API String ID: 3698622247-1337133552
Opcode ID: f659cee085d3377c4ff8ce76dfd2bd7261a53358fa9d4843c3925e07a1feaf89
Instruction ID: 1da594edfeca79c96dc7e48e1394592c850da4fe6b59935d3f2040fe4b9d5c89
Opcode Fuzzy Hash: f659cee085d3377c4ff8ce76dfd2bd7261a53358fa9d4843c3925e07a1feaf89
Instruction Fuzzy Hash: E612713094563DAADF30AB24FC4EB9DBF30BF56724F3046A1F229750E1C6716A849E09

Function 005235D0 Relevance: 33.2, APIs: 22, Instructions: 173
networkthreadCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

Part of subcall function 00523850: IcmpCreateFile.IPHLPAPI(?,?,?,?,0052360F,00000000,?,005279DD,00523832), ref: 00523869
Part of subcall function 00523850: lstrcpyA.KERNEL32(?,Babcdefghijklmnopqrstuvwabcdefghi), ref: 00523898
Part of subcall function 00523850: IcmpCloseHandle.IPHLPAPI(00000000), ref: 00523914

InterlockedIncrement.KERNEL32(0053BDD0), ref: 0052361C
socket.WS2_32(00000002,00000001,00000000), ref: 00523627
ioctlsocket.WS2_32(?,8004667E,00000001), ref: 0052364B
setsockopt.WS2_32(?,0000FFFF,00000080,00000001,00000004), ref: 0052366F
htons.WS2_32(0000008B), ref: 00523685
connect.WS2_32(?,00000002,00000010), ref: 00523697
WSAGetLastError.WS2_32(?,00000002,00000010,0000008B,?,0000FFFF,00000080,00000001,00000004,?,8004667E,00000001,0053BDD0,00000000,?,005279DD), ref: 005236A1
select.WS2_32(00000000,00000000,00000001,00000000,00000006), ref: 005236D6
InterlockedIncrement.KERNEL32(0053BDE0), ref: 005236E9
closesocket.WS2_32(?), ref: 005236FF
closesocket.WS2_32(?), ref: 00523714
socket.WS2_32(00000002,00000001,00000000), ref: 0052371F
ioctlsocket.WS2_32(?,8004667E,00000001), ref: 00523743
setsockopt.WS2_32(?,0000FFFF,00000080,00000001,00000004), ref: 00523767
htons.WS2_32(000001BD), ref: 0052377D
connect.WS2_32(?,00000002,00000010), ref: 0052378F
WSAGetLastError.WS2_32(?,00000002,00000010,000001BD,?,0000FFFF,00000080,00000001,00000004,?,8004667E,00000001,00000002,00000001,00000000,0053BDD0), ref: 00523799
select.WS2_32(00000000,00000000,00000001,00000000,00000006), ref: 005237CE
InterlockedIncrement.KERNEL32(0053BDE0), ref: 005237E1
closesocket.WS2_32(?), ref: 005237FF
InterlockedDecrement.KERNEL32(0053BDD0), ref: 00523817
ExitThread.KERNEL32(00000000), ref: 0052383E

Memory Dump Source

Source File: 00000000.00000002.2819002500.0000000000520000.00000040.00001000.00020000.00000000.sdmp, Offset: 00520000, based on PE: true

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_520000_IXi8q1gF78.jbxd

Yara matches

Similarity

API ID: Interlocked$Incrementclosesocket$ErrorIcmpLastconnecthtonsioctlsocketselectsetsockoptsocket$CloseCreateDecrementExitFileHandleThreadlstrcpy
String ID:
API String ID: 636832760-0
Opcode ID: ea7de7b5f90a60df579f75f7c55b8f40d4b0f279d4bb26b69413d50cd3c5dd0c
Instruction ID: 450c66aa8dc75e8235cf2abd0f18f1b25907b29d570d603b695af0fda9abf1b1
Opcode Fuzzy Hash: ea7de7b5f90a60df579f75f7c55b8f40d4b0f279d4bb26b69413d50cd3c5dd0c
Instruction Fuzzy Hash: 34615FB095022EAAEF10ABD0EC4ABEDBFB4FF02718F100515F510BA1D1DBB95A448B55

Function 005235C8 Relevance: 19.6, APIs: 13, Instructions: 105
networkthreadCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

ExitThread.KERNEL32(00000000), ref: 005235CA

Part of subcall function 00523850: IcmpCreateFile.IPHLPAPI(?,?,?,?,0052360F,00000000,?,005279DD,00523832), ref: 00523869
Part of subcall function 00523850: lstrcpyA.KERNEL32(?,Babcdefghijklmnopqrstuvwabcdefghi), ref: 00523898
Part of subcall function 00523850: IcmpCloseHandle.IPHLPAPI(00000000), ref: 00523914

InterlockedIncrement.KERNEL32(0053BDD0), ref: 0052361C
socket.WS2_32(00000002,00000001,00000000), ref: 00523627
ioctlsocket.WS2_32(?,8004667E,00000001), ref: 0052364B
setsockopt.WS2_32(?,0000FFFF,00000080,00000001,00000004), ref: 0052366F
htons.WS2_32(0000008B), ref: 00523685
connect.WS2_32(?,00000002,00000010), ref: 00523697
WSAGetLastError.WS2_32(?,00000002,00000010,0000008B,?,0000FFFF,00000080,00000001,00000004,?,8004667E,00000001,0053BDD0,00000000,?,005279DD), ref: 005236A1
select.WS2_32(00000000,00000000,00000001,00000000,00000006), ref: 005236D6
InterlockedIncrement.KERNEL32(0053BDE0), ref: 005236E9
closesocket.WS2_32(?), ref: 005236FF
closesocket.WS2_32(?), ref: 00523714
socket.WS2_32(00000002,00000001,00000000), ref: 0052371F
ioctlsocket.WS2_32(?,8004667E,00000001), ref: 00523743
setsockopt.WS2_32(?,0000FFFF,00000080,00000001,00000004), ref: 00523767
htons.WS2_32(000001BD), ref: 0052377D
connect.WS2_32(?,00000002,00000010), ref: 0052378F
WSAGetLastError.WS2_32(?,00000002,00000010,000001BD,?,0000FFFF,00000080,00000001,00000004,?,8004667E,00000001,00000002,00000001,00000000,0053BDD0), ref: 00523799
select.WS2_32(00000000,00000000,00000001,00000000,00000006), ref: 005237CE
InterlockedIncrement.KERNEL32(0053BDE0), ref: 005237E1
closesocket.WS2_32(?), ref: 005237FF
InterlockedDecrement.KERNEL32(0053BDD0), ref: 00523817
ExitThread.KERNEL32(00000000), ref: 0052383E

Memory Dump Source

Source File: 00000000.00000002.2819002500.0000000000520000.00000040.00001000.00020000.00000000.sdmp, Offset: 00520000, based on PE: true

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_520000_IXi8q1gF78.jbxd

Yara matches

Similarity

API ID: Interlocked$Incrementclosesocket$ErrorExitIcmpLastThreadconnecthtonsioctlsocketselectsetsockoptsocket$CloseCreateDecrementFileHandlelstrcpy
String ID:
API String ID: 1601039856-0
Opcode ID: fd28f0c260e127ddaec14901a9b7fbd2001903f818e2530cd3f9567d96845f77
Instruction ID: 60b3c799d4701d0297b44ac863c82ec70be28d6d381ec9105593749f4e162b15
Opcode Fuzzy Hash: fd28f0c260e127ddaec14901a9b7fbd2001903f818e2530cd3f9567d96845f77
Instruction Fuzzy Hash: D84193B0941369AAEF20ABD0EC0ABEDBF74FF42718F100515F5107A2D1DBB55A448B95

Function 0052F9D0 Relevance: 17.6, APIs: 9, Strings: 1, Instructions: 120
memorystringCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

Part of subcall function 0052F6B0: inet_addr.WS2_32(?), ref: 0052F6C6
Part of subcall function 0052F6B0: socket.WS2_32(00000002,00000001,00000006), ref: 0052F6D3
Part of subcall function 0052F6B0: htons.WS2_32(0000008B), ref: 0052F6F2
Part of subcall function 0052F6B0: ioctlsocket.WS2_32(?,8004667E,00000001), ref: 0052F71A
Part of subcall function 0052F6B0: setsockopt.WS2_32(?,0000FFFF,00000080,00000001,00000004), ref: 0052F74A
Part of subcall function 0052F6B0: connect.WS2_32(?,?,00000010), ref: 0052F75B
Part of subcall function 0052F6B0: WSAGetLastError.WS2_32 ref: 0052F769
Part of subcall function 0052F6B0: select.WS2_32(00000000,00000000,00000001,00000000,00000006), ref: 0052F7B7
Part of subcall function 0052F6B0: send.WS2_32(?,0053A970,0000004C,00000000), ref: 0052F7DC
Part of subcall function 0052F6B0: closesocket.WS2_32(?), ref: 0052F890
Part of subcall function 0052F6B0: socket.WS2_32(00000002,00000001,00000006), ref: 0052F89B
Part of subcall function 0052F6B0: htons.WS2_32(000001BD), ref: 0052F8B4
Part of subcall function 0052F6B0: ioctlsocket.WS2_32(?,8004667E,00000001), ref: 0052F8DC
Part of subcall function 0052F6B0: setsockopt.WS2_32(?,0000FFFF,00000080,00000001,00000004), ref: 0052F90C

Part of subcall function 0053091B: InitializeCriticalSection.KERNEL32(0053C1A0,?,?,00000000), ref: 00530932
Part of subcall function 0053091B: VirtualAlloc.KERNEL32(00000000,000C6800,00003000,00000004,0053C1A0,?,?,00000000), ref: 00530950
Part of subcall function 0053091B: Sleep.KERNEL32(000007D0,?,?,00000000), ref: 0053096B
Part of subcall function 0053091B: EnterCriticalSection.KERNEL32(0053C1A0,?,?,00000000), ref: 00530975
Part of subcall function 0053091B: InterlockedIncrement.KERNEL32(0053C1B8), ref: 005309B8
Part of subcall function 0053091B: LeaveCriticalSection.KERNEL32(0053C1A0,0053C1B8,0053C1A0,?,?,00000000), ref: 005309C5

GetCurrentProcessId.KERNEL32(00000000,?,?,?,?,\srvsvc), ref: 0052FA16
VirtualAlloc.KERNEL32(00000000,00002000,00003000,00000004,00000000,?,?,?,?,\srvsvc), ref: 0052FA2F
CharUpperA.USER32(?,?,?,?,?,00000000,00000060,?,0053A9E8,?,?,00000000,00000060,00000000,00002000,00003000), ref: 0052FAAB
lstrlenA.KERNEL32(?,?,?,?,?,?,00000000,00000060,?,0053A9E8,?,?,00000000,00000060,00000000,00002000), ref: 0052FAB3

Part of subcall function 0052FB50: htonl.WS2_32(00000073), ref: 0052FC58
Part of subcall function 0052FB50: htonl.WS2_32 ref: 0052FC77
Part of subcall function 0052FB50: lstrcpyA.KERNEL32(?,?,?,?,?,?,?,000001F4,00000073,?,Windows 2000 2195,00000023,?), ref: 0052FCAF
Part of subcall function 0052FB50: lstrlenA.KERNEL32(?,?,?,?,?,?,?,?,000001F4,00000073,?,Windows 2000 2195,00000023,?), ref: 0052FCB5

GetLastError.KERNEL32(00000000,00002000,00003000,00000004,00000000,?,?,?,?,\srvsvc), ref: 0052FAEC
closesocket.WS2_32(00000000), ref: 0052FB07
VirtualFree.KERNEL32(00000000,00000000,00008000,00000000,00000000,00002000,00003000,00000004,00000000,?,?,?,?,\srvsvc), ref: 0052FB1C
GetLastError.KERNEL32(00000000,00000000,00008000,00000000,00000000,00002000,00003000,00000004,00000000,?,?,?,?,\srvsvc), ref: 0052FB25

Part of subcall function 00530A80: htonl.WS2_32(00000072), ref: 00530AF1
Part of subcall function 00530A80: htonl.WS2_32 ref: 00530B15

Part of subcall function 00530B60: lstrcpyA.KERNEL32(?,?,?,00000000,00000400,?,00000000,00000030,00000000,?,?,?,0052FAA8,?,?,?), ref: 00530B9C

closesocket.WS2_32(00000000), ref: 0052FB35

Strings

\srvsvc, xrefs: 0052F9D9

Memory Dump Source

Source File: 00000000.00000002.2819002500.0000000000520000.00000040.00001000.00020000.00000000.sdmp, Offset: 00520000, based on PE: true

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_520000_IXi8q1gF78.jbxd

Yara matches

Similarity

API ID: htonl$CriticalErrorLastSectionVirtualclosesocket$Allochtonsioctlsocketlstrcpylstrlensetsockoptsocket$CharCurrentEnterFreeIncrementInitializeInterlockedLeaveProcessSleepUpperconnectinet_addrselectsend
String ID: \srvsvc
API String ID: 1150074405-3263190950
Opcode ID: 0d61676949e9fc107033520e82e18717d45fa2f6efeef41dc80fe1d13c487375
Instruction ID: e0826f8d5bd09a870f0de3b9b62f9b802b32fd1e40deeb464035625324e8985d
Opcode Fuzzy Hash: 0d61676949e9fc107033520e82e18717d45fa2f6efeef41dc80fe1d13c487375
Instruction Fuzzy Hash: 4A41A030540219FAEF21AFA0FC56BAD7F74FF42710F248571B519AA0E2DB708A51DB60

Function 00523450 Relevance: 15.1, APIs: 10, Instructions: 86
sleepthreadCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

GetTickCount.KERNEL32 ref: 0052349E
InterlockedIncrement.KERNEL32(0053BDD4), ref: 005234F5
CreateThread.KERNEL32(00000000,00000500,005235D0,00000004,?,00002710), ref: 0052351A
GetLastError.KERNEL32(00000000,00000500,005235D0,00000004,?,00002710), ref: 00523523
ResumeThread.KERNEL32(?,00000000,00000500,005235D0,00000004,?,00002710), ref: 00523534
CloseHandle.KERNEL32(?,?,00000000,00000500,005235D0,00000004,?,00002710), ref: 0052353F
Sleep.KERNEL32(00000014,?,?,00000000,00000500,005235D0,00000004,?,00002710), ref: 00523546
Sleep.KERNEL32(00002710), ref: 005235A2

Memory Dump Source

Source File: 00000000.00000002.2819002500.0000000000520000.00000040.00001000.00020000.00000000.sdmp, Offset: 00520000, based on PE: true

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_520000_IXi8q1gF78.jbxd

Yara matches

Similarity

API ID: SleepThread$CloseCountCreateErrorHandleIncrementInterlockedLastResumeTick
String ID:
API String ID: 2577224563-0
Opcode ID: e84f9abf9a9cff49fe90627219c7709c8b5e8fcabe2a0f04358e868993f9e2fd
Instruction ID: 123e9b51e9e572a69643da1a4e90b4eebae23b5abbd548d81646ac4fde2257c0
Opcode Fuzzy Hash: e84f9abf9a9cff49fe90627219c7709c8b5e8fcabe2a0f04358e868993f9e2fd
Instruction Fuzzy Hash: E531D871605235DAFB209B84FC0AB697F71FFA2B05F00095AE649252D1C77D0648EF95

Function 00523850 Relevance: 12.3, APIs: 6, Strings: 1, Instructions: 60
stringfileCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

IcmpCreateFile.IPHLPAPI(?,?,?,?,0052360F,00000000,?,005279DD,00523832), ref: 00523869
lstrcpyA.KERNEL32(?,Babcdefghijklmnopqrstuvwabcdefghi), ref: 00523898
lstrlenA.KERNEL32(?,?,Babcdefghijklmnopqrstuvwabcdefghi), ref: 005238B3
IcmpSendEcho.IPHLPAPI(00000000,?,?,00000000,00000000,?,00000064,000007D0), ref: 005238D6
IcmpParseReplies.IPHLPAPI(?,00000064), ref: 005238E6
IcmpCloseHandle.IPHLPAPI(00000000), ref: 00523914

Strings

Babcdefghijklmnopqrstuvwabcdefghi, xrefs: 0052388C

Memory Dump Source

Source File: 00000000.00000002.2819002500.0000000000520000.00000040.00001000.00020000.00000000.sdmp, Offset: 00520000, based on PE: true

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_520000_IXi8q1gF78.jbxd

Yara matches

Similarity

API ID: Icmp$CloseCreateEchoFileHandleParseRepliesSendlstrcpylstrlen
String ID: Babcdefghijklmnopqrstuvwabcdefghi
API String ID: 2808312344-1868642686
Opcode ID: 5dbd5c11ac9bf690df053bdb9922a19a13bbad9f8ec0c1c2dcbc435e0f68c160
Instruction ID: 170af15fca5aa5254ab69f25d1564f882558097c77da41d78e7f35d0227c38d2
Opcode Fuzzy Hash: 5dbd5c11ac9bf690df053bdb9922a19a13bbad9f8ec0c1c2dcbc435e0f68c160
Instruction Fuzzy Hash: A2216D71904228DFEB209F60EC49F9ABB78FF52314F104595E20DA62D2D7B45AC8CF60

Function 0053091B Relevance: 9.1, APIs: 6, Instructions: 54
sleepmemoryCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

InitializeCriticalSection.KERNEL32(0053C1A0,?,?,00000000), ref: 00530932
VirtualAlloc.KERNEL32(00000000,000C6800,00003000,00000004,0053C1A0,?,?,00000000), ref: 00530950
Sleep.KERNEL32(000007D0,?,?,00000000), ref: 0053096B
EnterCriticalSection.KERNEL32(0053C1A0,?,?,00000000), ref: 00530975
InterlockedIncrement.KERNEL32(0053C1B8), ref: 005309B8
LeaveCriticalSection.KERNEL32(0053C1A0,0053C1B8,0053C1A0,?,?,00000000), ref: 005309C5

Memory Dump Source

Source File: 00000000.00000002.2819002500.0000000000520000.00000040.00001000.00020000.00000000.sdmp, Offset: 00520000, based on PE: true

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_520000_IXi8q1gF78.jbxd

Yara matches

Similarity

API ID: CriticalSection$AllocEnterIncrementInitializeInterlockedLeaveSleepVirtual
String ID:
API String ID: 688543581-0
Opcode ID: 504a4add2f5b365f657b914147415d75af6e7f5ab6c8486d92a6b37a4e825fc8
Instruction ID: 1b95845f2b04b6c56b1e533b4af53a2007b8af50978a348753c6a7d14cd1feab
Opcode Fuzzy Hash: 504a4add2f5b365f657b914147415d75af6e7f5ab6c8486d92a6b37a4e825fc8
Instruction Fuzzy Hash: D1014577A413259BF311ABA4AC96B6E3F50FBE5B64F201024F149733C3CAB42844D755

Function 00527E30 Relevance: 8.8, APIs: 1, Strings: 4, Instructions: 50COMMON

Download Yara Rule

APIs

GetModuleFileNameA.KERNEL32(00000000,?,0000012C,?,0000012C,00000000,?,00000064,00000000,?,?,?,?,00527A29,00008003), ref: 00527E6D

Part of subcall function 005224E0: wsprintfA.USER32 ref: 00522523

Part of subcall function 00522700: CoCreateGuid.OLE32(?), ref: 00522719

Part of subcall function 00522470: wsprintfA.USER32 ref: 00522487
Part of subcall function 00522470: RegCreateKeyA.ADVAPI32(?,?,?), ref: 005224A0
Part of subcall function 00522470: lstrlenA.KERNEL32(?), ref: 005224AC
Part of subcall function 00522470: RegSetValueExA.ADVAPI32(?,00000000,00000000,00000001,?,00000001,?), ref: 005224C2
Part of subcall function 00522470: RegCloseKey.ADVAPI32(?,?,00000000,00000000,00000001,?,00000001,?), ref: 005224CD

Strings

{%08lX-%04X-%04X-%02X%02X-%02X%02X%02X%02X%02X%02X}, xrefs: 00527E8E
CLSID\%s, xrefs: 00527EB0
{40B8DCCB-895E-2CDC-AE7F-E3C71F72764D}, xrefs: 00527E89, 00527EB5, 00527ED0
CLSID\%s\LocalServer32, xrefs: 00527ECB

Memory Dump Source

Source File: 00000000.00000002.2819002500.0000000000520000.00000040.00001000.00020000.00000000.sdmp, Offset: 00520000, based on PE: true

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_520000_IXi8q1gF78.jbxd

Yara matches

Similarity

API ID: Createwsprintf$CloseFileGuidModuleNameValuelstrlen
String ID: CLSID\%s$CLSID\%s\LocalServer32${%08lX-%04X-%04X-%02X%02X-%02X%02X%02X%02X%02X%02X}${40B8DCCB-895E-2CDC-AE7F-E3C71F72764D}
API String ID: 2581233984-3409309160
Opcode ID: f54c8cfcd1ea4e00087e5d8afec76ae0c5feb1bee36bf5d366132eb62f70ddef
Instruction ID: e059478e18ab86575e812ef60e4a6dc589f13adab3526805e555923135dac7fd
Opcode Fuzzy Hash: f54c8cfcd1ea4e00087e5d8afec76ae0c5feb1bee36bf5d366132eb62f70ddef
Instruction Fuzzy Hash: CD0188716402297AEA10E6A0AC47FDD7B5CFF56B15F000051B358B30C1D6B0AB648AA5

Function 005231E1 Relevance: 8.8, APIs: 4, Strings: 1, Instructions: 35sleepsynchronizationthreadCOMMON

Download Yara Rule

APIs

Part of subcall function 0053091B: InitializeCriticalSection.KERNEL32(0053C1A0,?,?,00000000), ref: 00530932
Part of subcall function 0053091B: VirtualAlloc.KERNEL32(00000000,000C6800,00003000,00000004,0053C1A0,?,?,00000000), ref: 00530950
Part of subcall function 0053091B: Sleep.KERNEL32(000007D0,?,?,00000000), ref: 0053096B
Part of subcall function 0053091B: EnterCriticalSection.KERNEL32(0053C1A0,?,?,00000000), ref: 00530975
Part of subcall function 0053091B: InterlockedIncrement.KERNEL32(0053C1B8), ref: 005309B8
Part of subcall function 0053091B: LeaveCriticalSection.KERNEL32(0053C1A0,0053C1B8,0053C1A0,?,?,00000000), ref: 005309C5

Part of subcall function 00523340: VirtualAlloc.KERNEL32(00000000,0001FFFE,00001000,00000040), ref: 00523357
Part of subcall function 00523340: VirtualAlloc.KERNEL32(00000000,0001FFFE,00001000,00000040,00000000,0001FFFE,00001000,00000040), ref: 0052336D
Part of subcall function 00523340: VirtualFree.KERNEL32(?,00000000,00008000,?,?,00000000,0001FFFE,00001000,00000040,00000000,0001FFFE,00001000,00000040), ref: 005233CB

Part of subcall function 00523310: CoCreateGuid.OLE32(00523216), ref: 0052331D

CreateThread.KERNEL32(00000000,00000300,Function_00003450,?,00000001,?), ref: 00523233
WaitForSingleObject.KERNEL32(?,000000FF,00000000,00000300,Function_00003450,?,00000001,?,00534BC4,00000031,0053BDE4,00000000), ref: 00523240
CloseHandle.KERNEL32(?,?,000000FF,00000000,00000300,Function_00003450,?,00000001,?,00534BC4,00000031,0053BDE4,00000000), ref: 00523248
Sleep.KERNEL32(0000EA60,?,?,000000FF,00000000,00000300,Function_00003450,?,00000001,?,00534BC4,00000031,0053BDE4,00000000), ref: 00523252

Strings

WVSj, xrefs: 005231F6

Memory Dump Source

Source File: 00000000.00000002.2819002500.0000000000520000.00000040.00001000.00020000.00000000.sdmp, Offset: 00520000, based on PE: true

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_520000_IXi8q1gF78.jbxd

Yara matches

Similarity

API ID: Virtual$AllocCriticalSection$CreateSleep$CloseEnterFreeGuidHandleIncrementInitializeInterlockedLeaveObjectSingleThreadWait
String ID: WVSj
API String ID: 882813272-593378516
Opcode ID: 7c237b4b271ccdc6401c1f3eaf486146be4d1f67659c2be685a4729b46f286fc
Instruction ID: 7ccc07b56a1db3fb6d4545089bed5e61b645a9af4dff71acbe9983d826bc8e8a
Opcode Fuzzy Hash: 7c237b4b271ccdc6401c1f3eaf486146be4d1f67659c2be685a4729b46f286fc
Instruction Fuzzy Hash: 12F0B434A4531ABAEF217BD09C47F9E7E28BF93B50F100A14B624361D2DEB017508692

Function 005231F0 Relevance: 8.8, APIs: 4, Strings: 1, Instructions: 32sleepsynchronizationthreadCOMMON

Download Yara Rule

APIs

Part of subcall function 0053091B: InitializeCriticalSection.KERNEL32(0053C1A0,?,?,00000000), ref: 00530932
Part of subcall function 0053091B: VirtualAlloc.KERNEL32(00000000,000C6800,00003000,00000004,0053C1A0,?,?,00000000), ref: 00530950
Part of subcall function 0053091B: Sleep.KERNEL32(000007D0,?,?,00000000), ref: 0053096B
Part of subcall function 0053091B: EnterCriticalSection.KERNEL32(0053C1A0,?,?,00000000), ref: 00530975
Part of subcall function 0053091B: InterlockedIncrement.KERNEL32(0053C1B8), ref: 005309B8
Part of subcall function 0053091B: LeaveCriticalSection.KERNEL32(0053C1A0,0053C1B8,0053C1A0,?,?,00000000), ref: 005309C5

Part of subcall function 00523340: VirtualAlloc.KERNEL32(00000000,0001FFFE,00001000,00000040), ref: 00523357
Part of subcall function 00523340: VirtualAlloc.KERNEL32(00000000,0001FFFE,00001000,00000040,00000000,0001FFFE,00001000,00000040), ref: 0052336D
Part of subcall function 00523340: VirtualFree.KERNEL32(?,00000000,00008000,?,?,00000000,0001FFFE,00001000,00000040,00000000,0001FFFE,00001000,00000040), ref: 005233CB

Part of subcall function 00523310: CoCreateGuid.OLE32(00523216), ref: 0052331D

CreateThread.KERNEL32(00000000,00000300,Function_00003450,?,00000001,?), ref: 00523233
WaitForSingleObject.KERNEL32(?,000000FF,00000000,00000300,Function_00003450,?,00000001,?,00534BC4,00000031,0053BDE4,00000000), ref: 00523240
CloseHandle.KERNEL32(?,?,000000FF,00000000,00000300,Function_00003450,?,00000001,?,00534BC4,00000031,0053BDE4,00000000), ref: 00523248
Sleep.KERNEL32(0000EA60,?,?,000000FF,00000000,00000300,Function_00003450,?,00000001,?,00534BC4,00000031,0053BDE4,00000000), ref: 00523252

Strings

WVSj, xrefs: 005231F6

Memory Dump Source

Source File: 00000000.00000002.2819002500.0000000000520000.00000040.00001000.00020000.00000000.sdmp, Offset: 00520000, based on PE: true

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_520000_IXi8q1gF78.jbxd

Yara matches

Similarity

API ID: Virtual$AllocCriticalSection$CreateSleep$CloseEnterFreeGuidHandleIncrementInitializeInterlockedLeaveObjectSingleThreadWait
String ID: WVSj
API String ID: 882813272-593378516
Opcode ID: 93a18a61ca68fa8a061d33e70662391c7838bb868faa08890f1d8a282de15ace
Instruction ID: 113ffc85feafb62a9dca6ede1885087674efb0675ce65c4d9d8dc3b71694cc1d
Opcode Fuzzy Hash: 93a18a61ca68fa8a061d33e70662391c7838bb868faa08890f1d8a282de15ace
Instruction Fuzzy Hash: B6F0A734A4522AB9EB1177D19C4BF9D7E28BF93F50F100A51B220351D2DEB117408662

Function 00522470 Relevance: 7.5, APIs: 5, Instructions: 33registrystringCOMMON

Download Yara Rule

APIs

wsprintfA.USER32 ref: 00522487
RegCreateKeyA.ADVAPI32(?,?,?), ref: 005224A0
lstrlenA.KERNEL32(?), ref: 005224AC
RegSetValueExA.ADVAPI32(?,00000000,00000000,00000001,?,00000001,?), ref: 005224C2
RegCloseKey.ADVAPI32(?,?,00000000,00000000,00000001,?,00000001,?), ref: 005224CD

Memory Dump Source

Source File: 00000000.00000002.2819002500.0000000000520000.00000040.00001000.00020000.00000000.sdmp, Offset: 00520000, based on PE: true

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_520000_IXi8q1gF78.jbxd

Yara matches

Similarity

API ID: CloseCreateValuelstrlenwsprintf
String ID:
API String ID: 3978583755-0
Opcode ID: 89b4492d92d0ed7c9c5e74286af9d63890b267e9782dcac567c97415fceb705a
Instruction ID: 439040f1d3158deae648dd3364d38285d9186a33657e5b9eb7d55e607960b282
Opcode Fuzzy Hash: 89b4492d92d0ed7c9c5e74286af9d63890b267e9782dcac567c97415fceb705a
Instruction Fuzzy Hash: 21F0307141011E7ADF21AE90EC06FEE3B69FF55704F004461BA05A10E2EAB19F609A94

Function 00527C90 Relevance: 7.5, APIs: 5, Instructions: 30threadinjectionsleepCOMMON

Download Yara Rule

APIs

Sleep.KERNEL32(000000C8,?,00000000,00000004), ref: 00527C9E
CoTaskMemFree.OLE32(00000000,?,?,?,000000C8,?,00000000,00000004), ref: 00527CC1
WaitForSingleObject.KERNEL32(00000000,0036EE80,00000000,?,?,?,000000C8,?,00000000,00000004), ref: 00527CCE
ResumeThread.KERNEL32(00000000,00000000,0036EE80,00000000,0036EE80,00000000,?,?,?,000000C8,?,00000000,00000004), ref: 00527CDC
SuspendThread.KERNEL32(00000000,00000000,00000000,0036EE80,00000000,0036EE80,00000000,?,?,?,000000C8,?,00000000,00000004), ref: 00527CE4
ResumeThread.KERNEL32(00000000,00000000,0036EE80,00000000,?,?,?,000000C8,?,00000000,00000004), ref: 00527CFB
SuspendThread.KERNEL32(00000000,00000000,00000000,0036EE80,00000000,?,?,?,000000C8,?,00000000,00000004), ref: 00527D03

Strings

-embedding, xrefs: 00527B78
jhdheruhfrthkgjhtjkghjk5trh, xrefs: 00527B8C

Memory Dump Source

Source File: 00000000.00000002.2819002500.0000000000520000.00000040.00001000.00020000.00000000.sdmp, Offset: 00520000, based on PE: true

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_520000_IXi8q1gF78.jbxd

Yara matches

Similarity

API ID: Thread$ResumeSuspend$FreeObjectSingleSleepTaskWait
String ID: -embedding$jhdheruhfrthkgjhtjkghjk5trh
API String ID: 1528747566-2388181652
Opcode ID: 9aec9855139ca21d28a25d59b01f557d523c876c360daf6adc1245949a85d244
Instruction ID: db557d053520dc43fd7907cc025a3a21254a0b3d821220e49e8991efa11a6dce
Opcode Fuzzy Hash: 9aec9855139ca21d28a25d59b01f557d523c876c360daf6adc1245949a85d244
Instruction Fuzzy Hash: 9FF06D3180512EFACF11AFD0EC05AEEBE71FF56710F104944F010310E1CB721A509B80

Function 00526FFE Relevance: 7.0, APIs: 1, Strings: 3, Instructions: 30COMMON

Download Yara Rule

APIs

Part of subcall function 0052F100: lstrlenA.KERNEL32(?,00000000,?,0000031A,00000000,?,?,\ntsvcs), ref: 0052F147
Part of subcall function 0052F100: htonl.WS2_32(00000075), ref: 0052F1E8

InterlockedDecrement.KERNEL32(0053BDD0), ref: 005276F7

Part of subcall function 00530400: IsBadReadPtr.KERNEL32(?,0000031A), ref: 0053040F

Strings

\ntsvcs, xrefs: 005271E1
Admin, xrefs: 005271E9, 005271EE
\\*SMBSERVER\IPC$, xrefs: 00527005

Memory Dump Source

Source File: 00000000.00000002.2819002500.0000000000520000.00000040.00001000.00020000.00000000.sdmp, Offset: 00520000, based on PE: true

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_520000_IXi8q1gF78.jbxd

Yara matches

Similarity

API ID: DecrementInterlockedReadhtonllstrlen
String ID: Admin$\\*SMBSERVER\IPC$$\ntsvcs
API String ID: 1404068322-1949679209
Opcode ID: 3ed549e8a21985fe034e1a8419f9229e0f623fd2fb39af8c3ff925a14047a6dc
Instruction ID: d048fcdbc6162f6b2528979ba08a08b281e91845317a6d7cdd841a2800819380
Opcode Fuzzy Hash: 3ed549e8a21985fe034e1a8419f9229e0f623fd2fb39af8c3ff925a14047a6dc
Instruction Fuzzy Hash: 17F0BE71A05239A9CB34E764BC0DB9C6F20BFA6720F200A22F221B91E0D7702484AF04

Function 00523340 Relevance: 3.8, APIs: 3, Instructions: 53memoryCOMMON

Download Yara Rule

APIs

VirtualAlloc.KERNEL32(00000000,0001FFFE,00001000,00000040), ref: 00523357
VirtualAlloc.KERNEL32(00000000,0001FFFE,00001000,00000040,00000000,0001FFFE,00001000,00000040), ref: 0052336D

Part of subcall function 005233E0: CryptAcquireContextA.ADVAPI32(?,00000000,00000000,00000001,F0000000), ref: 005233F8
Part of subcall function 005233E0: CryptGenRandom.ADVAPI32(?,0001FFFE,?,?,00000000,00000000,00000001,F0000000), ref: 00523408
Part of subcall function 005233E0: CryptReleaseContext.ADVAPI32(?,00000000,?,0001FFFE,?,?,00000000,00000000,00000001,F0000000), ref: 00523412

VirtualFree.KERNEL32(?,00000000,00008000,?,?,00000000,0001FFFE,00001000,00000040,00000000,0001FFFE,00001000,00000040), ref: 005233CB

Memory Dump Source

Source File: 00000000.00000002.2819002500.0000000000520000.00000040.00001000.00020000.00000000.sdmp, Offset: 00520000, based on PE: true

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_520000_IXi8q1gF78.jbxd

Yara matches

Similarity

API ID: CryptVirtual$AllocContext$AcquireFreeRandomRelease
String ID:
API String ID: 2050082855-0
Opcode ID: 3f1366e59c9d2d3504ca67378e5dc51fe48740e3731bfa7eb47457b4ddc8bfdb
Instruction ID: 7cdfe0d308b475b627085c52c2ef68f7b2b824796284d0c5ab8e86d494468a4d
Opcode Fuzzy Hash: 3f1366e59c9d2d3504ca67378e5dc51fe48740e3731bfa7eb47457b4ddc8bfdb
Instruction Fuzzy Hash: 6A012230600216BAEB209F959C42BBCBB62FF92B54F304175FB047A2C1DAB16A41D288

Function 00522700 Relevance: 3.5, APIs: 1, Strings: 1, Instructions: 33COMMON

Download Yara Rule

APIs

CoCreateGuid.OLE32(?), ref: 00522719

Strings

qwertshertshjklzxcvbnjklbnjklzxcvbnmzxcvbnm, xrefs: 0052271E

Memory Dump Source

Source File: 00000000.00000002.2819002500.0000000000520000.00000040.00001000.00020000.00000000.sdmp, Offset: 00520000, based on PE: true

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_520000_IXi8q1gF78.jbxd

Yara matches

Similarity

API ID: CreateGuid
String ID: qwertshertshjklzxcvbnjklbnjklzxcvbnmzxcvbnm
API String ID: 2531319410-202909216
Opcode ID: 6665d638d328af39cad76ef56609ba28ed20f48fe450bd81b52e6af445d3b8ba
Instruction ID: 80fd21f6ebcea56754a58f3b9e380310835fd714abb5676d6da95f676204dc98
Opcode Fuzzy Hash: 6665d638d328af39cad76ef56609ba28ed20f48fe450bd81b52e6af445d3b8ba
Instruction Fuzzy Hash: FCF0A73590912C9FCB14DE89EC81EDEB7F8FB8A364F054132E514A3294D73079058AD0

Function 0052203B Relevance: 3.0, APIs: 2, Instructions: 20stringthreadsleepCOMMON

Download Yara Rule

APIs

GetLogicalDriveStringsA.KERNEL32(0000012C,?), ref: 0052205E
GetDriveTypeA.KERNEL32(?), ref: 0052206C
CoTaskMemAlloc.OLE32(00000032,?), ref: 00522078
lstrcpyA.KERNEL32(?,?,00000032,?), ref: 0052208A
CreateThread.KERNEL32(00000000,00000000,00522100,?,00000001,?), ref: 005220B1
SetThreadPriority.KERNEL32(?,000000FE,00000000,00000000,00522100,?,00000001,?,?,?,00000032,?), ref: 005220C4
WaitForSingleObject.KERNEL32(?,000000FF,?,000000FE,00000000,00000000,00522100,?,00000001,?,?,?,00000032,?), ref: 005220D1
lstrlenA.KERNEL32(?,?), ref: 005220D7
Sleep.KERNEL32(0CDFE600,?,?), ref: 005220E9

Memory Dump Source

Source File: 00000000.00000002.2819002500.0000000000520000.00000040.00001000.00020000.00000000.sdmp, Offset: 00520000, based on PE: true

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_520000_IXi8q1gF78.jbxd

Yara matches

Similarity

API ID: DriveThread$AllocCreateLogicalObjectPrioritySingleSleepStringsTaskTypeWaitlstrcpylstrlen
String ID:
API String ID: 1053226204-0
Opcode ID: 81227ca4ea33b1364cadc5a13beb3c03ea71301a743b09e2c7f6e937596728ea
Instruction ID: 8f96ddc326d4ad63fc6dab6f532a1d8511ebc334b50b0b540575eafc3475c32c
Opcode Fuzzy Hash: 81227ca4ea33b1364cadc5a13beb3c03ea71301a743b09e2c7f6e937596728ea
Instruction Fuzzy Hash: F2E08675805128B5DB30DA919C4DBDBBEACBF46700F540C95A205621C1DA746B44DAA5

Function 00523832 Relevance: 1.5, APIs: 1, Instructions: 9threadCOMMON

Download Yara Rule

APIs

ExitThread.KERNEL32(00000000), ref: 0052383E

Memory Dump Source

Source File: 00000000.00000002.2819002500.0000000000520000.00000040.00001000.00020000.00000000.sdmp, Offset: 00520000, based on PE: true

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_520000_IXi8q1gF78.jbxd

Yara matches

Similarity

API ID: ExitThread
String ID:
API String ID: 2158977761-0
Opcode ID: 5a6acba3a0b94e5ec593c3e4b50adbe9f9fefd75548124e77ce6f29fd4ed645b
Instruction ID: 1703a5029254d3597c84afd91ad3de2e7f79ba2f0b67f56779702e66cdfe49e3
Opcode Fuzzy Hash: 5a6acba3a0b94e5ec593c3e4b50adbe9f9fefd75548124e77ce6f29fd4ed645b
Instruction Fuzzy Hash: 98B012B7345850C5E110338C7803799FB40FBA1B6EF400533D606548C3946A4030805D

Function 00521130 Relevance: 1.3, APIs: 1, Instructions: 25stringCOMMON

Download Yara Rule

APIs

lstrcmpiA.KERNEL32(006564C0,?), ref: 0052114B

Memory Dump Source

Source File: 00000000.00000002.2819002500.0000000000520000.00000040.00001000.00020000.00000000.sdmp, Offset: 00520000, based on PE: true

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_520000_IXi8q1gF78.jbxd

Yara matches

Similarity

API ID: lstrcmpi
String ID:
API String ID: 1586166983-0
Opcode ID: 4560953faebe64f8c43f84d44e625037419218481bdfa788c06ccb2cea58bf51
Instruction ID: 1322bd205bc6980a36d78995d0ef69eb9fc8e59156ea05a2226517be7cd71f94
Opcode Fuzzy Hash: 4560953faebe64f8c43f84d44e625037419218481bdfa788c06ccb2cea58bf51
Instruction Fuzzy Hash: A5E08636604424A797205E56FC81893BF59FFF63643000632EB0592350D1716C15D5E4

Non-executed Functions

Function 0052285E Relevance: 38.6, APIs: 19, Strings: 3, Instructions: 124networkencryptionCOMMON

Download Yara Rule

APIs

CryptAcquireContextA.ADVAPI32(?,00000000,00000000,00000001,F0000000), ref: 00522878
socket.WS2_32(00000002,00000001,00000000), ref: 00522883
gethostbyname.WS2_32(www.online.if.ee), ref: 00522899
htons.WS2_32(000001BB), ref: 005228BE
htons.WS2_32(00000061), ref: 005228DB
CryptGenRandom.ADVAPI32(?,00000020,?,00000061,000001BB,www.online.if.ee,00000002,00000001,00000000,?,00000000,00000000,00000001,F0000000), ref: 005228FB
CryptGenRandom.ADVAPI32(?,00000020,?,?,00000020,?,00000061,000001BB,www.online.if.ee,00000002,00000001,00000000,?,00000000,00000000,00000001), ref: 0052290D
htons.WS2_32(00000016), ref: 00522914
memcpy.MSVCRT(?,005349FB,00000016,00000016,?,00000020,?,?,00000020,?,00000061,000001BB,www.online.if.ee,00000002,00000001,00000000), ref: 00522928
connect.WS2_32(?,00000002,00000010), ref: 00522941
send.WS2_32(?,?,00000066,00000000), ref: 00522955
closesocket.WS2_32(?), ref: 0052295D
CryptReleaseContext.ADVAPI32(?,00000000,00000002,00000001,00000000,?,00000000,00000000,00000001,F0000000), ref: 00522967
socket.WS2_32(00000002,00000001,00000000), ref: 00522972
gethostbyname.WS2_32(www.if.ee), ref: 00522984
htons.WS2_32(00000050), ref: 0052299E
connect.WS2_32(?,00000002,00000010), ref: 005229B6
send.WS2_32(?,GET / HTTP/1.1Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, application/vnd.ms-powerpoint, application/vnd.ms-excel, application/msword, application/x-shockwave-flash, */*Accept-Language: en-usAccept-Encoding: gzip, deflateUser-Agent: Mo,00000174,00000000), ref: 005229CE
closesocket.WS2_32(?), ref: 005229D6

Strings

GET / HTTP/1.1Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, application/vnd.ms-powerpoint, application/vnd.ms-excel, application/msword, application/x-shockwave-flash, */*Accept-Language: en-usAccept-Encoding: gzip, deflateUser-Agent: Mo, xrefs: 005229C6
www.online.if.ee, xrefs: 00522894
www.if.ee, xrefs: 0052297F

Memory Dump Source

Source File: 00000000.00000002.2819002500.0000000000520000.00000040.00001000.00020000.00000000.sdmp, Offset: 00520000, based on PE: true

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_520000_IXi8q1gF78.jbxd

Yara matches

Similarity

API ID: Crypthtons$ContextRandomclosesocketconnectgethostbynamesendsocket$AcquireReleasememcpy
String ID: GET / HTTP/1.1Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, application/vnd.ms-powerpoint, application/vnd.ms-excel, application/msword, application/x-shockwave-flash, */*Accept-Language: en-usAccept-Encoding: gzip, deflateUser-Agent: Mo$www.if.ee$www.online.if.ee
API String ID: 2345021784-3941698025
Opcode ID: 1f5d55014142fbd67fabe5dd4e94432ded6facc0c3b73bd006239840585d739e
Instruction ID: 0c06764019ce06359bad3f4fe761e4e6ceaf7542ffb6bc41b30786b46bcff3e6
Opcode Fuzzy Hash: 1f5d55014142fbd67fabe5dd4e94432ded6facc0c3b73bd006239840585d739e
Instruction Fuzzy Hash: BB41D230A40316BADF20FBE0DC8AFAD7F64BF06318F144151F604AE2E2EBB195449B55

Function 0052FB50 Relevance: 12.4, APIs: 6, Strings: 1, Instructions: 133stringCOMMON

Download Yara Rule

APIs

htonl.WS2_32(00000073), ref: 0052FC58
htonl.WS2_32 ref: 0052FC77
lstrcpyA.KERNEL32(?,?,?,?,?,?,?,000001F4,00000073,?,Windows 2000 2195,00000023,?), ref: 0052FCAF
lstrlenA.KERNEL32(?,?,?,?,?,?,?,?,000001F4,00000073,?,Windows 2000 2195,00000023,?), ref: 0052FCB5
lstrlenA.KERNEL32(?,?,?,?,?,?,?,?,?,000001F4,00000073,?,Windows 2000 2195,00000023,?), ref: 0052FCBE
lstrcpyA.KERNEL32(?,?,?,?,?,?,?,?,?,?,?,000001F4,00000073,?,Windows 2000 2195,00000023), ref: 0052FCCE

Strings

Windows 2000 2195, xrefs: 0052FC41

Memory Dump Source

Source File: 00000000.00000002.2819002500.0000000000520000.00000040.00001000.00020000.00000000.sdmp, Offset: 00520000, based on PE: true

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_520000_IXi8q1gF78.jbxd

Yara matches

Similarity

API ID: htonllstrcpylstrlen
String ID: Windows 2000 2195
API String ID: 2004599197-3821944694
Opcode ID: 5f846e4d1ac51e266a335b950b915d51d383845b031b7373137d101d6b206beb
Instruction ID: e57131002b9764fb5ba02822ff174f1623520b129b88fd5c470c5bd1d0a098ea
Opcode Fuzzy Hash: 5f846e4d1ac51e266a335b950b915d51d383845b031b7373137d101d6b206beb
Instruction Fuzzy Hash: 7841147180072A96CB309F64EC45AAB7FB4FF52324F148539F8656B2C1E7789A50C7E2

Function 0052F100 Relevance: 8.9, APIs: 3, Strings: 2, Instructions: 102stringCOMMON

Download Yara Rule

APIs

Part of subcall function 0053091B: InitializeCriticalSection.KERNEL32(0053C1A0,?,?,00000000), ref: 00530932
Part of subcall function 0053091B: VirtualAlloc.KERNEL32(00000000,000C6800,00003000,00000004,0053C1A0,?,?,00000000), ref: 00530950
Part of subcall function 0053091B: Sleep.KERNEL32(000007D0,?,?,00000000), ref: 0053096B
Part of subcall function 0053091B: EnterCriticalSection.KERNEL32(0053C1A0,?,?,00000000), ref: 00530975
Part of subcall function 0053091B: InterlockedIncrement.KERNEL32(0053C1B8), ref: 005309B8
Part of subcall function 0053091B: LeaveCriticalSection.KERNEL32(0053C1A0,0053C1B8,0053C1A0,?,?,00000000), ref: 005309C5

lstrlenA.KERNEL32(?,00000000,?,0000031A,00000000,?,?,\ntsvcs), ref: 0052F147
htonl.WS2_32(00000075), ref: 0052F1E8

Part of subcall function 0052EF90: select.WS2_32(00000000,00000000,?,00000000,?), ref: 0052EFD5
Part of subcall function 0052EF90: send.WS2_32(?,?,?,00000000), ref: 0052EFF2
Part of subcall function 0052EF90: select.WS2_32(00000000,?,00000000,00000000,?), ref: 0052F029
Part of subcall function 0052EF90: recv.WS2_32(?,?,?,00000000), ref: 0052F04F
Part of subcall function 0052EF90: htonl.WS2_32(?), ref: 0052F06E

SetLastError.KERNEL32(00000000,?,?,?,?,00002000,00000075,?,?????,00000006,?,?,?,00000000,?,?), ref: 0052F218

Strings

?????, xrefs: 0052F1D1
\ntsvcs, xrefs: 0052F106

Memory Dump Source

Source File: 00000000.00000002.2819002500.0000000000520000.00000040.00001000.00020000.00000000.sdmp, Offset: 00520000, based on PE: true

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_520000_IXi8q1gF78.jbxd

Yara matches

Similarity

API ID: CriticalSection$htonlselect$AllocEnterErrorIncrementInitializeInterlockedLastLeaveSleepVirtuallstrlenrecvsend
String ID: ?????$\ntsvcs
API String ID: 2799264126-2481814201
Opcode ID: 6cc7bf06f25a6a04196224c41eff54a66b01c4b1c1e441012277fbf5367912d4
Instruction ID: ca46bf853c3828548760791e7ed0330859d00afd34b30b5e77282b232cbe6ccd
Opcode Fuzzy Hash: 6cc7bf06f25a6a04196224c41eff54a66b01c4b1c1e441012277fbf5367912d4
Instruction Fuzzy Hash: 6C31F3B6D00315AADB209F68DC49B8EBFB1FF52320F148228F4A96B2C2E7759501C791

Function 00527860 Relevance: 8.8, APIs: 4, Strings: 1, Instructions: 78networkCOMMON

Download Yara Rule

APIs

htonl.WS2_32(?), ref: 005278A8
send.WS2_32(?,?,?,00000000), ref: 005278F9
select.WS2_32(00000000,00000001,00000000,00000000,00000006), ref: 00527940
recv.WS2_32(?,?,00000200,00000000), ref: 0052795F

Strings

, xrefs: 00527882

Memory Dump Source

Source File: 00000000.00000002.2819002500.0000000000520000.00000040.00001000.00020000.00000000.sdmp, Offset: 00520000, based on PE: true

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_520000_IXi8q1gF78.jbxd

Yara matches

Similarity

API ID: htonlrecvselectsend
String ID:
API String ID: 3511235689-3916222277
Opcode ID: a0c04973254278fdc7c0ce95a9358ea0504cc97aadcabae64eca0e7797e76e23
Instruction ID: d286067a4b5f845ee264b77c1120115984fe503bb7a61af008e6747a50eee8f2
Opcode Fuzzy Hash: a0c04973254278fdc7c0ce95a9358ea0504cc97aadcabae64eca0e7797e76e23
Instruction Fuzzy Hash: 8231D1B190432EABDB20DF58DC48BDDBB74FF05324F108291E1286A2D1E7746B809F95

Function 00530590 Relevance: 8.8, APIs: 4, Strings: 1, Instructions: 58COMMON

Download Yara Rule

APIs

htonl.WS2_32(00000074), ref: 005305E9

Part of subcall function 0052EF90: select.WS2_32(00000000,00000000,?,00000000,?), ref: 0052EFD5
Part of subcall function 0052EF90: send.WS2_32(?,?,?,00000000), ref: 0052EFF2
Part of subcall function 0052EF90: select.WS2_32(00000000,?,00000000,00000000,?), ref: 0052F029
Part of subcall function 0052EF90: recv.WS2_32(?,?,?,00000000), ref: 0052F04F
Part of subcall function 0052EF90: htonl.WS2_32(?), ref: 0052F06E

closesocket.WS2_32(?), ref: 00530607
VirtualFree.KERNEL32(?,00000000,00008000,?,?,?,\ntsvcs), ref: 00530616
GetLastError.KERNEL32(?,00000000,00008000,?,?,?,\ntsvcs), ref: 0053061F

Strings

\ntsvcs, xrefs: 00530596

Memory Dump Source

Source File: 00000000.00000002.2819002500.0000000000520000.00000040.00001000.00020000.00000000.sdmp, Offset: 00520000, based on PE: true

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_520000_IXi8q1gF78.jbxd

Yara matches

Similarity

API ID: htonlselect$ErrorFreeLastVirtualclosesocketrecvsend
String ID: \ntsvcs
API String ID: 375165098-3919542250
Opcode ID: 3f980c7505cfd11f74add4f11a0a8667d5ab4d7bd5e667383924527adb7e100a
Instruction ID: 720576408c352c71da13ae45ef163c91b742808dc85ab7e1d8f5b3fe1644f64a
Opcode Fuzzy Hash: 3f980c7505cfd11f74add4f11a0a8667d5ab4d7bd5e667383924527adb7e100a
Instruction Fuzzy Hash: F0112C715003526BDB30AB649C8AF4BBF98BF92750F148514F9986F2C6DAB19900C7F0

Function 0052F250 Relevance: 7.1, APIs: 3, Strings: 1, Instructions: 102stringCOMMON

Download Yara Rule

APIs

Part of subcall function 0053091B: InitializeCriticalSection.KERNEL32(0053C1A0,?,?,00000000), ref: 00530932
Part of subcall function 0053091B: VirtualAlloc.KERNEL32(00000000,000C6800,00003000,00000004,0053C1A0,?,?,00000000), ref: 00530950
Part of subcall function 0053091B: Sleep.KERNEL32(000007D0,?,?,00000000), ref: 0053096B
Part of subcall function 0053091B: EnterCriticalSection.KERNEL32(0053C1A0,?,?,00000000), ref: 00530975
Part of subcall function 0053091B: InterlockedIncrement.KERNEL32(0053C1B8), ref: 005309B8
Part of subcall function 0053091B: LeaveCriticalSection.KERNEL32(0053C1A0,0053C1B8,0053C1A0,?,?,00000000), ref: 005309C5

lstrlenA.KERNEL32(?,00000000,?,0000031A,00000000,?,?,\ntsvcs), ref: 0052F297
htonl.WS2_32(000000A2), ref: 0052F340

Part of subcall function 0052EF90: select.WS2_32(00000000,00000000,?,00000000,?), ref: 0052EFD5
Part of subcall function 0052EF90: send.WS2_32(?,?,?,00000000), ref: 0052EFF2
Part of subcall function 0052EF90: select.WS2_32(00000000,?,00000000,00000000,?), ref: 0052F029
Part of subcall function 0052EF90: recv.WS2_32(?,?,?,00000000), ref: 0052F04F
Part of subcall function 0052EF90: htonl.WS2_32(?), ref: 0052F06E

SetLastError.KERNEL32(?,00000016,?,?,?,00001000,000000A2,?,?,?,00000000,?,?,00000000,000000B7,?), ref: 0052F376

Strings

\ntsvcs, xrefs: 0052F256

Memory Dump Source

Source File: 00000000.00000002.2819002500.0000000000520000.00000040.00001000.00020000.00000000.sdmp, Offset: 00520000, based on PE: true

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_520000_IXi8q1gF78.jbxd

Yara matches

Similarity

API ID: CriticalSection$htonlselect$AllocEnterErrorIncrementInitializeInterlockedLastLeaveSleepVirtuallstrlenrecvsend
String ID: \ntsvcs
API String ID: 2799264126-3919542250
Opcode ID: 8a151499baf8cda09f02f71031fdf0d7c8df6c7be81e8dbb4fa33a7968c2c049
Instruction ID: cddf9b3b3620dd3ba85e0b6bd673d03bc814050c69cfd98b727003247a7d49bf
Opcode Fuzzy Hash: 8a151499baf8cda09f02f71031fdf0d7c8df6c7be81e8dbb4fa33a7968c2c049
Instruction Fuzzy Hash: D541D571900715ABDB20DF69DC84A8EBFB1FF55320F148B68F4A96B2C1D775A600CB90

Function 0052F3B0 Relevance: 5.4, APIs: 1, Strings: 2, Instructions: 102COMMON

Download Yara Rule

APIs

htonl.WS2_32(00000010), ref: 0052F4D9

Part of subcall function 0052EF90: select.WS2_32(00000000,00000000,?,00000000,?), ref: 0052EFD5
Part of subcall function 0052EF90: send.WS2_32(?,?,?,00000000), ref: 0052EFF2
Part of subcall function 0052EF90: select.WS2_32(00000000,?,00000000,00000000,?), ref: 0052F029
Part of subcall function 0052EF90: recv.WS2_32(?,?,?,00000000), ref: 0052F04F
Part of subcall function 0052EF90: htonl.WS2_32(?), ref: 0052F06E

Strings

\PIPE\, xrefs: 0052F468
\ntsvcs, xrefs: 0052F3B6

Memory Dump Source

Source File: 00000000.00000002.2819002500.0000000000520000.00000040.00001000.00020000.00000000.sdmp, Offset: 00520000, based on PE: true

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_520000_IXi8q1gF78.jbxd

Yara matches

Similarity

API ID: htonlselect$recvsend
String ID: \PIPE\$\ntsvcs
API String ID: 183163812-3850501885
Opcode ID: 5e408fa0e6a4d30ea60a8cb36f78905dd8df861b770835f789f79b5a15ec9bf2
Instruction ID: fd3a541ae02ff040118969ba18721377c69851e5fc60a9e9343f68b3a78d3c78
Opcode Fuzzy Hash: 5e408fa0e6a4d30ea60a8cb36f78905dd8df861b770835f789f79b5a15ec9bf2
Instruction Fuzzy Hash: CE3193A250079197D3309F58D849B47BBF0EF15314F08992CE89A9B792F3B9EA44C3E5

Function 00530640 Relevance: 4.6, APIs: 3, Instructions: 104stringCOMMON

Download Yara Rule

APIs

Part of subcall function 0053091B: InitializeCriticalSection.KERNEL32(0053C1A0,?,?,00000000), ref: 00530932
Part of subcall function 0053091B: VirtualAlloc.KERNEL32(00000000,000C6800,00003000,00000004,0053C1A0,?,?,00000000), ref: 00530950
Part of subcall function 0053091B: Sleep.KERNEL32(000007D0,?,?,00000000), ref: 0053096B
Part of subcall function 0053091B: EnterCriticalSection.KERNEL32(0053C1A0,?,?,00000000), ref: 00530975
Part of subcall function 0053091B: InterlockedIncrement.KERNEL32(0053C1B8), ref: 005309B8
Part of subcall function 0053091B: LeaveCriticalSection.KERNEL32(0053C1A0,0053C1B8,0053C1A0,?,?,00000000), ref: 005309C5

lstrlenA.KERNEL32(?,00000000,?,0000031A,00000000,?,FFFFFFFF,?), ref: 00530687
htonl.WS2_32(000000A2), ref: 0053073B

Part of subcall function 0052EF90: select.WS2_32(00000000,00000000,?,00000000,?), ref: 0052EFD5
Part of subcall function 0052EF90: send.WS2_32(?,?,?,00000000), ref: 0052EFF2
Part of subcall function 0052EF90: select.WS2_32(00000000,?,00000000,00000000,?), ref: 0052F029
Part of subcall function 0052EF90: recv.WS2_32(?,?,?,00000000), ref: 0052F04F
Part of subcall function 0052EF90: htonl.WS2_32(?), ref: 0052F06E

SetLastError.KERNEL32(?,00000016,?,?,?,00001000,000000A2,?,?,?,00000000,?,?,00000000,000000B7,?), ref: 00530771

Memory Dump Source

Source File: 00000000.00000002.2819002500.0000000000520000.00000040.00001000.00020000.00000000.sdmp, Offset: 00520000, based on PE: true

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_520000_IXi8q1gF78.jbxd

Yara matches

Similarity

API ID: CriticalSection$htonlselect$AllocEnterErrorIncrementInitializeInterlockedLastLeaveSleepVirtuallstrlenrecvsend
String ID:
API String ID: 2799264126-0
Opcode ID: e5f6b0e01631341b266defc967703b359a1485e9be6cf9c7d5bc9b881f506028
Instruction ID: a3f342f8d3e818abefb20d9ca90be7d9badc71b6c88ae93288de00b532b872f6
Opcode Fuzzy Hash: e5f6b0e01631341b266defc967703b359a1485e9be6cf9c7d5bc9b881f506028
Instruction Fuzzy Hash: 33418B71900745ABDB309F69C889B8BBFB1FF45320F148758E4A96B2C1D775A600CB90

Function 00527790 Relevance: 4.6, APIs: 3, Instructions: 65memoryCOMMON

Download Yara Rule

APIs

LocalAlloc.KERNEL32(00000040,?,?,?,00000000), ref: 005277B2
htonl.WS2_32(?), ref: 00527826

Part of subcall function 0052EF90: select.WS2_32(00000000,00000000,?,00000000,?), ref: 0052EFD5
Part of subcall function 0052EF90: send.WS2_32(?,?,?,00000000), ref: 0052EFF2
Part of subcall function 0052EF90: select.WS2_32(00000000,?,00000000,00000000,?), ref: 0052F029
Part of subcall function 0052EF90: recv.WS2_32(?,?,?,00000000), ref: 0052F04F
Part of subcall function 0052EF90: htonl.WS2_32(?), ref: 0052F06E

LocalFree.KERNEL32(00000000,?,00000000,?,00000000,00000200,?,?,00000000,0000000A,-0000003F,?,?), ref: 0052784A

Memory Dump Source

Source File: 00000000.00000002.2819002500.0000000000520000.00000040.00001000.00020000.00000000.sdmp, Offset: 00520000, based on PE: true

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_520000_IXi8q1gF78.jbxd

Yara matches

Similarity

API ID: Localhtonlselect$AllocFreerecvsend
String ID:
API String ID: 2996792744-0
Opcode ID: 2f6878ada237a594ca84a9a4b343981ece4b262296a62911daa89d890be374cf
Instruction ID: 52c40f415759590a63d710eeb635dbb9de252ca5a057496719e4c78588c1f0c3
Opcode Fuzzy Hash: 2f6878ada237a594ca84a9a4b343981ece4b262296a62911daa89d890be374cf
Instruction Fuzzy Hash: 4211C661501753A7D7009F58DC85B8BBF65FF52364F148214F5281B782E779A420C3E9

Function 0052EBB0 Relevance: 4.5, APIs: 3, Instructions: 25encryptionCOMMON

Download Yara Rule

APIs

CryptAcquireContextA.ADVAPI32(?,00000000,00000000,00000001,F0000000,?,?,?), ref: 0052EBC8
CryptGenRandom.ADVAPI32(?,000003FF,?,?,00000000,00000000,00000001,F0000000,?,?,?), ref: 0052EBD8
CryptReleaseContext.ADVAPI32(?,00000000,?,000003FF,?,?,00000000,00000000,00000001,F0000000,?,?,?), ref: 0052EBE2

Memory Dump Source

Source File: 00000000.00000002.2819002500.0000000000520000.00000040.00001000.00020000.00000000.sdmp, Offset: 00520000, based on PE: true

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_520000_IXi8q1gF78.jbxd

Yara matches

Similarity

API ID: Crypt$Context$AcquireRandomRelease
String ID:
API String ID: 1815803762-0
Opcode ID: 542e59a64dc673355da958fa0f8c2dc3f2c19e8b294e14283870d42f9fae9b4b
Instruction ID: 46c5e5f697c194b6f910f763f61c770d5150ed7e334df6865e65306972edd684
Opcode Fuzzy Hash: 542e59a64dc673355da958fa0f8c2dc3f2c19e8b294e14283870d42f9fae9b4b
Instruction Fuzzy Hash: 6CE0863164121AB7EE20B6D4AC47FDE7E2CAF41758F2041217700740D19EA15B109299

Function 0052F510 Relevance: 3.6, APIs: 1, Strings: 1, Instructions: 128COMMON

Download Yara Rule

APIs

htonl.WS2_32(00000010), ref: 0052F61F

Part of subcall function 0052EF90: select.WS2_32(00000000,00000000,?,00000000,?), ref: 0052EFD5
Part of subcall function 0052EF90: send.WS2_32(?,?,?,00000000), ref: 0052EFF2
Part of subcall function 0052EF90: select.WS2_32(00000000,?,00000000,00000000,?), ref: 0052F029
Part of subcall function 0052EF90: recv.WS2_32(?,?,?,00000000), ref: 0052F04F
Part of subcall function 0052EF90: htonl.WS2_32(?), ref: 0052F06E

Strings

\PIPE\, xrefs: 0052F5CF

Memory Dump Source

Source File: 00000000.00000002.2819002500.0000000000520000.00000040.00001000.00020000.00000000.sdmp, Offset: 00520000, based on PE: true

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_520000_IXi8q1gF78.jbxd

Yara matches

Similarity

API ID: htonlselect$recvsend
String ID: \PIPE\
API String ID: 183163812-2548971900
Opcode ID: 7ee8ca8ac552f36a36f2f7ec6bb6e24b85b25fc3df8825a596894738c8382986
Instruction ID: 61092c7e800e0d81cd14a879dd1b488d739573899b4d6f57f84404de41477fa0
Opcode Fuzzy Hash: 7ee8ca8ac552f36a36f2f7ec6bb6e24b85b25fc3df8825a596894738c8382986
Instruction Fuzzy Hash: E651D1B29007559BD720CF68C845B8BBBF0FF15314F088A29E8999B391E375EA44CBD1

Function 00530460 Relevance: 3.6, APIs: 1, Strings: 1, Instructions: 57COMMON

Download Yara Rule

APIs

htonl.WS2_32(00000004), ref: 005304D7

Part of subcall function 0052EF90: select.WS2_32(00000000,00000000,?,00000000,?), ref: 0052EFD5
Part of subcall function 0052EF90: send.WS2_32(?,?,?,00000000), ref: 0052EFF2
Part of subcall function 0052EF90: select.WS2_32(00000000,?,00000000,00000000,?), ref: 0052F029
Part of subcall function 0052EF90: recv.WS2_32(?,?,?,00000000), ref: 0052F04F
Part of subcall function 0052EF90: htonl.WS2_32(?), ref: 0052F06E

Strings

\ntsvcs, xrefs: 00530466

Memory Dump Source

Source File: 00000000.00000002.2819002500.0000000000520000.00000040.00001000.00020000.00000000.sdmp, Offset: 00520000, based on PE: true

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_520000_IXi8q1gF78.jbxd

Yara matches

Similarity

API ID: htonlselect$recvsend
String ID: \ntsvcs
API String ID: 183163812-3919542250
Opcode ID: 0b78bb616117308b5cc720be82f62af62f8948c5a3a0808d7837ebf1c70e5a77
Instruction ID: ff1e5ed8c91214652a9456e02915fb7fa9b28d2f236f3299ef42bf1304b92966
Opcode Fuzzy Hash: 0b78bb616117308b5cc720be82f62af62f8948c5a3a0808d7837ebf1c70e5a77
Instruction Fuzzy Hash: 8611C4725007519BD730DF68CC89A4BBFA4FF41360F148A28E9A95B3C2E774A900C3E4

Function 00530510 Relevance: 3.5, APIs: 1, Strings: 1, Instructions: 47COMMON

Download Yara Rule

APIs

htonl.WS2_32(00000071), ref: 00530569

Part of subcall function 0052EF90: select.WS2_32(00000000,00000000,?,00000000,?), ref: 0052EFD5
Part of subcall function 0052EF90: send.WS2_32(?,?,?,00000000), ref: 0052EFF2
Part of subcall function 0052EF90: select.WS2_32(00000000,?,00000000,00000000,?), ref: 0052F029
Part of subcall function 0052EF90: recv.WS2_32(?,?,?,00000000), ref: 0052F04F
Part of subcall function 0052EF90: htonl.WS2_32(?), ref: 0052F06E

Strings

\ntsvcs, xrefs: 00530516

Memory Dump Source

Source File: 00000000.00000002.2819002500.0000000000520000.00000040.00001000.00020000.00000000.sdmp, Offset: 00520000, based on PE: true

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_520000_IXi8q1gF78.jbxd

Yara matches

Similarity

API ID: htonlselect$recvsend
String ID: \ntsvcs
API String ID: 183163812-3919542250
Opcode ID: 78c0290d61bf95f3734786636cd15464efb7954d3a6c09d16b6a501c7746001d
Instruction ID: 11c2d07d90d988633ba1ffc76645792fdbbb8d7e036878acbab34a4287fe83d7
Opcode Fuzzy Hash: 78c0290d61bf95f3734786636cd15464efb7954d3a6c09d16b6a501c7746001d
Instruction Fuzzy Hash: 4801D472900351ABD730EB688C89E8BBFA8EF81350F144518FC896B286D674A900C7E4

Function 004017AA Relevance: 3.2, Instructions: 3216COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.2818866653.0000000000401000.00000020.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000000.00000002.2818846385.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2818893453.0000000000405000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2818893453.000000000040A000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2818893453.000000000040D000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2818893453.0000000000415000.00000004.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_IXi8q1gF78.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 993d165fcb07949dfb63cf3db26b579506e163f924268978bf6e3b2e0fd31030
Instruction ID: e8d4502cc7d6f193d65ee5e030437f49859aa5356c324b68166849a5272889f6
Opcode Fuzzy Hash: 993d165fcb07949dfb63cf3db26b579506e163f924268978bf6e3b2e0fd31030
Instruction Fuzzy Hash: C84384B6A083029FF34DDEA9C4912AEF3E1BF59314F064D3DC5A5E7200E774AA098B55

Function 00401754 Relevance: 3.2, Instructions: 3204COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.2818866653.0000000000401000.00000020.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000000.00000002.2818846385.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2818893453.0000000000405000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2818893453.000000000040A000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2818893453.000000000040D000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2818893453.0000000000415000.00000004.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_IXi8q1gF78.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 4657be0f6f5e0bc78bf79a0cfeb8495b775c43858e1927a90b496d64a42d0912
Instruction ID: 4e68c6651e674ebe5afdd058b5ae2504b91386483ea6080678160fdb43540cf2
Opcode Fuzzy Hash: 4657be0f6f5e0bc78bf79a0cfeb8495b775c43858e1927a90b496d64a42d0912
Instruction Fuzzy Hash: 1D4374B6A083029FF34DDEA9C4912AEF3E1BF59314F064D3DC5A5E7200E774AA098B55

Function 005324C0 Relevance: 1.6, APIs: 1, Instructions: 87COMMON

Download Yara Rule

APIs

htonl.WS2_32(00000010), ref: 00532599

Part of subcall function 0052EF90: select.WS2_32(00000000,00000000,?,00000000,?), ref: 0052EFD5
Part of subcall function 0052EF90: send.WS2_32(?,?,?,00000000), ref: 0052EFF2
Part of subcall function 0052EF90: select.WS2_32(00000000,?,00000000,00000000,?), ref: 0052F029
Part of subcall function 0052EF90: recv.WS2_32(?,?,?,00000000), ref: 0052F04F
Part of subcall function 0052EF90: htonl.WS2_32(?), ref: 0052F06E

Memory Dump Source

Source File: 00000000.00000002.2819002500.0000000000520000.00000040.00001000.00020000.00000000.sdmp, Offset: 00520000, based on PE: true

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_520000_IXi8q1gF78.jbxd

Yara matches

Similarity

API ID: htonlselect$recvsend
String ID:
API String ID: 183163812-0
Opcode ID: 12adad1b2d1bb74fe10669fd47f311209e778295bdf9aaa72da7420e41bbce3d
Instruction ID: 22989486e1dc7c28078f1d30d5bcd55f29cd08c2e333af256f71c11535e18ea1
Opcode Fuzzy Hash: 12adad1b2d1bb74fe10669fd47f311209e778295bdf9aaa72da7420e41bbce3d
Instruction Fuzzy Hash: 7D319C315007929BC730DF68C844A8BBBF0BF55320F048A19E8A99B792E374E904C7E5

Function 005323D0 Relevance: 1.6, APIs: 1, Instructions: 74COMMON

Download Yara Rule

APIs

htonl.WS2_32(0000002F), ref: 0053247D

Part of subcall function 0052EF90: select.WS2_32(00000000,00000000,?,00000000,?), ref: 0052EFD5
Part of subcall function 0052EF90: send.WS2_32(?,?,?,00000000), ref: 0052EFF2
Part of subcall function 0052EF90: select.WS2_32(00000000,?,00000000,00000000,?), ref: 0052F029
Part of subcall function 0052EF90: recv.WS2_32(?,?,?,00000000), ref: 0052F04F
Part of subcall function 0052EF90: htonl.WS2_32(?), ref: 0052F06E

Memory Dump Source

Source File: 00000000.00000002.2819002500.0000000000520000.00000040.00001000.00020000.00000000.sdmp, Offset: 00520000, based on PE: true

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_520000_IXi8q1gF78.jbxd

Yara matches

Similarity

API ID: htonlselect$recvsend
String ID:
API String ID: 183163812-0
Opcode ID: 28ee3b55ece6d5062e3a9f114e3648c648898826d0ed60bfa1aff4410e0d1765
Instruction ID: e4d39b74490b137e5ffa60fbed13987ed635dafd8ad0ee579ed1ab383cc6fc7b
Opcode Fuzzy Hash: 28ee3b55ece6d5062e3a9f114e3648c648898826d0ed60bfa1aff4410e0d1765
Instruction Fuzzy Hash: 8F218D755007519BDB30DF68C888A4BBBF5FF45320B148619E8A99B7D2E334E900C7A5

Function 00532640 Relevance: .7, Instructions: 652COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.2819002500.0000000000520000.00000040.00001000.00020000.00000000.sdmp, Offset: 00520000, based on PE: true

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_520000_IXi8q1gF78.jbxd

Yara matches

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 86e1fc953f9734f122b5cf9138eeacf0118e62c53451ba632b2d76c7faa63c28
Instruction ID: eb35deafee5a148e98e8bfd7d17763f272ec6adeb0cd97324e3dbf259a8d3c2a
Opcode Fuzzy Hash: 86e1fc953f9734f122b5cf9138eeacf0118e62c53451ba632b2d76c7faa63c28
Instruction Fuzzy Hash: 89128273B716180BC344CD7DCC852C27293ABD452875FCA3CAD68CB706F66AED1A6684

Function 0052BA3C Relevance: .3, Instructions: 342COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.2819002500.0000000000520000.00000040.00001000.00020000.00000000.sdmp, Offset: 00520000, based on PE: true

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_520000_IXi8q1gF78.jbxd

Yara matches

Similarity

API ID:
String ID:
API String ID:
Opcode ID: e3b63372f37d762def7111b8c50c737e7ff2c5ba6e83a97b0a4b39a573d0d558
Instruction ID: a1a6a6e0692602a2f2018863a4f52306b50d1a2887dc09d9eabc6d62e20b64bb
Opcode Fuzzy Hash: e3b63372f37d762def7111b8c50c737e7ff2c5ba6e83a97b0a4b39a573d0d558
Instruction Fuzzy Hash: EE12B678A10209EFCB48CF98C19099EFBF1FF4C314B61859A9855AB355D731AE82DF84

Function 0052B6F0 Relevance: .2, Instructions: 168COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.2819002500.0000000000520000.00000040.00001000.00020000.00000000.sdmp, Offset: 00520000, based on PE: true

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_520000_IXi8q1gF78.jbxd

Yara matches

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 10744177a23428ab358e85cbfed7b97442fca88487a6588546d130aa07f61b31
Instruction ID: d27cd2a3b9501e662e384c01b9be8e93a2cb227a813c755b43292fe792f2adc6
Opcode Fuzzy Hash: 10744177a23428ab358e85cbfed7b97442fca88487a6588546d130aa07f61b31
Instruction Fuzzy Hash: 9E616376E2968A5ADF1ACBB8C8617FEBF72AF66200F0C91F8C58267782C5351604C715

Function 0052B6FF Relevance: .2, Instructions: 162COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.2819002500.0000000000520000.00000040.00001000.00020000.00000000.sdmp, Offset: 00520000, based on PE: true

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_520000_IXi8q1gF78.jbxd

Yara matches

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 559f0f9fe27e56ae47762c5d4da08abec26462ef942bcd78640dc4a69dda6649
Instruction ID: 98cd435a073e01fe8ca8c44e7de884ce4ae1a9f4a5b7e809ab3270dae901ac4d
Opcode Fuzzy Hash: 559f0f9fe27e56ae47762c5d4da08abec26462ef942bcd78640dc4a69dda6649
Instruction Fuzzy Hash: 7E616376E2968A5ADF1ACBB8C8617FEBF72AF66200F0C91F8C58267782C5351604C715

Function 005265C0 Relevance: 33.5, APIs: 9, Strings: 10, Instructions: 247stringCOMMON

Download Yara Rule

APIs

EnterCriticalSection.KERNEL32(0053AFD6,?,?,\ntsvcs,?,005276F2,00000000,C:\Users\user\Desktop\IXi8q1gF78.exe,00523812,00002704,000007D0,00523812,00523812,Admin,Admin,00000000), ref: 005265D1
inet_ntoa.WS2_32(?), ref: 005265E2
lstrcpyA.KERNEL32(?,00000000,?,?,0053AFD6,?,?,\ntsvcs,?,005276F2,00000000,C:\Users\user\Desktop\IXi8q1gF78.exe,00523812,00002704,000007D0,00523812), ref: 005265EF
LeaveCriticalSection.KERNEL32(0053AFD6,?,00000000,?,?,0053AFD6,?,?,\ntsvcs,?,005276F2,00000000,C:\Users\user\Desktop\IXi8q1gF78.exe,00523812,00002704,000007D0), ref: 005265F9
InterlockedIncrement.KERNEL32(0053BDD0), ref: 00526603

Part of subcall function 0052F9D0: GetCurrentProcessId.KERNEL32(00000000,?,?,?,?,\srvsvc), ref: 0052FA16
Part of subcall function 0052F9D0: VirtualAlloc.KERNEL32(00000000,00002000,00003000,00000004,00000000,?,?,?,?,\srvsvc), ref: 0052FA2F
Part of subcall function 0052F9D0: CharUpperA.USER32(?,?,?,?,?,00000000,00000060,?,0053A9E8,?,?,00000000,00000060,00000000,00002000,00003000), ref: 0052FAAB
Part of subcall function 0052F9D0: lstrlenA.KERNEL32(?,?,?,?,?,?,00000000,00000060,?,0053A9E8,?,?,00000000,00000060,00000000,00002000), ref: 0052FAB3
Part of subcall function 0052F9D0: closesocket.WS2_32(00000000), ref: 0052FB07
Part of subcall function 0052F9D0: VirtualFree.KERNEL32(00000000,00000000,00008000,00000000,00000000,00002000,00003000,00000004,00000000,?,?,?,?,\srvsvc), ref: 0052FB1C
Part of subcall function 0052F9D0: GetLastError.KERNEL32(00000000,00000000,00008000,00000000,00000000,00002000,00003000,00000004,00000000,?,?,?,?,\srvsvc), ref: 0052FB25

InterlockedDecrement.KERNEL32(0053BDD0), ref: 00526984

Part of subcall function 00530400: IsBadReadPtr.KERNEL32(?,0000031A), ref: 0053040F

Strings

%s (%s) %s:%s, xrefs: 005268C7, 00526903
c:\temp.exe, xrefs: 00526824
\ntsvcs, xrefs: 005265C9, 00526728, 005268F1
Admin, xrefs: 005266BE
Administrator, xrefs: 005266B6
\atsvc, xrefs: 0052679D
Wind, xrefs: 00526632
C:\Users\user\Desktop\IXi8q1gF78.exe, xrefs: 005268A1, 005268DD
\\*SMBSERVER\IPC$, xrefs: 00526774
Wind, xrefs: 00526758

Memory Dump Source

Source File: 00000000.00000002.2819002500.0000000000520000.00000040.00001000.00020000.00000000.sdmp, Offset: 00520000, based on PE: true

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_520000_IXi8q1gF78.jbxd

Yara matches

Similarity

API ID: CriticalInterlockedSectionVirtual$AllocCharCurrentDecrementEnterErrorFreeIncrementLastLeaveProcessReadUpperclosesocketinet_ntoalstrcpylstrlen
String ID: %s (%s) %s:%s$Admin$Administrator$C:\Users\user\Desktop\IXi8q1gF78.exe$Wind$Wind$\\*SMBSERVER\IPC$$\atsvc$\ntsvcs$c:\temp.exe
API String ID: 2053271108-2816755344
Opcode ID: 88f72c627c71cb8e871e1dda24435b9862df04a4b29befce0181d203041d7222
Instruction ID: 028db30c4a4b395a01ed298657b1b1ddbb439a473d66a0cba5b111159b791da7
Opcode Fuzzy Hash: 88f72c627c71cb8e871e1dda24435b9862df04a4b29befce0181d203041d7222
Instruction Fuzzy Hash: 30B15E7180062AEACF219F60EC49BDEBFB8BF16324F2046A6E155721E1DB305B95DF41

Function 00522228 Relevance: 33.4, APIs: 16, Strings: 3, Instructions: 138stringmemoryCOMMON

Download Yara Rule

APIs

EnterCriticalSection.KERNEL32(0053B4A2), ref: 00522241
lstrcpyA.KERNEL32(?,?,0053B4A2), ref: 00522250
CoTaskMemFree.OLE32(?,?,?,0053B4A2), ref: 00522258
LeaveCriticalSection.KERNEL32(0053B4A2,?,?,?,0053B4A2), ref: 00522262
SetFileAttributesA.KERNEL32(?,00000020,0053B4A2,?,?,?,0053B4A2), ref: 00522270
lstrcpyA.KERNEL32(?,?,?,00000020,0053B4A2,?,?,?,0053B4A2), ref: 00522283

Part of subcall function 005225A0: lstrcpyA.KERNEL32(?,?,?,0000012C,00000000,?,00000064,00000000), ref: 005225E3
Part of subcall function 005225A0: lstrlenA.KERNEL32(?,?,?,?,?,0000012C,00000000,?,00000064,00000000), ref: 00522642
Part of subcall function 005225A0: wsprintfA.USER32 ref: 00522671

Part of subcall function 00522680: lstrcpyA.KERNEL32(?,?,?,0000012C,00000000), ref: 005226A9

Part of subcall function 00527F40: CreateFileA.KERNEL32(?,80000000,00000001,00000000,00000003,00000080,00000000), ref: 00527F5B
Part of subcall function 00527F40: GetFileSize.KERNEL32(?,00000000,?,80000000,00000001,00000000,00000003,00000080,00000000), ref: 00527F6D
Part of subcall function 00527F40: CoTaskMemAlloc.OLE32(00000000,?,00000000,?,80000000,00000001,00000000,00000003,00000080,00000000), ref: 00527F75
Part of subcall function 00527F40: ReadFile.KERNEL32(?,00000000,00000000,?,00000000,00000000,?,00000000,?,80000000,00000001,00000000,00000003,00000080,00000000), ref: 00527F91
Part of subcall function 00527F40: CloseHandle.KERNEL32(?,?,00000000,00000000,?,00000000,00000000,?,00000000,?,80000000,00000001,00000000,00000003,00000080,00000000), ref: 00527F99

CoTaskMemAlloc.OLE32(000002BC,?,?,?,?,?,?,?,?,?,?,?,00000020,0053B4A2,?,?), ref: 005222DB
lstrcpyA.KERNEL32(?,?,000002BC,?,?,?,?,?,?,?,?,?,?,?,00000020,0053B4A2), ref: 005222E9
CharLowerA.USER32(?,?,?,000002BC,?,?,?,?,?,?,?,?,?,?,?,00000020), ref: 005222F1
lstrcpynA.KERNEL32(?,?,00000000,?,-00000001,00000001,?,<html>,?,?,?,000002BC,?,?,?,?), ref: 00522340
lstrcatA.KERNEL32(?,?,?,?,00000000,?,-00000001,00000001,?,<html>,?,?,?,000002BC,?,?), ref: 00522351
lstrcatA.KERNEL32(?,?,?,?,?,?,00000000,?,-00000001,00000001,?,<html>,?,?,?,000002BC), ref: 0052235A
lstrlenA.KERNEL32(?,?,?,?,?,?,?,00000000,?,-00000001,00000001,?,<html>,?,?,?), ref: 00522362

Part of subcall function 00522540: CreateFileA.KERNEL32(?,40000000,00000003,00000000,00000004,00000080,00000000,-00000001,?), ref: 0052255E
Part of subcall function 00522540: SetFilePointer.KERNEL32(?,00000000,00000000,00000000,?,40000000,00000003,00000000,00000004,00000080,00000000,-00000001,?), ref: 00522574
Part of subcall function 00522540: WriteFile.KERNEL32(?,?,?,?,00000000,?,00000000,00000000,00000000,?,40000000,00000003,00000000,00000004,00000080,00000000), ref: 00522585
Part of subcall function 00522540: CloseHandle.KERNEL32(?,?,?,?,?,00000000,?,00000000,00000000,00000000,?,40000000,00000003,00000000,00000004,00000080), ref: 0052258D

Part of subcall function 00522A9F: GetModuleFileNameA.KERNEL32(00000000,?,0000012C,?,?,\ntsvcs), ref: 00522AC0
Part of subcall function 00522A9F: GetModuleHandleA.KERNEL32(00000000,?,?,?,00000000,?,0000012C,?,?,\ntsvcs), ref: 00522AED
Part of subcall function 00522A9F: VirtualAlloc.KERNEL32(00000000,?,00001000,00000040,?,?,?,?,00405010,000003E8,00000000,?,?,?,00000000,?), ref: 00522B5A
Part of subcall function 00522A9F: VirtualFree.KERNEL32(?,00000000,00008000,0053BD80,?,?,?,00000000,?,00001000,00000040,?,?,?,?,00405010), ref: 00522BD0

VirtualFree.KERNEL32(?,00000000,00008000,?,?,?,?,?,?,?,00000000,?,?,?,?,?), ref: 005223AF

Part of subcall function 00522700: CoCreateGuid.OLE32(?), ref: 00522719

Part of subcall function 00522470: wsprintfA.USER32 ref: 00522487
Part of subcall function 00522470: RegCreateKeyA.ADVAPI32(?,?,?), ref: 005224A0
Part of subcall function 00522470: lstrlenA.KERNEL32(?), ref: 005224AC
Part of subcall function 00522470: RegSetValueExA.ADVAPI32(?,00000000,00000000,00000001,?,00000001,?), ref: 005224C2
Part of subcall function 00522470: RegCloseKey.ADVAPI32(?,?,00000000,00000000,00000001,?,00000001,?), ref: 005224CD

CoTaskMemFree.OLE32(?,00000001,?,<html>,?,?,?,000002BC,?,?,?,?,?,?,?,?), ref: 005223FD
CoTaskMemFree.OLE32(?,?,00000001,?,<html>,?,?,?,000002BC,?,?,?,?,?,?,?), ref: 00522405

Part of subcall function 00522420: lstrlenA.KERNEL32(?,-00000001,?), ref: 0052242F
Part of subcall function 00522420: lstrcpyA.KERNEL32(?,?,?,-00000001,?), ref: 00522441
Part of subcall function 00522420: lstrcpynA.KERNEL32(?,?,00000001,?,?,?,-00000001,?), ref: 00522451
Part of subcall function 00522420: lstrcmpA.KERNEL32(?,?,?,?,00000001,?,?,?,-00000001,?), ref: 00522464

Strings

CLSID\%s, xrefs: 005223C7
<html>, xrefs: 005222F6
CLSID\%s\LocalServer32, xrefs: 005223E4

Memory Dump Source

Source File: 00000000.00000002.2819002500.0000000000520000.00000040.00001000.00020000.00000000.sdmp, Offset: 00520000, based on PE: true

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_520000_IXi8q1gF78.jbxd

Yara matches

Similarity

API ID: File$lstrcpy$FreeTask$Createlstrlen$AllocCloseHandleVirtual$CriticalModuleSectionlstrcatlstrcpynwsprintf$AttributesCharEnterGuidLeaveLowerNamePointerReadSizeValueWritelstrcmp
String ID: <html>$CLSID\%s$CLSID\%s\LocalServer32
API String ID: 1698267736-849937109
Opcode ID: 9b5e7fb7afc410bc57ae03317fa3f364a6b20cc263f743d222a70a37370b7597
Instruction ID: 3bcc951d3b59821d78afd61e92353f64983aa3172aca268635baa197a2554bea
Opcode Fuzzy Hash: 9b5e7fb7afc410bc57ae03317fa3f364a6b20cc263f743d222a70a37370b7597
Instruction Fuzzy Hash: C841FC72D0412ABACF11EBE0EC89EEEBB7CFF55300F1045A5B508A2091DB75AB549F60

Function 00522230 Relevance: 33.4, APIs: 16, Strings: 3, Instructions: 136stringmemoryCOMMON

Download Yara Rule

APIs

EnterCriticalSection.KERNEL32(0053B4A2), ref: 00522241
lstrcpyA.KERNEL32(?,?,0053B4A2), ref: 00522250
CoTaskMemFree.OLE32(?,?,?,0053B4A2), ref: 00522258
LeaveCriticalSection.KERNEL32(0053B4A2,?,?,?,0053B4A2), ref: 00522262
SetFileAttributesA.KERNEL32(?,00000020,0053B4A2,?,?,?,0053B4A2), ref: 00522270
lstrcpyA.KERNEL32(?,?,?,00000020,0053B4A2,?,?,?,0053B4A2), ref: 00522283

Part of subcall function 005225A0: lstrcpyA.KERNEL32(?,?,?,0000012C,00000000,?,00000064,00000000), ref: 005225E3
Part of subcall function 005225A0: lstrlenA.KERNEL32(?,?,?,?,?,0000012C,00000000,?,00000064,00000000), ref: 00522642
Part of subcall function 005225A0: wsprintfA.USER32 ref: 00522671

Part of subcall function 00522680: lstrcpyA.KERNEL32(?,?,?,0000012C,00000000), ref: 005226A9

Part of subcall function 00527F40: CreateFileA.KERNEL32(?,80000000,00000001,00000000,00000003,00000080,00000000), ref: 00527F5B
Part of subcall function 00527F40: GetFileSize.KERNEL32(?,00000000,?,80000000,00000001,00000000,00000003,00000080,00000000), ref: 00527F6D
Part of subcall function 00527F40: CoTaskMemAlloc.OLE32(00000000,?,00000000,?,80000000,00000001,00000000,00000003,00000080,00000000), ref: 00527F75
Part of subcall function 00527F40: ReadFile.KERNEL32(?,00000000,00000000,?,00000000,00000000,?,00000000,?,80000000,00000001,00000000,00000003,00000080,00000000), ref: 00527F91
Part of subcall function 00527F40: CloseHandle.KERNEL32(?,?,00000000,00000000,?,00000000,00000000,?,00000000,?,80000000,00000001,00000000,00000003,00000080,00000000), ref: 00527F99

CoTaskMemAlloc.OLE32(000002BC,?,?,?,?,?,?,?,?,?,?,?,00000020,0053B4A2,?,?), ref: 005222DB
lstrcpyA.KERNEL32(?,?,000002BC,?,?,?,?,?,?,?,?,?,?,?,00000020,0053B4A2), ref: 005222E9
CharLowerA.USER32(?,?,?,000002BC,?,?,?,?,?,?,?,?,?,?,?,00000020), ref: 005222F1
lstrcpynA.KERNEL32(?,?,00000000,?,-00000001,00000001,?,<html>,?,?,?,000002BC,?,?,?,?), ref: 00522340
lstrcatA.KERNEL32(?,?,?,?,00000000,?,-00000001,00000001,?,<html>,?,?,?,000002BC,?,?), ref: 00522351
lstrcatA.KERNEL32(?,?,?,?,?,?,00000000,?,-00000001,00000001,?,<html>,?,?,?,000002BC), ref: 0052235A
lstrlenA.KERNEL32(?,?,?,?,?,?,?,00000000,?,-00000001,00000001,?,<html>,?,?,?), ref: 00522362

Part of subcall function 00522540: CreateFileA.KERNEL32(?,40000000,00000003,00000000,00000004,00000080,00000000,-00000001,?), ref: 0052255E
Part of subcall function 00522540: SetFilePointer.KERNEL32(?,00000000,00000000,00000000,?,40000000,00000003,00000000,00000004,00000080,00000000,-00000001,?), ref: 00522574
Part of subcall function 00522540: WriteFile.KERNEL32(?,?,?,?,00000000,?,00000000,00000000,00000000,?,40000000,00000003,00000000,00000004,00000080,00000000), ref: 00522585
Part of subcall function 00522540: CloseHandle.KERNEL32(?,?,?,?,?,00000000,?,00000000,00000000,00000000,?,40000000,00000003,00000000,00000004,00000080), ref: 0052258D

Part of subcall function 00522A9F: GetModuleFileNameA.KERNEL32(00000000,?,0000012C,?,?,\ntsvcs), ref: 00522AC0
Part of subcall function 00522A9F: GetModuleHandleA.KERNEL32(00000000,?,?,?,00000000,?,0000012C,?,?,\ntsvcs), ref: 00522AED
Part of subcall function 00522A9F: VirtualAlloc.KERNEL32(00000000,?,00001000,00000040,?,?,?,?,00405010,000003E8,00000000,?,?,?,00000000,?), ref: 00522B5A
Part of subcall function 00522A9F: VirtualFree.KERNEL32(?,00000000,00008000,0053BD80,?,?,?,00000000,?,00001000,00000040,?,?,?,?,00405010), ref: 00522BD0

VirtualFree.KERNEL32(?,00000000,00008000,?,?,?,?,?,?,?,00000000,?,?,?,?,?), ref: 005223AF

Part of subcall function 00522700: CoCreateGuid.OLE32(?), ref: 00522719

Part of subcall function 00522470: wsprintfA.USER32 ref: 00522487
Part of subcall function 00522470: RegCreateKeyA.ADVAPI32(?,?,?), ref: 005224A0
Part of subcall function 00522470: lstrlenA.KERNEL32(?), ref: 005224AC
Part of subcall function 00522470: RegSetValueExA.ADVAPI32(?,00000000,00000000,00000001,?,00000001,?), ref: 005224C2
Part of subcall function 00522470: RegCloseKey.ADVAPI32(?,?,00000000,00000000,00000001,?,00000001,?), ref: 005224CD

CoTaskMemFree.OLE32(?,00000001,?,<html>,?,?,?,000002BC,?,?,?,?,?,?,?,?), ref: 005223FD
CoTaskMemFree.OLE32(?,?,00000001,?,<html>,?,?,?,000002BC,?,?,?,?,?,?,?), ref: 00522405

Part of subcall function 00522420: lstrlenA.KERNEL32(?,-00000001,?), ref: 0052242F
Part of subcall function 00522420: lstrcpyA.KERNEL32(?,?,?,-00000001,?), ref: 00522441
Part of subcall function 00522420: lstrcpynA.KERNEL32(?,?,00000001,?,?,?,-00000001,?), ref: 00522451
Part of subcall function 00522420: lstrcmpA.KERNEL32(?,?,?,?,00000001,?,?,?,-00000001,?), ref: 00522464

Strings

CLSID\%s, xrefs: 005223C7
<html>, xrefs: 005222F6
CLSID\%s\LocalServer32, xrefs: 005223E4

Memory Dump Source

Source File: 00000000.00000002.2819002500.0000000000520000.00000040.00001000.00020000.00000000.sdmp, Offset: 00520000, based on PE: true

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_520000_IXi8q1gF78.jbxd

Yara matches

Similarity

API ID: File$lstrcpy$FreeTask$Createlstrlen$AllocCloseHandleVirtual$CriticalModuleSectionlstrcatlstrcpynwsprintf$AttributesCharEnterGuidLeaveLowerNamePointerReadSizeValueWritelstrcmp
String ID: <html>$CLSID\%s$CLSID\%s\LocalServer32
API String ID: 1698267736-849937109
Opcode ID: 25238f9ca6a5fbde13af5161ae51c257d83cd5e0f96dad90b22e88b97c759fe5
Instruction ID: b04bd643a567e449f3159603c28dffaa2f8664afa6e38c1f0f0df6c024916f8c
Opcode Fuzzy Hash: 25238f9ca6a5fbde13af5161ae51c257d83cd5e0f96dad90b22e88b97c759fe5
Instruction Fuzzy Hash: A6410C72D0412EBACF11EBE0EC89EEEBB7CFF55300F1045A5B508A1091DA75AB549F60

Function 00528EC0 Relevance: 28.7, APIs: 19, Instructions: 193networkmemoryCOMMON

Download Yara Rule

APIs

VirtualAlloc.KERNEL32(00000000,00003000,00001000,00000040,FFFFFFFF), ref: 00528EDC

Part of subcall function 0052856C: VirtualAlloc.KERNEL32(00000000,00002061,00001000,00000040,00528EF6,?,00000050,00000000,00000000,00003000,00001000,00000040,FFFFFFFF), ref: 0052857A

socket.WS2_32(00000002,00000001,00000000), ref: 00528F1A
htons.WS2_32(?), ref: 00528F34
gethostbyname.WS2_32(?), ref: 00528F40
inet_addr.WS2_32(?), ref: 00528F55

Part of subcall function 0052D4E0: htonl.WS2_32(?), ref: 0052D505
Part of subcall function 0052D4E0: htonl.WS2_32(00000000), ref: 0052D51B

connect.WS2_32(?,?,00000010), ref: 00528F6F
send.WS2_32(?,?,?,00000000), ref: 00528F94
recv.WS2_32(?,?,00000300,00000000), ref: 00528FAF
send.WS2_32(?,?,?,00000000), ref: 0052900E
recv.WS2_32(?,?,00003000,00000000), ref: 00529029

Part of subcall function 00528500: lstrcpyA.KERNEL32(?,?,?,00000100,00000000), ref: 00528529

send.WS2_32(?,?,?,00000000), ref: 00529066
recv.WS2_32(?,?,00003000,00000000), ref: 00529078

Part of subcall function 0052D540: htonl.WS2_32(?), ref: 0052D558
Part of subcall function 0052D540: htonl.WS2_32(00000000), ref: 0052D578

VirtualFree.KERNEL32(?,00000000,00008000,?,00000000,?,?,00003000,00000000,?,?,?,00000000,?,00000004,0000001A), ref: 00529095
VirtualFree.KERNEL32(?,00000000,00008000,?,00000000,?,?,00003000,00000000,?,?,?,00000000,?,00000004,0000001A), ref: 005290B8
VirtualFree.KERNEL32(?,00000000,00008000,?,00000000,00008000,?,00000000,?,?,00003000,00000000,?,?,?,00000000), ref: 005290C7
closesocket.WS2_32(?), ref: 005290CF

Memory Dump Source

Source File: 00000000.00000002.2819002500.0000000000520000.00000040.00001000.00020000.00000000.sdmp, Offset: 00520000, based on PE: true

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_520000_IXi8q1gF78.jbxd

Yara matches

Similarity

API ID: Virtual$htonl$Freerecvsend$Alloc$closesocketconnectgethostbynamehtonsinet_addrlstrcpysocket
String ID:
API String ID: 2835327832-0
Opcode ID: c229a0d8f945ec794fe72a507de184e386ce4f7fd2f66216f58ccdd799b59fdf
Instruction ID: 58cf2a4290673760607d94bda40d85dac79e853922ae5cae3a03aa33ce66c0b3
Opcode Fuzzy Hash: c229a0d8f945ec794fe72a507de184e386ce4f7fd2f66216f58ccdd799b59fdf
Instruction Fuzzy Hash: 0F519531A0122ABBEF21ABE4EC0AFAD7F79BF42714F304115F6147B1E2DA7168109B54

Function 00526D90 Relevance: 26.4, APIs: 14, Strings: 1, Instructions: 133networkCOMMON

Download Yara Rule

APIs

gethostbyname.WS2_32(?), ref: 00526DA2
inet_addr.WS2_32(?), ref: 00526DB7
htons.WS2_32(?), ref: 00526DC2
socket.WS2_32(00000002,00000001,00000006), ref: 00526DD1
ioctlsocket.WS2_32(?,8004667E,?), ref: 00526DF3
setsockopt.WS2_32(?,0000FFFF,00000080,?,00000004), ref: 00526E17
connect.WS2_32(?,?,00000010), ref: 00526E25
WSAGetLastError.WS2_32(?,?,00000010,?,0000FFFF,00000080,?,00000004,?,8004667E,?,00000002,00000001,00000006,?,?), ref: 00526E33
select.WS2_32(00000000,00000000,?,00000000,?), ref: 00526E6C
select.WS2_32(00000000,00000000,?,00000000,?), ref: 00526EC3
send.WS2_32(?,?,000000FF,00000000), ref: 00526ED8
VirtualFree.KERNEL32(?,00000000,00008000,00000000,00000000,?,00000000,?,?,?,?,?,00000010,?,0000FFFF,00000080), ref: 00526F11
shutdown.WS2_32(?,00000002), ref: 00526F26
closesocket.WS2_32(?), ref: 00526F2E

Strings

\ntsvcs, xrefs: 00526D96

Memory Dump Source

Source File: 00000000.00000002.2819002500.0000000000520000.00000040.00001000.00020000.00000000.sdmp, Offset: 00520000, based on PE: true

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_520000_IXi8q1gF78.jbxd

Yara matches

Similarity

API ID: select$ErrorFreeLastVirtualclosesocketconnectgethostbynamehtonsinet_addrioctlsocketsendsetsockoptshutdownsocket
String ID: \ntsvcs
API String ID: 2499211422-3919542250
Opcode ID: 10e52e7e25e794aae0ac0d79782f35dc5a9a68567b18f7f203f678d3dbbb4ef5
Instruction ID: 51ffb17d55d484364dee1325b76b08c6d907967baa97668f3e60ae5769b3d05a
Opcode Fuzzy Hash: 10e52e7e25e794aae0ac0d79782f35dc5a9a68567b18f7f203f678d3dbbb4ef5
Instruction Fuzzy Hash: 01416F7190022AABDF10EBE4ED86FFEBEB8BF06314F104521F610B61D5DBB159448B95

Function 00521F00 Relevance: 24.6, APIs: 11, Strings: 3, Instructions: 97registrystringCOMMON

Download Yara Rule

APIs

RegOpenKeyExA.ADVAPI32(80000000,\CLSID,00000000,000F003F,?), ref: 00521F21
RegEnumKeyExA.ADVAPI32(?,00000000,?,00000258,00000000,00000000,00000000,00000000), ref: 00521F4C
wsprintfA.USER32 ref: 00521F6D
RegOpenKeyA.ADVAPI32(?,?,?), ref: 00521F83
RegQueryValueA.ADVAPI32(?,00000000,?,00000258), ref: 00521FA5
CharLowerA.USER32(?), ref: 00521FB5
strstr.MSVCRT ref: 00521FD0

Part of subcall function 00521BF0: OpenFileMappingA.KERNEL32(00000004,00000000,Global\1CKPUPP), ref: 00521C05
Part of subcall function 00521BF0: MapViewOfFile.KERNEL32(?,00000004,00000000,00000000,00000000), ref: 00521C22
Part of subcall function 00521BF0: VirtualAlloc.KERNEL32(00000000,?,00001000,00000040,?,00000004,00000000,00000000,00000000), ref: 00521C49
Part of subcall function 00521BF0: lstrlenA.KERNEL32(?,?,?,?,00000000,?,?,?,00000000,?,00000258), ref: 00521CDC
Part of subcall function 00521BF0: lstrcpyA.KERNEL32(?,?,?,00000000,00000000,?,?,?,?,00000000,?,?,?,00000000,?,00000258), ref: 00521CEE
Part of subcall function 00521BF0: VirtualFree.KERNEL32(?,00000000,00008000,?,?,?,?,?,?,?,00000000,00000000,?,?,?,?), ref: 00521D1C

Part of subcall function 00521E50: CreateFileA.KERNEL32(?,C0000000,00000000,00000000,00000003,00000080,00000000), ref: 00521E6D
Part of subcall function 00521E50: CreateFileMappingA.KERNEL32(?,00000000,00000004,00000000,00000000,00000000), ref: 00521E83
Part of subcall function 00521E50: MapViewOfFile.KERNEL32(?,000F001F,00000000,00000000,00000000,?,C0000000,00000000,00000000,00000003,00000080,00000000), ref: 00521E96
Part of subcall function 00521E50: GetFileSize.KERNEL32(?,00000000,?,000F001F,00000000,00000000,00000000,?,C0000000,00000000,00000000,00000003,00000080,00000000), ref: 00521EA2
Part of subcall function 00521E50: CheckSumMappedFile.IMAGEHLP(?,?,?,?,?,00000000,?,000F001F,00000000,00000000,00000000,?,C0000000,00000000,00000000,00000003), ref: 00521EC7
Part of subcall function 00521E50: FlushViewOfFile.KERNEL32(?,00000000,?,?,?,?,?,00000000,?,000F001F,00000000,00000000,00000000,?,C0000000,00000000), ref: 00521ED6
Part of subcall function 00521E50: UnmapViewOfFile.KERNEL32(?,?,00000000,?,?,?,?,?,00000000,?,000F001F,00000000,00000000,00000000,?,C0000000), ref: 00521EDE
Part of subcall function 00521E50: CloseHandle.KERNEL32(?,?,?,00000000,?,?,?,?,?,00000000,?,000F001F,00000000,00000000,00000000,?), ref: 00521EE6
Part of subcall function 00521E50: CloseHandle.KERNEL32(?,?,?,?,00000000,?,?,?,?,?,00000000,?,000F001F,00000000,00000000,00000000), ref: 00521EEE

lstrlenA.KERNEL32(?,?), ref: 00521FFD
RegSetValueA.ADVAPI32(?,00000000,00000001,?,00000000), ref: 00522011
RegCloseKey.ADVAPI32(?), ref: 00522021
RegCloseKey.ADVAPI32(?,?,00000001,?,00000258,00000000,00000000,00000000,00000000), ref: 0052202F

Strings

%s\InprocServer32, xrefs: 00521F61
.HS, xrefs: 00521FBF, 00521FC7, 00521FE3
\CLSID, xrefs: 00521F17

Memory Dump Source

Source File: 00000000.00000002.2819002500.0000000000520000.00000040.00001000.00020000.00000000.sdmp, Offset: 00520000, based on PE: true

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_520000_IXi8q1gF78.jbxd

Yara matches

Similarity

API ID: File$CloseView$Open$CreateHandleMappingValueVirtuallstrlen$AllocCharCheckEnumFlushFreeLowerMappedQuerySizeUnmaplstrcpystrstrwsprintf
String ID: %s\InprocServer32$.HS$\CLSID
API String ID: 2310014955-616143376
Opcode ID: 5a123b9319c46b690573ece7640778aa092161e34b5e08601469745c3df0fa7a
Instruction ID: d447671e4b2604f5ce52282d019d1a3f0298762682bf59fd3fba10334bbfe1c2
Opcode Fuzzy Hash: 5a123b9319c46b690573ece7640778aa092161e34b5e08601469745c3df0fa7a
Instruction Fuzzy Hash: CA316271945129BADF60E690DC49FEEBBBCFF55304F1001A2B208B1091EBB5AB449F64

Function 00528060 Relevance: 22.8, APIs: 10, Strings: 3, Instructions: 66stringsleepfileCOMMON

Download Yara Rule

APIs

GetModuleFileNameA.KERNEL32(00000000,?,0000012C,?,?,?,?,00527B73), ref: 0052807A
GetSystemDirectoryA.KERNEL32(?,00000258), ref: 0052809D
lstrcatA.KERNEL32(?,irdvxc.exe ,?,00000258,00000000,?,0000012C,?,?,?,?,00527B73), ref: 005280C1
CopyFileA.KERNEL32(?,?,00000000), ref: 005280D6
lstrcpyA.KERNEL32(?,?,?,irdvxc.exe ,?,00000258,00000000,?,0000012C,?,?,?,?,00527B73), ref: 005280E9
lstrcpyA.KERNEL32(?,?,?,?,?,irdvxc.exe ,?,00000258,00000000,?,0000012C,?,?,?,?,00527B73), ref: 005280FC
lstrcatA.KERNEL32(?,/installservice,?,?,?,?,?,irdvxc.exe ,?,00000258,00000000,?,0000012C), ref: 0052810D
lstrcatA.KERNEL32(?,/start,?,/installservice,?,?,?,?,?,irdvxc.exe ,?,00000258,00000000,?,0000012C), ref: 0052811E
Sleep.KERNEL32(000007D0,?,?,/start,?,/installservice,?,?,?,?,?,irdvxc.exe ,?,00000258,00000000,?), ref: 00528134
ExitProcess.KERNEL32(00000000,?,000007D0,?,?,/start,?,/installservice,?,?,?,?,?,irdvxc.exe ,?,00000258), ref: 00528147

Strings

irdvxc.exe , xrefs: 005280B5
/start, xrefs: 00528112
/installservice, xrefs: 00528101

Memory Dump Source

Source File: 00000000.00000002.2819002500.0000000000520000.00000040.00001000.00020000.00000000.sdmp, Offset: 00520000, based on PE: true

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_520000_IXi8q1gF78.jbxd

Yara matches

Similarity

API ID: lstrcat$Filelstrcpy$CopyDirectoryExitModuleNameProcessSleepSystem
String ID: /installservice$/start$irdvxc.exe
API String ID: 3309304594-2903410889
Opcode ID: fe02de1de372c6eb7d2d7e9117eed9b20f399063f057db2934c7331a255ccb27
Instruction ID: 6736f94c8dba886f254811bb900c46b7fb9d723d08903cfc933bacbd7627f646
Opcode Fuzzy Hash: fe02de1de372c6eb7d2d7e9117eed9b20f399063f057db2934c7331a255ccb27
Instruction Fuzzy Hash: 04210071901669A9DB20E6E09C4EFDA7B6CBF96701F4009D1B204B60C1DEB0A7448F65

Function 00522F20 Relevance: 21.2, APIs: 11, Strings: 1, Instructions: 180stringlibraryCOMMON

Download Yara Rule

APIs

memset.MSVCRT ref: 00522F3A
memset.MSVCRT ref: 00522F50
memset.MSVCRT ref: 00522F63
CoCreateGuid.OLE32(?), ref: 00522F87
CoCreateGuid.OLE32(?,?), ref: 00522F90
LoadLibraryA.KERNEL32(KERNEL32.dll,?,?), ref: 00522F9A
lstrlenA.KERNEL32(KERNEL32.dll,KERNEL32.dll,?,?), ref: 00522FD5
lstrcpyA.KERNEL32(?,KERNEL32.dll,KERNEL32.dll,KERNEL32.dll,?,?), ref: 00522FEC
lstrlenA.KERNEL32(KERNEL32.dll,?,KERNEL32.dll,KERNEL32.dll,KERNEL32.dll,?,?), ref: 00522FF6
lstrcpyA.KERNEL32(?,?,KERNEL32.dll,?,KERNEL32.dll,KERNEL32.dll,KERNEL32.dll,?,?), ref: 00523059
lstrlenA.KERNEL32(?,?,?,KERNEL32.dll,?,KERNEL32.dll,KERNEL32.dll,KERNEL32.dll,?,?), ref: 0052305F

Strings

KERNEL32.dll, xrefs: 00522F95, 00522FD0, 00522FE1, 00522FF1

Memory Dump Source

Source File: 00000000.00000002.2819002500.0000000000520000.00000040.00001000.00020000.00000000.sdmp, Offset: 00520000, based on PE: true

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_520000_IXi8q1gF78.jbxd

Yara matches

Similarity

API ID: lstrlenmemset$CreateGuidlstrcpy$LibraryLoad
String ID: KERNEL32.dll
API String ID: 3946968259-254546324
Opcode ID: 991895f1d616337bab15e5e57e4e96e5429d1faf21da79ce5d6bf2327c4650d4
Instruction ID: b02b32019cb2a89c09c44beed2fd4d39a20c0828e79eac27059e9d6e65ee441f
Opcode Fuzzy Hash: 991895f1d616337bab15e5e57e4e96e5429d1faf21da79ce5d6bf2327c4650d4
Instruction Fuzzy Hash: 827158729013299BCB61DF94DC84AADB7B9FF55314F1004A9E80967281EB397E86CF90

Function 00525CC6 Relevance: 19.6, APIs: 6, Strings: 5, Instructions: 377stringCOMMON

Download Yara Rule

APIs

inet_ntoa.WS2_32(?), ref: 00525CDF
lstrcpyA.KERNEL32(?,00000000,?,?,?,\ntsvcs), ref: 00525CEC

Part of subcall function 0052F9D0: GetCurrentProcessId.KERNEL32(00000000,?,?,?,?,\srvsvc), ref: 0052FA16
Part of subcall function 0052F9D0: VirtualAlloc.KERNEL32(00000000,00002000,00003000,00000004,00000000,?,?,?,?,\srvsvc), ref: 0052FA2F
Part of subcall function 0052F9D0: CharUpperA.USER32(?,?,?,?,?,00000000,00000060,?,0053A9E8,?,?,00000000,00000060,00000000,00002000,00003000), ref: 0052FAAB
Part of subcall function 0052F9D0: lstrlenA.KERNEL32(?,?,?,?,?,?,00000000,00000060,?,0053A9E8,?,?,00000000,00000060,00000000,00002000), ref: 0052FAB3
Part of subcall function 0052F9D0: closesocket.WS2_32(00000000), ref: 0052FB07
Part of subcall function 0052F9D0: VirtualFree.KERNEL32(00000000,00000000,00008000,00000000,00000000,00002000,00003000,00000004,00000000,?,?,?,?,\srvsvc), ref: 0052FB1C
Part of subcall function 0052F9D0: GetLastError.KERNEL32(00000000,00000000,00008000,00000000,00000000,00002000,00003000,00000004,00000000,?,?,?,?,\srvsvc), ref: 0052FB25

Strings

\ntsvcs, xrefs: 00525CCF
\\*SMBSERVER\IPC$, xrefs: 00525D49
password, xrefs: 00525CF3
\lsarpc, xrefs: 00525D68
Administrator, xrefs: 00525CF8

Memory Dump Source

Source File: 00000000.00000002.2819002500.0000000000520000.00000040.00001000.00020000.00000000.sdmp, Offset: 00520000, based on PE: true

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_520000_IXi8q1gF78.jbxd

Yara matches

Similarity

API ID: Virtual$AllocCharCurrentErrorFreeLastProcessUpperclosesocketinet_ntoalstrcpylstrlen
String ID: Administrator$\\*SMBSERVER\IPC$$\lsarpc$\ntsvcs$password
API String ID: 3545477113-3637742070
Opcode ID: 634b6b9eb611790a872abdf0e1d268815976acfcea5db53dc3420a4dbc0f4604
Instruction ID: 490982be0cba5e9b63bf968985e3dc4c28ca03d57d0e6dab5104f0d924e8ea88
Opcode Fuzzy Hash: 634b6b9eb611790a872abdf0e1d268815976acfcea5db53dc3420a4dbc0f4604
Instruction Fuzzy Hash: 45E16E72C00229ABEF359A60DC89FEDBB79BF05310F1086A6F219A61D1DB315A84DF50

Function 00526990 Relevance: 19.4, APIs: 7, Strings: 4, Instructions: 125stringCOMMON

Download Yara Rule

APIs

Part of subcall function 0052F100: lstrlenA.KERNEL32(?,00000000,?,0000031A,00000000,?,?,\ntsvcs), ref: 0052F147
Part of subcall function 0052F100: htonl.WS2_32(00000075), ref: 0052F1E8

lstrcpyA.KERNEL32(?,c:\,?,\\*SMBSERVER\IPC$,?,?,?,\ntsvcs,?,005268F1,?,?,C:\Users\user\Desktop\IXi8q1gF78.exe,?,00000000,00000003), ref: 005269C7

Part of subcall function 00526C50: wsprintfA.USER32 ref: 00526C70

lstrcpyA.KERNEL32(?,d:\,?,?,00534119,?,?,c:\,?,\\*SMBSERVER\IPC$,?,?,?,\ntsvcs,?,005268F1), ref: 005269F6
lstrlenA.KERNEL32(?,?,?,00534119,?,?,c:\,?,\\*SMBSERVER\IPC$,?,?,?,\ntsvcs,?,005268F1,?), ref: 00526A25
lstrcpyA.KERNEL32(?,?,?,?,?,00534119,?,?,c:\,?,\\*SMBSERVER\IPC$,?,?,?,\ntsvcs), ref: 00526A3E
lstrlenA.KERNEL32(?,?,?,?,?,00534119,?,?,?,?,?,?,?,00534119,?,?), ref: 00526ACA
lstrcpyA.KERNEL32(?,?,?,?,?,?,?,00534119,?,?,?,?,?,?,?,00534119), ref: 00526AEA
lstrcatA.KERNEL32(?,?,?,?,?,?,?,?,?,00534119,?,?,?,?,?,?), ref: 00526AF7

Strings

d:\, xrefs: 005269EA
\ntsvcs, xrefs: 00526999
c:\, xrefs: 005269BB
\\*SMBSERVER\IPC$, xrefs: 005269A2

Memory Dump Source

Source File: 00000000.00000002.2819002500.0000000000520000.00000040.00001000.00020000.00000000.sdmp, Offset: 00520000, based on PE: true

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_520000_IXi8q1gF78.jbxd

Yara matches

Similarity

API ID: lstrcpy$lstrlen$htonllstrcatwsprintf
String ID: \\*SMBSERVER\IPC$$\ntsvcs$c:\$d:\
API String ID: 463789060-3727734714
Opcode ID: 753c7c6ebdc50c417054c6b6d17c4c3e666653e53e52c25d3c5711a590b3ac4b
Instruction ID: c3103ac4f6faeca664eb9cbe7f789173ca8c1e289758b70afe89a69b00d51e0e
Opcode Fuzzy Hash: 753c7c6ebdc50c417054c6b6d17c4c3e666653e53e52c25d3c5711a590b3ac4b
Instruction Fuzzy Hash: 51417F72901129AADF20DBA0DC99EDE7FBDBF96310F1045A6F219F20D1DB309A958F50

Function 00521990 Relevance: 17.6, APIs: 8, Strings: 2, Instructions: 72synchronizationCOMMON

Download Yara Rule

APIs

CreateMutexA.KERNEL32(00000000,00000001,jhdheruhfrthkgjhtjkghjk5trh,?,?,?,?,0052189B), ref: 005219A5
GetLastError.KERNEL32(00000000,00000001,jhdheruhfrthkgjhtjkghjk5trh,?,?,?,?,0052189B), ref: 005219AF
CloseHandle.KERNEL32(00000000,00000001,jhdheruhfrthkgjhtjkghjk5trh,?,?,?,?,0052189B), ref: 005219C2
GetModuleFileNameA.KERNEL32(?,0000012C,00000000,00000001,jhdheruhfrthkgjhtjkghjk5trh,?,?,?,?,0052189B), ref: 005219D9
GetSystemDirectoryA.KERNEL32(?,0000012C), ref: 005219EA
wsprintfA.USER32 ref: 00521A15
VirtualFree.KERNEL32(?,00000000,00008000,?,?,?,?,?,?), ref: 00521A8B
CloseHandle.KERNEL32(00000000,00000001,jhdheruhfrthkgjhtjkghjk5trh,?,?,?,?,0052189B), ref: 00521A96

Strings

jhdheruhfrthkgjhtjkghjk5trh, xrefs: 0052199C
%sirdvxc.exe, xrefs: 00521A09

Memory Dump Source

Source File: 00000000.00000002.2819002500.0000000000520000.00000040.00001000.00020000.00000000.sdmp, Offset: 00520000, based on PE: true

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_520000_IXi8q1gF78.jbxd

Yara matches

Similarity

API ID: CloseHandle$CreateDirectoryErrorFileFreeLastModuleMutexNameSystemVirtualwsprintf
String ID: %sirdvxc.exe$jhdheruhfrthkgjhtjkghjk5trh
API String ID: 3243624013-1590512144
Opcode ID: 17cfb5e89e4d0098e74bd4dc4be9c4c18a9a6cecc6b8c71f669a9a9b7e9dfe25
Instruction ID: a67348611ed7eeeb5a086c52d830cd9af951d513c9f091bbca502b6067e3c0dd
Opcode Fuzzy Hash: 17cfb5e89e4d0098e74bd4dc4be9c4c18a9a6cecc6b8c71f669a9a9b7e9dfe25
Instruction Fuzzy Hash: A4219571901729AADF21EBA0EC4AFDA7B7CBF51700F5045D1F204A20E1EF71AB948B94

Function 0052DE30 Relevance: 17.6, APIs: 8, Strings: 2, Instructions: 72synchronizationCOMMON

Download Yara Rule

APIs

CreateMutexA.KERNEL32(00000000,00000001,jhdheruhfrthkgjhtjkghjk5trh), ref: 0052DE45
GetLastError.KERNEL32(00000000,00000001,jhdheruhfrthkgjhtjkghjk5trh), ref: 0052DE4F
CloseHandle.KERNEL32(00000000,00000001,jhdheruhfrthkgjhtjkghjk5trh), ref: 0052DE62
GetModuleFileNameA.KERNEL32(?,0000012C,00000000,00000001,jhdheruhfrthkgjhtjkghjk5trh), ref: 0052DE79
GetSystemDirectoryA.KERNEL32(?,00000104), ref: 0052DE8A
wsprintfA.USER32 ref: 0052DEB5
VirtualFree.KERNEL32(?,00000000,00008000,?,?,?,?,?,?), ref: 0052DF2B
CloseHandle.KERNEL32(00000000,00000001,jhdheruhfrthkgjhtjkghjk5trh), ref: 0052DF36

Strings

jhdheruhfrthkgjhtjkghjk5trh, xrefs: 0052DE3C
%sirdvxc.exe, xrefs: 0052DEA9

Memory Dump Source

Source File: 00000000.00000002.2819002500.0000000000520000.00000040.00001000.00020000.00000000.sdmp, Offset: 00520000, based on PE: true

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_520000_IXi8q1gF78.jbxd

Yara matches

Similarity

API ID: CloseHandle$CreateDirectoryErrorFileFreeLastModuleMutexNameSystemVirtualwsprintf
String ID: %sirdvxc.exe$jhdheruhfrthkgjhtjkghjk5trh
API String ID: 3243624013-1590512144
Opcode ID: 0821f97703d465621eb171cb5778974812a93ebc461ccc3829c8f7a86a1d755b
Instruction ID: b4e7ce79b62d2282ecf64a74b56b4aa2d714ea6de732609233b710c9711d4e4e
Opcode Fuzzy Hash: 0821f97703d465621eb171cb5778974812a93ebc461ccc3829c8f7a86a1d755b
Instruction Fuzzy Hash: 5F216771800229ABDF61EBA0EC45FD97B7DBF52700F5041D1F104A60D1EFB4AA948F64

Function 00521790 Relevance: 17.6, APIs: 6, Strings: 4, Instructions: 68libraryloaderCOMMON

Download Yara Rule

APIs

GetModuleHandleA.KERNEL32(advapi32.dll,00000000,00000000,00000000), ref: 0052179E
GetProcAddress.KERNEL32(00000000,AdjustTokenPrivileges), ref: 005217AB
GetProcAddress.KERNEL32(00000000,LookupPrivilegeValueA), ref: 005217C3
GetProcAddress.KERNEL32(00000000,OpenProcessToken), ref: 005217D7
GetCurrentProcess.KERNEL32 ref: 005217FF
CloseHandle.KERNEL32(00000000), ref: 0052183E

Strings

OpenProcessToken, xrefs: 005217D1
AdjustTokenPrivileges, xrefs: 005217A5
LookupPrivilegeValueA, xrefs: 005217BD
advapi32.dll, xrefs: 00521799

Memory Dump Source

Source File: 00000000.00000002.2819002500.0000000000520000.00000040.00001000.00020000.00000000.sdmp, Offset: 00520000, based on PE: true

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_520000_IXi8q1gF78.jbxd

Yara matches

Similarity

API ID: AddressProc$Handle$CloseCurrentModuleProcess
String ID: AdjustTokenPrivileges$LookupPrivilegeValueA$OpenProcessToken$advapi32.dll
API String ID: 594060487-4270423970
Opcode ID: 5266919477b2ac8f2395557dabeaa948a4c01eb86f7a5fa3d7c375217127f867
Instruction ID: 2e0bd1a1d41f48c5e2a7eb42689b1d384efb2c44c6cbe7f6061b4f3b79fbdfa6
Opcode Fuzzy Hash: 5266919477b2ac8f2395557dabeaa948a4c01eb86f7a5fa3d7c375217127f867
Instruction Fuzzy Hash: E31160716006657ADB60ABE4BC89CAFBEACFFE2B00B144525B501D1199EF788E05CB70

Function 00521170 Relevance: 15.9, APIs: 4, Strings: 5, Instructions: 114COMMON

Download Yara Rule

APIs

Part of subcall function 00521720: GetModuleHandleA.KERNEL32(advapi32.dll,?,00000000,00000004), ref: 00521737

GetModuleFileNameA.KERNEL32(00000000,?,00000200,?,?,?,?,00527B08,00000000,00000000,00000000,00000000,0053BCB0,0053B4A2,0053B48A,0053B472), ref: 00521196
wsprintfA.USER32 ref: 005211B2
GetLastError.KERNEL32 ref: 0052126F
GetLastError.KERNEL32(?,?,?,?,?,?,?,?,?,?,SeDebugPrivilege), ref: 00521304

Strings

SeDebugPrivilege, xrefs: 00521274
MSDisk, xrefs: 005211F3, 0052123B
"%s" /service, xrefs: 005211A6
Network helper Service, xrefs: 005211EE
Network service for disk management requests, xrefs: 00521251

Memory Dump Source

Source File: 00000000.00000002.2819002500.0000000000520000.00000040.00001000.00020000.00000000.sdmp, Offset: 00520000, based on PE: true

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_520000_IXi8q1gF78.jbxd

Yara matches

Similarity

API ID: ErrorLastModule$FileHandleNamewsprintf
String ID: "%s" /service$MSDisk$Network helper Service$Network service for disk management requests$SeDebugPrivilege
API String ID: 585799429-1939460879
Opcode ID: b6122bb10a5b804cbb4946951905104bb94b211f0111775231ae354d45b976f4
Instruction ID: 5143dc5818123e58c2d66dce0025e3fc7afcc7f67935a1191b69f90e23687c15
Opcode Fuzzy Hash: b6122bb10a5b804cbb4946951905104bb94b211f0111775231ae354d45b976f4
Instruction Fuzzy Hash: F141A6B5601628AADB209B50DC8DFEF7FBCFF96704F040494F605E2182D7745A898F69

Function 00521BF0 Relevance: 14.1, APIs: 7, Strings: 1, Instructions: 93filestringmemoryCOMMON

Download Yara Rule

APIs

OpenFileMappingA.KERNEL32(00000004,00000000,Global\1CKPUPP), ref: 00521C05
MapViewOfFile.KERNEL32(?,00000004,00000000,00000000,00000000), ref: 00521C22
VirtualAlloc.KERNEL32(00000000,?,00001000,00000040,?,00000004,00000000,00000000,00000000), ref: 00521C49
GetModuleFileNameA.KERNEL32(00000000,?,00000258), ref: 00521C76
lstrlenA.KERNEL32(?,?,?,?,00000000,?,?,?,00000000,?,00000258), ref: 00521CDC
lstrcpyA.KERNEL32(?,?,?,00000000,00000000,?,?,?,?,00000000,?,?,?,00000000,?,00000258), ref: 00521CEE
VirtualFree.KERNEL32(?,00000000,00008000,?,?,?,?,?,?,?,00000000,00000000,?,?,?,?), ref: 00521D1C

Strings

Global\1CKPUPP, xrefs: 00521BFC

Memory Dump Source

Source File: 00000000.00000002.2819002500.0000000000520000.00000040.00001000.00020000.00000000.sdmp, Offset: 00520000, based on PE: true

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_520000_IXi8q1gF78.jbxd

Yara matches

Similarity

API ID: File$Virtual$AllocFreeMappingModuleNameOpenViewlstrcpylstrlen
String ID: Global\1CKPUPP
API String ID: 4097676156-1834102913
Opcode ID: 3463d2821bfd83ea62eedf497c146463db1dac4265663d2fb021f329e126579b
Instruction ID: 5d3ff593858e81933b3cdfe91211ad62719f9443a2e72b4c9a8d68a9816e9922
Opcode Fuzzy Hash: 3463d2821bfd83ea62eedf497c146463db1dac4265663d2fb021f329e126579b
Instruction Fuzzy Hash: EF31B4B1940725AAEB61AB50DC46FAABB79FF91B00F100094F705761D2DB78ED408F5C

Function 00521640 Relevance: 14.0, APIs: 5, Strings: 3, Instructions: 44registrystringCOMMON

Download Yara Rule

APIs

GetModuleFileNameA.KERNEL32(00000000,?,00000200,?,?,?,?,00527B0F,00000000,00000000,00000000,00000000,0053BCB0,0053B4A2,0053B48A,0053B472), ref: 0052165B
lstrcatA.KERNEL32(?, /service,00000000,?,00000200,?,?,?,?,00527B0F,00000000,00000000,00000000,00000000,0053BCB0,0053B4A2), ref: 00521670
RegCreateKeyA.ADVAPI32(80000002,SOFTWARE\Microsoft\Windows\CurrentVersion\RunServices,?), ref: 00521686
RegSetValueExA.ADVAPI32(?,MSDisk,00000000,00000001,?,00000104,80000002,SOFTWARE\Microsoft\Windows\CurrentVersion\RunServices,?,?, /service,00000000,?,00000200), ref: 005216A9
RegCloseKey.ADVAPI32(?,80000002,SOFTWARE\Microsoft\Windows\CurrentVersion\RunServices,?,?, /service,00000000,?,00000200,?,?,?,?,00527B0F,00000000,00000000), ref: 005216B9

Strings

MSDisk, xrefs: 0052169E
/service, xrefs: 00521664
SOFTWARE\Microsoft\Windows\CurrentVersion\RunServices, xrefs: 0052167C

Memory Dump Source

Source File: 00000000.00000002.2819002500.0000000000520000.00000040.00001000.00020000.00000000.sdmp, Offset: 00520000, based on PE: true

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_520000_IXi8q1gF78.jbxd

Yara matches

Similarity

API ID: CloseCreateFileModuleNameValuelstrcat
String ID: /service$MSDisk$SOFTWARE\Microsoft\Windows\CurrentVersion\RunServices
API String ID: 169220164-3412843157
Opcode ID: de875d89959bf01eba310f17402d38ef32d01ce69c0b2cc70d12b2f2dd200733
Instruction ID: d6a06e97a4d8701cd2d97e2cc82cfc8d664fc1bea73a6bd7ce4127dbecae4e82
Opcode Fuzzy Hash: de875d89959bf01eba310f17402d38ef32d01ce69c0b2cc70d12b2f2dd200733
Instruction Fuzzy Hash: CBF0C87160072526EE30B581AD8FEBFAE2DFFD2B10F180551B614F10C3EA706A448964

Function 005215E0 Relevance: 14.0, APIs: 6, Strings: 2, Instructions: 34libraryloaderCOMMON

Download Yara Rule

APIs

GetModuleHandleA.KERNEL32(kernel32.dll,?,?,?,00527AC6,00000000,00000000,00000000,00000000,0053BCB0,0053B4A2,0053B48A,0053B472,0053B45A,0053B442,00008003), ref: 005215EA
GetProcAddress.KERNEL32(00000000,RegisterServiceProcess), ref: 005215FB
GetCurrentProcessId.KERNEL32(00000000,RegisterServiceProcess,kernel32.dll,?,?,?,00527AC6,00000000,00000000,00000000,00000000,0053BCB0,0053B4A2,0053B48A,0053B472,0053B45A), ref: 00521606
GetCurrentProcessId.KERNEL32(kernel32.dll,?,?,?,00527AC6,00000000,00000000,00000000,00000000,0053BCB0,0053B4A2,0053B48A,0053B472,0053B45A,0053B442,00008003), ref: 00521619
GetCurrentProcess.KERNEL32(kernel32.dll,?,?,?,00527AC6,00000000,00000000,00000000,00000000,0053BCB0,0053B4A2,0053B48A,0053B472,0053B45A,0053B442,00008003), ref: 00521622
TerminateProcess.KERNEL32(00000000,00000000,kernel32.dll,?,?,?,00527AC6,00000000,00000000,00000000,00000000,0053BCB0,0053B4A2,0053B48A,0053B472,0053B45A), ref: 00521629

Strings

kernel32.dll, xrefs: 005215E5
RegisterServiceProcess, xrefs: 005215F5

Memory Dump Source

Source File: 00000000.00000002.2819002500.0000000000520000.00000040.00001000.00020000.00000000.sdmp, Offset: 00520000, based on PE: true

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_520000_IXi8q1gF78.jbxd

Yara matches

Similarity

API ID: Process$Current$AddressHandleModuleProcTerminate
String ID: RegisterServiceProcess$kernel32.dll
API String ID: 2793901505-4020013434
Opcode ID: 319de2d3533d416c7b10002f501e11479a65fabb878c6af4e3c171169f311b5d
Instruction ID: 56d9d7586c851a88b6e08609c31fdf9efa446a01657041587f8bd6b4bbc81f74
Opcode Fuzzy Hash: 319de2d3533d416c7b10002f501e11479a65fabb878c6af4e3c171169f311b5d
Instruction Fuzzy Hash: 26E0DF22A02A72608C31B2F93C4FC7F8D0CBEF3F1071A0E05B021AB8C5DC65584088B9

Function 00521E50 Relevance: 13.6, APIs: 9, Instructions: 65fileCOMMON

Download Yara Rule

APIs

CreateFileA.KERNEL32(?,C0000000,00000000,00000000,00000003,00000080,00000000), ref: 00521E6D
CreateFileMappingA.KERNEL32(?,00000000,00000004,00000000,00000000,00000000), ref: 00521E83
MapViewOfFile.KERNEL32(?,000F001F,00000000,00000000,00000000,?,C0000000,00000000,00000000,00000003,00000080,00000000), ref: 00521E96
GetFileSize.KERNEL32(?,00000000,?,000F001F,00000000,00000000,00000000,?,C0000000,00000000,00000000,00000003,00000080,00000000), ref: 00521EA2
CheckSumMappedFile.IMAGEHLP(?,?,?,?,?,00000000,?,000F001F,00000000,00000000,00000000,?,C0000000,00000000,00000000,00000003), ref: 00521EC7
FlushViewOfFile.KERNEL32(?,00000000,?,?,?,?,?,00000000,?,000F001F,00000000,00000000,00000000,?,C0000000,00000000), ref: 00521ED6
UnmapViewOfFile.KERNEL32(?,?,00000000,?,?,?,?,?,00000000,?,000F001F,00000000,00000000,00000000,?,C0000000), ref: 00521EDE
CloseHandle.KERNEL32(?,?,?,00000000,?,?,?,?,?,00000000,?,000F001F,00000000,00000000,00000000,?), ref: 00521EE6
CloseHandle.KERNEL32(?,?,?,?,00000000,?,?,?,?,?,00000000,?,000F001F,00000000,00000000,00000000), ref: 00521EEE

Memory Dump Source

Source File: 00000000.00000002.2819002500.0000000000520000.00000040.00001000.00020000.00000000.sdmp, Offset: 00520000, based on PE: true

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_520000_IXi8q1gF78.jbxd

Yara matches

Similarity

API ID: File$View$CloseCreateHandle$CheckFlushMappedMappingSizeUnmap
String ID:
API String ID: 4174232114-0
Opcode ID: 3ec50b1cfea55e346e8f71facefd9e7c67c6007e971a286984069b9857888e20
Instruction ID: ead4ae763087fddd513929e13a15aed4d39e25a03d0eaa9866831ddb9b91eb9b
Opcode Fuzzy Hash: 3ec50b1cfea55e346e8f71facefd9e7c67c6007e971a286984069b9857888e20
Instruction Fuzzy Hash: E4112C71C01159BACF20AB96DC0ADAFBFB9FFC2B10F10416AB510721A1DB711A10DA64

Function 00521BE6 Relevance: 12.3, APIs: 6, Strings: 1, Instructions: 83filestringmemoryCOMMON

Download Yara Rule

APIs

OpenFileMappingA.KERNEL32(00000004,00000000,Global\1CKPUPP), ref: 00521C05
MapViewOfFile.KERNEL32(?,00000004,00000000,00000000,00000000), ref: 00521C22
VirtualAlloc.KERNEL32(00000000,?,00001000,00000040,?,00000004,00000000,00000000,00000000), ref: 00521C49
GetModuleFileNameA.KERNEL32(00000000,?,00000258), ref: 00521C76
lstrlenA.KERNEL32(?,?,?,?,00000000,?,?,?,00000000,?,00000258), ref: 00521CDC
lstrcpyA.KERNEL32(?,?,?,00000000,00000000,?,?,?,?,00000000,?,?,?,00000000,?,00000258), ref: 00521CEE
VirtualFree.KERNEL32(?,00000000,00008000,?,?,?,?,?,?,?,00000000,00000000,?,?,?,?), ref: 00521D1C

Strings

Global\1CKPUPP, xrefs: 00521BFC

Memory Dump Source

Source File: 00000000.00000002.2819002500.0000000000520000.00000040.00001000.00020000.00000000.sdmp, Offset: 00520000, based on PE: true

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_520000_IXi8q1gF78.jbxd

Yara matches

Similarity

API ID: File$Virtual$AllocFreeMappingModuleNameOpenViewlstrcpylstrlen
String ID: Global\1CKPUPP
API String ID: 4097676156-1834102913
Opcode ID: 000c4f8c715b4bb6a04530d92cc757ecaeb8ca8c9931a75092ca9b7e7835dd41
Instruction ID: 8901e1560be5161a4a35338218192d373fb1f7e0bb17e63a0ed134c8b7750631
Opcode Fuzzy Hash: 000c4f8c715b4bb6a04530d92cc757ecaeb8ca8c9931a75092ca9b7e7835dd41
Instruction Fuzzy Hash: 1531B1B1940625AFEB21AB50DC82FAABB79FF91B00F100094F705761D2DB74AD508F5C

Function 00522781 Relevance: 12.1, APIs: 8, Instructions: 74networkCOMMON

Download Yara Rule

APIs

gethostbyname.WS2_32(?), ref: 0052279E
socket.WS2_32(00000002,00000001,00000000), ref: 005227BA
ioctlsocket.WS2_32(?,8004667E,00000001), ref: 005227DE
htons.WS2_32(00000050), ref: 005227F1
connect.WS2_32(?,00000002,00000010), ref: 00522803
WSAGetLastError.WS2_32(?,00000002,00000010,00000050,?,8004667E,00000001,00000002,00000001,00000000,?), ref: 0052280D
select.WS2_32(00000000,00000000,00000001,00000000,00000006), ref: 0052283B
closesocket.WS2_32(?), ref: 00522850

Memory Dump Source

Source File: 00000000.00000002.2819002500.0000000000520000.00000040.00001000.00020000.00000000.sdmp, Offset: 00520000, based on PE: true

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_520000_IXi8q1gF78.jbxd

Yara matches

Similarity

API ID: ErrorLastclosesocketconnectgethostbynamehtonsioctlsocketselectsocket
String ID:
API String ID: 872677982-0
Opcode ID: 99d25f534f4e44357f6f232ac0d9f55ef084637ef5221d9a55de07caf6e39e69
Instruction ID: b4a66855e662326630faa86077ffccff745b9e4a68c80fcabaa9916200c3333a
Opcode Fuzzy Hash: 99d25f534f4e44357f6f232ac0d9f55ef084637ef5221d9a55de07caf6e39e69
Instruction Fuzzy Hash: 0A215175900219ABDF20DB94DC45AEEBFB8FF86324F100115F524A61E1E7719A50DBA1

Function 00522790 Relevance: 12.1, APIs: 8, Instructions: 72networkCOMMON

Download Yara Rule

APIs

gethostbyname.WS2_32(?), ref: 0052279E
socket.WS2_32(00000002,00000001,00000000), ref: 005227BA
ioctlsocket.WS2_32(?,8004667E,00000001), ref: 005227DE
htons.WS2_32(00000050), ref: 005227F1
connect.WS2_32(?,00000002,00000010), ref: 00522803
WSAGetLastError.WS2_32(?,00000002,00000010,00000050,?,8004667E,00000001,00000002,00000001,00000000,?), ref: 0052280D
select.WS2_32(00000000,00000000,00000001,00000000,00000006), ref: 0052283B
closesocket.WS2_32(?), ref: 00522850

Memory Dump Source

Source File: 00000000.00000002.2819002500.0000000000520000.00000040.00001000.00020000.00000000.sdmp, Offset: 00520000, based on PE: true

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_520000_IXi8q1gF78.jbxd

Yara matches

Similarity

API ID: ErrorLastclosesocketconnectgethostbynamehtonsioctlsocketselectsocket
String ID:
API String ID: 872677982-0
Opcode ID: 5a4a96b957a35c97e3bb983a0b1724f60db5e1fe8f8ee8d14d692bf4c1c2294b
Instruction ID: fd8ced1b245dd6046e29bc88e8b7d3ce13a626f4e32827ed558bef0f4bf0d44c
Opcode Fuzzy Hash: 5a4a96b957a35c97e3bb983a0b1724f60db5e1fe8f8ee8d14d692bf4c1c2294b
Instruction Fuzzy Hash: 44216275900119ABDF20DB94DC45AEEBFB8FF86324F100115F510A61E1E7719A40DBA1

Function 005286F9 Relevance: 10.6, APIs: 5, Strings: 1, Instructions: 82networkstringCOMMON

Download Yara Rule

APIs

Part of subcall function 00528EC0: VirtualAlloc.KERNEL32(00000000,00003000,00001000,00000040,FFFFFFFF), ref: 00528EDC
Part of subcall function 00528EC0: socket.WS2_32(00000002,00000001,00000000), ref: 00528F1A
Part of subcall function 00528EC0: htons.WS2_32(?), ref: 00528F34
Part of subcall function 00528EC0: gethostbyname.WS2_32(?), ref: 00528F40
Part of subcall function 00528EC0: connect.WS2_32(?,?,00000010), ref: 00528F6F
Part of subcall function 00528EC0: send.WS2_32(?,?,?,00000000), ref: 00528F94
Part of subcall function 00528EC0: recv.WS2_32(?,?,00000300,00000000), ref: 00528FAF

lstrcpyA.KERNEL32(00538A84,08qWjb+kgRxkUt3PeOyKqWFvsW0cp8XUcxxq6y43hcs+PRiHSQX+slLM9J4f7-BmzTyAa0iKRhYeNP5aZDaZhBL2,01000000,?,?,?,?), ref: 0052874D

Part of subcall function 0052D4E0: htonl.WS2_32(?), ref: 0052D505
Part of subcall function 0052D4E0: htonl.WS2_32(00000000), ref: 0052D51B

send.WS2_32(?,?,?,00000000), ref: 005287C1
recv.WS2_32(?,?,00000258,00000000), ref: 005287DA

Part of subcall function 0052D540: htonl.WS2_32(?), ref: 0052D558
Part of subcall function 0052D540: htonl.WS2_32(00000000), ref: 0052D578

closesocket.WS2_32(?), ref: 00528808
VirtualFree.KERNEL32(?,00000000,00008000,?,?,00000000,?,?,00000258,00000000,?,?,?,00000000,?,000000F1), ref: 0052881A

Strings

08qWjb+kgRxkUt3PeOyKqWFvsW0cp8XUcxxq6y43hcs+PRiHSQX+slLM9J4f7-BmzTyAa0iKRhYeNP5aZDaZhBL2, xrefs: 00528743

Memory Dump Source

Source File: 00000000.00000002.2819002500.0000000000520000.00000040.00001000.00020000.00000000.sdmp, Offset: 00520000, based on PE: true

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_520000_IXi8q1gF78.jbxd

Yara matches

Similarity

API ID: htonl$Virtualrecvsend$AllocFreeclosesocketconnectgethostbynamehtonslstrcpysocket
String ID: 08qWjb+kgRxkUt3PeOyKqWFvsW0cp8XUcxxq6y43hcs+PRiHSQX+slLM9J4f7-BmzTyAa0iKRhYeNP5aZDaZhBL2
API String ID: 1428826756-161492147
Opcode ID: 3f69e3bcaa953f4c998d1fd1ed5df82720d9661461943eaf157fd5ae2e3cd407
Instruction ID: bc54aece6eca0b0d255bfc53664a499daf2f011ac90aecabde8a2cfba867ef84
Opcode Fuzzy Hash: 3f69e3bcaa953f4c998d1fd1ed5df82720d9661461943eaf157fd5ae2e3cd407
Instruction Fuzzy Hash: F121D1719413297EEF71AA909C8AFFA7B6CFF85710F204591F614A50D0DFB09A808A29

Function 00528700 Relevance: 10.6, APIs: 5, Strings: 1, Instructions: 82networkstringCOMMON

Download Yara Rule

APIs

Part of subcall function 00528EC0: VirtualAlloc.KERNEL32(00000000,00003000,00001000,00000040,FFFFFFFF), ref: 00528EDC
Part of subcall function 00528EC0: socket.WS2_32(00000002,00000001,00000000), ref: 00528F1A
Part of subcall function 00528EC0: htons.WS2_32(?), ref: 00528F34
Part of subcall function 00528EC0: gethostbyname.WS2_32(?), ref: 00528F40
Part of subcall function 00528EC0: connect.WS2_32(?,?,00000010), ref: 00528F6F
Part of subcall function 00528EC0: send.WS2_32(?,?,?,00000000), ref: 00528F94
Part of subcall function 00528EC0: recv.WS2_32(?,?,00000300,00000000), ref: 00528FAF

lstrcpyA.KERNEL32(00538A84,08qWjb+kgRxkUt3PeOyKqWFvsW0cp8XUcxxq6y43hcs+PRiHSQX+slLM9J4f7-BmzTyAa0iKRhYeNP5aZDaZhBL2,01000000,?,?,?,?), ref: 0052874D

Part of subcall function 0052D4E0: htonl.WS2_32(?), ref: 0052D505
Part of subcall function 0052D4E0: htonl.WS2_32(00000000), ref: 0052D51B

send.WS2_32(?,?,?,00000000), ref: 005287C1
recv.WS2_32(?,?,00000258,00000000), ref: 005287DA

Part of subcall function 0052D540: htonl.WS2_32(?), ref: 0052D558
Part of subcall function 0052D540: htonl.WS2_32(00000000), ref: 0052D578

closesocket.WS2_32(?), ref: 00528808
VirtualFree.KERNEL32(?,00000000,00008000,?,?,00000000,?,?,00000258,00000000,?,?,?,00000000,?,000000F1), ref: 0052881A

Strings

08qWjb+kgRxkUt3PeOyKqWFvsW0cp8XUcxxq6y43hcs+PRiHSQX+slLM9J4f7-BmzTyAa0iKRhYeNP5aZDaZhBL2, xrefs: 00528743

Memory Dump Source

Source File: 00000000.00000002.2819002500.0000000000520000.00000040.00001000.00020000.00000000.sdmp, Offset: 00520000, based on PE: true

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_520000_IXi8q1gF78.jbxd

Yara matches

Similarity

API ID: htonl$Virtualrecvsend$AllocFreeclosesocketconnectgethostbynamehtonslstrcpysocket
String ID: 08qWjb+kgRxkUt3PeOyKqWFvsW0cp8XUcxxq6y43hcs+PRiHSQX+slLM9J4f7-BmzTyAa0iKRhYeNP5aZDaZhBL2
API String ID: 1428826756-161492147
Opcode ID: 4ce4fc012e59d8cdced0ca2115584d6b7f222b4fecd6938d590fa9be043050fb
Instruction ID: 4eb3128807a794873fedbe04de6268d5c73316d12523fc00718ac31fb8b67782
Opcode Fuzzy Hash: 4ce4fc012e59d8cdced0ca2115584d6b7f222b4fecd6938d590fa9be043050fb
Instruction Fuzzy Hash: 1721E5715413297EEF71A6909C8AFFA7F6CFF45710F200291F614B50D0DFB09A808A28

Function 0052D9D0 Relevance: 10.6, APIs: 7, Instructions: 69registrystringCOMMON

Download Yara Rule

APIs

Part of subcall function 0052DDD6: GetModuleFileNameA.KERNEL32(0000012C,00000000,0000012C,?,?,?,0052D9E1), ref: 0052DDFC

wsprintfA.USER32 ref: 0052DA0D
RegCreateKeyExA.ADVAPI32(?,?,00000000,00000000,00000000,00000000,00000000,?,?), ref: 0052DA30
RegCloseKey.ADVAPI32(?,?,?,00000000,00000000,00000000,00000000,00000000,?,?), ref: 0052DA38
RegOpenKeyA.ADVAPI32(?,?,?), ref: 0052DA4A
lstrlenA.KERNEL32(?,?,?,?,?,?,?,00000000,00000000,00000000,00000000,00000000,?,?), ref: 0052DA55
RegSetValueExA.ADVAPI32(?,?,00000000,00000001,?,00000000,?,?,?,?,?,?,?,00000000,00000000,00000000), ref: 0052DA69
RegCloseKey.ADVAPI32(?,?,?,00000000,00000001,?,00000000,?,?,?,?,?,?,?,00000000,00000000), ref: 0052DA71

Memory Dump Source

Source File: 00000000.00000002.2819002500.0000000000520000.00000040.00001000.00020000.00000000.sdmp, Offset: 00520000, based on PE: true

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_520000_IXi8q1gF78.jbxd

Yara matches

Similarity

API ID: Close$CreateFileModuleNameOpenValuelstrlenwsprintf
String ID:
API String ID: 722868360-0
Opcode ID: 4d53ff5aba5b5075a46ca1720c773c46c5c4187fa9b059312ca720cf9c29caf1
Instruction ID: 0add96fea37f9fc43e9851e92f66507b6e5132229130258b3d70eda13d06c595
Opcode Fuzzy Hash: 4d53ff5aba5b5075a46ca1720c773c46c5c4187fa9b059312ca720cf9c29caf1
Instruction Fuzzy Hash: 47118EB6400119AFDB20EB90DC85EAFBBBDFF85704F104555B54166152E731AE44DBA0

Function 00523280 Relevance: 10.6, APIs: 5, Strings: 1, Instructions: 54filememoryCOMMON

Download Yara Rule

APIs

CreateFileA.KERNEL32(?,80000000,00000001,00000000,00000003,00000080,00000000,?,?,\ntsvcs), ref: 0052329E
GetFileSize.KERNEL32(?,00000000,?,80000000,00000001,00000000,00000003,00000080,00000000,?,?,\ntsvcs), ref: 005232B0
VirtualAlloc.KERNEL32(00000000,-000003E8,00001000,00000040,?,00000000,?,80000000,00000001,00000000,00000003,00000080,00000000,?,?,\ntsvcs), ref: 005232C6
ReadFile.KERNEL32(?,00000000,00000000,?,00000000,00000000,-000003E8,00001000,00000040,?,00000000,?,80000000,00000001,00000000,00000003), ref: 005232DE
CloseHandle.KERNEL32(?,?,00000000,00000000,?,00000000,00000000,-000003E8,00001000,00000040,?,00000000,?,80000000,00000001,00000000), ref: 005232E6

Strings

\ntsvcs, xrefs: 00523286

Memory Dump Source

Source File: 00000000.00000002.2819002500.0000000000520000.00000040.00001000.00020000.00000000.sdmp, Offset: 00520000, based on PE: true

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_520000_IXi8q1gF78.jbxd

Yara matches

Similarity

API ID: File$AllocCloseCreateHandleReadSizeVirtual
String ID: \ntsvcs
API String ID: 2717999310-3919542250
Opcode ID: 03d858e4722a0d32c4c8816e72b2204bff7ef21bd9db7686520718198d59d0a5
Instruction ID: 5bc507f9e6e5f64fbf420219f15a8a62c3bfd6d747a4ec830cbe9101984c1c2d
Opcode Fuzzy Hash: 03d858e4722a0d32c4c8816e72b2204bff7ef21bd9db7686520718198d59d0a5
Instruction Fuzzy Hash: 5A01A775341215FBEB20ABA4EC47F9E7E65FF82B74F200225F610B91D1DAB19A118264

Function 00527DA0 Relevance: 10.5, APIs: 5, Strings: 1, Instructions: 46processCOMMON

Download Yara Rule

APIs

CoInitialize.OLE32(00000000), ref: 00527DAE

Part of subcall function 0052D700: CoTaskMemAlloc.OLE32(?), ref: 0052D715

CoRegisterClassObject.OLE32(0053B8EA,00000004,00000001,0053BCAC,00539FB8,?,?,?,?,00527B8C,-embedding,0053BBE0), ref: 00527DD6
GetModuleFileNameA.KERNEL32(00000000,?,0000012C,0053B8EA,00000004,00000001,0053BCAC,00539FB8,?,?,?,?,00527B8C,-embedding,0053BBE0), ref: 00527DE9
CreateProcessA.KERNEL32(00000000,?,00000000,00000000,00000000,00000000,00000000,00000000,00000044,0053BBE0), ref: 00527E19
ExitProcess.KERNEL32(00000000,00000000,?,00000000,00000000,00000000,00000000,00000000,00000000,00000044,0053BBE0), ref: 00527E20

Strings

D, xrefs: 00527DFA

Memory Dump Source

Source File: 00000000.00000002.2819002500.0000000000520000.00000040.00001000.00020000.00000000.sdmp, Offset: 00520000, based on PE: true

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_520000_IXi8q1gF78.jbxd

Yara matches

Similarity

API ID: Process$AllocClassCreateExitFileInitializeModuleNameObjectRegisterTask
String ID: D
API String ID: 630855772-2746444292
Opcode ID: bed4f8bb13898f30ab1505d954921739a4813cec2a990fbacdd8431048928f3f
Instruction ID: c90c14b4088cc10e7b5d70027aad12c5d0a9c70cf0ef7ad2a77bc9649de4984c
Opcode Fuzzy Hash: bed4f8bb13898f30ab1505d954921739a4813cec2a990fbacdd8431048928f3f
Instruction Fuzzy Hash: 0A01ADB150021ABAEB20EAE08C06FFB7BADFF84B00F004014B705661C1DEB01A0886A5

Function 0052ECF0 Relevance: 9.1, APIs: 6, Instructions: 68memoryCOMMON

Download Yara Rule

APIs

CoTaskMemAlloc.OLE32(0000FA00,?,00000000), ref: 0052ED08

Part of subcall function 0052EBB0: CryptAcquireContextA.ADVAPI32(?,00000000,00000000,00000001,F0000000,?,?,?), ref: 0052EBC8
Part of subcall function 0052EBB0: CryptGenRandom.ADVAPI32(?,000003FF,?,?,00000000,00000000,00000001,F0000000,?,?,?), ref: 0052EBD8
Part of subcall function 0052EBB0: CryptReleaseContext.ADVAPI32(?,00000000,?,000003FF,?,?,00000000,00000000,00000001,F0000000,?,?,?), ref: 0052EBE2

CoTaskMemAlloc.OLE32(0000FA00,?,?,00000000,0000FA00,0000FA00,?,00000000), ref: 0052ED39
CoTaskMemAlloc.OLE32(0000FA00,0000FA00,?,?,00000000,0000FA00,0000FA00,?,00000000), ref: 0052ED51
CoTaskMemAlloc.OLE32(0000FA00,0000FA00,0000FA00,?,?,00000000,0000FA00,0000FA00,?,00000000), ref: 0052ED61

Part of subcall function 0052EE30: CoTaskMemAlloc.OLE32(FFFFFFFF,?,?), ref: 0052EE3F
Part of subcall function 0052EE30: CoTaskMemFree.OLE32(?,?,?,?,?,?,0053A780,FFFFFFFF,?,?), ref: 0052EEB2

CoTaskMemFree.OLE32(?,?,?,000000FF,?,00000010,?,?,000000FF,?,0000001D,?,0053A8D8,00000090,?,0053A7D3), ref: 0052EDDA
CoTaskMemFree.OLE32(?,?,?,?,000000FF,?,00000010,?,?,000000FF,?,0000001D,?,0053A8D8,00000090,?), ref: 0052EDE5

Memory Dump Source

Source File: 00000000.00000002.2819002500.0000000000520000.00000040.00001000.00020000.00000000.sdmp, Offset: 00520000, based on PE: true

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_520000_IXi8q1gF78.jbxd

Yara matches

Similarity

API ID: Task$Alloc$CryptFree$Context$AcquireRandomRelease
String ID:
API String ID: 3066166821-0
Opcode ID: d1be03b96eb339dbddbeed3881b2464a6654c94a8a2e151a4756ed8e2a4d01f5
Instruction ID: 398e58619ba5adb0742a453000b87b8709d7c18e01744d8fbb27a29f444161b0
Opcode Fuzzy Hash: d1be03b96eb339dbddbeed3881b2464a6654c94a8a2e151a4756ed8e2a4d01f5
Instruction Fuzzy Hash: 3B21AEB06402677ADF207B60EC07FA8BE75BF82710F604674B718760E2DF7159519B68

Function 00530400 Relevance: 9.0, APIs: 1, Strings: 5, Instructions: 36COMMON

Download Yara Rule

APIs

IsBadReadPtr.KERNEL32(?,0000031A), ref: 0053040F

Part of subcall function 00530460: htonl.WS2_32(00000004), ref: 005304D7

Strings

ELIF, xrefs: 0053041A
\ntsvcs, xrefs: 00530403
SSES, xrefs: 0053043A
EPIP, xrefs: 0053042A
RAHS, xrefs: 0053044A

Memory Dump Source

Source File: 00000000.00000002.2819002500.0000000000520000.00000040.00001000.00020000.00000000.sdmp, Offset: 00520000, based on PE: true

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_520000_IXi8q1gF78.jbxd

Yara matches

Similarity

API ID: Readhtonl
String ID: ELIF$EPIP$RAHS$SSES$\ntsvcs
API String ID: 770454940-4068246509
Opcode ID: 565ccfb9671571d893a5961c1c09603e90acbf6da4ab637a9490e4c3ef8f7444
Instruction ID: 387976b4cf91e020a234f87ba83d0d548b688f5493c36ac76ae2a54bdefa3eff
Opcode Fuzzy Hash: 565ccfb9671571d893a5961c1c09603e90acbf6da4ab637a9490e4c3ef8f7444
Instruction Fuzzy Hash: 1AF0E52250135E225CA425515CB6CBF5F4C7EB2775F30741EF303320C1AA944B5042BB

Function 00522A9F Relevance: 8.8, APIs: 4, Strings: 1, Instructions: 90memoryCOMMON

Download Yara Rule

APIs

GetModuleFileNameA.KERNEL32(00000000,?,0000012C,?,?,\ntsvcs), ref: 00522AC0

Part of subcall function 00523280: CreateFileA.KERNEL32(?,80000000,00000001,00000000,00000003,00000080,00000000,?,?,\ntsvcs), ref: 0052329E
Part of subcall function 00523280: GetFileSize.KERNEL32(?,00000000,?,80000000,00000001,00000000,00000003,00000080,00000000,?,?,\ntsvcs), ref: 005232B0
Part of subcall function 00523280: VirtualAlloc.KERNEL32(00000000,-000003E8,00001000,00000040,?,00000000,?,80000000,00000001,00000000,00000003,00000080,00000000,?,?,\ntsvcs), ref: 005232C6
Part of subcall function 00523280: ReadFile.KERNEL32(?,00000000,00000000,?,00000000,00000000,-000003E8,00001000,00000040,?,00000000,?,80000000,00000001,00000000,00000003), ref: 005232DE
Part of subcall function 00523280: CloseHandle.KERNEL32(?,?,00000000,00000000,?,00000000,00000000,-000003E8,00001000,00000040,?,00000000,?,80000000,00000001,00000000), ref: 005232E6

GetModuleHandleA.KERNEL32(00000000,?,?,?,00000000,?,0000012C,?,?,\ntsvcs), ref: 00522AED
VirtualAlloc.KERNEL32(00000000,?,00001000,00000040,?,?,?,?,00405010,000003E8,00000000,?,?,?,00000000,?), ref: 00522B5A

Part of subcall function 00522BF0: memset.MSVCRT ref: 00522C0A
Part of subcall function 00522BF0: VirtualAlloc.KERNEL32(00000000,?,00001000,00000040), ref: 00522C21
Part of subcall function 00522BF0: CoCreateGuid.OLE32(?,?,?,?,00000000,?,00001000,00000040), ref: 00522C44

VirtualFree.KERNEL32(?,00000000,00008000,0053BD80,?,?,?,00000000,?,00001000,00000040,?,?,?,?,00405010), ref: 00522BD0

Strings

\ntsvcs, xrefs: 00522AA8

Memory Dump Source

Source File: 00000000.00000002.2819002500.0000000000520000.00000040.00001000.00020000.00000000.sdmp, Offset: 00520000, based on PE: true

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_520000_IXi8q1gF78.jbxd

Yara matches

Similarity

API ID: FileVirtual$Alloc$CreateHandleModule$CloseFreeGuidNameReadSizememset
String ID: \ntsvcs
API String ID: 4205641286-3919542250
Opcode ID: a1b75b8f38433e7ca363bb57b9b069db5a8d11e06645394be2b4ce7414da0799
Instruction ID: b47b4faa87a27d4cce62b57f45fa6e2aa84fd9ec1508362c6f7f2d4491656073
Opcode Fuzzy Hash: a1b75b8f38433e7ca363bb57b9b069db5a8d11e06645394be2b4ce7414da0799
Instruction Fuzzy Hash: 0B31ABB2D01219AFEB10DF94EC81BEEBBB4FF98300F148455E608A7391D7716A449F90

Function 00521DA0 Relevance: 8.8, APIs: 3, Strings: 2, Instructions: 49COMMON

Download Yara Rule

APIs

GetSystemDirectoryA.KERNEL32(?,0000012C), ref: 00521DC2
CoCreateGuid.OLE32(?,?,0000012C,?,?,?), ref: 00521DE1
wsprintfA.USER32 ref: 00521E38

Strings

qwertshertshjklzxcvbnjklbnjklzxcvbnmzxcvbnm, xrefs: 00521DEB
%s%s.dll, xrefs: 00521E30

Memory Dump Source

Source File: 00000000.00000002.2819002500.0000000000520000.00000040.00001000.00020000.00000000.sdmp, Offset: 00520000, based on PE: true

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_520000_IXi8q1gF78.jbxd

Yara matches

Similarity

API ID: CreateDirectoryGuidSystemwsprintf
String ID: %s%s.dll$qwertshertshjklzxcvbnjklbnjklzxcvbnmzxcvbnm
API String ID: 3533429245-3826233531
Opcode ID: ba654603a12d4ce7db80fe7e473dbc4155afbe056613ac49896d7cf4262f05a3
Instruction ID: a38844897d1f5c72e48b5cece023a48fd77bdd4a40937d3a1adb4e7c0f80368f
Opcode Fuzzy Hash: ba654603a12d4ce7db80fe7e473dbc4155afbe056613ac49896d7cf4262f05a3
Instruction Fuzzy Hash: FD11043190052A9FDB24EE44DC88FEABBB8FF46300F0040F5E508A7191EBB06E858F84

Function 0052DCD0 Relevance: 8.8, APIs: 4, Strings: 1, Instructions: 39stringCOMMON

Download Yara Rule

APIs

lstrcpyA.KERNEL32(?,?), ref: 0052DCE9
PathFindFileNameA.SHLWAPI(?,?,?), ref: 0052DCF5
lstrcmpiA.KERNEL32(00000000,taskmrg.exe), ref: 0052DD06

Strings

taskmrg.exe, xrefs: 0052DCFC, 0052DD04, 0052DD16

Memory Dump Source

Source File: 00000000.00000002.2819002500.0000000000520000.00000040.00001000.00020000.00000000.sdmp, Offset: 00520000, based on PE: true

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_520000_IXi8q1gF78.jbxd

Yara matches

Similarity

API ID: FileFindNamePathlstrcmpilstrcpy
String ID: taskmrg.exe
API String ID: 1786267875-211820915
Opcode ID: 4fa9967573da6a7b514d01e02b6a95ba990cf09215852b1f4db24dc8e47d8475
Instruction ID: 1e889aed85346c1c4d30337b8753cf029ffcede636ca12736f05121373eafeec
Opcode Fuzzy Hash: 4fa9967573da6a7b514d01e02b6a95ba990cf09215852b1f4db24dc8e47d8475
Instruction Fuzzy Hash: C7F0E9335015265ACB20A6A4BC89EDB7BBCFFE6364F100522F605D7181EA74D55187A0

Function 005216D0 Relevance: 8.8, APIs: 3, Strings: 2, Instructions: 28registryCOMMON

Download Yara Rule

APIs

RegOpenKeyA.ADVAPI32(80000002,SOFTWARE\Microsoft\Windows\CurrentVersion\RunServices,?), ref: 005216E9
RegDeleteValueA.ADVAPI32(?,MSDisk), ref: 005216FA
RegCloseKey.ADVAPI32(?,?,MSDisk), ref: 00521707

Strings

MSDisk, xrefs: 005216F2
SOFTWARE\Microsoft\Windows\CurrentVersion\RunServices, xrefs: 005216DF

Memory Dump Source

Source File: 00000000.00000002.2819002500.0000000000520000.00000040.00001000.00020000.00000000.sdmp, Offset: 00520000, based on PE: true

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_520000_IXi8q1gF78.jbxd

Yara matches

Similarity

API ID: CloseDeleteOpenValue
String ID: MSDisk$SOFTWARE\Microsoft\Windows\CurrentVersion\RunServices
API String ID: 849931509-454317057
Opcode ID: c5d2b0511e40b2817f531d22f4d7b4e64db4fcb468ec378c2c946e298e96f4fe
Instruction ID: 0a2b2652d579bbb662b574154505a5391de5dc1159fe846a9e531f1dea3c5d51
Opcode Fuzzy Hash: c5d2b0511e40b2817f531d22f4d7b4e64db4fcb468ec378c2c946e298e96f4fe
Instruction Fuzzy Hash: 7DE0DF622006367BCD21B9D9AC8BCAFBF59FFD2329B340121F401E00D2E9209A009195

Function 005225A0 Relevance: 7.6, APIs: 3, Strings: 2, Instructions: 66stringCOMMON

Download Yara Rule

APIs

lstrcpyA.KERNEL32(?,?,?,0000012C,00000000,?,00000064,00000000), ref: 005225E3
lstrlenA.KERNEL32(?,?,?,?,?,0000012C,00000000,?,00000064,00000000), ref: 00522642
wsprintfA.USER32 ref: 00522671

Strings

%s%s.exe, xrefs: 00522669
qwertshertshjklzxcvbnjklbnjklzxcvbnmzxcvbnm, xrefs: 00522604

Memory Dump Source

Source File: 00000000.00000002.2819002500.0000000000520000.00000040.00001000.00020000.00000000.sdmp, Offset: 00520000, based on PE: true

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_520000_IXi8q1gF78.jbxd

Yara matches

Similarity

API ID: lstrcpylstrlenwsprintf
String ID: %s%s.exe$qwertshertshjklzxcvbnjklbnjklzxcvbnmzxcvbnm
API String ID: 2027951250-2265713164
Opcode ID: 098f4b72fd82789ffe8e6bf763e19b9545b8d4c8460bf6b7e755d19abc5be89b
Instruction ID: b52e16ffbbe130b798ca6b2e1f42e1b2ababd85ef7334e15715ea11ca13fbdbc
Opcode Fuzzy Hash: 098f4b72fd82789ffe8e6bf763e19b9545b8d4c8460bf6b7e755d19abc5be89b
Instruction Fuzzy Hash: C121C93190027EAADF60DA54DC89FD97778BF55304F0045E5A108B7191DBB46A888F54

Function 00528671 Relevance: 7.6, APIs: 5, Instructions: 53filememoryCOMMON

Download Yara Rule

APIs

CreateFileA.KERNEL32(?,80000000,00000001,00000000,00000003,00000080,00000000), ref: 00528694
GetFileSize.KERNEL32(?,00000000,?,80000000,00000001,00000000,00000003,00000080,00000000), ref: 005286A6
VirtualAlloc.KERNEL32(00000000,?,00001000,00000040,?,00000000,?,80000000,00000001,00000000,00000003,00000080,00000000), ref: 005286BA
ReadFile.KERNEL32(?,00000000,?,?,00000000,00000000,?,00001000,00000040,?,00000000,?,80000000,00000001,00000000,00000003), ref: 005286D8
CloseHandle.KERNEL32(?,?,00000000,?,?,00000000,00000000,?,00001000,00000040,?,00000000,?,80000000,00000001,00000000), ref: 005286E0

Memory Dump Source

Source File: 00000000.00000002.2819002500.0000000000520000.00000040.00001000.00020000.00000000.sdmp, Offset: 00520000, based on PE: true

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_520000_IXi8q1gF78.jbxd

Yara matches

Similarity

API ID: File$AllocCloseCreateHandleReadSizeVirtual
String ID:
API String ID: 2717999310-0
Opcode ID: ec517dc4e5acb852feb6b86cb3f296ecb1ae486bd2553b996e4baf75b0b35f18
Instruction ID: b356d320d200c274193062b6b97d9535407b181e6fadfbea1d37673bb2dc0936
Opcode Fuzzy Hash: ec517dc4e5acb852feb6b86cb3f296ecb1ae486bd2553b996e4baf75b0b35f18
Instruction Fuzzy Hash: A701D230642215BBDB205FE49C46FAE7E60FFA2760F200220B6107A1D0DF71AA10D658

Function 00521B60 Relevance: 7.6, APIs: 5, Instructions: 52filememoryCOMMON

Download Yara Rule

APIs

CreateFileA.KERNEL32(?,80000000,00000001,00000000,00000003,00000080,00000000), ref: 00521B83
GetFileSize.KERNEL32(?,00000000,?,80000000,00000001,00000000,00000003,00000080,00000000), ref: 00521B95
VirtualAlloc.KERNEL32(00000000,?,00001000,00000040,?,00000000,?,80000000,00000001,00000000,00000003,00000080,00000000), ref: 00521BA9
ReadFile.KERNEL32(?,00000000,?,?,00000000,00000000,?,00001000,00000040,?,00000000,?,80000000,00000001,00000000,00000003), ref: 00521BC7
CloseHandle.KERNEL32(?,?,00000000,?,?,00000000,00000000,?,00001000,00000040,?,00000000,?,80000000,00000001,00000000), ref: 00521BCF

Memory Dump Source

Source File: 00000000.00000002.2819002500.0000000000520000.00000040.00001000.00020000.00000000.sdmp, Offset: 00520000, based on PE: true

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_520000_IXi8q1gF78.jbxd

Yara matches

Similarity

API ID: File$AllocCloseCreateHandleReadSizeVirtual
String ID:
API String ID: 2717999310-0
Opcode ID: 942fd633ba98afb1a49d1f3d1dd33787641cadbfbf1fd8f2c4eb0f9a491b3185
Instruction ID: fc297b1455cc89163a5e3a4715e17bca6d085283a5a489f030502cab23ea1cef
Opcode Fuzzy Hash: 942fd633ba98afb1a49d1f3d1dd33787641cadbfbf1fd8f2c4eb0f9a491b3185
Instruction Fuzzy Hash: BB01D830641219FBDF215BA5DC46F9E7E75FF86760F200264F620BA1D0DA715A10D614

Function 0052DFE5 Relevance: 7.6, APIs: 5, Instructions: 52filememoryCOMMON

Download Yara Rule

APIs

CreateFileA.KERNEL32(?,80000000,00000001,00000000,00000003,00000080,00000000), ref: 0052E008
GetFileSize.KERNEL32(?,00000000,?,80000000,00000001,00000000,00000003,00000080,00000000), ref: 0052E01A
VirtualAlloc.KERNEL32(00000000,?,00001000,00000040,?,00000000,?,80000000,00000001,00000000,00000003,00000080,00000000), ref: 0052E02E
ReadFile.KERNEL32(?,00000000,?,?,00000000,00000000,?,00001000,00000040,?,00000000,?,80000000,00000001,00000000,00000003), ref: 0052E04C
CloseHandle.KERNEL32(?,?,00000000,?,?,00000000,00000000,?,00001000,00000040,?,00000000,?,80000000,00000001,00000000), ref: 0052E054

Memory Dump Source

Source File: 00000000.00000002.2819002500.0000000000520000.00000040.00001000.00020000.00000000.sdmp, Offset: 00520000, based on PE: true

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_520000_IXi8q1gF78.jbxd

Yara matches

Similarity

API ID: File$AllocCloseCreateHandleReadSizeVirtual
String ID:
API String ID: 2717999310-0
Opcode ID: 942fd633ba98afb1a49d1f3d1dd33787641cadbfbf1fd8f2c4eb0f9a491b3185
Instruction ID: bf72c8739e1f5e526b91356d43a60897f1635874b69b29492086953ec3ef129b
Opcode Fuzzy Hash: 942fd633ba98afb1a49d1f3d1dd33787641cadbfbf1fd8f2c4eb0f9a491b3185
Instruction Fuzzy Hash: 9101D430641215FBDF219BA5DC47F9DBE75FF86B20F200264F614BA2E0DAB19A11D624

Function 00530840 Relevance: 7.6, APIs: 5, Instructions: 51filememoryCOMMON

Download Yara Rule

APIs

CreateFileA.KERNEL32(?,80000000,00000001,00000000,00000003,00000080,00000000,?,FFFFFFFF,?), ref: 00530863
GetFileSize.KERNEL32(?,00000000,?,80000000,00000001,00000000,00000003,00000080,00000000,?,FFFFFFFF,?), ref: 00530875
VirtualAlloc.KERNEL32(00000000,-000003E8,00003000,00000004,?,00000000,?,80000000,00000001,00000000,00000003,00000080,00000000,?,FFFFFFFF,?), ref: 0053088C
ReadFile.KERNEL32(?,00000000,?,?,00000000,00000000,-000003E8,00003000,00000004,?,00000000,?,80000000,00000001,00000000,00000003), ref: 005308A6
CloseHandle.KERNEL32(?,00000000,-000003E8,00003000,00000004,?,00000000,?,80000000,00000001,00000000,00000003,00000080,00000000,?,FFFFFFFF), ref: 005308B7

Memory Dump Source

Source File: 00000000.00000002.2819002500.0000000000520000.00000040.00001000.00020000.00000000.sdmp, Offset: 00520000, based on PE: true

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_520000_IXi8q1gF78.jbxd

Yara matches

Similarity

API ID: File$AllocCloseCreateHandleReadSizeVirtual
String ID:
API String ID: 2717999310-0
Opcode ID: 3dfa38cb0790348511b630fa1220a21fd099e64c8853efd49a255367bab71361
Instruction ID: 2e3e54a8896edeeb950c2d435a3d6932f43568c18415d4eb8efb765caf288e26
Opcode Fuzzy Hash: 3dfa38cb0790348511b630fa1220a21fd099e64c8853efd49a255367bab71361
Instruction Fuzzy Hash: 08018471641305BBEB21ABA4DC47F9EBF65FF82B24F200264F610BA2E0DA715A11D654

Function 00526F01 Relevance: 7.5, APIs: 5, Instructions: 47networkCOMMON

Download Yara Rule

APIs

select.WS2_32(00000000,00000000,?,00000000,?), ref: 00526EC3
send.WS2_32(?,?,000000FF,00000000), ref: 00526ED8
VirtualFree.KERNEL32(?,00000000,00008000,00000000,00000000,?,00000000,?,?,?,?,?,00000010,?,0000FFFF,00000080), ref: 00526F11
shutdown.WS2_32(?,00000002), ref: 00526F26
closesocket.WS2_32(?), ref: 00526F2E

Memory Dump Source

Source File: 00000000.00000002.2819002500.0000000000520000.00000040.00001000.00020000.00000000.sdmp, Offset: 00520000, based on PE: true

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_520000_IXi8q1gF78.jbxd

Yara matches

Similarity

API ID: FreeVirtualclosesocketselectsendshutdown
String ID:
API String ID: 1011238728-0
Opcode ID: 2a24e55ba6cde832ad9d2e4d4ae3306a3b59be8fce3135796efed2a5bf5d945b
Instruction ID: fcb94544c47c35cc8e36fbbcc9403f98e4cb6b01aae2e9c6d5af6f088563e01a
Opcode Fuzzy Hash: 2a24e55ba6cde832ad9d2e4d4ae3306a3b59be8fce3135796efed2a5bf5d945b
Instruction Fuzzy Hash: 26017171A0522AAADF20ABE4FD86FEEBE74BF42318F204522F211B50D5DBB154458B61

Function 00527F40 Relevance: 7.5, APIs: 5, Instructions: 43filememoryCOMMON

Download Yara Rule

APIs

CreateFileA.KERNEL32(?,80000000,00000001,00000000,00000003,00000080,00000000), ref: 00527F5B
GetFileSize.KERNEL32(?,00000000,?,80000000,00000001,00000000,00000003,00000080,00000000), ref: 00527F6D
CoTaskMemAlloc.OLE32(00000000,?,00000000,?,80000000,00000001,00000000,00000003,00000080,00000000), ref: 00527F75
ReadFile.KERNEL32(?,00000000,00000000,?,00000000,00000000,?,00000000,?,80000000,00000001,00000000,00000003,00000080,00000000), ref: 00527F91
CloseHandle.KERNEL32(?,?,00000000,00000000,?,00000000,00000000,?,00000000,?,80000000,00000001,00000000,00000003,00000080,00000000), ref: 00527F99

Memory Dump Source

Source File: 00000000.00000002.2819002500.0000000000520000.00000040.00001000.00020000.00000000.sdmp, Offset: 00520000, based on PE: true

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_520000_IXi8q1gF78.jbxd

Yara matches

Similarity

API ID: File$AllocCloseCreateHandleReadSizeTask
String ID:
API String ID: 1558414354-0
Opcode ID: 5f9fe5f4734010ce9432705feed35ad43dd32b2447e1561f656f8686e50e974c
Instruction ID: 8408b84f08d1ae7df3beb06b9ac818ede704cbc8879995e19716b52d65be2eff
Opcode Fuzzy Hash: 5f9fe5f4734010ce9432705feed35ad43dd32b2447e1561f656f8686e50e974c
Instruction Fuzzy Hash: F9F0C830245616F7DB20EBB0EC47F6E7E65BF86764F200624B920BA1E1DE71DE10C654

Function 00528160 Relevance: 7.0, APIs: 3, Strings: 1, Instructions: 36processCOMMON

Download Yara Rule

APIs

CreateProcessA.KERNEL32(00000000,?,00000000,00000000,00000000,00000000,00000000,00000000,?,?), ref: 00528190
CloseHandle.KERNEL32(?,00000000,?,00000000,00000000,00000000,00000000,00000000,00000000,?,?), ref: 0052819A
CloseHandle.KERNEL32(?,?,00000000,?,00000000,00000000,00000000,00000000,00000000,00000000,?,?), ref: 005281A2

Strings

D, xrefs: 00528175

Memory Dump Source

Source File: 00000000.00000002.2819002500.0000000000520000.00000040.00001000.00020000.00000000.sdmp, Offset: 00520000, based on PE: true

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_520000_IXi8q1gF78.jbxd

Yara matches

Similarity

API ID: CloseHandle$CreateProcess
String ID: D
API String ID: 2922976086-2746444292
Opcode ID: 1416fab715f1aa5afc1724a5e53502c2812bd1b41388a27fe43556e3dc5fd552
Instruction ID: c3dae7c8adf13256a288c389989a8b13a837225f7eb4765e1e92d60affaac71a
Opcode Fuzzy Hash: 1416fab715f1aa5afc1724a5e53502c2812bd1b41388a27fe43556e3dc5fd552
Instruction Fuzzy Hash: 41F0E5BB40101CAADF00EAE4DC04DFFBBBEFFC1350F148131BA01A6184DE359A1486A4

Function 00521B10 Relevance: 7.0, APIs: 3, Strings: 1, Instructions: 30processCOMMON

Download Yara Rule

APIs

CreateProcessA.KERNEL32(00000000,?,00000000,00000000,00000000,00000000,00000000,00000000,?,?,?), ref: 00521B3E
CloseHandle.KERNEL32(?,00000000,?,00000000,00000000,00000000,00000000,00000000,00000000,?,?,?), ref: 00521B46
CloseHandle.KERNEL32(?,?,00000000,?,00000000,00000000,00000000,00000000,00000000,00000000,?,?,?), ref: 00521B4E

Strings

D, xrefs: 00521B23

Memory Dump Source

Source File: 00000000.00000002.2819002500.0000000000520000.00000040.00001000.00020000.00000000.sdmp, Offset: 00520000, based on PE: true

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_520000_IXi8q1gF78.jbxd

Yara matches

Similarity

API ID: CloseHandle$CreateProcess
String ID: D
API String ID: 2922976086-2746444292
Opcode ID: 65a5c32843d16d43b4e863ea20d8be1303f015c701695c3a661c58e8ab6b68b7
Instruction ID: d6117e3bd74110bccbcffe55707cc6cb1168151f5e0fb7998ed0126a2dbd6a84
Opcode Fuzzy Hash: 65a5c32843d16d43b4e863ea20d8be1303f015c701695c3a661c58e8ab6b68b7
Instruction Fuzzy Hash: CEE0D8BA80010CAACF01EBD4DC01DFF7BBEBFC1300F048235BA02B5194DE399A148664

Function 0052DF9D Relevance: 7.0, APIs: 3, Strings: 1, Instructions: 30processCOMMON

Download Yara Rule

APIs

CreateProcessA.KERNEL32(00000000,?,00000000,00000000,00000000,00000000,00000000,00000000,?,?,?), ref: 0052DFCB
CloseHandle.KERNEL32(?,00000000,?,00000000,00000000,00000000,00000000,00000000,00000000,?,?,?), ref: 0052DFD3
CloseHandle.KERNEL32(?,?,00000000,?,00000000,00000000,00000000,00000000,00000000,00000000,?,?,?), ref: 0052DFDB

Strings

D, xrefs: 0052DFB0

Memory Dump Source

Source File: 00000000.00000002.2819002500.0000000000520000.00000040.00001000.00020000.00000000.sdmp, Offset: 00520000, based on PE: true

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_520000_IXi8q1gF78.jbxd

Yara matches

Similarity

API ID: CloseHandle$CreateProcess
String ID: D
API String ID: 2922976086-2746444292
Opcode ID: 65a5c32843d16d43b4e863ea20d8be1303f015c701695c3a661c58e8ab6b68b7
Instruction ID: d6117e3bd74110bccbcffe55707cc6cb1168151f5e0fb7998ed0126a2dbd6a84
Opcode Fuzzy Hash: 65a5c32843d16d43b4e863ea20d8be1303f015c701695c3a661c58e8ab6b68b7
Instruction Fuzzy Hash: CEE0D8BA80010CAACF01EBD4DC01DFF7BBEBFC1300F048235BA02B5194DE399A148664

Function 00522BF0 Relevance: 6.2, APIs: 4, Instructions: 177memoryCOMMON

Download Yara Rule

APIs

memset.MSVCRT ref: 00522C0A
VirtualAlloc.KERNEL32(00000000,?,00001000,00000040), ref: 00522C21
CoCreateGuid.OLE32(?,?,?,?,00000000,?,00001000,00000040), ref: 00522C44
VirtualFree.KERNEL32(?,00000000,00008000,?,?,?,?,00000774,?,00000774,00000770,?,?,00000000,?,?), ref: 00522E99

Memory Dump Source

Source File: 00000000.00000002.2819002500.0000000000520000.00000040.00001000.00020000.00000000.sdmp, Offset: 00520000, based on PE: true

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_520000_IXi8q1gF78.jbxd

Yara matches

Similarity

API ID: Virtual$AllocCreateFreeGuidmemset
String ID:
API String ID: 486042396-0
Opcode ID: 1797fabcc09ea48cd0b3d1f031f9efc5fe686efcb83dcf5e05f913531883b43a
Instruction ID: 40240058182f869840b9a2a153404901506dc37c4f849c9ad41ed68fd1ab047f
Opcode Fuzzy Hash: 1797fabcc09ea48cd0b3d1f031f9efc5fe686efcb83dcf5e05f913531883b43a
Instruction Fuzzy Hash: D78139768012289FDFA0EF24CC89B99BBB5FF44300F4486D4E948A7266DB31AD90CF44

Function 00526C50 Relevance: 6.1, APIs: 1, Strings: 3, Instructions: 61COMMON

Download Yara Rule

APIs

wsprintfA.USER32 ref: 00526C70

Part of subcall function 0052F250: lstrlenA.KERNEL32(?,00000000,?,0000031A,00000000,?,?,\ntsvcs), ref: 0052F297
Part of subcall function 0052F250: htonl.WS2_32(000000A2), ref: 0052F340

Part of subcall function 0052F3B0: htonl.WS2_32(00000010), ref: 0052F4D9

Strings

\ntsvcs, xrefs: 00526C59
\srvsvc, xrefs: 00526C78
\\%s, xrefs: 00526C64

Memory Dump Source

Source File: 00000000.00000002.2819002500.0000000000520000.00000040.00001000.00020000.00000000.sdmp, Offset: 00520000, based on PE: true

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_520000_IXi8q1gF78.jbxd

Yara matches

Similarity

API ID: htonl$lstrlenwsprintf
String ID: \\%s$\ntsvcs$\srvsvc
API String ID: 3077497419-2563309316
Opcode ID: b1cbb9c556f8327d47e8d543dd92afcc85063e124ddd55633b1ed531459da36a
Instruction ID: 26066406986e6006a3c94fd72a4f662e713412ced7c6a369c546ed7c5e25de3e
Opcode Fuzzy Hash: b1cbb9c556f8327d47e8d543dd92afcc85063e124ddd55633b1ed531459da36a
Instruction Fuzzy Hash: 13116D3290012DAACF21ABA4EC46EDEBB79BF46324F1402A1F618B10E1D7719F94DF50

Function 00526380 Relevance: 6.0, APIs: 2, Strings: 2, Instructions: 49memoryCOMMON

Download Yara Rule

APIs

LocalAlloc.KERNEL32(00000040,00000258,?,?,\ntsvcs), ref: 00526393
wsprintfA.USER32 ref: 005263B1

Part of subcall function 0052FDA0: MultiByteToWideChar.KERNEL32(00000000,00000000,?,000000FF,00000000,00000000,?,?,-00000004), ref: 0052FDB9
Part of subcall function 0052FDA0: MultiByteToWideChar.KERNEL32(00000000,00000000,?,000000FF,?,00000000,00000000,00000000,?,000000FF,00000000,00000000,?,?,-00000004), ref: 0052FDDF

Strings

\ntsvcs, xrefs: 00526389
\\%s, xrefs: 005263A5

Memory Dump Source

Source File: 00000000.00000002.2819002500.0000000000520000.00000040.00001000.00020000.00000000.sdmp, Offset: 00520000, based on PE: true

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_520000_IXi8q1gF78.jbxd

Yara matches

Similarity

API ID: ByteCharMultiWide$AllocLocalwsprintf
String ID: \\%s$\ntsvcs
API String ID: 3118936483-1502965181
Opcode ID: 7ca882cc487dc36b006acf469598b39b7a4bbb9d7d43f29b473db23d08b0937c
Instruction ID: e3e9b1671e59cbd14f2bdbe4e0b82af1b10b422d4d85fb1e95e1fda261a45f9f
Opcode Fuzzy Hash: 7ca882cc487dc36b006acf469598b39b7a4bbb9d7d43f29b473db23d08b0937c
Instruction Fuzzy Hash: B80180F3E0221A9BEB408F58DC05A99BBA5EFE1720F2A0220E519973C1FB749510CB50

Function 005210C0 Relevance: 6.0, APIs: 4, Instructions: 38stringCOMMON

Download Yara Rule

APIs

GetCommandLineW.KERNEL32(?,?,?,?,00527A8B,0053BCB0,0053B4A2,0053B48A,0053B472,0053B45A,0053B442,00008003), ref: 005210CC
CommandLineToArgvW.SHELL32(00000000,0053BD78,?,?,?,?,00527A8B,0053BCB0,0053B4A2,0053B48A,0053B472,0053B45A,0053B442,00008003), ref: 005210D9
WideCharToMultiByte.KERNEL32(00000000,00000000,00000000,000000FF,?,00000258,00000000,00000000,00000000,0053BD78,?,?,?,?,00527A8B,0053BCB0), ref: 00521106
lstrcpyA.KERNEL32(00000000,?,00000000,00000000,00000000,000000FF,?,00000258,00000000,00000000,00000000,0053BD78), ref: 00521114

Memory Dump Source

Source File: 00000000.00000002.2819002500.0000000000520000.00000040.00001000.00020000.00000000.sdmp, Offset: 00520000, based on PE: true

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_520000_IXi8q1gF78.jbxd

Yara matches

Similarity

API ID: CommandLine$ArgvByteCharMultiWidelstrcpy
String ID:
API String ID: 1316659709-0
Opcode ID: 3e96f4e9871bf9c1a44e23ef723fefb78a7832ab4d9108491a1f50fcda9b5f76
Instruction ID: 9ffa1055003bff3b87e32d81f2723ac9176ea182a24d7ddd5a8841a7da21b4e6
Opcode Fuzzy Hash: 3e96f4e9871bf9c1a44e23ef723fefb78a7832ab4d9108491a1f50fcda9b5f76
Instruction Fuzzy Hash: 17F05031600630BBF5705AE0AC8BFA67B98BF91B10F200720B700E11D1DAB158004698

Function 00522540 Relevance: 6.0, APIs: 4, Instructions: 35fileCOMMON

Download Yara Rule

APIs

CreateFileA.KERNEL32(?,40000000,00000003,00000000,00000004,00000080,00000000,-00000001,?), ref: 0052255E
SetFilePointer.KERNEL32(?,00000000,00000000,00000000,?,40000000,00000003,00000000,00000004,00000080,00000000,-00000001,?), ref: 00522574
WriteFile.KERNEL32(?,?,?,?,00000000,?,00000000,00000000,00000000,?,40000000,00000003,00000000,00000004,00000080,00000000), ref: 00522585
CloseHandle.KERNEL32(?,?,?,?,?,00000000,?,00000000,00000000,00000000,?,40000000,00000003,00000000,00000004,00000080), ref: 0052258D

Memory Dump Source

Source File: 00000000.00000002.2819002500.0000000000520000.00000040.00001000.00020000.00000000.sdmp, Offset: 00520000, based on PE: true

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_520000_IXi8q1gF78.jbxd

Yara matches

Similarity

API ID: File$CloseCreateHandlePointerWrite
String ID:
API String ID: 3604237281-0
Opcode ID: f6572ff515b4cc59caaaaa2d9cfc0444c007cfb10d63ac4a76899ea40b4f0a95
Instruction ID: 31afb02d50008ccfe237233ddd4a795564b72d549c2a783988f5a16acb865cb0
Opcode Fuzzy Hash: f6572ff515b4cc59caaaaa2d9cfc0444c007cfb10d63ac4a76899ea40b4f0a95
Instruction Fuzzy Hash: E8F0A031681218FAEF316A94EC47F9E7E24BF42B64F304210F720780E09BB16E20A658

Function 00528617 Relevance: 6.0, APIs: 4, Instructions: 35fileCOMMON

Download Yara Rule

APIs

CreateFileA.KERNEL32(?,40000000,00000003,00000000,00000004,00000080,00000000), ref: 00528635
SetFilePointer.KERNEL32(?,?,00000000,00000000,?,40000000,00000003,00000000,00000004,00000080,00000000), ref: 0052864C
WriteFile.KERNEL32(?,?,?,?,00000000,?,?,00000000,00000000,?,40000000,00000003,00000000,00000004,00000080,00000000), ref: 0052865D
CloseHandle.KERNEL32(?,?,?,?,?,00000000,?,?,00000000,00000000,?,40000000,00000003,00000000,00000004,00000080), ref: 00528665

Memory Dump Source

Source File: 00000000.00000002.2819002500.0000000000520000.00000040.00001000.00020000.00000000.sdmp, Offset: 00520000, based on PE: true

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_520000_IXi8q1gF78.jbxd

Yara matches

Similarity

API ID: File$CloseCreateHandlePointerWrite
String ID:
API String ID: 3604237281-0
Opcode ID: c54c8ddaa3b82bf10220477f2ca9bedf955fd64da537932deeb9dea294d39ab9
Instruction ID: ee83ef3bdd1d6abee38add85cf2e4d7f07d68589481e2c5f647872f035162ece
Opcode Fuzzy Hash: c54c8ddaa3b82bf10220477f2ca9bedf955fd64da537932deeb9dea294d39ab9
Instruction Fuzzy Hash: 80F0A731641219FAEF315E94EC07F9E7E25FF42B64F204210F720380E1DBB26E20A658

Function 00521AB0 Relevance: 6.0, APIs: 4, Instructions: 35fileCOMMON

Download Yara Rule

APIs

CreateFileA.KERNEL32(?,40000000,00000003,00000000,00000004,00000080,00000000,?,?,?), ref: 00521ACE
SetFilePointer.KERNEL32(?,00000000,00000000,00000000,?,40000000,00000003,00000000,00000004,00000080,00000000,?,?,?), ref: 00521AE4
WriteFile.KERNEL32(?,?,?,?,00000000,?,00000000,00000000,00000000,?,40000000,00000003,00000000,00000004,00000080,00000000), ref: 00521AF5
CloseHandle.KERNEL32(?,?,?,?,?,00000000,?,00000000,00000000,00000000,?,40000000,00000003,00000000,00000004,00000080), ref: 00521AFD

Memory Dump Source

Source File: 00000000.00000002.2819002500.0000000000520000.00000040.00001000.00020000.00000000.sdmp, Offset: 00520000, based on PE: true

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_520000_IXi8q1gF78.jbxd

Yara matches

Similarity

API ID: File$CloseCreateHandlePointerWrite
String ID:
API String ID: 3604237281-0
Opcode ID: f6572ff515b4cc59caaaaa2d9cfc0444c007cfb10d63ac4a76899ea40b4f0a95
Instruction ID: 6e4ffce727d510b37dea4107593c50970d43e038242c8e3538df7f2f54d328b5
Opcode Fuzzy Hash: f6572ff515b4cc59caaaaa2d9cfc0444c007cfb10d63ac4a76899ea40b4f0a95
Instruction Fuzzy Hash: D0F0A731641214F6EF315A94EC07F9E7E24FF42B64F304210F720380E0DBB16E20A658

Function 0052DF44 Relevance: 6.0, APIs: 4, Instructions: 35fileCOMMON

Download Yara Rule

APIs

CreateFileA.KERNEL32(?,40000000,00000003,00000000,00000004,00000080,00000000,?,?,?), ref: 0052DF62
SetFilePointer.KERNEL32(?,00000000,00000000,00000000,?,40000000,00000003,00000000,00000004,00000080,00000000,?,?,?), ref: 0052DF78
WriteFile.KERNEL32(?,?,?,?,00000000,?,00000000,00000000,00000000,?,40000000,00000003,00000000,00000004,00000080,00000000), ref: 0052DF89
CloseHandle.KERNEL32(?,?,?,?,?,00000000,?,00000000,00000000,00000000,?,40000000,00000003,00000000,00000004,00000080), ref: 0052DF91

Memory Dump Source

Source File: 00000000.00000002.2819002500.0000000000520000.00000040.00001000.00020000.00000000.sdmp, Offset: 00520000, based on PE: true

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_520000_IXi8q1gF78.jbxd

Yara matches

Similarity

API ID: File$CloseCreateHandlePointerWrite
String ID:
API String ID: 3604237281-0
Opcode ID: f6572ff515b4cc59caaaaa2d9cfc0444c007cfb10d63ac4a76899ea40b4f0a95
Instruction ID: a4412f2131d1f0464ae48265a7452b7ebf44934d2b4e21e93602f427ac997c91
Opcode Fuzzy Hash: f6572ff515b4cc59caaaaa2d9cfc0444c007cfb10d63ac4a76899ea40b4f0a95
Instruction Fuzzy Hash: 0BF03031681219FAEF316A94ED47F9E7E25BF42B64F304211F724780E19BB16E20A658

Function 00521720 Relevance: 5.3, APIs: 2, Strings: 1, Instructions: 37libraryloaderCOMMON

Download Yara Rule

APIs

GetModuleHandleA.KERNEL32(advapi32.dll,?,00000000,00000004), ref: 00521737
GetProcAddress.KERNEL32(00000000,00000000), ref: 00521758

Strings

advapi32.dll, xrefs: 00521732

Memory Dump Source

Source File: 00000000.00000002.2819002500.0000000000520000.00000040.00001000.00020000.00000000.sdmp, Offset: 00520000, based on PE: true

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_520000_IXi8q1gF78.jbxd

Yara matches

Similarity

API ID: AddressHandleModuleProc
String ID: advapi32.dll
API String ID: 1646373207-4050573280
Opcode ID: 8c26f93835eccddd92960c88bb1dcdb738595b31fac302770518bd4d79a5d46d
Instruction ID: a66a612fb15b51d907095d7894282500109fe7ff8290fadd1285f203bd4d31f4
Opcode Fuzzy Hash: 8c26f93835eccddd92960c88bb1dcdb738595b31fac302770518bd4d79a5d46d
Instruction Fuzzy Hash: EFF0CD32900165EEDB108B90FC44A9BBFE5FBB2324F250924E40562291EBB17A46EF80

Function 00527720 Relevance: 5.3, APIs: 2, Strings: 1, Instructions: 36stringCOMMON

Download Yara Rule

APIs

lstrcpyA.KERNEL32(?,?,?,?,\ntsvcs), ref: 00527737

Part of subcall function 0052F6B0: inet_addr.WS2_32(?), ref: 0052F6C6
Part of subcall function 0052F6B0: socket.WS2_32(00000002,00000001,00000006), ref: 0052F6D3
Part of subcall function 0052F6B0: htons.WS2_32(0000008B), ref: 0052F6F2
Part of subcall function 0052F6B0: ioctlsocket.WS2_32(?,8004667E,00000001), ref: 0052F71A
Part of subcall function 0052F6B0: setsockopt.WS2_32(?,0000FFFF,00000080,00000001,00000004), ref: 0052F74A
Part of subcall function 0052F6B0: connect.WS2_32(?,?,00000010), ref: 0052F75B
Part of subcall function 0052F6B0: WSAGetLastError.WS2_32 ref: 0052F769
Part of subcall function 0052F6B0: select.WS2_32(00000000,00000000,00000001,00000000,00000006), ref: 0052F7B7
Part of subcall function 0052F6B0: send.WS2_32(?,0053A970,0000004C,00000000), ref: 0052F7DC
Part of subcall function 0052F6B0: closesocket.WS2_32(?), ref: 0052F890
Part of subcall function 0052F6B0: socket.WS2_32(00000002,00000001,00000006), ref: 0052F89B
Part of subcall function 0052F6B0: htons.WS2_32(000001BD), ref: 0052F8B4
Part of subcall function 0052F6B0: ioctlsocket.WS2_32(?,8004667E,00000001), ref: 0052F8DC
Part of subcall function 0052F6B0: setsockopt.WS2_32(?,0000FFFF,00000080,00000001,00000004), ref: 0052F90C

Part of subcall function 00527860: htonl.WS2_32(?), ref: 005278A8
Part of subcall function 00527860: send.WS2_32(?,?,?,00000000), ref: 005278F9

Part of subcall function 00527790: LocalAlloc.KERNEL32(00000040,?,?,?,00000000), ref: 005277B2
Part of subcall function 00527790: htonl.WS2_32(?), ref: 00527826
Part of subcall function 00527790: LocalFree.KERNEL32(00000000,?,00000000,?,00000000,00000200,?,?,00000000,0000000A,-0000003F,?,?), ref: 0052784A

closesocket.WS2_32(00000000), ref: 00527771

Strings

\ntsvcs, xrefs: 00527726

Memory Dump Source

Source File: 00000000.00000002.2819002500.0000000000520000.00000040.00001000.00020000.00000000.sdmp, Offset: 00520000, based on PE: true

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_520000_IXi8q1gF78.jbxd

Yara matches

Similarity

API ID: Localclosesockethtonlhtonsioctlsocketsendsetsockoptsocket$AllocErrorFreeLastconnectinet_addrlstrcpyselect
String ID: \ntsvcs
API String ID: 3907301152-3919542250
Opcode ID: e92cb62be2a88bde6175f8045abd94d2da537b944bd200763b5fe24779756eec
Instruction ID: bfaa1bdb03292a528ea61b1aaac1270cef1c38f67c847422e62b40e0f80f4020
Opcode Fuzzy Hash: e92cb62be2a88bde6175f8045abd94d2da537b944bd200763b5fe24779756eec
Instruction Fuzzy Hash: 67F0627190531D66CA20AAB5AC89E9E7A7CBF96738F100310F134AB1D0DA745401CB54

Function 00527EF0 Relevance: 5.3, APIs: 2, Strings: 1, Instructions: 25sleepfileCOMMON

Download Yara Rule

APIs

Sleep.KERNEL32(000001F4,?,?,?,?,00527B22,00000000,00000000,00000000,00000000,0053BCB0,0053B4A2,0053B48A,0053B472,0053B45A,0053B442), ref: 00527F03

Part of subcall function 00521000: lstrlenA.KERNEL32(?,?,?,?,?,00527B82,-embedding,0053BBE0), ref: 00521011

DeleteFileA.KERNEL32(?,patch:,?,000001F4,?,?,?,?,00527B22,00000000,00000000,00000000,00000000,0053BCB0,0053B4A2,0053B48A), ref: 00527F25

Strings

patch:, xrefs: 00527F0F

Memory Dump Source

Source File: 00000000.00000002.2819002500.0000000000520000.00000040.00001000.00020000.00000000.sdmp, Offset: 00520000, based on PE: true

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_520000_IXi8q1gF78.jbxd

Yara matches

Similarity

API ID: DeleteFileSleeplstrlen
String ID: patch:
API String ID: 2750215711-3679881264
Opcode ID: a941169f5396e8bb5e740c846dd8d5a78b8442b9f7bc9041d4be75773642c78d
Instruction ID: 15516f8c1b7cfc11f8319a823f15cbaf85b440e698a5ab8ef09ba8f997800eb2
Opcode Fuzzy Hash: a941169f5396e8bb5e740c846dd8d5a78b8442b9f7bc9041d4be75773642c78d
Instruction Fuzzy Hash: 91E0C23660A2292AD930A5F96CCEDEFFB5CFF86754F5002B5B909C10C1EA60A9414561

Function 00521000 Relevance: 5.0, APIs: 4, Instructions: 42stringCOMMON

Download Yara Rule

APIs

lstrlenA.KERNEL32(?,?,?,?,?,00527B82,-embedding,0053BBE0), ref: 00521011
lstrcpynA.KERNEL32(?,006564C0,?,?,?,?,?,?,00527B82,-embedding,0053BBE0), ref: 0052103A
lstrcmpiA.KERNEL32(?,?), ref: 00521049
lstrcpyA.KERNEL32(?,?,?,006564C0,?,?,?,?,?,?,00527B82,-embedding,0053BBE0), ref: 0052105F

Memory Dump Source

Source File: 00000000.00000002.2819002500.0000000000520000.00000040.00001000.00020000.00000000.sdmp, Offset: 00520000, based on PE: true

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_520000_IXi8q1gF78.jbxd

Yara matches

Similarity

API ID: lstrcmpilstrcpylstrcpynlstrlen
String ID:
API String ID: 4224384254-0
Opcode ID: 87cebb46c88fa1e9f1ca87ae28cfeef96ef8bc7c25611265a5404e247f5bbc99
Instruction ID: 1a8e65a8524d457b54f2eba80bc3962ad32381fe5929445ef93bc2594a78c4e3
Opcode Fuzzy Hash: 87cebb46c88fa1e9f1ca87ae28cfeef96ef8bc7c25611265a5404e247f5bbc99
Instruction Fuzzy Hash: 0EF0D131900429ABCF20AFA5EC88EDB7FB9FFE9310F004A61E64892150D731AE559B90

Function 00522420 Relevance: 5.0, APIs: 4, Instructions: 29stringCOMMON

Download Yara Rule

APIs

lstrlenA.KERNEL32(?,-00000001,?), ref: 0052242F
lstrcpyA.KERNEL32(?,?,?,-00000001,?), ref: 00522441
lstrcpynA.KERNEL32(?,?,00000001,?,?,?,-00000001,?), ref: 00522451
lstrcmpA.KERNEL32(?,?,?,?,00000001,?,?,?,-00000001,?), ref: 00522464

Memory Dump Source

Source File: 00000000.00000002.2819002500.0000000000520000.00000040.00001000.00020000.00000000.sdmp, Offset: 00520000, based on PE: true

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_520000_IXi8q1gF78.jbxd

Yara matches

Similarity

API ID: lstrcmplstrcpylstrcpynlstrlen
String ID:
API String ID: 2000052532-0
Opcode ID: 72f4f7472a497a786a8d05ffe0befcc114fea98bfa83ad6341e26ed9f0bd6e92
Instruction ID: 0f5788845108605192e97e5d3da8f971865f83b959d653294502bfcc62e20862
Opcode Fuzzy Hash: 72f4f7472a497a786a8d05ffe0befcc114fea98bfa83ad6341e26ed9f0bd6e92
Instruction Fuzzy Hash: 60E0657240112D7FCF11EAD4EC89DEB7BACFF69754F000465B609D2051EA30DB558BA0

Description:	Adversaries may abuse command and script interpreters to execute commands, scripts, or binaries. These interfaces and languages provide ways of interacting with computer systems and are a common feature across many different platforms. Most systems come with some built-in command-line interface and scripting capabilities, for example, macOS and Linux distributions include some flavor of Unix Shell while Windows installations include the Windows Command Shell and PowerShell .
Tactics:	Execution
Data Sources:	Command: Command Execution, Module: Module Load, Process: Process Creation, Process: Process Metadata, Script: Script Execution
Platforms:	Azure AD, Google Workspace, IaaS, Linux, macOS, Network, Office 365, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may interact with the native OS application programming interface (API) to execute behaviors. Native APIs provide a controlled means of calling low-level OS services within the kernel, such as those involving hardware/devices, memory, and processes.These native APIs are leveraged by the OS during system boot (when other system components are not yet initialized) as well as carrying out tasks and requests during routine operations.
Tactics:	Execution
Data Sources:	Module: Module Load, Process: OS API Execution
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may execute their own malicious payloads by side-loading DLLs. Similar to DLL Search Order Hijacking , side-loading involves hijacking which DLL a program loads. But rather than just planting the DLL within the search order of a program then waiting for the victim application to be invoked, adversaries may directly side-load their payloads by planting then invoking a legitimate application that executes their payload(s).
Tactics:	Defense Evasion, Persistence, Privilege Escalation
Data Sources:	File: File Creation, File: File Modification, Module: Module Load, Process: Process Creation
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ various means to detect and avoid virtualization and analysis environments. This may include changing behaviors based on the results of checks for the presence of artifacts indicative of a virtual machine environment (VME) or sandbox. If the adversary detects a VME, they may alter their malware to disengage from the victim or conceal the core functions of the implant. They may also search for VME artifacts before dropping secondary or additional payloads. Adversaries may use the information learned from [Virtualization/Sandbox Evasion](https://attack.mitre.org/techniques/T1497) during automated discovery to shape follow-on behaviors.
Tactics:	Defense Evasion, Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to make an executable or file difficult to discover or analyze by encrypting, encoding, or otherwise obfuscating its contents on the system or in transit. This is common behavior that can be used across different platforms and the network to evade defenses.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Creation, File: File Metadata, Module: Module Load, Process: OS API Execution, Process: Process Creation, Script: Script Execution, WMI: WMI Creation, Windows Registry: Windows Registry Key Creation
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may perform software packing or virtual machine software protection to conceal their code. Software packing is a method of compressing or encrypting an executable. Packing an executable changes the file signature in an attempt to avoid signature-based detection. Most decompression techniques decompress the executable code in memory. Virtual machine software protection translates an executable's original code into a special format that only a special virtual machine can run. A virtual machine is then called to run this code.
Tactics:	Defense Evasion
Data Sources:	File: File Metadata
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to get a listing of security software, configurations, defensive tools, and sensors that are installed on a system or in a cloud environment. This may include things such as firewall rules and anti-virus. Adversaries may use the information from Security Software Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Firewall: Firewall Enumeration, Firewall: Firewall Metadata, Process: OS API Execution, Process: Process Creation
Platforms:	Azure AD, Google Workspace, IaaS, Linux, macOS, Office 365, SaaS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may enumerate files and directories or may search in specific locations of a host or network share for certain information within a file system. Adversaries may use the information from File and Directory Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	An adversary may attempt to get detailed information about the operating system and hardware, including version, patches, hotfixes, service packs, and architecture. Adversaries may use the information from System Information Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	IaaS, Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may exploit remote services to gain unauthorized access to internal systems once inside of a network. Exploitation of a software vulnerability occurs when an adversary takes advantage of a programming error in a program, service, or within the operating system software or kernel itself to execute adversary-controlled code. A common goal for post-compromise exploitation of remote services is for lateral movement to enable access to a remote system.
Tactics:	Lateral Movement
Data Sources:	Application Log: Application Log Content, Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	An adversary may compress and/or encrypt data that is collected prior to exfiltration. Compressing the data can help to obfuscate the collected data and minimize the amount of data sent over the network. Encryption can be used to hide information that is being exfiltrated from detection or make exfiltration less conspicuous upon inspection by a defender.
Tactics:	Collection
Data Sources:	Command: Command Execution, File: File Creation, Process: Process Creation, Script: Script Execution
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using a protocol and port pairing that are typically not associated. For example, HTTPS over port 8088or port 587as opposed to the traditional port 443. Adversaries may make changes to the standard port used by a protocol to bypass filtering or muddle analysis/parsing of network data.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report IXi8q1gF78.exe

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

Memory Dumps

Unpacked PEs

Sigma Signatures

System Summary

Suricata Signatures

Joe Sandbox Signatures

AV Detection

Cryptography

Exploits

Compliance

Spreading

Networking

System Summary

Data Obfuscation

Hooking and other Techniques for Hiding and Protection

Malware Analysis System Evasion

Anti Debugging

Language, Device and Operating System Detection

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

World Map of Contacted IPs

Public IPs

General Information

Warnings

Simulations

Behavior and APIs

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

Static File Info

General

File Icon

Static PE Info

General

Entrypoint Preview

Rich Headers

Data Directories

Sections

Imports

Network Behavior

Suricata IDS Alerts

Network Port Distribution

TCP Packets

ICMP Packets

Statistics

CPU Usage

Memory Usage

High Level Behavior Distribution

back

System Behavior

Windows Analysis Report
IXi8q1gF78.exe

Function 00527A10 Relevance: 57.9, APIs: 31, Strings: 2, Instructions: 197
threadsynchronizationsleepCOMMON

Function 0052F6B0 Relevance: 38.7, APIs: 21, Strings: 1, Instructions: 187
networkCOMMON

Function 00522100 Relevance: 33.3, APIs: 16, Strings: 3, Instructions: 90
filesleepmemoryCOMMON

Function 00527FC0 Relevance: 24.5, APIs: 8, Strings: 6, Instructions: 46
libraryloaderCOMMON

Function 0052EF90 Relevance: 13.6, APIs: 9, Instructions: 114
networkCOMMON

Function 00522040 Relevance: 13.6, APIs: 9, Instructions: 50
stringthreadsleepCOMMON

Function 005279D0 Relevance: 45.7, APIs: 24, Strings: 2, Instructions: 177
threadmemorysynchronizationCOMMON

Function 00527B65 Relevance: 42.1, APIs: 22, Strings: 2, Instructions: 129
threadsynchronizationsleepCOMMON

Function 00526F40 Relevance: 35.5, APIs: 11, Strings: 9, Instructions: 484
stringCOMMON

Function 005235D0 Relevance: 33.2, APIs: 22, Instructions: 173
networkthreadCOMMON

Function 005235C8 Relevance: 19.6, APIs: 13, Instructions: 105
networkthreadCOMMON

Function 0052F9D0 Relevance: 17.6, APIs: 9, Strings: 1, Instructions: 120
memorystringCOMMON

Function 00523450 Relevance: 15.1, APIs: 10, Instructions: 86
sleepthreadCOMMON

Function 00523850 Relevance: 12.3, APIs: 6, Strings: 1, Instructions: 60
stringfileCOMMON

Function 0053091B Relevance: 9.1, APIs: 6, Instructions: 54
sleepmemoryCOMMON