Edit tour

Windows Analysis Report
msws.msi

Overview

General Information

Sample name:	msws.msi
Analysis ID:	1513255
MD5:	c13c4c025c5c779d5dc8848ef160d5da
SHA1:	d7671d1f301d74aece0db320701395a5cd8cf29a
SHA256:	ba2e21641a1238a5b30e535bd0940fcd316a6e5242bfdd48a97aaa203d11642b
Tags:	libraofficeonline-commsi
Infos:

Detection

ORPCBackdoor

Score:	88
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

Antivirus / Scanner detection for submitted sample

Antivirus detection for dropped file

Multi AV Scanner detection for dropped file

Multi AV Scanner detection for submitted file

Yara detected ORPCBackdoor

AI detected suspicious sample

Uses dynamic DNS services

Allocates memory within range which is reserved for system DLLs (kernel32.dll, advapi32.dll, etc)

Checks for available system drives (often done to infect USB drives)

Checks if the current process is being debugged

Contains capabilities to detect virtual machines

Contains functionality to check if a debugger is running (IsDebuggerPresent)

Contains functionality to check if a debugger is running (OutputDebugString,GetLastError)

Contains functionality to check if a window is minimized (may be used to check if an application is visible)

Contains functionality to dynamically determine API calls

Contains functionality to open a port and listen for incoming connection (possibly a backdoor)

Contains functionality to query CPU information (cpuid)

Contains functionality to query locales information (e.g. system language)

Contains functionality to read the PEB

Contains functionality to retrieve information about pressed keystrokes

Contains functionality which may be used to detect a debugger (GetProcessHeap)

Contains long sleeps (>= 3 min)

Creates COM task schedule object (often to register a task for autostart)

Creates a process in suspended mode (likely to inject code)

Creates files inside the system directory

Creates or modifies windows services

Deletes files inside the Windows folder

Detected potential crypto function

Drops PE files

Drops PE files to the windows directory (C:\Windows)

Extensive use of GetProcAddress (often used to hide API calls)

Found decision node followed by non-executed suspicious APIs

Found dropped PE file which has not been started or loaded

Found large amount of non-executed APIs

Found potential string decryption / allocating functions

Internet Provider seen in connection with other malware

May sleep (evasive loops) to hinder dynamic analysis

May use bcdedit to modify the Windows boot settings

Modifies existing windows services

Potential key logger detected (key state polling based)

Queries information about the installed CPU (vendor, model number etc)

Queries the installation date of Windows

Queries the product ID of Windows

Queries the volume information (name, serial number etc) of a device

Uses code obfuscation techniques (call, push, ret)

Classification

Process Tree

System is w7x64

msiexec.exe (PID: 3400 cmdline: "C:\Windows\System32\msiexec.exe" /i "C:\Users\user\Desktop\msws.msi" MD5: AC2E7152124CEED36846BD1B6592A00F)

msiexec.exe (PID: 3440 cmdline: C:\Windows\system32\msiexec.exe /V MD5: AC2E7152124CEED36846BD1B6592A00F)

msiexec.exe (PID: 3832 cmdline: C:\Windows\syswow64\MsiExec.exe -Embedding A8865EE9E9B652151556A3A417CEBB17 MD5: 4315D6ECAE85024A0567DF2CB253B7B0)

expand.exe (PID: 3892 cmdline: "C:\Windows\System32\expand.exe" -R files.cab -F:* files MD5: 659CED6D7BDA047BCC6048384231DB9F)

MSWordServices.exe (PID: 3928 cmdline: "C:\Users\user\AppData\Local\Temp\MW-5f02c99a-ffa3-42d6-92b5-9b885a91c26d\files\MSWordServices.exe" MD5: FC860959580C124E7E4781BB08437681)

taskeng.exe (PID: 3944 cmdline: taskeng.exe {B43B102B-D546-4F1A-A2C9-95B5D73CF7B1} S-1-5-21-966771315-3019405637-367336477-1006:user-PC\user:Interactive:[1] MD5: 65EA57712340C09B1B0C427B4848AE05)

MSWordServices.exe (PID: 3980 cmdline: C:\Users\user\AppData\Local\Temp\MW-5f02c99a-ffa3-42d6-92b5-9b885a91c26d\files\MSWordServices.exe MD5: FC860959580C124E7E4781BB08437681)

cleanup

Malware Threat Intel

Provided by

Name	Description	Attribution	Blogpost URLs	Link
ORPCBackdoor		No Attribution	https://medium.com/@knownsec404team/apt-k-47-mysterious-elephant-a-new-apt-organization-in-south-asia-5c66f954477 https://medium.com/@knownsec404team/apt-k-47-organization-launches-espionage-attacks-using-a-new-trojan-tool-5e7eccfdce2f https://paper.seebug.org/3117/	https://malpedia.caad.fkie.fraunhofer.de/details/win.orpcbackdoor

Yara Signatures

Memory Dumps

Source	Rule	Description	Author
00000008.00000002.630639624.00000000002FD000.00000004.00000010.00020000.00000000.sdmp	JoeSecurity_ORPCBackdoor	Yara detected ORPCBackdoor	Joe Security
Process Memory Space: MSWordServices.exe PID: 3928	JoeSecurity_ORPCBackdoor	Yara detected ORPCBackdoor	Joe Security
Process Memory Space: MSWordServices.exe PID: 3980	JoeSecurity_ORPCBackdoor	Yara detected ORPCBackdoor	Joe Security

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

AV Detection

Antivirus / Scanner detection for submitted sample

Source: msws.msi

Avira: detected

Antivirus detection for dropped file

Source: C:\Windows\Installer\5e5e08.msi	Avira: detection malicious, Label: TR/Agent.ynmzr
Source: C:\Users\user\AppData\Local\Temp\MW-5f02c99a-ffa3-42d6-92b5-9b885a91c26d\files\$dpx$.tmp\b0b5c17324baed4b8b7e2afef99cf028.tmp	Avira: detection malicious, Label: TR/Agent.athug

Multi AV Scanner detection for dropped file

Source: C:\Users\user\AppData\Local\Temp\MW-5f02c99a-ffa3-42d6-92b5-9b885a91c26d\files\$dpx$.tmp\b0b5c17324baed4b8b7e2afef99cf028.tmp	ReversingLabs: Detection: 75%
Source: C:\Users\user\AppData\Local\Temp\MW-5f02c99a-ffa3-42d6-92b5-9b885a91c26d\files\OLMAPI32.dll (copy)	ReversingLabs: Detection: 75%

Multi AV Scanner detection for submitted file

Source: msws.msi

ReversingLabs: Detection: 60%

AI detected suspicious sample

Source: Submited Sample

Integrated Neural Analysis Model: Matched 97.1% probability

Source: C:\Windows\SysWOW64\expand.exe	File created: C:\Windows\Logs\DPX\setupact.log			Jump to behavior
Source: C:\Windows\SysWOW64\expand.exe	File created: C:\Windows\Logs\DPX\setuperr.log			Jump to behavior

Source: C:\Users\user\AppData\Local\Temp\MW-5f02c99a-ffa3-42d6-92b5-9b885a91c26d\files\MSWordServices.exe

File opened: C:\Windows\WinSxS\x86_microsoft.vc90.crt_1fc8b3b9a1e18e3b_9.0.30729.4940_none_50916076bcb9a742\MSVCR90.dll

Jump to behavior

Source:	Binary string: t:\outlook\x86\ship\0\cnfnot32.pdb\ship\0\cnfnot32.exe\bbtopt\cnfnot32O.pdbO source: expand.exe, 00000006.00000003.409126863.00000000020F0000.00000004.00000020.00020000.00000000.sdmp, bcae35571a762b408b0a7ce9cef941cd.tmp.6.dr
Source:	Binary string: t:\outlook\x86\ship\0\cnfnot32.pdb source: MSWordServices.exe, MSWordServices.exe, 0000000A.00000002.520302411.000000002D901000.00000020.00000001.01000000.00000007.sdmp, MSWordServices.exe, 0000000A.00000000.418565764.000000002D901000.00000020.00000001.01000000.00000007.sdmp, bcae35571a762b408b0a7ce9cef941cd.tmp.6.dr
Source:	Binary string: \ship\0\cnfnot32.exe\bbtopt\cnfnot32O.pdb source: MSWordServices.exe, MSWordServices.exe, 0000000A.00000002.520302411.000000002D901000.00000020.00000001.01000000.00000007.sdmp, MSWordServices.exe, 0000000A.00000000.418565764.000000002D901000.00000020.00000001.01000000.00000007.sdmp, bcae35571a762b408b0a7ce9cef941cd.tmp.6.dr
Source:	Binary string: t:\outlook\x86\ship\0\cnfnot32.pdb\ship\0\cnfnot32.exe\bbtopt\cnfnot32O.pdb source: MSWordServices.exe, 00000008.00000002.630919973.000000002D901000.00000020.00000001.01000000.00000007.sdmp, MSWordServices.exe, 00000008.00000000.414090206.000000002D901000.00000020.00000001.01000000.00000007.sdmp, MSWordServices.exe, 0000000A.00000002.520302411.000000002D901000.00000020.00000001.01000000.00000007.sdmp, MSWordServices.exe, 0000000A.00000000.418565764.000000002D901000.00000020.00000001.01000000.00000007.sdmp
Source:	Binary string: C:\ss2\Projects\MsiWrapper\MsiCustomActions\Release\MsiCustomActions.pdb source: msws.msi, 5e5e08.msi.2.dr, MSI2270.tmp.2.dr

Source: C:\Windows\System32\msiexec.exe	File opened: z:	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	File opened: x:	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	File opened: v:	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	File opened: t:	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	File opened: r:	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	File opened: p:	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	File opened: n:	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	File opened: l:	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	File opened: j:	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	File opened: h:	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	File opened: f:	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	File opened: b:	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	File opened: y:	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	File opened: w:	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	File opened: u:	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	File opened: s:	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	File opened: q:	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	File opened: o:	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	File opened: m:	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	File opened: k:	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	File opened: i:	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	File opened: g:	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	File opened: e:	Jump to behavior
Source: C:\Windows\SysWOW64\msiexec.exe	File opened: c:	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	File opened: a:	Jump to behavior

Source: C:\Users\user\AppData\Local\Temp\MW-5f02c99a-ffa3-42d6-92b5-9b885a91c26d\files\MSWordServices.exe	Key opened: HKEY_CURRENT_USER_CLASSES\Wow6432Node\CLSID\{0F87369F-A4E5-4CFC-BD3E-73E6154572DD}	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\MW-5f02c99a-ffa3-42d6-92b5-9b885a91c26d\files\MSWordServices.exe	Key opened: HKEY_LOCAL_MACHINE\Software\Classes\Wow6432Node\CLSID\{0F87369F-A4E5-4CFC-BD3E-73E6154572DD}	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\MW-5f02c99a-ffa3-42d6-92b5-9b885a91c26d\files\MSWordServices.exe	Key opened: HKEY_CURRENT_USER_Classes\Wow6432Node\CLSID\{0F87369F-A4E5-4CFC-BD3E-73E6154572DD}\TreatAs	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\MW-5f02c99a-ffa3-42d6-92b5-9b885a91c26d\files\MSWordServices.exe	Key opened: HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{0F87369F-A4E5-4CFC-BD3E-73E6154572DD}\TreatAs	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\MW-5f02c99a-ffa3-42d6-92b5-9b885a91c26d\files\MSWordServices.exe	Key opened: HKEY_CURRENT_USER_Classes\Wow6432Node\CLSID\{0F87369F-A4E5-4CFC-BD3E-73E6154572DD}\Progid	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\MW-5f02c99a-ffa3-42d6-92b5-9b885a91c26d\files\MSWordServices.exe	Key opened: HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{0F87369F-A4E5-4CFC-BD3E-73E6154572DD}\Progid	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\MW-5f02c99a-ffa3-42d6-92b5-9b885a91c26d\files\MSWordServices.exe	Key opened: HKEY_CURRENT_USER_Classes\Wow6432Node\CLSID\{0F87369F-A4E5-4CFC-BD3E-73E6154572DD}\ProgID	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\MW-5f02c99a-ffa3-42d6-92b5-9b885a91c26d\files\MSWordServices.exe	Key opened: HKEY_CURRENT_USER_Classes\Wow6432Node\CLSID\{0F87369F-A4E5-4CFC-BD3E-73E6154572DD}\Progid	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\MW-5f02c99a-ffa3-42d6-92b5-9b885a91c26d\files\MSWordServices.exe	Key opened: HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{0F87369F-A4E5-4CFC-BD3E-73E6154572DD}\Progid	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\MW-5f02c99a-ffa3-42d6-92b5-9b885a91c26d\files\MSWordServices.exe	Key opened: HKEY_CURRENT_USER_Classes\Wow6432Node\CLSID\{0F87369F-A4E5-4CFC-BD3E-73E6154572DD}\ProgID	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\MW-5f02c99a-ffa3-42d6-92b5-9b885a91c26d\files\MSWordServices.exe	Key opened: HKEY_CURRENT_USER_Classes\Wow6432Node\CLSID\{0F87369F-A4E5-4CFC-BD3E-73E6154572DD}	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\MW-5f02c99a-ffa3-42d6-92b5-9b885a91c26d\files\MSWordServices.exe	Key opened: HKEY_CURRENT_USER_Classes\Wow6432Node\CLSID\{0F87369F-A4E5-4CFC-BD3E-73E6154572DD}	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\MW-5f02c99a-ffa3-42d6-92b5-9b885a91c26d\files\MSWordServices.exe	Key opened: HKEY_CURRENT_USER_Classes\Wow6432Node\CLSID\{0F87369F-A4E5-4CFC-BD3E-73E6154572DD}\InprocServer32	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\MW-5f02c99a-ffa3-42d6-92b5-9b885a91c26d\files\MSWordServices.exe	Key opened: HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{0F87369F-A4E5-4CFC-BD3E-73E6154572DD}\InprocServer32	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\MW-5f02c99a-ffa3-42d6-92b5-9b885a91c26d\files\MSWordServices.exe	Key opened: HKEY_CURRENT_USER_Classes\Wow6432Node\CLSID\{0F87369F-A4E5-4CFC-BD3E-73E6154572DD}\InprocServer32	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\MW-5f02c99a-ffa3-42d6-92b5-9b885a91c26d\files\MSWordServices.exe	Key opened: HKEY_CURRENT_USER_Classes\Wow6432Node\CLSID\{0F87369F-A4E5-4CFC-BD3E-73E6154572DD}\InprocHandler32	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\MW-5f02c99a-ffa3-42d6-92b5-9b885a91c26d\files\MSWordServices.exe	Key opened: HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{0F87369F-A4E5-4CFC-BD3E-73E6154572DD}\InprocHandler32	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\MW-5f02c99a-ffa3-42d6-92b5-9b885a91c26d\files\MSWordServices.exe	Key opened: HKEY_CURRENT_USER_Classes\Wow6432Node\CLSID\{0F87369F-A4E5-4CFC-BD3E-73E6154572DD}\InprocHandler	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\MW-5f02c99a-ffa3-42d6-92b5-9b885a91c26d\files\MSWordServices.exe	Key opened: HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{0F87369F-A4E5-4CFC-BD3E-73E6154572DD}\InprocHandler	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\MW-5f02c99a-ffa3-42d6-92b5-9b885a91c26d\files\MSWordServices.exe	Key opened: HKEY_CURRENT_USER_CLASSES\Wow6432Node\CLSID\{0F87369F-A4E5-4CFC-BD3E-73E6154572DD}	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\MW-5f02c99a-ffa3-42d6-92b5-9b885a91c26d\files\MSWordServices.exe	Key opened: HKEY_LOCAL_MACHINE\Software\Classes\Wow6432Node\CLSID\{0F87369F-A4E5-4CFC-BD3E-73E6154572DD}	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\MW-5f02c99a-ffa3-42d6-92b5-9b885a91c26d\files\MSWordServices.exe	Key opened: HKEY_CURRENT_USER_Classes\Wow6432Node\CLSID\{0F87369F-A4E5-4CFC-BD3E-73E6154572DD}\TreatAs	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\MW-5f02c99a-ffa3-42d6-92b5-9b885a91c26d\files\MSWordServices.exe	Key opened: HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{0F87369F-A4E5-4CFC-BD3E-73E6154572DD}\TreatAs	Jump to behavior

Source: C:\Users\user\AppData\Local\Temp\MW-5f02c99a-ffa3-42d6-92b5-9b885a91c26d\files\MSWordServices.exe	Code function: 8_2_6907A2F4 FindFirstFileExW,		8_2_6907A2F4
Source: C:\Users\user\AppData\Local\Temp\MW-5f02c99a-ffa3-42d6-92b5-9b885a91c26d\files\MSWordServices.exe	Code function: 10_2_6907A2F4 FindFirstFileExW,		10_2_6907A2F4

Networking

Uses dynamic DNS services

Source: unknown

DNS query: name: outlook-web.ddns.net

Source: Joe Sandbox View

ASN Name: EDIS-AS-EUAT EDIS-AS-EUAT

Source: global traffic

DNS traffic detected: DNS query: outlook-web.ddns.net

Source: unknown	Network traffic detected: HTTP traffic on port 49336 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49577 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50693 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49451 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51422 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50211 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50452 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51663 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49210 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51548 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50578 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50440 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51892 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52518 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51410 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49692 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49463 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50325 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51777 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51524 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49324 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49590 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50464 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50108 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52404 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51319 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50439 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49680 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49589 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51651 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49222 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51789 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50337 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52506 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51320 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50566 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51880 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49553 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50235 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50795 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51687 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52416 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49246 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50783 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51512 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50591 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49426 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50301 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51753 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49438 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49361 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52302 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50656 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51699 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50247 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51561 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49312 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51446 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51626 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49234 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50313 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51765 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49565 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51434 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49896 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49770 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52555 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51103 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50259 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50771 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50121 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51307 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51500 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51573 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49300 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51638 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49373 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52428 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50644 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52516
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52517
Source: unknown	Network traffic detected: HTTP traffic on port 50386 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51115 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52514
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52515
Source: unknown	Network traffic detected: HTTP traffic on port 52567 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52518
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52519
Source: unknown	Network traffic detected: HTTP traffic on port 50632 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52512
Source: unknown	Network traffic detected: HTTP traffic on port 50873 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52513
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52510
Source: unknown	Network traffic detected: HTTP traffic on port 52326 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52511
Source: unknown	Network traffic detected: HTTP traffic on port 49769 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50758 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50999 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52527
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52528
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52525
Source: unknown	Network traffic detected: HTTP traffic on port 50505 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52526
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52529
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52520
Source: unknown	Network traffic detected: HTTP traffic on port 50987 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52453 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49872 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51957 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52523
Source: unknown	Network traffic detected: HTTP traffic on port 51001 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52524
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52521
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52522
Source: unknown	Network traffic detected: HTTP traffic on port 52200 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52338 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50885 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51207
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52538
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51208
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52539
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51205
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52536
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51206
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52537
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51209
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52530
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51200
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52531
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51203
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52534
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51204
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52535
Source: unknown	Network traffic detected: HTTP traffic on port 50374 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51201
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52532
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51202
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52533
Source: unknown	Network traffic detected: HTTP traffic on port 49745 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49986 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50861 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51254 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50620 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52314 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49499 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49757 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51218
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52549
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51219
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51216
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52547
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51217
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52548
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51210
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52541
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51211
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52542
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52540
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51214
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52545
Source: unknown	Network traffic detected: HTTP traffic on port 50897 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51215
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52546
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51212
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52543
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51213
Source: unknown	Network traffic detected: HTTP traffic on port 52212 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52544
Source: unknown	Network traffic detected: HTTP traffic on port 52579 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 63568 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49884 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52441 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51945 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51127 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49733 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51140 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52592 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49618 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49859 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51266 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51933 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51025 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49487 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52477 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50350 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50607 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50362 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51806 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51139 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49721 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52580 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50734 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50476 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51790 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50619 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49209 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51675 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50223 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51409 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49860 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51921 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50349 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52465 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49606 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49348 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51013 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52505
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52506
Source: unknown	Network traffic detected: HTTP traffic on port 49998 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52503
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52504
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52509
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52507
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52508
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52501
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52502
Source: unknown	Network traffic detected: HTTP traffic on port 50488 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50746 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52500
Source: unknown	Network traffic detected: HTTP traffic on port 49475 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51278 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51536 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51144
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52475
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51145
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52476
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51142
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52473
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51143
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52474
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51148
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52479
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51149
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51146
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52477
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51147
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52478
Source: unknown	Network traffic detected: HTTP traffic on port 51176 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51151
Source: unknown	Network traffic detected: HTTP traffic on port 52146 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52482
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51152
Source: unknown	Network traffic detected: HTTP traffic on port 52387 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52483
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52480
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51150
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52481
Source: unknown	Network traffic detected: HTTP traffic on port 51164 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52375 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51155
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52486
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51156
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52487
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51153
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52484
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51154
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52485
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51159
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51157
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52488
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51158
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52489
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52490
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51162
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52493
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51163
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52494
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51160
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52491
Source: unknown	Network traffic detected: HTTP traffic on port 49823 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50812 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51161
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52492
Source: unknown	Network traffic detected: HTTP traffic on port 50080 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52158 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51166
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52497
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51167
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52498
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51164
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52495
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51165
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52496
Source: unknown	Network traffic detected: HTTP traffic on port 51152 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51168
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52499
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51169
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51170
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51173
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51174
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51171
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51172
Source: unknown	Network traffic detected: HTTP traffic on port 49847 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50824 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51177
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51178
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51175
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51176
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51179
Source: unknown	Network traffic detected: HTTP traffic on port 50079 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51180
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51181
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51184
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51185
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51182
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51183
Source: unknown	Network traffic detected: HTTP traffic on port 49811 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52110 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51108
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52439
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51109
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51106
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52437
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51107
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52438
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51100
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52431
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51101
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52432
Source: unknown	Network traffic detected: HTTP traffic on port 50055 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52430
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51104
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52435
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51105
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52436
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51102
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52433
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51103
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52434
Source: unknown	Network traffic detected: HTTP traffic on port 50848 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51119
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51117
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52448
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51118
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52449
Source: unknown	Network traffic detected: HTTP traffic on port 52109 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51111
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52442
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51112
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52440
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51110
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52441
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51115
Source: unknown	Network traffic detected: HTTP traffic on port 52087 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52446
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51116
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52447
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51113
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52444
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51114
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52445
Source: unknown	Network traffic detected: HTTP traffic on port 51704 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52171 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52450
Source: unknown	Network traffic detected: HTTP traffic on port 50067 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52351 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51128
Source: unknown	Network traffic detected: HTTP traffic on port 51188 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52459
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51129
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51122
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52453
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51123
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52454
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51120
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52451
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51121
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52452
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51126
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52457
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51127
Source: unknown	Network traffic detected: HTTP traffic on port 52363 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52458
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51124
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52455
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51125
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52456
Source: unknown	Network traffic detected: HTTP traffic on port 50836 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52460
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51130
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52461
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51139
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51133
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52464
Source: unknown	Network traffic detected: HTTP traffic on port 49835 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51134
Source: unknown	Network traffic detected: HTTP traffic on port 51242 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52465
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51131
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52462
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51132
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52463
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51137
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52468
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51138
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52469
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51135
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52466
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51136
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52467
Source: unknown	Network traffic detected: HTTP traffic on port 49504 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51140
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52471
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51141
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52472
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52470
Source: unknown	Network traffic detected: HTTP traffic on port 52099 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51230 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51471 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50260 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52063 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51969 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50517 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49528 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51728 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49271 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49516 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50018 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51970 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50529 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49258 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50031 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51483 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51495 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50043 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50272 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51982 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52075 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49782 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50530 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49295 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51716 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51458 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51229 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50006 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50296 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51205 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51188
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51189
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51186
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51187
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51191
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51192
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51190
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51195
Source: unknown	Network traffic detected: HTTP traffic on port 51994 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50542 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51196
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51193
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51194
Source: unknown	Network traffic detected: HTTP traffic on port 49541 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51741 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51199
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51197
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51198
Source: unknown	Network traffic detected: HTTP traffic on port 49794 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52122 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51217 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52051 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50800 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50554 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52399 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49283 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52134 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50284 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51044 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52255 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49199 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51032 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49841 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50956 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49714 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51056 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49187 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50932 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52116 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52141 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52231 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51020 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49828 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50291 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50968 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50601 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52243 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49726 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49853 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52279 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51490 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51709 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52104 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50920 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50919 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52153 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52218 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52165 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51710 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49636 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52280 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52093 -> 443

Source: C:\Users\user\AppData\Local\Temp\MW-5f02c99a-ffa3-42d6-92b5-9b885a91c26d\files\MSWordServices.exe

Code function: 8_2_2D90BB17 GetParent,GetAsyncKeyState,SendMessageA,

8_2_2D90BB17

Source: C:\Users\user\AppData\Local\Temp\MW-5f02c99a-ffa3-42d6-92b5-9b885a91c26d\files\MSWordServices.exe	Code function: 8_2_2D912F1C GetKeyState,GetKeyState,GetKeyState,GetKeyState,		8_2_2D912F1C
Source: C:\Users\user\AppData\Local\Temp\MW-5f02c99a-ffa3-42d6-92b5-9b885a91c26d\files\MSWordServices.exe	Code function: 10_2_2D912F1C GetKeyState,GetKeyState,GetKeyState,GetKeyState,		10_2_2D912F1C

Source: C:\Windows\SysWOW64\expand.exe	Memory allocated: 770B0000 page execute and read and write	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\MW-5f02c99a-ffa3-42d6-92b5-9b885a91c26d\files\MSWordServices.exe	Memory allocated: 770B0000 page execute and read and write	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\MW-5f02c99a-ffa3-42d6-92b5-9b885a91c26d\files\MSWordServices.exe	Memory allocated: 770B0000 page execute and read and write	Jump to behavior

Source: C:\Windows\System32\msiexec.exe	File created: C:\Windows\Installer\5e5e08.msi	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	File created: C:\Windows\Installer\SourceHash{E22E6085-4A70-49E4-B1C5-4305B74C3132}	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	File created: C:\Windows\Installer\5e5e09.ipi	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	File created: C:\Windows\Installer\5e5e09.ipi	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	File created: C:\Windows\Installer\MSI2270.tmp	Jump to behavior
Source: C:\Windows\SysWOW64\expand.exe	File created: C:\Windows\Logs\DPX\setupact.log	Jump to behavior
Source: C:\Windows\SysWOW64\expand.exe	File created: C:\Windows\Logs\DPX\setuperr.log	Jump to behavior

Source: C:\Windows\System32\msiexec.exe

File deleted: C:\Windows\Installer\5e5e09.ipi

Jump to behavior

Source: C:\Users\user\AppData\Local\Temp\MW-5f02c99a-ffa3-42d6-92b5-9b885a91c26d\files\MSWordServices.exe	Code function: 8_2_2D911D25	8_2_2D911D25
Source: C:\Users\user\AppData\Local\Temp\MW-5f02c99a-ffa3-42d6-92b5-9b885a91c26d\files\MSWordServices.exe	Code function: 8_2_2D90DC78	8_2_2D90DC78
Source: C:\Users\user\AppData\Local\Temp\MW-5f02c99a-ffa3-42d6-92b5-9b885a91c26d\files\MSWordServices.exe	Code function: 8_2_690580D7	8_2_690580D7
Source: C:\Users\user\AppData\Local\Temp\MW-5f02c99a-ffa3-42d6-92b5-9b885a91c26d\files\MSWordServices.exe	Code function: 8_2_6907C9F2	8_2_6907C9F2
Source: C:\Users\user\AppData\Local\Temp\MW-5f02c99a-ffa3-42d6-92b5-9b885a91c26d\files\MSWordServices.exe	Code function: 8_2_69078869	8_2_69078869
Source: C:\Users\user\AppData\Local\Temp\MW-5f02c99a-ffa3-42d6-92b5-9b885a91c26d\files\MSWordServices.exe	Code function: 8_2_69062AF0	8_2_69062AF0
Source: C:\Users\user\AppData\Local\Temp\MW-5f02c99a-ffa3-42d6-92b5-9b885a91c26d\files\MSWordServices.exe	Code function: 8_2_69075CB2	8_2_69075CB2
Source: C:\Users\user\AppData\Local\Temp\MW-5f02c99a-ffa3-42d6-92b5-9b885a91c26d\files\MSWordServices.exe	Code function: 8_2_6906BFDC	8_2_6906BFDC
Source: C:\Users\user\AppData\Local\Temp\MW-5f02c99a-ffa3-42d6-92b5-9b885a91c26d\files\MSWordServices.exe	Code function: 8_2_6907203C	8_2_6907203C
Source: C:\Users\user\AppData\Local\Temp\MW-5f02c99a-ffa3-42d6-92b5-9b885a91c26d\files\MSWordServices.exe	Code function: 8_2_6906C36A	8_2_6906C36A
Source: C:\Users\user\AppData\Local\Temp\MW-5f02c99a-ffa3-42d6-92b5-9b885a91c26d\files\MSWordServices.exe	Code function: 8_2_6907E384	8_2_6907E384
Source: C:\Users\user\AppData\Local\Temp\MW-5f02c99a-ffa3-42d6-92b5-9b885a91c26d\files\MSWordServices.exe	Code function: 8_2_6906E7A0	8_2_6906E7A0
Source: C:\Users\user\AppData\Local\Temp\MW-5f02c99a-ffa3-42d6-92b5-9b885a91c26d\files\MSWordServices.exe	Code function: 10_2_2D911D25	10_2_2D911D25
Source: C:\Users\user\AppData\Local\Temp\MW-5f02c99a-ffa3-42d6-92b5-9b885a91c26d\files\MSWordServices.exe	Code function: 10_2_2D90DC78	10_2_2D90DC78
Source: C:\Users\user\AppData\Local\Temp\MW-5f02c99a-ffa3-42d6-92b5-9b885a91c26d\files\MSWordServices.exe	Code function: 10_2_6907C9F2	10_2_6907C9F2
Source: C:\Users\user\AppData\Local\Temp\MW-5f02c99a-ffa3-42d6-92b5-9b885a91c26d\files\MSWordServices.exe	Code function: 10_2_69078869	10_2_69078869
Source: C:\Users\user\AppData\Local\Temp\MW-5f02c99a-ffa3-42d6-92b5-9b885a91c26d\files\MSWordServices.exe	Code function: 10_2_69062AF0	10_2_69062AF0
Source: C:\Users\user\AppData\Local\Temp\MW-5f02c99a-ffa3-42d6-92b5-9b885a91c26d\files\MSWordServices.exe	Code function: 10_2_69075CB2	10_2_69075CB2
Source: C:\Users\user\AppData\Local\Temp\MW-5f02c99a-ffa3-42d6-92b5-9b885a91c26d\files\MSWordServices.exe	Code function: 10_2_6906BFDC	10_2_6906BFDC
Source: C:\Users\user\AppData\Local\Temp\MW-5f02c99a-ffa3-42d6-92b5-9b885a91c26d\files\MSWordServices.exe	Code function: 10_2_6907203C	10_2_6907203C
Source: C:\Users\user\AppData\Local\Temp\MW-5f02c99a-ffa3-42d6-92b5-9b885a91c26d\files\MSWordServices.exe	Code function: 10_2_690580D7	10_2_690580D7
Source: C:\Users\user\AppData\Local\Temp\MW-5f02c99a-ffa3-42d6-92b5-9b885a91c26d\files\MSWordServices.exe	Code function: 10_2_6906C36A	10_2_6906C36A
Source: C:\Users\user\AppData\Local\Temp\MW-5f02c99a-ffa3-42d6-92b5-9b885a91c26d\files\MSWordServices.exe	Code function: 10_2_6907E384	10_2_6907E384
Source: C:\Users\user\AppData\Local\Temp\MW-5f02c99a-ffa3-42d6-92b5-9b885a91c26d\files\MSWordServices.exe	Code function: 10_2_6906E7A0	10_2_6906E7A0

Source: C:\Users\user\AppData\Local\Temp\MW-5f02c99a-ffa3-42d6-92b5-9b885a91c26d\files\MSWordServices.exe	Code function: String function: 2D913812 appears 42 times
Source: C:\Users\user\AppData\Local\Temp\MW-5f02c99a-ffa3-42d6-92b5-9b885a91c26d\files\MSWordServices.exe	Code function: String function: 2D9179AF appears 154 times
Source: C:\Users\user\AppData\Local\Temp\MW-5f02c99a-ffa3-42d6-92b5-9b885a91c26d\files\MSWordServices.exe	Code function: String function: 2D91793E appears 38 times
Source: C:\Users\user\AppData\Local\Temp\MW-5f02c99a-ffa3-42d6-92b5-9b885a91c26d\files\MSWordServices.exe	Code function: String function: 69072C29 appears 34 times
Source: C:\Users\user\AppData\Local\Temp\MW-5f02c99a-ffa3-42d6-92b5-9b885a91c26d\files\MSWordServices.exe	Code function: String function: 69054A5D appears 70 times
Source: C:\Users\user\AppData\Local\Temp\MW-5f02c99a-ffa3-42d6-92b5-9b885a91c26d\files\MSWordServices.exe	Code function: String function: 6906DDA4 appears 52 times
Source: C:\Users\user\AppData\Local\Temp\MW-5f02c99a-ffa3-42d6-92b5-9b885a91c26d\files\MSWordServices.exe	Code function: String function: 69062890 appears 114 times
Source: C:\Users\user\AppData\Local\Temp\MW-5f02c99a-ffa3-42d6-92b5-9b885a91c26d\files\MSWordServices.exe	Code function: String function: 2D9179E2 appears 42 times
Source: C:\Users\user\AppData\Local\Temp\MW-5f02c99a-ffa3-42d6-92b5-9b885a91c26d\files\MSWordServices.exe	Code function: String function: 2D915923 appears 40 times

Source: metadata-2.2.dr	Binary string: highlight.png22\\?\Volume{8049f198-1016-11e7-b87b-806e6f6e6963}\66program files\windows sidebar\gadgets\rssfeeds.gadgeticon.png22\\?\Volume{8049f198-1016-11e7-b87b-806e6f6e6963}\QQprogramdata\microsoft\device stage\device\{113527a4-45d4-4b6f-b567-97838f1b04b0}
Source: metadata-2.2.dr	Binary string: wmplayer.exe.mui22\\?\Volume{8049f198-1016-11e7-b87b-806e6f6e6963}\BBprogram files (x86)\windows sidebar\gadgets\weather.gadget\images**undocked_black_moon-new_partly-cloudy.png22\\?\Volume{8049f198-1016-11e7-b87b-806e6f6e6963}\((windows\diagnostics\system\device\en-us
Source: metadata-2.2.dr	Binary string: buttonup_off.png22\\?\Volume{8049f198-1016-11e7-b87b-806e6f6e6963}\QQprogramdata\microsoft\device stage\device\{113527a4-45d4-4b6f-b567-97838f1b04b0}
Source: metadata-2.2.dr	Binary string: system.web.dynamicdata.dll22\\?\Volume{8049f198-1016-11e7-b87b-806e6f6e6963}\BBprogram files (x86)\windows sidebar\gadgets\weather.gadget\images33docked_black_moon-waxing-gibbous_partly-cloudy.png22\\?\Volume{8049f198-1016-11e7-b87b-806e6f6e6963}\QQprogramdata\microsoft\device stage\device\{8702d817-5aad-4674-9ef3-4d3decd87120}
Source: metadata-2.2.dr	Binary string: system.addin.contract.dll22\\?\Volume{8049f198-1016-11e7-b87b-806e6f6e6963}\QQprogramdata\microsoft\device stage\device\{113527a4-45d4-4b6f-b567-97838f1b04b0}
Source: metadata-2.2.dr	Binary string: btn-previous-static.png22\\?\Volume{8049f198-1016-11e7-b87b-806e6f6e6963}\QQprogramdata\microsoft\device stage\device\{8702d817-5aad-4674-9ef3-4d3decd87120}
Source: metadata-2.2.dr	Binary string: keypad.xml22\\?\Volume{8049f198-1016-11e7-b87b-806e6f6e6963}\99program files\dvd maker\shared\dvdstyles\specialoccasion,,specialnavigationup_selectionsubpicture.png22\\?\Volume{8049f198-1016-11e7-b87b-806e6f6e6963}\QQprogramdata\microsoft\device stage\device\{8702d817-5aad-4674-9ef3-4d3decd87120}
Source: metadata-2.2.dr	Binary string: scenes_intro_bg_pal.wmv22\\?\Volume{8049f198-1016-11e7-b87b-806e6f6e6963}\QQprogramdata\microsoft\device stage\device\{113527a4-45d4-4b6f-b567-97838f1b04b0}
Source: metadata-2.2.dr	Binary string: acxtrnal.dll22\\?\Volume{8049f198-1016-11e7-b87b-806e6f6e6963}\((windows\diagnostics\system\device\en-us
Source: metadata-2.2.dr	Binary string: sbdrop.dll22\\?\Volume{8049f198-1016-11e7-b87b-806e6f6e6963}\QQprogramdata\microsoft\device stage\device\{113527a4-45d4-4b6f-b567-97838f1b04b0}

Source: classification engine

Classification label: mal88.troj.evad.winMSI@11/16@3464/1

Source: C:\Users\user\AppData\Local\Temp\MW-5f02c99a-ffa3-42d6-92b5-9b885a91c26d\files\MSWordServices.exe

Code function: 8_2_69057E9F CreateToolhelp32Snapshot,Process32First,CloseHandle,OpenProcess,Process32Next,CloseHandle,

8_2_69057E9F

Source: C:\Users\user\AppData\Local\Temp\MW-5f02c99a-ffa3-42d6-92b5-9b885a91c26d\files\MSWordServices.exe

Code function: 8_2_6905CB90 CoInitializeEx,CoInitializeSecurity,CoUninitialize,GetModuleFileNameW,CoCreateInstance,CoUninitialize,CoUninitialize,CoUninitialize,CoUninitialize,CoUninitialize,CoUninitialize,CoUninitialize,CoUninitialize,CoUninitialize,CoUninitialize,CoUninitialize,CoUninitialize,CoUninitialize,CoUninitialize,CoUninitialize,CoUninitialize,CoUninitialize,CoUninitialize,CoUninitialize,CoUninitialize,CoUninitialize,CoUninitialize,CoUninitialize,CoUninitialize,CoUninitialize,

8_2_6905CB90

Source: C:\Users\user\AppData\Local\Temp\MW-5f02c99a-ffa3-42d6-92b5-9b885a91c26d\files\MSWordServices.exe

Code function: 8_2_2D915C05 FindResourceA,

8_2_2D915C05

Source: C:\Windows\System32\msiexec.exe

File created: C:\Users\user\AppData\Local\Temp\~DFFC47027088490937.TMP

Jump to behavior

Source: C:\Windows\SysWOW64\msiexec.exe

File read: C:\Users\user\AppData\Local\Temp\MW-5f02c99a-ffa3-42d6-92b5-9b885a91c26d\msiwrapper.ini

Jump to behavior

Source: C:\Windows\SysWOW64\expand.exe

Key opened: HKEY_CURRENT_USER\Software\Policies\Microsoft\Windows\Safer\CodeIdentifiers

Jump to behavior

Source: C:\Users\user\AppData\Local\Temp\MW-5f02c99a-ffa3-42d6-92b5-9b885a91c26d\files\MSWordServices.exe

Key value created or modified: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion RegisteredOrganization

Jump to behavior

Source: C:\Users\user\AppData\Local\Temp\MW-5f02c99a-ffa3-42d6-92b5-9b885a91c26d\files\MSWordServices.exe	File read: C:\Windows\System32\drivers\etc\hosts	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\MW-5f02c99a-ffa3-42d6-92b5-9b885a91c26d\files\MSWordServices.exe	File read: C:\Windows\System32\drivers\etc\hosts	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\MW-5f02c99a-ffa3-42d6-92b5-9b885a91c26d\files\MSWordServices.exe	File read: C:\Windows\System32\drivers\etc\hosts	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\MW-5f02c99a-ffa3-42d6-92b5-9b885a91c26d\files\MSWordServices.exe	File read: C:\Windows\System32\drivers\etc\hosts	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\MW-5f02c99a-ffa3-42d6-92b5-9b885a91c26d\files\MSWordServices.exe	File read: C:\Windows\System32\drivers\etc\hosts	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\MW-5f02c99a-ffa3-42d6-92b5-9b885a91c26d\files\MSWordServices.exe	File read: C:\Windows\System32\drivers\etc\hosts	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\MW-5f02c99a-ffa3-42d6-92b5-9b885a91c26d\files\MSWordServices.exe	File read: C:\Windows\System32\drivers\etc\hosts	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\MW-5f02c99a-ffa3-42d6-92b5-9b885a91c26d\files\MSWordServices.exe	File read: C:\Windows\System32\drivers\etc\hosts	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\MW-5f02c99a-ffa3-42d6-92b5-9b885a91c26d\files\MSWordServices.exe	File read: C:\Windows\System32\drivers\etc\hosts	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\MW-5f02c99a-ffa3-42d6-92b5-9b885a91c26d\files\MSWordServices.exe	File read: C:\Windows\System32\drivers\etc\hosts	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\MW-5f02c99a-ffa3-42d6-92b5-9b885a91c26d\files\MSWordServices.exe	File read: C:\Windows\System32\drivers\etc\hosts	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\MW-5f02c99a-ffa3-42d6-92b5-9b885a91c26d\files\MSWordServices.exe	File read: C:\Windows\System32\drivers\etc\hosts	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\MW-5f02c99a-ffa3-42d6-92b5-9b885a91c26d\files\MSWordServices.exe	File read: C:\Windows\System32\drivers\etc\hosts	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\MW-5f02c99a-ffa3-42d6-92b5-9b885a91c26d\files\MSWordServices.exe	File read: C:\Windows\System32\drivers\etc\hosts	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\MW-5f02c99a-ffa3-42d6-92b5-9b885a91c26d\files\MSWordServices.exe	File read: C:\Windows\System32\drivers\etc\hosts	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\MW-5f02c99a-ffa3-42d6-92b5-9b885a91c26d\files\MSWordServices.exe	File read: C:\Windows\System32\drivers\etc\hosts	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\MW-5f02c99a-ffa3-42d6-92b5-9b885a91c26d\files\MSWordServices.exe	File read: C:\Windows\System32\drivers\etc\hosts	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\MW-5f02c99a-ffa3-42d6-92b5-9b885a91c26d\files\MSWordServices.exe	File read: C:\Windows\System32\drivers\etc\hosts	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\MW-5f02c99a-ffa3-42d6-92b5-9b885a91c26d\files\MSWordServices.exe	File read: C:\Windows\System32\drivers\etc\hosts	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\MW-5f02c99a-ffa3-42d6-92b5-9b885a91c26d\files\MSWordServices.exe	File read: C:\Windows\System32\drivers\etc\hosts	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\MW-5f02c99a-ffa3-42d6-92b5-9b885a91c26d\files\MSWordServices.exe	File read: C:\Windows\System32\drivers\etc\hosts	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\MW-5f02c99a-ffa3-42d6-92b5-9b885a91c26d\files\MSWordServices.exe	File read: C:\Windows\System32\drivers\etc\hosts	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\MW-5f02c99a-ffa3-42d6-92b5-9b885a91c26d\files\MSWordServices.exe	File read: C:\Windows\System32\drivers\etc\hosts	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\MW-5f02c99a-ffa3-42d6-92b5-9b885a91c26d\files\MSWordServices.exe	File read: C:\Windows\System32\drivers\etc\hosts	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\MW-5f02c99a-ffa3-42d6-92b5-9b885a91c26d\files\MSWordServices.exe	File read: C:\Windows\System32\drivers\etc\hosts	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\MW-5f02c99a-ffa3-42d6-92b5-9b885a91c26d\files\MSWordServices.exe	File read: C:\Windows\System32\drivers\etc\hosts	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\MW-5f02c99a-ffa3-42d6-92b5-9b885a91c26d\files\MSWordServices.exe	File read: C:\Windows\System32\drivers\etc\hosts	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\MW-5f02c99a-ffa3-42d6-92b5-9b885a91c26d\files\MSWordServices.exe	File read: C:\Windows\System32\drivers\etc\hosts	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\MW-5f02c99a-ffa3-42d6-92b5-9b885a91c26d\files\MSWordServices.exe	File read: C:\Windows\System32\drivers\etc\hosts	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\MW-5f02c99a-ffa3-42d6-92b5-9b885a91c26d\files\MSWordServices.exe	File read: C:\Windows\System32\drivers\etc\hosts	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\MW-5f02c99a-ffa3-42d6-92b5-9b885a91c26d\files\MSWordServices.exe	File read: C:\Windows\System32\drivers\etc\hosts	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\MW-5f02c99a-ffa3-42d6-92b5-9b885a91c26d\files\MSWordServices.exe	File read: C:\Windows\System32\drivers\etc\hosts	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\MW-5f02c99a-ffa3-42d6-92b5-9b885a91c26d\files\MSWordServices.exe	File read: C:\Windows\System32\drivers\etc\hosts	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\MW-5f02c99a-ffa3-42d6-92b5-9b885a91c26d\files\MSWordServices.exe	File read: C:\Windows\System32\drivers\etc\hosts	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\MW-5f02c99a-ffa3-42d6-92b5-9b885a91c26d\files\MSWordServices.exe	File read: C:\Windows\System32\drivers\etc\hosts	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\MW-5f02c99a-ffa3-42d6-92b5-9b885a91c26d\files\MSWordServices.exe	File read: C:\Windows\System32\drivers\etc\hosts	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\MW-5f02c99a-ffa3-42d6-92b5-9b885a91c26d\files\MSWordServices.exe	File read: C:\Windows\System32\drivers\etc\hosts	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\MW-5f02c99a-ffa3-42d6-92b5-9b885a91c26d\files\MSWordServices.exe	File read: C:\Windows\System32\drivers\etc\hosts	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\MW-5f02c99a-ffa3-42d6-92b5-9b885a91c26d\files\MSWordServices.exe	File read: C:\Windows\System32\drivers\etc\hosts	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\MW-5f02c99a-ffa3-42d6-92b5-9b885a91c26d\files\MSWordServices.exe	File read: C:\Windows\System32\drivers\etc\hosts	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\MW-5f02c99a-ffa3-42d6-92b5-9b885a91c26d\files\MSWordServices.exe	File read: C:\Windows\System32\drivers\etc\hosts	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\MW-5f02c99a-ffa3-42d6-92b5-9b885a91c26d\files\MSWordServices.exe	File read: C:\Windows\System32\drivers\etc\hosts	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\MW-5f02c99a-ffa3-42d6-92b5-9b885a91c26d\files\MSWordServices.exe	File read: C:\Windows\System32\drivers\etc\hosts	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\MW-5f02c99a-ffa3-42d6-92b5-9b885a91c26d\files\MSWordServices.exe	File read: C:\Windows\System32\drivers\etc\hosts	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\MW-5f02c99a-ffa3-42d6-92b5-9b885a91c26d\files\MSWordServices.exe	File read: C:\Windows\System32\drivers\etc\hosts	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\MW-5f02c99a-ffa3-42d6-92b5-9b885a91c26d\files\MSWordServices.exe	File read: C:\Windows\System32\drivers\etc\hosts	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\MW-5f02c99a-ffa3-42d6-92b5-9b885a91c26d\files\MSWordServices.exe	File read: C:\Windows\System32\drivers\etc\hosts	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\MW-5f02c99a-ffa3-42d6-92b5-9b885a91c26d\files\MSWordServices.exe	File read: C:\Windows\System32\drivers\etc\hosts	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\MW-5f02c99a-ffa3-42d6-92b5-9b885a91c26d\files\MSWordServices.exe	File read: C:\Windows\System32\drivers\etc\hosts	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\MW-5f02c99a-ffa3-42d6-92b5-9b885a91c26d\files\MSWordServices.exe	File read: C:\Windows\System32\drivers\etc\hosts	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\MW-5f02c99a-ffa3-42d6-92b5-9b885a91c26d\files\MSWordServices.exe	File read: C:\Windows\System32\drivers\etc\hosts	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\MW-5f02c99a-ffa3-42d6-92b5-9b885a91c26d\files\MSWordServices.exe	File read: C:\Windows\System32\drivers\etc\hosts	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\MW-5f02c99a-ffa3-42d6-92b5-9b885a91c26d\files\MSWordServices.exe	File read: C:\Windows\System32\drivers\etc\hosts	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\MW-5f02c99a-ffa3-42d6-92b5-9b885a91c26d\files\MSWordServices.exe	File read: C:\Windows\System32\drivers\etc\hosts	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\MW-5f02c99a-ffa3-42d6-92b5-9b885a91c26d\files\MSWordServices.exe	File read: C:\Windows\System32\drivers\etc\hosts	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\MW-5f02c99a-ffa3-42d6-92b5-9b885a91c26d\files\MSWordServices.exe	File read: C:\Windows\System32\drivers\etc\hosts	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\MW-5f02c99a-ffa3-42d6-92b5-9b885a91c26d\files\MSWordServices.exe	File read: C:\Windows\System32\drivers\etc\hosts	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\MW-5f02c99a-ffa3-42d6-92b5-9b885a91c26d\files\MSWordServices.exe	File read: C:\Windows\System32\drivers\etc\hosts	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\MW-5f02c99a-ffa3-42d6-92b5-9b885a91c26d\files\MSWordServices.exe	File read: C:\Windows\System32\drivers\etc\hosts	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\MW-5f02c99a-ffa3-42d6-92b5-9b885a91c26d\files\MSWordServices.exe	File read: C:\Windows\System32\drivers\etc\hosts	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\MW-5f02c99a-ffa3-42d6-92b5-9b885a91c26d\files\MSWordServices.exe	File read: C:\Windows\System32\drivers\etc\hosts	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\MW-5f02c99a-ffa3-42d6-92b5-9b885a91c26d\files\MSWordServices.exe	File read: C:\Windows\System32\drivers\etc\hosts	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\MW-5f02c99a-ffa3-42d6-92b5-9b885a91c26d\files\MSWordServices.exe	File read: C:\Windows\System32\drivers\etc\hosts	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\MW-5f02c99a-ffa3-42d6-92b5-9b885a91c26d\files\MSWordServices.exe	File read: C:\Windows\System32\drivers\etc\hosts	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\MW-5f02c99a-ffa3-42d6-92b5-9b885a91c26d\files\MSWordServices.exe	File read: C:\Windows\System32\drivers\etc\hosts	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\MW-5f02c99a-ffa3-42d6-92b5-9b885a91c26d\files\MSWordServices.exe	File read: C:\Windows\System32\drivers\etc\hosts	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\MW-5f02c99a-ffa3-42d6-92b5-9b885a91c26d\files\MSWordServices.exe	File read: C:\Windows\System32\drivers\etc\hosts	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\MW-5f02c99a-ffa3-42d6-92b5-9b885a91c26d\files\MSWordServices.exe	File read: C:\Windows\System32\drivers\etc\hosts	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\MW-5f02c99a-ffa3-42d6-92b5-9b885a91c26d\files\MSWordServices.exe	File read: C:\Windows\System32\drivers\etc\hosts	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\MW-5f02c99a-ffa3-42d6-92b5-9b885a91c26d\files\MSWordServices.exe	File read: C:\Windows\System32\drivers\etc\hosts	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\MW-5f02c99a-ffa3-42d6-92b5-9b885a91c26d\files\MSWordServices.exe	File read: C:\Windows\System32\drivers\etc\hosts	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\MW-5f02c99a-ffa3-42d6-92b5-9b885a91c26d\files\MSWordServices.exe	File read: C:\Windows\System32\drivers\etc\hosts	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\MW-5f02c99a-ffa3-42d6-92b5-9b885a91c26d\files\MSWordServices.exe	File read: C:\Windows\System32\drivers\etc\hosts	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\MW-5f02c99a-ffa3-42d6-92b5-9b885a91c26d\files\MSWordServices.exe	File read: C:\Windows\System32\drivers\etc\hosts	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\MW-5f02c99a-ffa3-42d6-92b5-9b885a91c26d\files\MSWordServices.exe	File read: C:\Windows\System32\drivers\etc\hosts	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\MW-5f02c99a-ffa3-42d6-92b5-9b885a91c26d\files\MSWordServices.exe	File read: C:\Windows\System32\drivers\etc\hosts	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\MW-5f02c99a-ffa3-42d6-92b5-9b885a91c26d\files\MSWordServices.exe	File read: C:\Windows\System32\drivers\etc\hosts	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\MW-5f02c99a-ffa3-42d6-92b5-9b885a91c26d\files\MSWordServices.exe	File read: C:\Windows\System32\drivers\etc\hosts	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\MW-5f02c99a-ffa3-42d6-92b5-9b885a91c26d\files\MSWordServices.exe	File read: C:\Windows\System32\drivers\etc\hosts	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\MW-5f02c99a-ffa3-42d6-92b5-9b885a91c26d\files\MSWordServices.exe	File read: C:\Windows\System32\drivers\etc\hosts	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\MW-5f02c99a-ffa3-42d6-92b5-9b885a91c26d\files\MSWordServices.exe	File read: C:\Windows\System32\drivers\etc\hosts	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\MW-5f02c99a-ffa3-42d6-92b5-9b885a91c26d\files\MSWordServices.exe	File read: C:\Windows\System32\drivers\etc\hosts	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\MW-5f02c99a-ffa3-42d6-92b5-9b885a91c26d\files\MSWordServices.exe	File read: C:\Windows\System32\drivers\etc\hosts	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\MW-5f02c99a-ffa3-42d6-92b5-9b885a91c26d\files\MSWordServices.exe	File read: C:\Windows\System32\drivers\etc\hosts	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\MW-5f02c99a-ffa3-42d6-92b5-9b885a91c26d\files\MSWordServices.exe	File read: C:\Windows\System32\drivers\etc\hosts	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\MW-5f02c99a-ffa3-42d6-92b5-9b885a91c26d\files\MSWordServices.exe	File read: C:\Windows\System32\drivers\etc\hosts	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\MW-5f02c99a-ffa3-42d6-92b5-9b885a91c26d\files\MSWordServices.exe	File read: C:\Windows\System32\drivers\etc\hosts	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\MW-5f02c99a-ffa3-42d6-92b5-9b885a91c26d\files\MSWordServices.exe	File read: C:\Windows\System32\drivers\etc\hosts	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\MW-5f02c99a-ffa3-42d6-92b5-9b885a91c26d\files\MSWordServices.exe	File read: C:\Windows\System32\drivers\etc\hosts	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\MW-5f02c99a-ffa3-42d6-92b5-9b885a91c26d\files\MSWordServices.exe	File read: C:\Windows\System32\drivers\etc\hosts	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\MW-5f02c99a-ffa3-42d6-92b5-9b885a91c26d\files\MSWordServices.exe	File read: C:\Windows\System32\drivers\etc\hosts	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\MW-5f02c99a-ffa3-42d6-92b5-9b885a91c26d\files\MSWordServices.exe	File read: C:\Windows\System32\drivers\etc\hosts	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\MW-5f02c99a-ffa3-42d6-92b5-9b885a91c26d\files\MSWordServices.exe	File read: C:\Windows\System32\drivers\etc\hosts	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\MW-5f02c99a-ffa3-42d6-92b5-9b885a91c26d\files\MSWordServices.exe	File read: C:\Windows\System32\drivers\etc\hosts	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\MW-5f02c99a-ffa3-42d6-92b5-9b885a91c26d\files\MSWordServices.exe	File read: C:\Windows\System32\drivers\etc\hosts	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\MW-5f02c99a-ffa3-42d6-92b5-9b885a91c26d\files\MSWordServices.exe	File read: C:\Windows\System32\drivers\etc\hosts	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\MW-5f02c99a-ffa3-42d6-92b5-9b885a91c26d\files\MSWordServices.exe	File read: C:\Windows\System32\drivers\etc\hosts	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\MW-5f02c99a-ffa3-42d6-92b5-9b885a91c26d\files\MSWordServices.exe	File read: C:\Windows\System32\drivers\etc\hosts	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\MW-5f02c99a-ffa3-42d6-92b5-9b885a91c26d\files\MSWordServices.exe	File read: C:\Windows\System32\drivers\etc\hosts	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\MW-5f02c99a-ffa3-42d6-92b5-9b885a91c26d\files\MSWordServices.exe	File read: C:\Windows\System32\drivers\etc\hosts	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\MW-5f02c99a-ffa3-42d6-92b5-9b885a91c26d\files\MSWordServices.exe	File read: C:\Windows\System32\drivers\etc\hosts	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\MW-5f02c99a-ffa3-42d6-92b5-9b885a91c26d\files\MSWordServices.exe	File read: C:\Windows\System32\drivers\etc\hosts	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\MW-5f02c99a-ffa3-42d6-92b5-9b885a91c26d\files\MSWordServices.exe	File read: C:\Windows\System32\drivers\etc\hosts	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\MW-5f02c99a-ffa3-42d6-92b5-9b885a91c26d\files\MSWordServices.exe	File read: C:\Windows\System32\drivers\etc\hosts	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\MW-5f02c99a-ffa3-42d6-92b5-9b885a91c26d\files\MSWordServices.exe	File read: C:\Windows\System32\drivers\etc\hosts	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\MW-5f02c99a-ffa3-42d6-92b5-9b885a91c26d\files\MSWordServices.exe	File read: C:\Windows\System32\drivers\etc\hosts	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\MW-5f02c99a-ffa3-42d6-92b5-9b885a91c26d\files\MSWordServices.exe	File read: C:\Windows\System32\drivers\etc\hosts	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\MW-5f02c99a-ffa3-42d6-92b5-9b885a91c26d\files\MSWordServices.exe	File read: C:\Windows\System32\drivers\etc\hosts	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\MW-5f02c99a-ffa3-42d6-92b5-9b885a91c26d\files\MSWordServices.exe	File read: C:\Windows\System32\drivers\etc\hosts	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\MW-5f02c99a-ffa3-42d6-92b5-9b885a91c26d\files\MSWordServices.exe	File read: C:\Windows\System32\drivers\etc\hosts	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\MW-5f02c99a-ffa3-42d6-92b5-9b885a91c26d\files\MSWordServices.exe	File read: C:\Windows\System32\drivers\etc\hosts	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\MW-5f02c99a-ffa3-42d6-92b5-9b885a91c26d\files\MSWordServices.exe	File read: C:\Windows\System32\drivers\etc\hosts	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\MW-5f02c99a-ffa3-42d6-92b5-9b885a91c26d\files\MSWordServices.exe	File read: C:\Windows\System32\drivers\etc\hosts	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\MW-5f02c99a-ffa3-42d6-92b5-9b885a91c26d\files\MSWordServices.exe	File read: C:\Windows\System32\drivers\etc\hosts	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\MW-5f02c99a-ffa3-42d6-92b5-9b885a91c26d\files\MSWordServices.exe	File read: C:\Windows\System32\drivers\etc\hosts	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\MW-5f02c99a-ffa3-42d6-92b5-9b885a91c26d\files\MSWordServices.exe	File read: C:\Windows\System32\drivers\etc\hosts	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\MW-5f02c99a-ffa3-42d6-92b5-9b885a91c26d\files\MSWordServices.exe	File read: C:\Windows\System32\drivers\etc\hosts	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\MW-5f02c99a-ffa3-42d6-92b5-9b885a91c26d\files\MSWordServices.exe	File read: C:\Windows\System32\drivers\etc\hosts	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\MW-5f02c99a-ffa3-42d6-92b5-9b885a91c26d\files\MSWordServices.exe	File read: C:\Windows\System32\drivers\etc\hosts	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\MW-5f02c99a-ffa3-42d6-92b5-9b885a91c26d\files\MSWordServices.exe	File read: C:\Windows\System32\drivers\etc\hosts	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\MW-5f02c99a-ffa3-42d6-92b5-9b885a91c26d\files\MSWordServices.exe	File read: C:\Windows\System32\drivers\etc\hosts	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\MW-5f02c99a-ffa3-42d6-92b5-9b885a91c26d\files\MSWordServices.exe	File read: C:\Windows\System32\drivers\etc\hosts	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\MW-5f02c99a-ffa3-42d6-92b5-9b885a91c26d\files\MSWordServices.exe	File read: C:\Windows\System32\drivers\etc\hosts	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\MW-5f02c99a-ffa3-42d6-92b5-9b885a91c26d\files\MSWordServices.exe	File read: C:\Windows\System32\drivers\etc\hosts	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\MW-5f02c99a-ffa3-42d6-92b5-9b885a91c26d\files\MSWordServices.exe	File read: C:\Windows\System32\drivers\etc\hosts	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\MW-5f02c99a-ffa3-42d6-92b5-9b885a91c26d\files\MSWordServices.exe	File read: C:\Windows\System32\drivers\etc\hosts	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\MW-5f02c99a-ffa3-42d6-92b5-9b885a91c26d\files\MSWordServices.exe	File read: C:\Windows\System32\drivers\etc\hosts	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\MW-5f02c99a-ffa3-42d6-92b5-9b885a91c26d\files\MSWordServices.exe	File read: C:\Windows\System32\drivers\etc\hosts	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\MW-5f02c99a-ffa3-42d6-92b5-9b885a91c26d\files\MSWordServices.exe	File read: C:\Windows\System32\drivers\etc\hosts	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\MW-5f02c99a-ffa3-42d6-92b5-9b885a91c26d\files\MSWordServices.exe	File read: C:\Windows\System32\drivers\etc\hosts	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\MW-5f02c99a-ffa3-42d6-92b5-9b885a91c26d\files\MSWordServices.exe	File read: C:\Windows\System32\drivers\etc\hosts	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\MW-5f02c99a-ffa3-42d6-92b5-9b885a91c26d\files\MSWordServices.exe	File read: C:\Windows\System32\drivers\etc\hosts	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\MW-5f02c99a-ffa3-42d6-92b5-9b885a91c26d\files\MSWordServices.exe	File read: C:\Windows\System32\drivers\etc\hosts	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\MW-5f02c99a-ffa3-42d6-92b5-9b885a91c26d\files\MSWordServices.exe	File read: C:\Windows\System32\drivers\etc\hosts	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\MW-5f02c99a-ffa3-42d6-92b5-9b885a91c26d\files\MSWordServices.exe	File read: C:\Windows\System32\drivers\etc\hosts	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\MW-5f02c99a-ffa3-42d6-92b5-9b885a91c26d\files\MSWordServices.exe	File read: C:\Windows\System32\drivers\etc\hosts	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\MW-5f02c99a-ffa3-42d6-92b5-9b885a91c26d\files\MSWordServices.exe	File read: C:\Windows\System32\drivers\etc\hosts	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\MW-5f02c99a-ffa3-42d6-92b5-9b885a91c26d\files\MSWordServices.exe	File read: C:\Windows\System32\drivers\etc\hosts	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\MW-5f02c99a-ffa3-42d6-92b5-9b885a91c26d\files\MSWordServices.exe	File read: C:\Windows\System32\drivers\etc\hosts	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\MW-5f02c99a-ffa3-42d6-92b5-9b885a91c26d\files\MSWordServices.exe	File read: C:\Windows\System32\drivers\etc\hosts	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\MW-5f02c99a-ffa3-42d6-92b5-9b885a91c26d\files\MSWordServices.exe	File read: C:\Windows\System32\drivers\etc\hosts	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\MW-5f02c99a-ffa3-42d6-92b5-9b885a91c26d\files\MSWordServices.exe	File read: C:\Windows\System32\drivers\etc\hosts	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\MW-5f02c99a-ffa3-42d6-92b5-9b885a91c26d\files\MSWordServices.exe	File read: C:\Windows\System32\drivers\etc\hosts	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\MW-5f02c99a-ffa3-42d6-92b5-9b885a91c26d\files\MSWordServices.exe	File read: C:\Windows\System32\drivers\etc\hosts	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\MW-5f02c99a-ffa3-42d6-92b5-9b885a91c26d\files\MSWordServices.exe	File read: C:\Windows\System32\drivers\etc\hosts	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\MW-5f02c99a-ffa3-42d6-92b5-9b885a91c26d\files\MSWordServices.exe	File read: C:\Windows\System32\drivers\etc\hosts	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\MW-5f02c99a-ffa3-42d6-92b5-9b885a91c26d\files\MSWordServices.exe	File read: C:\Windows\System32\drivers\etc\hosts	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\MW-5f02c99a-ffa3-42d6-92b5-9b885a91c26d\files\MSWordServices.exe	File read: C:\Windows\System32\drivers\etc\hosts	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\MW-5f02c99a-ffa3-42d6-92b5-9b885a91c26d\files\MSWordServices.exe	File read: C:\Windows\System32\drivers\etc\hosts	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\MW-5f02c99a-ffa3-42d6-92b5-9b885a91c26d\files\MSWordServices.exe	File read: C:\Windows\System32\drivers\etc\hosts	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\MW-5f02c99a-ffa3-42d6-92b5-9b885a91c26d\files\MSWordServices.exe	File read: C:\Windows\System32\drivers\etc\hosts	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\MW-5f02c99a-ffa3-42d6-92b5-9b885a91c26d\files\MSWordServices.exe	File read: C:\Windows\System32\drivers\etc\hosts	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\MW-5f02c99a-ffa3-42d6-92b5-9b885a91c26d\files\MSWordServices.exe	File read: C:\Windows\System32\drivers\etc\hosts	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\MW-5f02c99a-ffa3-42d6-92b5-9b885a91c26d\files\MSWordServices.exe	File read: C:\Windows\System32\drivers\etc\hosts	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\MW-5f02c99a-ffa3-42d6-92b5-9b885a91c26d\files\MSWordServices.exe	File read: C:\Windows\System32\drivers\etc\hosts	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\MW-5f02c99a-ffa3-42d6-92b5-9b885a91c26d\files\MSWordServices.exe	File read: C:\Windows\System32\drivers\etc\hosts	Jump to behavior

Source: msws.msi

ReversingLabs: Detection: 60%

Source: unknown	Process created: C:\Windows\System32\msiexec.exe "C:\Windows\System32\msiexec.exe" /i "C:\Users\user\Desktop\msws.msi"
Source: unknown	Process created: C:\Windows\System32\msiexec.exe C:\Windows\system32\msiexec.exe /V
Source: C:\Windows\System32\msiexec.exe	Process created: C:\Windows\SysWOW64\msiexec.exe C:\Windows\syswow64\MsiExec.exe -Embedding A8865EE9E9B652151556A3A417CEBB17
Source: C:\Windows\SysWOW64\msiexec.exe	Process created: C:\Windows\SysWOW64\expand.exe "C:\Windows\System32\expand.exe" -R files.cab -F:* files
Source: C:\Windows\SysWOW64\msiexec.exe	Process created: C:\Users\user\AppData\Local\Temp\MW-5f02c99a-ffa3-42d6-92b5-9b885a91c26d\files\MSWordServices.exe "C:\Users\user\AppData\Local\Temp\MW-5f02c99a-ffa3-42d6-92b5-9b885a91c26d\files\MSWordServices.exe"
Source: unknown	Process created: C:\Windows\System32\taskeng.exe taskeng.exe {B43B102B-D546-4F1A-A2C9-95B5D73CF7B1} S-1-5-21-966771315-3019405637-367336477-1006:user-PC\user:Interactive:[1]
Source: C:\Windows\System32\taskeng.exe	Process created: C:\Users\user\AppData\Local\Temp\MW-5f02c99a-ffa3-42d6-92b5-9b885a91c26d\files\MSWordServices.exe C:\Users\user\AppData\Local\Temp\MW-5f02c99a-ffa3-42d6-92b5-9b885a91c26d\files\MSWordServices.exe
Source: C:\Windows\System32\msiexec.exe	Process created: C:\Windows\SysWOW64\msiexec.exe C:\Windows\syswow64\MsiExec.exe -Embedding A8865EE9E9B652151556A3A417CEBB17	Jump to behavior
Source: C:\Windows\SysWOW64\msiexec.exe	Process created: C:\Windows\SysWOW64\expand.exe "C:\Windows\System32\expand.exe" -R files.cab -F:* files	Jump to behavior
Source: C:\Windows\SysWOW64\msiexec.exe	Process created: C:\Users\user\AppData\Local\Temp\MW-5f02c99a-ffa3-42d6-92b5-9b885a91c26d\files\MSWordServices.exe "C:\Users\user\AppData\Local\Temp\MW-5f02c99a-ffa3-42d6-92b5-9b885a91c26d\files\MSWordServices.exe"	Jump to behavior
Source: C:\Windows\System32\taskeng.exe	Process created: C:\Users\user\AppData\Local\Temp\MW-5f02c99a-ffa3-42d6-92b5-9b885a91c26d\files\MSWordServices.exe C:\Users\user\AppData\Local\Temp\MW-5f02c99a-ffa3-42d6-92b5-9b885a91c26d\files\MSWordServices.exe	Jump to behavior

Source: C:\Windows\System32\msiexec.exe	Section loaded: msi.dll	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Section loaded: mpr.dll	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Section loaded: sfc.dll	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Section loaded: sfc_os.dll	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Section loaded: dwmapi.dll	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Section loaded: cryptsp.dll	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Section loaded: propsys.dll	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Section loaded: netutils.dll	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Section loaded: srvcli.dll	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Section loaded: wkscli.dll	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Section loaded: rpcrtremote.dll	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Section loaded: msihnd.dll	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Section loaded: msi.dll	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Section loaded: mpr.dll	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Section loaded: sfc.dll	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Section loaded: sfc_os.dll	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Section loaded: dwmapi.dll	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Section loaded: cryptsp.dll	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Section loaded: rpcrtremote.dll	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Section loaded: netutils.dll	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Section loaded: srvcli.dll	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Section loaded: wkscli.dll	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Section loaded: spp.dll	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Section loaded: vssapi.dll	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Section loaded: atl.dll	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Section loaded: vsstrace.dll	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Section loaded: dsrole.dll	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Section loaded: bcrypt.dll	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Section loaded: sxs.dll	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Section loaded: propsys.dll	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Section loaded: samcli.dll	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Section loaded: samlib.dll	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Section loaded: ncrypt.dll	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Section loaded: ntmarta.dll	Jump to behavior
Source: C:\Windows\SysWOW64\msiexec.exe	Section loaded: wow64win.dll	Jump to behavior
Source: C:\Windows\SysWOW64\msiexec.exe	Section loaded: wow64cpu.dll	Jump to behavior
Source: C:\Windows\SysWOW64\msiexec.exe	Section loaded: msi.dll	Jump to behavior
Source: C:\Windows\SysWOW64\msiexec.exe	Section loaded: mpr.dll	Jump to behavior
Source: C:\Windows\SysWOW64\msiexec.exe	Section loaded: uxtheme.dll	Jump to behavior
Source: C:\Windows\SysWOW64\msiexec.exe	Section loaded: winmm.dll	Jump to behavior
Source: C:\Windows\SysWOW64\msiexec.exe	Section loaded: samcli.dll	Jump to behavior
Source: C:\Windows\SysWOW64\msiexec.exe	Section loaded: msacm32.dll	Jump to behavior
Source: C:\Windows\SysWOW64\msiexec.exe	Section loaded: version.dll	Jump to behavior
Source: C:\Windows\SysWOW64\msiexec.exe	Section loaded: sfc.dll	Jump to behavior
Source: C:\Windows\SysWOW64\msiexec.exe	Section loaded: sfc_os.dll	Jump to behavior
Source: C:\Windows\SysWOW64\msiexec.exe	Section loaded: dwmapi.dll	Jump to behavior
Source: C:\Windows\SysWOW64\msiexec.exe	Section loaded: cryptsp.dll	Jump to behavior
Source: C:\Windows\SysWOW64\msiexec.exe	Section loaded: rpcrtremote.dll	Jump to behavior
Source: C:\Windows\SysWOW64\msiexec.exe	Section loaded: propsys.dll	Jump to behavior
Source: C:\Windows\SysWOW64\msiexec.exe	Section loaded: ntmarta.dll	Jump to behavior
Source: C:\Windows\SysWOW64\msiexec.exe	Section loaded: secur32.dll	Jump to behavior
Source: C:\Windows\SysWOW64\msiexec.exe	Section loaded: devrtl.dll	Jump to behavior
Source: C:\Windows\SysWOW64\expand.exe	Section loaded: wow64win.dll	Jump to behavior
Source: C:\Windows\SysWOW64\expand.exe	Section loaded: wow64cpu.dll	Jump to behavior
Source: C:\Windows\SysWOW64\expand.exe	Section loaded: cabinet.dll	Jump to behavior
Source: C:\Windows\SysWOW64\expand.exe	Section loaded: dpx.dll	Jump to behavior
Source: C:\Windows\SysWOW64\expand.exe	Section loaded: wdscore.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\MW-5f02c99a-ffa3-42d6-92b5-9b885a91c26d\files\MSWordServices.exe	Section loaded: wow64win.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\MW-5f02c99a-ffa3-42d6-92b5-9b885a91c26d\files\MSWordServices.exe	Section loaded: wow64cpu.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\MW-5f02c99a-ffa3-42d6-92b5-9b885a91c26d\files\MSWordServices.exe	Section loaded: olmapi32.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\MW-5f02c99a-ffa3-42d6-92b5-9b885a91c26d\files\MSWordServices.exe	Section loaded: netapi32.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\MW-5f02c99a-ffa3-42d6-92b5-9b885a91c26d\files\MSWordServices.exe	Section loaded: netutils.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\MW-5f02c99a-ffa3-42d6-92b5-9b885a91c26d\files\MSWordServices.exe	Section loaded: srvcli.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\MW-5f02c99a-ffa3-42d6-92b5-9b885a91c26d\files\MSWordServices.exe	Section loaded: wkscli.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\MW-5f02c99a-ffa3-42d6-92b5-9b885a91c26d\files\MSWordServices.exe	Section loaded: xmllite.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\MW-5f02c99a-ffa3-42d6-92b5-9b885a91c26d\files\MSWordServices.exe	Section loaded: dnsapi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\MW-5f02c99a-ffa3-42d6-92b5-9b885a91c26d\files\MSWordServices.exe	Section loaded: iphlpapi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\MW-5f02c99a-ffa3-42d6-92b5-9b885a91c26d\files\MSWordServices.exe	Section loaded: winnsi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\MW-5f02c99a-ffa3-42d6-92b5-9b885a91c26d\files\MSWordServices.exe	Section loaded: dhcpcsvc6.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\MW-5f02c99a-ffa3-42d6-92b5-9b885a91c26d\files\MSWordServices.exe	Section loaded: dhcpcsvc.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\MW-5f02c99a-ffa3-42d6-92b5-9b885a91c26d\files\MSWordServices.exe	Section loaded: rasadhlp.dll	Jump to behavior
Source: C:\Windows\System32\taskeng.exe	Section loaded: ktmw32.dll	Jump to behavior
Source: C:\Windows\System32\taskeng.exe	Section loaded: wevtapi.dll	Jump to behavior
Source: C:\Windows\System32\taskeng.exe	Section loaded: cryptsp.dll	Jump to behavior
Source: C:\Windows\System32\taskeng.exe	Section loaded: rpcrtremote.dll	Jump to behavior
Source: C:\Windows\System32\taskeng.exe	Section loaded: xmllite.dll	Jump to behavior
Source: C:\Windows\System32\taskeng.exe	Section loaded: dwmapi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\MW-5f02c99a-ffa3-42d6-92b5-9b885a91c26d\files\MSWordServices.exe	Section loaded: wow64win.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\MW-5f02c99a-ffa3-42d6-92b5-9b885a91c26d\files\MSWordServices.exe	Section loaded: wow64cpu.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\MW-5f02c99a-ffa3-42d6-92b5-9b885a91c26d\files\MSWordServices.exe	Section loaded: olmapi32.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\MW-5f02c99a-ffa3-42d6-92b5-9b885a91c26d\files\MSWordServices.exe	Section loaded: netapi32.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\MW-5f02c99a-ffa3-42d6-92b5-9b885a91c26d\files\MSWordServices.exe	Section loaded: netutils.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\MW-5f02c99a-ffa3-42d6-92b5-9b885a91c26d\files\MSWordServices.exe	Section loaded: srvcli.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\MW-5f02c99a-ffa3-42d6-92b5-9b885a91c26d\files\MSWordServices.exe	Section loaded: wkscli.dll	Jump to behavior

Source: C:\Users\user\AppData\Local\Temp\MW-5f02c99a-ffa3-42d6-92b5-9b885a91c26d\files\MSWordServices.exe

Key value queried: HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{0F87369F-A4E5-4CFC-BD3E-73E6154572DD}\InprocServer32

Jump to behavior

Source: C:\Windows\SysWOW64\msiexec.exe

File written: C:\Users\user\AppData\Local\Temp\MW-5f02c99a-ffa3-42d6-92b5-9b885a91c26d\msiwrapper.ini

Jump to behavior

Source: C:\Users\user\AppData\Local\Temp\MW-5f02c99a-ffa3-42d6-92b5-9b885a91c26d\files\MSWordServices.exe

Key value created or modified: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion RegisteredOwner

Jump to behavior

Source: Window Recorder

Window detected: More than 3 window changes detected

Source: C:\Users\user\AppData\Local\Temp\MW-5f02c99a-ffa3-42d6-92b5-9b885a91c26d\files\MSWordServices.exe

File opened: C:\Windows\WinSxS\x86_microsoft.vc90.crt_1fc8b3b9a1e18e3b_9.0.30729.4940_none_50916076bcb9a742\MSVCR90.dll

Jump to behavior

Source:	Binary string: t:\outlook\x86\ship\0\cnfnot32.pdb\ship\0\cnfnot32.exe\bbtopt\cnfnot32O.pdbO source: expand.exe, 00000006.00000003.409126863.00000000020F0000.00000004.00000020.00020000.00000000.sdmp, bcae35571a762b408b0a7ce9cef941cd.tmp.6.dr
Source:	Binary string: t:\outlook\x86\ship\0\cnfnot32.pdb source: MSWordServices.exe, MSWordServices.exe, 0000000A.00000002.520302411.000000002D901000.00000020.00000001.01000000.00000007.sdmp, MSWordServices.exe, 0000000A.00000000.418565764.000000002D901000.00000020.00000001.01000000.00000007.sdmp, bcae35571a762b408b0a7ce9cef941cd.tmp.6.dr
Source:	Binary string: \ship\0\cnfnot32.exe\bbtopt\cnfnot32O.pdb source: MSWordServices.exe, MSWordServices.exe, 0000000A.00000002.520302411.000000002D901000.00000020.00000001.01000000.00000007.sdmp, MSWordServices.exe, 0000000A.00000000.418565764.000000002D901000.00000020.00000001.01000000.00000007.sdmp, bcae35571a762b408b0a7ce9cef941cd.tmp.6.dr
Source:	Binary string: t:\outlook\x86\ship\0\cnfnot32.pdb\ship\0\cnfnot32.exe\bbtopt\cnfnot32O.pdb source: MSWordServices.exe, 00000008.00000002.630919973.000000002D901000.00000020.00000001.01000000.00000007.sdmp, MSWordServices.exe, 00000008.00000000.414090206.000000002D901000.00000020.00000001.01000000.00000007.sdmp, MSWordServices.exe, 0000000A.00000002.520302411.000000002D901000.00000020.00000001.01000000.00000007.sdmp, MSWordServices.exe, 0000000A.00000000.418565764.000000002D901000.00000020.00000001.01000000.00000007.sdmp
Source:	Binary string: C:\ss2\Projects\MsiWrapper\MsiCustomActions\Release\MsiCustomActions.pdb source: msws.msi, 5e5e08.msi.2.dr, MSI2270.tmp.2.dr

Source: C:\Users\user\AppData\Local\Temp\MW-5f02c99a-ffa3-42d6-92b5-9b885a91c26d\files\MSWordServices.exe

Code function: 8_2_2D9183CC GetSystemDirectoryW,LoadLibraryExW,LoadLibraryW,GetProcAddress,GetProcAddress,GetProcAddress,LoadLibraryW,

8_2_2D9183CC

Source: C:\Users\user\AppData\Local\Temp\MW-5f02c99a-ffa3-42d6-92b5-9b885a91c26d\files\MSWordServices.exe	Code function: 8_2_2D917983 push ecx; ret	8_2_2D917996
Source: C:\Users\user\AppData\Local\Temp\MW-5f02c99a-ffa3-42d6-92b5-9b885a91c26d\files\MSWordServices.exe	Code function: 8_2_2D917A87 push ecx; ret	8_2_2D917A9A
Source: C:\Users\user\AppData\Local\Temp\MW-5f02c99a-ffa3-42d6-92b5-9b885a91c26d\files\MSWordServices.exe	Code function: 8_2_6906251B push ecx; ret	8_2_6906252E
Source: C:\Users\user\AppData\Local\Temp\MW-5f02c99a-ffa3-42d6-92b5-9b885a91c26d\files\MSWordServices.exe	Code function: 10_2_2D917983 push ecx; ret	10_2_2D917996
Source: C:\Users\user\AppData\Local\Temp\MW-5f02c99a-ffa3-42d6-92b5-9b885a91c26d\files\MSWordServices.exe	Code function: 10_2_2D917A87 push ecx; ret	10_2_2D917A9A
Source: C:\Users\user\AppData\Local\Temp\MW-5f02c99a-ffa3-42d6-92b5-9b885a91c26d\files\MSWordServices.exe	Code function: 10_2_6906251B push ecx; ret	10_2_6906252E

Source: C:\Windows\SysWOW64\expand.exe	File created: C:\Users\user\AppData\Local\Temp\MW-5f02c99a-ffa3-42d6-92b5-9b885a91c26d\files\OLMAPI32.dll (copy)	Jump to dropped file
Source: C:\Windows\SysWOW64\expand.exe	File created: C:\Users\user\AppData\Local\Temp\MW-5f02c99a-ffa3-42d6-92b5-9b885a91c26d\files\$dpx$.tmp\bcae35571a762b408b0a7ce9cef941cd.tmp	Jump to dropped file
Source: C:\Windows\System32\msiexec.exe	File created: C:\Windows\Installer\MSI2270.tmp	Jump to dropped file
Source: C:\Windows\SysWOW64\expand.exe	File created: C:\Users\user\AppData\Local\Temp\MW-5f02c99a-ffa3-42d6-92b5-9b885a91c26d\files\MSWordServices.exe (copy)	Jump to dropped file
Source: C:\Windows\SysWOW64\expand.exe	File created: C:\Users\user\AppData\Local\Temp\MW-5f02c99a-ffa3-42d6-92b5-9b885a91c26d\files\$dpx$.tmp\b0b5c17324baed4b8b7e2afef99cf028.tmp	Jump to dropped file

Source: C:\Windows\System32\msiexec.exe

File created: C:\Windows\Installer\MSI2270.tmp

Jump to dropped file

Source: metadata-2.2.dr	Binary or memory string: bcdedit.exe22\\?\Volume{8049f198-1016-11e7-b87b-806e6f6e6963}\
Source: metadata-2.2.dr	Binary or memory string: bcdedit.exe.mui22\\?\Volume{8049f198-1016-11e7-b87b-806e6f6e6963}\

Source: C:\Users\user\AppData\Local\Temp\MW-5f02c99a-ffa3-42d6-92b5-9b885a91c26d\files\MSWordServices.exe	Code function: 8_2_6905EA93 GetSystemDirectoryW,GetSystemInfo,GetComputerNameW,RegOpenKeyExW,GetVersionExW,GetModuleHandleA,LoadStringW,wsprintfA,wsprintfA,wsprintfA,RegCloseKey,GetPrivateProfileStringW,GetPrivateProfileStringW,GetModuleHandleA,LoadStringW,GetLocaleInfoW,SHLoadIndirectString,SHLoadIndirectString,GetTimeZoneInformation,RegOpenKeyExW,RegEnumKeyExW,RegCloseKey,GlobalMemoryStatus,NetGetJoinInformation,NetApiBufferFree,		8_2_6905EA93
Source: C:\Users\user\AppData\Local\Temp\MW-5f02c99a-ffa3-42d6-92b5-9b885a91c26d\files\MSWordServices.exe	Code function: 10_2_6905EA93 GetSystemDirectoryW,GetSystemInfo,GetComputerNameW,RegOpenKeyExW,GetVersionExW,GetModuleHandleA,LoadStringW,wsprintfA,wsprintfA,wsprintfA,RegCloseKey,GetPrivateProfileStringW,GetPrivateProfileStringW,GetModuleHandleA,LoadStringW,GetLocaleInfoW,SHLoadIndirectString,SHLoadIndirectString,GetTimeZoneInformation,RegOpenKeyExW,RegEnumKeyExW,RegCloseKey,GlobalMemoryStatus,NetGetJoinInformation,NetApiBufferFree,		10_2_6905EA93

Source: C:\Windows\SysWOW64\expand.exe	File created: C:\Windows\Logs\DPX\setupact.log			Jump to behavior
Source: C:\Windows\SysWOW64\expand.exe	File created: C:\Windows\Logs\DPX\setuperr.log			Jump to behavior

Source: C:\Windows\System32\msiexec.exe

Registry key created: HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\VSS\Diag\VssapiPublisher

Jump to behavior

Source: C:\Windows\System32\msiexec.exe

Registry key value modified: HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\VSS\Diag\SystemRestore

Jump to behavior

Source: C:\Users\user\AppData\Local\Temp\MW-5f02c99a-ffa3-42d6-92b5-9b885a91c26d\files\MSWordServices.exe	Code function: 8_2_2D9140C6 IsWindowVisible,IsIconic,ShowWindow,	8_2_2D9140C6
Source: C:\Users\user\AppData\Local\Temp\MW-5f02c99a-ffa3-42d6-92b5-9b885a91c26d\files\MSWordServices.exe	Code function: 8_2_2D907BC9 __ehhandler$?_RunAndWait@_StructuredTaskCollection@details@Concurrency@@QAG?AW4_TaskCollectionStatus@23@PAV_UnrealizedChore@23@@Z,__EH_prolog3_catch,IsIconic,SetForegroundWindow,LoadMenuW,MultiByteToWideChar,SetWindowLongA,GetFocus,SetFocus,GetSystemMetrics,GetSystemMetrics,GetSystemMetrics,GetSystemMetrics,SetForegroundWindow,PeekMessageA,PeekMessageA,	8_2_2D907BC9
Source: C:\Users\user\AppData\Local\Temp\MW-5f02c99a-ffa3-42d6-92b5-9b885a91c26d\files\MSWordServices.exe	Code function: 10_2_2D9140C6 IsWindowVisible,IsIconic,ShowWindow,	10_2_2D9140C6
Source: C:\Users\user\AppData\Local\Temp\MW-5f02c99a-ffa3-42d6-92b5-9b885a91c26d\files\MSWordServices.exe	Code function: 10_2_2D907BC9 __ehhandler$?_RunAndWait@_StructuredTaskCollection@details@Concurrency@@QAG?AW4_TaskCollectionStatus@23@PAV_UnrealizedChore@23@@Z,__EH_prolog3_catch,IsIconic,SetForegroundWindow,LoadMenuW,MultiByteToWideChar,SetWindowLongA,GetFocus,SetFocus,GetSystemMetrics,GetSystemMetrics,GetSystemMetrics,GetSystemMetrics,SetForegroundWindow,PeekMessageA,PeekMessageA,	10_2_2D907BC9

Source: C:\Users\user\AppData\Local\Temp\MW-5f02c99a-ffa3-42d6-92b5-9b885a91c26d\files\MSWordServices.exe

Code function: 8_2_6905E49B ?GetFileVersionInfoByHandleEx@@YGHXZ,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,

8_2_6905E49B

Source: C:\Windows\System32\msiexec.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\msiexec.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\msiexec.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\msiexec.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\msiexec.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\msiexec.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\msiexec.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\msiexec.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\msiexec.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\msiexec.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\msiexec.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\msiexec.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\msiexec.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\msiexec.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\msiexec.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\msiexec.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\MW-5f02c99a-ffa3-42d6-92b5-9b885a91c26d\files\MSWordServices.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\taskeng.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\taskeng.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\taskeng.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\taskeng.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\MW-5f02c99a-ffa3-42d6-92b5-9b885a91c26d\files\MSWordServices.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\MW-5f02c99a-ffa3-42d6-92b5-9b885a91c26d\files\MSWordServices.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior

Source: C:\Users\user\AppData\Local\Temp\MW-5f02c99a-ffa3-42d6-92b5-9b885a91c26d\files\MSWordServices.exe	Registry key queried: HKEY_LOCAL_MACHINE\HARDWARE\DESCRIPTION\System name: SystemBiosDate	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\MW-5f02c99a-ffa3-42d6-92b5-9b885a91c26d\files\MSWordServices.exe	Registry key queried: HKEY_LOCAL_MACHINE\HARDWARE\DESCRIPTION\System\BIOS name: BIOSVENDOR	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\MW-5f02c99a-ffa3-42d6-92b5-9b885a91c26d\files\MSWordServices.exe	Registry key queried: HKEY_LOCAL_MACHINE\HARDWARE\DESCRIPTION\System name: SystemBiosVersion	Jump to behavior

Source: C:\Users\user\AppData\Local\Temp\MW-5f02c99a-ffa3-42d6-92b5-9b885a91c26d\files\MSWordServices.exe	Thread delayed: delay time: 180000			Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\MW-5f02c99a-ffa3-42d6-92b5-9b885a91c26d\files\MSWordServices.exe	Thread delayed: delay time: 180000			Jump to behavior

Source: C:\Users\user\AppData\Local\Temp\MW-5f02c99a-ffa3-42d6-92b5-9b885a91c26d\files\MSWordServices.exe

Decision node followed by non-executed suspicious API: DecisionNode, Non Executed (send or recv or WinExec)

graph_8-43348

Source: C:\Windows\System32\msiexec.exe	Dropped PE file which has not been started: C:\Windows\Installer\MSI2270.tmp			Jump to dropped file
Source: C:\Windows\SysWOW64\expand.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Temp\MW-5f02c99a-ffa3-42d6-92b5-9b885a91c26d\files\$dpx$.tmp\b0b5c17324baed4b8b7e2afef99cf028.tmp			Jump to dropped file

Source: C:\Users\user\AppData\Local\Temp\MW-5f02c99a-ffa3-42d6-92b5-9b885a91c26d\files\MSWordServices.exe

API coverage: 9.0 %

Source: C:\Windows\System32\msiexec.exe TID: 3436	Thread sleep time: -120000s >= -30000s	Jump to behavior
Source: C:\Windows\System32\msiexec.exe TID: 3496	Thread sleep time: -180000s >= -30000s	Jump to behavior
Source: C:\Windows\SysWOW64\msiexec.exe TID: 3872	Thread sleep time: -60000s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\MW-5f02c99a-ffa3-42d6-92b5-9b885a91c26d\files\MSWordServices.exe TID: 3932	Thread sleep time: -60000s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\MW-5f02c99a-ffa3-42d6-92b5-9b885a91c26d\files\MSWordServices.exe TID: 3932	Thread sleep time: -180000s >= -30000s	Jump to behavior
Source: C:\Windows\System32\taskeng.exe TID: 3968	Thread sleep time: -60000s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\MW-5f02c99a-ffa3-42d6-92b5-9b885a91c26d\files\MSWordServices.exe TID: 3984	Thread sleep time: -180000s >= -30000s	Jump to behavior

Source: C:\Windows\System32\msiexec.exe	File Volume queried: C:\ FullSizeInformation	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	File Volume queried: C:\ FullSizeInformation	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	File Volume queried: C:\ FullSizeInformation	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	File Volume queried: C:\ FullSizeInformation	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	File Volume queried: C:\ FullSizeInformation	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	File Volume queried: C:\ FullSizeInformation	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	File Volume queried: C:\ FullSizeInformation	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	File Volume queried: C:\ FullSizeInformation	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	File Volume queried: C:\ FullSizeInformation	Jump to behavior

Source: C:\Users\user\AppData\Local\Temp\MW-5f02c99a-ffa3-42d6-92b5-9b885a91c26d\files\MSWordServices.exe	Code function: 8_2_6907A2F4 FindFirstFileExW,		8_2_6907A2F4
Source: C:\Users\user\AppData\Local\Temp\MW-5f02c99a-ffa3-42d6-92b5-9b885a91c26d\files\MSWordServices.exe	Code function: 10_2_6907A2F4 FindFirstFileExW,		10_2_6907A2F4

Source: C:\Users\user\AppData\Local\Temp\MW-5f02c99a-ffa3-42d6-92b5-9b885a91c26d\files\MSWordServices.exe

Code function: 8_2_6905EA93 GetSystemDirectoryW,GetSystemInfo,GetComputerNameW,RegOpenKeyExW,GetVersionExW,GetModuleHandleA,LoadStringW,wsprintfA,wsprintfA,wsprintfA,RegCloseKey,GetPrivateProfileStringW,GetPrivateProfileStringW,GetModuleHandleA,LoadStringW,GetLocaleInfoW,SHLoadIndirectString,SHLoadIndirectString,GetTimeZoneInformation,RegOpenKeyExW,RegEnumKeyExW,RegCloseKey,GlobalMemoryStatus,NetGetJoinInformation,NetApiBufferFree,

8_2_6905EA93

Source: C:\Users\user\AppData\Local\Temp\MW-5f02c99a-ffa3-42d6-92b5-9b885a91c26d\files\MSWordServices.exe	Thread delayed: delay time: 60000	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\MW-5f02c99a-ffa3-42d6-92b5-9b885a91c26d\files\MSWordServices.exe	Thread delayed: delay time: 180000	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\MW-5f02c99a-ffa3-42d6-92b5-9b885a91c26d\files\MSWordServices.exe	Thread delayed: delay time: 180000	Jump to behavior

Source: metadata-2.2.dr	Binary or memory string: lsm.exe22\\?\Volume{8049f198-1016-11e7-b87b-806e6f6e6963}\--windows\system32\migwiz\replacementmanifests,,microsoft-hyper-v-migration-replacement.man22\\?\Volume{8049f198-1016-11e7-b87b-806e6f6e6963}\
Source: metadata-2.2.dr	Binary or memory string: iasmigplugin-dl.man22\\?\Volume{8049f198-1016-11e7-b87b-806e6f6e6963}\--windows\system32\migwiz\replacementmanifests33microsoft-hyper-v-client-migration-replacement.man22\\?\Volume{8049f198-1016-11e7-b87b-806e6f6e6963}\##windows\system32\spp\tokens\ppdlic
Source: metadata-2.2.dr	Binary or memory string: iasmigplugin-dl.man22\\?\Volume{8049f198-1016-11e7-b87b-806e6f6e6963}\--windows\syswow64\migwiz\replacementmanifests33microsoft-hyper-v-client-migration-replacement.man22\\?\Volume{8049f198-1016-11e7-b87b-806e6f6e6963}\,,program files (x86)\internet explorer\en-us
Source: metadata-2.2.dr	Binary or memory string: imscmig.dll22\\?\Volume{8049f198-1016-11e7-b87b-806e6f6e6963}\--windows\system32\migwiz\replacementmanifests44microsoft-hyper-v-drivers-migration-replacement.man22\\?\Volume{8049f198-1016-11e7-b87b-806e6f6e6963}\

Source: C:\Windows\System32\msiexec.exe

Process information queried: ProcessInformation

Jump to behavior

Source: C:\Users\user\AppData\Local\Temp\MW-5f02c99a-ffa3-42d6-92b5-9b885a91c26d\files\MSWordServices.exe	Process queried: DebugPort			Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\MW-5f02c99a-ffa3-42d6-92b5-9b885a91c26d\files\MSWordServices.exe	Process queried: DebugPort			Jump to behavior

Source: C:\Users\user\AppData\Local\Temp\MW-5f02c99a-ffa3-42d6-92b5-9b885a91c26d\files\MSWordServices.exe

Code function: 8_2_2D917592 IsDebuggerPresent,_crt_debugger_hook,SetUnhandledExceptionFilter,UnhandledExceptionFilter,_crt_debugger_hook,GetCurrentProcess,TerminateProcess,

8_2_2D917592

Source: C:\Users\user\AppData\Local\Temp\MW-5f02c99a-ffa3-42d6-92b5-9b885a91c26d\files\MSWordServices.exe

Code function: 8_2_2D903E45 OutputDebugStringA,GetLastError,

8_2_2D903E45

Source: C:\Users\user\AppData\Local\Temp\MW-5f02c99a-ffa3-42d6-92b5-9b885a91c26d\files\MSWordServices.exe

Code function: 8_2_2D9183CC GetSystemDirectoryW,LoadLibraryExW,LoadLibraryW,GetProcAddress,GetProcAddress,GetProcAddress,LoadLibraryW,

8_2_2D9183CC

Source: C:\Users\user\AppData\Local\Temp\MW-5f02c99a-ffa3-42d6-92b5-9b885a91c26d\files\MSWordServices.exe	Code function: 8_2_69066E04 mov ecx, dword ptr fs:[00000030h]	8_2_69066E04
Source: C:\Users\user\AppData\Local\Temp\MW-5f02c99a-ffa3-42d6-92b5-9b885a91c26d\files\MSWordServices.exe	Code function: 8_2_69072767 mov eax, dword ptr fs:[00000030h]	8_2_69072767
Source: C:\Users\user\AppData\Local\Temp\MW-5f02c99a-ffa3-42d6-92b5-9b885a91c26d\files\MSWordServices.exe	Code function: 10_2_69066E04 mov ecx, dword ptr fs:[00000030h]	10_2_69066E04
Source: C:\Users\user\AppData\Local\Temp\MW-5f02c99a-ffa3-42d6-92b5-9b885a91c26d\files\MSWordServices.exe	Code function: 10_2_69072767 mov eax, dword ptr fs:[00000030h]	10_2_69072767

Source: C:\Users\user\AppData\Local\Temp\MW-5f02c99a-ffa3-42d6-92b5-9b885a91c26d\files\MSWordServices.exe

Code function: 8_2_2D9174DE GetModuleHandleW,GetProcAddress,GetProcessHeap,GetSystemTimeAsFileTime,GetCurrentProcessId,GetCurrentThreadId,GetTickCount,QueryPerformanceCounter,VirtualProtect,VirtualProtect,VirtualProtect,

8_2_2D9174DE

Source: C:\Users\user\AppData\Local\Temp\MW-5f02c99a-ffa3-42d6-92b5-9b885a91c26d\files\MSWordServices.exe	Code function: 8_2_2D917592 IsDebuggerPresent,_crt_debugger_hook,SetUnhandledExceptionFilter,UnhandledExceptionFilter,_crt_debugger_hook,GetCurrentProcess,TerminateProcess,	8_2_2D917592
Source: C:\Users\user\AppData\Local\Temp\MW-5f02c99a-ffa3-42d6-92b5-9b885a91c26d\files\MSWordServices.exe	Code function: 8_2_2D917EC9 SetUnhandledExceptionFilter,	8_2_2D917EC9
Source: C:\Users\user\AppData\Local\Temp\MW-5f02c99a-ffa3-42d6-92b5-9b885a91c26d\files\MSWordServices.exe	Code function: 8_2_69061C41 SetUnhandledExceptionFilter,UnhandledExceptionFilter,GetCurrentProcess,TerminateProcess,	8_2_69061C41
Source: C:\Users\user\AppData\Local\Temp\MW-5f02c99a-ffa3-42d6-92b5-9b885a91c26d\files\MSWordServices.exe	Code function: 8_2_6906270B IsProcessorFeaturePresent,IsDebuggerPresent,SetUnhandledExceptionFilter,UnhandledExceptionFilter,	8_2_6906270B
Source: C:\Users\user\AppData\Local\Temp\MW-5f02c99a-ffa3-42d6-92b5-9b885a91c26d\files\MSWordServices.exe	Code function: 8_2_69066733 IsDebuggerPresent,SetUnhandledExceptionFilter,UnhandledExceptionFilter,	8_2_69066733
Source: C:\Users\user\AppData\Local\Temp\MW-5f02c99a-ffa3-42d6-92b5-9b885a91c26d\files\MSWordServices.exe	Code function: 10_2_2D917592 IsDebuggerPresent,_crt_debugger_hook,SetUnhandledExceptionFilter,UnhandledExceptionFilter,_crt_debugger_hook,GetCurrentProcess,TerminateProcess,	10_2_2D917592
Source: C:\Users\user\AppData\Local\Temp\MW-5f02c99a-ffa3-42d6-92b5-9b885a91c26d\files\MSWordServices.exe	Code function: 10_2_2D917EC9 SetUnhandledExceptionFilter,	10_2_2D917EC9
Source: C:\Users\user\AppData\Local\Temp\MW-5f02c99a-ffa3-42d6-92b5-9b885a91c26d\files\MSWordServices.exe	Code function: 10_2_69061C41 SetUnhandledExceptionFilter,UnhandledExceptionFilter,GetCurrentProcess,TerminateProcess,	10_2_69061C41
Source: C:\Users\user\AppData\Local\Temp\MW-5f02c99a-ffa3-42d6-92b5-9b885a91c26d\files\MSWordServices.exe	Code function: 10_2_6906270B IsProcessorFeaturePresent,IsDebuggerPresent,SetUnhandledExceptionFilter,UnhandledExceptionFilter,	10_2_6906270B
Source: C:\Users\user\AppData\Local\Temp\MW-5f02c99a-ffa3-42d6-92b5-9b885a91c26d\files\MSWordServices.exe	Code function: 10_2_69066733 IsDebuggerPresent,SetUnhandledExceptionFilter,UnhandledExceptionFilter,	10_2_69066733

Source: C:\Windows\System32\msiexec.exe	Process created: C:\Windows\SysWOW64\msiexec.exe C:\Windows\syswow64\MsiExec.exe -Embedding A8865EE9E9B652151556A3A417CEBB17	Jump to behavior
Source: C:\Windows\SysWOW64\msiexec.exe	Process created: C:\Windows\SysWOW64\expand.exe "C:\Windows\System32\expand.exe" -R files.cab -F:* files	Jump to behavior
Source: C:\Windows\SysWOW64\msiexec.exe	Process created: C:\Users\user\AppData\Local\Temp\MW-5f02c99a-ffa3-42d6-92b5-9b885a91c26d\files\MSWordServices.exe "C:\Users\user\AppData\Local\Temp\MW-5f02c99a-ffa3-42d6-92b5-9b885a91c26d\files\MSWordServices.exe"	Jump to behavior
Source: C:\Windows\System32\taskeng.exe	Process created: C:\Users\user\AppData\Local\Temp\MW-5f02c99a-ffa3-42d6-92b5-9b885a91c26d\files\MSWordServices.exe C:\Users\user\AppData\Local\Temp\MW-5f02c99a-ffa3-42d6-92b5-9b885a91c26d\files\MSWordServices.exe	Jump to behavior

Source: C:\Users\user\AppData\Local\Temp\MW-5f02c99a-ffa3-42d6-92b5-9b885a91c26d\files\MSWordServices.exe

Code function: 8_2_690628D5 cpuid

8_2_690628D5

Source: C:\Users\user\AppData\Local\Temp\MW-5f02c99a-ffa3-42d6-92b5-9b885a91c26d\files\MSWordServices.exe	Code function: GetSystemDirectoryW,GetSystemInfo,GetComputerNameW,RegOpenKeyExW,GetVersionExW,GetModuleHandleA,LoadStringW,wsprintfA,wsprintfA,wsprintfA,RegCloseKey,GetPrivateProfileStringW,GetPrivateProfileStringW,GetModuleHandleA,LoadStringW,GetLocaleInfoW,SHLoadIndirectString,SHLoadIndirectString,GetTimeZoneInformation,RegOpenKeyExW,RegEnumKeyExW,RegCloseKey,GlobalMemoryStatus,NetGetJoinInformation,NetApiBufferFree,	8_2_6905EA93
Source: C:\Users\user\AppData\Local\Temp\MW-5f02c99a-ffa3-42d6-92b5-9b885a91c26d\files\MSWordServices.exe	Code function: EnumSystemLocalesW,	8_2_69072995
Source: C:\Users\user\AppData\Local\Temp\MW-5f02c99a-ffa3-42d6-92b5-9b885a91c26d\files\MSWordServices.exe	Code function: GetUserDefaultLCID,IsValidCodePage,IsValidLocale,GetLocaleInfoW,GetLocaleInfoW,	8_2_6907D8A5
Source: C:\Users\user\AppData\Local\Temp\MW-5f02c99a-ffa3-42d6-92b5-9b885a91c26d\files\MSWordServices.exe	Code function: GetACP,IsValidCodePage,_wcschr,_wcschr,GetLocaleInfoW,	8_2_6907CF41
Source: C:\Users\user\AppData\Local\Temp\MW-5f02c99a-ffa3-42d6-92b5-9b885a91c26d\files\MSWordServices.exe	Code function: GetLocaleInfoW,	8_2_69072EBB
Source: C:\Users\user\AppData\Local\Temp\MW-5f02c99a-ffa3-42d6-92b5-9b885a91c26d\files\MSWordServices.exe	Code function: GetLocaleInfoW,	8_2_6907D13C
Source: C:\Users\user\AppData\Local\Temp\MW-5f02c99a-ffa3-42d6-92b5-9b885a91c26d\files\MSWordServices.exe	Code function: EnumSystemLocalesW,	8_2_6907D1E3
Source: C:\Users\user\AppData\Local\Temp\MW-5f02c99a-ffa3-42d6-92b5-9b885a91c26d\files\MSWordServices.exe	Code function: GetLocaleInfoW,GetLocaleInfoW,GetLocaleInfoW,	8_2_6907D354
Source: C:\Users\user\AppData\Local\Temp\MW-5f02c99a-ffa3-42d6-92b5-9b885a91c26d\files\MSWordServices.exe	Code function: EnumSystemLocalesW,	8_2_6907D22E
Source: C:\Users\user\AppData\Local\Temp\MW-5f02c99a-ffa3-42d6-92b5-9b885a91c26d\files\MSWordServices.exe	Code function: EnumSystemLocalesW,	8_2_6907D2C9
Source: C:\Users\user\AppData\Local\Temp\MW-5f02c99a-ffa3-42d6-92b5-9b885a91c26d\files\MSWordServices.exe	Code function: GetLocaleInfoW,	8_2_6907D5A7
Source: C:\Users\user\AppData\Local\Temp\MW-5f02c99a-ffa3-42d6-92b5-9b885a91c26d\files\MSWordServices.exe	Code function: GetLocaleInfoW,	8_2_6907D7D6
Source: C:\Users\user\AppData\Local\Temp\MW-5f02c99a-ffa3-42d6-92b5-9b885a91c26d\files\MSWordServices.exe	Code function: GetLocaleInfoW,GetLocaleInfoW,GetACP,	8_2_6907D6D0
Source: C:\Users\user\AppData\Local\Temp\MW-5f02c99a-ffa3-42d6-92b5-9b885a91c26d\files\MSWordServices.exe	Code function: GetSystemDirectoryW,GetSystemInfo,GetComputerNameW,RegOpenKeyExW,GetVersionExW,GetModuleHandleA,LoadStringW,wsprintfA,wsprintfA,wsprintfA,RegCloseKey,GetPrivateProfileStringW,GetPrivateProfileStringW,GetModuleHandleA,LoadStringW,GetLocaleInfoW,SHLoadIndirectString,SHLoadIndirectString,GetTimeZoneInformation,RegOpenKeyExW,RegEnumKeyExW,RegCloseKey,GlobalMemoryStatus,NetGetJoinInformation,NetApiBufferFree,	10_2_6905EA93
Source: C:\Users\user\AppData\Local\Temp\MW-5f02c99a-ffa3-42d6-92b5-9b885a91c26d\files\MSWordServices.exe	Code function: EnumSystemLocalesW,	10_2_69072995
Source: C:\Users\user\AppData\Local\Temp\MW-5f02c99a-ffa3-42d6-92b5-9b885a91c26d\files\MSWordServices.exe	Code function: GetUserDefaultLCID,IsValidCodePage,IsValidLocale,GetLocaleInfoW,GetLocaleInfoW,	10_2_6907D8A5
Source: C:\Users\user\AppData\Local\Temp\MW-5f02c99a-ffa3-42d6-92b5-9b885a91c26d\files\MSWordServices.exe	Code function: GetACP,IsValidCodePage,_wcschr,_wcschr,GetLocaleInfoW,	10_2_6907CF41
Source: C:\Users\user\AppData\Local\Temp\MW-5f02c99a-ffa3-42d6-92b5-9b885a91c26d\files\MSWordServices.exe	Code function: GetLocaleInfoW,	10_2_69072EBB
Source: C:\Users\user\AppData\Local\Temp\MW-5f02c99a-ffa3-42d6-92b5-9b885a91c26d\files\MSWordServices.exe	Code function: GetLocaleInfoW,	10_2_6907D13C
Source: C:\Users\user\AppData\Local\Temp\MW-5f02c99a-ffa3-42d6-92b5-9b885a91c26d\files\MSWordServices.exe	Code function: EnumSystemLocalesW,	10_2_6907D1E3
Source: C:\Users\user\AppData\Local\Temp\MW-5f02c99a-ffa3-42d6-92b5-9b885a91c26d\files\MSWordServices.exe	Code function: GetLocaleInfoW,GetLocaleInfoW,GetLocaleInfoW,	10_2_6907D354
Source: C:\Users\user\AppData\Local\Temp\MW-5f02c99a-ffa3-42d6-92b5-9b885a91c26d\files\MSWordServices.exe	Code function: EnumSystemLocalesW,	10_2_6907D22E
Source: C:\Users\user\AppData\Local\Temp\MW-5f02c99a-ffa3-42d6-92b5-9b885a91c26d\files\MSWordServices.exe	Code function: EnumSystemLocalesW,	10_2_6907D2C9
Source: C:\Users\user\AppData\Local\Temp\MW-5f02c99a-ffa3-42d6-92b5-9b885a91c26d\files\MSWordServices.exe	Code function: GetLocaleInfoW,	10_2_6907D5A7
Source: C:\Users\user\AppData\Local\Temp\MW-5f02c99a-ffa3-42d6-92b5-9b885a91c26d\files\MSWordServices.exe	Code function: GetLocaleInfoW,	10_2_6907D7D6
Source: C:\Users\user\AppData\Local\Temp\MW-5f02c99a-ffa3-42d6-92b5-9b885a91c26d\files\MSWordServices.exe	Code function: GetLocaleInfoW,GetLocaleInfoW,GetACP,	10_2_6907D6D0

Source: C:\Users\user\AppData\Local\Temp\MW-5f02c99a-ffa3-42d6-92b5-9b885a91c26d\files\MSWordServices.exe	Registry key value queried: HKEY_LOCAL_MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\MW-5f02c99a-ffa3-42d6-92b5-9b885a91c26d\files\MSWordServices.exe	Registry key value queried: HKEY_LOCAL_MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\MW-5f02c99a-ffa3-42d6-92b5-9b885a91c26d\files\MSWordServices.exe	Registry key value queried: HKEY_LOCAL_MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\MW-5f02c99a-ffa3-42d6-92b5-9b885a91c26d\files\MSWordServices.exe	Registry key value queried: HKEY_LOCAL_MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	Jump to behavior

Source: C:\Users\user\AppData\Local\Temp\MW-5f02c99a-ffa3-42d6-92b5-9b885a91c26d\files\MSWordServices.exe

Key value queried: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion InstallDate

Jump to behavior

Source: C:\Users\user\AppData\Local\Temp\MW-5f02c99a-ffa3-42d6-92b5-9b885a91c26d\files\MSWordServices.exe	Key value queried: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion ProductId			Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\MW-5f02c99a-ffa3-42d6-92b5-9b885a91c26d\files\MSWordServices.exe	Key value queried: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion ProductId			Jump to behavior

Source: C:\Windows\System32\msiexec.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior

Source: C:\Users\user\AppData\Local\Temp\MW-5f02c99a-ffa3-42d6-92b5-9b885a91c26d\files\MSWordServices.exe

8_2_2D9174DE

Source: C:\Users\user\AppData\Local\Temp\MW-5f02c99a-ffa3-42d6-92b5-9b885a91c26d\files\MSWordServices.exe

Code function: 8_2_69054F22 Sleep,GetModuleFileNameA,CreateFileA,CloseHandle,Sleep,CreateFileA,CloseHandle,CloseHandle,GetUserNameA,Sleep,CreateFileA,ReadFile,CloseHandle,Sleep,CreateFileA,RpcStringBindingComposeA,RpcBindingFromStringBindingA,_strcat,CreateFileA,WriteFile,CloseHandle,_strcat,_strcat,_strcat,_strncpy,_strcat,_strcat,_strcat,_strcat,_strcat,PathFileExistsA,DeleteFileA,CreateFileA,WriteFile,CloseHandle,PathFileExistsA,_strcat,WinExec,_strcat,_strcat,WinExec,Sleep,_strcat,_strcat,_strncpy,Sleep,Sleep,RpcStringFreeA,

8_2_69054F22

Source: C:\Users\user\AppData\Local\Temp\MW-5f02c99a-ffa3-42d6-92b5-9b885a91c26d\files\MSWordServices.exe

8_2_6905EA93

Source: C:\Users\user\AppData\Local\Temp\MW-5f02c99a-ffa3-42d6-92b5-9b885a91c26d\files\MSWordServices.exe

Code function: 8_2_2D915E13 TlsAlloc,TlsAlloc,GetVersion,TlsAlloc,

8_2_2D915E13

Source: C:\Windows\System32\taskeng.exe

Key value queried: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Cryptography MachineGuid

Jump to behavior

Stealing of Sensitive Information

Yara detected ORPCBackdoor

Source: Yara match	File source: 00000008.00000002.630639624.00000000002FD000.00000004.00000010.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: Process Memory Space: MSWordServices.exe PID: 3928, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: MSWordServices.exe PID: 3980, type: MEMORYSTR

Remote Access Functionality

Yara detected ORPCBackdoor

Source: Yara match	File source: 00000008.00000002.630639624.00000000002FD000.00000004.00000010.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: Process Memory Space: MSWordServices.exe PID: 3928, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: MSWordServices.exe PID: 3980, type: MEMORYSTR

Source: C:\Users\user\AppData\Local\Temp\MW-5f02c99a-ffa3-42d6-92b5-9b885a91c26d\files\MSWordServices.exe	Code function: 8_2_69054F22 Sleep,GetModuleFileNameA,CreateFileA,CloseHandle,Sleep,CreateFileA,CloseHandle,CloseHandle,GetUserNameA,Sleep,CreateFileA,ReadFile,CloseHandle,Sleep,CreateFileA,RpcStringBindingComposeA,RpcBindingFromStringBindingA,_strcat,CreateFileA,WriteFile,CloseHandle,_strcat,_strcat,_strcat,_strncpy,_strcat,_strcat,_strcat,_strcat,_strcat,PathFileExistsA,DeleteFileA,CreateFileA,WriteFile,CloseHandle,PathFileExistsA,_strcat,WinExec,_strcat,_strcat,WinExec,Sleep,_strcat,_strcat,_strncpy,Sleep,Sleep,RpcStringFreeA,		8_2_69054F22
Source: C:\Users\user\AppData\Local\Temp\MW-5f02c99a-ffa3-42d6-92b5-9b885a91c26d\files\MSWordServices.exe	Code function: 10_2_69054F22 Sleep,GetModuleFileNameA,CreateFileA,CloseHandle,Sleep,CreateFileA,CloseHandle,CloseHandle,GetUserNameA,Sleep,CreateFileA,ReadFile,CloseHandle,Sleep,CreateFileA,RpcStringBindingComposeA,RpcBindingFromStringBindingA,_strcat,CreateFileA,WriteFile,CloseHandle,_strcat,_strcat,_strcat,_strncpy,_strcat,_strcat,_strcat,_strcat,_strcat,PathFileExistsA,DeleteFileA,CreateFileA,WriteFile,CloseHandle,PathFileExistsA,_strcat,WinExec,_strcat,_strcat,WinExec,Sleep,_strcat,_strcat,_strncpy,Sleep,Sleep,RpcStringFreeA,		10_2_69054F22

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	1 Replication Through Removable Media	1 Native API	1 DLL Side-Loading	1 DLL Side-Loading	1 Deobfuscate/Decode Files or Information	21 Input Capture	2 System Time Discovery	Remote Services	1 Archive Collected Data	12 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	1 Scheduled Task/Job	2 Windows Service	2 Windows Service	2 Obfuscated Files or Information	LSASS Memory	11 Peripheral Device Discovery	Remote Desktop Protocol	21 Input Capture	1 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	1 Scheduled Task/Job	11 Process Injection	1 DLL Side-Loading	Security Account Manager	1 Account Discovery	SMB/Windows Admin Shares	Data from Network Shared Drive	12 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	1 Bootkit	1 Scheduled Task/Job	1 File Deletion	NTDS	3 File and Directory Discovery	Distributed Component Object Model	Input Capture	Protocol Impersonation	Traffic Duplication	Data Destruction
Gather Victim Network Information	Server	Cloud Accounts	Launchd	Network Logon Script	Network Logon Script	2 Masquerading	LSA Secrets	66 System Information Discovery	SSH	Keylogging	Fallback Channels	Scheduled Transfer	Data Encrypted for Impact
Domain Properties	Botnet	Replication Through Removable Media	Scheduled Task	RC Scripts	RC Scripts	41 Virtualization/Sandbox Evasion	Cached Domain Credentials	151 Security Software Discovery	VNC	GUI Input Capture	Multiband Communication	Data Transfer Size Limits	Service Stop
DNS	Web Services	External Remote Services	Systemd Timers	Startup Items	Startup Items	11 Process Injection	DCSync	41 Virtualization/Sandbox Evasion	Windows Remote Management	Web Portal Capture	Commonly Used Port	Exfiltration Over C2 Channel	Inhibit System Recovery
Network Trust Dependencies	Serverless	Drive-by Compromise	Container Orchestration Job	Scheduled Task/Job	Scheduled Task/Job	1 Bootkit	Proc Filesystem	2 Process Discovery	Cloud Services	Credential API Hooking	Application Layer Protocol	Exfiltration Over Alternative Protocol	Defacement
Network Topology	Malvertising	Exploit Public-Facing Application	Command and Scripting Interpreter	At	At	HTML Smuggling	/etc/passwd and /etc/shadow	1 Application Window Discovery	Direct Cloud VM Connections	Data Staged	Web Protocols	Exfiltration Over Symmetric Encrypted Non-C2 Protocol	Internal Defacement
IP Addresses	Compromise Infrastructure	Supply Chain Compromise	PowerShell	Cron	Cron	Dynamic API Resolution	Network Sniffing	3 System Owner/User Discovery	Shared Webroot	Local Data Staging	File Transfer Protocols	Exfiltration Over Asymmetric Encrypted Non-C2 Protocol	External Defacement
Network Security Appliances	Domains	Compromise Software Dependencies and Development Tools	AppleScript	Launchd	Launchd	Stripped Payloads	Input Capture	1 Remote System Discovery	Software Deployment Tools	Remote Data Staging	Mail Protocols	Exfiltration Over Unencrypted Non-C2 Protocol	Firmware Corruption

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Source	Detection	Scanner	Label	Link
msws.msi	61%	ReversingLabs	Win32.Backdoor.Orpcbackdoor
msws.msi	100%	Avira	TR/Agent.ynmzr

Dropped Files

Source	Detection	Scanner	Label
C:\Windows\Installer\5e5e08.msi	100%	Avira	TR/Agent.ynmzr
C:\Users\user\AppData\Local\Temp\MW-5f02c99a-ffa3-42d6-92b5-9b885a91c26d\files\$dpx$.tmp\b0b5c17324baed4b8b7e2afef99cf028.tmp	100%	Avira	TR/Agent.athug
C:\Users\user\AppData\Local\Temp\MW-5f02c99a-ffa3-42d6-92b5-9b885a91c26d\files\$dpx$.tmp\b0b5c17324baed4b8b7e2afef99cf028.tmp	75%	ReversingLabs	Win32.Trojan.Generic
C:\Users\user\AppData\Local\Temp\MW-5f02c99a-ffa3-42d6-92b5-9b885a91c26d\files\$dpx$.tmp\bcae35571a762b408b0a7ce9cef941cd.tmp	0%	ReversingLabs
C:\Users\user\AppData\Local\Temp\MW-5f02c99a-ffa3-42d6-92b5-9b885a91c26d\files\MSWordServices.exe (copy)	0%	ReversingLabs
C:\Users\user\AppData\Local\Temp\MW-5f02c99a-ffa3-42d6-92b5-9b885a91c26d\files\OLMAPI32.dll (copy)	75%	ReversingLabs	Win32.Trojan.Generic
C:\Windows\Installer\MSI2270.tmp	0%	ReversingLabs

Name	IP	Active	Malicious	Antivirus Detection	Reputation
outlook-web.ddns.net	151.236.9.174	true	true		unknown

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	Flag	ASN	ASN Name	Malicious
151.236.9.174	outlook-web.ddns.net	European Union		57169	EDIS-AS-EUAT	true

General Information

Joe Sandbox version:	41.0.0 Charoite
Analysis ID:	1513255
Start date and time:	2024-09-18 17:13:25 +02:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 7m 8s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	defaultwindowsofficecookbook.jbs
Analysis system description:	Windows 7 x64 SP1 with Office 2010 SP1 (IE 11, FF52, Chrome 57, Adobe Reader DC 15, Flash 25.0.0.127, Java 8 Update 121, .NET 4.6.2)
Number of analysed new started processes analysed:	14
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Sample name:	msws.msi
Detection:	MAL
Classification:	mal88.troj.evad.winMSI@11/16@3464/1
EGA Information:	Successful, ratio: 100%
HCA Information:	Successful, ratio: 100% Number of executed functions: 116 Number of non-executed functions: 248
Cookbook Comments:	Found application associated with file extension: .msi Close Viewer

Warnings

Behavior information exceeds normal sizes, reducing to normal. Report will have missing behavior information.
Exclude process from analysis (whitelisted): dllhost.exe, WerFault.exe, WMIADAP.exe, conhost.exe, VSSVC.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 104.208.16.93
Excluded domains from analysis (whitelisted): onedsblobprdcus07.centralus.cloudapp.azure.com, watson.microsoft.com, legacywatson.trafficmanager.net
Not all processes where analyzed, report is missing behavior information
Report size exceeded maximum capacity and may have missing behavior information.
Report size exceeded maximum capacity and may have missing network information.
Report size getting too big, too many NtCreateFile calls found.
Report size getting too big, too many NtDeviceIoControlFile calls found.
Report size getting too big, too many NtFsControlFile calls found.
Report size getting too big, too many NtOpenFile calls found.
Report size getting too big, too many NtOpenKeyEx calls found.
Report size getting too big, too many NtQueryValueKey calls found.
VT rate limit hit for: msws.msi

Simulations

Behavior and APIs

Time	Type	Description
08:14:47	Task Scheduler	Run new task: Microsoft Update path: C:\Users\user\AppData\Local\Temp\MW-5f02c99a-ffa3-42d6-92b5-9b885a91c26d\files\MSWordServices.exe
11:14:19	API Interceptor	3357x Sleep call for process: msiexec.exe modified
11:14:47	API Interceptor	25x Sleep call for process: MSWordServices.exe modified
11:14:48	API Interceptor	416x Sleep call for process: taskeng.exe modified

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
EDIS-AS-EUAT	Mcb5K3TOWT.exe	Get hash	malicious	Unknown	Browse	192.36.38.33
	987123.exe	Get hash	malicious	LummaC, Eternity Stealer, LummaC Stealer, SmokeLoader, Stealc, zgRAT	Browse	192.36.38.33
	16GAuqLUFK.exe	Get hash	malicious	Glupteba, RedLine, SmokeLoader, Stealc	Browse	192.36.38.33
	NBHEkIKDCr.exe	Get hash	malicious	Glupteba, LummaC Stealer, Petite Virus, RedLine, SmokeLoader, Socks5Systemz	Browse	192.36.38.33
	file.exe	Get hash	malicious	RedLine, SmokeLoader	Browse	192.36.38.33
	XqmbvBWVRN.elf	Get hash	malicious	Mirai	Browse	37.235.56.176
	Q9WWwskOzG.elf	Get hash	malicious	Mirai	Browse	151.236.13.222
	Document_Scan_482.js	Get hash	malicious	IcedID	Browse	151.236.9.176
	qwb3x7yFdW.elf	Get hash	malicious	Mirai	Browse	151.236.13.224
	9fXSSSJdYd.elf	Get hash	malicious	Mirai	Browse	151.236.13.220

JA3 Fingerprints

⊘No context

Dropped Files

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link
C:\Users\user\AppData\Local\Temp\MW-5f02c99a-ffa3-42d6-92b5-9b885a91c26d\files\$dpx$.tmp\bcae35571a762b408b0a7ce9cef941cd.tmp	MicrosoftEdge.msi	Get hash	malicious	ORPCBackdoor	Browse
	MicrosoftEdge.msi	Get hash	malicious	ORPCBackdoor	Browse
C:\Users\user\AppData\Local\Temp\MW-5f02c99a-ffa3-42d6-92b5-9b885a91c26d\files\MSWordServices.exe (copy)	MicrosoftEdge.msi	Get hash	malicious	ORPCBackdoor	Browse
	MicrosoftEdge.msi	Get hash	malicious	ORPCBackdoor	Browse

Created / dropped Files

C:\System Volume Information\SPP\OnlineMetadataCache\{f64aefbd-6ad8-454c-995b-50917ae57ae1}_OnDiskSnapshotProp

Download File

Process:	C:\Windows\System32\msiexec.exe
File Type:	data
Category:	dropped
Size (bytes):	3192
Entropy (8bit):	3.6890400423800025
Encrypted:	false
SSDEEP:	48:Su71pN38RN3xp/7wP8c1SFjwL7feGp9bHfOIgbR1fOIgBKEBKRC6v6Rey8H:Su71L4PUiF8fHzbOHXOHB9BpiV
MD5:	F77F3E23E384BD0A899BA4C45EB4A82E
SHA1:	3F33F1EFDA02A9C1567102CB995DAB2F85CCE942
SHA-256:	675AE41DE549E6E8BED4F471B19E55223AB66A1C5F584A039B303C4EFF43A5E5
SHA-512:	DB782249F20E5ADA3882EAFDCD2DA0D0641111D7D2E7ACB81C86026E60223F749361CBBD73EF5DD2A342A06386BE1D9C3F413BB62FEF9E10F2D0F2F4E0FF542D
Malicious:	false
Reputation:	low
Preview:	.D.....M..,....c..jt............P.........J..jLE.[P.z.z.9.......r..............M..0.<fK...; ...............................$.......8...[.......[...I.n.s.t.a.l.l.e.d. .M.i.c.r.o.s.o.f.t. .O.u.t.l.o.o.k. .-. .U.N.R.E.G.I.S.T.E.R.E.D. .-. .W.r.a.p.p.e.d. .u.s.i.n.g. .M.S.I. .W.r.a.p.p.e.r. .f.r.o.m. .w.w.w...e.x.e.m.s.i...c.o.m.................C.:.\.W.i.n.d.o.w.s.\...............9.7.1.3.4.2.................W.O.R.K.G.R.O.U.P........j.s_5.K..3.+H......................).(?..P............. ...2.......2...\.\.?.\.V.o.l.u.m.e.{.8.0.4.9.f.1.9.8.-.1.0.1.6.-.1.1.e.7.-.b.8.7.b.-.8.0.6.e.6.f.6.e.6.9.6.3.}.\...............C.:.\...........N).A.j..j...............(...0.......,...2.......2...\.\.?.\.V.o.l.u.m.e.{.8.0.4.9.f.1.9.8.-.1.0.1.6.-.1.1.e.7.-.b.8.7.b.-.8.0.6.e.6.f.6.e.6.9.6.3.}.\.......4...............(.C.:.).........<...@...D...H...L...P...T...X...\...`...d...h...l...p...t...x...\|...........%.......%...A.d.o.b.e. .A.c.r.o.b.a.t. .R.e.a.d.e.r. .D.C. .1.9...0.1.0...2.0.0.9.8.....).......)...A.d.

C:\System Volume Information\SPP\metadata-2

Download File

Process:	C:\Windows\System32\msiexec.exe
File Type:	SysEx File - Twister
Category:	dropped
Size (bytes):	9068216
Entropy (8bit):	3.679390922723487
Encrypted:	false
SSDEEP:	12288:fF4TYYYEzT4G09wqLB9K43gd8caDtDIY8/mhjTLQSI5JnJYKnAOYlTL9VZYbEIIw:tWjq9g8caP7y0ljdAGmm/rmHp
MD5:	4CB97A474360D5756E5805E2924EE8E6
SHA1:	4B72A82FFAFB588E8BEC6C565704C6E1395186D2
SHA-256:	C1DCC19F936E75A83BE3191387BD1FE49C92222848A53C33366CE84440320A9E
SHA-512:	736D8826A71EF73C70581BFF18BD0C9D58992D8ACCDA54D1E3A6D3DBB9503055B9CE72CC34DF4A8BBBE9F6F77B067B3064247AA24E4B3219EF93B21BDE2A65C2
Malicious:	false
Reputation:	low
Preview:	.%..=..J.....>.(...............^...................... ...Y.......Y...<.B.A.C.K.U.P._.C.O.M.P.O.N.E.N.T.S. .x.m.l.n.s.=.".x.-.s.c.h.e.m.a.:.#.V.s.s.C.o.m.p.o.n.e.n.t.M.e.t.a.d.a.t.a.". .v.e.r.s.i.o.n.=.".1...2.". .b.o.o.t.a.b.l.e.S.y.s.t.e.m.S.t.a.t.e.B.a.c.k.u.p.=.".y.e.s.". .s.e.l.e.c.t.C.o.m.p.o.n.e.n.t.s.=.".y.e.s.". .b.a.c.k.u.p.T.y.p.e.=.".f.u.l.l.". .p.a.r.t.i.a.l.F.i.l.e.S.u.p.p.o.r.t.=.".y.e.s.". .s.n.a.p.s.h.o.t.S.e.t.I.d.=.".f.6.4.a.e.f.b.d.-.6.a.d.8.-.4.5.4.c.-.9.9.5.b.-.5.0.9.1.7.a.e.5.7.a.e.1.".>.<.W.R.I.T.E.R._.C.O.M.P.O.N.E.N.T.S. .i.n.s.t.a.n.c.e.I.d.=.".5.9.8.9.2.0.4.9.-.a.3.c.8.-.4.0.3.4.-.9.3.6.9.-.8.a.0.8.c.9.4.0.6.e.4.7.". .w.r.i.t.e.r.I.d.=.".e.8.1.3.2.9.7.5.-.6.f.9.3.-.4.4.6.4.-.a.5.3.e.-.1.0.5.0.2.5.3.a.e.2.2.0.". .b.a.c.k.u.p.S.c.h.e.m.a.=.".0.".>.<.C.O.M.P.O.N.E.N.T. .c.o.m.p.o.n.e.n.t.N.a.m.e.=.".S.y.s.t.e.m. .F.i.l.e.s.". .c.o.m.p.o.n.e.n.t.T.y.p.e.=.".f.i.l.e.g.r.o.u.p."./.>.<./.W.R.I.T.E.R._.C.O.M.P.O.N.E.N.T.S.>.<.W.R.I.T.E.R._.C.O.M.P.O.N.E.N.T.S. .i.

C:\System Volume Information\SPP\snapshot-2

Download File

Process:	C:\Windows\System32\msiexec.exe
File Type:	data
Category:	dropped
Size (bytes):	3192
Entropy (8bit):	3.6890400423800025
Encrypted:	false
SSDEEP:	48:Su71pN38RN3xp/7wP8c1SFjwL7feGp9bHfOIgbR1fOIgBKEBKRC6v6Rey8H:Su71L4PUiF8fHzbOHXOHB9BpiV
MD5:	F77F3E23E384BD0A899BA4C45EB4A82E
SHA1:	3F33F1EFDA02A9C1567102CB995DAB2F85CCE942
SHA-256:	675AE41DE549E6E8BED4F471B19E55223AB66A1C5F584A039B303C4EFF43A5E5
SHA-512:	DB782249F20E5ADA3882EAFDCD2DA0D0641111D7D2E7ACB81C86026E60223F749361CBBD73EF5DD2A342A06386BE1D9C3F413BB62FEF9E10F2D0F2F4E0FF542D
Malicious:	false
Reputation:	low
Preview:	.D.....M..,....c..jt............P.........J..jLE.[P.z.z.9.......r..............M..0.<fK...; ...............................$.......8...[.......[...I.n.s.t.a.l.l.e.d. .M.i.c.r.o.s.o.f.t. .O.u.t.l.o.o.k. .-. .U.N.R.E.G.I.S.T.E.R.E.D. .-. .W.r.a.p.p.e.d. .u.s.i.n.g. .M.S.I. .W.r.a.p.p.e.r. .f.r.o.m. .w.w.w...e.x.e.m.s.i...c.o.m.................C.:.\.W.i.n.d.o.w.s.\...............9.7.1.3.4.2.................W.O.R.K.G.R.O.U.P........j.s_5.K..3.+H......................).(?..P............. ...2.......2...\.\.?.\.V.o.l.u.m.e.{.8.0.4.9.f.1.9.8.-.1.0.1.6.-.1.1.e.7.-.b.8.7.b.-.8.0.6.e.6.f.6.e.6.9.6.3.}.\...............C.:.\...........N).A.j..j...............(...0.......,...2.......2...\.\.?.\.V.o.l.u.m.e.{.8.0.4.9.f.1.9.8.-.1.0.1.6.-.1.1.e.7.-.b.8.7.b.-.8.0.6.e.6.f.6.e.6.9.6.3.}.\.......4...............(.C.:.).........<...@...D...H...L...P...T...X...\...`...d...h...l...p...t...x...\|...........%.......%...A.d.o.b.e. .A.c.r.o.b.a.t. .R.e.a.d.e.r. .D.C. .1.9...0.1.0...2.0.0.9.8.....).......)...A.d.

C:\Users\user\AppData\Local\Temp\MW-5f02c99a-ffa3-42d6-92b5-9b885a91c26d\files.cab

Download File

Process:	C:\Windows\SysWOW64\msiexec.exe
File Type:	Microsoft Cabinet archive data, many, 194154 bytes, 2 files, at 0x2c +A "MSWordServices.exe" +A "OLMAPI32.dll", ID 7700, number 1, 14 datablocks, 0x1503 compression
Category:	dropped
Size (bytes):	194154
Entropy (8bit):	7.9987179030742475
Encrypted:	true
SSDEEP:	3072:9OT4+QMIx6GSEOOoTItH4chXeKlpV8WhNyfNdulMVpHfIr+ByHoaP:4E+QVAnjOl4ieipV8VTGipHfS+pM
MD5:	FD02CF1E9CDF834EFAA46940C585BE24
SHA1:	6D6EDBD6ACC904A57F19B366554938ECB0081FA0
SHA-256:	5BC187D2BD7F4287D4CA56988E36B4A520A038EC8AC4BD4DC84710535ADC5A5B
SHA-512:	F952B958ECFD220070F000437AD9553F6647EFAA606E3D84DC65DFBDF03F355B27B24A0B4CAA95A9271E02513D84D363253730717249C03BC9ADC4B4DBB2A8C9
Malicious:	false
Reputation:	low
Preview:	MSCF....j.......,...................l.......`O........v<.. .MSWordServices.exe..\..`O....YW.. .OLMAPI32.dll..S...=..[.....@..."R`4..n....mnuU..t......V=5....j..ykj..4m.u..@..#\|......#F.NkR....a ; .=..\.`\..Fd..........N..!...}^..yD...y.w.L......m.B6d.6-.Fm..>.QO...C6...+6.M......>.......f6)fQ..).P.&)Y[m+s..........3.T4.Ene....9.\|....&.E..N.Mb..@.c.H._..@.~.u.V."...<Wh4.55.AP..n.-R.O...ow.-.....;.=e.6.Ntm..Mn..]...7M..i.).i.e.5....=.]".!........vd2...BE...A....n...g.}.....g...v......[S6.)....M.J.I..8.S:.4E...."j.D..6.r..$.......m B....c9...A...]a..E.r..#......dt5L=...U....A...3.....g..@mq2..EmQ...fTI.G...wv.]....:c..Q.E7.Q....".L..fpi.k2..>.O.i....m...e.q...%}.j;....#...{..H.S...f...Z.5k..e..s....Xc....+.i.Q..... 0..nA....\..[..A.\.,..`......,...`t.........p8.\|.1.....&.\.r....(....+..`..p......d.....i.'..\|..Z.....x.8>.......^(..sOPJ.T....7.W.....&..0v ..K.1..T`Z...x...`.@9 s..K........Q.R.\..8.Y.....%.4.k..@;......W....8./p........U.....A..?.8z.{.Y0.A.A..we

C:\Users\user\AppData\Local\Temp\MW-5f02c99a-ffa3-42d6-92b5-9b885a91c26d\files\$dpx$.tmp\b0b5c17324baed4b8b7e2afef99cf028.tmp

Download File

Process:	C:\Windows\SysWOW64\expand.exe
File Type:	PE32 executable (DLL) (console) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	285696
Entropy (8bit):	6.56814625756245
Encrypted:	false
SSDEEP:	3072:hbp5Y0UEmuigQJch1NUZIeKFEW/HXGdSz6ednKUp4s9tlZR0ysKNCcSfxaTAhY5u:hbri1yl/H9dnK44s9LZREKzDAOTGl
MD5:	C846EA473366F6022FF676CDFF20A3FB
SHA1:	4D95AA531CC74C0C5B327B0D9BA66BB381409C26
SHA-256:	74BA5883D989566A94E7C6C217B17102F054FFBE98BC9C878A7F700F9809E910
SHA-512:	61DD4C79FFE82A017F328A8410639CF21B4A5A8BB94716815DAAF490DF7B967353D011842B157B24BB5C19A14DA1BA768BFD0D9A96A52A80DF9731F63A6DDE95
Malicious:	true
Antivirus:	Antivirus: Avira, Detection: 100% Antivirus: ReversingLabs, Detection: 75%
Preview:	MZ......................@...................................(...........!..L.!This program cannot be run in DOS mode....$.......]"2n.C\=.C\=.C\=.1_<.C\=.1Y<.C\=.1X<.C\=.4X<.C\=.4_<.C\=.1Z<.C\=.4Y<SC\=.1]<.C\=.C]=.C\=.4Y<.C\=.4X<.C\=.4\<.C\=.4.=.C\=.C.=.C\=.4^<.C\=Rich.C\=........................PE..L...eG.b...........!.....(...........!.......@............................................@..........................&.......(...................................!..l...................................@............@...............................text....&.......(.................. ..`.rdata..d....@.......,..............@..@.data........@......."..............@....rsrc................4..............@..@.reloc...!......."...:..............@..B................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\MW-5f02c99a-ffa3-42d6-92b5-9b885a91c26d\files\$dpx$.tmp\bcae35571a762b408b0a7ce9cef941cd.tmp

Download File

Process:	C:\Windows\SysWOW64\expand.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	151392
Entropy (8bit):	6.138300167598228
Encrypted:	false
SSDEEP:	3072:OdYA7fiLrQoAurtzKmJCtnsk7IIesI0xv9wsOJ6iiEQd86953:KYK9uJKmJCp8sIc3OJX2v1
MD5:	FC860959580C124E7E4781BB08437681
SHA1:	B551DD88A1D3D5F277DC174F5D9D11EEEA0DAFB0
SHA-256:	ECA127142A480FE51E7748159C8D219313A4730D60DC22C4DBBC1BD4D6A67B66
SHA-512:	ABAB3D964D5E7B1BDF365A429CBC5B48614F4FB64281D5C0A4B0CE0AB3580FA539CA0F33BC4243DBBE5C6649FA0CE1A2A89DE12725A78971001CD768AEB075D2
Malicious:	false
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Joe Sandbox View:	Filename: MicrosoftEdge.msi, Detection: malicious, Browse Filename: MicrosoftEdge.msi, Detection: malicious, Browse
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......,V..h7.[h7.[h7.[veV[i7.[...[i7.[...[i7.[O.[f7.[aOA[k7.[h7.[f5.[.xD[i7.[aOG[`7.[aOQ[v7.[aOF[i7.[aOV[.7.[aO@[i7.[aOC[i7.[Richh7.[................PE..L....@.K.....................v.......x.......................................`.......k....@.............................W............0..t............8..`....@..x...8...8............................5..@...................t...`....................text............................... ..`.data....L.......H..................@....rsrc...t....0......................@..@.reloc..x....@......................@..B................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\MW-5f02c99a-ffa3-42d6-92b5-9b885a91c26d\files\MSWordServices.exe (copy)

Download File

Process:	C:\Windows\SysWOW64\expand.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	151392
Entropy (8bit):	6.138300167598228
Encrypted:	false
SSDEEP:	3072:OdYA7fiLrQoAurtzKmJCtnsk7IIesI0xv9wsOJ6iiEQd86953:KYK9uJKmJCp8sIc3OJX2v1
MD5:	FC860959580C124E7E4781BB08437681
SHA1:	B551DD88A1D3D5F277DC174F5D9D11EEEA0DAFB0
SHA-256:	ECA127142A480FE51E7748159C8D219313A4730D60DC22C4DBBC1BD4D6A67B66
SHA-512:	ABAB3D964D5E7B1BDF365A429CBC5B48614F4FB64281D5C0A4B0CE0AB3580FA539CA0F33BC4243DBBE5C6649FA0CE1A2A89DE12725A78971001CD768AEB075D2
Malicious:	false
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Joe Sandbox View:	Filename: MicrosoftEdge.msi, Detection: malicious, Browse Filename: MicrosoftEdge.msi, Detection: malicious, Browse
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......,V..h7.[h7.[h7.[veV[i7.[...[i7.[...[i7.[O.[f7.[aOA[k7.[h7.[f5.[.xD[i7.[aOG[`7.[aOQ[v7.[aOF[i7.[aOV[.7.[aO@[i7.[aOC[i7.[Richh7.[................PE..L....@.K.....................v.......x.......................................`.......k....@.............................W............0..t............8..`....@..x...8...8............................5..@...................t...`....................text............................... ..`.data....L.......H..................@....rsrc...t....0......................@..@.reloc..x....@......................@..B................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\MW-5f02c99a-ffa3-42d6-92b5-9b885a91c26d\files\OLMAPI32.dll (copy)

Download File

Process:	C:\Windows\SysWOW64\expand.exe
File Type:	PE32 executable (DLL) (console) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	285696
Entropy (8bit):	6.56814625756245
Encrypted:	false
SSDEEP:	3072:hbp5Y0UEmuigQJch1NUZIeKFEW/HXGdSz6ednKUp4s9tlZR0ysKNCcSfxaTAhY5u:hbri1yl/H9dnK44s9LZREKzDAOTGl
MD5:	C846EA473366F6022FF676CDFF20A3FB
SHA1:	4D95AA531CC74C0C5B327B0D9BA66BB381409C26
SHA-256:	74BA5883D989566A94E7C6C217B17102F054FFBE98BC9C878A7F700F9809E910
SHA-512:	61DD4C79FFE82A017F328A8410639CF21B4A5A8BB94716815DAAF490DF7B967353D011842B157B24BB5C19A14DA1BA768BFD0D9A96A52A80DF9731F63A6DDE95
Malicious:	true
Antivirus:	Antivirus: ReversingLabs, Detection: 75%
Preview:	MZ......................@...................................(...........!..L.!This program cannot be run in DOS mode....$.......]"2n.C\=.C\=.C\=.1_<.C\=.1Y<.C\=.1X<.C\=.4X<.C\=.4_<.C\=.1Z<.C\=.4Y<SC\=.1]<.C\=.C]=.C\=.4Y<.C\=.4X<.C\=.4\<.C\=.4.=.C\=.C.=.C\=.4^<.C\=Rich.C\=........................PE..L...eG.b...........!.....(...........!.......@............................................@..........................&.......(...................................!..l...................................@............@...............................text....&.......(.................. ..`.rdata..d....@.......,..............@..@.data........@......."..............@....rsrc................4..............@..@.reloc...!......."...:..............@..B................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\MW-5f02c99a-ffa3-42d6-92b5-9b885a91c26d\msiwrapper.ini

Download File

Process:	C:\Windows\SysWOW64\msiexec.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	503
Entropy (8bit):	5.320260533370436
Encrypted:	false
SSDEEP:	12:bsP6MFMws5EMzgbBwUQrPO0++6hznbBwUQtJeIh4:gP6Fws5NgFf4WbhLFfKeF
MD5:	964D0AFBCA98D3BDFE663AED51B82C23
SHA1:	458173FBB7726B9E60B3CB1F12C391FC56C805BB
SHA-256:	76A9E18563C90FE520DF957B34100D66B52A5677879F7A4B37D0080FF52118C5
SHA-512:	01C59BCADD158D0D25FF01A53CF1BBF1C95BA16BF258CB0278D7744145E08E5A08D561589D8238F4BE1F59825B3786F0DC483450C427C135556E3FF1894DDF93
Malicious:	false
Preview:	[MSI Wrapper]..WrappedApplicationId={90140000-001B-0409-0000-0000000FF1CE}..InstallSuccessCodes=0..ElevationMode=never..SetupFileName=C:\Users\user\AppData\Local\Temp\MW-5f02c99a-ffa3-42d6-92b5-9b885a91c26d\files\MSWordServices.exe..SetupParameters=..WorkingDir=..CurrentDir=FILESDIR..UILevel=5..Focus=yes..FilesDir=C:\Users\user\AppData\Local\Temp\MW-5f02c99a-ffa3-42d6-92b5-9b885a91c26d\files\..RunBeforeInstallFile=..RunBeforeInstallParameters=..RunAfterInstallFile=..RunAfterInstallParameters=..

C:\Users\user\AppData\Local\Temp\~DF40E42F4E3D8C5E33.TMP

Download File

Process:	C:\Windows\System32\msiexec.exe
File Type:	data
Category:	dropped
Size (bytes):	69632
Entropy (8bit):	0.132096620474317
Encrypted:	false
SSDEEP:	24:x0+GNpb/+wY+sJfAebfddipV7sddipVlVIwGmlrkg9SW+/kx:Srpb8rfddSBsddSHbr/w
MD5:	85F12784E7DD67FA02F494F19F475651
SHA1:	34A4C37E7CD7DCCB7AFF4B699D415F1F5A0910B7
SHA-256:	8524FAE5D21BE1E10F019958A8132F23B188093D8B3FAD2CE0B13EE57E3A1846
SHA-512:	A27E02C651B68461B7FCDF046302F97DA82611EEF9C6A1067735DD5F4ACB1DD86177DCF04E907F5F6A088EDEB016350ADC356ECC3BCBC6D6522AF6F0403C919D
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\~DFFC47027088490937.TMP

Download File

Process:	C:\Windows\System32\msiexec.exe
File Type:	data
Category:	dropped
Size (bytes):	32768
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3::
MD5:	BB7DF04E1B0A2570657527A7E108AE23
SHA1:	5188431849B4613152FD7BDBA6A3FF0A4FD6424B
SHA-256:	C35020473AED1B4642CD726CAD727B63FFF2824AD68CEDD7FFB73C7CBD890479
SHA-512:	768007E06B0CD9E62D50F458B9435C6DDA0A6D272F0B15550F97C478394B743331C3A9C9236E09AB5B9CB3B423B2320A5D66EB3C7068DB9EA37891CA40E47012
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Windows\Installer\5e5e08.msi

Download File

Process:	C:\Windows\System32\msiexec.exe
File Type:	Composite Document File V2 Document, Little Endian, Os: Windows, Version 10.0, MSI Installer, Code page: 1252, Title: Microsoft Outlook - UNREGISTERED - Wrapped using MSI Wrapper from www.exemsi.com 14.0.4760.1000, Subject: Microsoft Outlook - UNREGISTERED - Wrapped using MSI Wrapper from www.exemsi.com, Author: Microsoft Corporation, Keywords: Installer, Template: Intel;1033, Revision Number: {6FB667ED-1310-4415-BE99-B57534C2CC51}, Create Time/Date: Fri Jan 3 19:06:10 2020, Last Saved Time/Date: Fri Jan 3 19:06:10 2020, Number of Pages: 200, Number of Words: 12, Name of Creating Application: MSI Wrapper (9.0.34.0), Security: 2
Category:	dropped
Size (bytes):	368640
Entropy (8bit):	7.333172745854614
Encrypted:	false
SSDEEP:	6144:jJdjoxrGSPVWGQw/+QVAnjOl4ieipV8VTGipHfS+p:jvjoxrGS90v48yee8V5HfRp
MD5:	C13C4C025C5C779D5DC8848EF160D5DA
SHA1:	D7671D1F301D74AECE0DB320701395A5CD8CF29A
SHA-256:	BA2E21641A1238A5B30E535BD0940FCD316A6E5242BFDD48A97AAA203D11642B
SHA-512:	A0459C7732733A9D83D6E1B985CB9A913AB5FE9E30114AA1DD5B198002F36CE84A0E0E318FC60E9FDBD22DAB29734AAFDC50322FFFECA50211D64B206D9ADEE3
Malicious:	true
Antivirus:	Antivirus: Avira, Detection: 100%
Preview:	......................>...............................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Windows\Installer\5e5e09.ipi

Download File

Process:	C:\Windows\System32\msiexec.exe
File Type:	Composite Document File V2 Document, Cannot read section info
Category:	dropped
Size (bytes):	20480
Entropy (8bit):	1.5732249238307012
Encrypted:	false
SSDEEP:	24:JBbzk/YecMLlmUBOAvuy8EHjAV+/hddipVlVIwGmlrkg9SCddipV7eJfAebI/+ww:b4qMLXBDvuyGwhddSHbrbddSBerISrp
MD5:	0C9D5E4C974A8E1832EDB9AA4DC9D5B1
SHA1:	50710664D54F57398AD3C0C8F018C4AF073D1046
SHA-256:	DDC2B55BE5CC64B4F4B16C2C08312D11EFAD40BB4376EF2B0CEFE120D1FA2A66
SHA-512:	1650D2D9ED92A5699805A7CA0C39BCEFFE4481F84CF49625D838EDEB01FA470E636E4F9DD078667F7646906EC98678B26864CD6DB55003D67FEDDE5FD3ED9BC8
Malicious:	false
Preview:	......................>...............................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Windows\Installer\MSI2270.tmp

Download File

Process:	C:\Windows\System32\msiexec.exe
File Type:	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
Category:	modified
Size (bytes):	131584
Entropy (8bit):	6.342148943947129
Encrypted:	false
SSDEEP:	1536:5w0vysoljaMn5znCmFSasPcgsQdYVD9p/KFXS5sqR86P2HJxSz8d3G800kDCfTOC:almeJd9p8txrJES8CV+gYU+pI5jMh
MD5:	CA93487A24A49E7C0242E4C8F4CA01F5
SHA1:	17280B78BFE8C89CB719C2353FADC68D07A2C883
SHA-256:	7D9D48F563BD966C0CF17DD56A92C1C29506F25F10DB655576E2800FB2E7D50D
SHA-512:	D3E3169F212F61B9D2C0ABF608FB1F8E719B4E905DDF4A11AEDC7D98D9F5E1532893859D13F2AF8590A14277760ACD8E81FBB9213DBE84A55E97FCA329B10C7D
Malicious:	true
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......q5..5T..5T..5T..<,V..T..<,G.$T..<,Q.JT......:T..5T..T..<,X.6T..<,@.4T..<,C.4T..Rich5T..........................PE..L......^...........!.....f...................................................P............@.........................`...]............ .......................0......p...................................@...............(............................text..."d.......f.................. ..`.rdata...d.......f...j..............@..@.data...<,..........................@....rsrc........ ......................@..@.reloc.......0... ..................@..B........................................................................................................................................................................................................................................................................................................................

C:\Windows\Installer\SourceHash{E22E6085-4A70-49E4-B1C5-4305B74C3132}

Download File

Process:	C:\Windows\System32\msiexec.exe
File Type:	Composite Document File V2 Document, Cannot read section info
Category:	dropped
Size (bytes):	49152
Entropy (8bit):	0.7681026664075207
Encrypted:	false
SSDEEP:	12:JSbX72Fjx9QAGiLIlHVRpzh/7777777777777777777777777vDHFEzVn8p01l0G:J79QQI53Enj8F
MD5:	77D6B0F4887A61A35EF9D756D79A6249
SHA1:	74F41C25F8F3A5B0509479F7EFF7EDBB7A23DB35
SHA-256:	E985645423D6EA1BB508FC18A4498E3289CFA5DE6C47F28609726627714E0BCA
SHA-512:	E66B52B75169623D8B4FA32B509BB14938A5394FE8D0BC4D9140C84F5716635AC467D0BCD310D040F0CA550C0E95935673BA81948F0E0041CA4675C5D85D3FA0
Malicious:	false
Preview:	......................>...............................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Windows\Logs\DPX\setupact.log

Download File

Process:	C:\Windows\SysWOW64\expand.exe
File Type:	CSV text
Category:	dropped
Size (bytes):	969
Entropy (8bit):	4.357978543627465
Encrypted:	false
SSDEEP:	12:mMdMTMdN6uFGT76uFGMdN6uFGT76uFGT6TMdMTMdN6uFGT76uFGT6r:Y26K676Kx6K676K66P26K676K66r
MD5:	271832EF4BC9A12192FAC7AA03AFFEF7
SHA1:	67694E1E47A48100A8E4A3BA1E03EC18AA5155D1
SHA-256:	477AB48B9BE63F466E773B134F40BB0085BDD31CB71ADE15D883E3EE59654890
SHA-512:	E1E700DBFFC362FD8D0F47A2F8CD05E9DA0C02EE14C68ABB31663C82604C8E65B34294A914E2F933CAC8F97BE703235A67BDFDB242CF06BB80B3CE61653BC5D8
Malicious:	false
Preview:	.2024-09-18 11:14:43, Info DPX Started DPX phase: Resume and Download Job..2024-09-18 11:14:43, Info DPX Started DPX phase: Apply Deltas Provided In File..2024-09-18 11:14:43, Info DPX Ended DPX phase: Apply Deltas Provided In File..2024-09-18 11:14:43, Info DPX Started DPX phase: Apply Deltas Provided In File..2024-09-18 11:14:43, Info DPX Ended DPX phase: Apply Deltas Provided In File..2024-09-18 11:14:43, Info DPX Ended DPX phase: Resume and Download Job..2024-09-18 11:14:43, Info DPX Started DPX phase: Resume and Download Job..2024-09-18 11:14:43, Info DPX Started DPX phase: Apply Deltas Provided In File..2024-09-18 11:14:43, Info DPX Ended DPX phase: Apply Deltas Provided In File..2024-09-18 11:14:43, Info DPX Ended DPX phase: Resume and Download Job..

Static File Info

General

File type:	Composite Document File V2 Document, Little Endian, Os: Windows, Version 10.0, MSI Installer, Code page: 1252, Title: Microsoft Outlook - UNREGISTERED - Wrapped using MSI Wrapper from www.exemsi.com 14.0.4760.1000, Subject: Microsoft Outlook - UNREGISTERED - Wrapped using MSI Wrapper from www.exemsi.com, Author: Microsoft Corporation, Keywords: Installer, Template: Intel;1033, Revision Number: {6FB667ED-1310-4415-BE99-B57534C2CC51}, Create Time/Date: Fri Jan 3 19:06:10 2020, Last Saved Time/Date: Fri Jan 3 19:06:10 2020, Number of Pages: 200, Number of Words: 12, Name of Creating Application: MSI Wrapper (9.0.34.0), Security: 2
Entropy (8bit):	7.333172745854614
TrID:	Generic OLE2 / Multistream Compound File (8008/1) 100.00%
File name:	msws.msi
File size:	368'640 bytes
MD5:	c13c4c025c5c779d5dc8848ef160d5da
SHA1:	d7671d1f301d74aece0db320701395a5cd8cf29a
SHA256:	ba2e21641a1238a5b30e535bd0940fcd316a6e5242bfdd48a97aaa203d11642b
SHA512:	a0459c7732733a9d83d6e1b985cb9a913ab5fe9e30114aa1dd5b198002f36ce84a0e0e318fc60e9fdbd22dab29734aafdc50322fffeca50211d64b206d9adee3
SSDEEP:	6144:jJdjoxrGSPVWGQw/+QVAnjOl4ieipV8VTGipHfS+p:jvjoxrGS90v48yee8V5HfRp
TLSH:	0E74E0923AD9C036C298193F59BAC7963B3A7D355B30D08B77503A6C6E706D1E93A703
File Content Preview:	........................>......................................................................................................................................................................................................................................

File Icon


Icon Hash:	2d2e3797b32b2b99

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Sep 18, 2024 17:14:48.612998962 CEST	49165	443	192.168.2.22	151.236.9.174
Sep 18, 2024 17:14:48.613038063 CEST	443	49165	151.236.9.174	192.168.2.22
Sep 18, 2024 17:14:48.613106966 CEST	49165	443	192.168.2.22	151.236.9.174
Sep 18, 2024 17:14:48.621702909 CEST	49165	443	192.168.2.22	151.236.9.174
Sep 18, 2024 17:14:48.621718884 CEST	443	49165	151.236.9.174	192.168.2.22
Sep 18, 2024 17:14:48.621779919 CEST	443	49165	151.236.9.174	192.168.2.22
Sep 18, 2024 17:14:48.679975033 CEST	49166	443	192.168.2.22	151.236.9.174
Sep 18, 2024 17:14:48.680010080 CEST	443	49166	151.236.9.174	192.168.2.22
Sep 18, 2024 17:14:48.680115938 CEST	49166	443	192.168.2.22	151.236.9.174
Sep 18, 2024 17:14:48.680272102 CEST	49166	443	192.168.2.22	151.236.9.174
Sep 18, 2024 17:14:48.680283070 CEST	443	49166	151.236.9.174	192.168.2.22
Sep 18, 2024 17:14:48.680371046 CEST	443	49166	151.236.9.174	192.168.2.22
Sep 18, 2024 17:14:48.724364996 CEST	49167	443	192.168.2.22	151.236.9.174
Sep 18, 2024 17:14:48.724406004 CEST	443	49167	151.236.9.174	192.168.2.22
Sep 18, 2024 17:14:48.724522114 CEST	49167	443	192.168.2.22	151.236.9.174
Sep 18, 2024 17:14:48.724904060 CEST	49167	443	192.168.2.22	151.236.9.174
Sep 18, 2024 17:14:48.724919081 CEST	443	49167	151.236.9.174	192.168.2.22
Sep 18, 2024 17:14:48.724997044 CEST	443	49167	151.236.9.174	192.168.2.22
Sep 18, 2024 17:14:48.738821030 CEST	49168	443	192.168.2.22	151.236.9.174
Sep 18, 2024 17:14:48.738862038 CEST	443	49168	151.236.9.174	192.168.2.22
Sep 18, 2024 17:14:48.738931894 CEST	49168	443	192.168.2.22	151.236.9.174
Sep 18, 2024 17:14:48.739253998 CEST	49168	443	192.168.2.22	151.236.9.174
Sep 18, 2024 17:14:48.739269972 CEST	443	49168	151.236.9.174	192.168.2.22
Sep 18, 2024 17:14:48.739315987 CEST	443	49168	151.236.9.174	192.168.2.22
Sep 18, 2024 17:14:48.779799938 CEST	49169	443	192.168.2.22	151.236.9.174
Sep 18, 2024 17:14:48.779841900 CEST	443	49169	151.236.9.174	192.168.2.22
Sep 18, 2024 17:14:48.780025959 CEST	49169	443	192.168.2.22	151.236.9.174
Sep 18, 2024 17:14:48.780128002 CEST	49169	443	192.168.2.22	151.236.9.174
Sep 18, 2024 17:14:48.780134916 CEST	443	49169	151.236.9.174	192.168.2.22
Sep 18, 2024 17:14:48.780174971 CEST	443	49169	151.236.9.174	192.168.2.22
Sep 18, 2024 17:14:48.792866945 CEST	49170	443	192.168.2.22	151.236.9.174
Sep 18, 2024 17:14:48.792916059 CEST	443	49170	151.236.9.174	192.168.2.22
Sep 18, 2024 17:14:48.793133020 CEST	49170	443	192.168.2.22	151.236.9.174
Sep 18, 2024 17:14:48.793486118 CEST	49170	443	192.168.2.22	151.236.9.174
Sep 18, 2024 17:14:48.793504953 CEST	443	49170	151.236.9.174	192.168.2.22
Sep 18, 2024 17:14:48.793546915 CEST	443	49170	151.236.9.174	192.168.2.22
Sep 18, 2024 17:14:48.805829048 CEST	49171	443	192.168.2.22	151.236.9.174
Sep 18, 2024 17:14:48.805866957 CEST	443	49171	151.236.9.174	192.168.2.22
Sep 18, 2024 17:14:48.805928946 CEST	49171	443	192.168.2.22	151.236.9.174
Sep 18, 2024 17:14:48.806241035 CEST	49171	443	192.168.2.22	151.236.9.174
Sep 18, 2024 17:14:48.806253910 CEST	443	49171	151.236.9.174	192.168.2.22
Sep 18, 2024 17:14:48.806277037 CEST	443	49171	151.236.9.174	192.168.2.22
Sep 18, 2024 17:14:48.856769085 CEST	49172	443	192.168.2.22	151.236.9.174
Sep 18, 2024 17:14:48.856822014 CEST	443	49172	151.236.9.174	192.168.2.22
Sep 18, 2024 17:14:48.856923103 CEST	49172	443	192.168.2.22	151.236.9.174
Sep 18, 2024 17:14:48.857064009 CEST	49172	443	192.168.2.22	151.236.9.174
Sep 18, 2024 17:14:48.857079029 CEST	443	49172	151.236.9.174	192.168.2.22
Sep 18, 2024 17:14:48.857145071 CEST	443	49172	151.236.9.174	192.168.2.22
Sep 18, 2024 17:14:48.929873943 CEST	49173	443	192.168.2.22	151.236.9.174
Sep 18, 2024 17:14:48.929935932 CEST	443	49173	151.236.9.174	192.168.2.22
Sep 18, 2024 17:14:48.930012941 CEST	49173	443	192.168.2.22	151.236.9.174
Sep 18, 2024 17:14:48.930143118 CEST	49173	443	192.168.2.22	151.236.9.174
Sep 18, 2024 17:14:48.930157900 CEST	443	49173	151.236.9.174	192.168.2.22
Sep 18, 2024 17:14:48.930211067 CEST	443	49173	151.236.9.174	192.168.2.22
Sep 18, 2024 17:14:48.945020914 CEST	49174	443	192.168.2.22	151.236.9.174
Sep 18, 2024 17:14:48.945036888 CEST	443	49174	151.236.9.174	192.168.2.22
Sep 18, 2024 17:14:48.945282936 CEST	49174	443	192.168.2.22	151.236.9.174
Sep 18, 2024 17:14:48.945410013 CEST	49174	443	192.168.2.22	151.236.9.174
Sep 18, 2024 17:14:48.945421934 CEST	443	49174	151.236.9.174	192.168.2.22
Sep 18, 2024 17:14:48.945473909 CEST	443	49174	151.236.9.174	192.168.2.22
Sep 18, 2024 17:14:48.959753990 CEST	49175	443	192.168.2.22	151.236.9.174
Sep 18, 2024 17:14:48.959780931 CEST	443	49175	151.236.9.174	192.168.2.22
Sep 18, 2024 17:14:48.959855080 CEST	49175	443	192.168.2.22	151.236.9.174
Sep 18, 2024 17:14:48.959975958 CEST	49175	443	192.168.2.22	151.236.9.174
Sep 18, 2024 17:14:48.959990978 CEST	443	49175	151.236.9.174	192.168.2.22
Sep 18, 2024 17:14:48.960042000 CEST	443	49175	151.236.9.174	192.168.2.22
Sep 18, 2024 17:14:48.979803085 CEST	49176	443	192.168.2.22	151.236.9.174
Sep 18, 2024 17:14:48.979825020 CEST	443	49176	151.236.9.174	192.168.2.22
Sep 18, 2024 17:14:48.979908943 CEST	49176	443	192.168.2.22	151.236.9.174
Sep 18, 2024 17:14:48.980076075 CEST	49176	443	192.168.2.22	151.236.9.174
Sep 18, 2024 17:14:48.980087042 CEST	443	49176	151.236.9.174	192.168.2.22
Sep 18, 2024 17:14:48.980134964 CEST	443	49176	151.236.9.174	192.168.2.22
Sep 18, 2024 17:14:49.023976088 CEST	49177	443	192.168.2.22	151.236.9.174
Sep 18, 2024 17:14:49.024020910 CEST	443	49177	151.236.9.174	192.168.2.22
Sep 18, 2024 17:14:49.024082899 CEST	49177	443	192.168.2.22	151.236.9.174
Sep 18, 2024 17:14:49.024235010 CEST	49177	443	192.168.2.22	151.236.9.174
Sep 18, 2024 17:14:49.024250031 CEST	443	49177	151.236.9.174	192.168.2.22
Sep 18, 2024 17:14:49.024302006 CEST	443	49177	151.236.9.174	192.168.2.22
Sep 18, 2024 17:14:49.110966921 CEST	49178	443	192.168.2.22	151.236.9.174
Sep 18, 2024 17:14:49.110990047 CEST	443	49178	151.236.9.174	192.168.2.22
Sep 18, 2024 17:14:49.111043930 CEST	49178	443	192.168.2.22	151.236.9.174
Sep 18, 2024 17:14:49.111191034 CEST	49178	443	192.168.2.22	151.236.9.174
Sep 18, 2024 17:14:49.111201048 CEST	443	49178	151.236.9.174	192.168.2.22
Sep 18, 2024 17:14:49.111258984 CEST	443	49178	151.236.9.174	192.168.2.22
Sep 18, 2024 17:14:49.166369915 CEST	49179	443	192.168.2.22	151.236.9.174
Sep 18, 2024 17:14:49.166407108 CEST	443	49179	151.236.9.174	192.168.2.22
Sep 18, 2024 17:14:49.166486025 CEST	49179	443	192.168.2.22	151.236.9.174
Sep 18, 2024 17:14:49.166627884 CEST	49179	443	192.168.2.22	151.236.9.174
Sep 18, 2024 17:14:49.166640043 CEST	443	49179	151.236.9.174	192.168.2.22
Sep 18, 2024 17:14:49.166733980 CEST	443	49179	151.236.9.174	192.168.2.22
Sep 18, 2024 17:14:49.199562073 CEST	49180	443	192.168.2.22	151.236.9.174
Sep 18, 2024 17:14:49.199611902 CEST	443	49180	151.236.9.174	192.168.2.22
Sep 18, 2024 17:14:49.199667931 CEST	49180	443	192.168.2.22	151.236.9.174
Sep 18, 2024 17:14:49.199806929 CEST	49180	443	192.168.2.22	151.236.9.174
Sep 18, 2024 17:14:49.199815989 CEST	443	49180	151.236.9.174	192.168.2.22
Sep 18, 2024 17:14:49.199862003 CEST	443	49180	151.236.9.174	192.168.2.22
Sep 18, 2024 17:14:49.223943949 CEST	49181	443	192.168.2.22	151.236.9.174
Sep 18, 2024 17:14:49.223984957 CEST	443	49181	151.236.9.174	192.168.2.22
Sep 18, 2024 17:14:49.224231005 CEST	49181	443	192.168.2.22	151.236.9.174
Sep 18, 2024 17:14:49.227081060 CEST	49181	443	192.168.2.22	151.236.9.174
Sep 18, 2024 17:14:49.227097988 CEST	443	49181	151.236.9.174	192.168.2.22
Sep 18, 2024 17:14:49.227155924 CEST	443	49181	151.236.9.174	192.168.2.22
Sep 18, 2024 17:14:49.262808084 CEST	49182	443	192.168.2.22	151.236.9.174
Sep 18, 2024 17:14:49.262866974 CEST	443	49182	151.236.9.174	192.168.2.22
Sep 18, 2024 17:14:49.262958050 CEST	49182	443	192.168.2.22	151.236.9.174
Sep 18, 2024 17:14:49.263145924 CEST	49182	443	192.168.2.22	151.236.9.174
Sep 18, 2024 17:14:49.263164043 CEST	443	49182	151.236.9.174	192.168.2.22
Sep 18, 2024 17:14:49.263279915 CEST	443	49182	151.236.9.174	192.168.2.22
Sep 18, 2024 17:14:49.697278023 CEST	49183	443	192.168.2.22	151.236.9.174
Sep 18, 2024 17:14:49.697331905 CEST	443	49183	151.236.9.174	192.168.2.22
Sep 18, 2024 17:14:49.697384119 CEST	49183	443	192.168.2.22	151.236.9.174
Sep 18, 2024 17:14:49.697808981 CEST	49183	443	192.168.2.22	151.236.9.174
Sep 18, 2024 17:14:49.697822094 CEST	443	49183	151.236.9.174	192.168.2.22
Sep 18, 2024 17:14:49.697875023 CEST	443	49183	151.236.9.174	192.168.2.22
Sep 18, 2024 17:14:50.293749094 CEST	49184	443	192.168.2.22	151.236.9.174
Sep 18, 2024 17:14:50.293790102 CEST	443	49184	151.236.9.174	192.168.2.22
Sep 18, 2024 17:14:50.293833971 CEST	49184	443	192.168.2.22	151.236.9.174
Sep 18, 2024 17:14:50.302767038 CEST	49184	443	192.168.2.22	151.236.9.174
Sep 18, 2024 17:14:50.302797079 CEST	443	49184	151.236.9.174	192.168.2.22
Sep 18, 2024 17:14:50.302922010 CEST	443	49184	151.236.9.174	192.168.2.22
Sep 18, 2024 17:14:50.487808943 CEST	49185	443	192.168.2.22	151.236.9.174
Sep 18, 2024 17:14:50.487860918 CEST	443	49185	151.236.9.174	192.168.2.22
Sep 18, 2024 17:14:50.487929106 CEST	49185	443	192.168.2.22	151.236.9.174
Sep 18, 2024 17:14:50.488084078 CEST	49185	443	192.168.2.22	151.236.9.174
Sep 18, 2024 17:14:50.488097906 CEST	443	49185	151.236.9.174	192.168.2.22
Sep 18, 2024 17:14:50.488181114 CEST	443	49185	151.236.9.174	192.168.2.22
Sep 18, 2024 17:14:50.713627100 CEST	49186	443	192.168.2.22	151.236.9.174
Sep 18, 2024 17:14:50.713656902 CEST	443	49186	151.236.9.174	192.168.2.22
Sep 18, 2024 17:14:50.713706970 CEST	49186	443	192.168.2.22	151.236.9.174
Sep 18, 2024 17:14:50.714073896 CEST	49186	443	192.168.2.22	151.236.9.174
Sep 18, 2024 17:14:50.714090109 CEST	443	49186	151.236.9.174	192.168.2.22
Sep 18, 2024 17:14:50.714200974 CEST	443	49186	151.236.9.174	192.168.2.22
Sep 18, 2024 17:14:50.726687908 CEST	49187	443	192.168.2.22	151.236.9.174
Sep 18, 2024 17:14:50.726723909 CEST	443	49187	151.236.9.174	192.168.2.22
Sep 18, 2024 17:14:50.726767063 CEST	49187	443	192.168.2.22	151.236.9.174
Sep 18, 2024 17:14:50.727762938 CEST	49187	443	192.168.2.22	151.236.9.174
Sep 18, 2024 17:14:50.727775097 CEST	443	49187	151.236.9.174	192.168.2.22
Sep 18, 2024 17:14:50.727803946 CEST	443	49187	151.236.9.174	192.168.2.22
Sep 18, 2024 17:14:50.740056992 CEST	49188	443	192.168.2.22	151.236.9.174
Sep 18, 2024 17:14:50.740098953 CEST	443	49188	151.236.9.174	192.168.2.22
Sep 18, 2024 17:14:50.740150928 CEST	49188	443	192.168.2.22	151.236.9.174
Sep 18, 2024 17:14:50.740421057 CEST	49188	443	192.168.2.22	151.236.9.174
Sep 18, 2024 17:14:50.740446091 CEST	443	49188	151.236.9.174	192.168.2.22
Sep 18, 2024 17:14:50.740489006 CEST	443	49188	151.236.9.174	192.168.2.22
Sep 18, 2024 17:14:50.752005100 CEST	49189	443	192.168.2.22	151.236.9.174
Sep 18, 2024 17:14:50.752075911 CEST	443	49189	151.236.9.174	192.168.2.22
Sep 18, 2024 17:14:50.752142906 CEST	49189	443	192.168.2.22	151.236.9.174
Sep 18, 2024 17:14:50.752314091 CEST	49189	443	192.168.2.22	151.236.9.174
Sep 18, 2024 17:14:50.752347946 CEST	443	49189	151.236.9.174	192.168.2.22
Sep 18, 2024 17:14:50.752387047 CEST	443	49189	151.236.9.174	192.168.2.22
Sep 18, 2024 17:14:50.770723104 CEST	49190	443	192.168.2.22	151.236.9.174
Sep 18, 2024 17:14:50.770766973 CEST	443	49190	151.236.9.174	192.168.2.22
Sep 18, 2024 17:14:50.770833969 CEST	49190	443	192.168.2.22	151.236.9.174
Sep 18, 2024 17:14:50.771164894 CEST	49190	443	192.168.2.22	151.236.9.174
Sep 18, 2024 17:14:50.771192074 CEST	443	49190	151.236.9.174	192.168.2.22
Sep 18, 2024 17:14:50.771219969 CEST	443	49190	151.236.9.174	192.168.2.22
Sep 18, 2024 17:14:50.787897110 CEST	49191	443	192.168.2.22	151.236.9.174
Sep 18, 2024 17:14:50.787951946 CEST	443	49191	151.236.9.174	192.168.2.22
Sep 18, 2024 17:14:50.788002968 CEST	49191	443	192.168.2.22	151.236.9.174
Sep 18, 2024 17:14:50.788140059 CEST	49191	443	192.168.2.22	151.236.9.174
Sep 18, 2024 17:14:50.788167953 CEST	443	49191	151.236.9.174	192.168.2.22
Sep 18, 2024 17:14:50.788207054 CEST	443	49191	151.236.9.174	192.168.2.22
Sep 18, 2024 17:14:50.800282001 CEST	49192	443	192.168.2.22	151.236.9.174
Sep 18, 2024 17:14:50.800311089 CEST	443	49192	151.236.9.174	192.168.2.22
Sep 18, 2024 17:14:50.800368071 CEST	49192	443	192.168.2.22	151.236.9.174
Sep 18, 2024 17:14:50.800482988 CEST	49192	443	192.168.2.22	151.236.9.174
Sep 18, 2024 17:14:50.800498962 CEST	443	49192	151.236.9.174	192.168.2.22
Sep 18, 2024 17:14:50.800527096 CEST	443	49192	151.236.9.174	192.168.2.22
Sep 18, 2024 17:14:50.814956903 CEST	49193	443	192.168.2.22	151.236.9.174
Sep 18, 2024 17:14:50.814990997 CEST	443	49193	151.236.9.174	192.168.2.22
Sep 18, 2024 17:14:50.815043926 CEST	49193	443	192.168.2.22	151.236.9.174
Sep 18, 2024 17:14:50.815160036 CEST	49193	443	192.168.2.22	151.236.9.174
Sep 18, 2024 17:14:50.815171003 CEST	443	49193	151.236.9.174	192.168.2.22
Sep 18, 2024 17:14:50.815196991 CEST	443	49193	151.236.9.174	192.168.2.22
Sep 18, 2024 17:14:50.827322006 CEST	49194	443	192.168.2.22	151.236.9.174
Sep 18, 2024 17:14:50.827334881 CEST	443	49194	151.236.9.174	192.168.2.22
Sep 18, 2024 17:14:50.827387094 CEST	49194	443	192.168.2.22	151.236.9.174
Sep 18, 2024 17:14:50.827526093 CEST	49194	443	192.168.2.22	151.236.9.174
Sep 18, 2024 17:14:50.827534914 CEST	443	49194	151.236.9.174	192.168.2.22
Sep 18, 2024 17:14:50.827562094 CEST	443	49194	151.236.9.174	192.168.2.22
Sep 18, 2024 17:14:50.866029024 CEST	49195	443	192.168.2.22	151.236.9.174
Sep 18, 2024 17:14:50.866069078 CEST	443	49195	151.236.9.174	192.168.2.22
Sep 18, 2024 17:14:50.866116047 CEST	49195	443	192.168.2.22	151.236.9.174
Sep 18, 2024 17:14:50.866481066 CEST	49195	443	192.168.2.22	151.236.9.174
Sep 18, 2024 17:14:50.866516113 CEST	443	49195	151.236.9.174	192.168.2.22
Sep 18, 2024 17:14:50.866594076 CEST	443	49195	151.236.9.174	192.168.2.22
Sep 18, 2024 17:14:50.877023935 CEST	49196	443	192.168.2.22	151.236.9.174
Sep 18, 2024 17:14:50.877048016 CEST	443	49196	151.236.9.174	192.168.2.22
Sep 18, 2024 17:14:50.877341032 CEST	49196	443	192.168.2.22	151.236.9.174
Sep 18, 2024 17:14:50.877497911 CEST	49196	443	192.168.2.22	151.236.9.174
Sep 18, 2024 17:14:50.877506971 CEST	443	49196	151.236.9.174	192.168.2.22
Sep 18, 2024 17:14:50.877825022 CEST	443	49196	151.236.9.174	192.168.2.22
Sep 18, 2024 17:14:50.890928984 CEST	49197	443	192.168.2.22	151.236.9.174
Sep 18, 2024 17:14:50.890963078 CEST	443	49197	151.236.9.174	192.168.2.22
Sep 18, 2024 17:14:50.891211987 CEST	49197	443	192.168.2.22	151.236.9.174
Sep 18, 2024 17:14:50.891211987 CEST	49197	443	192.168.2.22	151.236.9.174
Sep 18, 2024 17:14:50.891239882 CEST	443	49197	151.236.9.174	192.168.2.22
Sep 18, 2024 17:14:50.891307116 CEST	443	49197	151.236.9.174	192.168.2.22
Sep 18, 2024 17:14:50.906981945 CEST	49198	443	192.168.2.22	151.236.9.174
Sep 18, 2024 17:14:50.906992912 CEST	443	49198	151.236.9.174	192.168.2.22
Sep 18, 2024 17:14:50.907083035 CEST	49198	443	192.168.2.22	151.236.9.174
Sep 18, 2024 17:14:50.908054113 CEST	49198	443	192.168.2.22	151.236.9.174
Sep 18, 2024 17:14:50.908066034 CEST	443	49198	151.236.9.174	192.168.2.22
Sep 18, 2024 17:14:50.908097029 CEST	443	49198	151.236.9.174	192.168.2.22
Sep 18, 2024 17:14:50.923955917 CEST	49199	443	192.168.2.22	151.236.9.174
Sep 18, 2024 17:14:50.923983097 CEST	443	49199	151.236.9.174	192.168.2.22
Sep 18, 2024 17:14:50.924242020 CEST	49199	443	192.168.2.22	151.236.9.174
Sep 18, 2024 17:14:50.924242020 CEST	49199	443	192.168.2.22	151.236.9.174
Sep 18, 2024 17:14:50.924264908 CEST	443	49199	151.236.9.174	192.168.2.22
Sep 18, 2024 17:14:50.924319983 CEST	443	49199	151.236.9.174	192.168.2.22
Sep 18, 2024 17:14:51.005677938 CEST	49200	443	192.168.2.22	151.236.9.174
Sep 18, 2024 17:14:51.005743027 CEST	443	49200	151.236.9.174	192.168.2.22
Sep 18, 2024 17:14:51.005824089 CEST	49200	443	192.168.2.22	151.236.9.174
Sep 18, 2024 17:14:51.006026983 CEST	49200	443	192.168.2.22	151.236.9.174
Sep 18, 2024 17:14:51.006046057 CEST	443	49200	151.236.9.174	192.168.2.22
Sep 18, 2024 17:14:51.006151915 CEST	443	49200	151.236.9.174	192.168.2.22
Sep 18, 2024 17:14:51.107722998 CEST	49201	443	192.168.2.22	151.236.9.174
Sep 18, 2024 17:14:51.107758999 CEST	443	49201	151.236.9.174	192.168.2.22
Sep 18, 2024 17:14:51.107826948 CEST	49201	443	192.168.2.22	151.236.9.174
Sep 18, 2024 17:14:51.107997894 CEST	49201	443	192.168.2.22	151.236.9.174
Sep 18, 2024 17:14:51.108012915 CEST	443	49201	151.236.9.174	192.168.2.22
Sep 18, 2024 17:14:51.108078003 CEST	443	49201	151.236.9.174	192.168.2.22
Sep 18, 2024 17:14:51.123217106 CEST	49202	443	192.168.2.22	151.236.9.174
Sep 18, 2024 17:14:51.123226881 CEST	443	49202	151.236.9.174	192.168.2.22
Sep 18, 2024 17:14:51.123290062 CEST	49202	443	192.168.2.22	151.236.9.174
Sep 18, 2024 17:14:51.123454094 CEST	49202	443	192.168.2.22	151.236.9.174
Sep 18, 2024 17:14:51.123461008 CEST	443	49202	151.236.9.174	192.168.2.22
Sep 18, 2024 17:14:51.123522043 CEST	443	49202	151.236.9.174	192.168.2.22
Sep 18, 2024 17:14:51.141676903 CEST	49203	443	192.168.2.22	151.236.9.174
Sep 18, 2024 17:14:51.141717911 CEST	443	49203	151.236.9.174	192.168.2.22
Sep 18, 2024 17:14:51.141782999 CEST	49203	443	192.168.2.22	151.236.9.174
Sep 18, 2024 17:14:51.142069101 CEST	49203	443	192.168.2.22	151.236.9.174
Sep 18, 2024 17:14:51.142085075 CEST	443	49203	151.236.9.174	192.168.2.22
Sep 18, 2024 17:14:51.142137051 CEST	443	49203	151.236.9.174	192.168.2.22
Sep 18, 2024 17:14:51.160586119 CEST	49204	443	192.168.2.22	151.236.9.174
Sep 18, 2024 17:14:51.160614967 CEST	443	49204	151.236.9.174	192.168.2.22
Sep 18, 2024 17:14:51.160697937 CEST	49204	443	192.168.2.22	151.236.9.174
Sep 18, 2024 17:14:51.160934925 CEST	49204	443	192.168.2.22	151.236.9.174
Sep 18, 2024 17:14:51.160953045 CEST	443	49204	151.236.9.174	192.168.2.22
Sep 18, 2024 17:14:51.161004066 CEST	443	49204	151.236.9.174	192.168.2.22
Sep 18, 2024 17:14:51.176619053 CEST	49205	443	192.168.2.22	151.236.9.174
Sep 18, 2024 17:14:51.176677942 CEST	443	49205	151.236.9.174	192.168.2.22
Sep 18, 2024 17:14:51.176748037 CEST	49205	443	192.168.2.22	151.236.9.174
Sep 18, 2024 17:14:51.176925898 CEST	49205	443	192.168.2.22	151.236.9.174
Sep 18, 2024 17:14:51.176945925 CEST	443	49205	151.236.9.174	192.168.2.22
Sep 18, 2024 17:14:51.176985025 CEST	443	49205	151.236.9.174	192.168.2.22
Sep 18, 2024 17:14:51.193552971 CEST	49206	443	192.168.2.22	151.236.9.174
Sep 18, 2024 17:14:51.193608999 CEST	443	49206	151.236.9.174	192.168.2.22
Sep 18, 2024 17:14:51.193671942 CEST	49206	443	192.168.2.22	151.236.9.174
Sep 18, 2024 17:14:51.193844080 CEST	49206	443	192.168.2.22	151.236.9.174
Sep 18, 2024 17:14:51.193861008 CEST	443	49206	151.236.9.174	192.168.2.22
Sep 18, 2024 17:14:51.193902016 CEST	443	49206	151.236.9.174	192.168.2.22
Sep 18, 2024 17:14:51.211098909 CEST	49207	443	192.168.2.22	151.236.9.174
Sep 18, 2024 17:14:51.211132050 CEST	443	49207	151.236.9.174	192.168.2.22
Sep 18, 2024 17:14:51.211252928 CEST	49207	443	192.168.2.22	151.236.9.174
Sep 18, 2024 17:14:51.211925030 CEST	49207	443	192.168.2.22	151.236.9.174
Sep 18, 2024 17:14:51.211949110 CEST	443	49207	151.236.9.174	192.168.2.22
Sep 18, 2024 17:14:51.211993933 CEST	443	49207	151.236.9.174	192.168.2.22
Sep 18, 2024 17:14:51.233093023 CEST	49208	443	192.168.2.22	151.236.9.174
Sep 18, 2024 17:14:51.233130932 CEST	443	49208	151.236.9.174	192.168.2.22
Sep 18, 2024 17:14:51.233192921 CEST	49208	443	192.168.2.22	151.236.9.174
Sep 18, 2024 17:14:51.233367920 CEST	49208	443	192.168.2.22	151.236.9.174
Sep 18, 2024 17:14:51.233386040 CEST	443	49208	151.236.9.174	192.168.2.22
Sep 18, 2024 17:14:51.233464956 CEST	443	49208	151.236.9.174	192.168.2.22
Sep 18, 2024 17:14:51.253048897 CEST	49209	443	192.168.2.22	151.236.9.174
Sep 18, 2024 17:14:51.253099918 CEST	443	49209	151.236.9.174	192.168.2.22
Sep 18, 2024 17:14:51.253181934 CEST	49209	443	192.168.2.22	151.236.9.174
Sep 18, 2024 17:14:51.253879070 CEST	49209	443	192.168.2.22	151.236.9.174
Sep 18, 2024 17:14:51.253892899 CEST	443	49209	151.236.9.174	192.168.2.22
Sep 18, 2024 17:14:51.253921986 CEST	443	49209	151.236.9.174	192.168.2.22
Sep 18, 2024 17:14:51.273410082 CEST	49210	443	192.168.2.22	151.236.9.174
Sep 18, 2024 17:14:51.273431063 CEST	443	49210	151.236.9.174	192.168.2.22
Sep 18, 2024 17:14:51.273510933 CEST	49210	443	192.168.2.22	151.236.9.174
Sep 18, 2024 17:14:51.273968935 CEST	49210	443	192.168.2.22	151.236.9.174
Sep 18, 2024 17:14:51.273984909 CEST	443	49210	151.236.9.174	192.168.2.22
Sep 18, 2024 17:14:51.274014950 CEST	443	49210	151.236.9.174	192.168.2.22
Sep 18, 2024 17:14:51.291675091 CEST	49211	443	192.168.2.22	151.236.9.174
Sep 18, 2024 17:14:51.291713953 CEST	443	49211	151.236.9.174	192.168.2.22
Sep 18, 2024 17:14:51.291778088 CEST	49211	443	192.168.2.22	151.236.9.174
Sep 18, 2024 17:14:51.291960001 CEST	49211	443	192.168.2.22	151.236.9.174
Sep 18, 2024 17:14:51.291977882 CEST	443	49211	151.236.9.174	192.168.2.22
Sep 18, 2024 17:14:51.292005062 CEST	443	49211	151.236.9.174	192.168.2.22
Sep 18, 2024 17:14:51.311752081 CEST	49212	443	192.168.2.22	151.236.9.174
Sep 18, 2024 17:14:51.311785936 CEST	443	49212	151.236.9.174	192.168.2.22
Sep 18, 2024 17:14:51.311855078 CEST	49212	443	192.168.2.22	151.236.9.174
Sep 18, 2024 17:14:51.312648058 CEST	49212	443	192.168.2.22	151.236.9.174
Sep 18, 2024 17:14:51.312665939 CEST	443	49212	151.236.9.174	192.168.2.22
Sep 18, 2024 17:14:51.312736034 CEST	443	49212	151.236.9.174	192.168.2.22
Sep 18, 2024 17:14:51.385185957 CEST	49213	443	192.168.2.22	151.236.9.174
Sep 18, 2024 17:14:51.385217905 CEST	443	49213	151.236.9.174	192.168.2.22
Sep 18, 2024 17:14:51.385309935 CEST	49213	443	192.168.2.22	151.236.9.174
Sep 18, 2024 17:14:51.385427952 CEST	49213	443	192.168.2.22	151.236.9.174
Sep 18, 2024 17:14:51.385442019 CEST	443	49213	151.236.9.174	192.168.2.22
Sep 18, 2024 17:14:51.385469913 CEST	443	49213	151.236.9.174	192.168.2.22
Sep 18, 2024 17:14:51.408655882 CEST	49214	443	192.168.2.22	151.236.9.174
Sep 18, 2024 17:14:51.408664942 CEST	443	49214	151.236.9.174	192.168.2.22
Sep 18, 2024 17:14:51.408776999 CEST	49214	443	192.168.2.22	151.236.9.174
Sep 18, 2024 17:14:51.408849001 CEST	49214	443	192.168.2.22	151.236.9.174
Sep 18, 2024 17:14:51.408858061 CEST	443	49214	151.236.9.174	192.168.2.22
Sep 18, 2024 17:14:51.408881903 CEST	443	49214	151.236.9.174	192.168.2.22
Sep 18, 2024 17:14:51.420399904 CEST	49215	443	192.168.2.22	151.236.9.174
Sep 18, 2024 17:14:51.420439005 CEST	443	49215	151.236.9.174	192.168.2.22
Sep 18, 2024 17:14:51.420495987 CEST	49215	443	192.168.2.22	151.236.9.174
Sep 18, 2024 17:14:51.420854092 CEST	49215	443	192.168.2.22	151.236.9.174
Sep 18, 2024 17:14:51.420875072 CEST	443	49215	151.236.9.174	192.168.2.22
Sep 18, 2024 17:14:51.420897961 CEST	443	49215	151.236.9.174	192.168.2.22
Sep 18, 2024 17:14:51.436147928 CEST	49216	443	192.168.2.22	151.236.9.174
Sep 18, 2024 17:14:51.436198950 CEST	443	49216	151.236.9.174	192.168.2.22
Sep 18, 2024 17:14:51.436245918 CEST	49216	443	192.168.2.22	151.236.9.174
Sep 18, 2024 17:14:51.436443090 CEST	49216	443	192.168.2.22	151.236.9.174
Sep 18, 2024 17:14:51.436463118 CEST	443	49216	151.236.9.174	192.168.2.22
Sep 18, 2024 17:14:51.436482906 CEST	443	49216	151.236.9.174	192.168.2.22
Sep 18, 2024 17:14:51.451620102 CEST	49217	443	192.168.2.22	151.236.9.174
Sep 18, 2024 17:14:51.451653004 CEST	443	49217	151.236.9.174	192.168.2.22
Sep 18, 2024 17:14:51.451719046 CEST	49217	443	192.168.2.22	151.236.9.174
Sep 18, 2024 17:14:51.451915979 CEST	49217	443	192.168.2.22	151.236.9.174
Sep 18, 2024 17:14:51.451941013 CEST	443	49217	151.236.9.174	192.168.2.22
Sep 18, 2024 17:14:51.451966047 CEST	443	49217	151.236.9.174	192.168.2.22
Sep 18, 2024 17:14:51.464845896 CEST	49218	443	192.168.2.22	151.236.9.174
Sep 18, 2024 17:14:51.464859962 CEST	443	49218	151.236.9.174	192.168.2.22
Sep 18, 2024 17:14:51.465514898 CEST	49218	443	192.168.2.22	151.236.9.174
Sep 18, 2024 17:14:51.465514898 CEST	49218	443	192.168.2.22	151.236.9.174
Sep 18, 2024 17:14:51.465536118 CEST	443	49218	151.236.9.174	192.168.2.22
Sep 18, 2024 17:14:51.465576887 CEST	443	49218	151.236.9.174	192.168.2.22
Sep 18, 2024 17:14:51.477252007 CEST	49219	443	192.168.2.22	151.236.9.174
Sep 18, 2024 17:14:51.477288008 CEST	443	49219	151.236.9.174	192.168.2.22
Sep 18, 2024 17:14:51.477335930 CEST	49219	443	192.168.2.22	151.236.9.174
Sep 18, 2024 17:14:51.477670908 CEST	49219	443	192.168.2.22	151.236.9.174
Sep 18, 2024 17:14:51.477690935 CEST	443	49219	151.236.9.174	192.168.2.22
Sep 18, 2024 17:14:51.477710962 CEST	443	49219	151.236.9.174	192.168.2.22
Sep 18, 2024 17:14:51.488603115 CEST	49220	443	192.168.2.22	151.236.9.174
Sep 18, 2024 17:14:51.488629103 CEST	443	49220	151.236.9.174	192.168.2.22
Sep 18, 2024 17:14:51.488682985 CEST	49220	443	192.168.2.22	151.236.9.174
Sep 18, 2024 17:14:51.488862038 CEST	49220	443	192.168.2.22	151.236.9.174
Sep 18, 2024 17:14:51.488878012 CEST	443	49220	151.236.9.174	192.168.2.22
Sep 18, 2024 17:14:51.488898039 CEST	443	49220	151.236.9.174	192.168.2.22
Sep 18, 2024 17:14:51.503408909 CEST	49221	443	192.168.2.22	151.236.9.174
Sep 18, 2024 17:14:51.503452063 CEST	443	49221	151.236.9.174	192.168.2.22
Sep 18, 2024 17:14:51.503528118 CEST	49221	443	192.168.2.22	151.236.9.174
Sep 18, 2024 17:14:51.503743887 CEST	49221	443	192.168.2.22	151.236.9.174
Sep 18, 2024 17:14:51.503765106 CEST	443	49221	151.236.9.174	192.168.2.22
Sep 18, 2024 17:14:51.503783941 CEST	443	49221	151.236.9.174	192.168.2.22
Sep 18, 2024 17:14:51.517086029 CEST	49222	443	192.168.2.22	151.236.9.174
Sep 18, 2024 17:14:51.517115116 CEST	443	49222	151.236.9.174	192.168.2.22
Sep 18, 2024 17:14:51.517167091 CEST	49222	443	192.168.2.22	151.236.9.174
Sep 18, 2024 17:14:51.517345905 CEST	49222	443	192.168.2.22	151.236.9.174
Sep 18, 2024 17:14:51.517359018 CEST	443	49222	151.236.9.174	192.168.2.22
Sep 18, 2024 17:14:51.517375946 CEST	443	49222	151.236.9.174	192.168.2.22
Sep 18, 2024 17:14:51.529680967 CEST	49223	443	192.168.2.22	151.236.9.174
Sep 18, 2024 17:14:51.529725075 CEST	443	49223	151.236.9.174	192.168.2.22
Sep 18, 2024 17:14:51.529788971 CEST	49223	443	192.168.2.22	151.236.9.174
Sep 18, 2024 17:14:51.530144930 CEST	49223	443	192.168.2.22	151.236.9.174
Sep 18, 2024 17:14:51.530159950 CEST	443	49223	151.236.9.174	192.168.2.22
Sep 18, 2024 17:14:51.530174971 CEST	443	49223	151.236.9.174	192.168.2.22
Sep 18, 2024 17:14:51.798227072 CEST	49224	443	192.168.2.22	151.236.9.174
Sep 18, 2024 17:14:51.798280954 CEST	443	49224	151.236.9.174	192.168.2.22
Sep 18, 2024 17:14:51.798342943 CEST	49224	443	192.168.2.22	151.236.9.174
Sep 18, 2024 17:14:51.798496008 CEST	49224	443	192.168.2.22	151.236.9.174
Sep 18, 2024 17:14:51.798511982 CEST	443	49224	151.236.9.174	192.168.2.22
Sep 18, 2024 17:14:51.798552036 CEST	443	49224	151.236.9.174	192.168.2.22
Sep 18, 2024 17:14:51.859369993 CEST	49225	443	192.168.2.22	151.236.9.174
Sep 18, 2024 17:14:51.859409094 CEST	443	49225	151.236.9.174	192.168.2.22
Sep 18, 2024 17:14:51.859462023 CEST	49225	443	192.168.2.22	151.236.9.174
Sep 18, 2024 17:14:51.859591961 CEST	49225	443	192.168.2.22	151.236.9.174
Sep 18, 2024 17:14:51.859607935 CEST	443	49225	151.236.9.174	192.168.2.22
Sep 18, 2024 17:14:51.859649897 CEST	443	49225	151.236.9.174	192.168.2.22
Sep 18, 2024 17:14:51.899233103 CEST	49226	443	192.168.2.22	151.236.9.174
Sep 18, 2024 17:14:51.899269104 CEST	443	49226	151.236.9.174	192.168.2.22
Sep 18, 2024 17:14:51.899317980 CEST	49226	443	192.168.2.22	151.236.9.174
Sep 18, 2024 17:14:51.899576902 CEST	49226	443	192.168.2.22	151.236.9.174
Sep 18, 2024 17:14:51.899594069 CEST	443	49226	151.236.9.174	192.168.2.22
Sep 18, 2024 17:14:51.899641991 CEST	443	49226	151.236.9.174	192.168.2.22
Sep 18, 2024 17:14:51.912760973 CEST	49227	443	192.168.2.22	151.236.9.174
Sep 18, 2024 17:14:51.912797928 CEST	443	49227	151.236.9.174	192.168.2.22
Sep 18, 2024 17:14:51.912856102 CEST	49227	443	192.168.2.22	151.236.9.174
Sep 18, 2024 17:14:51.913002014 CEST	49227	443	192.168.2.22	151.236.9.174
Sep 18, 2024 17:14:51.913016081 CEST	443	49227	151.236.9.174	192.168.2.22
Sep 18, 2024 17:14:51.913044930 CEST	443	49227	151.236.9.174	192.168.2.22
Sep 18, 2024 17:14:51.926089048 CEST	49228	443	192.168.2.22	151.236.9.174
Sep 18, 2024 17:14:51.926126003 CEST	443	49228	151.236.9.174	192.168.2.22
Sep 18, 2024 17:14:51.926301003 CEST	49228	443	192.168.2.22	151.236.9.174
Sep 18, 2024 17:14:51.926301003 CEST	49228	443	192.168.2.22	151.236.9.174
Sep 18, 2024 17:14:51.926335096 CEST	443	49228	151.236.9.174	192.168.2.22
Sep 18, 2024 17:14:51.926388025 CEST	443	49228	151.236.9.174	192.168.2.22
Sep 18, 2024 17:14:51.938963890 CEST	49229	443	192.168.2.22	151.236.9.174
Sep 18, 2024 17:14:51.938999891 CEST	443	49229	151.236.9.174	192.168.2.22
Sep 18, 2024 17:14:51.939070940 CEST	49229	443	192.168.2.22	151.236.9.174
Sep 18, 2024 17:14:51.939368010 CEST	49229	443	192.168.2.22	151.236.9.174
Sep 18, 2024 17:14:51.939388037 CEST	443	49229	151.236.9.174	192.168.2.22
Sep 18, 2024 17:14:51.939430952 CEST	443	49229	151.236.9.174	192.168.2.22
Sep 18, 2024 17:14:51.954916954 CEST	49230	443	192.168.2.22	151.236.9.174
Sep 18, 2024 17:14:51.954927921 CEST	443	49230	151.236.9.174	192.168.2.22
Sep 18, 2024 17:14:51.954972029 CEST	49230	443	192.168.2.22	151.236.9.174
Sep 18, 2024 17:14:51.955037117 CEST	49230	443	192.168.2.22	151.236.9.174
Sep 18, 2024 17:14:51.955046892 CEST	443	49230	151.236.9.174	192.168.2.22
Sep 18, 2024 17:14:51.955076933 CEST	443	49230	151.236.9.174	192.168.2.22
Sep 18, 2024 17:14:51.966156006 CEST	49231	443	192.168.2.22	151.236.9.174
Sep 18, 2024 17:14:51.966187000 CEST	443	49231	151.236.9.174	192.168.2.22
Sep 18, 2024 17:14:51.966233969 CEST	49231	443	192.168.2.22	151.236.9.174
Sep 18, 2024 17:14:51.966413021 CEST	49231	443	192.168.2.22	151.236.9.174
Sep 18, 2024 17:14:51.966428995 CEST	443	49231	151.236.9.174	192.168.2.22
Sep 18, 2024 17:14:51.966454029 CEST	443	49231	151.236.9.174	192.168.2.22
Sep 18, 2024 17:14:51.979115009 CEST	49232	443	192.168.2.22	151.236.9.174
Sep 18, 2024 17:14:51.979160070 CEST	443	49232	151.236.9.174	192.168.2.22
Sep 18, 2024 17:14:51.979399920 CEST	49232	443	192.168.2.22	151.236.9.174
Sep 18, 2024 17:14:51.979574919 CEST	49232	443	192.168.2.22	151.236.9.174
Sep 18, 2024 17:14:51.979587078 CEST	443	49232	151.236.9.174	192.168.2.22
Sep 18, 2024 17:14:51.979610920 CEST	443	49232	151.236.9.174	192.168.2.22
Sep 18, 2024 17:14:51.991807938 CEST	49233	443	192.168.2.22	151.236.9.174
Sep 18, 2024 17:14:51.991833925 CEST	443	49233	151.236.9.174	192.168.2.22
Sep 18, 2024 17:14:51.991883039 CEST	49233	443	192.168.2.22	151.236.9.174
Sep 18, 2024 17:14:51.992077112 CEST	49233	443	192.168.2.22	151.236.9.174
Sep 18, 2024 17:14:51.992093086 CEST	443	49233	151.236.9.174	192.168.2.22
Sep 18, 2024 17:14:51.992120028 CEST	443	49233	151.236.9.174	192.168.2.22
Sep 18, 2024 17:14:52.017425060 CEST	49234	443	192.168.2.22	151.236.9.174
Sep 18, 2024 17:14:52.017452955 CEST	443	49234	151.236.9.174	192.168.2.22
Sep 18, 2024 17:14:52.017513037 CEST	49234	443	192.168.2.22	151.236.9.174
Sep 18, 2024 17:14:52.017627954 CEST	49234	443	192.168.2.22	151.236.9.174
Sep 18, 2024 17:14:52.017642021 CEST	443	49234	151.236.9.174	192.168.2.22
Sep 18, 2024 17:14:52.017666101 CEST	443	49234	151.236.9.174	192.168.2.22
Sep 18, 2024 17:14:52.046103001 CEST	49235	443	192.168.2.22	151.236.9.174
Sep 18, 2024 17:14:52.046128988 CEST	443	49235	151.236.9.174	192.168.2.22
Sep 18, 2024 17:14:52.046232939 CEST	49235	443	192.168.2.22	151.236.9.174
Sep 18, 2024 17:14:52.046818972 CEST	49235	443	192.168.2.22	151.236.9.174
Sep 18, 2024 17:14:52.046830893 CEST	443	49235	151.236.9.174	192.168.2.22
Sep 18, 2024 17:14:52.046850920 CEST	443	49235	151.236.9.174	192.168.2.22
Sep 18, 2024 17:14:52.058410883 CEST	49236	443	192.168.2.22	151.236.9.174
Sep 18, 2024 17:14:52.058456898 CEST	443	49236	151.236.9.174	192.168.2.22
Sep 18, 2024 17:14:52.058514118 CEST	49236	443	192.168.2.22	151.236.9.174
Sep 18, 2024 17:14:52.058778048 CEST	49236	443	192.168.2.22	151.236.9.174
Sep 18, 2024 17:14:52.058798075 CEST	443	49236	151.236.9.174	192.168.2.22
Sep 18, 2024 17:14:52.058820009 CEST	443	49236	151.236.9.174	192.168.2.22
Sep 18, 2024 17:14:52.072377920 CEST	49237	443	192.168.2.22	151.236.9.174
Sep 18, 2024 17:14:52.072412014 CEST	443	49237	151.236.9.174	192.168.2.22
Sep 18, 2024 17:14:52.072479963 CEST	49237	443	192.168.2.22	151.236.9.174
Sep 18, 2024 17:14:52.072628021 CEST	49237	443	192.168.2.22	151.236.9.174
Sep 18, 2024 17:14:52.072643042 CEST	443	49237	151.236.9.174	192.168.2.22
Sep 18, 2024 17:14:52.072669029 CEST	443	49237	151.236.9.174	192.168.2.22
Sep 18, 2024 17:14:52.085174084 CEST	49238	443	192.168.2.22	151.236.9.174
Sep 18, 2024 17:14:52.085185051 CEST	443	49238	151.236.9.174	192.168.2.22
Sep 18, 2024 17:14:52.085253000 CEST	49238	443	192.168.2.22	151.236.9.174
Sep 18, 2024 17:14:52.085441113 CEST	49238	443	192.168.2.22	151.236.9.174
Sep 18, 2024 17:14:52.085455894 CEST	443	49238	151.236.9.174	192.168.2.22
Sep 18, 2024 17:14:52.085480928 CEST	443	49238	151.236.9.174	192.168.2.22
Sep 18, 2024 17:14:52.099927902 CEST	49239	443	192.168.2.22	151.236.9.174
Sep 18, 2024 17:14:52.099984884 CEST	443	49239	151.236.9.174	192.168.2.22
Sep 18, 2024 17:14:52.100040913 CEST	49239	443	192.168.2.22	151.236.9.174
Sep 18, 2024 17:14:52.100250006 CEST	49239	443	192.168.2.22	151.236.9.174
Sep 18, 2024 17:14:52.100267887 CEST	443	49239	151.236.9.174	192.168.2.22
Sep 18, 2024 17:14:52.100287914 CEST	443	49239	151.236.9.174	192.168.2.22
Sep 18, 2024 17:14:52.113579988 CEST	49240	443	192.168.2.22	151.236.9.174
Sep 18, 2024 17:14:52.113615036 CEST	443	49240	151.236.9.174	192.168.2.22
Sep 18, 2024 17:14:52.113671064 CEST	49240	443	192.168.2.22	151.236.9.174
Sep 18, 2024 17:14:52.113796949 CEST	49240	443	192.168.2.22	151.236.9.174
Sep 18, 2024 17:14:52.113812923 CEST	443	49240	151.236.9.174	192.168.2.22
Sep 18, 2024 17:14:52.113836050 CEST	443	49240	151.236.9.174	192.168.2.22
Sep 18, 2024 17:14:52.126405954 CEST	49241	443	192.168.2.22	151.236.9.174
Sep 18, 2024 17:14:52.126431942 CEST	443	49241	151.236.9.174	192.168.2.22
Sep 18, 2024 17:14:52.126487017 CEST	49241	443	192.168.2.22	151.236.9.174
Sep 18, 2024 17:14:52.126597881 CEST	49241	443	192.168.2.22	151.236.9.174
Sep 18, 2024 17:14:52.126611948 CEST	443	49241	151.236.9.174	192.168.2.22
Sep 18, 2024 17:14:52.126633883 CEST	443	49241	151.236.9.174	192.168.2.22
Sep 18, 2024 17:14:52.141232967 CEST	49242	443	192.168.2.22	151.236.9.174
Sep 18, 2024 17:14:52.141252995 CEST	443	49242	151.236.9.174	192.168.2.22
Sep 18, 2024 17:14:52.141319990 CEST	49242	443	192.168.2.22	151.236.9.174
Sep 18, 2024 17:14:52.141427994 CEST	49242	443	192.168.2.22	151.236.9.174
Sep 18, 2024 17:14:52.141442060 CEST	443	49242	151.236.9.174	192.168.2.22
Sep 18, 2024 17:14:52.141465902 CEST	443	49242	151.236.9.174	192.168.2.22
Sep 18, 2024 17:14:52.166290998 CEST	49243	443	192.168.2.22	151.236.9.174
Sep 18, 2024 17:14:52.166338921 CEST	443	49243	151.236.9.174	192.168.2.22
Sep 18, 2024 17:14:52.166431904 CEST	49243	443	192.168.2.22	151.236.9.174
Sep 18, 2024 17:14:52.166773081 CEST	49243	443	192.168.2.22	151.236.9.174
Sep 18, 2024 17:14:52.166790009 CEST	443	49243	151.236.9.174	192.168.2.22
Sep 18, 2024 17:14:52.166815996 CEST	443	49243	151.236.9.174	192.168.2.22
Sep 18, 2024 17:14:52.182843924 CEST	49244	443	192.168.2.22	151.236.9.174
Sep 18, 2024 17:14:52.182879925 CEST	443	49244	151.236.9.174	192.168.2.22
Sep 18, 2024 17:14:52.182972908 CEST	49244	443	192.168.2.22	151.236.9.174
Sep 18, 2024 17:14:52.183326006 CEST	49244	443	192.168.2.22	151.236.9.174
Sep 18, 2024 17:14:52.183342934 CEST	443	49244	151.236.9.174	192.168.2.22
Sep 18, 2024 17:14:52.183379889 CEST	443	49244	151.236.9.174	192.168.2.22
Sep 18, 2024 17:14:52.197582960 CEST	49245	443	192.168.2.22	151.236.9.174
Sep 18, 2024 17:14:52.197688103 CEST	443	49245	151.236.9.174	192.168.2.22
Sep 18, 2024 17:14:52.197772026 CEST	49245	443	192.168.2.22	151.236.9.174
Sep 18, 2024 17:14:52.198046923 CEST	49245	443	192.168.2.22	151.236.9.174
Sep 18, 2024 17:14:52.198076963 CEST	443	49245	151.236.9.174	192.168.2.22
Sep 18, 2024 17:14:52.198117971 CEST	443	49245	151.236.9.174	192.168.2.22
Sep 18, 2024 17:14:52.213810921 CEST	49246	443	192.168.2.22	151.236.9.174
Sep 18, 2024 17:14:52.213855028 CEST	443	49246	151.236.9.174	192.168.2.22
Sep 18, 2024 17:14:52.213915110 CEST	49246	443	192.168.2.22	151.236.9.174
Sep 18, 2024 17:14:52.214082956 CEST	49246	443	192.168.2.22	151.236.9.174
Sep 18, 2024 17:14:52.214112997 CEST	443	49246	151.236.9.174	192.168.2.22
Sep 18, 2024 17:14:52.214158058 CEST	443	49246	151.236.9.174	192.168.2.22
Sep 18, 2024 17:14:52.228924036 CEST	49247	443	192.168.2.22	151.236.9.174
Sep 18, 2024 17:14:52.228962898 CEST	443	49247	151.236.9.174	192.168.2.22
Sep 18, 2024 17:14:52.229022980 CEST	49247	443	192.168.2.22	151.236.9.174
Sep 18, 2024 17:14:52.229382992 CEST	49247	443	192.168.2.22	151.236.9.174
Sep 18, 2024 17:14:52.229397058 CEST	443	49247	151.236.9.174	192.168.2.22
Sep 18, 2024 17:14:52.229460955 CEST	443	49247	151.236.9.174	192.168.2.22
Sep 18, 2024 17:14:52.242347956 CEST	49248	443	192.168.2.22	151.236.9.174
Sep 18, 2024 17:14:52.242362976 CEST	443	49248	151.236.9.174	192.168.2.22
Sep 18, 2024 17:14:52.242470026 CEST	49248	443	192.168.2.22	151.236.9.174
Sep 18, 2024 17:14:52.242647886 CEST	49248	443	192.168.2.22	151.236.9.174
Sep 18, 2024 17:14:52.242660999 CEST	443	49248	151.236.9.174	192.168.2.22
Sep 18, 2024 17:14:52.242698908 CEST	443	49248	151.236.9.174	192.168.2.22
Sep 18, 2024 17:14:52.255857944 CEST	49249	443	192.168.2.22	151.236.9.174
Sep 18, 2024 17:14:52.255951881 CEST	443	49249	151.236.9.174	192.168.2.22
Sep 18, 2024 17:14:52.256022930 CEST	49249	443	192.168.2.22	151.236.9.174
Sep 18, 2024 17:14:52.256153107 CEST	49249	443	192.168.2.22	151.236.9.174
Sep 18, 2024 17:14:52.256186962 CEST	443	49249	151.236.9.174	192.168.2.22
Sep 18, 2024 17:14:52.256225109 CEST	443	49249	151.236.9.174	192.168.2.22
Sep 18, 2024 17:14:52.267537117 CEST	49250	443	192.168.2.22	151.236.9.174
Sep 18, 2024 17:14:52.267564058 CEST	443	49250	151.236.9.174	192.168.2.22
Sep 18, 2024 17:14:52.267627001 CEST	49250	443	192.168.2.22	151.236.9.174
Sep 18, 2024 17:14:52.267997026 CEST	49250	443	192.168.2.22	151.236.9.174
Sep 18, 2024 17:14:52.268019915 CEST	443	49250	151.236.9.174	192.168.2.22
Sep 18, 2024 17:14:52.268057108 CEST	443	49250	151.236.9.174	192.168.2.22
Sep 18, 2024 17:14:52.289307117 CEST	49251	443	192.168.2.22	151.236.9.174
Sep 18, 2024 17:14:52.289345026 CEST	443	49251	151.236.9.174	192.168.2.22
Sep 18, 2024 17:14:52.289494038 CEST	49251	443	192.168.2.22	151.236.9.174
Sep 18, 2024 17:14:52.289763927 CEST	49251	443	192.168.2.22	151.236.9.174
Sep 18, 2024 17:14:52.289788008 CEST	443	49251	151.236.9.174	192.168.2.22
Sep 18, 2024 17:14:52.289815903 CEST	443	49251	151.236.9.174	192.168.2.22
Sep 18, 2024 17:14:52.303261995 CEST	49252	443	192.168.2.22	151.236.9.174
Sep 18, 2024 17:14:52.303301096 CEST	443	49252	151.236.9.174	192.168.2.22
Sep 18, 2024 17:14:52.303359985 CEST	49252	443	192.168.2.22	151.236.9.174
Sep 18, 2024 17:14:52.303492069 CEST	49252	443	192.168.2.22	151.236.9.174
Sep 18, 2024 17:14:52.303498983 CEST	443	49252	151.236.9.174	192.168.2.22
Sep 18, 2024 17:14:52.303958893 CEST	443	49252	151.236.9.174	192.168.2.22
Sep 18, 2024 17:14:52.315840006 CEST	49253	443	192.168.2.22	151.236.9.174
Sep 18, 2024 17:14:52.315876007 CEST	443	49253	151.236.9.174	192.168.2.22
Sep 18, 2024 17:14:52.315928936 CEST	49253	443	192.168.2.22	151.236.9.174
Sep 18, 2024 17:14:52.316063881 CEST	49253	443	192.168.2.22	151.236.9.174
Sep 18, 2024 17:14:52.316080093 CEST	443	49253	151.236.9.174	192.168.2.22
Sep 18, 2024 17:14:52.316121101 CEST	443	49253	151.236.9.174	192.168.2.22
Sep 18, 2024 17:14:52.328008890 CEST	49254	443	192.168.2.22	151.236.9.174
Sep 18, 2024 17:14:52.328026056 CEST	443	49254	151.236.9.174	192.168.2.22
Sep 18, 2024 17:14:52.328071117 CEST	49254	443	192.168.2.22	151.236.9.174
Sep 18, 2024 17:14:52.328140974 CEST	49254	443	192.168.2.22	151.236.9.174
Sep 18, 2024 17:14:52.328149080 CEST	443	49254	151.236.9.174	192.168.2.22
Sep 18, 2024 17:14:52.328192949 CEST	443	49254	151.236.9.174	192.168.2.22
Sep 18, 2024 17:14:52.339020014 CEST	49255	443	192.168.2.22	151.236.9.174
Sep 18, 2024 17:14:52.339054108 CEST	443	49255	151.236.9.174	192.168.2.22
Sep 18, 2024 17:14:52.339147091 CEST	49255	443	192.168.2.22	151.236.9.174

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Sep 18, 2024 17:14:48.598632097 CEST	192.168.2.22	8.8.8.8	0xe99f	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:14:48.627684116 CEST	192.168.2.22	8.8.8.8	0xcd5	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:14:48.716192961 CEST	192.168.2.22	8.8.8.8	0xa60	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:14:48.729284048 CEST	192.168.2.22	8.8.8.8	0xf936	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:14:48.743038893 CEST	192.168.2.22	8.8.8.8	0xc9a8	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:14:48.784825087 CEST	192.168.2.22	8.8.8.8	0x5618	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:14:48.797857046 CEST	192.168.2.22	8.8.8.8	0xe09b	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:14:48.819545031 CEST	192.168.2.22	8.8.8.8	0x450f	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:14:48.892779112 CEST	192.168.2.22	8.8.8.8	0x35a2	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:14:48.935667992 CEST	192.168.2.22	8.8.8.8	0x8afd	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:14:48.952102900 CEST	192.168.2.22	8.8.8.8	0x5395	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:14:48.965029955 CEST	192.168.2.22	8.8.8.8	0x20eb	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:14:48.984942913 CEST	192.168.2.22	8.8.8.8	0x1e5a	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:14:49.101087093 CEST	192.168.2.22	8.8.8.8	0xefa3	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:14:49.157429934 CEST	192.168.2.22	8.8.8.8	0x59c9	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:14:49.186062098 CEST	192.168.2.22	8.8.8.8	0x4f2c	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:14:49.216037989 CEST	192.168.2.22	8.8.8.8	0x11df	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:14:49.234436035 CEST	192.168.2.22	8.8.8.8	0x743a	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:14:49.562880993 CEST	192.168.2.22	8.8.8.8	0x1d4b	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:14:50.273663044 CEST	192.168.2.22	8.8.8.8	0xc8	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:14:50.471239090 CEST	192.168.2.22	8.8.8.8	0x81ed	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:14:50.705437899 CEST	192.168.2.22	8.8.8.8	0x78b0	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:14:50.718606949 CEST	192.168.2.22	8.8.8.8	0xb1f2	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:14:50.731998920 CEST	192.168.2.22	8.8.8.8	0x7a83	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:14:50.744605064 CEST	192.168.2.22	8.8.8.8	0x81fc	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:14:50.756551981 CEST	192.168.2.22	8.8.8.8	0x6dc8	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:14:50.775952101 CEST	192.168.2.22	8.8.8.8	0x4230	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:14:50.791848898 CEST	192.168.2.22	8.8.8.8	0x9bd7	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:14:50.805227041 CEST	192.168.2.22	8.8.8.8	0xc5cf	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:14:50.819181919 CEST	192.168.2.22	8.8.8.8	0xc135	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:14:50.857958078 CEST	192.168.2.22	8.8.8.8	0x8c13	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:14:50.870063066 CEST	192.168.2.22	8.8.8.8	0xa5e4	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:14:50.882133961 CEST	192.168.2.22	8.8.8.8	0x98ed	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:14:50.898127079 CEST	192.168.2.22	8.8.8.8	0x130f	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:14:50.916143894 CEST	192.168.2.22	8.8.8.8	0xa77b	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:14:50.997394085 CEST	192.168.2.22	8.8.8.8	0xdae9	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:14:51.098726034 CEST	192.168.2.22	8.8.8.8	0xed0f	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:14:51.115273952 CEST	192.168.2.22	8.8.8.8	0xe645	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:14:51.131278992 CEST	192.168.2.22	8.8.8.8	0x4421	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:14:51.149369955 CEST	192.168.2.22	8.8.8.8	0x3d55	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:14:51.168324947 CEST	192.168.2.22	8.8.8.8	0x4ebb	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:14:51.184493065 CEST	192.168.2.22	8.8.8.8	0x41f0	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:14:51.201164007 CEST	192.168.2.22	8.8.8.8	0x151e	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:14:51.218947887 CEST	192.168.2.22	8.8.8.8	0xdf29	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:14:51.243277073 CEST	192.168.2.22	8.8.8.8	0xcb96	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:14:51.263495922 CEST	192.168.2.22	8.8.8.8	0x4b2f	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:14:51.283113956 CEST	192.168.2.22	8.8.8.8	0x2c61	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:14:51.299215078 CEST	192.168.2.22	8.8.8.8	0xd0c1	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:14:51.373953104 CEST	192.168.2.22	8.8.8.8	0x4a9b	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:14:51.401061058 CEST	192.168.2.22	8.8.8.8	0xa756	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:14:51.412734032 CEST	192.168.2.22	8.8.8.8	0x2ff7	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:14:51.424150944 CEST	192.168.2.22	8.8.8.8	0xe8f5	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:14:51.439810991 CEST	192.168.2.22	8.8.8.8	0xffbc	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:14:51.457745075 CEST	192.168.2.22	8.8.8.8	0x2ae7	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:14:51.469311953 CEST	192.168.2.22	8.8.8.8	0x2218	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:14:51.480731964 CEST	192.168.2.22	8.8.8.8	0x2822	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:14:51.492888927 CEST	192.168.2.22	8.8.8.8	0x6b15	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:14:51.507410049 CEST	192.168.2.22	8.8.8.8	0xaa81	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:14:51.521471024 CEST	192.168.2.22	8.8.8.8	0x6417	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:14:51.534764051 CEST	192.168.2.22	8.8.8.8	0x6ff7	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:14:51.806535006 CEST	192.168.2.22	8.8.8.8	0xd036	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:14:51.891124010 CEST	192.168.2.22	8.8.8.8	0x9a60	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:14:51.904480934 CEST	192.168.2.22	8.8.8.8	0xaae	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:14:51.917319059 CEST	192.168.2.22	8.8.8.8	0xdbed	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:14:51.930891037 CEST	192.168.2.22	8.8.8.8	0xc708	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:14:51.943767071 CEST	192.168.2.22	8.8.8.8	0x33f3	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:14:51.957823038 CEST	192.168.2.22	8.8.8.8	0xb904	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:14:51.970742941 CEST	192.168.2.22	8.8.8.8	0x806d	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:14:51.983649969 CEST	192.168.2.22	8.8.8.8	0xe7d3	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:14:51.996706009 CEST	192.168.2.22	8.8.8.8	0x62f8	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:14:52.038180113 CEST	192.168.2.22	8.8.8.8	0x1620	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:14:52.051050901 CEST	192.168.2.22	8.8.8.8	0x4fc	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:14:52.062951088 CEST	192.168.2.22	8.8.8.8	0xf67f	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:14:52.076457024 CEST	192.168.2.22	8.8.8.8	0xc1b8	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:14:52.091303110 CEST	192.168.2.22	8.8.8.8	0x212a	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:14:52.104960918 CEST	192.168.2.22	8.8.8.8	0x8d8	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:14:52.118385077 CEST	192.168.2.22	8.8.8.8	0x6dbf	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:14:52.130963087 CEST	192.168.2.22	8.8.8.8	0x252c	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:14:52.146899939 CEST	192.168.2.22	8.8.8.8	0x7762	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:14:52.171355009 CEST	192.168.2.22	8.8.8.8	0xee9c	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:14:52.187881947 CEST	192.168.2.22	8.8.8.8	0xc2a7	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:14:52.203363895 CEST	192.168.2.22	8.8.8.8	0xd7d0	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:14:52.218967915 CEST	192.168.2.22	8.8.8.8	0x2403	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:14:52.233072996 CEST	192.168.2.22	8.8.8.8	0x63e9	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:14:52.246865034 CEST	192.168.2.22	8.8.8.8	0x6c67	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:14:52.259521008 CEST	192.168.2.22	8.8.8.8	0x576d	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:14:52.271971941 CEST	192.168.2.22	8.8.8.8	0x2490	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:14:52.293926954 CEST	192.168.2.22	8.8.8.8	0xee87	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:14:52.308378935 CEST	192.168.2.22	8.8.8.8	0x91ca	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:14:52.320174932 CEST	192.168.2.22	8.8.8.8	0xfcac	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:14:52.331758976 CEST	192.168.2.22	8.8.8.8	0xe67b	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:14:52.342056990 CEST	192.168.2.22	8.8.8.8	0xfe68	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:14:52.401840925 CEST	192.168.2.22	8.8.8.8	0x5543	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:14:52.414469004 CEST	192.168.2.22	8.8.8.8	0x41bc	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:14:52.426867962 CEST	192.168.2.22	8.8.8.8	0x4753	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:14:52.438134909 CEST	192.168.2.22	8.8.8.8	0xbb	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:14:52.449017048 CEST	192.168.2.22	8.8.8.8	0xdcf8	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:14:52.458901882 CEST	192.168.2.22	8.8.8.8	0x5a0e	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:14:52.470462084 CEST	192.168.2.22	8.8.8.8	0x55cf	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:14:52.481827974 CEST	192.168.2.22	8.8.8.8	0xe1d9	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:14:52.492119074 CEST	192.168.2.22	8.8.8.8	0xe544	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:14:52.502849102 CEST	192.168.2.22	8.8.8.8	0x33f6	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:14:52.513169050 CEST	192.168.2.22	8.8.8.8	0x79ca	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:14:52.525810003 CEST	192.168.2.22	8.8.8.8	0x3aef	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:14:52.537307978 CEST	192.168.2.22	8.8.8.8	0x655d	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:14:52.547539949 CEST	192.168.2.22	8.8.8.8	0x827b	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:14:52.558964968 CEST	192.168.2.22	8.8.8.8	0xc62e	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:14:52.570185900 CEST	192.168.2.22	8.8.8.8	0xd14d	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:14:52.581350088 CEST	192.168.2.22	8.8.8.8	0x3b6e	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:14:52.591708899 CEST	192.168.2.22	8.8.8.8	0xfe03	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:14:52.602628946 CEST	192.168.2.22	8.8.8.8	0xca0d	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:14:52.614291906 CEST	192.168.2.22	8.8.8.8	0x6d9c	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:14:52.625586987 CEST	192.168.2.22	8.8.8.8	0x512a	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:14:52.635674000 CEST	192.168.2.22	8.8.8.8	0xaa36	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:14:52.675026894 CEST	192.168.2.22	8.8.8.8	0x5c98	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:14:52.732290030 CEST	192.168.2.22	8.8.8.8	0x4b98	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:14:52.755172014 CEST	192.168.2.22	8.8.8.8	0x4c7b	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:14:52.775356054 CEST	192.168.2.22	8.8.8.8	0x5172	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:14:52.800692081 CEST	192.168.2.22	8.8.8.8	0x654d	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:14:52.844980955 CEST	192.168.2.22	8.8.8.8	0x6093	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:14:53.248162985 CEST	192.168.2.22	8.8.8.8	0x187f	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:14:53.519541025 CEST	192.168.2.22	8.8.8.8	0xb58a	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:14:54.035717964 CEST	192.168.2.22	8.8.8.8	0x4d3	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:14:54.190107107 CEST	192.168.2.22	8.8.8.8	0x53ba	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:14:54.205144882 CEST	192.168.2.22	8.8.8.8	0x9cca	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:14:54.219913960 CEST	192.168.2.22	8.8.8.8	0x906e	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:14:54.238429070 CEST	192.168.2.22	8.8.8.8	0xedfc	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:14:54.251524925 CEST	192.168.2.22	8.8.8.8	0x3055	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:14:54.267472982 CEST	192.168.2.22	8.8.8.8	0x1aa9	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:14:54.294792891 CEST	192.168.2.22	8.8.8.8	0x5991	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:14:54.309062004 CEST	192.168.2.22	8.8.8.8	0xcf19	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:14:54.322612047 CEST	192.168.2.22	8.8.8.8	0xf52e	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:14:54.336695910 CEST	192.168.2.22	8.8.8.8	0x79ec	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:14:54.354479074 CEST	192.168.2.22	8.8.8.8	0x4cbf	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:14:54.381345034 CEST	192.168.2.22	8.8.8.8	0x1e7f	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:14:54.395064116 CEST	192.168.2.22	8.8.8.8	0xa655	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:14:54.410670042 CEST	192.168.2.22	8.8.8.8	0xc2cc	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:14:54.487721920 CEST	192.168.2.22	8.8.8.8	0x440c	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:14:54.535413980 CEST	192.168.2.22	8.8.8.8	0x7b5	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:14:54.555083036 CEST	192.168.2.22	8.8.8.8	0x8a96	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:14:54.586147070 CEST	192.168.2.22	8.8.8.8	0x9107	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:14:54.602168083 CEST	192.168.2.22	8.8.8.8	0x3227	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:14:54.618495941 CEST	192.168.2.22	8.8.8.8	0xe3fa	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:14:54.636167049 CEST	192.168.2.22	8.8.8.8	0x1c9d	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:14:54.891172886 CEST	192.168.2.22	8.8.8.8	0x84a4	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:14:54.903269053 CEST	192.168.2.22	8.8.8.8	0x2679	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:14:54.917392969 CEST	192.168.2.22	8.8.8.8	0x8899	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:14:54.928843021 CEST	192.168.2.22	8.8.8.8	0x1818	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:14:54.939734936 CEST	192.168.2.22	8.8.8.8	0x2405	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:14:54.951479912 CEST	192.168.2.22	8.8.8.8	0x7a31	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:14:54.963345051 CEST	192.168.2.22	8.8.8.8	0x3f7a	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:14:54.975761890 CEST	192.168.2.22	8.8.8.8	0x2b66	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:14:54.987392902 CEST	192.168.2.22	8.8.8.8	0x7fca	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:14:55.003097057 CEST	192.168.2.22	8.8.8.8	0xe418	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:14:55.017254114 CEST	192.168.2.22	8.8.8.8	0x7bee	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:14:55.029540062 CEST	192.168.2.22	8.8.8.8	0xeac2	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:14:55.040507078 CEST	192.168.2.22	8.8.8.8	0x6141	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:14:55.052943945 CEST	192.168.2.22	8.8.8.8	0x6ac9	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:14:55.065175056 CEST	192.168.2.22	8.8.8.8	0x813c	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:14:55.078200102 CEST	192.168.2.22	8.8.8.8	0x2642	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:14:55.090605021 CEST	192.168.2.22	8.8.8.8	0x1030	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:14:55.104505062 CEST	192.168.2.22	8.8.8.8	0x6b38	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:14:55.117537022 CEST	192.168.2.22	8.8.8.8	0xaff6	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:14:55.215931892 CEST	192.168.2.22	8.8.8.8	0x8bb2	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:14:55.228368044 CEST	192.168.2.22	8.8.8.8	0x1d6d	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:14:55.239527941 CEST	192.168.2.22	8.8.8.8	0x1ba6	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:14:55.251703024 CEST	192.168.2.22	8.8.8.8	0xc284	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:14:55.264621019 CEST	192.168.2.22	8.8.8.8	0xd16	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:14:55.278805017 CEST	192.168.2.22	8.8.8.8	0x79e4	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:14:55.291639090 CEST	192.168.2.22	8.8.8.8	0x2476	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:14:55.305491924 CEST	192.168.2.22	8.8.8.8	0xce6f	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:14:55.317362070 CEST	192.168.2.22	8.8.8.8	0x19e0	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:14:55.328736067 CEST	192.168.2.22	8.8.8.8	0x9b9f	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:14:55.342024088 CEST	192.168.2.22	8.8.8.8	0x676b	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:14:55.355844021 CEST	192.168.2.22	8.8.8.8	0x9564	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:14:55.367794037 CEST	192.168.2.22	8.8.8.8	0x363b	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:14:55.379251003 CEST	192.168.2.22	8.8.8.8	0x932	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:14:55.390518904 CEST	192.168.2.22	8.8.8.8	0xc8c3	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:14:55.404047012 CEST	192.168.2.22	8.8.8.8	0x66b2	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:14:55.416580915 CEST	192.168.2.22	8.8.8.8	0x29df	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:14:55.429284096 CEST	192.168.2.22	8.8.8.8	0x9ca	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:14:55.438946009 CEST	192.168.2.22	8.8.8.8	0x210d	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:14:55.451646090 CEST	192.168.2.22	8.8.8.8	0xc86b	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:14:55.503592014 CEST	192.168.2.22	8.8.8.8	0x5137	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:14:55.516654968 CEST	192.168.2.22	8.8.8.8	0x2c90	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:14:55.530612946 CEST	192.168.2.22	8.8.8.8	0x4641	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:14:55.559468031 CEST	192.168.2.22	8.8.8.8	0x9279	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:14:55.571908951 CEST	192.168.2.22	8.8.8.8	0x54a	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:14:55.585254908 CEST	192.168.2.22	8.8.8.8	0x372b	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:14:55.596339941 CEST	192.168.2.22	8.8.8.8	0xd676	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:14:55.608378887 CEST	192.168.2.22	8.8.8.8	0x20b	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:14:55.622059107 CEST	192.168.2.22	8.8.8.8	0x1340	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:14:55.633361101 CEST	192.168.2.22	8.8.8.8	0xcd16	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:14:55.644103050 CEST	192.168.2.22	8.8.8.8	0x5b26	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:14:55.655425072 CEST	192.168.2.22	8.8.8.8	0x30d6	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:14:55.668040991 CEST	192.168.2.22	8.8.8.8	0xaaa	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:14:55.680047989 CEST	192.168.2.22	8.8.8.8	0x2b26	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:14:55.693958998 CEST	192.168.2.22	8.8.8.8	0x611e	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:14:55.706751108 CEST	192.168.2.22	8.8.8.8	0x81ab	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:14:55.718406916 CEST	192.168.2.22	8.8.8.8	0xb27	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:14:55.731717110 CEST	192.168.2.22	8.8.8.8	0xdff6	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:14:55.745929956 CEST	192.168.2.22	8.8.8.8	0xded9	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:14:55.757620096 CEST	192.168.2.22	8.8.8.8	0x661	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:14:55.770478964 CEST	192.168.2.22	8.8.8.8	0xf6a	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:14:55.784921885 CEST	192.168.2.22	8.8.8.8	0x7fd0	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:14:55.799377918 CEST	192.168.2.22	8.8.8.8	0x6e0d	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:14:55.861053944 CEST	192.168.2.22	8.8.8.8	0xd2	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:14:55.873692989 CEST	192.168.2.22	8.8.8.8	0x5855	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:14:55.885946035 CEST	192.168.2.22	8.8.8.8	0x14cf	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:14:55.898611069 CEST	192.168.2.22	8.8.8.8	0x2a60	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:14:55.909034967 CEST	192.168.2.22	8.8.8.8	0x449	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:14:55.921420097 CEST	192.168.2.22	8.8.8.8	0x853e	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:14:55.934665918 CEST	192.168.2.22	8.8.8.8	0xc6c6	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:14:55.946269989 CEST	192.168.2.22	8.8.8.8	0xe0ef	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:14:55.957731009 CEST	192.168.2.22	8.8.8.8	0x2a8a	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:14:55.977811098 CEST	192.168.2.22	8.8.8.8	0xef87	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:14:55.996033907 CEST	192.168.2.22	8.8.8.8	0x8be0	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:14:56.008260965 CEST	192.168.2.22	8.8.8.8	0xedf7	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:14:56.019247055 CEST	192.168.2.22	8.8.8.8	0xbd56	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:14:56.032927990 CEST	192.168.2.22	8.8.8.8	0x9eb7	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:14:56.045233011 CEST	192.168.2.22	8.8.8.8	0x47a3	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:14:56.056876898 CEST	192.168.2.22	8.8.8.8	0x8419	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:14:56.071109056 CEST	192.168.2.22	8.8.8.8	0xb4b6	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:14:56.081456900 CEST	192.168.2.22	8.8.8.8	0x4c9c	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:14:56.093386889 CEST	192.168.2.22	8.8.8.8	0x7632	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:14:56.107116938 CEST	192.168.2.22	8.8.8.8	0x1c10	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:14:56.118113041 CEST	192.168.2.22	8.8.8.8	0x7964	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:14:56.128950119 CEST	192.168.2.22	8.8.8.8	0xa74e	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:14:56.140963078 CEST	192.168.2.22	8.8.8.8	0x109b	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:14:56.215325117 CEST	192.168.2.22	8.8.8.8	0xa7b4	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:14:56.255429983 CEST	192.168.2.22	8.8.8.8	0x5da8	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:14:56.273228884 CEST	192.168.2.22	8.8.8.8	0x63f0	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:14:56.293282986 CEST	192.168.2.22	8.8.8.8	0x9f4e	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:14:56.306147099 CEST	192.168.2.22	8.8.8.8	0x8b1a	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:14:56.325150013 CEST	192.168.2.22	8.8.8.8	0x9dec	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:14:56.353423119 CEST	192.168.2.22	8.8.8.8	0x1b87	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:14:56.366569042 CEST	192.168.2.22	8.8.8.8	0xc17e	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:14:56.762046099 CEST	192.168.2.22	8.8.8.8	0x8fd1	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:14:56.829883099 CEST	192.168.2.22	8.8.8.8	0x7d19	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:14:58.051855087 CEST	192.168.2.22	8.8.8.8	0x7816	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:14:58.065272093 CEST	192.168.2.22	8.8.8.8	0xd26f	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:14:58.078739882 CEST	192.168.2.22	8.8.8.8	0xeb12	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:14:58.093755007 CEST	192.168.2.22	8.8.8.8	0x30ad	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:14:58.105165005 CEST	192.168.2.22	8.8.8.8	0x635c	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:14:58.119847059 CEST	192.168.2.22	8.8.8.8	0x7208	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:14:58.133400917 CEST	192.168.2.22	8.8.8.8	0xbfec	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:14:58.146825075 CEST	192.168.2.22	8.8.8.8	0x9f59	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:14:58.165152073 CEST	192.168.2.22	8.8.8.8	0x663c	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:14:58.177629948 CEST	192.168.2.22	8.8.8.8	0xb306	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:14:58.189769030 CEST	192.168.2.22	8.8.8.8	0x8f31	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:14:58.203311920 CEST	192.168.2.22	8.8.8.8	0x8327	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:14:58.215195894 CEST	192.168.2.22	8.8.8.8	0x4e23	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:14:58.228286028 CEST	192.168.2.22	8.8.8.8	0x9c46	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:14:58.239872932 CEST	192.168.2.22	8.8.8.8	0xbedf	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:14:58.253412962 CEST	192.168.2.22	8.8.8.8	0xe228	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:14:58.264998913 CEST	192.168.2.22	8.8.8.8	0xd912	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:14:58.277203083 CEST	192.168.2.22	8.8.8.8	0xaf48	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:14:58.289798975 CEST	192.168.2.22	8.8.8.8	0xd719	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:14:58.304424047 CEST	192.168.2.22	8.8.8.8	0xd5d1	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:14:58.318504095 CEST	192.168.2.22	8.8.8.8	0xe2bd	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:14:58.331470013 CEST	192.168.2.22	8.8.8.8	0x3aab	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:14:58.396095991 CEST	192.168.2.22	8.8.8.8	0x3a41	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:14:58.409993887 CEST	192.168.2.22	8.8.8.8	0x8212	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:14:58.424412012 CEST	192.168.2.22	8.8.8.8	0x84e9	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:14:58.438205957 CEST	192.168.2.22	8.8.8.8	0x52b2	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:14:58.451781034 CEST	192.168.2.22	8.8.8.8	0x9d24	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:14:58.465061903 CEST	192.168.2.22	8.8.8.8	0xeb52	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:14:58.478305101 CEST	192.168.2.22	8.8.8.8	0xcef3	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:14:58.492815018 CEST	192.168.2.22	8.8.8.8	0x2efe	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:14:58.504900932 CEST	192.168.2.22	8.8.8.8	0x6311	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:14:58.520385981 CEST	192.168.2.22	8.8.8.8	0xe729	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:14:58.532409906 CEST	192.168.2.22	8.8.8.8	0xb201	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:14:58.548122883 CEST	192.168.2.22	8.8.8.8	0x8fe3	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:14:58.559860945 CEST	192.168.2.22	8.8.8.8	0xf232	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:14:58.572451115 CEST	192.168.2.22	8.8.8.8	0xc6d2	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:14:58.585284948 CEST	192.168.2.22	8.8.8.8	0x113a	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:14:58.598140955 CEST	192.168.2.22	8.8.8.8	0x6155	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:14:58.610675097 CEST	192.168.2.22	8.8.8.8	0x9e18	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:14:58.623377085 CEST	192.168.2.22	8.8.8.8	0xcaf2	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:14:58.636311054 CEST	192.168.2.22	8.8.8.8	0xa343	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:14:58.649813890 CEST	192.168.2.22	8.8.8.8	0x57ed	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:14:58.661528111 CEST	192.168.2.22	8.8.8.8	0xc2c8	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:14:58.675328016 CEST	192.168.2.22	8.8.8.8	0xa022	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:14:58.730119944 CEST	192.168.2.22	8.8.8.8	0x9c2b	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:14:58.743088961 CEST	192.168.2.22	8.8.8.8	0xf315	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:14:58.755001068 CEST	192.168.2.22	8.8.8.8	0x3ab	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:14:58.767832041 CEST	192.168.2.22	8.8.8.8	0xefd0	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:14:58.779787064 CEST	192.168.2.22	8.8.8.8	0x7a3f	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:14:58.801160097 CEST	192.168.2.22	8.8.8.8	0x4cf3	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:14:58.821361065 CEST	192.168.2.22	8.8.8.8	0x199d	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:14:58.836252928 CEST	192.168.2.22	8.8.8.8	0xdade	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:14:58.849282980 CEST	192.168.2.22	8.8.8.8	0x527b	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:14:58.862679005 CEST	192.168.2.22	8.8.8.8	0xf9b9	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:14:58.874998093 CEST	192.168.2.22	8.8.8.8	0x6fb1	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:14:58.887285948 CEST	192.168.2.22	8.8.8.8	0xbcca	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:14:58.899624109 CEST	192.168.2.22	8.8.8.8	0x28e6	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:14:58.911802053 CEST	192.168.2.22	8.8.8.8	0x4cf	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:14:58.924267054 CEST	192.168.2.22	8.8.8.8	0x5cf	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:14:58.936589956 CEST	192.168.2.22	8.8.8.8	0x341	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:14:58.949143887 CEST	192.168.2.22	8.8.8.8	0x4db9	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:14:58.962822914 CEST	192.168.2.22	8.8.8.8	0xea53	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:14:58.974858999 CEST	192.168.2.22	8.8.8.8	0xd780	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:14:58.987509966 CEST	192.168.2.22	8.8.8.8	0xfefe	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:14:59.000437975 CEST	192.168.2.22	8.8.8.8	0xb326	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:14:59.014704943 CEST	192.168.2.22	8.8.8.8	0x89c	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:14:59.079137087 CEST	192.168.2.22	8.8.8.8	0x2fff	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:14:59.093888044 CEST	192.168.2.22	8.8.8.8	0x8e6	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:14:59.107455015 CEST	192.168.2.22	8.8.8.8	0xf30e	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:14:59.120270967 CEST	192.168.2.22	8.8.8.8	0x52c7	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:14:59.132383108 CEST	192.168.2.22	8.8.8.8	0x452c	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:14:59.146661043 CEST	192.168.2.22	8.8.8.8	0x9c9b	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:14:59.158776045 CEST	192.168.2.22	8.8.8.8	0x8bcd	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:14:59.171330929 CEST	192.168.2.22	8.8.8.8	0x4eb6	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:14:59.184350967 CEST	192.168.2.22	8.8.8.8	0x1385	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:14:59.196494102 CEST	192.168.2.22	8.8.8.8	0x914d	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:14:59.208525896 CEST	192.168.2.22	8.8.8.8	0x772f	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:14:59.221829891 CEST	192.168.2.22	8.8.8.8	0xb3f0	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:14:59.235970020 CEST	192.168.2.22	8.8.8.8	0x176	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:14:59.250258923 CEST	192.168.2.22	8.8.8.8	0xe749	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:14:59.263330936 CEST	192.168.2.22	8.8.8.8	0x91c6	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:14:59.276067019 CEST	192.168.2.22	8.8.8.8	0xb3d5	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:14:59.289382935 CEST	192.168.2.22	8.8.8.8	0x364e	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:14:59.302344084 CEST	192.168.2.22	8.8.8.8	0xf01d	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:14:59.313471079 CEST	192.168.2.22	8.8.8.8	0x4015	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:14:59.325809956 CEST	192.168.2.22	8.8.8.8	0x2c05	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:14:59.337425947 CEST	192.168.2.22	8.8.8.8	0x84d2	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:14:59.349201918 CEST	192.168.2.22	8.8.8.8	0xc8b0	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:14:59.360234976 CEST	192.168.2.22	8.8.8.8	0x4ab3	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:14:59.429224968 CEST	192.168.2.22	8.8.8.8	0x3fab	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:14:59.667819023 CEST	192.168.2.22	8.8.8.8	0x66e9	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:14:59.680951118 CEST	192.168.2.22	8.8.8.8	0xd51f	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:14:59.692234993 CEST	192.168.2.22	8.8.8.8	0x29cb	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:14:59.703985929 CEST	192.168.2.22	8.8.8.8	0x60eb	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:14:59.767047882 CEST	192.168.2.22	8.8.8.8	0xed46	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:14:59.780255079 CEST	192.168.2.22	8.8.8.8	0xc156	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:14:59.792270899 CEST	192.168.2.22	8.8.8.8	0x6f2c	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:14:59.804949045 CEST	192.168.2.22	8.8.8.8	0x402f	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:14:59.818043947 CEST	192.168.2.22	8.8.8.8	0xf19	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:14:59.830874920 CEST	192.168.2.22	8.8.8.8	0x81ec	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:14:59.865729094 CEST	192.168.2.22	8.8.8.8	0x4cc4	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:14:59.877049923 CEST	192.168.2.22	8.8.8.8	0x36cd	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:14:59.889342070 CEST	192.168.2.22	8.8.8.8	0x2aa1	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:14:59.902514935 CEST	192.168.2.22	8.8.8.8	0x9734	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:14:59.913748026 CEST	192.168.2.22	8.8.8.8	0x3c36	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:14:59.926470995 CEST	192.168.2.22	8.8.8.8	0x7656	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:14:59.938402891 CEST	192.168.2.22	8.8.8.8	0xd0b0	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:14:59.948806047 CEST	192.168.2.22	8.8.8.8	0xeedd	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:14:59.961216927 CEST	192.168.2.22	8.8.8.8	0x1f9a	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:14:59.974339008 CEST	192.168.2.22	8.8.8.8	0xa52e	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:14:59.986300945 CEST	192.168.2.22	8.8.8.8	0x1207	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:00.026448965 CEST	192.168.2.22	8.8.8.8	0x9113	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:00.045454979 CEST	192.168.2.22	8.8.8.8	0x13a3	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:00.124972105 CEST	192.168.2.22	8.8.8.8	0xe8be	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:00.145505905 CEST	192.168.2.22	8.8.8.8	0xf2cf	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:00.168211937 CEST	192.168.2.22	8.8.8.8	0xa40f	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:00.188213110 CEST	192.168.2.22	8.8.8.8	0x595c	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:00.477607012 CEST	192.168.2.22	8.8.8.8	0xb8be	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:00.496414900 CEST	192.168.2.22	8.8.8.8	0x56f1	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:00.856051922 CEST	192.168.2.22	8.8.8.8	0x6ae5	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:01.408561945 CEST	192.168.2.22	8.8.8.8	0x33eb	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:01.422049046 CEST	192.168.2.22	8.8.8.8	0x7df0	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:01.434621096 CEST	192.168.2.22	8.8.8.8	0xfa00	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:01.450028896 CEST	192.168.2.22	8.8.8.8	0xf28	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:01.462208033 CEST	192.168.2.22	8.8.8.8	0xff87	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:01.483674049 CEST	192.168.2.22	8.8.8.8	0x6c80	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:01.514328957 CEST	192.168.2.22	8.8.8.8	0x6b4	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:01.528649092 CEST	192.168.2.22	8.8.8.8	0xa3a4	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:01.540725946 CEST	192.168.2.22	8.8.8.8	0xd508	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:01.553455114 CEST	192.168.2.22	8.8.8.8	0xb7d2	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:01.565431118 CEST	192.168.2.22	8.8.8.8	0x6eba	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:01.577948093 CEST	192.168.2.22	8.8.8.8	0xeb2e	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:01.588923931 CEST	192.168.2.22	8.8.8.8	0x9e82	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:01.601569891 CEST	192.168.2.22	8.8.8.8	0x3dfa	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:01.613200903 CEST	192.168.2.22	8.8.8.8	0x4420	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:01.625818968 CEST	192.168.2.22	8.8.8.8	0x5efb	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:01.637490988 CEST	192.168.2.22	8.8.8.8	0xec3b	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:01.650283098 CEST	192.168.2.22	8.8.8.8	0xf12d	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:01.661772013 CEST	192.168.2.22	8.8.8.8	0x6451	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:01.674891949 CEST	192.168.2.22	8.8.8.8	0x951b	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:01.687513113 CEST	192.168.2.22	8.8.8.8	0x69d2	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:01.699826002 CEST	192.168.2.22	8.8.8.8	0x4828	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:01.763092041 CEST	192.168.2.22	8.8.8.8	0xc98c	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:01.776024103 CEST	192.168.2.22	8.8.8.8	0x24e7	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:01.787782907 CEST	192.168.2.22	8.8.8.8	0x2d0b	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:01.801721096 CEST	192.168.2.22	8.8.8.8	0x3bdb	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:01.814054966 CEST	192.168.2.22	8.8.8.8	0xd7b4	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:01.826925039 CEST	192.168.2.22	8.8.8.8	0xeacb	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:01.839083910 CEST	192.168.2.22	8.8.8.8	0xd2b4	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:01.851269007 CEST	192.168.2.22	8.8.8.8	0x99ae	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:01.864754915 CEST	192.168.2.22	8.8.8.8	0x7a1e	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:01.879415035 CEST	192.168.2.22	8.8.8.8	0xc7a4	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:01.893728971 CEST	192.168.2.22	8.8.8.8	0xd70	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:01.906596899 CEST	192.168.2.22	8.8.8.8	0xb648	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:01.919611931 CEST	192.168.2.22	8.8.8.8	0x6844	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:01.932163000 CEST	192.168.2.22	8.8.8.8	0x2ba3	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:01.944552898 CEST	192.168.2.22	8.8.8.8	0xf68	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:01.957783937 CEST	192.168.2.22	8.8.8.8	0xac94	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:01.971101046 CEST	192.168.2.22	8.8.8.8	0xa78d	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:01.985304117 CEST	192.168.2.22	8.8.8.8	0x1866	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:01.998708963 CEST	192.168.2.22	8.8.8.8	0xd4a1	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:02.015583038 CEST	192.168.2.22	8.8.8.8	0x6e2a	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:02.027316093 CEST	192.168.2.22	8.8.8.8	0x2bbc	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:02.039789915 CEST	192.168.2.22	8.8.8.8	0x32db	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:02.119932890 CEST	192.168.2.22	8.8.8.8	0xcb2e	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:02.133040905 CEST	192.168.2.22	8.8.8.8	0x3f09	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:02.145576954 CEST	192.168.2.22	8.8.8.8	0x154d	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:02.158370018 CEST	192.168.2.22	8.8.8.8	0xeeab	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:02.170260906 CEST	192.168.2.22	8.8.8.8	0xf9a3	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:02.183166981 CEST	192.168.2.22	8.8.8.8	0xcc29	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:02.195988894 CEST	192.168.2.22	8.8.8.8	0xa05b	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:02.208947897 CEST	192.168.2.22	8.8.8.8	0xa8ed	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:02.222502947 CEST	192.168.2.22	8.8.8.8	0x429b	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:02.235508919 CEST	192.168.2.22	8.8.8.8	0x8ed1	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:02.247484922 CEST	192.168.2.22	8.8.8.8	0x26b8	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:02.260659933 CEST	192.168.2.22	8.8.8.8	0x9f11	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:02.273431063 CEST	192.168.2.22	8.8.8.8	0x8d34	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:02.285933971 CEST	192.168.2.22	8.8.8.8	0x17d8	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:02.299751997 CEST	192.168.2.22	8.8.8.8	0x89b	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:02.313262939 CEST	192.168.2.22	8.8.8.8	0xd220	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:02.326944113 CEST	192.168.2.22	8.8.8.8	0x478e	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:02.340234995 CEST	192.168.2.22	8.8.8.8	0x3fe7	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:02.352792978 CEST	192.168.2.22	8.8.8.8	0x7ca4	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:02.364746094 CEST	192.168.2.22	8.8.8.8	0x161e	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:02.375555038 CEST	192.168.2.22	8.8.8.8	0xca89	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:02.387629032 CEST	192.168.2.22	8.8.8.8	0xcbf5	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:02.447051048 CEST	192.168.2.22	8.8.8.8	0xa088	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:02.458369970 CEST	192.168.2.22	8.8.8.8	0x5815	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:02.470351934 CEST	192.168.2.22	8.8.8.8	0x47b7	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:02.482072115 CEST	192.168.2.22	8.8.8.8	0xe925	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:02.493908882 CEST	192.168.2.22	8.8.8.8	0x9f28	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:02.508800983 CEST	192.168.2.22	8.8.8.8	0xca9c	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:02.521367073 CEST	192.168.2.22	8.8.8.8	0x5bc5	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:02.533031940 CEST	192.168.2.22	8.8.8.8	0x1d73	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:02.545006037 CEST	192.168.2.22	8.8.8.8	0x92bd	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:02.557452917 CEST	192.168.2.22	8.8.8.8	0x7a72	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:02.568140030 CEST	192.168.2.22	8.8.8.8	0x848	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:02.579515934 CEST	192.168.2.22	8.8.8.8	0x137b	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:02.591001987 CEST	192.168.2.22	8.8.8.8	0x28c4	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:02.603132963 CEST	192.168.2.22	8.8.8.8	0xc836	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:02.617175102 CEST	192.168.2.22	8.8.8.8	0x53af	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:02.628613949 CEST	192.168.2.22	8.8.8.8	0x1f00	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:02.640950918 CEST	192.168.2.22	8.8.8.8	0x1123	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:02.654122114 CEST	192.168.2.22	8.8.8.8	0x9e96	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:02.666217089 CEST	192.168.2.22	8.8.8.8	0x9dda	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:02.679852962 CEST	192.168.2.22	8.8.8.8	0x2483	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:02.690602064 CEST	192.168.2.22	8.8.8.8	0x522d	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:02.702661991 CEST	192.168.2.22	8.8.8.8	0x2b2b	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:02.715720892 CEST	192.168.2.22	8.8.8.8	0x88e9	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:02.734126091 CEST	192.168.2.22	8.8.8.8	0x5478	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:02.783924103 CEST	192.168.2.22	8.8.8.8	0xdff8	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:02.796257019 CEST	192.168.2.22	8.8.8.8	0xec4e	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:02.808279037 CEST	192.168.2.22	8.8.8.8	0xa1f1	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:02.820585012 CEST	192.168.2.22	8.8.8.8	0x4513	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:02.831995010 CEST	192.168.2.22	8.8.8.8	0xff53	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:02.845483065 CEST	192.168.2.22	8.8.8.8	0x78a7	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:02.857050896 CEST	192.168.2.22	8.8.8.8	0x5349	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:02.869765043 CEST	192.168.2.22	8.8.8.8	0xc616	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:02.881850958 CEST	192.168.2.22	8.8.8.8	0x66eb	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:02.899214029 CEST	192.168.2.22	8.8.8.8	0xf30a	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:02.914613008 CEST	192.168.2.22	8.8.8.8	0x3483	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:02.928144932 CEST	192.168.2.22	8.8.8.8	0x4b5c	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:02.940129042 CEST	192.168.2.22	8.8.8.8	0x7e36	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:02.950895071 CEST	192.168.2.22	8.8.8.8	0x6a1c	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:02.963392019 CEST	192.168.2.22	8.8.8.8	0x3b2a	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:02.974344015 CEST	192.168.2.22	8.8.8.8	0xd398	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:02.985687017 CEST	192.168.2.22	8.8.8.8	0x2f1e	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:02.999628067 CEST	192.168.2.22	8.8.8.8	0x4e1a	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:03.011946917 CEST	192.168.2.22	8.8.8.8	0xdb45	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:03.024264097 CEST	192.168.2.22	8.8.8.8	0x64dc	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:03.035329103 CEST	192.168.2.22	8.8.8.8	0xd0ab	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:03.047393084 CEST	192.168.2.22	8.8.8.8	0x8390	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:03.058731079 CEST	192.168.2.22	8.8.8.8	0xdace	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:03.068980932 CEST	192.168.2.22	8.8.8.8	0x3cd2	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:03.156652927 CEST	192.168.2.22	8.8.8.8	0x6823	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:03.170572996 CEST	192.168.2.22	8.8.8.8	0x7409	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:03.182133913 CEST	192.168.2.22	8.8.8.8	0x6070	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:03.193181992 CEST	192.168.2.22	8.8.8.8	0x2cee	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:03.205835104 CEST	192.168.2.22	8.8.8.8	0x8ff7	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:03.222883940 CEST	192.168.2.22	8.8.8.8	0x2ed8	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:03.242887974 CEST	192.168.2.22	8.8.8.8	0xe45	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:03.254580021 CEST	192.168.2.22	8.8.8.8	0x149b	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:03.267920017 CEST	192.168.2.22	8.8.8.8	0xf0ac	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:03.281450987 CEST	192.168.2.22	8.8.8.8	0xe142	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:03.292532921 CEST	192.168.2.22	8.8.8.8	0x6f40	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:03.305787086 CEST	192.168.2.22	8.8.8.8	0xbdce	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:03.316049099 CEST	192.168.2.22	8.8.8.8	0xb2fa	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:03.327928066 CEST	192.168.2.22	8.8.8.8	0x22e4	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:03.339792967 CEST	192.168.2.22	8.8.8.8	0xfc18	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:03.353507996 CEST	192.168.2.22	8.8.8.8	0xd77c	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:03.365777016 CEST	192.168.2.22	8.8.8.8	0x5542	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:03.410931110 CEST	192.168.2.22	8.8.8.8	0x27ae	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:03.469130993 CEST	192.168.2.22	8.8.8.8	0x871a	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:03.513505936 CEST	192.168.2.22	8.8.8.8	0x5b46	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:03.550810099 CEST	192.168.2.22	8.8.8.8	0x48ab	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:03.591662884 CEST	192.168.2.22	8.8.8.8	0x2041	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:03.880561113 CEST	192.168.2.22	8.8.8.8	0x4de8	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:04.570255041 CEST	192.168.2.22	8.8.8.8	0x463e	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:04.947887897 CEST	192.168.2.22	8.8.8.8	0x613a	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:05.012901068 CEST	192.168.2.22	8.8.8.8	0xd011	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:05.029776096 CEST	192.168.2.22	8.8.8.8	0xc51c	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:05.042336941 CEST	192.168.2.22	8.8.8.8	0x6bb9	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:05.053860903 CEST	192.168.2.22	8.8.8.8	0xcb26	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:05.066982031 CEST	192.168.2.22	8.8.8.8	0xf6f8	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:05.078526974 CEST	192.168.2.22	8.8.8.8	0xafc3	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:05.091464996 CEST	192.168.2.22	8.8.8.8	0xc754	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:05.103894949 CEST	192.168.2.22	8.8.8.8	0xa443	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:05.116688967 CEST	192.168.2.22	8.8.8.8	0x1ec4	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:05.128746986 CEST	192.168.2.22	8.8.8.8	0x5f72	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:05.741153002 CEST	192.168.2.22	8.8.8.8	0x21ca	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:05.754861116 CEST	192.168.2.22	8.8.8.8	0x2ab1	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:05.767482996 CEST	192.168.2.22	8.8.8.8	0x9c0c	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:05.779241085 CEST	192.168.2.22	8.8.8.8	0x5a46	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:05.792165995 CEST	192.168.2.22	8.8.8.8	0x71c	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:05.803668022 CEST	192.168.2.22	8.8.8.8	0x736	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:05.816169024 CEST	192.168.2.22	8.8.8.8	0xc1ad	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:05.829461098 CEST	192.168.2.22	8.8.8.8	0x9ecd	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:05.897646904 CEST	192.168.2.22	8.8.8.8	0x1638	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:05.910429001 CEST	192.168.2.22	8.8.8.8	0x1747	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:05.922921896 CEST	192.168.2.22	8.8.8.8	0x57c1	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:05.935220003 CEST	192.168.2.22	8.8.8.8	0x700b	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:05.948448896 CEST	192.168.2.22	8.8.8.8	0x51a2	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:05.961527109 CEST	192.168.2.22	8.8.8.8	0x9035	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:05.974085093 CEST	192.168.2.22	8.8.8.8	0x5876	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:05.986747980 CEST	192.168.2.22	8.8.8.8	0x4cf3	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:06.000180960 CEST	192.168.2.22	8.8.8.8	0x47d2	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:06.013945103 CEST	192.168.2.22	8.8.8.8	0x72e2	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:06.027004957 CEST	192.168.2.22	8.8.8.8	0x9062	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:06.039599895 CEST	192.168.2.22	8.8.8.8	0xaf31	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:06.052937984 CEST	192.168.2.22	8.8.8.8	0xd77c	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:06.065706015 CEST	192.168.2.22	8.8.8.8	0xeb10	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:06.078646898 CEST	192.168.2.22	8.8.8.8	0xe6bd	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:06.089977026 CEST	192.168.2.22	8.8.8.8	0x4f57	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:06.103302002 CEST	192.168.2.22	8.8.8.8	0x9c24	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:06.115547895 CEST	192.168.2.22	8.8.8.8	0x4b0f	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:06.128001928 CEST	192.168.2.22	8.8.8.8	0x57e6	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:06.146390915 CEST	192.168.2.22	8.8.8.8	0x8878	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:06.162712097 CEST	192.168.2.22	8.8.8.8	0x67bd	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:06.176157951 CEST	192.168.2.22	8.8.8.8	0x106b	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:06.240605116 CEST	192.168.2.22	8.8.8.8	0x6f9c	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:06.253587961 CEST	192.168.2.22	8.8.8.8	0x2bfa	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:06.291603088 CEST	192.168.2.22	8.8.8.8	0xa106	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:06.303045034 CEST	192.168.2.22	8.8.8.8	0x1397	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:06.315424919 CEST	192.168.2.22	8.8.8.8	0x88d3	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:06.328046083 CEST	192.168.2.22	8.8.8.8	0xb001	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:06.342401028 CEST	192.168.2.22	8.8.8.8	0xe9ba	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:06.354499102 CEST	192.168.2.22	8.8.8.8	0x5e29	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:06.366095066 CEST	192.168.2.22	8.8.8.8	0x6754	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:06.377445936 CEST	192.168.2.22	8.8.8.8	0x316c	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:06.388653994 CEST	192.168.2.22	8.8.8.8	0xaaaf	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:06.399254084 CEST	192.168.2.22	8.8.8.8	0xa69	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:06.410151958 CEST	192.168.2.22	8.8.8.8	0xf95	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:06.422555923 CEST	192.168.2.22	8.8.8.8	0x8ff3	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:06.434401035 CEST	192.168.2.22	8.8.8.8	0x7b17	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:06.446269989 CEST	192.168.2.22	8.8.8.8	0xdd10	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:06.457776070 CEST	192.168.2.22	8.8.8.8	0xcaaa	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:06.470302105 CEST	192.168.2.22	8.8.8.8	0x7d2f	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:06.483599901 CEST	192.168.2.22	8.8.8.8	0x484f	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:06.495995045 CEST	192.168.2.22	8.8.8.8	0xbc20	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:06.508470058 CEST	192.168.2.22	8.8.8.8	0x2f46	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:06.518842936 CEST	192.168.2.22	8.8.8.8	0x4326	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:06.571933031 CEST	192.168.2.22	8.8.8.8	0x45ce	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:06.584685087 CEST	192.168.2.22	8.8.8.8	0x4079	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:06.595500946 CEST	192.168.2.22	8.8.8.8	0xfd84	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:06.606532097 CEST	192.168.2.22	8.8.8.8	0xe30a	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:06.618824959 CEST	192.168.2.22	8.8.8.8	0xfdb	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:06.629381895 CEST	192.168.2.22	8.8.8.8	0xfb6d	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:06.640372038 CEST	192.168.2.22	8.8.8.8	0xdb9b	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:06.652359009 CEST	192.168.2.22	8.8.8.8	0xde9a	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:06.664638042 CEST	192.168.2.22	8.8.8.8	0x2a94	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:06.677371979 CEST	192.168.2.22	8.8.8.8	0x130	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:06.690939903 CEST	192.168.2.22	8.8.8.8	0xc098	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:06.702924013 CEST	192.168.2.22	8.8.8.8	0x941f	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:06.715317011 CEST	192.168.2.22	8.8.8.8	0x2cb2	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:06.729388952 CEST	192.168.2.22	8.8.8.8	0x64eb	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:06.740946054 CEST	192.168.2.22	8.8.8.8	0x6c76	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:06.752767086 CEST	192.168.2.22	8.8.8.8	0x5e18	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:06.763667107 CEST	192.168.2.22	8.8.8.8	0x51c4	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:06.777060986 CEST	192.168.2.22	8.8.8.8	0x7d0	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:06.787807941 CEST	192.168.2.22	8.8.8.8	0xa82b	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:06.798738003 CEST	192.168.2.22	8.8.8.8	0xa6b8	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:06.811156988 CEST	192.168.2.22	8.8.8.8	0x640d	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:06.822746992 CEST	192.168.2.22	8.8.8.8	0x9af1	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:06.835230112 CEST	192.168.2.22	8.8.8.8	0x148e	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:06.847014904 CEST	192.168.2.22	8.8.8.8	0x1c76	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:06.858499050 CEST	192.168.2.22	8.8.8.8	0xf417	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:06.910480022 CEST	192.168.2.22	8.8.8.8	0x960c	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:06.922348022 CEST	192.168.2.22	8.8.8.8	0xfda0	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:06.933417082 CEST	192.168.2.22	8.8.8.8	0x2cfc	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:06.945648909 CEST	192.168.2.22	8.8.8.8	0xd00f	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:06.958025932 CEST	192.168.2.22	8.8.8.8	0x6636	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:06.969306946 CEST	192.168.2.22	8.8.8.8	0x85fe	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:06.981463909 CEST	192.168.2.22	8.8.8.8	0x1921	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:06.995852947 CEST	192.168.2.22	8.8.8.8	0x74cd	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:07.009413004 CEST	192.168.2.22	8.8.8.8	0x638d	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:07.020730972 CEST	192.168.2.22	8.8.8.8	0xc857	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:07.062463045 CEST	192.168.2.22	8.8.8.8	0xfa74	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:07.082467079 CEST	192.168.2.22	8.8.8.8	0x7492	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:07.101030111 CEST	192.168.2.22	8.8.8.8	0x4a5b	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:07.125643015 CEST	192.168.2.22	8.8.8.8	0xec7	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:07.155757904 CEST	192.168.2.22	8.8.8.8	0x62df	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:07.228738070 CEST	192.168.2.22	8.8.8.8	0x439b	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:07.697199106 CEST	192.168.2.22	8.8.8.8	0x45c5	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:08.574939966 CEST	192.168.2.22	8.8.8.8	0x8867	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:08.592354059 CEST	192.168.2.22	8.8.8.8	0x38c9	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:08.668895006 CEST	192.168.2.22	8.8.8.8	0x2b64	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:08.722570896 CEST	192.168.2.22	8.8.8.8	0xd394	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:08.737924099 CEST	192.168.2.22	8.8.8.8	0xafc2	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:08.750736952 CEST	192.168.2.22	8.8.8.8	0xc9f7	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:08.764264107 CEST	192.168.2.22	8.8.8.8	0x1331	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:08.777793884 CEST	192.168.2.22	8.8.8.8	0xb1f2	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:08.791805983 CEST	192.168.2.22	8.8.8.8	0xc8cb	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:08.804920912 CEST	192.168.2.22	8.8.8.8	0xaed9	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:08.819013119 CEST	192.168.2.22	8.8.8.8	0xad75	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:08.832457066 CEST	192.168.2.22	8.8.8.8	0xc8f2	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:08.845786095 CEST	192.168.2.22	8.8.8.8	0xcb58	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:08.859270096 CEST	192.168.2.22	8.8.8.8	0xbeb9	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:08.871330023 CEST	192.168.2.22	8.8.8.8	0x16c2	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:08.889094114 CEST	192.168.2.22	8.8.8.8	0x86c	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:08.903040886 CEST	192.168.2.22	8.8.8.8	0xb66b	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:08.915743113 CEST	192.168.2.22	8.8.8.8	0xe745	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:08.931380033 CEST	192.168.2.22	8.8.8.8	0xaf0f	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:09.001163006 CEST	192.168.2.22	8.8.8.8	0xc8c	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:09.015194893 CEST	192.168.2.22	8.8.8.8	0xbc4d	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:09.030157089 CEST	192.168.2.22	8.8.8.8	0x60aa	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:09.046418905 CEST	192.168.2.22	8.8.8.8	0x7b38	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:09.059940100 CEST	192.168.2.22	8.8.8.8	0xa643	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:09.073569059 CEST	192.168.2.22	8.8.8.8	0x2449	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:09.085465908 CEST	192.168.2.22	8.8.8.8	0xbda6	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:09.100014925 CEST	192.168.2.22	8.8.8.8	0x238a	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:09.112472057 CEST	192.168.2.22	8.8.8.8	0x56fc	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:09.125683069 CEST	192.168.2.22	8.8.8.8	0x9316	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:09.137715101 CEST	192.168.2.22	8.8.8.8	0xbe2	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:09.151103973 CEST	192.168.2.22	8.8.8.8	0xc781	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:09.164984941 CEST	192.168.2.22	8.8.8.8	0x863f	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:09.178195953 CEST	192.168.2.22	8.8.8.8	0x1180	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:09.191693068 CEST	192.168.2.22	8.8.8.8	0xd566	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:09.205307007 CEST	192.168.2.22	8.8.8.8	0xcfdc	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:09.218101025 CEST	192.168.2.22	8.8.8.8	0x5d83	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:09.231688976 CEST	192.168.2.22	8.8.8.8	0xc776	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:09.244601011 CEST	192.168.2.22	8.8.8.8	0x33fa	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:09.259005070 CEST	192.168.2.22	8.8.8.8	0x24fb	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:09.273401976 CEST	192.168.2.22	8.8.8.8	0x7032	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:09.337537050 CEST	192.168.2.22	8.8.8.8	0x20fa	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:09.350758076 CEST	192.168.2.22	8.8.8.8	0x52e3	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:09.362937927 CEST	192.168.2.22	8.8.8.8	0x54f6	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:09.374397039 CEST	192.168.2.22	8.8.8.8	0x530c	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:09.386143923 CEST	192.168.2.22	8.8.8.8	0xe4f5	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:09.397984028 CEST	192.168.2.22	8.8.8.8	0xf3fd	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:09.411381960 CEST	192.168.2.22	8.8.8.8	0xb018	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:09.423129082 CEST	192.168.2.22	8.8.8.8	0x949d	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:09.435241938 CEST	192.168.2.22	8.8.8.8	0xf5df	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:09.447438955 CEST	192.168.2.22	8.8.8.8	0xde7a	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:09.488711119 CEST	192.168.2.22	8.8.8.8	0x1753	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:09.499939919 CEST	192.168.2.22	8.8.8.8	0x58c8	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:09.511805058 CEST	192.168.2.22	8.8.8.8	0x2c57	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:09.522382975 CEST	192.168.2.22	8.8.8.8	0xe62c	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:09.536614895 CEST	192.168.2.22	8.8.8.8	0x23e5	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:09.548639059 CEST	192.168.2.22	8.8.8.8	0xed57	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:09.560425997 CEST	192.168.2.22	8.8.8.8	0xc612	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:09.572432041 CEST	192.168.2.22	8.8.8.8	0x31a	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:09.586400032 CEST	192.168.2.22	8.8.8.8	0x3660	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:09.597846031 CEST	192.168.2.22	8.8.8.8	0x3352	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:09.610531092 CEST	192.168.2.22	8.8.8.8	0x5a31	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:09.621987104 CEST	192.168.2.22	8.8.8.8	0xaee6	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:09.665184975 CEST	192.168.2.22	8.8.8.8	0x74b6	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:09.677658081 CEST	192.168.2.22	8.8.8.8	0x1e67	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:09.689131021 CEST	192.168.2.22	8.8.8.8	0xc584	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:09.699605942 CEST	192.168.2.22	8.8.8.8	0x5aaf	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:09.711030960 CEST	192.168.2.22	8.8.8.8	0x7632	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:09.723208904 CEST	192.168.2.22	8.8.8.8	0x666a	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:09.734812021 CEST	192.168.2.22	8.8.8.8	0x922e	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:09.744982004 CEST	192.168.2.22	8.8.8.8	0xcb91	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:09.756758928 CEST	192.168.2.22	8.8.8.8	0x31e9	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:09.767813921 CEST	192.168.2.22	8.8.8.8	0xe275	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:09.780283928 CEST	192.168.2.22	8.8.8.8	0xa3e1	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:09.793131113 CEST	192.168.2.22	8.8.8.8	0xd1c3	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:09.806318998 CEST	192.168.2.22	8.8.8.8	0xb64f	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:09.818783998 CEST	192.168.2.22	8.8.8.8	0x338d	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:09.832087994 CEST	192.168.2.22	8.8.8.8	0x9c03	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:09.844223976 CEST	192.168.2.22	8.8.8.8	0xdfd0	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:09.856065989 CEST	192.168.2.22	8.8.8.8	0x4bd7	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:09.868062973 CEST	192.168.2.22	8.8.8.8	0x245a	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:09.881684065 CEST	192.168.2.22	8.8.8.8	0x83b1	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:09.892419100 CEST	192.168.2.22	8.8.8.8	0x6dbf	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:09.904019117 CEST	192.168.2.22	8.8.8.8	0x9cc	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:09.914836884 CEST	192.168.2.22	8.8.8.8	0x2b88	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:09.926204920 CEST	192.168.2.22	8.8.8.8	0x6996	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:09.938162088 CEST	192.168.2.22	8.8.8.8	0x87a7	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:09.948916912 CEST	192.168.2.22	8.8.8.8	0x9353	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:09.961364031 CEST	192.168.2.22	8.8.8.8	0xe92c	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:10.029030085 CEST	192.168.2.22	8.8.8.8	0x11eb	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:10.041659117 CEST	192.168.2.22	8.8.8.8	0xf6f5	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:10.054725885 CEST	192.168.2.22	8.8.8.8	0x7a65	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:10.066827059 CEST	192.168.2.22	8.8.8.8	0xcdc4	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:10.080161095 CEST	192.168.2.22	8.8.8.8	0xe6e9	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:10.091027021 CEST	192.168.2.22	8.8.8.8	0x6094	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:10.103128910 CEST	192.168.2.22	8.8.8.8	0xc79a	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:10.116235971 CEST	192.168.2.22	8.8.8.8	0xd0	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:10.129798889 CEST	192.168.2.22	8.8.8.8	0x8319	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:10.141554117 CEST	192.168.2.22	8.8.8.8	0x9cfb	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:10.153592110 CEST	192.168.2.22	8.8.8.8	0xad83	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:10.165313959 CEST	192.168.2.22	8.8.8.8	0xe6f6	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:10.179105997 CEST	192.168.2.22	8.8.8.8	0x3d8	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:10.190031052 CEST	192.168.2.22	8.8.8.8	0xa6f	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:10.201235056 CEST	192.168.2.22	8.8.8.8	0x3f16	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:10.211930990 CEST	192.168.2.22	8.8.8.8	0xd6f	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:10.223331928 CEST	192.168.2.22	8.8.8.8	0x418f	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:10.234473944 CEST	192.168.2.22	8.8.8.8	0xdbd6	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:10.246786118 CEST	192.168.2.22	8.8.8.8	0x8e02	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:10.258416891 CEST	192.168.2.22	8.8.8.8	0xb9d1	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:10.271687031 CEST	192.168.2.22	8.8.8.8	0x20c	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:10.286077976 CEST	192.168.2.22	8.8.8.8	0xcc6	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:10.300992966 CEST	192.168.2.22	8.8.8.8	0x107c	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:10.311774015 CEST	192.168.2.22	8.8.8.8	0x3eb7	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:10.376233101 CEST	192.168.2.22	8.8.8.8	0xb92d	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:10.387717962 CEST	192.168.2.22	8.8.8.8	0xa8dc	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:10.400629044 CEST	192.168.2.22	8.8.8.8	0xe69b	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:10.415966988 CEST	192.168.2.22	8.8.8.8	0x807b	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:10.431940079 CEST	192.168.2.22	8.8.8.8	0xdaee	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:10.446213961 CEST	192.168.2.22	8.8.8.8	0x1563	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:10.461030960 CEST	192.168.2.22	8.8.8.8	0x8308	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:10.475131035 CEST	192.168.2.22	8.8.8.8	0xa5b7	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:10.519834042 CEST	192.168.2.22	8.8.8.8	0xe30	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:10.534379959 CEST	192.168.2.22	8.8.8.8	0xff6c	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:10.548664093 CEST	192.168.2.22	8.8.8.8	0x84b4	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:10.562246084 CEST	192.168.2.22	8.8.8.8	0x65de	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:10.602683067 CEST	192.168.2.22	8.8.8.8	0x25f5	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:10.625581980 CEST	192.168.2.22	8.8.8.8	0x7e2d	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:10.656533003 CEST	192.168.2.22	8.8.8.8	0xc6f2	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:10.728852034 CEST	192.168.2.22	8.8.8.8	0xf4d5	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:10.776211023 CEST	192.168.2.22	8.8.8.8	0xb22f	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:11.086728096 CEST	192.168.2.22	8.8.8.8	0xb5b3	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:11.394879103 CEST	192.168.2.22	8.8.8.8	0x8e92	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:11.725661039 CEST	192.168.2.22	8.8.8.8	0xf293	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:12.159367085 CEST	192.168.2.22	8.8.8.8	0x7e11	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:12.171838045 CEST	192.168.2.22	8.8.8.8	0x1152	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:12.185662031 CEST	192.168.2.22	8.8.8.8	0x5071	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:12.198340893 CEST	192.168.2.22	8.8.8.8	0x2fa3	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:12.211426020 CEST	192.168.2.22	8.8.8.8	0xadea	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:12.223844051 CEST	192.168.2.22	8.8.8.8	0x2814	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:12.237108946 CEST	192.168.2.22	8.8.8.8	0xd4af	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:12.251251936 CEST	192.168.2.22	8.8.8.8	0x5c7a	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:12.264106035 CEST	192.168.2.22	8.8.8.8	0x622c	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:12.277163029 CEST	192.168.2.22	8.8.8.8	0x3a4f	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:12.290946007 CEST	192.168.2.22	8.8.8.8	0x342c	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:12.304224014 CEST	192.168.2.22	8.8.8.8	0x94	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:12.317527056 CEST	192.168.2.22	8.8.8.8	0x4526	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:12.331084967 CEST	192.168.2.22	8.8.8.8	0xecb2	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:12.345408916 CEST	192.168.2.22	8.8.8.8	0x608e	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:12.359297037 CEST	192.168.2.22	8.8.8.8	0xa735	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:12.372646093 CEST	192.168.2.22	8.8.8.8	0x41ec	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:12.384586096 CEST	192.168.2.22	8.8.8.8	0x3005	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:12.396392107 CEST	192.168.2.22	8.8.8.8	0x4ad5	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:12.464474916 CEST	192.168.2.22	8.8.8.8	0xde02	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:12.478524923 CEST	192.168.2.22	8.8.8.8	0x178	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:12.490938902 CEST	192.168.2.22	8.8.8.8	0xbeae	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:12.503839970 CEST	192.168.2.22	8.8.8.8	0x4fe8	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:12.517189980 CEST	192.168.2.22	8.8.8.8	0x9839	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:12.530466080 CEST	192.168.2.22	8.8.8.8	0xaa5c	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:12.543169975 CEST	192.168.2.22	8.8.8.8	0x465e	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:12.556267977 CEST	192.168.2.22	8.8.8.8	0x163d	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:12.569211960 CEST	192.168.2.22	8.8.8.8	0xf84c	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:12.582498074 CEST	192.168.2.22	8.8.8.8	0xbb6d	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:12.595149994 CEST	192.168.2.22	8.8.8.8	0x3c74	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:12.607729912 CEST	192.168.2.22	8.8.8.8	0x2f4d	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:12.620681047 CEST	192.168.2.22	8.8.8.8	0xd1	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:12.633177042 CEST	192.168.2.22	8.8.8.8	0xdef1	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:12.674235106 CEST	192.168.2.22	8.8.8.8	0x28de	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:12.688064098 CEST	192.168.2.22	8.8.8.8	0x1348	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:12.700191021 CEST	192.168.2.22	8.8.8.8	0x3c21	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:12.713464975 CEST	192.168.2.22	8.8.8.8	0xb6ba	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:12.725534916 CEST	192.168.2.22	8.8.8.8	0x68df	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:12.738343000 CEST	192.168.2.22	8.8.8.8	0xaa6b	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:12.810210943 CEST	192.168.2.22	8.8.8.8	0x7955	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:12.823724985 CEST	192.168.2.22	8.8.8.8	0x9089	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:12.836829901 CEST	192.168.2.22	8.8.8.8	0x179d	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:12.865572929 CEST	192.168.2.22	8.8.8.8	0xd110	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:12.892436028 CEST	192.168.2.22	8.8.8.8	0xb3b5	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:12.915395021 CEST	192.168.2.22	8.8.8.8	0xd6ab	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:12.927653074 CEST	192.168.2.22	8.8.8.8	0xe8a1	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:12.941570997 CEST	192.168.2.22	8.8.8.8	0x5df0	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:12.953809977 CEST	192.168.2.22	8.8.8.8	0x1f49	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:12.967051983 CEST	192.168.2.22	8.8.8.8	0x44cc	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:12.980310917 CEST	192.168.2.22	8.8.8.8	0x7775	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:12.993875027 CEST	192.168.2.22	8.8.8.8	0xc84c	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:13.007698059 CEST	192.168.2.22	8.8.8.8	0xe9c3	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:13.021229029 CEST	192.168.2.22	8.8.8.8	0xc9d3	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:13.033976078 CEST	192.168.2.22	8.8.8.8	0x1065	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:13.046926975 CEST	192.168.2.22	8.8.8.8	0xb3ca	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:13.059123993 CEST	192.168.2.22	8.8.8.8	0x581e	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:13.072105885 CEST	192.168.2.22	8.8.8.8	0xe0e7	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:13.085057974 CEST	192.168.2.22	8.8.8.8	0x3ced	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:13.155823946 CEST	192.168.2.22	8.8.8.8	0x7843	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:13.167191029 CEST	192.168.2.22	8.8.8.8	0xad12	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:13.179908037 CEST	192.168.2.22	8.8.8.8	0xd86a	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:13.192754984 CEST	192.168.2.22	8.8.8.8	0x337	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:13.205585003 CEST	192.168.2.22	8.8.8.8	0x62cf	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:13.217853069 CEST	192.168.2.22	8.8.8.8	0xc072	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:13.229964972 CEST	192.168.2.22	8.8.8.8	0x5671	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:13.243700981 CEST	192.168.2.22	8.8.8.8	0x28ef	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:13.255417109 CEST	192.168.2.22	8.8.8.8	0xf85d	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:13.268579960 CEST	192.168.2.22	8.8.8.8	0x63fe	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:13.281620979 CEST	192.168.2.22	8.8.8.8	0x370f	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:13.296062946 CEST	192.168.2.22	8.8.8.8	0xae8d	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:13.309436083 CEST	192.168.2.22	8.8.8.8	0x2555	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:13.321767092 CEST	192.168.2.22	8.8.8.8	0x2077	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:13.333506107 CEST	192.168.2.22	8.8.8.8	0x346	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:13.346023083 CEST	192.168.2.22	8.8.8.8	0x5c86	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:13.359142065 CEST	192.168.2.22	8.8.8.8	0x72ea	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:13.370932102 CEST	192.168.2.22	8.8.8.8	0x1dd8	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:13.383024931 CEST	192.168.2.22	8.8.8.8	0x7bea	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:13.395085096 CEST	192.168.2.22	8.8.8.8	0x6f27	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:13.406476021 CEST	192.168.2.22	8.8.8.8	0x9d4c	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:13.418224096 CEST	192.168.2.22	8.8.8.8	0x196e	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:13.429476976 CEST	192.168.2.22	8.8.8.8	0xaeb1	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:13.494501114 CEST	192.168.2.22	8.8.8.8	0x2f45	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:13.508539915 CEST	192.168.2.22	8.8.8.8	0x7d74	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:13.519221067 CEST	192.168.2.22	8.8.8.8	0xc3dc	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:13.531012058 CEST	192.168.2.22	8.8.8.8	0xecd4	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:13.543052912 CEST	192.168.2.22	8.8.8.8	0x8440	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:13.555305958 CEST	192.168.2.22	8.8.8.8	0x3c0d	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:13.566400051 CEST	192.168.2.22	8.8.8.8	0x134e	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:13.578598976 CEST	192.168.2.22	8.8.8.8	0x9db	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:13.590601921 CEST	192.168.2.22	8.8.8.8	0x5532	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:13.602386951 CEST	192.168.2.22	8.8.8.8	0x9376	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:13.614588022 CEST	192.168.2.22	8.8.8.8	0x164f	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:13.627204895 CEST	192.168.2.22	8.8.8.8	0xec2b	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:13.638519049 CEST	192.168.2.22	8.8.8.8	0x9443	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:13.649132967 CEST	192.168.2.22	8.8.8.8	0x1cb	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:13.660685062 CEST	192.168.2.22	8.8.8.8	0x8750	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:13.705979109 CEST	192.168.2.22	8.8.8.8	0xd4d1	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:13.718893051 CEST	192.168.2.22	8.8.8.8	0xc5	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:13.731389046 CEST	192.168.2.22	8.8.8.8	0xb20	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:13.744328022 CEST	192.168.2.22	8.8.8.8	0x7e19	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:13.756311893 CEST	192.168.2.22	8.8.8.8	0x87ae	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:13.767304897 CEST	192.168.2.22	8.8.8.8	0xf8e0	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:13.817240953 CEST	192.168.2.22	8.8.8.8	0xcfb7	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:13.829215050 CEST	192.168.2.22	8.8.8.8	0x6239	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:13.842430115 CEST	192.168.2.22	8.8.8.8	0xc3b8	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:13.854187012 CEST	192.168.2.22	8.8.8.8	0x277f	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:13.868518114 CEST	192.168.2.22	8.8.8.8	0x7289	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:13.882148981 CEST	192.168.2.22	8.8.8.8	0x7325	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:13.896330118 CEST	192.168.2.22	8.8.8.8	0x4d96	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:13.909643888 CEST	192.168.2.22	8.8.8.8	0xe47f	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:13.927529097 CEST	192.168.2.22	8.8.8.8	0x3750	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:13.940129042 CEST	192.168.2.22	8.8.8.8	0x79a3	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:13.956377983 CEST	192.168.2.22	8.8.8.8	0x6011	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:13.971332073 CEST	192.168.2.22	8.8.8.8	0xf8a	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:13.986663103 CEST	192.168.2.22	8.8.8.8	0x6e72	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:14.002098083 CEST	192.168.2.22	8.8.8.8	0xf7a8	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:14.017096043 CEST	192.168.2.22	8.8.8.8	0x9e6c	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:14.034262896 CEST	192.168.2.22	8.8.8.8	0x9b38	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:14.048752069 CEST	192.168.2.22	8.8.8.8	0xd078	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:14.063374043 CEST	192.168.2.22	8.8.8.8	0xd72d	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:14.079406023 CEST	192.168.2.22	8.8.8.8	0xa8c3	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:14.095614910 CEST	192.168.2.22	8.8.8.8	0xa4ce	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:14.111071110 CEST	192.168.2.22	8.8.8.8	0x6206	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:14.251893997 CEST	192.168.2.22	8.8.8.8	0x3638	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:14.268471003 CEST	192.168.2.22	8.8.8.8	0xbaac	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:14.299099922 CEST	192.168.2.22	8.8.8.8	0xf06a	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:14.337515116 CEST	192.168.2.22	8.8.8.8	0x82b8	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:14.366621017 CEST	192.168.2.22	8.8.8.8	0x2e4c	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:14.397670984 CEST	192.168.2.22	8.8.8.8	0xf494	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:14.431061983 CEST	192.168.2.22	8.8.8.8	0xab30	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:14.712476015 CEST	192.168.2.22	8.8.8.8	0xf56b	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:15.729851007 CEST	192.168.2.22	8.8.8.8	0x8bce	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:16.168788910 CEST	192.168.2.22	8.8.8.8	0x817e	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:16.183971882 CEST	192.168.2.22	8.8.8.8	0xacad	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:16.222603083 CEST	192.168.2.22	8.8.8.8	0x54ff	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:16.234307051 CEST	192.168.2.22	8.8.8.8	0xdb93	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:16.245220900 CEST	192.168.2.22	8.8.8.8	0x7081	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:16.257144928 CEST	192.168.2.22	8.8.8.8	0xb899	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:16.305289984 CEST	192.168.2.22	8.8.8.8	0x8407	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:16.317886114 CEST	192.168.2.22	8.8.8.8	0x8490	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:16.330477953 CEST	192.168.2.22	8.8.8.8	0x5443	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:16.342763901 CEST	192.168.2.22	8.8.8.8	0xc7e9	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:16.354624987 CEST	192.168.2.22	8.8.8.8	0x6e63	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:16.366458893 CEST	192.168.2.22	8.8.8.8	0x993d	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:16.380193949 CEST	192.168.2.22	8.8.8.8	0xa5bc	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:16.393613100 CEST	192.168.2.22	8.8.8.8	0xfd54	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:16.407032967 CEST	192.168.2.22	8.8.8.8	0x7313	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:16.419678926 CEST	192.168.2.22	8.8.8.8	0x7cdf	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:16.433517933 CEST	192.168.2.22	8.8.8.8	0xd40c	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:16.445677996 CEST	192.168.2.22	8.8.8.8	0x449d	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:16.456271887 CEST	192.168.2.22	8.8.8.8	0x92e2	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:16.466573000 CEST	192.168.2.22	8.8.8.8	0x7a8e	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:16.478163004 CEST	192.168.2.22	8.8.8.8	0x375a	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:16.490976095 CEST	192.168.2.22	8.8.8.8	0xd476	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:16.502413034 CEST	192.168.2.22	8.8.8.8	0xac23	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:16.513649940 CEST	192.168.2.22	8.8.8.8	0xeb48	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:16.524859905 CEST	192.168.2.22	8.8.8.8	0xac7c	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:16.536801100 CEST	192.168.2.22	8.8.8.8	0x4491	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:16.548418045 CEST	192.168.2.22	8.8.8.8	0xcac5	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:16.559384108 CEST	192.168.2.22	8.8.8.8	0x8860	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:16.569899082 CEST	192.168.2.22	8.8.8.8	0xb476	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:16.583125114 CEST	192.168.2.22	8.8.8.8	0xc8e5	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:16.595834970 CEST	192.168.2.22	8.8.8.8	0xa1a2	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:16.661807060 CEST	192.168.2.22	8.8.8.8	0xa9b3	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:16.674280882 CEST	192.168.2.22	8.8.8.8	0xe538	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:16.686709881 CEST	192.168.2.22	8.8.8.8	0x9821	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:16.699280977 CEST	192.168.2.22	8.8.8.8	0xb59b	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:16.713352919 CEST	192.168.2.22	8.8.8.8	0xcc88	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:16.725361109 CEST	192.168.2.22	8.8.8.8	0x4c46	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:16.737442970 CEST	192.168.2.22	8.8.8.8	0xb130	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:16.750015020 CEST	192.168.2.22	8.8.8.8	0x91fd	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:16.762003899 CEST	192.168.2.22	8.8.8.8	0x1804	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:16.774597883 CEST	192.168.2.22	8.8.8.8	0x5b74	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:16.786560059 CEST	192.168.2.22	8.8.8.8	0x883e	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:16.798758030 CEST	192.168.2.22	8.8.8.8	0xe967	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:16.810081005 CEST	192.168.2.22	8.8.8.8	0x650	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:16.822241068 CEST	192.168.2.22	8.8.8.8	0x86b5	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:16.834551096 CEST	192.168.2.22	8.8.8.8	0x1890	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:16.846872091 CEST	192.168.2.22	8.8.8.8	0x53c2	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:16.859411955 CEST	192.168.2.22	8.8.8.8	0xf0a0	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:16.899291039 CEST	192.168.2.22	8.8.8.8	0xb974	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:16.910881996 CEST	192.168.2.22	8.8.8.8	0xa740	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:16.923770905 CEST	192.168.2.22	8.8.8.8	0x5085	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:16.937119961 CEST	192.168.2.22	8.8.8.8	0x658e	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:17.001828909 CEST	192.168.2.22	8.8.8.8	0xaa0a	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:17.012263060 CEST	192.168.2.22	8.8.8.8	0x95e9	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:17.023967981 CEST	192.168.2.22	8.8.8.8	0x57ff	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:17.035790920 CEST	192.168.2.22	8.8.8.8	0xb351	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:17.280733109 CEST	192.168.2.22	8.8.8.8	0xa436	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:17.323930979 CEST	192.168.2.22	8.8.8.8	0x458e	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:17.337172985 CEST	192.168.2.22	8.8.8.8	0x9b64	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:17.348392010 CEST	192.168.2.22	8.8.8.8	0xa9cd	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:17.359582901 CEST	192.168.2.22	8.8.8.8	0x66fe	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:17.369417906 CEST	192.168.2.22	8.8.8.8	0x35b2	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:17.380336046 CEST	192.168.2.22	8.8.8.8	0xee73	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:17.390578985 CEST	192.168.2.22	8.8.8.8	0x52ff	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:17.401269913 CEST	192.168.2.22	8.8.8.8	0xdc29	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:17.410706043 CEST	192.168.2.22	8.8.8.8	0x273b	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:17.424669981 CEST	192.168.2.22	8.8.8.8	0x236f	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:17.435719967 CEST	192.168.2.22	8.8.8.8	0x4248	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:17.445492029 CEST	192.168.2.22	8.8.8.8	0xd8f0	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:17.455300093 CEST	192.168.2.22	8.8.8.8	0xbccf	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:17.465949059 CEST	192.168.2.22	8.8.8.8	0x209	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:17.475699902 CEST	192.168.2.22	8.8.8.8	0xa47e	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:17.485511065 CEST	192.168.2.22	8.8.8.8	0x6d73	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:17.496468067 CEST	192.168.2.22	8.8.8.8	0x870	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:17.507639885 CEST	192.168.2.22	8.8.8.8	0x46c8	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:17.517848015 CEST	192.168.2.22	8.8.8.8	0x59f	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:17.530903101 CEST	192.168.2.22	8.8.8.8	0xe4cf	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:17.540988922 CEST	192.168.2.22	8.8.8.8	0x1e1c	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:17.551547050 CEST	192.168.2.22	8.8.8.8	0x5b87	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:17.562699080 CEST	192.168.2.22	8.8.8.8	0x3135	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:17.572925091 CEST	192.168.2.22	8.8.8.8	0x9b9a	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:17.583105087 CEST	192.168.2.22	8.8.8.8	0xf1c9	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:17.593786001 CEST	192.168.2.22	8.8.8.8	0x3388	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:17.605442047 CEST	192.168.2.22	8.8.8.8	0x168c	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:17.616580009 CEST	192.168.2.22	8.8.8.8	0xabc8	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:17.626950026 CEST	192.168.2.22	8.8.8.8	0x9e02	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:17.681638956 CEST	192.168.2.22	8.8.8.8	0xe134	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:17.692456007 CEST	192.168.2.22	8.8.8.8	0x611a	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:17.703109026 CEST	192.168.2.22	8.8.8.8	0x83de	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:17.713185072 CEST	192.168.2.22	8.8.8.8	0xee77	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:17.724378109 CEST	192.168.2.22	8.8.8.8	0x5f63	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:17.735879898 CEST	192.168.2.22	8.8.8.8	0xae81	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:17.747958899 CEST	192.168.2.22	8.8.8.8	0x50ae	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:17.759598017 CEST	192.168.2.22	8.8.8.8	0xa318	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:17.771168947 CEST	192.168.2.22	8.8.8.8	0x2194	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:17.782177925 CEST	192.168.2.22	8.8.8.8	0xcf2d	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:17.794847012 CEST	192.168.2.22	8.8.8.8	0x74e8	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:17.805265903 CEST	192.168.2.22	8.8.8.8	0xfc7a	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:17.817507029 CEST	192.168.2.22	8.8.8.8	0xb754	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:17.829868078 CEST	192.168.2.22	8.8.8.8	0xb7db	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:17.841568947 CEST	192.168.2.22	8.8.8.8	0x5eb2	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:17.856583118 CEST	192.168.2.22	8.8.8.8	0x759a	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:17.867568970 CEST	192.168.2.22	8.8.8.8	0xe8c2	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:17.878928900 CEST	192.168.2.22	8.8.8.8	0xc8b2	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:17.891515970 CEST	192.168.2.22	8.8.8.8	0xf976	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:17.915288925 CEST	192.168.2.22	8.8.8.8	0x7bf	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:17.934170008 CEST	192.168.2.22	8.8.8.8	0x20c0	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:17.946064949 CEST	192.168.2.22	8.8.8.8	0x4ded	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:17.958086967 CEST	192.168.2.22	8.8.8.8	0xa9d4	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:17.968708038 CEST	192.168.2.22	8.8.8.8	0x225	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:18.010129929 CEST	192.168.2.22	8.8.8.8	0x9	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:18.021310091 CEST	192.168.2.22	8.8.8.8	0x49d6	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:18.033077002 CEST	192.168.2.22	8.8.8.8	0xfc	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:18.042877913 CEST	192.168.2.22	8.8.8.8	0xe0b8	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:18.055704117 CEST	192.168.2.22	8.8.8.8	0xc749	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:18.066277027 CEST	192.168.2.22	8.8.8.8	0x6d29	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:18.077359915 CEST	192.168.2.22	8.8.8.8	0x9208	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:18.087810040 CEST	192.168.2.22	8.8.8.8	0x4e38	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:18.098779917 CEST	192.168.2.22	8.8.8.8	0xdd4d	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:18.109980106 CEST	192.168.2.22	8.8.8.8	0x1e4b	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:18.121104002 CEST	192.168.2.22	8.8.8.8	0x7dca	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:18.132725954 CEST	192.168.2.22	8.8.8.8	0x6768	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:18.144651890 CEST	192.168.2.22	8.8.8.8	0xa11d	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:18.186732054 CEST	192.168.2.22	8.8.8.8	0xc33e	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:18.208863974 CEST	192.168.2.22	8.8.8.8	0x3bad	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:18.237931013 CEST	192.168.2.22	8.8.8.8	0x5873	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:18.319679976 CEST	192.168.2.22	8.8.8.8	0xfc41	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:18.366700888 CEST	192.168.2.22	8.8.8.8	0xae4c	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:18.395059109 CEST	192.168.2.22	8.8.8.8	0xfe5e	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:18.480504036 CEST	192.168.2.22	8.8.8.8	0x39ea	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:18.609713078 CEST	192.168.2.22	8.8.8.8	0xeac7	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:18.625845909 CEST	192.168.2.22	8.8.8.8	0x586d	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:18.878232002 CEST	192.168.2.22	8.8.8.8	0xdfb6	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:19.107295036 CEST	192.168.2.22	8.8.8.8	0xdb6	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:19.260098934 CEST	192.168.2.22	8.8.8.8	0x29f6	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:19.467081070 CEST	192.168.2.22	8.8.8.8	0x3396	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:19.579256058 CEST	192.168.2.22	8.8.8.8	0xaf2c	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:19.642976046 CEST	192.168.2.22	8.8.8.8	0xdf2c	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:19.656766891 CEST	192.168.2.22	8.8.8.8	0xde22	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:19.669078112 CEST	192.168.2.22	8.8.8.8	0xa245	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:19.681660891 CEST	192.168.2.22	8.8.8.8	0x54f7	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:19.720403910 CEST	192.168.2.22	8.8.8.8	0xea8a	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:19.758196115 CEST	192.168.2.22	8.8.8.8	0xf645	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:19.771672964 CEST	192.168.2.22	8.8.8.8	0xb4e6	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:19.784136057 CEST	192.168.2.22	8.8.8.8	0xfcad	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:19.796467066 CEST	192.168.2.22	8.8.8.8	0x38ca	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:19.808183908 CEST	192.168.2.22	8.8.8.8	0x41df	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:19.820677042 CEST	192.168.2.22	8.8.8.8	0xc947	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:19.833225012 CEST	192.168.2.22	8.8.8.8	0x5769	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:19.845395088 CEST	192.168.2.22	8.8.8.8	0x6f76	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:19.858417988 CEST	192.168.2.22	8.8.8.8	0xef3	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:19.868794918 CEST	192.168.2.22	8.8.8.8	0xa68f	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:19.882113934 CEST	192.168.2.22	8.8.8.8	0x2bfe	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:19.893851995 CEST	192.168.2.22	8.8.8.8	0x729	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:19.907057047 CEST	192.168.2.22	8.8.8.8	0xe9c3	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:19.922544003 CEST	192.168.2.22	8.8.8.8	0x5dad	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:19.935641050 CEST	192.168.2.22	8.8.8.8	0x8c91	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:19.947552919 CEST	192.168.2.22	8.8.8.8	0x3a4f	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:19.960829973 CEST	192.168.2.22	8.8.8.8	0x3fb4	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:19.973790884 CEST	192.168.2.22	8.8.8.8	0xc19d	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:19.985477924 CEST	192.168.2.22	8.8.8.8	0xdac4	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:19.997842073 CEST	192.168.2.22	8.8.8.8	0x136f	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:20.010946989 CEST	192.168.2.22	8.8.8.8	0x5019	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:20.022624969 CEST	192.168.2.22	8.8.8.8	0x8451	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:20.111912966 CEST	192.168.2.22	8.8.8.8	0x6afa	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:20.126894951 CEST	192.168.2.22	8.8.8.8	0x1fec	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:20.140616894 CEST	192.168.2.22	8.8.8.8	0xf065	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:20.152324915 CEST	192.168.2.22	8.8.8.8	0x6148	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:20.165451050 CEST	192.168.2.22	8.8.8.8	0xd14c	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:20.177864075 CEST	192.168.2.22	8.8.8.8	0x647	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:20.189141989 CEST	192.168.2.22	8.8.8.8	0xe07a	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:20.201466084 CEST	192.168.2.22	8.8.8.8	0xcff9	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:20.213675976 CEST	192.168.2.22	8.8.8.8	0xdd46	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:20.226095915 CEST	192.168.2.22	8.8.8.8	0xa272	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:20.238080978 CEST	192.168.2.22	8.8.8.8	0xb91	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:20.250843048 CEST	192.168.2.22	8.8.8.8	0x6687	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:20.263410091 CEST	192.168.2.22	8.8.8.8	0x57a5	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:20.274564028 CEST	192.168.2.22	8.8.8.8	0x60de	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:20.287311077 CEST	192.168.2.22	8.8.8.8	0x7604	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:20.300415993 CEST	192.168.2.22	8.8.8.8	0x84f8	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:20.316206932 CEST	192.168.2.22	8.8.8.8	0x854f	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:20.328685045 CEST	192.168.2.22	8.8.8.8	0x37f1	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:20.358259916 CEST	192.168.2.22	8.8.8.8	0x91ac	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:20.421993017 CEST	192.168.2.22	8.8.8.8	0xfd7	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:20.436759949 CEST	192.168.2.22	8.8.8.8	0x7ac0	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:20.447232962 CEST	192.168.2.22	8.8.8.8	0xab09	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:20.459110975 CEST	192.168.2.22	8.8.8.8	0xccdb	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:20.471477032 CEST	192.168.2.22	8.8.8.8	0x196a	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:20.484306097 CEST	192.168.2.22	8.8.8.8	0xf69f	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:20.495763063 CEST	192.168.2.22	8.8.8.8	0x49c4	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:20.507153988 CEST	192.168.2.22	8.8.8.8	0x8a22	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:20.519124985 CEST	192.168.2.22	8.8.8.8	0x3741	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:20.529768944 CEST	192.168.2.22	8.8.8.8	0x3482	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:20.540425062 CEST	192.168.2.22	8.8.8.8	0x13eb	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:20.553236961 CEST	192.168.2.22	8.8.8.8	0xd3d4	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:20.567195892 CEST	192.168.2.22	8.8.8.8	0xce2f	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:20.578233957 CEST	192.168.2.22	8.8.8.8	0x73c3	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:20.589819908 CEST	192.168.2.22	8.8.8.8	0x7198	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:20.602524042 CEST	192.168.2.22	8.8.8.8	0x9cb6	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:20.613333941 CEST	192.168.2.22	8.8.8.8	0xd993	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:20.627502918 CEST	192.168.2.22	8.8.8.8	0xbab6	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:20.639255047 CEST	192.168.2.22	8.8.8.8	0xfabb	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:20.651254892 CEST	192.168.2.22	8.8.8.8	0x3903	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:20.663723946 CEST	192.168.2.22	8.8.8.8	0xa92e	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:20.676290035 CEST	192.168.2.22	8.8.8.8	0xb369	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:20.686779976 CEST	192.168.2.22	8.8.8.8	0x2afb	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:20.698189020 CEST	192.168.2.22	8.8.8.8	0xeca0	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:20.710019112 CEST	192.168.2.22	8.8.8.8	0xfa65	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:20.764898062 CEST	192.168.2.22	8.8.8.8	0x68d9	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:20.776963949 CEST	192.168.2.22	8.8.8.8	0x2128	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:20.789503098 CEST	192.168.2.22	8.8.8.8	0x1b4f	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:20.801369905 CEST	192.168.2.22	8.8.8.8	0x6be9	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:20.814806938 CEST	192.168.2.22	8.8.8.8	0x52e6	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:20.828522921 CEST	192.168.2.22	8.8.8.8	0x36e4	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:20.840859890 CEST	192.168.2.22	8.8.8.8	0xd237	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:20.852564096 CEST	192.168.2.22	8.8.8.8	0xeec5	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:20.864435911 CEST	192.168.2.22	8.8.8.8	0x2317	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:20.875152111 CEST	192.168.2.22	8.8.8.8	0x3208	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:20.887834072 CEST	192.168.2.22	8.8.8.8	0x2c9c	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:20.899961948 CEST	192.168.2.22	8.8.8.8	0x69e2	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:20.912204981 CEST	192.168.2.22	8.8.8.8	0xe121	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:20.924725056 CEST	192.168.2.22	8.8.8.8	0x506a	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:20.936650991 CEST	192.168.2.22	8.8.8.8	0xe975	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:20.946938038 CEST	192.168.2.22	8.8.8.8	0xd293	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:20.958677053 CEST	192.168.2.22	8.8.8.8	0x1469	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:20.971153021 CEST	192.168.2.22	8.8.8.8	0xae05	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:20.981372118 CEST	192.168.2.22	8.8.8.8	0xfb93	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:20.992486000 CEST	192.168.2.22	8.8.8.8	0x19c9	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:21.002315044 CEST	192.168.2.22	8.8.8.8	0x21b7	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:21.014484882 CEST	192.168.2.22	8.8.8.8	0x6de5	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:21.026844978 CEST	192.168.2.22	8.8.8.8	0x58cc	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:21.039983034 CEST	192.168.2.22	8.8.8.8	0x56a3	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:21.051269054 CEST	192.168.2.22	8.8.8.8	0x2a8d	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:21.073925018 CEST	192.168.2.22	8.8.8.8	0x65a7	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:21.152436972 CEST	192.168.2.22	8.8.8.8	0x6f2	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:21.164211988 CEST	192.168.2.22	8.8.8.8	0x6bd0	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:21.175530910 CEST	192.168.2.22	8.8.8.8	0x3cdd	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:21.186098099 CEST	192.168.2.22	8.8.8.8	0x3aa4	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:21.196731091 CEST	192.168.2.22	8.8.8.8	0x2be3	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:21.207837105 CEST	192.168.2.22	8.8.8.8	0x458e	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:21.220885992 CEST	192.168.2.22	8.8.8.8	0xbe58	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:21.232091904 CEST	192.168.2.22	8.8.8.8	0xd68	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:21.242981911 CEST	192.168.2.22	8.8.8.8	0xb91a	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:21.254450083 CEST	192.168.2.22	8.8.8.8	0x651b	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:21.265592098 CEST	192.168.2.22	8.8.8.8	0xcd5d	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:21.277420044 CEST	192.168.2.22	8.8.8.8	0x60f8	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:21.288393021 CEST	192.168.2.22	8.8.8.8	0x809c	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:21.299382925 CEST	192.168.2.22	8.8.8.8	0x33f	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:21.310359001 CEST	192.168.2.22	8.8.8.8	0xff7	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:21.320786953 CEST	192.168.2.22	8.8.8.8	0xd009	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:21.332954884 CEST	192.168.2.22	8.8.8.8	0x56ee	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:21.344321966 CEST	192.168.2.22	8.8.8.8	0xade3	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:21.355870008 CEST	192.168.2.22	8.8.8.8	0x4d4f	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:21.367722034 CEST	192.168.2.22	8.8.8.8	0x1c36	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:21.379273891 CEST	192.168.2.22	8.8.8.8	0x84ee	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:21.390239954 CEST	192.168.2.22	8.8.8.8	0x417c	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:21.400672913 CEST	192.168.2.22	8.8.8.8	0x26b1	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:21.427059889 CEST	192.168.2.22	8.8.8.8	0x519f	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:21.445372105 CEST	192.168.2.22	8.8.8.8	0x85bd	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:21.459263086 CEST	192.168.2.22	8.8.8.8	0x7cdc	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:21.472100973 CEST	192.168.2.22	8.8.8.8	0x573f	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:21.482265949 CEST	192.168.2.22	8.8.8.8	0x693e	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:21.493330002 CEST	192.168.2.22	8.8.8.8	0x61da	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:21.503915071 CEST	192.168.2.22	8.8.8.8	0xe06e	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:21.516381979 CEST	192.168.2.22	8.8.8.8	0xd001	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:21.528027058 CEST	192.168.2.22	8.8.8.8	0x6c3d	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:21.539263010 CEST	192.168.2.22	8.8.8.8	0xa3a8	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:21.550762892 CEST	192.168.2.22	8.8.8.8	0x9d62	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:21.562381983 CEST	192.168.2.22	8.8.8.8	0xe32a	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:21.573014975 CEST	192.168.2.22	8.8.8.8	0xd591	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:21.584445000 CEST	192.168.2.22	8.8.8.8	0x17b8	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:21.594738960 CEST	192.168.2.22	8.8.8.8	0x913a	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:21.605566978 CEST	192.168.2.22	8.8.8.8	0xa9de	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:21.616791010 CEST	192.168.2.22	8.8.8.8	0x6aaa	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:21.628081083 CEST	192.168.2.22	8.8.8.8	0x56db	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:21.638761044 CEST	192.168.2.22	8.8.8.8	0x2f3c	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:21.682724953 CEST	192.168.2.22	8.8.8.8	0x4b5a	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:21.702728987 CEST	192.168.2.22	8.8.8.8	0x26ee	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:21.725400925 CEST	192.168.2.22	8.8.8.8	0x9684	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:21.746207952 CEST	192.168.2.22	8.8.8.8	0x3262	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:21.807245970 CEST	192.168.2.22	8.8.8.8	0xe6d9	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:21.832969904 CEST	192.168.2.22	8.8.8.8	0x2b08	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:22.118314981 CEST	192.168.2.22	8.8.8.8	0x8bb7	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:22.357672930 CEST	192.168.2.22	8.8.8.8	0x8e15	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:22.705799103 CEST	192.168.2.22	8.8.8.8	0xf0fe	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:22.988864899 CEST	192.168.2.22	8.8.8.8	0x290e	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:23.476927042 CEST	192.168.2.22	8.8.8.8	0x7ea3	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:23.647294044 CEST	192.168.2.22	8.8.8.8	0xf1ab	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:23.661004066 CEST	192.168.2.22	8.8.8.8	0x8934	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:23.673156023 CEST	192.168.2.22	8.8.8.8	0xde2	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:23.687148094 CEST	192.168.2.22	8.8.8.8	0x130b	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:23.699731112 CEST	192.168.2.22	8.8.8.8	0x88df	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:23.713393927 CEST	192.168.2.22	8.8.8.8	0xb088	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:23.726200104 CEST	192.168.2.22	8.8.8.8	0x38c4	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:23.738076925 CEST	192.168.2.22	8.8.8.8	0x6329	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:23.752281904 CEST	192.168.2.22	8.8.8.8	0x6ca4	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:23.766529083 CEST	192.168.2.22	8.8.8.8	0xc641	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:23.778238058 CEST	192.168.2.22	8.8.8.8	0xa4fa	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:23.791766882 CEST	192.168.2.22	8.8.8.8	0x9736	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:23.803664923 CEST	192.168.2.22	8.8.8.8	0xc25a	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:23.817051888 CEST	192.168.2.22	8.8.8.8	0x8d37	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:23.829018116 CEST	192.168.2.22	8.8.8.8	0x8365	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:23.844959974 CEST	192.168.2.22	8.8.8.8	0x9372	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:23.856818914 CEST	192.168.2.22	8.8.8.8	0x74bb	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:23.873169899 CEST	192.168.2.22	8.8.8.8	0x58b1	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:23.914911032 CEST	192.168.2.22	8.8.8.8	0x8500	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:23.926717997 CEST	192.168.2.22	8.8.8.8	0x5447	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:23.939681053 CEST	192.168.2.22	8.8.8.8	0xcc9d	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:23.952908039 CEST	192.168.2.22	8.8.8.8	0xa4cc	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:23.964895010 CEST	192.168.2.22	8.8.8.8	0x720e	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:23.979387999 CEST	192.168.2.22	8.8.8.8	0x33e3	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:23.991193056 CEST	192.168.2.22	8.8.8.8	0xa6e	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:24.002686977 CEST	192.168.2.22	8.8.8.8	0x2782	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:24.015986919 CEST	192.168.2.22	8.8.8.8	0x98b2	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:24.029016018 CEST	192.168.2.22	8.8.8.8	0xd245	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:24.040982962 CEST	192.168.2.22	8.8.8.8	0x3aed	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:24.052670002 CEST	192.168.2.22	8.8.8.8	0x1bf4	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:24.063903093 CEST	192.168.2.22	8.8.8.8	0xa4d3	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:24.075644970 CEST	192.168.2.22	8.8.8.8	0x2b5e	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:24.086076021 CEST	192.168.2.22	8.8.8.8	0xd092	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:24.096788883 CEST	192.168.2.22	8.8.8.8	0xb2a1	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:24.109544992 CEST	192.168.2.22	8.8.8.8	0xcaf0	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:24.122864962 CEST	192.168.2.22	8.8.8.8	0xeb61	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:24.418288946 CEST	192.168.2.22	8.8.8.8	0xb1c8	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:24.514909029 CEST	192.168.2.22	8.8.8.8	0x4e17	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:24.664596081 CEST	192.168.2.22	8.8.8.8	0x12bb	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:24.676563025 CEST	192.168.2.22	8.8.8.8	0xc27c	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:24.689455986 CEST	192.168.2.22	8.8.8.8	0xb320	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:24.701033115 CEST	192.168.2.22	8.8.8.8	0xc95b	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:24.712390900 CEST	192.168.2.22	8.8.8.8	0x2dd3	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:24.723654985 CEST	192.168.2.22	8.8.8.8	0x88cb	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:24.734527111 CEST	192.168.2.22	8.8.8.8	0x9053	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:24.747524977 CEST	192.168.2.22	8.8.8.8	0x7fe	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:24.758791924 CEST	192.168.2.22	8.8.8.8	0x2e32	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:24.770024061 CEST	192.168.2.22	8.8.8.8	0xf9c1	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:24.786683083 CEST	192.168.2.22	8.8.8.8	0x8b98	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:24.801243067 CEST	192.168.2.22	8.8.8.8	0x7c8e	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:24.813961029 CEST	192.168.2.22	8.8.8.8	0x7f60	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:24.826884985 CEST	192.168.2.22	8.8.8.8	0x213f	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:24.838371992 CEST	192.168.2.22	8.8.8.8	0xbd41	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:24.849677086 CEST	192.168.2.22	8.8.8.8	0x8864	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:24.861412048 CEST	192.168.2.22	8.8.8.8	0x12a2	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:24.873040915 CEST	192.168.2.22	8.8.8.8	0x6805	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:24.883439064 CEST	192.168.2.22	8.8.8.8	0x7238	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:24.936633110 CEST	192.168.2.22	8.8.8.8	0x200	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:24.970705032 CEST	192.168.2.22	8.8.8.8	0xf155	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:25.008413076 CEST	192.168.2.22	8.8.8.8	0x8697	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:25.067960024 CEST	192.168.2.22	8.8.8.8	0x9c1b	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:25.079332113 CEST	192.168.2.22	8.8.8.8	0xf80f	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:25.091942072 CEST	192.168.2.22	8.8.8.8	0xcb81	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:25.102227926 CEST	192.168.2.22	8.8.8.8	0x4592	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:25.113768101 CEST	192.168.2.22	8.8.8.8	0xe1f0	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:25.125586033 CEST	192.168.2.22	8.8.8.8	0xfb7d	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:25.136658907 CEST	192.168.2.22	8.8.8.8	0xe427	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:25.148473978 CEST	192.168.2.22	8.8.8.8	0x197c	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:25.158488989 CEST	192.168.2.22	8.8.8.8	0x8454	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:25.210359097 CEST	192.168.2.22	8.8.8.8	0xfabe	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:26.235831976 CEST	192.168.2.22	8.8.8.8	0xfabe	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:26.523626089 CEST	192.168.2.22	8.8.8.8	0x8397	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:26.812155008 CEST	192.168.2.22	8.8.8.8	0x667f	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:26.830745935 CEST	192.168.2.22	8.8.8.8	0x8734	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:27.392364979 CEST	192.168.2.22	8.8.8.8	0x1f17	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:27.445027113 CEST	192.168.2.22	8.8.8.8	0x7dfb	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:27.462214947 CEST	192.168.2.22	8.8.8.8	0x918f	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:27.473182917 CEST	192.168.2.22	8.8.8.8	0x78f9	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:27.485624075 CEST	192.168.2.22	8.8.8.8	0x620e	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:27.524279118 CEST	192.168.2.22	8.8.8.8	0x1e69	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:27.535887957 CEST	192.168.2.22	8.8.8.8	0x3c0b	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:27.546457052 CEST	192.168.2.22	8.8.8.8	0x8483	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:27.560621023 CEST	192.168.2.22	8.8.8.8	0x319c	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:27.571489096 CEST	192.168.2.22	8.8.8.8	0x7a9b	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:27.610019922 CEST	192.168.2.22	8.8.8.8	0xadc6	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:27.620312929 CEST	192.168.2.22	8.8.8.8	0x2e0	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:27.632431984 CEST	192.168.2.22	8.8.8.8	0x3e0e	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:27.643552065 CEST	192.168.2.22	8.8.8.8	0xc160	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:27.655061960 CEST	192.168.2.22	8.8.8.8	0xd34a	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:27.666099072 CEST	192.168.2.22	8.8.8.8	0x58d6	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:27.678580046 CEST	192.168.2.22	8.8.8.8	0x9b25	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:27.690623045 CEST	192.168.2.22	8.8.8.8	0xcad4	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:27.701044083 CEST	192.168.2.22	8.8.8.8	0x4c25	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:27.711839914 CEST	192.168.2.22	8.8.8.8	0xfd50	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:27.741853952 CEST	192.168.2.22	8.8.8.8	0xd15b	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:27.774893999 CEST	192.168.2.22	8.8.8.8	0xb569	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:27.786559105 CEST	192.168.2.22	8.8.8.8	0xc906	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:27.796547890 CEST	192.168.2.22	8.8.8.8	0x3e36	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:27.807394981 CEST	192.168.2.22	8.8.8.8	0xe46	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:27.820005894 CEST	192.168.2.22	8.8.8.8	0xd18f	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:27.834475040 CEST	192.168.2.22	8.8.8.8	0x6583	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:27.848103046 CEST	192.168.2.22	8.8.8.8	0x4137	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:27.859375954 CEST	192.168.2.22	8.8.8.8	0xe54d	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:27.869088888 CEST	192.168.2.22	8.8.8.8	0xfaac	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:27.880573988 CEST	192.168.2.22	8.8.8.8	0xfa1a	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:27.891436100 CEST	192.168.2.22	8.8.8.8	0x6ff0	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:27.903295040 CEST	192.168.2.22	8.8.8.8	0xda69	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:27.915267944 CEST	192.168.2.22	8.8.8.8	0xd6f0	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:27.925627947 CEST	192.168.2.22	8.8.8.8	0xd897	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:27.936901093 CEST	192.168.2.22	8.8.8.8	0x9606	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:27.947443008 CEST	192.168.2.22	8.8.8.8	0x8e5b	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:27.959611893 CEST	192.168.2.22	8.8.8.8	0x384d	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:27.972465992 CEST	192.168.2.22	8.8.8.8	0x2bf3	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:27.982883930 CEST	192.168.2.22	8.8.8.8	0x7779	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:27.995497942 CEST	192.168.2.22	8.8.8.8	0x265e	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:28.008435965 CEST	192.168.2.22	8.8.8.8	0x2a82	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:28.021580935 CEST	192.168.2.22	8.8.8.8	0xc190	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:28.032071114 CEST	192.168.2.22	8.8.8.8	0x3492	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:28.044217110 CEST	192.168.2.22	8.8.8.8	0xc9ef	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:28.055150032 CEST	192.168.2.22	8.8.8.8	0x347e	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:28.086941957 CEST	192.168.2.22	8.8.8.8	0x1816	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:28.110318899 CEST	192.168.2.22	8.8.8.8	0x47bf	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:28.122837067 CEST	192.168.2.22	8.8.8.8	0x21fe	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:28.132945061 CEST	192.168.2.22	8.8.8.8	0xd460	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:28.144613028 CEST	192.168.2.22	8.8.8.8	0x405e	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:28.155025959 CEST	192.168.2.22	8.8.8.8	0xccc7	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:28.165095091 CEST	192.168.2.22	8.8.8.8	0x93f3	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:28.176724911 CEST	192.168.2.22	8.8.8.8	0x8d58	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:28.189142942 CEST	192.168.2.22	8.8.8.8	0xf769	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:28.200614929 CEST	192.168.2.22	8.8.8.8	0x61cd	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:28.213304043 CEST	192.168.2.22	8.8.8.8	0x21e0	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:28.225101948 CEST	192.168.2.22	8.8.8.8	0x302b	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:28.237034082 CEST	192.168.2.22	8.8.8.8	0x77b3	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:28.247111082 CEST	192.168.2.22	8.8.8.8	0xe6ee	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:28.258466959 CEST	192.168.2.22	8.8.8.8	0xb63	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:28.268835068 CEST	192.168.2.22	8.8.8.8	0x3009	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:28.280246973 CEST	192.168.2.22	8.8.8.8	0x39c	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:28.290688992 CEST	192.168.2.22	8.8.8.8	0x1916	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:28.302802086 CEST	192.168.2.22	8.8.8.8	0xeb1a	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:28.312881947 CEST	192.168.2.22	8.8.8.8	0xee7a	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:28.323401928 CEST	192.168.2.22	8.8.8.8	0x8b73	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:28.334672928 CEST	192.168.2.22	8.8.8.8	0x1005	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:28.349828959 CEST	192.168.2.22	8.8.8.8	0xa27a	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:28.364428043 CEST	192.168.2.22	8.8.8.8	0xbb0b	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:28.378390074 CEST	192.168.2.22	8.8.8.8	0x6381	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:28.391661882 CEST	192.168.2.22	8.8.8.8	0x37b4	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:28.402950048 CEST	192.168.2.22	8.8.8.8	0x65c5	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:28.460797071 CEST	192.168.2.22	8.8.8.8	0xa93c	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:28.471724987 CEST	192.168.2.22	8.8.8.8	0xf69c	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:28.484628916 CEST	192.168.2.22	8.8.8.8	0x358	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:28.496588945 CEST	192.168.2.22	8.8.8.8	0x8a56	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:28.506588936 CEST	192.168.2.22	8.8.8.8	0xad29	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:28.517688036 CEST	192.168.2.22	8.8.8.8	0x3774	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:28.555877924 CEST	192.168.2.22	8.8.8.8	0xc487	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:28.568240881 CEST	192.168.2.22	8.8.8.8	0x2467	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:28.579937935 CEST	192.168.2.22	8.8.8.8	0x9fd	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:28.590766907 CEST	192.168.2.22	8.8.8.8	0x8f23	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:28.603245974 CEST	192.168.2.22	8.8.8.8	0x6d09	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:28.615350008 CEST	192.168.2.22	8.8.8.8	0x88a9	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:28.625987053 CEST	192.168.2.22	8.8.8.8	0xf2ab	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:28.637466908 CEST	192.168.2.22	8.8.8.8	0x8e9f	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:28.647640944 CEST	192.168.2.22	8.8.8.8	0x53ae	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:28.657946110 CEST	192.168.2.22	8.8.8.8	0x9dea	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:28.668807030 CEST	192.168.2.22	8.8.8.8	0x5c73	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:28.679909945 CEST	192.168.2.22	8.8.8.8	0xdbe5	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:28.689997911 CEST	192.168.2.22	8.8.8.8	0x8508	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:28.702099085 CEST	192.168.2.22	8.8.8.8	0x289b	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:28.712681055 CEST	192.168.2.22	8.8.8.8	0xb0cd	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:28.723678112 CEST	192.168.2.22	8.8.8.8	0xa95f	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:28.734875917 CEST	192.168.2.22	8.8.8.8	0x1a53	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:28.746118069 CEST	192.168.2.22	8.8.8.8	0xec79	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:28.843431950 CEST	192.168.2.22	8.8.8.8	0xa39	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:28.893912077 CEST	192.168.2.22	8.8.8.8	0x8bc0	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:28.926259995 CEST	192.168.2.22	8.8.8.8	0x9c35	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:29.046175957 CEST	192.168.2.22	8.8.8.8	0x2052	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:29.114619017 CEST	192.168.2.22	8.8.8.8	0x4e65	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:29.313169003 CEST	192.168.2.22	8.8.8.8	0xbb8d	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:29.401639938 CEST	192.168.2.22	8.8.8.8	0x1a0b	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:29.622910976 CEST	192.168.2.22	8.8.8.8	0x1be5	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:31.090255022 CEST	192.168.2.22	8.8.8.8	0x5435	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:31.248735905 CEST	192.168.2.22	8.8.8.8	0xe027	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:31.394614935 CEST	192.168.2.22	8.8.8.8	0x70e8	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:31.446784019 CEST	192.168.2.22	8.8.8.8	0x7750	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:31.484693050 CEST	192.168.2.22	8.8.8.8	0x720c	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:31.499037027 CEST	192.168.2.22	8.8.8.8	0xd234	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:31.515373945 CEST	192.168.2.22	8.8.8.8	0xaefe	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:31.529459000 CEST	192.168.2.22	8.8.8.8	0x2253	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:31.544179916 CEST	192.168.2.22	8.8.8.8	0x65d3	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:31.557921886 CEST	192.168.2.22	8.8.8.8	0x50b1	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:31.570998907 CEST	192.168.2.22	8.8.8.8	0xe4d0	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:31.586050987 CEST	192.168.2.22	8.8.8.8	0x34d3	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:31.599400997 CEST	192.168.2.22	8.8.8.8	0x7900	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:31.615277052 CEST	192.168.2.22	8.8.8.8	0xa86a	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:31.627305984 CEST	192.168.2.22	8.8.8.8	0xb0a8	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:31.644740105 CEST	192.168.2.22	8.8.8.8	0xa967	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:31.745762110 CEST	192.168.2.22	8.8.8.8	0x4673	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:31.757837057 CEST	192.168.2.22	8.8.8.8	0xed99	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:31.768734932 CEST	192.168.2.22	8.8.8.8	0x9cea	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:31.781902075 CEST	192.168.2.22	8.8.8.8	0x776e	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:31.794208050 CEST	192.168.2.22	8.8.8.8	0xfd20	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:31.806504011 CEST	192.168.2.22	8.8.8.8	0xb3d3	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:31.818943977 CEST	192.168.2.22	8.8.8.8	0xebcb	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:31.832597017 CEST	192.168.2.22	8.8.8.8	0xc3e9	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:31.846596003 CEST	192.168.2.22	8.8.8.8	0xc5bb	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:31.860034943 CEST	192.168.2.22	8.8.8.8	0x5e1f	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:31.872442961 CEST	192.168.2.22	8.8.8.8	0xed87	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:31.885127068 CEST	192.168.2.22	8.8.8.8	0x87a1	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:31.898943901 CEST	192.168.2.22	8.8.8.8	0x2913	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:31.912173033 CEST	192.168.2.22	8.8.8.8	0x8ce0	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:31.923403978 CEST	192.168.2.22	8.8.8.8	0xd4dc	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:31.936708927 CEST	192.168.2.22	8.8.8.8	0xec2c	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:31.951437950 CEST	192.168.2.22	8.8.8.8	0xe2c7	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:31.964847088 CEST	192.168.2.22	8.8.8.8	0xed39	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:31.977489948 CEST	192.168.2.22	8.8.8.8	0x7d79	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:31.989140987 CEST	192.168.2.22	8.8.8.8	0xc096	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:32.004070997 CEST	192.168.2.22	8.8.8.8	0x473b	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:32.048125029 CEST	192.168.2.22	8.8.8.8	0xe722	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:32.063545942 CEST	192.168.2.22	8.8.8.8	0xec9c	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:32.076282024 CEST	192.168.2.22	8.8.8.8	0x23ad	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:32.088857889 CEST	192.168.2.22	8.8.8.8	0x6590	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:32.102654934 CEST	192.168.2.22	8.8.8.8	0xb871	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:32.115251064 CEST	192.168.2.22	8.8.8.8	0xd49a	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:32.128294945 CEST	192.168.2.22	8.8.8.8	0xe122	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:32.141220093 CEST	192.168.2.22	8.8.8.8	0xce8	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:32.154386997 CEST	192.168.2.22	8.8.8.8	0x4239	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:32.166331053 CEST	192.168.2.22	8.8.8.8	0x2618	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:32.182318926 CEST	192.168.2.22	8.8.8.8	0xf3c9	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:32.194624901 CEST	192.168.2.22	8.8.8.8	0xa5fb	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:32.211657047 CEST	192.168.2.22	8.8.8.8	0xf4f9	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:32.223941088 CEST	192.168.2.22	8.8.8.8	0x33bb	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:32.236794949 CEST	192.168.2.22	8.8.8.8	0x45b9	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:32.248071909 CEST	192.168.2.22	8.8.8.8	0xd041	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:32.260385036 CEST	192.168.2.22	8.8.8.8	0xd022	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:32.272403955 CEST	192.168.2.22	8.8.8.8	0x6cb4	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:32.284599066 CEST	192.168.2.22	8.8.8.8	0x4ace	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:32.297656059 CEST	192.168.2.22	8.8.8.8	0x1eab	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:32.310085058 CEST	192.168.2.22	8.8.8.8	0xb230	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:32.321536064 CEST	192.168.2.22	8.8.8.8	0x2ce8	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:32.334599972 CEST	192.168.2.22	8.8.8.8	0xbc40	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:32.410432100 CEST	192.168.2.22	8.8.8.8	0x6ec9	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:32.421858072 CEST	192.168.2.22	8.8.8.8	0xde55	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:32.469036102 CEST	192.168.2.22	8.8.8.8	0x6878	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:32.494198084 CEST	192.168.2.22	8.8.8.8	0xd179	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:32.565191984 CEST	192.168.2.22	8.8.8.8	0x5c88	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:32.631894112 CEST	192.168.2.22	8.8.8.8	0xa1ee	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:32.773205996 CEST	192.168.2.22	8.8.8.8	0xf697	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:32.999581099 CEST	192.168.2.22	8.8.8.8	0xc8da	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:33.256340027 CEST	192.168.2.22	8.8.8.8	0x853d	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:33.269983053 CEST	192.168.2.22	8.8.8.8	0x1707	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:33.284737110 CEST	192.168.2.22	8.8.8.8	0xee0	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:33.299439907 CEST	192.168.2.22	8.8.8.8	0x458e	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:33.354198933 CEST	192.168.2.22	8.8.8.8	0xd67e	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:33.424624920 CEST	192.168.2.22	8.8.8.8	0x6429	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:33.453185081 CEST	192.168.2.22	8.8.8.8	0xe144	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:33.492805958 CEST	192.168.2.22	8.8.8.8	0x66b5	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:33.820123911 CEST	192.168.2.22	8.8.8.8	0xb0aa	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:34.453269005 CEST	192.168.2.22	8.8.8.8	0xc274	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:35.334356070 CEST	192.168.2.22	8.8.8.8	0x59cd	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:35.356266022 CEST	192.168.2.22	8.8.8.8	0x65db	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:35.369194984 CEST	192.168.2.22	8.8.8.8	0x4386	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:35.381779909 CEST	192.168.2.22	8.8.8.8	0xa9fc	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:35.393152952 CEST	192.168.2.22	8.8.8.8	0x864b	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:35.407747984 CEST	192.168.2.22	8.8.8.8	0xa249	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:35.419393063 CEST	192.168.2.22	8.8.8.8	0x5bc3	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:35.450370073 CEST	192.168.2.22	8.8.8.8	0xf01c	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:35.483546972 CEST	192.168.2.22	8.8.8.8	0x3af2	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:35.496901989 CEST	192.168.2.22	8.8.8.8	0xc21d	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:35.510411024 CEST	192.168.2.22	8.8.8.8	0xe83f	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:35.524202108 CEST	192.168.2.22	8.8.8.8	0x83d2	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:35.536099911 CEST	192.168.2.22	8.8.8.8	0x382b	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:35.548469067 CEST	192.168.2.22	8.8.8.8	0x84e0	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:35.561335087 CEST	192.168.2.22	8.8.8.8	0xa13	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:35.574431896 CEST	192.168.2.22	8.8.8.8	0xc64c	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:35.586615086 CEST	192.168.2.22	8.8.8.8	0x5cf	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:35.599098921 CEST	192.168.2.22	8.8.8.8	0x8854	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:35.611310005 CEST	192.168.2.22	8.8.8.8	0x6f0a	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:35.624620914 CEST	192.168.2.22	8.8.8.8	0xaeef	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:35.636693001 CEST	192.168.2.22	8.8.8.8	0xa64e	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:35.648920059 CEST	192.168.2.22	8.8.8.8	0xcba6	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:35.661444902 CEST	192.168.2.22	8.8.8.8	0xfd4f	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:35.673983097 CEST	192.168.2.22	8.8.8.8	0x5305	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:35.685669899 CEST	192.168.2.22	8.8.8.8	0x4d13	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:35.706140041 CEST	192.168.2.22	8.8.8.8	0x760	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:35.718339920 CEST	192.168.2.22	8.8.8.8	0xe79d	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:35.730978012 CEST	192.168.2.22	8.8.8.8	0xf08b	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:35.745811939 CEST	192.168.2.22	8.8.8.8	0x7e80	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:35.758476019 CEST	192.168.2.22	8.8.8.8	0xdd2f	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:35.771224022 CEST	192.168.2.22	8.8.8.8	0xb795	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:35.824836969 CEST	192.168.2.22	8.8.8.8	0xae4d	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:35.840332031 CEST	192.168.2.22	8.8.8.8	0xe1ca	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:35.861169100 CEST	192.168.2.22	8.8.8.8	0x1efd	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:35.877757072 CEST	192.168.2.22	8.8.8.8	0xc24c	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:35.890901089 CEST	192.168.2.22	8.8.8.8	0xc717	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:35.946599960 CEST	192.168.2.22	8.8.8.8	0xd732	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:36.177124023 CEST	192.168.2.22	8.8.8.8	0xe7d7	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:36.233052015 CEST	192.168.2.22	8.8.8.8	0xd9b1	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:36.249905109 CEST	192.168.2.22	8.8.8.8	0x3769	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:36.289887905 CEST	192.168.2.22	8.8.8.8	0xe99d	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:36.314882994 CEST	192.168.2.22	8.8.8.8	0xa966	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:36.370524883 CEST	192.168.2.22	8.8.8.8	0x69e9	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:36.381923914 CEST	192.168.2.22	8.8.8.8	0x3106	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:36.553848982 CEST	192.168.2.22	8.8.8.8	0xed88	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:36.567078114 CEST	192.168.2.22	8.8.8.8	0xa57a	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:36.577961922 CEST	192.168.2.22	8.8.8.8	0xd5e7	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:36.591743946 CEST	192.168.2.22	8.8.8.8	0x94aa	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:36.602631092 CEST	192.168.2.22	8.8.8.8	0x344d	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:36.615466118 CEST	192.168.2.22	8.8.8.8	0xd956	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:36.626980066 CEST	192.168.2.22	8.8.8.8	0xb317	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:36.654630899 CEST	192.168.2.22	8.8.8.8	0x8e7d	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:36.669581890 CEST	192.168.2.22	8.8.8.8	0xdaa3	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:36.680896997 CEST	192.168.2.22	8.8.8.8	0x6203	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:36.691067934 CEST	192.168.2.22	8.8.8.8	0x1ff4	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:36.702344894 CEST	192.168.2.22	8.8.8.8	0x43ce	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:36.713953972 CEST	192.168.2.22	8.8.8.8	0x1dfb	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:36.725173950 CEST	192.168.2.22	8.8.8.8	0x23b6	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:36.735044956 CEST	192.168.2.22	8.8.8.8	0x7557	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:36.745336056 CEST	192.168.2.22	8.8.8.8	0x7229	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:36.755779028 CEST	192.168.2.22	8.8.8.8	0x9447	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:36.830951929 CEST	192.168.2.22	8.8.8.8	0x29d	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:36.939081907 CEST	192.168.2.22	8.8.8.8	0x1249	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:36.956973076 CEST	192.168.2.22	8.8.8.8	0xc435	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:36.972404003 CEST	192.168.2.22	8.8.8.8	0xff5f	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:36.991370916 CEST	192.168.2.22	8.8.8.8	0x436	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:37.003119946 CEST	192.168.2.22	8.8.8.8	0x61fb	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:37.019803047 CEST	192.168.2.22	8.8.8.8	0x5104	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:37.034955025 CEST	192.168.2.22	8.8.8.8	0x6090	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:37.082606077 CEST	192.168.2.22	8.8.8.8	0x513f	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:37.094755888 CEST	192.168.2.22	8.8.8.8	0xdc3b	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:37.448693991 CEST	192.168.2.22	8.8.8.8	0xce4	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:37.936898947 CEST	192.168.2.22	8.8.8.8	0x7015	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:38.086292028 CEST	192.168.2.22	8.8.8.8	0x3fbf	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:38.176562071 CEST	192.168.2.22	8.8.8.8	0xb266	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:38.291304111 CEST	192.168.2.22	8.8.8.8	0x51f6	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:38.343413115 CEST	192.168.2.22	8.8.8.8	0x811f	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:38.357004881 CEST	192.168.2.22	8.8.8.8	0x6685	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:38.370233059 CEST	192.168.2.22	8.8.8.8	0xc7e8	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:38.383984089 CEST	192.168.2.22	8.8.8.8	0x97bf	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:38.396714926 CEST	192.168.2.22	8.8.8.8	0xeb67	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:38.410675049 CEST	192.168.2.22	8.8.8.8	0xb68a	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:38.426609039 CEST	192.168.2.22	8.8.8.8	0x3fe7	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:38.439409971 CEST	192.168.2.22	8.8.8.8	0x1470	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:38.451778889 CEST	192.168.2.22	8.8.8.8	0x5e35	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:38.463471889 CEST	192.168.2.22	8.8.8.8	0xfe01	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:38.476377010 CEST	192.168.2.22	8.8.8.8	0x3e9a	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:38.493262053 CEST	192.168.2.22	8.8.8.8	0xa25b	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:38.505697966 CEST	192.168.2.22	8.8.8.8	0xfae0	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:38.518832922 CEST	192.168.2.22	8.8.8.8	0x3156	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:38.531403065 CEST	192.168.2.22	8.8.8.8	0x456f	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:38.584202051 CEST	192.168.2.22	8.8.8.8	0x6f0f	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:38.596504927 CEST	192.168.2.22	8.8.8.8	0x8a91	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:38.919110060 CEST	192.168.2.22	8.8.8.8	0x82d9	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:38.969468117 CEST	192.168.2.22	8.8.8.8	0x1aeb	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:39.016916037 CEST	192.168.2.22	8.8.8.8	0x855d	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:39.031719923 CEST	192.168.2.22	8.8.8.8	0x89f4	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:39.043411970 CEST	192.168.2.22	8.8.8.8	0xa701	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:39.056238890 CEST	192.168.2.22	8.8.8.8	0xe30f	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:39.078131914 CEST	192.168.2.22	8.8.8.8	0xd373	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:39.090102911 CEST	192.168.2.22	8.8.8.8	0x14d5	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:39.102241039 CEST	192.168.2.22	8.8.8.8	0xf9da	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:39.114533901 CEST	192.168.2.22	8.8.8.8	0xa2de	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:39.127511978 CEST	192.168.2.22	8.8.8.8	0x544c	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:39.140067101 CEST	192.168.2.22	8.8.8.8	0x1d92	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:39.152417898 CEST	192.168.2.22	8.8.8.8	0xe7e4	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:39.970216990 CEST	192.168.2.22	8.8.8.8	0x4b89	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:39.991415977 CEST	192.168.2.22	8.8.8.8	0x2c74	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:40.026655912 CEST	192.168.2.22	8.8.8.8	0xb1cc	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:40.039360046 CEST	192.168.2.22	8.8.8.8	0xde46	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:40.050515890 CEST	192.168.2.22	8.8.8.8	0xea02	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:40.063332081 CEST	192.168.2.22	8.8.8.8	0x1f75	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:40.073590040 CEST	192.168.2.22	8.8.8.8	0x5c6c	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:40.084580898 CEST	192.168.2.22	8.8.8.8	0x922d	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:40.095681906 CEST	192.168.2.22	8.8.8.8	0xcaa9	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:40.107789993 CEST	192.168.2.22	8.8.8.8	0x859e	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:40.122319937 CEST	192.168.2.22	8.8.8.8	0x724b	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:40.137978077 CEST	192.168.2.22	8.8.8.8	0x504e	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:40.149480104 CEST	192.168.2.22	8.8.8.8	0x9b53	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:40.163132906 CEST	192.168.2.22	8.8.8.8	0xfa49	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:40.175409079 CEST	192.168.2.22	8.8.8.8	0x5545	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:40.187879086 CEST	192.168.2.22	8.8.8.8	0x93cf	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:40.200012922 CEST	192.168.2.22	8.8.8.8	0x760d	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:40.210942030 CEST	192.168.2.22	8.8.8.8	0x2544	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:40.222155094 CEST	192.168.2.22	8.8.8.8	0x888e	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:40.233777046 CEST	192.168.2.22	8.8.8.8	0x432f	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:40.244554043 CEST	192.168.2.22	8.8.8.8	0xba68	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:40.287422895 CEST	192.168.2.22	8.8.8.8	0x42bd	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:40.299415112 CEST	192.168.2.22	8.8.8.8	0xa3b6	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:40.311937094 CEST	192.168.2.22	8.8.8.8	0x7a25	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:40.325787067 CEST	192.168.2.22	8.8.8.8	0xc2ea	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:40.366163015 CEST	192.168.2.22	8.8.8.8	0xd3e	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:40.410048962 CEST	192.168.2.22	8.8.8.8	0xf89e	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:40.428179979 CEST	192.168.2.22	8.8.8.8	0xef2b	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:40.460231066 CEST	192.168.2.22	8.8.8.8	0x6259	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:40.476926088 CEST	192.168.2.22	8.8.8.8	0x4d8d	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:42.909593105 CEST	192.168.2.22	8.8.8.8	0x6d98	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:43.109080076 CEST	192.168.2.22	8.8.8.8	0x9daa	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:43.122184992 CEST	192.168.2.22	8.8.8.8	0x2787	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:43.136665106 CEST	192.168.2.22	8.8.8.8	0x3fe	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:43.152208090 CEST	192.168.2.22	8.8.8.8	0x7180	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:43.181205988 CEST	192.168.2.22	8.8.8.8	0x6a0a	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:43.224090099 CEST	192.168.2.22	8.8.8.8	0x5b34	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:43.240926027 CEST	192.168.2.22	8.8.8.8	0x3ac2	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:43.257478952 CEST	192.168.2.22	8.8.8.8	0xc3df	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:43.273410082 CEST	192.168.2.22	8.8.8.8	0x4258	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:43.287684917 CEST	192.168.2.22	8.8.8.8	0x7416	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:43.300326109 CEST	192.168.2.22	8.8.8.8	0x4a5b	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:43.312752962 CEST	192.168.2.22	8.8.8.8	0xf219	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:43.325511932 CEST	192.168.2.22	8.8.8.8	0x1049	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:43.336277008 CEST	192.168.2.22	8.8.8.8	0x917d	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:43.347788095 CEST	192.168.2.22	8.8.8.8	0xf05a	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:43.360430002 CEST	192.168.2.22	8.8.8.8	0xcd2c	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:43.374303102 CEST	192.168.2.22	8.8.8.8	0x4edb	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:43.386022091 CEST	192.168.2.22	8.8.8.8	0x4c7d	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:43.398566008 CEST	192.168.2.22	8.8.8.8	0x6e7	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:43.410938978 CEST	192.168.2.22	8.8.8.8	0xee24	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:43.422205925 CEST	192.168.2.22	8.8.8.8	0x5a64	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:43.434464931 CEST	192.168.2.22	8.8.8.8	0x38a1	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:43.449575901 CEST	192.168.2.22	8.8.8.8	0xaf56	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:43.463150024 CEST	192.168.2.22	8.8.8.8	0xcc7	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:43.562920094 CEST	192.168.2.22	8.8.8.8	0xca13	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:43.576350927 CEST	192.168.2.22	8.8.8.8	0x4074	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:43.589380980 CEST	192.168.2.22	8.8.8.8	0xc09a	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:43.602437973 CEST	192.168.2.22	8.8.8.8	0x879f	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:43.615820885 CEST	192.168.2.22	8.8.8.8	0x806	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:43.628165007 CEST	192.168.2.22	8.8.8.8	0xbfec	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:43.642862082 CEST	192.168.2.22	8.8.8.8	0x44cf	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:43.657182932 CEST	192.168.2.22	8.8.8.8	0xca7a	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:43.671331882 CEST	192.168.2.22	8.8.8.8	0xaaf8	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:43.682789087 CEST	192.168.2.22	8.8.8.8	0xf087	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:43.695913076 CEST	192.168.2.22	8.8.8.8	0xf67d	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:43.707602024 CEST	192.168.2.22	8.8.8.8	0xf168	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:43.720578909 CEST	192.168.2.22	8.8.8.8	0xccb	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:43.732938051 CEST	192.168.2.22	8.8.8.8	0x4ab6	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:43.746248960 CEST	192.168.2.22	8.8.8.8	0xff55	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:43.757949114 CEST	192.168.2.22	8.8.8.8	0xfdd3	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:43.771579981 CEST	192.168.2.22	8.8.8.8	0xf463	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:43.783360958 CEST	192.168.2.22	8.8.8.8	0xf3d6	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:43.797116995 CEST	192.168.2.22	8.8.8.8	0xeb39	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:43.807677031 CEST	192.168.2.22	8.8.8.8	0x44a9	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:43.820681095 CEST	192.168.2.22	8.8.8.8	0x1d98	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:43.832372904 CEST	192.168.2.22	8.8.8.8	0x12fd	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:43.843836069 CEST	192.168.2.22	8.8.8.8	0x754b	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:43.873146057 CEST	192.168.2.22	8.8.8.8	0x20d2	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:43.910068989 CEST	192.168.2.22	8.8.8.8	0xbc9e	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:43.922765017 CEST	192.168.2.22	8.8.8.8	0x190	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:43.935678959 CEST	192.168.2.22	8.8.8.8	0x93eb	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:43.948488951 CEST	192.168.2.22	8.8.8.8	0x8165	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:43.963143110 CEST	192.168.2.22	8.8.8.8	0xe2c9	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:43.976696014 CEST	192.168.2.22	8.8.8.8	0x43db	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:43.988949060 CEST	192.168.2.22	8.8.8.8	0xaf8d	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:44.000380993 CEST	192.168.2.22	8.8.8.8	0x9a07	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:44.013180017 CEST	192.168.2.22	8.8.8.8	0x9909	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:44.024674892 CEST	192.168.2.22	8.8.8.8	0x323b	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:44.036005020 CEST	192.168.2.22	8.8.8.8	0xcde5	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:44.046834946 CEST	192.168.2.22	8.8.8.8	0x8718	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:44.058017969 CEST	192.168.2.22	8.8.8.8	0x96b0	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:44.069336891 CEST	192.168.2.22	8.8.8.8	0xe583	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:44.080030918 CEST	192.168.2.22	8.8.8.8	0xd5cb	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:44.090940952 CEST	192.168.2.22	8.8.8.8	0xc37e	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:44.102176905 CEST	192.168.2.22	8.8.8.8	0x1134	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:44.113188028 CEST	192.168.2.22	8.8.8.8	0xf534	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:44.125435114 CEST	192.168.2.22	8.8.8.8	0x834	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:44.135188103 CEST	192.168.2.22	8.8.8.8	0x6356	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:44.147169113 CEST	192.168.2.22	8.8.8.8	0x73fd	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:44.159275055 CEST	192.168.2.22	8.8.8.8	0x3929	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:44.171514988 CEST	192.168.2.22	8.8.8.8	0x54fd	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:44.183609962 CEST	192.168.2.22	8.8.8.8	0x222	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:44.195362091 CEST	192.168.2.22	8.8.8.8	0x1502	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:44.249227047 CEST	192.168.2.22	8.8.8.8	0xf291	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:44.261104107 CEST	192.168.2.22	8.8.8.8	0x43c9	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:44.272429943 CEST	192.168.2.22	8.8.8.8	0x846	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:44.283721924 CEST	192.168.2.22	8.8.8.8	0x1a4b	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:44.295743942 CEST	192.168.2.22	8.8.8.8	0x3606	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:44.309072018 CEST	192.168.2.22	8.8.8.8	0xea1e	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:44.320103884 CEST	192.168.2.22	8.8.8.8	0x2b7d	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:44.332380056 CEST	192.168.2.22	8.8.8.8	0x4023	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:44.343842030 CEST	192.168.2.22	8.8.8.8	0xef6f	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:44.356635094 CEST	192.168.2.22	8.8.8.8	0xd6a1	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:44.372234106 CEST	192.168.2.22	8.8.8.8	0xa781	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:44.383894920 CEST	192.168.2.22	8.8.8.8	0xed68	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:44.394243002 CEST	192.168.2.22	8.8.8.8	0x2010	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:44.407191038 CEST	192.168.2.22	8.8.8.8	0x3a7	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:44.418368101 CEST	192.168.2.22	8.8.8.8	0x2583	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:44.430007935 CEST	192.168.2.22	8.8.8.8	0x82eb	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:44.440814972 CEST	192.168.2.22	8.8.8.8	0xbc74	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:44.452460051 CEST	192.168.2.22	8.8.8.8	0x8b4	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:44.462968111 CEST	192.168.2.22	8.8.8.8	0x93f3	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:44.474303007 CEST	192.168.2.22	8.8.8.8	0xd16e	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:44.485444069 CEST	192.168.2.22	8.8.8.8	0x5b06	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:44.495724916 CEST	192.168.2.22	8.8.8.8	0x14eb	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:44.506485939 CEST	192.168.2.22	8.8.8.8	0xafdd	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:44.518034935 CEST	192.168.2.22	8.8.8.8	0x7f72	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:44.528271914 CEST	192.168.2.22	8.8.8.8	0x70e8	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:44.538438082 CEST	192.168.2.22	8.8.8.8	0x3643	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:44.611454964 CEST	192.168.2.22	8.8.8.8	0xe25f	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:44.641007900 CEST	192.168.2.22	8.8.8.8	0x876e	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:44.777144909 CEST	192.168.2.22	8.8.8.8	0x7bb4	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:44.836338997 CEST	192.168.2.22	8.8.8.8	0xc1cc	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:44.968996048 CEST	192.168.2.22	8.8.8.8	0x573a	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:45.194341898 CEST	192.168.2.22	8.8.8.8	0x95d4	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:45.218769073 CEST	192.168.2.22	8.8.8.8	0x2558	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:45.281982899 CEST	192.168.2.22	8.8.8.8	0x46a3	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:45.311297894 CEST	192.168.2.22	8.8.8.8	0xad5e	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:45.678591967 CEST	192.168.2.22	8.8.8.8	0x34c8	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:45.739650011 CEST	192.168.2.22	8.8.8.8	0xfddc	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:46.211412907 CEST	192.168.2.22	8.8.8.8	0x8098	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:46.434921980 CEST	192.168.2.22	8.8.8.8	0xed64	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:46.465754986 CEST	192.168.2.22	8.8.8.8	0x957	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:46.477771997 CEST	192.168.2.22	8.8.8.8	0x271b	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:46.490230083 CEST	192.168.2.22	8.8.8.8	0x50e7	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:46.502291918 CEST	192.168.2.22	8.8.8.8	0xc5af	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:46.515041113 CEST	192.168.2.22	8.8.8.8	0x3805	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:46.527323008 CEST	192.168.2.22	8.8.8.8	0x57eb	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:46.539135933 CEST	192.168.2.22	8.8.8.8	0x4dfa	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:46.551203012 CEST	192.168.2.22	8.8.8.8	0xd55b	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:46.564532042 CEST	192.168.2.22	8.8.8.8	0x98a8	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:46.576426983 CEST	192.168.2.22	8.8.8.8	0x9386	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:46.589343071 CEST	192.168.2.22	8.8.8.8	0x7cb0	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:46.602144957 CEST	192.168.2.22	8.8.8.8	0xeafa	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:46.615958929 CEST	192.168.2.22	8.8.8.8	0xfb35	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:46.628107071 CEST	192.168.2.22	8.8.8.8	0x925e	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:46.664731026 CEST	192.168.2.22	8.8.8.8	0xcb8c	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:46.676819086 CEST	192.168.2.22	8.8.8.8	0x2638	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:46.689724922 CEST	192.168.2.22	8.8.8.8	0xc7ff	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:46.706196070 CEST	192.168.2.22	8.8.8.8	0xcacd	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:46.927764893 CEST	192.168.2.22	8.8.8.8	0x1c2b	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:47.050178051 CEST	192.168.2.22	8.8.8.8	0x2819	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:47.082010984 CEST	192.168.2.22	8.8.8.8	0x20d2	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:47.094419003 CEST	192.168.2.22	8.8.8.8	0x98c2	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:47.105982065 CEST	192.168.2.22	8.8.8.8	0x10c0	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:47.117670059 CEST	192.168.2.22	8.8.8.8	0x7a80	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:47.128577948 CEST	192.168.2.22	8.8.8.8	0xfc63	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:47.139673948 CEST	192.168.2.22	8.8.8.8	0xbc68	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:47.150557041 CEST	192.168.2.22	8.8.8.8	0x2e64	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:47.159975052 CEST	192.168.2.22	8.8.8.8	0xaf38	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:47.171436071 CEST	192.168.2.22	8.8.8.8	0x904c	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:47.183923960 CEST	192.168.2.22	8.8.8.8	0xe602	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:47.199080944 CEST	192.168.2.22	8.8.8.8	0xee0e	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:47.209708929 CEST	192.168.2.22	8.8.8.8	0xde47	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:47.222279072 CEST	192.168.2.22	8.8.8.8	0xf2c8	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:47.231857061 CEST	192.168.2.22	8.8.8.8	0xb46d	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:47.241689920 CEST	192.168.2.22	8.8.8.8	0xb46f	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:47.251085043 CEST	192.168.2.22	8.8.8.8	0x93f5	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:47.260667086 CEST	192.168.2.22	8.8.8.8	0x8dbd	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:47.271730900 CEST	192.168.2.22	8.8.8.8	0xf44	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:47.281755924 CEST	192.168.2.22	8.8.8.8	0x3f5b	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:47.291465998 CEST	192.168.2.22	8.8.8.8	0x395d	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:47.300906897 CEST	192.168.2.22	8.8.8.8	0xdfe	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:47.310309887 CEST	192.168.2.22	8.8.8.8	0x39e1	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:47.319740057 CEST	192.168.2.22	8.8.8.8	0xfc97	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:47.329288006 CEST	192.168.2.22	8.8.8.8	0x7216	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:47.338581085 CEST	192.168.2.22	8.8.8.8	0x5569	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:47.347841024 CEST	192.168.2.22	8.8.8.8	0x57e0	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:47.357439041 CEST	192.168.2.22	8.8.8.8	0xbeb1	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:47.366750956 CEST	192.168.2.22	8.8.8.8	0xf441	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:47.379019022 CEST	192.168.2.22	8.8.8.8	0x1093	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:47.388319969 CEST	192.168.2.22	8.8.8.8	0x1aa2	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:47.401173115 CEST	192.168.2.22	8.8.8.8	0xaa03	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:47.411098957 CEST	192.168.2.22	8.8.8.8	0xbba5	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:47.423233032 CEST	192.168.2.22	8.8.8.8	0xdd25	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:47.432821989 CEST	192.168.2.22	8.8.8.8	0xc76f	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:47.443748951 CEST	192.168.2.22	8.8.8.8	0xb5d5	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:47.453943968 CEST	192.168.2.22	8.8.8.8	0x3bfc	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:47.464253902 CEST	192.168.2.22	8.8.8.8	0x4a3a	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:47.476310968 CEST	192.168.2.22	8.8.8.8	0x1c31	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:47.487566948 CEST	192.168.2.22	8.8.8.8	0xae68	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:47.498884916 CEST	192.168.2.22	8.8.8.8	0xbd19	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:47.509624004 CEST	192.168.2.22	8.8.8.8	0x5ed	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:47.520941973 CEST	192.168.2.22	8.8.8.8	0xe831	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:47.535337925 CEST	192.168.2.22	8.8.8.8	0xe60a	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:47.545715094 CEST	192.168.2.22	8.8.8.8	0xc012	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:47.556164980 CEST	192.168.2.22	8.8.8.8	0x3b0b	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:47.566533089 CEST	192.168.2.22	8.8.8.8	0x3b46	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:47.577366114 CEST	192.168.2.22	8.8.8.8	0x47ce	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:47.588030100 CEST	192.168.2.22	8.8.8.8	0xb82b	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:47.599875927 CEST	192.168.2.22	8.8.8.8	0x153f	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:47.610230923 CEST	192.168.2.22	8.8.8.8	0xe89d	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:47.621273041 CEST	192.168.2.22	8.8.8.8	0x3306	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:47.632114887 CEST	192.168.2.22	8.8.8.8	0xa124	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:47.642879009 CEST	192.168.2.22	8.8.8.8	0xbdf3	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:47.655494928 CEST	192.168.2.22	8.8.8.8	0xaaf	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:47.675693035 CEST	192.168.2.22	8.8.8.8	0xb1c1	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:47.689837933 CEST	192.168.2.22	8.8.8.8	0x3973	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:47.701311111 CEST	192.168.2.22	8.8.8.8	0x7d17	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:47.711581945 CEST	192.168.2.22	8.8.8.8	0xbd22	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:47.721318960 CEST	192.168.2.22	8.8.8.8	0xc29a	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:47.755966902 CEST	192.168.2.22	8.8.8.8	0x7751	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:47.820103884 CEST	192.168.2.22	8.8.8.8	0x1c45	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:47.880903959 CEST	192.168.2.22	8.8.8.8	0xddab	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:47.902932882 CEST	192.168.2.22	8.8.8.8	0x3299	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:47.940429926 CEST	192.168.2.22	8.8.8.8	0xf049	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:48.003144979 CEST	192.168.2.22	8.8.8.8	0x82d1	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:48.037003994 CEST	192.168.2.22	8.8.8.8	0xc3b5	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:48.072889090 CEST	192.168.2.22	8.8.8.8	0x5321	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:48.160476923 CEST	192.168.2.22	8.8.8.8	0x5be3	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:48.202785015 CEST	192.168.2.22	8.8.8.8	0xdd2	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:48.213552952 CEST	192.168.2.22	8.8.8.8	0xfd47	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:48.229027987 CEST	192.168.2.22	8.8.8.8	0x40e6	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:48.239279032 CEST	192.168.2.22	8.8.8.8	0x156d	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:48.249926090 CEST	192.168.2.22	8.8.8.8	0xe8c1	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:48.263020039 CEST	192.168.2.22	8.8.8.8	0x266d	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:48.273094893 CEST	192.168.2.22	8.8.8.8	0xaca3	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:48.282784939 CEST	192.168.2.22	8.8.8.8	0xac96	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:48.292943954 CEST	192.168.2.22	8.8.8.8	0x18fb	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:48.305094957 CEST	192.168.2.22	8.8.8.8	0xb2cc	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:48.316399097 CEST	192.168.2.22	8.8.8.8	0x84c4	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:48.353517056 CEST	192.168.2.22	8.8.8.8	0x983a	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:48.362989902 CEST	192.168.2.22	8.8.8.8	0xa080	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:48.372947931 CEST	192.168.2.22	8.8.8.8	0x6cd3	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:48.383385897 CEST	192.168.2.22	8.8.8.8	0x234e	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:48.396570921 CEST	192.168.2.22	8.8.8.8	0x6001	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:48.406846046 CEST	192.168.2.22	8.8.8.8	0xc0f1	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:48.416085005 CEST	192.168.2.22	8.8.8.8	0x31d8	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:48.426263094 CEST	192.168.2.22	8.8.8.8	0x4d6d	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:48.628482103 CEST	192.168.2.22	8.8.8.8	0x92b6	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:49.519632101 CEST	192.168.2.22	8.8.8.8	0x95e	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:49.529592037 CEST	192.168.2.22	8.8.8.8	0x92b8	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:49.571460009 CEST	192.168.2.22	8.8.8.8	0x4179	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:49.580883980 CEST	192.168.2.22	8.8.8.8	0x739e	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:49.592556000 CEST	192.168.2.22	8.8.8.8	0xf603	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:49.603048086 CEST	192.168.2.22	8.8.8.8	0xdf1c	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:49.613337040 CEST	192.168.2.22	8.8.8.8	0x5c13	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:49.623656034 CEST	192.168.2.22	8.8.8.8	0xba6c	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:49.633477926 CEST	192.168.2.22	8.8.8.8	0x9562	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:49.643587112 CEST	192.168.2.22	8.8.8.8	0xa5d1	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:49.653309107 CEST	192.168.2.22	8.8.8.8	0x8703	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:49.663743973 CEST	192.168.2.22	8.8.8.8	0xe8aa	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:49.673651934 CEST	192.168.2.22	8.8.8.8	0xc51c	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:49.683451891 CEST	192.168.2.22	8.8.8.8	0x7101	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:49.694145918 CEST	192.168.2.22	8.8.8.8	0x6469	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:49.703960896 CEST	192.168.2.22	8.8.8.8	0x7256	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:49.713743925 CEST	192.168.2.22	8.8.8.8	0xbddc	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:49.724292040 CEST	192.168.2.22	8.8.8.8	0xe9e4	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:49.734688997 CEST	192.168.2.22	8.8.8.8	0xa961	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:49.745474100 CEST	192.168.2.22	8.8.8.8	0x3c4f	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:49.757364035 CEST	192.168.2.22	8.8.8.8	0xcf3e	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:49.767275095 CEST	192.168.2.22	8.8.8.8	0x79be	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:49.778553963 CEST	192.168.2.22	8.8.8.8	0xfd7e	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:49.789009094 CEST	192.168.2.22	8.8.8.8	0x5529	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:49.800283909 CEST	192.168.2.22	8.8.8.8	0xf9ea	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:49.814606905 CEST	192.168.2.22	8.8.8.8	0x834b	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:49.904824018 CEST	192.168.2.22	8.8.8.8	0x459a	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:49.914802074 CEST	192.168.2.22	8.8.8.8	0x8b4	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:49.925617933 CEST	192.168.2.22	8.8.8.8	0x3afe	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:49.936095953 CEST	192.168.2.22	8.8.8.8	0x2075	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:49.946369886 CEST	192.168.2.22	8.8.8.8	0x780a	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:49.956190109 CEST	192.168.2.22	8.8.8.8	0x4fa3	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:49.966231108 CEST	192.168.2.22	8.8.8.8	0x653e	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:49.976780891 CEST	192.168.2.22	8.8.8.8	0xecd7	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:49.987123013 CEST	192.168.2.22	8.8.8.8	0xc543	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:49.996788979 CEST	192.168.2.22	8.8.8.8	0x9543	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:50.008486032 CEST	192.168.2.22	8.8.8.8	0x8cf5	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:50.019001007 CEST	192.168.2.22	8.8.8.8	0xd25a	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:50.029812098 CEST	192.168.2.22	8.8.8.8	0x751d	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:50.039870024 CEST	192.168.2.22	8.8.8.8	0xc749	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:50.050271034 CEST	192.168.2.22	8.8.8.8	0xe01e	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:50.059777021 CEST	192.168.2.22	8.8.8.8	0x6c92	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:50.070363998 CEST	192.168.2.22	8.8.8.8	0x364d	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:50.110320091 CEST	192.168.2.22	8.8.8.8	0xd7e9	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:50.149486065 CEST	192.168.2.22	8.8.8.8	0xf8c2	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:50.163577080 CEST	192.168.2.22	8.8.8.8	0x9a43	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:50.173955917 CEST	192.168.2.22	8.8.8.8	0x8284	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:50.184288979 CEST	192.168.2.22	8.8.8.8	0x37f5	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:50.194098949 CEST	192.168.2.22	8.8.8.8	0xd7b3	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:50.204750061 CEST	192.168.2.22	8.8.8.8	0xd97b	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:50.214484930 CEST	192.168.2.22	8.8.8.8	0x35ff	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:50.225116014 CEST	192.168.2.22	8.8.8.8	0xef31	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:50.236166954 CEST	192.168.2.22	8.8.8.8	0x14ad	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:50.246923923 CEST	192.168.2.22	8.8.8.8	0x27ee	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:50.260309935 CEST	192.168.2.22	8.8.8.8	0x2154	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:50.273611069 CEST	192.168.2.22	8.8.8.8	0x22ab	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:50.287487030 CEST	192.168.2.22	8.8.8.8	0x368c	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:50.302063942 CEST	192.168.2.22	8.8.8.8	0xeb20	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:50.388967037 CEST	192.168.2.22	8.8.8.8	0x2f7a	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:50.400338888 CEST	192.168.2.22	8.8.8.8	0x4f62	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:50.411164045 CEST	192.168.2.22	8.8.8.8	0x2851	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:50.423883915 CEST	192.168.2.22	8.8.8.8	0xefc1	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:50.436045885 CEST	192.168.2.22	8.8.8.8	0xeacd	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:50.448343992 CEST	192.168.2.22	8.8.8.8	0x78c4	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:50.462738991 CEST	192.168.2.22	8.8.8.8	0xc622	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:50.480742931 CEST	192.168.2.22	8.8.8.8	0x9967	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:50.506584883 CEST	192.168.2.22	8.8.8.8	0x9d86	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:50.520034075 CEST	192.168.2.22	8.8.8.8	0xa61	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:50.539150000 CEST	192.168.2.22	8.8.8.8	0xf5b2	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:50.578859091 CEST	192.168.2.22	8.8.8.8	0x8109	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:50.590214014 CEST	192.168.2.22	8.8.8.8	0x5363	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:50.601119995 CEST	192.168.2.22	8.8.8.8	0x4549	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:50.612931013 CEST	192.168.2.22	8.8.8.8	0x79a1	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:50.624123096 CEST	192.168.2.22	8.8.8.8	0x56b5	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:50.635451078 CEST	192.168.2.22	8.8.8.8	0x1762	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:50.647206068 CEST	192.168.2.22	8.8.8.8	0xbd87	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:50.659245968 CEST	192.168.2.22	8.8.8.8	0x54b7	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:50.670573950 CEST	192.168.2.22	8.8.8.8	0xee4e	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:50.684230089 CEST	192.168.2.22	8.8.8.8	0x805b	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:50.694673061 CEST	192.168.2.22	8.8.8.8	0xdf88	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:50.707465887 CEST	192.168.2.22	8.8.8.8	0x6634	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:50.718276024 CEST	192.168.2.22	8.8.8.8	0xee5	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:50.729517937 CEST	192.168.2.22	8.8.8.8	0x85d3	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:50.740195036 CEST	192.168.2.22	8.8.8.8	0x1a4b	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:50.750212908 CEST	192.168.2.22	8.8.8.8	0x9dd7	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:50.761286974 CEST	192.168.2.22	8.8.8.8	0x2690	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:50.773271084 CEST	192.168.2.22	8.8.8.8	0xd174	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:50.788723946 CEST	192.168.2.22	8.8.8.8	0x505f	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:50.801533937 CEST	192.168.2.22	8.8.8.8	0x21c4	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:50.812877893 CEST	192.168.2.22	8.8.8.8	0xe920	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:50.824629068 CEST	192.168.2.22	8.8.8.8	0x1a3f	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:50.848490000 CEST	192.168.2.22	8.8.8.8	0x3bb	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:50.860845089 CEST	192.168.2.22	8.8.8.8	0x218d	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:50.871217966 CEST	192.168.2.22	8.8.8.8	0xb2a1	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:50.881984949 CEST	192.168.2.22	8.8.8.8	0xc8cc	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:50.893615007 CEST	192.168.2.22	8.8.8.8	0xb5c0	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:50.905816078 CEST	192.168.2.22	8.8.8.8	0xe8e0	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:50.916739941 CEST	192.168.2.22	8.8.8.8	0xcc4c	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:50.927722931 CEST	192.168.2.22	8.8.8.8	0x965b	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:50.938786983 CEST	192.168.2.22	8.8.8.8	0x1ca3	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:50.950227976 CEST	192.168.2.22	8.8.8.8	0x2ab5	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:50.961117983 CEST	192.168.2.22	8.8.8.8	0x6e4f	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:50.972496033 CEST	192.168.2.22	8.8.8.8	0x2552	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:50.984222889 CEST	192.168.2.22	8.8.8.8	0xff2a	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:50.994860888 CEST	192.168.2.22	8.8.8.8	0x851b	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:51.005592108 CEST	192.168.2.22	8.8.8.8	0x64e3	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:51.015352964 CEST	192.168.2.22	8.8.8.8	0x337d	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:51.025511026 CEST	192.168.2.22	8.8.8.8	0x9946	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:51.035779953 CEST	192.168.2.22	8.8.8.8	0x636b	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:51.046619892 CEST	192.168.2.22	8.8.8.8	0x5475	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:51.059199095 CEST	192.168.2.22	8.8.8.8	0x2a7e	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:51.070218086 CEST	192.168.2.22	8.8.8.8	0x40d4	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:51.082293987 CEST	192.168.2.22	8.8.8.8	0x5e76	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:51.094059944 CEST	192.168.2.22	8.8.8.8	0x9c6f	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:51.106082916 CEST	192.168.2.22	8.8.8.8	0x2b29	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:51.117595911 CEST	192.168.2.22	8.8.8.8	0x58c2	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:51.129611969 CEST	192.168.2.22	8.8.8.8	0xa101	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:51.141422987 CEST	192.168.2.22	8.8.8.8	0x9e7c	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:51.152942896 CEST	192.168.2.22	8.8.8.8	0x487a	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:51.167648077 CEST	192.168.2.22	8.8.8.8	0x40b3	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:51.194824934 CEST	192.168.2.22	8.8.8.8	0x78fe	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:51.215488911 CEST	192.168.2.22	8.8.8.8	0xedc2	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:51.227130890 CEST	192.168.2.22	8.8.8.8	0x38d1	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:51.238308907 CEST	192.168.2.22	8.8.8.8	0x7c8e	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:51.250123024 CEST	192.168.2.22	8.8.8.8	0xa6ae	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:51.261854887 CEST	192.168.2.22	8.8.8.8	0xd33b	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:51.274013996 CEST	192.168.2.22	8.8.8.8	0x2a05	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:51.286251068 CEST	192.168.2.22	8.8.8.8	0x8141	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:51.297372103 CEST	192.168.2.22	8.8.8.8	0x3319	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:51.308748960 CEST	192.168.2.22	8.8.8.8	0x2024	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:51.322616100 CEST	192.168.2.22	8.8.8.8	0xeb99	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:51.334276915 CEST	192.168.2.22	8.8.8.8	0x4924	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:51.345773935 CEST	192.168.2.22	8.8.8.8	0x3019	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:51.357462883 CEST	192.168.2.22	8.8.8.8	0x20d8	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:51.369949102 CEST	192.168.2.22	8.8.8.8	0x4b59	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:51.381666899 CEST	192.168.2.22	8.8.8.8	0x8592	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:51.392946959 CEST	192.168.2.22	8.8.8.8	0x554f	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:51.403608084 CEST	192.168.2.22	8.8.8.8	0xa68	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:51.414865971 CEST	192.168.2.22	8.8.8.8	0xaa32	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:51.426354885 CEST	192.168.2.22	8.8.8.8	0x5f4	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:51.437814951 CEST	192.168.2.22	8.8.8.8	0x1722	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:51.450361967 CEST	192.168.2.22	8.8.8.8	0xc308	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:51.462179899 CEST	192.168.2.22	8.8.8.8	0x27ec	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:51.474191904 CEST	192.168.2.22	8.8.8.8	0xe713	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:51.486283064 CEST	192.168.2.22	8.8.8.8	0xb0b5	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:51.498548031 CEST	192.168.2.22	8.8.8.8	0x1ee2	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:51.511153936 CEST	192.168.2.22	8.8.8.8	0x2933	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:51.535767078 CEST	192.168.2.22	8.8.8.8	0xeb41	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:51.550522089 CEST	192.168.2.22	8.8.8.8	0xc32c	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:51.565509081 CEST	192.168.2.22	8.8.8.8	0x259a	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:51.603856087 CEST	192.168.2.22	8.8.8.8	0x30f9	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:51.614790916 CEST	192.168.2.22	8.8.8.8	0x5006	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:51.628981113 CEST	192.168.2.22	8.8.8.8	0x375	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:51.640043020 CEST	192.168.2.22	8.8.8.8	0xc8b5	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:51.657042027 CEST	192.168.2.22	8.8.8.8	0xe63	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:51.675364017 CEST	192.168.2.22	8.8.8.8	0xf954	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:51.691291094 CEST	192.168.2.22	8.8.8.8	0xd8d9	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:51.705621958 CEST	192.168.2.22	8.8.8.8	0xd5b1	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:51.725977898 CEST	192.168.2.22	8.8.8.8	0x7adf	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:51.737149000 CEST	192.168.2.22	8.8.8.8	0x9c2f	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:51.964309931 CEST	192.168.2.22	8.8.8.8	0x10f6	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:52.086729050 CEST	192.168.2.22	8.8.8.8	0x4ecb	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:52.102279902 CEST	192.168.2.22	8.8.8.8	0x3077	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:52.119961023 CEST	192.168.2.22	8.8.8.8	0x120b	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:52.161477089 CEST	192.168.2.22	8.8.8.8	0xc83b	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:52.173877001 CEST	192.168.2.22	8.8.8.8	0x54e0	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:52.191766977 CEST	192.168.2.22	8.8.8.8	0xc837	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:52.209002972 CEST	192.168.2.22	8.8.8.8	0xb780	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:52.226347923 CEST	192.168.2.22	8.8.8.8	0xe91d	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:52.250082016 CEST	192.168.2.22	8.8.8.8	0x8acf	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:52.266212940 CEST	192.168.2.22	8.8.8.8	0xd3cd	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:52.277304888 CEST	192.168.2.22	8.8.8.8	0x90d1	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:52.294605017 CEST	192.168.2.22	8.8.8.8	0x389	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:52.315973997 CEST	192.168.2.22	8.8.8.8	0x333a	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:52.332957983 CEST	192.168.2.22	8.8.8.8	0x80bd	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:52.344227076 CEST	192.168.2.22	8.8.8.8	0xdb7c	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:52.438287020 CEST	192.168.2.22	8.8.8.8	0x7d0a	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:52.449408054 CEST	192.168.2.22	8.8.8.8	0xe3b0	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:52.458986998 CEST	192.168.2.22	8.8.8.8	0x68da	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:52.468780994 CEST	192.168.2.22	8.8.8.8	0x3581	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:52.478045940 CEST	192.168.2.22	8.8.8.8	0x295e	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:52.488063097 CEST	192.168.2.22	8.8.8.8	0x2636	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:52.497982025 CEST	192.168.2.22	8.8.8.8	0xafba	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:52.510672092 CEST	192.168.2.22	8.8.8.8	0x64f	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:52.521028996 CEST	192.168.2.22	8.8.8.8	0xc468	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:52.530780077 CEST	192.168.2.22	8.8.8.8	0x3097	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:52.540471077 CEST	192.168.2.22	8.8.8.8	0xc65	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:52.553030014 CEST	192.168.2.22	8.8.8.8	0xbb17	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:52.565489054 CEST	192.168.2.22	8.8.8.8	0xf4ad	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:52.579083920 CEST	192.168.2.22	8.8.8.8	0x45eb	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:52.591450930 CEST	192.168.2.22	8.8.8.8	0xc83a	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:52.604059935 CEST	192.168.2.22	8.8.8.8	0xdfd7	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:52.617532969 CEST	192.168.2.22	8.8.8.8	0xf1ce	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:52.627969980 CEST	192.168.2.22	8.8.8.8	0xe0e1	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:52.638963938 CEST	192.168.2.22	8.8.8.8	0xf480	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:52.649962902 CEST	192.168.2.22	8.8.8.8	0x164d	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:52.661031961 CEST	192.168.2.22	8.8.8.8	0xddb2	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:52.671644926 CEST	192.168.2.22	8.8.8.8	0xff40	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:52.690407038 CEST	192.168.2.22	8.8.8.8	0x365e	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:52.705658913 CEST	192.168.2.22	8.8.8.8	0xd9a5	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:52.717166901 CEST	192.168.2.22	8.8.8.8	0xa50d	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:52.728565931 CEST	192.168.2.22	8.8.8.8	0xcd1c	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:52.741177082 CEST	192.168.2.22	8.8.8.8	0x3866	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:52.752063036 CEST	192.168.2.22	8.8.8.8	0x5385	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:52.762885094 CEST	192.168.2.22	8.8.8.8	0x22f0	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:52.780231953 CEST	192.168.2.22	8.8.8.8	0xea20	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:52.792357922 CEST	192.168.2.22	8.8.8.8	0x8788	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:52.804263115 CEST	192.168.2.22	8.8.8.8	0xa20d	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:52.815057039 CEST	192.168.2.22	8.8.8.8	0xfb4a	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:52.827070951 CEST	192.168.2.22	8.8.8.8	0x1c61	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:52.838659048 CEST	192.168.2.22	8.8.8.8	0x5340	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:52.848817110 CEST	192.168.2.22	8.8.8.8	0x6b98	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:52.859163046 CEST	192.168.2.22	8.8.8.8	0xc053	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:52.869879961 CEST	192.168.2.22	8.8.8.8	0x7fa7	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:52.880167007 CEST	192.168.2.22	8.8.8.8	0xe286	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:52.891897917 CEST	192.168.2.22	8.8.8.8	0x2c0c	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:52.902282953 CEST	192.168.2.22	8.8.8.8	0x3385	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:52.912991047 CEST	192.168.2.22	8.8.8.8	0xe559	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:52.924556971 CEST	192.168.2.22	8.8.8.8	0xc4f1	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:52.935661077 CEST	192.168.2.22	8.8.8.8	0x9dbd	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:52.950334072 CEST	192.168.2.22	8.8.8.8	0xd3f7	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:52.961980104 CEST	192.168.2.22	8.8.8.8	0xf805	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:52.972250938 CEST	192.168.2.22	8.8.8.8	0x838c	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:52.983041048 CEST	192.168.2.22	8.8.8.8	0x5855	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:52.994096041 CEST	192.168.2.22	8.8.8.8	0xf68b	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:53.007559061 CEST	192.168.2.22	8.8.8.8	0x6ca7	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:53.020390987 CEST	192.168.2.22	8.8.8.8	0xdc06	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:53.031450987 CEST	192.168.2.22	8.8.8.8	0xd9d7	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:53.049372911 CEST	192.168.2.22	8.8.8.8	0xcb50	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:53.063690901 CEST	192.168.2.22	8.8.8.8	0x1e7d	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:53.084494114 CEST	192.168.2.22	8.8.8.8	0xc87c	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:53.096688986 CEST	192.168.2.22	8.8.8.8	0x12c3	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:53.109478951 CEST	192.168.2.22	8.8.8.8	0xc55f	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:53.121706009 CEST	192.168.2.22	8.8.8.8	0xc9df	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:53.135332108 CEST	192.168.2.22	8.8.8.8	0xe747	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:53.146600008 CEST	192.168.2.22	8.8.8.8	0x72b0	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:53.158117056 CEST	192.168.2.22	8.8.8.8	0x8d0d	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:53.168732882 CEST	192.168.2.22	8.8.8.8	0xe08b	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:53.181838036 CEST	192.168.2.22	8.8.8.8	0x5e66	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:53.192899942 CEST	192.168.2.22	8.8.8.8	0xb90d	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:53.205554008 CEST	192.168.2.22	8.8.8.8	0xe6d5	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:53.217592001 CEST	192.168.2.22	8.8.8.8	0x2db0	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:53.229547977 CEST	192.168.2.22	8.8.8.8	0x9023	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:53.241533995 CEST	192.168.2.22	8.8.8.8	0xb80	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:53.252793074 CEST	192.168.2.22	8.8.8.8	0x86e3	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:53.264755011 CEST	192.168.2.22	8.8.8.8	0x319e	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:53.275521040 CEST	192.168.2.22	8.8.8.8	0xd3e5	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:53.285948992 CEST	192.168.2.22	8.8.8.8	0x8ac0	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:53.300599098 CEST	192.168.2.22	8.8.8.8	0x8c9a	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:53.312830925 CEST	192.168.2.22	8.8.8.8	0xcfc8	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:53.324281931 CEST	192.168.2.22	8.8.8.8	0x31e	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:53.335408926 CEST	192.168.2.22	8.8.8.8	0x456d	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:53.347085953 CEST	192.168.2.22	8.8.8.8	0xd849	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:53.359370947 CEST	192.168.2.22	8.8.8.8	0xcb63	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:53.391347885 CEST	192.168.2.22	8.8.8.8	0x69e2	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:53.414237976 CEST	192.168.2.22	8.8.8.8	0xc80	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:53.428395987 CEST	192.168.2.22	8.8.8.8	0x2812	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:53.441482067 CEST	192.168.2.22	8.8.8.8	0x9cf9	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:53.454459906 CEST	192.168.2.22	8.8.8.8	0xa2f9	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:53.466579914 CEST	192.168.2.22	8.8.8.8	0xb120	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:53.479199886 CEST	192.168.2.22	8.8.8.8	0x62a0	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:53.493424892 CEST	192.168.2.22	8.8.8.8	0xb0b0	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:53.504271984 CEST	192.168.2.22	8.8.8.8	0xb105	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:53.514760971 CEST	192.168.2.22	8.8.8.8	0x3b27	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:53.525441885 CEST	192.168.2.22	8.8.8.8	0x2e4b	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:53.539524078 CEST	192.168.2.22	8.8.8.8	0x9b72	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:53.552236080 CEST	192.168.2.22	8.8.8.8	0x2492	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:53.563704967 CEST	192.168.2.22	8.8.8.8	0xf6c3	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:53.575978041 CEST	192.168.2.22	8.8.8.8	0x5821	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:53.590836048 CEST	192.168.2.22	8.8.8.8	0x64ba	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:53.613488913 CEST	192.168.2.22	8.8.8.8	0x1fdd	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:53.626908064 CEST	192.168.2.22	8.8.8.8	0xa0b3	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:53.642916918 CEST	192.168.2.22	8.8.8.8	0xb6fd	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:53.653523922 CEST	192.168.2.22	8.8.8.8	0x4692	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:53.664416075 CEST	192.168.2.22	8.8.8.8	0x520f	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:53.677031994 CEST	192.168.2.22	8.8.8.8	0x7640	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:53.688982964 CEST	192.168.2.22	8.8.8.8	0x1885	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:53.700745106 CEST	192.168.2.22	8.8.8.8	0x57eb	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:53.712352991 CEST	192.168.2.22	8.8.8.8	0xf708	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:53.733844042 CEST	192.168.2.22	8.8.8.8	0x23e1	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:53.745021105 CEST	192.168.2.22	8.8.8.8	0x6982	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:53.755064964 CEST	192.168.2.22	8.8.8.8	0x307e	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:53.765378952 CEST	192.168.2.22	8.8.8.8	0x90a1	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:53.775754929 CEST	192.168.2.22	8.8.8.8	0xbe3e	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:53.786081076 CEST	192.168.2.22	8.8.8.8	0x889a	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:53.796643972 CEST	192.168.2.22	8.8.8.8	0x45ce	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:53.809007883 CEST	192.168.2.22	8.8.8.8	0x106c	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:53.820661068 CEST	192.168.2.22	8.8.8.8	0x37ac	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:53.831577063 CEST	192.168.2.22	8.8.8.8	0x3892	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:53.841509104 CEST	192.168.2.22	8.8.8.8	0x8ccd	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:53.852452993 CEST	192.168.2.22	8.8.8.8	0x83f3	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:53.863535881 CEST	192.168.2.22	8.8.8.8	0x1dc5	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:53.874398947 CEST	192.168.2.22	8.8.8.8	0x4f95	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:53.885360956 CEST	192.168.2.22	8.8.8.8	0xa26a	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:53.897408962 CEST	192.168.2.22	8.8.8.8	0x2adb	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:53.908387899 CEST	192.168.2.22	8.8.8.8	0x3d81	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:53.918678999 CEST	192.168.2.22	8.8.8.8	0x9421	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:53.931185007 CEST	192.168.2.22	8.8.8.8	0x6c2	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:53.942759037 CEST	192.168.2.22	8.8.8.8	0x402	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:53.955349922 CEST	192.168.2.22	8.8.8.8	0xb5	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:53.967545033 CEST	192.168.2.22	8.8.8.8	0x8ed8	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:54.078161955 CEST	192.168.2.22	8.8.8.8	0x1bff	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:54.103852987 CEST	192.168.2.22	8.8.8.8	0x20a9	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:54.115227938 CEST	192.168.2.22	8.8.8.8	0x28bf	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:54.128058910 CEST	192.168.2.22	8.8.8.8	0x600a	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:54.140347958 CEST	192.168.2.22	8.8.8.8	0xa6b3	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:54.152333021 CEST	192.168.2.22	8.8.8.8	0x1286	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:54.163625002 CEST	192.168.2.22	8.8.8.8	0xd10d	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:54.174853086 CEST	192.168.2.22	8.8.8.8	0x6b9	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:54.185480118 CEST	192.168.2.22	8.8.8.8	0xb6b7	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:54.198107004 CEST	192.168.2.22	8.8.8.8	0xc82f	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:54.210190058 CEST	192.168.2.22	8.8.8.8	0x6ff8	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:54.221621037 CEST	192.168.2.22	8.8.8.8	0x46e7	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:54.233664036 CEST	192.168.2.22	8.8.8.8	0x4166	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:54.245641947 CEST	192.168.2.22	8.8.8.8	0x8240	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:54.257427931 CEST	192.168.2.22	8.8.8.8	0xbcd9	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:54.271228075 CEST	192.168.2.22	8.8.8.8	0x2c4e	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:54.282340050 CEST	192.168.2.22	8.8.8.8	0xfa37	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:54.295492887 CEST	192.168.2.22	8.8.8.8	0x1404	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:54.485519886 CEST	192.168.2.22	8.8.8.8	0xddd0	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:54.510212898 CEST	192.168.2.22	8.8.8.8	0xb9fb	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:54.523963928 CEST	192.168.2.22	8.8.8.8	0x2a76	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:54.559087038 CEST	192.168.2.22	8.8.8.8	0x5beb	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:54.637058973 CEST	192.168.2.22	8.8.8.8	0xbdcb	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:54.649993896 CEST	192.168.2.22	8.8.8.8	0xd772	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:54.664598942 CEST	192.168.2.22	8.8.8.8	0x9408	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:54.675744057 CEST	192.168.2.22	8.8.8.8	0x89a6	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:54.687414885 CEST	192.168.2.22	8.8.8.8	0x5a25	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:54.700361967 CEST	192.168.2.22	8.8.8.8	0x9c8a	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:54.713030100 CEST	192.168.2.22	8.8.8.8	0x18d0	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:54.728235960 CEST	192.168.2.22	8.8.8.8	0x46d4	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:54.738359928 CEST	192.168.2.22	8.8.8.8	0xd04c	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:54.762559891 CEST	192.168.2.22	8.8.8.8	0xc377	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:54.774547100 CEST	192.168.2.22	8.8.8.8	0x6d5a	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:54.785105944 CEST	192.168.2.22	8.8.8.8	0x11eb	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:54.795007944 CEST	192.168.2.22	8.8.8.8	0xd8d0	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:54.807898998 CEST	192.168.2.22	8.8.8.8	0x3ceb	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:54.825793982 CEST	192.168.2.22	8.8.8.8	0xc4cd	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:54.837111950 CEST	192.168.2.22	8.8.8.8	0x56a1	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:54.849363089 CEST	192.168.2.22	8.8.8.8	0x65df	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:54.862776995 CEST	192.168.2.22	8.8.8.8	0xb4e	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:54.875849009 CEST	192.168.2.22	8.8.8.8	0x9ecd	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:54.887264013 CEST	192.168.2.22	8.8.8.8	0x8f11	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:54.902069092 CEST	192.168.2.22	8.8.8.8	0x32d4	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:54.914601088 CEST	192.168.2.22	8.8.8.8	0xfa2a	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:54.927171946 CEST	192.168.2.22	8.8.8.8	0xc910	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:54.938865900 CEST	192.168.2.22	8.8.8.8	0x6fc8	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:54.950908899 CEST	192.168.2.22	8.8.8.8	0xbdc0	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:54.963254929 CEST	192.168.2.22	8.8.8.8	0x5e13	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:54.975735903 CEST	192.168.2.22	8.8.8.8	0x640b	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:54.987929106 CEST	192.168.2.22	8.8.8.8	0xfa36	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:54.999927998 CEST	192.168.2.22	8.8.8.8	0x9bc	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:55.013778925 CEST	192.168.2.22	8.8.8.8	0x6aa1	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:55.105523109 CEST	192.168.2.22	8.8.8.8	0xcad4	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:55.158562899 CEST	192.168.2.22	8.8.8.8	0xce7f	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:55.189021111 CEST	192.168.2.22	8.8.8.8	0x70a6	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:55.209697008 CEST	192.168.2.22	8.8.8.8	0xfaa7	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:55.229883909 CEST	192.168.2.22	8.8.8.8	0x4216	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:55.254719019 CEST	192.168.2.22	8.8.8.8	0xc15e	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:55.289426088 CEST	192.168.2.22	8.8.8.8	0xfb6b	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:55.402363062 CEST	192.168.2.22	8.8.8.8	0x5796	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:55.528754950 CEST	192.168.2.22	8.8.8.8	0xd1d8	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:55.626503944 CEST	192.168.2.22	8.8.8.8	0x97b0	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:55.637993097 CEST	192.168.2.22	8.8.8.8	0x4a99	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:55.648384094 CEST	192.168.2.22	8.8.8.8	0xcbad	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:55.681294918 CEST	192.168.2.22	8.8.8.8	0xde96	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:55.745210886 CEST	192.168.2.22	8.8.8.8	0xfe5f	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:55.791006088 CEST	192.168.2.22	8.8.8.8	0xf577	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:55.865986109 CEST	192.168.2.22	8.8.8.8	0x95d3	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:55.875993013 CEST	192.168.2.22	8.8.8.8	0x1a5e	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:55.911128998 CEST	192.168.2.22	8.8.8.8	0x2825	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:55.925520897 CEST	192.168.2.22	8.8.8.8	0x1520	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:55.936495066 CEST	192.168.2.22	8.8.8.8	0x797b	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:55.946033001 CEST	192.168.2.22	8.8.8.8	0x73c	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:55.965827942 CEST	192.168.2.22	8.8.8.8	0x278a	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:55.976912022 CEST	192.168.2.22	8.8.8.8	0x7423	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:55.986951113 CEST	192.168.2.22	8.8.8.8	0x330c	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:55.996381998 CEST	192.168.2.22	8.8.8.8	0x772d	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:56.007222891 CEST	192.168.2.22	8.8.8.8	0x4e3b	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:56.018156052 CEST	192.168.2.22	8.8.8.8	0x58ea	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:56.027463913 CEST	192.168.2.22	8.8.8.8	0xf3fa	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:56.036864042 CEST	192.168.2.22	8.8.8.8	0x73c5	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:56.047446012 CEST	192.168.2.22	8.8.8.8	0xaf1d	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:56.057279110 CEST	192.168.2.22	8.8.8.8	0x524	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:56.066972971 CEST	192.168.2.22	8.8.8.8	0x2372	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:56.077136040 CEST	192.168.2.22	8.8.8.8	0xfef1	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:56.086775064 CEST	192.168.2.22	8.8.8.8	0xe269	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:56.096378088 CEST	192.168.2.22	8.8.8.8	0x92d4	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:56.107168913 CEST	192.168.2.22	8.8.8.8	0x305c	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:56.119081974 CEST	192.168.2.22	8.8.8.8	0xce1	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:56.151063919 CEST	192.168.2.22	8.8.8.8	0x2d5e	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:56.241780996 CEST	192.168.2.22	8.8.8.8	0xe0e2	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:56.253803015 CEST	192.168.2.22	8.8.8.8	0x19d2	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:56.327703953 CEST	192.168.2.22	8.8.8.8	0x23c8	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:56.367795944 CEST	192.168.2.22	8.8.8.8	0x6afb	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:56.390065908 CEST	192.168.2.22	8.8.8.8	0xf683	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:56.438007116 CEST	192.168.2.22	8.8.8.8	0x6161	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:56.493362904 CEST	192.168.2.22	8.8.8.8	0x22a9	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:56.505904913 CEST	192.168.2.22	8.8.8.8	0x308f	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:56.516645908 CEST	192.168.2.22	8.8.8.8	0x3c88	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:56.528310061 CEST	192.168.2.22	8.8.8.8	0x2c45	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:56.538922071 CEST	192.168.2.22	8.8.8.8	0xaa2a	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:56.549559116 CEST	192.168.2.22	8.8.8.8	0x39cd	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:56.562227011 CEST	192.168.2.22	8.8.8.8	0x35d7	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:56.572730064 CEST	192.168.2.22	8.8.8.8	0xc417	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:56.586169958 CEST	192.168.2.22	8.8.8.8	0xd996	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:56.596465111 CEST	192.168.2.22	8.8.8.8	0x6feb	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:56.607364893 CEST	192.168.2.22	8.8.8.8	0x8f44	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:56.618155003 CEST	192.168.2.22	8.8.8.8	0x73b8	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:56.628320932 CEST	192.168.2.22	8.8.8.8	0x6692	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:56.638423920 CEST	192.168.2.22	8.8.8.8	0x9afc	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:56.648601055 CEST	192.168.2.22	8.8.8.8	0x39bc	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:56.661562920 CEST	192.168.2.22	8.8.8.8	0x507b	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:56.671963930 CEST	192.168.2.22	8.8.8.8	0xb6b2	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:56.682976961 CEST	192.168.2.22	8.8.8.8	0x8355	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:56.693475962 CEST	192.168.2.22	8.8.8.8	0x6af4	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:56.703793049 CEST	192.168.2.22	8.8.8.8	0x8051	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:56.715106964 CEST	192.168.2.22	8.8.8.8	0x3986	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:56.730317116 CEST	192.168.2.22	8.8.8.8	0xea0a	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:56.741691113 CEST	192.168.2.22	8.8.8.8	0xbdd7	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:56.753293037 CEST	192.168.2.22	8.8.8.8	0x2dbd	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:56.764254093 CEST	192.168.2.22	8.8.8.8	0x60c6	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:56.777921915 CEST	192.168.2.22	8.8.8.8	0x1b7d	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:56.789037943 CEST	192.168.2.22	8.8.8.8	0x279d	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:56.799364090 CEST	192.168.2.22	8.8.8.8	0x7a8c	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:56.815905094 CEST	192.168.2.22	8.8.8.8	0xf4ea	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:56.827159882 CEST	192.168.2.22	8.8.8.8	0xac7b	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:56.840347052 CEST	192.168.2.22	8.8.8.8	0xea08	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:56.851243973 CEST	192.168.2.22	8.8.8.8	0x85ba	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:56.862102032 CEST	192.168.2.22	8.8.8.8	0xae80	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:56.872822046 CEST	192.168.2.22	8.8.8.8	0x4765	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:56.886645079 CEST	192.168.2.22	8.8.8.8	0x9fe6	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:56.897450924 CEST	192.168.2.22	8.8.8.8	0xeeb9	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:56.908128977 CEST	192.168.2.22	8.8.8.8	0x438a	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:56.918776035 CEST	192.168.2.22	8.8.8.8	0xef1	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:56.928940058 CEST	192.168.2.22	8.8.8.8	0xaa6f	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:56.939963102 CEST	192.168.2.22	8.8.8.8	0x47da	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:56.949914932 CEST	192.168.2.22	8.8.8.8	0xf829	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:56.960911036 CEST	192.168.2.22	8.8.8.8	0xd1ac	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:56.970704079 CEST	192.168.2.22	8.8.8.8	0x89f9	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:56.980906010 CEST	192.168.2.22	8.8.8.8	0x324d	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:56.991286039 CEST	192.168.2.22	8.8.8.8	0x8e5a	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:57.001712084 CEST	192.168.2.22	8.8.8.8	0x170c	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:57.015631914 CEST	192.168.2.22	8.8.8.8	0x6f91	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:57.030399084 CEST	192.168.2.22	8.8.8.8	0xabf7	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:57.043735981 CEST	192.168.2.22	8.8.8.8	0x8a98	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:57.057255030 CEST	192.168.2.22	8.8.8.8	0x14d8	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:57.069392920 CEST	192.168.2.22	8.8.8.8	0xc91f	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:57.081240892 CEST	192.168.2.22	8.8.8.8	0x8c5b	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:57.093900919 CEST	192.168.2.22	8.8.8.8	0x148c	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:57.106460094 CEST	192.168.2.22	8.8.8.8	0x23a5	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:57.118048906 CEST	192.168.2.22	8.8.8.8	0xcd9e	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:57.130811930 CEST	192.168.2.22	8.8.8.8	0xcce2	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:57.141603947 CEST	192.168.2.22	8.8.8.8	0x3ce7	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:57.153762102 CEST	192.168.2.22	8.8.8.8	0xe081	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:57.174380064 CEST	192.168.2.22	8.8.8.8	0xc3c7	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:57.191040039 CEST	192.168.2.22	8.8.8.8	0x61e2	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:57.221688986 CEST	192.168.2.22	8.8.8.8	0x9d6f	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:57.234515905 CEST	192.168.2.22	8.8.8.8	0x25b8	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:57.246489048 CEST	192.168.2.22	8.8.8.8	0x2351	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:57.258217096 CEST	192.168.2.22	8.8.8.8	0xb4a5	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:57.270219088 CEST	192.168.2.22	8.8.8.8	0x2ea6	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:57.282766104 CEST	192.168.2.22	8.8.8.8	0xb1e0	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:57.294815063 CEST	192.168.2.22	8.8.8.8	0x13ae	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:57.308701992 CEST	192.168.2.22	8.8.8.8	0xb623	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:57.319555998 CEST	192.168.2.22	8.8.8.8	0x3282	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:57.331136942 CEST	192.168.2.22	8.8.8.8	0xf6d4	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:57.344008923 CEST	192.168.2.22	8.8.8.8	0x6ade	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:57.355431080 CEST	192.168.2.22	8.8.8.8	0x45e9	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:57.366601944 CEST	192.168.2.22	8.8.8.8	0xfaf0	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:57.379445076 CEST	192.168.2.22	8.8.8.8	0xf5e2	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:57.390604019 CEST	192.168.2.22	8.8.8.8	0xe25a	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:57.401783943 CEST	192.168.2.22	8.8.8.8	0xac75	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:57.412600040 CEST	192.168.2.22	8.8.8.8	0x7905	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:57.424901962 CEST	192.168.2.22	8.8.8.8	0x3cac	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:57.435740948 CEST	192.168.2.22	8.8.8.8	0x7ac8	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:57.447724104 CEST	192.168.2.22	8.8.8.8	0xec6c	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:57.457978964 CEST	192.168.2.22	8.8.8.8	0xb971	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:57.468486071 CEST	192.168.2.22	8.8.8.8	0xf3f6	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:57.479326963 CEST	192.168.2.22	8.8.8.8	0xb52	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:57.491338015 CEST	192.168.2.22	8.8.8.8	0xe05f	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:57.502007961 CEST	192.168.2.22	8.8.8.8	0x58b3	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:57.523829937 CEST	192.168.2.22	8.8.8.8	0x30f4	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:57.547538996 CEST	192.168.2.22	8.8.8.8	0x5e59	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:57.561012030 CEST	192.168.2.22	8.8.8.8	0xa486	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:57.576517105 CEST	192.168.2.22	8.8.8.8	0x9610	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:57.592895031 CEST	192.168.2.22	8.8.8.8	0xd02a	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:57.605443001 CEST	192.168.2.22	8.8.8.8	0x230f	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:57.617928982 CEST	192.168.2.22	8.8.8.8	0xa9a4	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:57.628360033 CEST	192.168.2.22	8.8.8.8	0xa502	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:57.639360905 CEST	192.168.2.22	8.8.8.8	0xcdc4	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:57.651439905 CEST	192.168.2.22	8.8.8.8	0xbd07	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:57.662076950 CEST	192.168.2.22	8.8.8.8	0x6b69	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:57.674185038 CEST	192.168.2.22	8.8.8.8	0x33dd	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:57.685194016 CEST	192.168.2.22	8.8.8.8	0x1e45	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:57.697154999 CEST	192.168.2.22	8.8.8.8	0x17e8	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:57.715325117 CEST	192.168.2.22	8.8.8.8	0x1647	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:57.726778984 CEST	192.168.2.22	8.8.8.8	0xcb7a	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:57.738578081 CEST	192.168.2.22	8.8.8.8	0xdf70	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:57.749540091 CEST	192.168.2.22	8.8.8.8	0x4029	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:57.760087967 CEST	192.168.2.22	8.8.8.8	0x53dc	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:57.772349119 CEST	192.168.2.22	8.8.8.8	0x1b3f	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:57.783677101 CEST	192.168.2.22	8.8.8.8	0x9a8f	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:57.794351101 CEST	192.168.2.22	8.8.8.8	0x3da5	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:57.803859949 CEST	192.168.2.22	8.8.8.8	0x779b	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:57.814591885 CEST	192.168.2.22	8.8.8.8	0xacd9	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:57.825218916 CEST	192.168.2.22	8.8.8.8	0xa4cc	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:57.836169004 CEST	192.168.2.22	8.8.8.8	0x9143	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:57.846244097 CEST	192.168.2.22	8.8.8.8	0x7c89	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:57.866900921 CEST	192.168.2.22	8.8.8.8	0xa230	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:57.884870052 CEST	192.168.2.22	8.8.8.8	0xe5ea	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:57.894956112 CEST	192.168.2.22	8.8.8.8	0x8bb1	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:57.905891895 CEST	192.168.2.22	8.8.8.8	0x241a	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:57.916965008 CEST	192.168.2.22	8.8.8.8	0x487	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:57.929039955 CEST	192.168.2.22	8.8.8.8	0xa175	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:57.940232038 CEST	192.168.2.22	8.8.8.8	0x6527	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:57.950972080 CEST	192.168.2.22	8.8.8.8	0x3856	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:57.961728096 CEST	192.168.2.22	8.8.8.8	0xf8ac	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:57.972341061 CEST	192.168.2.22	8.8.8.8	0x225e	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:58.009957075 CEST	192.168.2.22	8.8.8.8	0x5140	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:58.029378891 CEST	192.168.2.22	8.8.8.8	0x9e1d	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:58.050190926 CEST	192.168.2.22	8.8.8.8	0x9561	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:58.072483063 CEST	192.168.2.22	8.8.8.8	0x94e1	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:58.090739012 CEST	192.168.2.22	8.8.8.8	0x4697	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:58.203134060 CEST	192.168.2.22	8.8.8.8	0xdfd5	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:58.231456041 CEST	192.168.2.22	8.8.8.8	0x9522	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:58.241261959 CEST	192.168.2.22	8.8.8.8	0x72d1	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:58.250571012 CEST	192.168.2.22	8.8.8.8	0xba57	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:58.261032104 CEST	192.168.2.22	8.8.8.8	0x2bb	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:58.318434000 CEST	192.168.2.22	8.8.8.8	0x7291	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:58.869895935 CEST	192.168.2.22	8.8.8.8	0x3b5e	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:58.926021099 CEST	192.168.2.22	8.8.8.8	0xeadc	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:58.990765095 CEST	192.168.2.22	8.8.8.8	0xd41a	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:59.003249884 CEST	192.168.2.22	8.8.8.8	0xf58f	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:59.015199900 CEST	192.168.2.22	8.8.8.8	0xd9d3	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:59.027672052 CEST	192.168.2.22	8.8.8.8	0x8ab2	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:59.041657925 CEST	192.168.2.22	8.8.8.8	0x6ed5	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:59.053356886 CEST	192.168.2.22	8.8.8.8	0x5046	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:59.067003012 CEST	192.168.2.22	8.8.8.8	0x4853	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:59.078516960 CEST	192.168.2.22	8.8.8.8	0x7448	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:59.095942974 CEST	192.168.2.22	8.8.8.8	0x81bb	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:59.108635902 CEST	192.168.2.22	8.8.8.8	0xb8f7	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:59.121505022 CEST	192.168.2.22	8.8.8.8	0x57d1	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:59.132658005 CEST	192.168.2.22	8.8.8.8	0x42d2	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:59.146473885 CEST	192.168.2.22	8.8.8.8	0xf26	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:59.158822060 CEST	192.168.2.22	8.8.8.8	0xc07f	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:59.171509027 CEST	192.168.2.22	8.8.8.8	0xc638	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:59.194771051 CEST	192.168.2.22	8.8.8.8	0x5a21	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:59.207611084 CEST	192.168.2.22	8.8.8.8	0x24d	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:59.231401920 CEST	192.168.2.22	8.8.8.8	0x1560	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:59.263638020 CEST	192.168.2.22	8.8.8.8	0x481e	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:59.276082039 CEST	192.168.2.22	8.8.8.8	0x36ab	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:59.288800001 CEST	192.168.2.22	8.8.8.8	0xca7c	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:59.300256014 CEST	192.168.2.22	8.8.8.8	0xc666	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:59.312472105 CEST	192.168.2.22	8.8.8.8	0x88ff	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:59.355695963 CEST	192.168.2.22	8.8.8.8	0x16f2	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:59.403300047 CEST	192.168.2.22	8.8.8.8	0x9bf8	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:59.420530081 CEST	192.168.2.22	8.8.8.8	0xc3a1	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:59.475773096 CEST	192.168.2.22	8.8.8.8	0x51de	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:59.509038925 CEST	192.168.2.22	8.8.8.8	0xdc2c	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:59.537211895 CEST	192.168.2.22	8.8.8.8	0x7858	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:59.656780005 CEST	192.168.2.22	8.8.8.8	0x4ac1	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:59.668271065 CEST	192.168.2.22	8.8.8.8	0xf1f1	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:59.677470922 CEST	192.168.2.22	8.8.8.8	0xf168	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:59.686820984 CEST	192.168.2.22	8.8.8.8	0x3e54	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:59.695607901 CEST	192.168.2.22	8.8.8.8	0x3628	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:59.705229998 CEST	192.168.2.22	8.8.8.8	0xd77d	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:59.714777946 CEST	192.168.2.22	8.8.8.8	0x2f76	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:59.724466085 CEST	192.168.2.22	8.8.8.8	0xb342	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:59.734054089 CEST	192.168.2.22	8.8.8.8	0xc9da	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:59.743017912 CEST	192.168.2.22	8.8.8.8	0x3630	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:59.752931118 CEST	192.168.2.22	8.8.8.8	0xe4e3	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:59.761903048 CEST	192.168.2.22	8.8.8.8	0x649c	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:59.771189928 CEST	192.168.2.22	8.8.8.8	0x8ec1	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:59.780771017 CEST	192.168.2.22	8.8.8.8	0x1ca5	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:59.790021896 CEST	192.168.2.22	8.8.8.8	0xf594	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:59.799587011 CEST	192.168.2.22	8.8.8.8	0x479a	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:59.808376074 CEST	192.168.2.22	8.8.8.8	0x3338	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:59.818799019 CEST	192.168.2.22	8.8.8.8	0x305e	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:59.827910900 CEST	192.168.2.22	8.8.8.8	0x65ea	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:59.837462902 CEST	192.168.2.22	8.8.8.8	0x8da	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:59.847002029 CEST	192.168.2.22	8.8.8.8	0x88f7	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:59.856988907 CEST	192.168.2.22	8.8.8.8	0x4cba	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:59.867158890 CEST	192.168.2.22	8.8.8.8	0xb3	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:59.877334118 CEST	192.168.2.22	8.8.8.8	0x5dfa	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:59.887316942 CEST	192.168.2.22	8.8.8.8	0x4388	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:59.897835970 CEST	192.168.2.22	8.8.8.8	0x7495	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:59.954077005 CEST	192.168.2.22	8.8.8.8	0x67e	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:59.965652943 CEST	192.168.2.22	8.8.8.8	0x3eed	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:59.977574110 CEST	192.168.2.22	8.8.8.8	0x30a9	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:59.988743067 CEST	192.168.2.22	8.8.8.8	0x3be7	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:00.000015020 CEST	192.168.2.22	8.8.8.8	0x2e8a	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:00.011759996 CEST	192.168.2.22	8.8.8.8	0xc4b1	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:00.022624016 CEST	192.168.2.22	8.8.8.8	0x5722	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:00.051160097 CEST	192.168.2.22	8.8.8.8	0xcfb3	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:00.066199064 CEST	192.168.2.22	8.8.8.8	0x3355	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:00.078067064 CEST	192.168.2.22	8.8.8.8	0xb8c8	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:00.089993000 CEST	192.168.2.22	8.8.8.8	0x6b49	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:00.101382971 CEST	192.168.2.22	8.8.8.8	0x880	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:00.112788916 CEST	192.168.2.22	8.8.8.8	0x1caf	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:00.124280930 CEST	192.168.2.22	8.8.8.8	0xd726	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:00.135010958 CEST	192.168.2.22	8.8.8.8	0x897	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:00.146047115 CEST	192.168.2.22	8.8.8.8	0x6c0	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:00.168982029 CEST	192.168.2.22	8.8.8.8	0x5e0	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:00.208981037 CEST	192.168.2.22	8.8.8.8	0x5011	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:00.225924015 CEST	192.168.2.22	8.8.8.8	0x3bd7	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:00.338756084 CEST	192.168.2.22	8.8.8.8	0xb778	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:00.349565029 CEST	192.168.2.22	8.8.8.8	0xdcac	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:00.370723009 CEST	192.168.2.22	8.8.8.8	0x32fe	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:00.390203953 CEST	192.168.2.22	8.8.8.8	0x22ad	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:00.405683041 CEST	192.168.2.22	8.8.8.8	0x4528	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:00.467911005 CEST	192.168.2.22	8.8.8.8	0x1f20	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:00.481611967 CEST	192.168.2.22	8.8.8.8	0x6845	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:00.492254019 CEST	192.168.2.22	8.8.8.8	0x4e97	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:00.504842043 CEST	192.168.2.22	8.8.8.8	0x48e7	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:00.516962051 CEST	192.168.2.22	8.8.8.8	0x2c29	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:00.529654026 CEST	192.168.2.22	8.8.8.8	0x58f6	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:00.542939901 CEST	192.168.2.22	8.8.8.8	0x4ba3	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:00.556937933 CEST	192.168.2.22	8.8.8.8	0x8aae	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:00.568984985 CEST	192.168.2.22	8.8.8.8	0x6645	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:00.581511974 CEST	192.168.2.22	8.8.8.8	0x67e0	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:00.591933012 CEST	192.168.2.22	8.8.8.8	0x8f31	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:00.634133101 CEST	192.168.2.22	8.8.8.8	0xb5d4	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:00.645129919 CEST	192.168.2.22	8.8.8.8	0x9e44	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:00.655606985 CEST	192.168.2.22	8.8.8.8	0xd260	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:00.668066025 CEST	192.168.2.22	8.8.8.8	0xd347	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:00.679728985 CEST	192.168.2.22	8.8.8.8	0x7bbd	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:00.688709021 CEST	192.168.2.22	8.8.8.8	0xd1cb	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:00.699003935 CEST	192.168.2.22	8.8.8.8	0xc29b	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:00.709990025 CEST	192.168.2.22	8.8.8.8	0xed85	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:00.719993114 CEST	192.168.2.22	8.8.8.8	0xc745	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:00.729814053 CEST	192.168.2.22	8.8.8.8	0xfa75	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:00.743918896 CEST	192.168.2.22	8.8.8.8	0xe71a	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:00.753146887 CEST	192.168.2.22	8.8.8.8	0x3fb5	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:00.764313936 CEST	192.168.2.22	8.8.8.8	0xd3b0	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:00.773849010 CEST	192.168.2.22	8.8.8.8	0x7ae2	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:00.784219027 CEST	192.168.2.22	8.8.8.8	0x22cc	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:00.793431997 CEST	192.168.2.22	8.8.8.8	0xc945	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:00.802833080 CEST	192.168.2.22	8.8.8.8	0xf6e9	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:00.812150002 CEST	192.168.2.22	8.8.8.8	0x7b34	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:00.822490931 CEST	192.168.2.22	8.8.8.8	0xc787	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:00.831497908 CEST	192.168.2.22	8.8.8.8	0x1c8c	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:00.840689898 CEST	192.168.2.22	8.8.8.8	0x5eae	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:00.850919008 CEST	192.168.2.22	8.8.8.8	0x8956	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:00.863872051 CEST	192.168.2.22	8.8.8.8	0x58e6	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:00.875953913 CEST	192.168.2.22	8.8.8.8	0x5224	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:00.887347937 CEST	192.168.2.22	8.8.8.8	0xedf1	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:00.898435116 CEST	192.168.2.22	8.8.8.8	0xe32d	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:00.910693884 CEST	192.168.2.22	8.8.8.8	0x6943	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:00.923161030 CEST	192.168.2.22	8.8.8.8	0xd43f	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:00.934689045 CEST	192.168.2.22	8.8.8.8	0x388f	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:00.993621111 CEST	192.168.2.22	8.8.8.8	0x7355	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:01.035660028 CEST	192.168.2.22	8.8.8.8	0x40bd	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:01.102161884 CEST	192.168.2.22	8.8.8.8	0xb315	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:01.169318914 CEST	192.168.2.22	8.8.8.8	0x2449	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:01.267694950 CEST	192.168.2.22	8.8.8.8	0x5e50	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:01.563803911 CEST	192.168.2.22	8.8.8.8	0xf9a1	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:01.579349041 CEST	192.168.2.22	8.8.8.8	0xf591	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:01.589176893 CEST	192.168.2.22	8.8.8.8	0x28da	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:01.611955881 CEST	192.168.2.22	8.8.8.8	0x1b49	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:01.648025990 CEST	192.168.2.22	8.8.8.8	0xcf23	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:01.677917957 CEST	192.168.2.22	8.8.8.8	0x3c75	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:01.718169928 CEST	192.168.2.22	8.8.8.8	0x8e96	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:01.783582926 CEST	192.168.2.22	8.8.8.8	0x1d7e	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:01.793512106 CEST	192.168.2.22	8.8.8.8	0xfe2e	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:01.820350885 CEST	192.168.2.22	8.8.8.8	0x46bb	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:01.845752001 CEST	192.168.2.22	8.8.8.8	0x41be	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:01.867260933 CEST	192.168.2.22	8.8.8.8	0xd45c	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:01.877737045 CEST	192.168.2.22	8.8.8.8	0xf752	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:01.887054920 CEST	192.168.2.22	8.8.8.8	0x86d3	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:01.896742105 CEST	192.168.2.22	8.8.8.8	0x99f2	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:01.907651901 CEST	192.168.2.22	8.8.8.8	0xb8d2	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:01.917196989 CEST	192.168.2.22	8.8.8.8	0xdf55	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:01.927475929 CEST	192.168.2.22	8.8.8.8	0x6951	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:01.937140942 CEST	192.168.2.22	8.8.8.8	0xa5a9	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:01.947040081 CEST	192.168.2.22	8.8.8.8	0xb262	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:01.958396912 CEST	192.168.2.22	8.8.8.8	0x5654	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:01.968219042 CEST	192.168.2.22	8.8.8.8	0x11c0	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:01.978101969 CEST	192.168.2.22	8.8.8.8	0x9d6e	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:01.988634109 CEST	192.168.2.22	8.8.8.8	0x6c89	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:01.999036074 CEST	192.168.2.22	8.8.8.8	0x60d2	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:02.010314941 CEST	192.168.2.22	8.8.8.8	0xab3	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:02.023047924 CEST	192.168.2.22	8.8.8.8	0x1683	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:02.032807112 CEST	192.168.2.22	8.8.8.8	0x41ba	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:02.043083906 CEST	192.168.2.22	8.8.8.8	0x8122	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:02.053188086 CEST	192.168.2.22	8.8.8.8	0xbe54	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:02.064594030 CEST	192.168.2.22	8.8.8.8	0xd703	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:02.091491938 CEST	192.168.2.22	8.8.8.8	0xbe0f	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:02.312103987 CEST	192.168.2.22	8.8.8.8	0x195d	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:02.326252937 CEST	192.168.2.22	8.8.8.8	0x59b3	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:02.343439102 CEST	192.168.2.22	8.8.8.8	0x8c26	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:02.353411913 CEST	192.168.2.22	8.8.8.8	0x38e1	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:02.363164902 CEST	192.168.2.22	8.8.8.8	0xfe8e	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:02.372454882 CEST	192.168.2.22	8.8.8.8	0x59c1	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:02.384040117 CEST	192.168.2.22	8.8.8.8	0xcc3a	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:02.394229889 CEST	192.168.2.22	8.8.8.8	0xe7da	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:02.405136108 CEST	192.168.2.22	8.8.8.8	0x8437	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:02.416271925 CEST	192.168.2.22	8.8.8.8	0x6646	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:02.553076029 CEST	192.168.2.22	8.8.8.8	0xedcb	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:02.571510077 CEST	192.168.2.22	8.8.8.8	0x2d07	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:02.586411953 CEST	192.168.2.22	8.8.8.8	0x584d	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:02.600110054 CEST	192.168.2.22	8.8.8.8	0xe36f	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:02.610727072 CEST	192.168.2.22	8.8.8.8	0xa7bf	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:02.624322891 CEST	192.168.2.22	8.8.8.8	0x434e	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:02.635847092 CEST	192.168.2.22	8.8.8.8	0x891c	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:02.646583080 CEST	192.168.2.22	8.8.8.8	0xfefc	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:02.658353090 CEST	192.168.2.22	8.8.8.8	0xf218	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:02.669564009 CEST	192.168.2.22	8.8.8.8	0x38ae	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:02.681380033 CEST	192.168.2.22	8.8.8.8	0xd5fd	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:02.692874908 CEST	192.168.2.22	8.8.8.8	0x97d4	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:02.703084946 CEST	192.168.2.22	8.8.8.8	0x46a9	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:02.713951111 CEST	192.168.2.22	8.8.8.8	0x4bd6	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:02.728538990 CEST	192.168.2.22	8.8.8.8	0xba9e	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:02.738498926 CEST	192.168.2.22	8.8.8.8	0x99f2	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:02.749629021 CEST	192.168.2.22	8.8.8.8	0x459	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:02.771086931 CEST	192.168.2.22	8.8.8.8	0x3bef	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:02.804078102 CEST	192.168.2.22	8.8.8.8	0x8016	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:02.815330982 CEST	192.168.2.22	8.8.8.8	0xaf19	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:02.826421976 CEST	192.168.2.22	8.8.8.8	0xb34a	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:02.837949038 CEST	192.168.2.22	8.8.8.8	0x5426	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:02.848828077 CEST	192.168.2.22	8.8.8.8	0x3013	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:02.859246016 CEST	192.168.2.22	8.8.8.8	0xfca4	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:02.869456053 CEST	192.168.2.22	8.8.8.8	0xc811	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:02.881608963 CEST	192.168.2.22	8.8.8.8	0x7626	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:02.892386913 CEST	192.168.2.22	8.8.8.8	0x175e	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:02.903037071 CEST	192.168.2.22	8.8.8.8	0x631c	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:02.912754059 CEST	192.168.2.22	8.8.8.8	0x6b08	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:02.925405979 CEST	192.168.2.22	8.8.8.8	0x1986	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:02.936388969 CEST	192.168.2.22	8.8.8.8	0x1364	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:02.946722031 CEST	192.168.2.22	8.8.8.8	0x8515	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:02.956999063 CEST	192.168.2.22	8.8.8.8	0xeee5	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:02.968291998 CEST	192.168.2.22	8.8.8.8	0x6b9f	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:02.982391119 CEST	192.168.2.22	8.8.8.8	0xed6b	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:02.993278027 CEST	192.168.2.22	8.8.8.8	0x1eb0	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:03.003194094 CEST	192.168.2.22	8.8.8.8	0x4b6a	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:03.016911983 CEST	192.168.2.22	8.8.8.8	0xcfa5	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:03.029241085 CEST	192.168.2.22	8.8.8.8	0xb052	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:03.040507078 CEST	192.168.2.22	8.8.8.8	0xbe73	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:03.050304890 CEST	192.168.2.22	8.8.8.8	0x30f0	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:03.061446905 CEST	192.168.2.22	8.8.8.8	0x8720	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:03.071748972 CEST	192.168.2.22	8.8.8.8	0x4ba2	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:03.082456112 CEST	192.168.2.22	8.8.8.8	0xec9b	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:03.093678951 CEST	192.168.2.22	8.8.8.8	0x5573	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:03.104238987 CEST	192.168.2.22	8.8.8.8	0xf8e	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:03.141464949 CEST	192.168.2.22	8.8.8.8	0xa26d	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:03.190707922 CEST	192.168.2.22	8.8.8.8	0xadb3	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:03.204258919 CEST	192.168.2.22	8.8.8.8	0xd8ba	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:03.215941906 CEST	192.168.2.22	8.8.8.8	0xb5c2	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:03.226171017 CEST	192.168.2.22	8.8.8.8	0x20d7	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:03.241754055 CEST	192.168.2.22	8.8.8.8	0x684c	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:03.252583027 CEST	192.168.2.22	8.8.8.8	0xf26d	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:03.267210007 CEST	192.168.2.22	8.8.8.8	0xa9c7	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:03.277318954 CEST	192.168.2.22	8.8.8.8	0xb473	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:03.288729906 CEST	192.168.2.22	8.8.8.8	0x1ca0	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:03.301639080 CEST	192.168.2.22	8.8.8.8	0x8bf6	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:03.312151909 CEST	192.168.2.22	8.8.8.8	0xa1cf	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:03.322488070 CEST	192.168.2.22	8.8.8.8	0xe7	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:03.333054066 CEST	192.168.2.22	8.8.8.8	0xe795	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:03.347147942 CEST	192.168.2.22	8.8.8.8	0x39e3	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:03.361730099 CEST	192.168.2.22	8.8.8.8	0x102c	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:03.371778011 CEST	192.168.2.22	8.8.8.8	0x9010	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:03.382831097 CEST	192.168.2.22	8.8.8.8	0xe86b	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:03.393698931 CEST	192.168.2.22	8.8.8.8	0x4f4b	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:03.404738903 CEST	192.168.2.22	8.8.8.8	0x84db	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:03.420200109 CEST	192.168.2.22	8.8.8.8	0xb823	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:03.429929972 CEST	192.168.2.22	8.8.8.8	0xdced	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:03.913072109 CEST	192.168.2.22	8.8.8.8	0xa630	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:03.924293041 CEST	192.168.2.22	8.8.8.8	0x5514	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:03.936168909 CEST	192.168.2.22	8.8.8.8	0x6122	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:03.949018955 CEST	192.168.2.22	8.8.8.8	0xa69e	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:03.959186077 CEST	192.168.2.22	8.8.8.8	0xd94	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:03.969844103 CEST	192.168.2.22	8.8.8.8	0x5468	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:03.981571913 CEST	192.168.2.22	8.8.8.8	0x5994	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:03.993611097 CEST	192.168.2.22	8.8.8.8	0xe938	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:04.004923105 CEST	192.168.2.22	8.8.8.8	0xbf9a	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:04.015670061 CEST	192.168.2.22	8.8.8.8	0x938e	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:04.028763056 CEST	192.168.2.22	8.8.8.8	0xa4b6	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:04.040163994 CEST	192.168.2.22	8.8.8.8	0x79a0	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:04.054229975 CEST	192.168.2.22	8.8.8.8	0x45c7	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:04.069911003 CEST	192.168.2.22	8.8.8.8	0xad5	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:04.370275974 CEST	192.168.2.22	8.8.8.8	0xe668	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:04.380599022 CEST	192.168.2.22	8.8.8.8	0x9139	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:04.390841007 CEST	192.168.2.22	8.8.8.8	0x242f	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:04.400921106 CEST	192.168.2.22	8.8.8.8	0xd7d0	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:04.411228895 CEST	192.168.2.22	8.8.8.8	0x2d0d	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:04.421906948 CEST	192.168.2.22	8.8.8.8	0xf785	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:04.432112932 CEST	192.168.2.22	8.8.8.8	0x2486	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:04.441159010 CEST	192.168.2.22	8.8.8.8	0xb31c	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:04.452399969 CEST	192.168.2.22	8.8.8.8	0xba8f	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:04.462594032 CEST	192.168.2.22	8.8.8.8	0x4c77	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:04.473948002 CEST	192.168.2.22	8.8.8.8	0x22e5	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:04.506850958 CEST	192.168.2.22	8.8.8.8	0xb02a	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:04.517319918 CEST	192.168.2.22	8.8.8.8	0x8474	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:04.527026892 CEST	192.168.2.22	8.8.8.8	0x5b9d	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:04.538026094 CEST	192.168.2.22	8.8.8.8	0xc246	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:04.548579931 CEST	192.168.2.22	8.8.8.8	0x79a9	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:04.558418989 CEST	192.168.2.22	8.8.8.8	0x989e	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:04.578141928 CEST	192.168.2.22	8.8.8.8	0xf078	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:04.588440895 CEST	192.168.2.22	8.8.8.8	0x6d9a	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:04.598589897 CEST	192.168.2.22	8.8.8.8	0xf088	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:04.610698938 CEST	192.168.2.22	8.8.8.8	0x8dcf	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:04.625307083 CEST	192.168.2.22	8.8.8.8	0x507c	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:04.635159969 CEST	192.168.2.22	8.8.8.8	0x912f	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:04.646595955 CEST	192.168.2.22	8.8.8.8	0xae15	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:04.657804966 CEST	192.168.2.22	8.8.8.8	0x4a	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:04.667934895 CEST	192.168.2.22	8.8.8.8	0x7a3f	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:04.678776026 CEST	192.168.2.22	8.8.8.8	0xb738	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:04.694950104 CEST	192.168.2.22	8.8.8.8	0xcb02	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:04.707629919 CEST	192.168.2.22	8.8.8.8	0x1ca0	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:04.720491886 CEST	192.168.2.22	8.8.8.8	0xba9	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:04.732950926 CEST	192.168.2.22	8.8.8.8	0xce6a	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:04.746419907 CEST	192.168.2.22	8.8.8.8	0xf2d1	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:04.759886980 CEST	192.168.2.22	8.8.8.8	0xe1de	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:04.772248030 CEST	192.168.2.22	8.8.8.8	0x15d9	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:04.783361912 CEST	192.168.2.22	8.8.8.8	0x3241	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:04.794739008 CEST	192.168.2.22	8.8.8.8	0xb93a	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:04.807487011 CEST	192.168.2.22	8.8.8.8	0x3f60	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:04.819870949 CEST	192.168.2.22	8.8.8.8	0x27f4	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:04.852849007 CEST	192.168.2.22	8.8.8.8	0x6a5b	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:04.867991924 CEST	192.168.2.22	8.8.8.8	0x22c5	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:04.881258965 CEST	192.168.2.22	8.8.8.8	0xfc6d	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:04.900753975 CEST	192.168.2.22	8.8.8.8	0x53a	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:04.916131973 CEST	192.168.2.22	8.8.8.8	0x9f53	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:04.928802967 CEST	192.168.2.22	8.8.8.8	0x7935	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:04.941529036 CEST	192.168.2.22	8.8.8.8	0xd221	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:04.954989910 CEST	192.168.2.22	8.8.8.8	0x142a	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:04.968357086 CEST	192.168.2.22	8.8.8.8	0xb02a	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:04.980087996 CEST	192.168.2.22	8.8.8.8	0x9d31	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:04.992144108 CEST	192.168.2.22	8.8.8.8	0x908d	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:05.003417015 CEST	192.168.2.22	8.8.8.8	0xee56	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:05.017117977 CEST	192.168.2.22	8.8.8.8	0x62aa	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:05.035588026 CEST	192.168.2.22	8.8.8.8	0x5c46	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:05.064033031 CEST	192.168.2.22	8.8.8.8	0xd91f	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:05.077228069 CEST	192.168.2.22	8.8.8.8	0xa637	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:05.089205027 CEST	192.168.2.22	8.8.8.8	0x9825	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:05.104255915 CEST	192.168.2.22	8.8.8.8	0x7b1a	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:05.117382050 CEST	192.168.2.22	8.8.8.8	0xfe1c	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:05.128424883 CEST	192.168.2.22	8.8.8.8	0xe38a	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:05.140100956 CEST	192.168.2.22	8.8.8.8	0x2c47	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:05.152463913 CEST	192.168.2.22	8.8.8.8	0x327f	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:05.203761101 CEST	192.168.2.22	8.8.8.8	0x6669	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:05.452984095 CEST	192.168.2.22	8.8.8.8	0x27cc	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:05.548736095 CEST	192.168.2.22	8.8.8.8	0xeb0d	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:05.559525013 CEST	192.168.2.22	8.8.8.8	0xf71b	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:05.570379019 CEST	192.168.2.22	8.8.8.8	0xb7c	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:05.581233025 CEST	192.168.2.22	8.8.8.8	0xeac5	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:05.594504118 CEST	192.168.2.22	8.8.8.8	0x7e9f	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:05.606652975 CEST	192.168.2.22	8.8.8.8	0xc6a2	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:05.619482994 CEST	192.168.2.22	8.8.8.8	0x70a4	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:05.637186050 CEST	192.168.2.22	8.8.8.8	0xc452	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:05.646893978 CEST	192.168.2.22	8.8.8.8	0xb258	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:05.656167984 CEST	192.168.2.22	8.8.8.8	0xb7d6	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:05.665956974 CEST	192.168.2.22	8.8.8.8	0xa747	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:05.680488110 CEST	192.168.2.22	8.8.8.8	0x15bd	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:05.698514938 CEST	192.168.2.22	8.8.8.8	0xd092	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:05.710134029 CEST	192.168.2.22	8.8.8.8	0x4199	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:05.722476006 CEST	192.168.2.22	8.8.8.8	0xb92b	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:05.736143112 CEST	192.168.2.22	8.8.8.8	0x9b9f	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:05.746597052 CEST	192.168.2.22	8.8.8.8	0xf671	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:05.762382030 CEST	192.168.2.22	8.8.8.8	0x6505	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:05.773050070 CEST	192.168.2.22	8.8.8.8	0xf050	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:05.784871101 CEST	192.168.2.22	8.8.8.8	0x507e	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:05.794101954 CEST	192.168.2.22	8.8.8.8	0x4d07	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:05.806385994 CEST	192.168.2.22	8.8.8.8	0x3183	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:05.818475962 CEST	192.168.2.22	8.8.8.8	0xb26d	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:05.830449104 CEST	192.168.2.22	8.8.8.8	0x316a	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:06.039112091 CEST	192.168.2.22	8.8.8.8	0xe5d3	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:06.072873116 CEST	192.168.2.22	8.8.8.8	0x2887	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:06.100853920 CEST	192.168.2.22	8.8.8.8	0xd468	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:06.167152882 CEST	192.168.2.22	8.8.8.8	0xcb08	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:06.182399035 CEST	192.168.2.22	8.8.8.8	0x75d9	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:06.428886890 CEST	192.168.2.22	8.8.8.8	0x864	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:06.672136068 CEST	192.168.2.22	8.8.8.8	0x8d74	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:06.723973036 CEST	192.168.2.22	8.8.8.8	0x4568	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:06.763775110 CEST	192.168.2.22	8.8.8.8	0xd2f	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:06.773658991 CEST	192.168.2.22	8.8.8.8	0x3807	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:06.794167995 CEST	192.168.2.22	8.8.8.8	0x3427	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:06.842077971 CEST	192.168.2.22	8.8.8.8	0x20f6	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:06.865852118 CEST	192.168.2.22	8.8.8.8	0x45d8	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:06.905662060 CEST	192.168.2.22	8.8.8.8	0xa86f	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:06.920114994 CEST	192.168.2.22	8.8.8.8	0x5720	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:06.929549932 CEST	192.168.2.22	8.8.8.8	0x3bcc	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:06.938847065 CEST	192.168.2.22	8.8.8.8	0x6024	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:06.949707985 CEST	192.168.2.22	8.8.8.8	0x8524	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:06.960616112 CEST	192.168.2.22	8.8.8.8	0x2586	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:06.970354080 CEST	192.168.2.22	8.8.8.8	0x58df	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:06.979617119 CEST	192.168.2.22	8.8.8.8	0x141f	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:06.989878893 CEST	192.168.2.22	8.8.8.8	0x59be	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:07.000066042 CEST	192.168.2.22	8.8.8.8	0xe84	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:07.009721994 CEST	192.168.2.22	8.8.8.8	0xeee8	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:07.019128084 CEST	192.168.2.22	8.8.8.8	0x751	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:07.028218031 CEST	192.168.2.22	8.8.8.8	0x3cf5	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:07.037560940 CEST	192.168.2.22	8.8.8.8	0x81f1	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:07.046681881 CEST	192.168.2.22	8.8.8.8	0x5c54	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:07.059443951 CEST	192.168.2.22	8.8.8.8	0x5bac	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:07.068859100 CEST	192.168.2.22	8.8.8.8	0x9807	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:07.078865051 CEST	192.168.2.22	8.8.8.8	0xbe4	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:07.088896036 CEST	192.168.2.22	8.8.8.8	0xc076	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:07.098922968 CEST	192.168.2.22	8.8.8.8	0x3480	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:07.107856989 CEST	192.168.2.22	8.8.8.8	0x9e0e	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:07.117372990 CEST	192.168.2.22	8.8.8.8	0xe66a	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:07.129856110 CEST	192.168.2.22	8.8.8.8	0x7dd	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:07.142132044 CEST	192.168.2.22	8.8.8.8	0xaee2	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:07.156919003 CEST	192.168.2.22	8.8.8.8	0xa618	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:07.168102026 CEST	192.168.2.22	8.8.8.8	0xf90b	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:07.178118944 CEST	192.168.2.22	8.8.8.8	0x62c1	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:07.188631058 CEST	192.168.2.22	8.8.8.8	0x5421	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:07.197736979 CEST	192.168.2.22	8.8.8.8	0x9108	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:07.207020044 CEST	192.168.2.22	8.8.8.8	0xdea8	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:07.216331959 CEST	192.168.2.22	8.8.8.8	0xe6c6	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:07.226773977 CEST	192.168.2.22	8.8.8.8	0xdad8	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:07.235935926 CEST	192.168.2.22	8.8.8.8	0x1724	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:07.251008987 CEST	192.168.2.22	8.8.8.8	0x5cf3	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:07.260601044 CEST	192.168.2.22	8.8.8.8	0x5358	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:07.270354033 CEST	192.168.2.22	8.8.8.8	0x718e	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:07.280216932 CEST	192.168.2.22	8.8.8.8	0xc300	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:07.291273117 CEST	192.168.2.22	8.8.8.8	0x44a6	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:07.303410053 CEST	192.168.2.22	8.8.8.8	0xc163	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:07.316441059 CEST	192.168.2.22	8.8.8.8	0x4015	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:07.327325106 CEST	192.168.2.22	8.8.8.8	0xbe15	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:07.339977980 CEST	192.168.2.22	8.8.8.8	0x90f4	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:07.352796078 CEST	192.168.2.22	8.8.8.8	0xcd42	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:07.365169048 CEST	192.168.2.22	8.8.8.8	0x5e03	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:07.376898050 CEST	192.168.2.22	8.8.8.8	0x7573	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:07.388809919 CEST	192.168.2.22	8.8.8.8	0xe388	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:07.400618076 CEST	192.168.2.22	8.8.8.8	0x6e25	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:07.412312984 CEST	192.168.2.22	8.8.8.8	0xaf96	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:07.424714088 CEST	192.168.2.22	8.8.8.8	0x5a91	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:07.436552048 CEST	192.168.2.22	8.8.8.8	0x5492	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:07.450524092 CEST	192.168.2.22	8.8.8.8	0xa8c9	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:07.462249041 CEST	192.168.2.22	8.8.8.8	0x83e	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:07.476478100 CEST	192.168.2.22	8.8.8.8	0x4e22	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:07.487410069 CEST	192.168.2.22	8.8.8.8	0x8910	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:07.519453049 CEST	192.168.2.22	8.8.8.8	0x55ad	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:07.534543037 CEST	192.168.2.22	8.8.8.8	0x9382	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:07.545331001 CEST	192.168.2.22	8.8.8.8	0x6832	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:07.555874109 CEST	192.168.2.22	8.8.8.8	0xb98	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:07.583856106 CEST	192.168.2.22	8.8.8.8	0xb193	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:07.983642101 CEST	192.168.2.22	8.8.8.8	0xe7f4	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:07.993891001 CEST	192.168.2.22	8.8.8.8	0x36e3	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:08.004519939 CEST	192.168.2.22	8.8.8.8	0x6f0d	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:08.016885042 CEST	192.168.2.22	8.8.8.8	0xbeeb	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:08.027856112 CEST	192.168.2.22	8.8.8.8	0xd346	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:08.037780046 CEST	192.168.2.22	8.8.8.8	0x17c9	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:08.047667027 CEST	192.168.2.22	8.8.8.8	0xd6a	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:08.056999922 CEST	192.168.2.22	8.8.8.8	0x63ed	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:08.067630053 CEST	192.168.2.22	8.8.8.8	0x4b58	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:08.078152895 CEST	192.168.2.22	8.8.8.8	0xf188	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:08.091573954 CEST	192.168.2.22	8.8.8.8	0xded	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:08.103739023 CEST	192.168.2.22	8.8.8.8	0x34d5	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:08.112678051 CEST	192.168.2.22	8.8.8.8	0x67f9	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:08.121748924 CEST	192.168.2.22	8.8.8.8	0xba8d	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:08.131649971 CEST	192.168.2.22	8.8.8.8	0xb599	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:08.142205000 CEST	192.168.2.22	8.8.8.8	0x6af8	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:08.152626038 CEST	192.168.2.22	8.8.8.8	0xf7c1	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:08.164650917 CEST	192.168.2.22	8.8.8.8	0xf2f2	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:08.174818993 CEST	192.168.2.22	8.8.8.8	0x7e86	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:08.184596062 CEST	192.168.2.22	8.8.8.8	0xa65c	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:08.194117069 CEST	192.168.2.22	8.8.8.8	0xc6b6	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:08.204719067 CEST	192.168.2.22	8.8.8.8	0xa137	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:08.214747906 CEST	192.168.2.22	8.8.8.8	0xcc1a	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:08.224639893 CEST	192.168.2.22	8.8.8.8	0x245c	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:08.238543034 CEST	192.168.2.22	8.8.8.8	0x5057	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:08.247818947 CEST	192.168.2.22	8.8.8.8	0x8727	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:08.257031918 CEST	192.168.2.22	8.8.8.8	0x37a2	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:08.266836882 CEST	192.168.2.22	8.8.8.8	0x769d	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:08.276386976 CEST	192.168.2.22	8.8.8.8	0x1a8a	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:08.286014080 CEST	192.168.2.22	8.8.8.8	0x6f3a	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:08.295130014 CEST	192.168.2.22	8.8.8.8	0x1735	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:08.305854082 CEST	192.168.2.22	8.8.8.8	0x8cb9	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:08.317608118 CEST	192.168.2.22	8.8.8.8	0x343d	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:08.326857090 CEST	192.168.2.22	8.8.8.8	0x647e	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:08.338794947 CEST	192.168.2.22	8.8.8.8	0xe34f	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:08.349284887 CEST	192.168.2.22	8.8.8.8	0x5d39	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:08.360732079 CEST	192.168.2.22	8.8.8.8	0x9e59	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:08.371913910 CEST	192.168.2.22	8.8.8.8	0x6427	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:08.383752108 CEST	192.168.2.22	8.8.8.8	0x9398	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:08.397320986 CEST	192.168.2.22	8.8.8.8	0x1232	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:08.410164118 CEST	192.168.2.22	8.8.8.8	0xcff6	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:08.420877934 CEST	192.168.2.22	8.8.8.8	0x41d3	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:08.430900097 CEST	192.168.2.22	8.8.8.8	0x5923	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:08.440941095 CEST	192.168.2.22	8.8.8.8	0x815b	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:08.453037024 CEST	192.168.2.22	8.8.8.8	0x3ec5	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:08.465269089 CEST	192.168.2.22	8.8.8.8	0x8c36	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:08.476156950 CEST	192.168.2.22	8.8.8.8	0xc927	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:08.488049984 CEST	192.168.2.22	8.8.8.8	0x4662	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:08.499326944 CEST	192.168.2.22	8.8.8.8	0x2444	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:08.514987946 CEST	192.168.2.22	8.8.8.8	0xb3e8	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:08.526431084 CEST	192.168.2.22	8.8.8.8	0x6aa9	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:08.538903952 CEST	192.168.2.22	8.8.8.8	0xe200	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:08.551489115 CEST	192.168.2.22	8.8.8.8	0x32ba	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:08.562338114 CEST	192.168.2.22	8.8.8.8	0xc444	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:08.575196028 CEST	192.168.2.22	8.8.8.8	0x3f9a	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:08.587275982 CEST	192.168.2.22	8.8.8.8	0x580c	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:08.641860008 CEST	192.168.2.22	8.8.8.8	0x5516	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:08.652940989 CEST	192.168.2.22	8.8.8.8	0xa428	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:08.663207054 CEST	192.168.2.22	8.8.8.8	0xa6fd	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:08.675920010 CEST	192.168.2.22	8.8.8.8	0x9ffc	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:08.713799000 CEST	192.168.2.22	8.8.8.8	0x236a	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:08.731539965 CEST	192.168.2.22	8.8.8.8	0xe5e9	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:08.743853092 CEST	192.168.2.22	8.8.8.8	0xa3ef	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:08.756535053 CEST	192.168.2.22	8.8.8.8	0xdfa8	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:08.767978907 CEST	192.168.2.22	8.8.8.8	0xc401	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:08.779814959 CEST	192.168.2.22	8.8.8.8	0x1193	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:08.791553974 CEST	192.168.2.22	8.8.8.8	0x91c5	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:08.802759886 CEST	192.168.2.22	8.8.8.8	0xb5f2	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:08.815133095 CEST	192.168.2.22	8.8.8.8	0x6530	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:08.826746941 CEST	192.168.2.22	8.8.8.8	0xb15c	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:08.850600004 CEST	192.168.2.22	8.8.8.8	0xc7f	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:08.861390114 CEST	192.168.2.22	8.8.8.8	0x5d91	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:08.871582985 CEST	192.168.2.22	8.8.8.8	0xff98	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:08.882467031 CEST	192.168.2.22	8.8.8.8	0x97f5	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:08.893960953 CEST	192.168.2.22	8.8.8.8	0x5dfc	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:08.904531956 CEST	192.168.2.22	8.8.8.8	0x36a6	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:08.915361881 CEST	192.168.2.22	8.8.8.8	0x9009	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:09.000051022 CEST	192.168.2.22	8.8.8.8	0xfcc6	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:09.023165941 CEST	192.168.2.22	8.8.8.8	0xecd4	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:09.068850040 CEST	192.168.2.22	8.8.8.8	0x56bd	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:09.090648890 CEST	192.168.2.22	8.8.8.8	0xac94	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:09.101130962 CEST	192.168.2.22	8.8.8.8	0x103	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:09.111677885 CEST	192.168.2.22	8.8.8.8	0x945d	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:09.120731115 CEST	192.168.2.22	8.8.8.8	0xd70f	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:09.129810095 CEST	192.168.2.22	8.8.8.8	0xae5c	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:09.139589071 CEST	192.168.2.22	8.8.8.8	0x9fa2	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:09.158381939 CEST	192.168.2.22	8.8.8.8	0xf1d6	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:09.167992115 CEST	192.168.2.22	8.8.8.8	0xc014	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:09.177414894 CEST	192.168.2.22	8.8.8.8	0xdb78	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:09.253670931 CEST	192.168.2.22	8.8.8.8	0x72e6	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:09.447460890 CEST	192.168.2.22	8.8.8.8	0x2a32	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:09.528750896 CEST	192.168.2.22	8.8.8.8	0x21f	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:10.027512074 CEST	192.168.2.22	8.8.8.8	0x14fd	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:10.083532095 CEST	192.168.2.22	8.8.8.8	0x7ff8	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:10.145173073 CEST	192.168.2.22	8.8.8.8	0xda7c	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:10.159625053 CEST	192.168.2.22	8.8.8.8	0x8dc3	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:10.169545889 CEST	192.168.2.22	8.8.8.8	0xc0ef	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:10.181350946 CEST	192.168.2.22	8.8.8.8	0x8cbf	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:10.192066908 CEST	192.168.2.22	8.8.8.8	0x58e5	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:10.201870918 CEST	192.168.2.22	8.8.8.8	0xc99c	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:10.212188005 CEST	192.168.2.22	8.8.8.8	0x830e	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:11.216280937 CEST	192.168.2.22	8.8.8.8	0x830e	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:11.270459890 CEST	192.168.2.22	8.8.8.8	0x4f6b	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:11.513442993 CEST	192.168.2.22	8.8.8.8	0x199a	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:11.523251057 CEST	192.168.2.22	8.8.8.8	0x63fa	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:11.532846928 CEST	192.168.2.22	8.8.8.8	0x54e3	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:11.546906948 CEST	192.168.2.22	8.8.8.8	0x2a46	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:11.558192015 CEST	192.168.2.22	8.8.8.8	0x4fd3	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:11.568768978 CEST	192.168.2.22	8.8.8.8	0x2596	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:11.588666916 CEST	192.168.2.22	8.8.8.8	0xa21d	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:11.598783016 CEST	192.168.2.22	8.8.8.8	0xb97b	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:11.609247923 CEST	192.168.2.22	8.8.8.8	0x6e4	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:11.619895935 CEST	192.168.2.22	8.8.8.8	0x6f70	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:11.629930019 CEST	192.168.2.22	8.8.8.8	0xed60	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:11.640345097 CEST	192.168.2.22	8.8.8.8	0x1a1b	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:11.650226116 CEST	192.168.2.22	8.8.8.8	0x8e22	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:11.661736965 CEST	192.168.2.22	8.8.8.8	0x16c7	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:11.674144030 CEST	192.168.2.22	8.8.8.8	0xcfb8	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:11.685439110 CEST	192.168.2.22	8.8.8.8	0xa098	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:11.698743105 CEST	192.168.2.22	8.8.8.8	0xcee1	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:11.731806993 CEST	192.168.2.22	8.8.8.8	0x94da	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:11.743444920 CEST	192.168.2.22	8.8.8.8	0x8aa0	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:11.761352062 CEST	192.168.2.22	8.8.8.8	0x2015	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:11.771660089 CEST	192.168.2.22	8.8.8.8	0xc236	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:11.781594992 CEST	192.168.2.22	8.8.8.8	0xe9d5	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:11.790765047 CEST	192.168.2.22	8.8.8.8	0x36c	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:11.802086115 CEST	192.168.2.22	8.8.8.8	0x5bac	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:11.811675072 CEST	192.168.2.22	8.8.8.8	0x4d1	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:11.823323965 CEST	192.168.2.22	8.8.8.8	0xa9d1	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:11.832622051 CEST	192.168.2.22	8.8.8.8	0xbc58	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:11.842232943 CEST	192.168.2.22	8.8.8.8	0xcb54	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:11.851741076 CEST	192.168.2.22	8.8.8.8	0xb5e9	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:11.860872984 CEST	192.168.2.22	8.8.8.8	0x9893	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:11.869493961 CEST	192.168.2.22	8.8.8.8	0x75eb	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:11.878642082 CEST	192.168.2.22	8.8.8.8	0xd2cb	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:11.887780905 CEST	192.168.2.22	8.8.8.8	0x8375	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:11.896877050 CEST	192.168.2.22	8.8.8.8	0xea1a	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:11.906434059 CEST	192.168.2.22	8.8.8.8	0xad56	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:11.915148020 CEST	192.168.2.22	8.8.8.8	0xf7ea	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:11.924633026 CEST	192.168.2.22	8.8.8.8	0x87a5	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:11.934972048 CEST	192.168.2.22	8.8.8.8	0x3f9b	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:11.945133924 CEST	192.168.2.22	8.8.8.8	0xee26	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:11.953984976 CEST	192.168.2.22	8.8.8.8	0xec6c	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:11.963687897 CEST	192.168.2.22	8.8.8.8	0x2cb8	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:11.973833084 CEST	192.168.2.22	8.8.8.8	0xc85c	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:11.986115932 CEST	192.168.2.22	8.8.8.8	0xee33	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:11.997291088 CEST	192.168.2.22	8.8.8.8	0x4e03	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:12.007669926 CEST	192.168.2.22	8.8.8.8	0xc98	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:12.019515991 CEST	192.168.2.22	8.8.8.8	0x7ea5	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:12.030422926 CEST	192.168.2.22	8.8.8.8	0xd4d5	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:12.041440010 CEST	192.168.2.22	8.8.8.8	0x8df9	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:12.085362911 CEST	192.168.2.22	8.8.8.8	0xa02c	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:12.096148014 CEST	192.168.2.22	8.8.8.8	0x6a0b	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:12.107784986 CEST	192.168.2.22	8.8.8.8	0xed70	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:12.118158102 CEST	192.168.2.22	8.8.8.8	0x4de0	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:12.128222942 CEST	192.168.2.22	8.8.8.8	0xcb9f	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:12.139014006 CEST	192.168.2.22	8.8.8.8	0x78d	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:12.149223089 CEST	192.168.2.22	8.8.8.8	0x26de	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:12.188229084 CEST	192.168.2.22	8.8.8.8	0x2d30	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:12.205724001 CEST	192.168.2.22	8.8.8.8	0xcdcc	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:12.227643013 CEST	192.168.2.22	8.8.8.8	0xd44	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:12.244860888 CEST	192.168.2.22	8.8.8.8	0x583e	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:12.266010046 CEST	192.168.2.22	8.8.8.8	0x7e6a	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:12.277923107 CEST	192.168.2.22	8.8.8.8	0xf6b	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:12.845364094 CEST	192.168.2.22	8.8.8.8	0x6223	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:13.002371073 CEST	192.168.2.22	8.8.8.8	0xa409	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:13.166627884 CEST	192.168.2.22	8.8.8.8	0x74c6	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:13.177223921 CEST	192.168.2.22	8.8.8.8	0x4e87	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:13.186477900 CEST	192.168.2.22	8.8.8.8	0x5fba	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:13.195941925 CEST	192.168.2.22	8.8.8.8	0x1a94	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:13.205097914 CEST	192.168.2.22	8.8.8.8	0x259d	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:13.215023041 CEST	192.168.2.22	8.8.8.8	0xb6f4	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:13.224877119 CEST	192.168.2.22	8.8.8.8	0xd28d	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:13.234421015 CEST	192.168.2.22	8.8.8.8	0x216d	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:13.243897915 CEST	192.168.2.22	8.8.8.8	0x9a88	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:13.253828049 CEST	192.168.2.22	8.8.8.8	0x6530	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:13.266024113 CEST	192.168.2.22	8.8.8.8	0xa5de	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:13.275847912 CEST	192.168.2.22	8.8.8.8	0x5c35	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:13.284997940 CEST	192.168.2.22	8.8.8.8	0x61f9	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:13.294500113 CEST	192.168.2.22	8.8.8.8	0xb58c	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:13.303693056 CEST	192.168.2.22	8.8.8.8	0xa335	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:13.313174009 CEST	192.168.2.22	8.8.8.8	0x3aa1	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:13.322849989 CEST	192.168.2.22	8.8.8.8	0xd350	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:13.332189083 CEST	192.168.2.22	8.8.8.8	0x828a	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:13.341594934 CEST	192.168.2.22	8.8.8.8	0xedd	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:13.351010084 CEST	192.168.2.22	8.8.8.8	0x7f49	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:13.360579014 CEST	192.168.2.22	8.8.8.8	0x98fd	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:13.370011091 CEST	192.168.2.22	8.8.8.8	0xf4be	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:13.379410028 CEST	192.168.2.22	8.8.8.8	0x27d	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:13.390481949 CEST	192.168.2.22	8.8.8.8	0x1fa8	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:13.399854898 CEST	192.168.2.22	8.8.8.8	0xd031	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:13.409292936 CEST	192.168.2.22	8.8.8.8	0xc07f	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:13.419974089 CEST	192.168.2.22	8.8.8.8	0x16ac	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:13.430898905 CEST	192.168.2.22	8.8.8.8	0x81fb	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:13.440953016 CEST	192.168.2.22	8.8.8.8	0xc38a	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:13.450536013 CEST	192.168.2.22	8.8.8.8	0x1a9a	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:13.459660053 CEST	192.168.2.22	8.8.8.8	0xb6b6	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:13.469403982 CEST	192.168.2.22	8.8.8.8	0x5232	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:13.485169888 CEST	192.168.2.22	8.8.8.8	0x6c13	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:13.495461941 CEST	192.168.2.22	8.8.8.8	0xae33	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:13.511627913 CEST	192.168.2.22	8.8.8.8	0xfc56	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:13.522978067 CEST	192.168.2.22	8.8.8.8	0x1ed2	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:13.535650969 CEST	192.168.2.22	8.8.8.8	0x8faf	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:13.547887087 CEST	192.168.2.22	8.8.8.8	0xd624	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:13.561752081 CEST	192.168.2.22	8.8.8.8	0x2b6e	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:13.627109051 CEST	192.168.2.22	8.8.8.8	0x931d	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:13.737417936 CEST	192.168.2.22	8.8.8.8	0xd70d	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:13.758382082 CEST	192.168.2.22	8.8.8.8	0xb084	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:14.132155895 CEST	192.168.2.22	8.8.8.8	0x6659	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:14.143834114 CEST	192.168.2.22	8.8.8.8	0xe731	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:14.176213980 CEST	192.168.2.22	8.8.8.8	0xfce8	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:14.186202049 CEST	192.168.2.22	8.8.8.8	0xa1a9	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:14.195362091 CEST	192.168.2.22	8.8.8.8	0x9ce9	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:14.205164909 CEST	192.168.2.22	8.8.8.8	0x94c8	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:14.214354038 CEST	192.168.2.22	8.8.8.8	0x3d2e	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:14.224133968 CEST	192.168.2.22	8.8.8.8	0x674b	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:14.233493090 CEST	192.168.2.22	8.8.8.8	0x9c5c	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:14.243540049 CEST	192.168.2.22	8.8.8.8	0xe70b	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:14.252706051 CEST	192.168.2.22	8.8.8.8	0x843d	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:14.262309074 CEST	192.168.2.22	8.8.8.8	0xf98e	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:14.272576094 CEST	192.168.2.22	8.8.8.8	0xb86f	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:14.282202005 CEST	192.168.2.22	8.8.8.8	0xe5d	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:14.291532040 CEST	192.168.2.22	8.8.8.8	0x4992	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:14.301141024 CEST	192.168.2.22	8.8.8.8	0xe19a	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:14.312652111 CEST	192.168.2.22	8.8.8.8	0x779d	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:14.321634054 CEST	192.168.2.22	8.8.8.8	0x3fd1	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:14.330900908 CEST	192.168.2.22	8.8.8.8	0x3e94	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:14.342490911 CEST	192.168.2.22	8.8.8.8	0xdbd	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:14.351954937 CEST	192.168.2.22	8.8.8.8	0x3619	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:14.361218929 CEST	192.168.2.22	8.8.8.8	0x734	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:14.371313095 CEST	192.168.2.22	8.8.8.8	0xc8d8	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:14.380537987 CEST	192.168.2.22	8.8.8.8	0x7f0e	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:14.389856100 CEST	192.168.2.22	8.8.8.8	0x3443	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:14.399211884 CEST	192.168.2.22	8.8.8.8	0xd98f	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:14.409552097 CEST	192.168.2.22	8.8.8.8	0xd6f9	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:14.419730902 CEST	192.168.2.22	8.8.8.8	0x7c4	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:14.429932117 CEST	192.168.2.22	8.8.8.8	0x9f5c	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:14.439415932 CEST	192.168.2.22	8.8.8.8	0x81a1	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:14.449322939 CEST	192.168.2.22	8.8.8.8	0xb5e2	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:14.458689928 CEST	192.168.2.22	8.8.8.8	0x44bc	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:14.467847109 CEST	192.168.2.22	8.8.8.8	0x8465	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:14.478094101 CEST	192.168.2.22	8.8.8.8	0x759e	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:14.487366915 CEST	192.168.2.22	8.8.8.8	0x4461	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:14.497066975 CEST	192.168.2.22	8.8.8.8	0x3d23	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:14.507447958 CEST	192.168.2.22	8.8.8.8	0xa13f	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:14.516897917 CEST	192.168.2.22	8.8.8.8	0x6998	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:14.526154041 CEST	192.168.2.22	8.8.8.8	0x423d	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:14.535415888 CEST	192.168.2.22	8.8.8.8	0xae91	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:14.546000957 CEST	192.168.2.22	8.8.8.8	0x6278	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:14.555358887 CEST	192.168.2.22	8.8.8.8	0x6ed7	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:14.564462900 CEST	192.168.2.22	8.8.8.8	0xd9e3	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:14.573811054 CEST	192.168.2.22	8.8.8.8	0xff73	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:14.583091021 CEST	192.168.2.22	8.8.8.8	0x561f	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:14.594862938 CEST	192.168.2.22	8.8.8.8	0xa219	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:14.604953051 CEST	192.168.2.22	8.8.8.8	0x83f6	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:14.618371964 CEST	192.168.2.22	8.8.8.8	0xd0b2	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:14.629160881 CEST	192.168.2.22	8.8.8.8	0x10b5	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:14.639589071 CEST	192.168.2.22	8.8.8.8	0x181f	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:14.650108099 CEST	192.168.2.22	8.8.8.8	0x5ee9	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:14.660965919 CEST	192.168.2.22	8.8.8.8	0xa8c4	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:14.671271086 CEST	192.168.2.22	8.8.8.8	0x7a79	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:14.682393074 CEST	192.168.2.22	8.8.8.8	0xfa6d	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:14.693964958 CEST	192.168.2.22	8.8.8.8	0x5d9c	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:14.707299948 CEST	192.168.2.22	8.8.8.8	0x564c	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:14.724015951 CEST	192.168.2.22	8.8.8.8	0xed2b	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:14.738312006 CEST	192.168.2.22	8.8.8.8	0xb11b	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:14.749557018 CEST	192.168.2.22	8.8.8.8	0x9232	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:14.760932922 CEST	192.168.2.22	8.8.8.8	0xae32	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:14.770646095 CEST	192.168.2.22	8.8.8.8	0x7fcb	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:14.781884909 CEST	192.168.2.22	8.8.8.8	0x8fd4	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:14.792057037 CEST	192.168.2.22	8.8.8.8	0xb457	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:14.803435087 CEST	192.168.2.22	8.8.8.8	0x2aa7	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:14.814867973 CEST	192.168.2.22	8.8.8.8	0xe890	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:14.832665920 CEST	192.168.2.22	8.8.8.8	0xe16c	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:14.874350071 CEST	192.168.2.22	8.8.8.8	0x4d1b	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:14.885261059 CEST	192.168.2.22	8.8.8.8	0xf481	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:14.896672010 CEST	192.168.2.22	8.8.8.8	0xf9ff	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:14.907893896 CEST	192.168.2.22	8.8.8.8	0x27f4	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:14.921566010 CEST	192.168.2.22	8.8.8.8	0x80c5	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:14.934144974 CEST	192.168.2.22	8.8.8.8	0xc291	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:14.950145006 CEST	192.168.2.22	8.8.8.8	0x5d79	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:14.962279081 CEST	192.168.2.22	8.8.8.8	0xa725	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:14.972897053 CEST	192.168.2.22	8.8.8.8	0x690	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:14.983725071 CEST	192.168.2.22	8.8.8.8	0xb565	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:14.994266033 CEST	192.168.2.22	8.8.8.8	0x85c9	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:15.006143093 CEST	192.168.2.22	8.8.8.8	0xf6f9	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:15.030253887 CEST	192.168.2.22	8.8.8.8	0x53cc	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:15.042691946 CEST	192.168.2.22	8.8.8.8	0x54c8	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:15.055059910 CEST	192.168.2.22	8.8.8.8	0x7666	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:15.065277100 CEST	192.168.2.22	8.8.8.8	0x4c88	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:15.075265884 CEST	192.168.2.22	8.8.8.8	0xf839	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:15.087740898 CEST	192.168.2.22	8.8.8.8	0xdba0	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:15.100128889 CEST	192.168.2.22	8.8.8.8	0x2b19	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:15.116744041 CEST	192.168.2.22	8.8.8.8	0x8158	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:15.127558947 CEST	192.168.2.22	8.8.8.8	0x98a0	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:15.140798092 CEST	192.168.2.22	8.8.8.8	0x3a1	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:15.151223898 CEST	192.168.2.22	8.8.8.8	0xa93a	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:15.161231995 CEST	192.168.2.22	8.8.8.8	0x8ac2	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:15.171763897 CEST	192.168.2.22	8.8.8.8	0x31f0	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:15.239408016 CEST	192.168.2.22	8.8.8.8	0x77a9	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:15.259836912 CEST	192.168.2.22	8.8.8.8	0xcb10	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:15.278964043 CEST	192.168.2.22	8.8.8.8	0xfbd	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:15.297158957 CEST	192.168.2.22	8.8.8.8	0xe9e3	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:15.319360971 CEST	192.168.2.22	8.8.8.8	0x94d3	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:15.332007885 CEST	192.168.2.22	8.8.8.8	0xaa06	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:15.358280897 CEST	192.168.2.22	8.8.8.8	0xe7b6	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:15.403343916 CEST	192.168.2.22	8.8.8.8	0x3b1d	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:15.413253069 CEST	192.168.2.22	8.8.8.8	0x2fcf	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:15.426311970 CEST	192.168.2.22	8.8.8.8	0x6bd8	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:15.435416937 CEST	192.168.2.22	8.8.8.8	0x500f	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:15.506776094 CEST	192.168.2.22	8.8.8.8	0x5518	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:15.664192915 CEST	192.168.2.22	8.8.8.8	0x7c7c	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:16.646446943 CEST	192.168.2.22	8.8.8.8	0x8b07	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:16.656591892 CEST	192.168.2.22	8.8.8.8	0x60fc	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:16.666304111 CEST	192.168.2.22	8.8.8.8	0xaab3	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:16.675903082 CEST	192.168.2.22	8.8.8.8	0x7dde	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:16.685337067 CEST	192.168.2.22	8.8.8.8	0xa654	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:16.695811033 CEST	192.168.2.22	8.8.8.8	0x9716	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:16.705864906 CEST	192.168.2.22	8.8.8.8	0x7b83	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:16.718137980 CEST	192.168.2.22	8.8.8.8	0x9770	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:16.729069948 CEST	192.168.2.22	8.8.8.8	0xa866	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:16.738961935 CEST	192.168.2.22	8.8.8.8	0x92a0	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:16.748908043 CEST	192.168.2.22	8.8.8.8	0x1377	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:16.759094954 CEST	192.168.2.22	8.8.8.8	0x7b62	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:16.769648075 CEST	192.168.2.22	8.8.8.8	0xa11b	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:16.780265093 CEST	192.168.2.22	8.8.8.8	0xb7cb	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:16.789904118 CEST	192.168.2.22	8.8.8.8	0xd50e	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:16.800441027 CEST	192.168.2.22	8.8.8.8	0xee15	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:16.811304092 CEST	192.168.2.22	8.8.8.8	0x8833	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:16.822052002 CEST	192.168.2.22	8.8.8.8	0xc43d	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:16.832823992 CEST	192.168.2.22	8.8.8.8	0x1c44	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:16.843812943 CEST	192.168.2.22	8.8.8.8	0xf828	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:16.853935957 CEST	192.168.2.22	8.8.8.8	0x85aa	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:16.864954948 CEST	192.168.2.22	8.8.8.8	0xb1fe	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:16.878801107 CEST	192.168.2.22	8.8.8.8	0x9744	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:16.892546892 CEST	192.168.2.22	8.8.8.8	0x9abb	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:16.904700994 CEST	192.168.2.22	8.8.8.8	0x32bd	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:16.939937115 CEST	192.168.2.22	8.8.8.8	0x423d	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:16.952558994 CEST	192.168.2.22	8.8.8.8	0xa6e0	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:16.965027094 CEST	192.168.2.22	8.8.8.8	0x661c	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:16.976533890 CEST	192.168.2.22	8.8.8.8	0xc104	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:16.988791943 CEST	192.168.2.22	8.8.8.8	0x8561	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:17.000255108 CEST	192.168.2.22	8.8.8.8	0xf326	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:17.012464046 CEST	192.168.2.22	8.8.8.8	0xca12	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:17.024321079 CEST	192.168.2.22	8.8.8.8	0xc91d	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:17.035726070 CEST	192.168.2.22	8.8.8.8	0x9d13	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:17.047254086 CEST	192.168.2.22	8.8.8.8	0x4a76	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:17.059412956 CEST	192.168.2.22	8.8.8.8	0xeb93	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:17.076324940 CEST	192.168.2.22	8.8.8.8	0x265c	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:17.087729931 CEST	192.168.2.22	8.8.8.8	0x4abd	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:17.100578070 CEST	192.168.2.22	8.8.8.8	0xf5cc	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:17.112154007 CEST	192.168.2.22	8.8.8.8	0x123d	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:17.123096943 CEST	192.168.2.22	8.8.8.8	0x334d	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:17.134927034 CEST	192.168.2.22	8.8.8.8	0x7694	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:17.146435022 CEST	192.168.2.22	8.8.8.8	0x1e32	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:17.158705950 CEST	192.168.2.22	8.8.8.8	0x1bc1	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:17.170954943 CEST	192.168.2.22	8.8.8.8	0xa929	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:17.183093071 CEST	192.168.2.22	8.8.8.8	0x574a	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:17.197014093 CEST	192.168.2.22	8.8.8.8	0x373a	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:17.212455988 CEST	192.168.2.22	8.8.8.8	0x7b8f	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:17.225891113 CEST	192.168.2.22	8.8.8.8	0xb8b9	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:17.238411903 CEST	192.168.2.22	8.8.8.8	0x7f7d	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:17.282555103 CEST	192.168.2.22	8.8.8.8	0x3cab	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:17.296089888 CEST	192.168.2.22	8.8.8.8	0xfd8a	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:17.308620930 CEST	192.168.2.22	8.8.8.8	0x7d50	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:17.347228050 CEST	192.168.2.22	8.8.8.8	0xa6b5	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:17.460706949 CEST	192.168.2.22	8.8.8.8	0xb633	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:17.480253935 CEST	192.168.2.22	8.8.8.8	0x22a5	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:17.498094082 CEST	192.168.2.22	8.8.8.8	0xdbfc	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:17.514055967 CEST	192.168.2.22	8.8.8.8	0xc846	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:17.525202990 CEST	192.168.2.22	8.8.8.8	0xccc5	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:17.539881945 CEST	192.168.2.22	8.8.8.8	0xf65	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:17.556130886 CEST	192.168.2.22	8.8.8.8	0x3082	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:17.668153048 CEST	192.168.2.22	8.8.8.8	0xff60	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:17.681989908 CEST	192.168.2.22	8.8.8.8	0x77ce	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:17.753096104 CEST	192.168.2.22	8.8.8.8	0x1e36	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:17.809139967 CEST	192.168.2.22	8.8.8.8	0x9598	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:17.853626966 CEST	192.168.2.22	8.8.8.8	0x89ef	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:17.874730110 CEST	192.168.2.22	8.8.8.8	0x128d	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:17.888695002 CEST	192.168.2.22	8.8.8.8	0x2647	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:17.903477907 CEST	192.168.2.22	8.8.8.8	0x71f6	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:17.918673992 CEST	192.168.2.22	8.8.8.8	0xbf84	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:17.934166908 CEST	192.168.2.22	8.8.8.8	0xd4f8	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:18.011997938 CEST	192.168.2.22	8.8.8.8	0xb949	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:18.024784088 CEST	192.168.2.22	8.8.8.8	0xd945	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:18.038677931 CEST	192.168.2.22	8.8.8.8	0xcab4	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:18.053034067 CEST	192.168.2.22	8.8.8.8	0x490d	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:18.065562010 CEST	192.168.2.22	8.8.8.8	0x92dc	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:18.078460932 CEST	192.168.2.22	8.8.8.8	0xc4aa	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:18.092756987 CEST	192.168.2.22	8.8.8.8	0x8a5b	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:18.106581926 CEST	192.168.2.22	8.8.8.8	0x1f54	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:18.120789051 CEST	192.168.2.22	8.8.8.8	0x4c0d	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:18.131916046 CEST	192.168.2.22	8.8.8.8	0xcdb5	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:18.144010067 CEST	192.168.2.22	8.8.8.8	0xbc3d	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:18.156125069 CEST	192.168.2.22	8.8.8.8	0xd3f5	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:18.167710066 CEST	192.168.2.22	8.8.8.8	0xae29	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:18.179249048 CEST	192.168.2.22	8.8.8.8	0xdb89	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:18.192079067 CEST	192.168.2.22	8.8.8.8	0x1337	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:18.205408096 CEST	192.168.2.22	8.8.8.8	0xf8ed	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:18.216402054 CEST	192.168.2.22	8.8.8.8	0x3d3b	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:18.232461929 CEST	192.168.2.22	8.8.8.8	0xbbe9	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:18.244136095 CEST	192.168.2.22	8.8.8.8	0x29fb	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:18.255727053 CEST	192.168.2.22	8.8.8.8	0x8724	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:18.269172907 CEST	192.168.2.22	8.8.8.8	0x8d32	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:18.279510021 CEST	192.168.2.22	8.8.8.8	0x4db1	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:18.322072983 CEST	192.168.2.22	8.8.8.8	0x1a69	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:18.332525015 CEST	192.168.2.22	8.8.8.8	0xdea6	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:18.342099905 CEST	192.168.2.22	8.8.8.8	0x635b	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:18.351093054 CEST	192.168.2.22	8.8.8.8	0x35af	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:18.364468098 CEST	192.168.2.22	8.8.8.8	0x1473	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:18.374495983 CEST	192.168.2.22	8.8.8.8	0x388b	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:18.386737108 CEST	192.168.2.22	8.8.8.8	0x13b2	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:18.397629023 CEST	192.168.2.22	8.8.8.8	0xbb9d	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:18.410641909 CEST	192.168.2.22	8.8.8.8	0x8f0a	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:18.421679020 CEST	192.168.2.22	8.8.8.8	0x36ec	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:18.431934118 CEST	192.168.2.22	8.8.8.8	0xd896	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:18.442291021 CEST	192.168.2.22	8.8.8.8	0xf213	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:18.451062918 CEST	192.168.2.22	8.8.8.8	0xaa8b	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:18.718324900 CEST	192.168.2.22	8.8.8.8	0x9b05	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:18.825145960 CEST	192.168.2.22	8.8.8.8	0x4dac	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:19.147519112 CEST	192.168.2.22	8.8.8.8	0x46a6	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:19.511033058 CEST	192.168.2.22	8.8.8.8	0x2d9c	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:19.526343107 CEST	192.168.2.22	8.8.8.8	0x8814	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:19.538592100 CEST	192.168.2.22	8.8.8.8	0x3716	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:19.551534891 CEST	192.168.2.22	8.8.8.8	0xda6c	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:19.564735889 CEST	192.168.2.22	8.8.8.8	0xba71	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:19.575974941 CEST	192.168.2.22	8.8.8.8	0x361c	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:19.587830067 CEST	192.168.2.22	8.8.8.8	0x734d	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:19.598036051 CEST	192.168.2.22	8.8.8.8	0x5983	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:19.608820915 CEST	192.168.2.22	8.8.8.8	0x146b	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:19.619959116 CEST	192.168.2.22	8.8.8.8	0x1258	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:19.631006002 CEST	192.168.2.22	8.8.8.8	0x168a	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:19.641392946 CEST	192.168.2.22	8.8.8.8	0x8ed0	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:19.651925087 CEST	192.168.2.22	8.8.8.8	0xd0ac	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:19.662252903 CEST	192.168.2.22	8.8.8.8	0x55b6	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:19.674249887 CEST	192.168.2.22	8.8.8.8	0x87e3	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:19.685671091 CEST	192.168.2.22	8.8.8.8	0x8701	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:19.720329046 CEST	192.168.2.22	8.8.8.8	0xddce	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:19.730606079 CEST	192.168.2.22	8.8.8.8	0xcf0d	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:19.741785049 CEST	192.168.2.22	8.8.8.8	0x920e	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:19.753011942 CEST	192.168.2.22	8.8.8.8	0x86df	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:19.763355017 CEST	192.168.2.22	8.8.8.8	0x5f63	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:19.773988962 CEST	192.168.2.22	8.8.8.8	0xf9c3	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:19.785167933 CEST	192.168.2.22	8.8.8.8	0x6f05	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:19.795434952 CEST	192.168.2.22	8.8.8.8	0x9cce	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:19.806068897 CEST	192.168.2.22	8.8.8.8	0xa70c	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:19.817090988 CEST	192.168.2.22	8.8.8.8	0x4c3	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:19.827114105 CEST	192.168.2.22	8.8.8.8	0xc6fc	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:19.837760925 CEST	192.168.2.22	8.8.8.8	0x69b8	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:19.847183943 CEST	192.168.2.22	8.8.8.8	0xf07f	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:19.857139111 CEST	192.168.2.22	8.8.8.8	0x95cb	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:19.867100000 CEST	192.168.2.22	8.8.8.8	0xe7a5	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:19.876831055 CEST	192.168.2.22	8.8.8.8	0xe43f	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:19.887046099 CEST	192.168.2.22	8.8.8.8	0x62b3	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:19.896601915 CEST	192.168.2.22	8.8.8.8	0xd8f3	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:19.907610893 CEST	192.168.2.22	8.8.8.8	0xde17	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:19.923182964 CEST	192.168.2.22	8.8.8.8	0x67be	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:19.935914040 CEST	192.168.2.22	8.8.8.8	0x7f25	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:19.945640087 CEST	192.168.2.22	8.8.8.8	0x97b0	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:19.955765009 CEST	192.168.2.22	8.8.8.8	0x3305	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:19.966355085 CEST	192.168.2.22	8.8.8.8	0x3149	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:19.976917982 CEST	192.168.2.22	8.8.8.8	0xf29f	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:19.986344099 CEST	192.168.2.22	8.8.8.8	0xc501	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:19.995788097 CEST	192.168.2.22	8.8.8.8	0xf205	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:20.008125067 CEST	192.168.2.22	8.8.8.8	0x435f	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:20.017901897 CEST	192.168.2.22	8.8.8.8	0xfe60	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:20.027342081 CEST	192.168.2.22	8.8.8.8	0x842e	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:20.058779001 CEST	192.168.2.22	8.8.8.8	0x87f2	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:20.069297075 CEST	192.168.2.22	8.8.8.8	0xe10b	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:20.080599070 CEST	192.168.2.22	8.8.8.8	0x737	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:20.090950966 CEST	192.168.2.22	8.8.8.8	0x1c95	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:20.100997925 CEST	192.168.2.22	8.8.8.8	0x98d7	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:20.110492945 CEST	192.168.2.22	8.8.8.8	0x344b	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:20.120734930 CEST	192.168.2.22	8.8.8.8	0x4376	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:20.159208059 CEST	192.168.2.22	8.8.8.8	0x3d6b	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:20.175627947 CEST	192.168.2.22	8.8.8.8	0xaa8c	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:20.187130928 CEST	192.168.2.22	8.8.8.8	0x228a	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:20.197896004 CEST	192.168.2.22	8.8.8.8	0x87f5	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:20.207979918 CEST	192.168.2.22	8.8.8.8	0x39a5	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:20.232003927 CEST	192.168.2.22	8.8.8.8	0x8bbf	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:20.246110916 CEST	192.168.2.22	8.8.8.8	0xb178	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:20.256619930 CEST	192.168.2.22	8.8.8.8	0x72f5	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:20.266993046 CEST	192.168.2.22	8.8.8.8	0xf244	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:20.277978897 CEST	192.168.2.22	8.8.8.8	0xc812	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:20.288567066 CEST	192.168.2.22	8.8.8.8	0xf3da	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:20.300673962 CEST	192.168.2.22	8.8.8.8	0x679b	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:20.311038971 CEST	192.168.2.22	8.8.8.8	0xdeea	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:20.322938919 CEST	192.168.2.22	8.8.8.8	0xb354	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:20.333024025 CEST	192.168.2.22	8.8.8.8	0x1d10	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:20.345535994 CEST	192.168.2.22	8.8.8.8	0x572	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:20.356708050 CEST	192.168.2.22	8.8.8.8	0x65f2	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:20.367091894 CEST	192.168.2.22	8.8.8.8	0x111	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:20.412462950 CEST	192.168.2.22	8.8.8.8	0xec01	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:20.424695015 CEST	192.168.2.22	8.8.8.8	0x6ac	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:20.437118053 CEST	192.168.2.22	8.8.8.8	0xc57b	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:20.448693991 CEST	192.168.2.22	8.8.8.8	0x8eeb	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:20.470596075 CEST	192.168.2.22	8.8.8.8	0x72ea	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:20.512779951 CEST	192.168.2.22	8.8.8.8	0x8e91	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:20.528861046 CEST	192.168.2.22	8.8.8.8	0xa80a	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:20.540390015 CEST	192.168.2.22	8.8.8.8	0x42b8	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:20.553102970 CEST	192.168.2.22	8.8.8.8	0xda0	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:20.567787886 CEST	192.168.2.22	8.8.8.8	0x10de	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:20.580262899 CEST	192.168.2.22	8.8.8.8	0x5754	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:20.594383001 CEST	192.168.2.22	8.8.8.8	0xf8f1	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:20.608774900 CEST	192.168.2.22	8.8.8.8	0x5130	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:20.619522095 CEST	192.168.2.22	8.8.8.8	0x129d	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:20.849150896 CEST	192.168.2.22	8.8.8.8	0x4cf8	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:20.860843897 CEST	192.168.2.22	8.8.8.8	0xf618	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:20.871649027 CEST	192.168.2.22	8.8.8.8	0xf830	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:20.884318113 CEST	192.168.2.22	8.8.8.8	0xe904	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:20.894414902 CEST	192.168.2.22	8.8.8.8	0xf429	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:20.908291101 CEST	192.168.2.22	8.8.8.8	0xac69	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:20.919748068 CEST	192.168.2.22	8.8.8.8	0x1ff8	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:20.930037975 CEST	192.168.2.22	8.8.8.8	0xd4f	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:20.940109968 CEST	192.168.2.22	8.8.8.8	0x527d	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:20.964679003 CEST	192.168.2.22	8.8.8.8	0xa1c2	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:20.975086927 CEST	192.168.2.22	8.8.8.8	0x8fd	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:20.985558033 CEST	192.168.2.22	8.8.8.8	0xd603	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:20.997077942 CEST	192.168.2.22	8.8.8.8	0xc32a	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:21.010153055 CEST	192.168.2.22	8.8.8.8	0xaa19	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:21.020554066 CEST	192.168.2.22	8.8.8.8	0x6966	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:21.032607079 CEST	192.168.2.22	8.8.8.8	0x93cc	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:21.042536974 CEST	192.168.2.22	8.8.8.8	0x95b	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:21.052480936 CEST	192.168.2.22	8.8.8.8	0xafe8	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:21.100759029 CEST	192.168.2.22	8.8.8.8	0x29d0	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:21.113595009 CEST	192.168.2.22	8.8.8.8	0x7da3	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:21.125319958 CEST	192.168.2.22	8.8.8.8	0x7ce2	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:21.135946989 CEST	192.168.2.22	8.8.8.8	0x3913	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:21.146738052 CEST	192.168.2.22	8.8.8.8	0xf252	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:21.157277107 CEST	192.168.2.22	8.8.8.8	0xf9d7	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:21.168783903 CEST	192.168.2.22	8.8.8.8	0xaab5	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:21.180233002 CEST	192.168.2.22	8.8.8.8	0x46d1	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:21.191761017 CEST	192.168.2.22	8.8.8.8	0x63d	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:21.203911066 CEST	192.168.2.22	8.8.8.8	0xa4ff	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:21.214917898 CEST	192.168.2.22	8.8.8.8	0x18a2	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:21.226708889 CEST	192.168.2.22	8.8.8.8	0x91d8	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:21.237799883 CEST	192.168.2.22	8.8.8.8	0xf388	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:21.249339104 CEST	192.168.2.22	8.8.8.8	0x63c7	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:21.273089886 CEST	192.168.2.22	8.8.8.8	0xf2c7	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:21.294497967 CEST	192.168.2.22	8.8.8.8	0x83e	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:21.306020975 CEST	192.168.2.22	8.8.8.8	0xccec	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:21.318938017 CEST	192.168.2.22	8.8.8.8	0x32dc	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:21.330162048 CEST	192.168.2.22	8.8.8.8	0xc251	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:21.345582962 CEST	192.168.2.22	8.8.8.8	0x8d2c	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:21.356471062 CEST	192.168.2.22	8.8.8.8	0x2ba6	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:21.369412899 CEST	192.168.2.22	8.8.8.8	0xa553	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:21.380119085 CEST	192.168.2.22	8.8.8.8	0x93c9	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:21.391689062 CEST	192.168.2.22	8.8.8.8	0x6120	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:21.421008110 CEST	192.168.2.22	8.8.8.8	0xeb16	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:21.450212955 CEST	192.168.2.22	8.8.8.8	0xd603	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:21.461827040 CEST	192.168.2.22	8.8.8.8	0x7ca4	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:21.471890926 CEST	192.168.2.22	8.8.8.8	0xf6ac	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:21.482804060 CEST	192.168.2.22	8.8.8.8	0xee28	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:21.493149042 CEST	192.168.2.22	8.8.8.8	0x39a6	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:21.505840063 CEST	192.168.2.22	8.8.8.8	0xd099	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:21.543765068 CEST	192.168.2.22	8.8.8.8	0x4cd7	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:21.566637993 CEST	192.168.2.22	8.8.8.8	0x59f2	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:21.589312077 CEST	192.168.2.22	8.8.8.8	0x6b15	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:21.611161947 CEST	192.168.2.22	8.8.8.8	0xe16	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:21.633845091 CEST	192.168.2.22	8.8.8.8	0xf343	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:21.857122898 CEST	192.168.2.22	8.8.8.8	0x9355	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:22.163057089 CEST	192.168.2.22	8.8.8.8	0x4d65	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:22.392678976 CEST	192.168.2.22	8.8.8.8	0x619b	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:22.540344000 CEST	192.168.2.22	8.8.8.8	0xfad9	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:22.611624002 CEST	192.168.2.22	8.8.8.8	0xc1d5	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:22.639373064 CEST	192.168.2.22	8.8.8.8	0xc10	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:22.648647070 CEST	192.168.2.22	8.8.8.8	0xe22f	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:22.659055948 CEST	192.168.2.22	8.8.8.8	0x24df	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:22.670526981 CEST	192.168.2.22	8.8.8.8	0x9d4e	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:22.680969954 CEST	192.168.2.22	8.8.8.8	0x2380	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:22.690747023 CEST	192.168.2.22	8.8.8.8	0x3a23	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:22.701555967 CEST	192.168.2.22	8.8.8.8	0x1617	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:22.710925102 CEST	192.168.2.22	8.8.8.8	0xa2bc	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:22.721951008 CEST	192.168.2.22	8.8.8.8	0xc4f4	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:22.732661009 CEST	192.168.2.22	8.8.8.8	0xdc22	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:22.742753029 CEST	192.168.2.22	8.8.8.8	0x23bb	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:22.752233982 CEST	192.168.2.22	8.8.8.8	0x7932	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:22.761940956 CEST	192.168.2.22	8.8.8.8	0x4d29	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:22.772795916 CEST	192.168.2.22	8.8.8.8	0x5d0b	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:22.782354116 CEST	192.168.2.22	8.8.8.8	0xe653	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:22.795672894 CEST	192.168.2.22	8.8.8.8	0x5d07	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:22.809777975 CEST	192.168.2.22	8.8.8.8	0x8073	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:22.820323944 CEST	192.168.2.22	8.8.8.8	0xc76c	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:22.831490993 CEST	192.168.2.22	8.8.8.8	0xe899	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:22.845088005 CEST	192.168.2.22	8.8.8.8	0x5fb5	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:22.859544992 CEST	192.168.2.22	8.8.8.8	0xc4df	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:22.871711969 CEST	192.168.2.22	8.8.8.8	0x6929	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:22.884991884 CEST	192.168.2.22	8.8.8.8	0xe7f0	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:22.897084951 CEST	192.168.2.22	8.8.8.8	0xb98c	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:22.910203934 CEST	192.168.2.22	8.8.8.8	0xc9dd	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:22.925291061 CEST	192.168.2.22	8.8.8.8	0x9234	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:22.937918901 CEST	192.168.2.22	8.8.8.8	0x1ec8	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:22.950544119 CEST	192.168.2.22	8.8.8.8	0xd04e	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:22.963725090 CEST	192.168.2.22	8.8.8.8	0xfb23	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:22.975634098 CEST	192.168.2.22	8.8.8.8	0xa8cb	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:22.989788055 CEST	192.168.2.22	8.8.8.8	0x2c13	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:23.000984907 CEST	192.168.2.22	8.8.8.8	0xd130	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:23.012903929 CEST	192.168.2.22	8.8.8.8	0x576b	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:23.025157928 CEST	192.168.2.22	8.8.8.8	0xc93f	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:23.036715031 CEST	192.168.2.22	8.8.8.8	0x21f0	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:23.048821926 CEST	192.168.2.22	8.8.8.8	0xbdd	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:23.060972929 CEST	192.168.2.22	8.8.8.8	0x97fa	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:23.072926044 CEST	192.168.2.22	8.8.8.8	0xf56c	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:23.085479021 CEST	192.168.2.22	8.8.8.8	0xaef6	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:23.321171999 CEST	192.168.2.22	8.8.8.8	0x4441	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:23.608094931 CEST	192.168.2.22	8.8.8.8	0x4277	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:23.620832920 CEST	192.168.2.22	8.8.8.8	0xd0a9	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:23.645118952 CEST	192.168.2.22	8.8.8.8	0xd518	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:23.655303001 CEST	192.168.2.22	8.8.8.8	0xba0	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:23.666410923 CEST	192.168.2.22	8.8.8.8	0xafa1	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:23.676657915 CEST	192.168.2.22	8.8.8.8	0x82c8	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:23.689958096 CEST	192.168.2.22	8.8.8.8	0x293b	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:23.704184055 CEST	192.168.2.22	8.8.8.8	0x19df	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:23.714205027 CEST	192.168.2.22	8.8.8.8	0xb48a	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:23.723191977 CEST	192.168.2.22	8.8.8.8	0x2179	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:23.733196974 CEST	192.168.2.22	8.8.8.8	0x3c93	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:23.743707895 CEST	192.168.2.22	8.8.8.8	0xe76d	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:23.753922939 CEST	192.168.2.22	8.8.8.8	0xc571	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:23.765680075 CEST	192.168.2.22	8.8.8.8	0xc91b	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:23.777267933 CEST	192.168.2.22	8.8.8.8	0xd0e4	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:23.786639929 CEST	192.168.2.22	8.8.8.8	0xcb97	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:23.800410032 CEST	192.168.2.22	8.8.8.8	0x345a	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:23.832814932 CEST	192.168.2.22	8.8.8.8	0x742	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:23.842729092 CEST	192.168.2.22	8.8.8.8	0xf91d	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:23.853754997 CEST	192.168.2.22	8.8.8.8	0xbffe	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:23.864931107 CEST	192.168.2.22	8.8.8.8	0x804a	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:23.875500917 CEST	192.168.2.22	8.8.8.8	0x2c3f	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:23.888432026 CEST	192.168.2.22	8.8.8.8	0x2ff7	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:23.898672104 CEST	192.168.2.22	8.8.8.8	0x73a	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:23.910145044 CEST	192.168.2.22	8.8.8.8	0xe84e	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:23.922336102 CEST	192.168.2.22	8.8.8.8	0x7b89	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:23.933331966 CEST	192.168.2.22	8.8.8.8	0x32cb	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:23.947771072 CEST	192.168.2.22	8.8.8.8	0x35ad	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:23.959054947 CEST	192.168.2.22	8.8.8.8	0xdb81	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:23.971375942 CEST	192.168.2.22	8.8.8.8	0xb087	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:23.985809088 CEST	192.168.2.22	8.8.8.8	0xd1d3	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:23.995393038 CEST	192.168.2.22	8.8.8.8	0x2377	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:24.005559921 CEST	192.168.2.22	8.8.8.8	0xd35	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:24.015021086 CEST	192.168.2.22	8.8.8.8	0xc3f0	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:24.093841076 CEST	192.168.2.22	8.8.8.8	0xcf59	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:24.456651926 CEST	192.168.2.22	8.8.8.8	0xdbfa	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:24.572752953 CEST	192.168.2.22	8.8.8.8	0x543e	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:24.589344978 CEST	192.168.2.22	8.8.8.8	0xc3b5	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:24.611001968 CEST	192.168.2.22	8.8.8.8	0x1fae	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:24.622648001 CEST	192.168.2.22	8.8.8.8	0x775c	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:24.635344028 CEST	192.168.2.22	8.8.8.8	0xbc81	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:24.648530960 CEST	192.168.2.22	8.8.8.8	0xf52	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:24.692008972 CEST	192.168.2.22	8.8.8.8	0x6841	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:24.723314047 CEST	192.168.2.22	8.8.8.8	0xad08	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:24.744380951 CEST	192.168.2.22	8.8.8.8	0xe0bc	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:24.756851912 CEST	192.168.2.22	8.8.8.8	0x6c2d	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:24.775193930 CEST	192.168.2.22	8.8.8.8	0xf27b	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:24.786983013 CEST	192.168.2.22	8.8.8.8	0x1fbf	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:24.803795099 CEST	192.168.2.22	8.8.8.8	0x855f	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:24.813703060 CEST	192.168.2.22	8.8.8.8	0x116d	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:24.823576927 CEST	192.168.2.22	8.8.8.8	0x932d	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:24.837363958 CEST	192.168.2.22	8.8.8.8	0xdccf	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:24.847248077 CEST	192.168.2.22	8.8.8.8	0x77d4	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:24.856961012 CEST	192.168.2.22	8.8.8.8	0x5a65	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:24.867332935 CEST	192.168.2.22	8.8.8.8	0xd2ef	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:24.876701117 CEST	192.168.2.22	8.8.8.8	0x297d	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:24.886043072 CEST	192.168.2.22	8.8.8.8	0xa6db	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:24.895698071 CEST	192.168.2.22	8.8.8.8	0xfe96	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:24.904669046 CEST	192.168.2.22	8.8.8.8	0x55d6	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:24.913712978 CEST	192.168.2.22	8.8.8.8	0x56b9	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:24.923247099 CEST	192.168.2.22	8.8.8.8	0x6d0c	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:24.932929993 CEST	192.168.2.22	8.8.8.8	0xd747	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:24.942790031 CEST	192.168.2.22	8.8.8.8	0xb343	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:24.979892969 CEST	192.168.2.22	8.8.8.8	0x5a6d	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:24.994061947 CEST	192.168.2.22	8.8.8.8	0x9287	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:25.051260948 CEST	192.168.2.22	8.8.8.8	0xd9f3	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:25.060894966 CEST	192.168.2.22	8.8.8.8	0x60de	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:25.072243929 CEST	192.168.2.22	8.8.8.8	0xe6e3	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:25.087476969 CEST	192.168.2.22	8.8.8.8	0x5c36	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:25.109169960 CEST	192.168.2.22	8.8.8.8	0x8989	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:25.124603033 CEST	192.168.2.22	8.8.8.8	0x4fec	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:25.135520935 CEST	192.168.2.22	8.8.8.8	0x64fd	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:25.199040890 CEST	192.168.2.22	8.8.8.8	0x415	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:25.301340103 CEST	192.168.2.22	8.8.8.8	0x448d	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:25.318653107 CEST	192.168.2.22	8.8.8.8	0x1ea1	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:25.342607021 CEST	192.168.2.22	8.8.8.8	0xc5b1	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:25.371232986 CEST	192.168.2.22	8.8.8.8	0xb9e8	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:25.388748884 CEST	192.168.2.22	8.8.8.8	0x6d43	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:25.413667917 CEST	192.168.2.22	8.8.8.8	0x1060	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:25.429542065 CEST	192.168.2.22	8.8.8.8	0xaab5	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:25.442537069 CEST	192.168.2.22	8.8.8.8	0x53cd	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:25.455924988 CEST	192.168.2.22	8.8.8.8	0x3538	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:25.465868950 CEST	192.168.2.22	8.8.8.8	0x882	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:25.475248098 CEST	192.168.2.22	8.8.8.8	0xcf04	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:25.486351013 CEST	192.168.2.22	8.8.8.8	0xf2fa	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:25.506248951 CEST	192.168.2.22	8.8.8.8	0x5da2	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:25.517267942 CEST	192.168.2.22	8.8.8.8	0x4958	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:25.526894093 CEST	192.168.2.22	8.8.8.8	0x23b6	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:25.536607981 CEST	192.168.2.22	8.8.8.8	0x7fdb	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:25.546885014 CEST	192.168.2.22	8.8.8.8	0x8991	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:25.592339993 CEST	192.168.2.22	8.8.8.8	0xb3eb	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:25.608414888 CEST	192.168.2.22	8.8.8.8	0x3ceb	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:25.621093988 CEST	192.168.2.22	8.8.8.8	0x3a2a	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:25.636821032 CEST	192.168.2.22	8.8.8.8	0x6259	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:25.651427984 CEST	192.168.2.22	8.8.8.8	0x91e9	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:25.667049885 CEST	192.168.2.22	8.8.8.8	0x9170	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:25.680836916 CEST	192.168.2.22	8.8.8.8	0x899c	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:25.692097902 CEST	192.168.2.22	8.8.8.8	0xad36	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:25.711724043 CEST	192.168.2.22	8.8.8.8	0x58fe	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:25.730032921 CEST	192.168.2.22	8.8.8.8	0x3a8d	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:25.791271925 CEST	192.168.2.22	8.8.8.8	0x5dfe	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:25.819724083 CEST	192.168.2.22	8.8.8.8	0xfdad	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:25.855854034 CEST	192.168.2.22	8.8.8.8	0x50e1	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:26.148998022 CEST	192.168.2.22	8.8.8.8	0x59f8	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:26.200539112 CEST	192.168.2.22	8.8.8.8	0x600c	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:26.267231941 CEST	192.168.2.22	8.8.8.8	0x9ea0	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:26.304801941 CEST	192.168.2.22	8.8.8.8	0xf382	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:26.315234900 CEST	192.168.2.22	8.8.8.8	0x7f46	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:26.326275110 CEST	192.168.2.22	8.8.8.8	0x4b98	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:26.336424112 CEST	192.168.2.22	8.8.8.8	0x8428	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:26.346528053 CEST	192.168.2.22	8.8.8.8	0xfa27	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:26.357055902 CEST	192.168.2.22	8.8.8.8	0x28e3	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:26.366981030 CEST	192.168.2.22	8.8.8.8	0x584f	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:26.377079010 CEST	192.168.2.22	8.8.8.8	0x4c1b	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:26.386668921 CEST	192.168.2.22	8.8.8.8	0x92b8	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:26.396084070 CEST	192.168.2.22	8.8.8.8	0x82f2	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:26.405745029 CEST	192.168.2.22	8.8.8.8	0xea16	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:26.416016102 CEST	192.168.2.22	8.8.8.8	0x3fc4	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:26.426559925 CEST	192.168.2.22	8.8.8.8	0x5715	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:26.435857058 CEST	192.168.2.22	8.8.8.8	0x7efc	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:26.446337938 CEST	192.168.2.22	8.8.8.8	0xf603	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:26.456490040 CEST	192.168.2.22	8.8.8.8	0x6a09	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:26.467071056 CEST	192.168.2.22	8.8.8.8	0x4d65	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:26.477004051 CEST	192.168.2.22	8.8.8.8	0x4451	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:26.487354040 CEST	192.168.2.22	8.8.8.8	0x4724	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:26.497214079 CEST	192.168.2.22	8.8.8.8	0x2034	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:26.508702040 CEST	192.168.2.22	8.8.8.8	0x4161	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:26.518397093 CEST	192.168.2.22	8.8.8.8	0x9ff7	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:26.529243946 CEST	192.168.2.22	8.8.8.8	0x85d9	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:26.542150974 CEST	192.168.2.22	8.8.8.8	0xb6ae	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:26.555908918 CEST	192.168.2.22	8.8.8.8	0x99d7	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:26.566032887 CEST	192.168.2.22	8.8.8.8	0x7e50	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:26.576282978 CEST	192.168.2.22	8.8.8.8	0xf631	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:26.585635900 CEST	192.168.2.22	8.8.8.8	0xf0eb	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:26.597501040 CEST	192.168.2.22	8.8.8.8	0xf0eb	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:27.115127087 CEST	192.168.2.22	8.8.8.8	0x5245	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:27.125585079 CEST	192.168.2.22	8.8.8.8	0x2069	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:27.143299103 CEST	192.168.2.22	8.8.8.8	0x2069	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:27.707411051 CEST	192.168.2.22	8.8.8.8	0x37f6	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:27.719455004 CEST	192.168.2.22	8.8.8.8	0x37f6	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:28.343709946 CEST	192.168.2.22	8.8.8.8	0x4171	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:28.361659050 CEST	192.168.2.22	8.8.8.8	0x4171	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:28.899761915 CEST	192.168.2.22	8.8.8.8	0x7a49	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:28.916907072 CEST	192.168.2.22	8.8.8.8	0xc120	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:28.958230019 CEST	192.168.2.22	8.8.8.8	0xb97a	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:28.997169018 CEST	192.168.2.22	8.8.8.8	0xad0b	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:29.010024071 CEST	192.168.2.22	8.8.8.8	0xad0b	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:29.486942053 CEST	192.168.2.22	8.8.8.8	0x241b	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:29.495634079 CEST	192.168.2.22	8.8.8.8	0xd681	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:29.504486084 CEST	192.168.2.22	8.8.8.8	0x8864	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:29.513442993 CEST	192.168.2.22	8.8.8.8	0x9f1	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:29.525763988 CEST	192.168.2.22	8.8.8.8	0x9f1	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:29.984061003 CEST	192.168.2.22	8.8.8.8	0x76cf	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:29.997852087 CEST	192.168.2.22	8.8.8.8	0x76cf	Standard query (0)	outlook-web.ddns.net	A (IP address)	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	Address	Type	Class	DNS over HTTPS
Sep 18, 2024 17:14:48.610100985 CEST	8.8.8.8	192.168.2.22	0xe99f	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:14:48.667653084 CEST	8.8.8.8	192.168.2.22	0xcd5	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:14:48.723488092 CEST	8.8.8.8	192.168.2.22	0xa60	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:14:48.737898111 CEST	8.8.8.8	192.168.2.22	0xf936	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:14:48.779012918 CEST	8.8.8.8	192.168.2.22	0xc9a8	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:14:48.791708946 CEST	8.8.8.8	192.168.2.22	0x5618	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:14:48.804917097 CEST	8.8.8.8	192.168.2.22	0xe09b	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:14:48.855887890 CEST	8.8.8.8	192.168.2.22	0x450f	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:14:48.928960085 CEST	8.8.8.8	192.168.2.22	0x35a2	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:14:48.943525076 CEST	8.8.8.8	192.168.2.22	0x8afd	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:14:48.959053993 CEST	8.8.8.8	192.168.2.22	0x5395	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:14:48.978065014 CEST	8.8.8.8	192.168.2.22	0x20eb	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:14:49.021315098 CEST	8.8.8.8	192.168.2.22	0x1e5a	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:14:49.108757973 CEST	8.8.8.8	192.168.2.22	0xefa3	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:14:49.164598942 CEST	8.8.8.8	192.168.2.22	0x59c9	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:14:49.193748951 CEST	8.8.8.8	192.168.2.22	0x4f2c	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:14:49.223057985 CEST	8.8.8.8	192.168.2.22	0x11df	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:14:49.242495060 CEST	8.8.8.8	192.168.2.22	0x743a	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:14:49.570074081 CEST	8.8.8.8	192.168.2.22	0x1d4b	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:14:50.280551910 CEST	8.8.8.8	192.168.2.22	0xc8	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:14:50.478456020 CEST	8.8.8.8	192.168.2.22	0x81ed	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:14:50.712461948 CEST	8.8.8.8	192.168.2.22	0x78b0	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:14:50.725852013 CEST	8.8.8.8	192.168.2.22	0xb1f2	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:14:50.738951921 CEST	8.8.8.8	192.168.2.22	0x7a83	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:14:50.751137972 CEST	8.8.8.8	192.168.2.22	0x81fc	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:14:50.769933939 CEST	8.8.8.8	192.168.2.22	0x6dc8	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:14:50.787024021 CEST	8.8.8.8	192.168.2.22	0x4230	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:14:50.798650026 CEST	8.8.8.8	192.168.2.22	0x9bd7	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:14:50.814006090 CEST	8.8.8.8	192.168.2.22	0xc5cf	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:14:50.826396942 CEST	8.8.8.8	192.168.2.22	0xc135	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:14:50.865138054 CEST	8.8.8.8	192.168.2.22	0x8c13	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:14:50.876375914 CEST	8.8.8.8	192.168.2.22	0xa5e4	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:14:50.889064074 CEST	8.8.8.8	192.168.2.22	0x98ed	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:14:50.904983997 CEST	8.8.8.8	192.168.2.22	0x130f	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:14:50.922868013 CEST	8.8.8.8	192.168.2.22	0xa77b	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:14:51.004741907 CEST	8.8.8.8	192.168.2.22	0xdae9	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:14:51.106009007 CEST	8.8.8.8	192.168.2.22	0xed0f	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:14:51.122041941 CEST	8.8.8.8	192.168.2.22	0xe645	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:14:51.140340090 CEST	8.8.8.8	192.168.2.22	0x4421	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:14:51.159579992 CEST	8.8.8.8	192.168.2.22	0x3d55	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:14:51.174793959 CEST	8.8.8.8	192.168.2.22	0x4ebb	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:14:51.191776037 CEST	8.8.8.8	192.168.2.22	0x41f0	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:14:51.208817959 CEST	8.8.8.8	192.168.2.22	0x151e	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:14:51.231775999 CEST	8.8.8.8	192.168.2.22	0xdf29	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:14:51.251513004 CEST	8.8.8.8	192.168.2.22	0xcb96	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:14:51.271676064 CEST	8.8.8.8	192.168.2.22	0x4b2f	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:14:51.290301085 CEST	8.8.8.8	192.168.2.22	0x2c61	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:14:51.310383081 CEST	8.8.8.8	192.168.2.22	0xd0c1	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:14:51.384155035 CEST	8.8.8.8	192.168.2.22	0x4a9b	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:14:51.407882929 CEST	8.8.8.8	192.168.2.22	0xa756	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:14:51.419785023 CEST	8.8.8.8	192.168.2.22	0x2ff7	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:14:51.434902906 CEST	8.8.8.8	192.168.2.22	0xe8f5	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:14:51.450798035 CEST	8.8.8.8	192.168.2.22	0xffbc	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:14:51.464059114 CEST	8.8.8.8	192.168.2.22	0x2ae7	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:14:51.476521015 CEST	8.8.8.8	192.168.2.22	0x2218	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:14:51.487713099 CEST	8.8.8.8	192.168.2.22	0x2822	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:14:51.502770901 CEST	8.8.8.8	192.168.2.22	0x6b15	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:14:51.515980005 CEST	8.8.8.8	192.168.2.22	0xaa81	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:14:51.528754950 CEST	8.8.8.8	192.168.2.22	0x6417	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:14:51.797485113 CEST	8.8.8.8	192.168.2.22	0x6ff7	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:14:51.858431101 CEST	8.8.8.8	192.168.2.22	0xd036	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:14:51.898288012 CEST	8.8.8.8	192.168.2.22	0x9a60	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:14:51.912175894 CEST	8.8.8.8	192.168.2.22	0xaae	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:14:51.925158024 CEST	8.8.8.8	192.168.2.22	0xdbed	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:14:51.938271046 CEST	8.8.8.8	192.168.2.22	0xc708	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:14:51.954452991 CEST	8.8.8.8	192.168.2.22	0x33f3	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:14:51.965212107 CEST	8.8.8.8	192.168.2.22	0xb904	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:14:51.978367090 CEST	8.8.8.8	192.168.2.22	0x806d	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:14:51.990796089 CEST	8.8.8.8	192.168.2.22	0xe7d3	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:14:52.003591061 CEST	8.8.8.8	192.168.2.22	0x62f8	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:14:52.045370102 CEST	8.8.8.8	192.168.2.22	0x1620	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:14:52.057764053 CEST	8.8.8.8	192.168.2.22	0x4fc	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:14:52.071794987 CEST	8.8.8.8	192.168.2.22	0xf67f	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:14:52.084296942 CEST	8.8.8.8	192.168.2.22	0xc1b8	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:14:52.098778963 CEST	8.8.8.8	192.168.2.22	0x212a	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:14:52.112441063 CEST	8.8.8.8	192.168.2.22	0x8d8	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:14:52.125566006 CEST	8.8.8.8	192.168.2.22	0x6dbf	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:14:52.140697002 CEST	8.8.8.8	192.168.2.22	0x252c	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:14:52.164928913 CEST	8.8.8.8	192.168.2.22	0x7762	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:14:52.182038069 CEST	8.8.8.8	192.168.2.22	0xee9c	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:14:52.196700096 CEST	8.8.8.8	192.168.2.22	0xc2a7	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:14:52.212867975 CEST	8.8.8.8	192.168.2.22	0xd7d0	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:14:52.228457928 CEST	8.8.8.8	192.168.2.22	0x2403	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:14:52.241714001 CEST	8.8.8.8	192.168.2.22	0x63e9	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:14:52.255175114 CEST	8.8.8.8	192.168.2.22	0x6c67	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:14:52.266822100 CEST	8.8.8.8	192.168.2.22	0x576d	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:14:52.288628101 CEST	8.8.8.8	192.168.2.22	0x2490	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:14:52.302721024 CEST	8.8.8.8	192.168.2.22	0xee87	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:14:52.315263987 CEST	8.8.8.8	192.168.2.22	0x91ca	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:14:52.327218056 CEST	8.8.8.8	192.168.2.22	0xfcac	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:14:52.338429928 CEST	8.8.8.8	192.168.2.22	0xe67b	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:14:52.348989964 CEST	8.8.8.8	192.168.2.22	0xfe68	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:14:52.408865929 CEST	8.8.8.8	192.168.2.22	0x5543	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:14:52.420824051 CEST	8.8.8.8	192.168.2.22	0x41bc	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:14:52.433851004 CEST	8.8.8.8	192.168.2.22	0x4753	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:14:52.444964886 CEST	8.8.8.8	192.168.2.22	0xbb	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:14:52.455476046 CEST	8.8.8.8	192.168.2.22	0xdcf8	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:14:52.466134071 CEST	8.8.8.8	192.168.2.22	0x5a0e	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:14:52.477828979 CEST	8.8.8.8	192.168.2.22	0x55cf	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:14:52.488548994 CEST	8.8.8.8	192.168.2.22	0xe1d9	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:14:52.499033928 CEST	8.8.8.8	192.168.2.22	0xe544	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:14:52.509434938 CEST	8.8.8.8	192.168.2.22	0x33f6	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:14:52.520080090 CEST	8.8.8.8	192.168.2.22	0x79ca	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:14:52.532874107 CEST	8.8.8.8	192.168.2.22	0x3aef	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:14:52.544116974 CEST	8.8.8.8	192.168.2.22	0x655d	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:14:52.554442883 CEST	8.8.8.8	192.168.2.22	0x827b	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:14:52.566632986 CEST	8.8.8.8	192.168.2.22	0xc62e	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:14:52.577383041 CEST	8.8.8.8	192.168.2.22	0xd14d	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:14:52.588099957 CEST	8.8.8.8	192.168.2.22	0x3b6e	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:14:52.599160910 CEST	8.8.8.8	192.168.2.22	0xfe03	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:14:52.609863997 CEST	8.8.8.8	192.168.2.22	0xca0d	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:14:52.621469021 CEST	8.8.8.8	192.168.2.22	0x6d9c	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:14:52.632234097 CEST	8.8.8.8	192.168.2.22	0x512a	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:14:52.642647028 CEST	8.8.8.8	192.168.2.22	0xaa36	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:14:52.681401014 CEST	8.8.8.8	192.168.2.22	0x5c98	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:14:52.738826990 CEST	8.8.8.8	192.168.2.22	0x4b98	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:14:52.761492014 CEST	8.8.8.8	192.168.2.22	0x4c7b	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:14:52.783258915 CEST	8.8.8.8	192.168.2.22	0x5172	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:14:52.807564974 CEST	8.8.8.8	192.168.2.22	0x654d	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:14:52.854778051 CEST	8.8.8.8	192.168.2.22	0x6093	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:14:53.254575014 CEST	8.8.8.8	192.168.2.22	0x187f	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:14:53.526648998 CEST	8.8.8.8	192.168.2.22	0xb58a	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:14:54.042996883 CEST	8.8.8.8	192.168.2.22	0x4d3	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:14:54.197942019 CEST	8.8.8.8	192.168.2.22	0x53ba	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:14:54.211993933 CEST	8.8.8.8	192.168.2.22	0x9cca	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:14:54.229505062 CEST	8.8.8.8	192.168.2.22	0x906e	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:14:54.245909929 CEST	8.8.8.8	192.168.2.22	0xedfc	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:14:54.259413004 CEST	8.8.8.8	192.168.2.22	0x3055	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:14:54.278584003 CEST	8.8.8.8	192.168.2.22	0x1aa9	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:14:54.302040100 CEST	8.8.8.8	192.168.2.22	0x5991	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:14:54.316329002 CEST	8.8.8.8	192.168.2.22	0xcf19	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:14:54.330435038 CEST	8.8.8.8	192.168.2.22	0xf52e	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:14:54.347879887 CEST	8.8.8.8	192.168.2.22	0x79ec	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:14:54.362895012 CEST	8.8.8.8	192.168.2.22	0x4cbf	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:14:54.389842033 CEST	8.8.8.8	192.168.2.22	0x1e7f	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:14:54.403959036 CEST	8.8.8.8	192.168.2.22	0xa655	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:14:54.419317007 CEST	8.8.8.8	192.168.2.22	0xc2cc	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:14:54.497406006 CEST	8.8.8.8	192.168.2.22	0x440c	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:14:54.547049999 CEST	8.8.8.8	192.168.2.22	0x7b5	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:14:54.564631939 CEST	8.8.8.8	192.168.2.22	0x8a96	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:14:54.595824003 CEST	8.8.8.8	192.168.2.22	0x9107	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:14:54.611635923 CEST	8.8.8.8	192.168.2.22	0x3227	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:14:54.629255056 CEST	8.8.8.8	192.168.2.22	0xe3fa	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:14:54.884517908 CEST	8.8.8.8	192.168.2.22	0x1c9d	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:14:54.898118973 CEST	8.8.8.8	192.168.2.22	0x84a4	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:14:54.912020922 CEST	8.8.8.8	192.168.2.22	0x2679	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:14:54.924232960 CEST	8.8.8.8	192.168.2.22	0x8899	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:14:54.935429096 CEST	8.8.8.8	192.168.2.22	0x1818	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:14:54.946368933 CEST	8.8.8.8	192.168.2.22	0x2405	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:14:54.957930088 CEST	8.8.8.8	192.168.2.22	0x7a31	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:14:54.970902920 CEST	8.8.8.8	192.168.2.22	0x3f7a	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:14:54.982137918 CEST	8.8.8.8	192.168.2.22	0x2b66	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:14:54.994626045 CEST	8.8.8.8	192.168.2.22	0x7fca	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:14:55.010972977 CEST	8.8.8.8	192.168.2.22	0xe418	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:14:55.024590969 CEST	8.8.8.8	192.168.2.22	0x7bee	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:14:55.035949945 CEST	8.8.8.8	192.168.2.22	0xeac2	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:14:55.048198938 CEST	8.8.8.8	192.168.2.22	0x6141	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:14:55.059746981 CEST	8.8.8.8	192.168.2.22	0x6ac9	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:14:55.072474003 CEST	8.8.8.8	192.168.2.22	0x813c	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:14:55.085062027 CEST	8.8.8.8	192.168.2.22	0x2642	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:14:55.098505020 CEST	8.8.8.8	192.168.2.22	0x1030	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:14:55.112452030 CEST	8.8.8.8	192.168.2.22	0x6b38	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:14:55.124387026 CEST	8.8.8.8	192.168.2.22	0xaff6	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:14:55.223468065 CEST	8.8.8.8	192.168.2.22	0x8bb2	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:14:55.235585928 CEST	8.8.8.8	192.168.2.22	0x1d6d	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:14:55.247927904 CEST	8.8.8.8	192.168.2.22	0x1ba6	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:14:55.259375095 CEST	8.8.8.8	192.168.2.22	0xc284	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:14:55.271760941 CEST	8.8.8.8	192.168.2.22	0xd16	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:14:55.286118031 CEST	8.8.8.8	192.168.2.22	0x79e4	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:14:55.299374104 CEST	8.8.8.8	192.168.2.22	0x2476	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:14:55.311971903 CEST	8.8.8.8	192.168.2.22	0xce6f	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:14:55.323848963 CEST	8.8.8.8	192.168.2.22	0x19e0	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:14:55.336558104 CEST	8.8.8.8	192.168.2.22	0x9b9f	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:14:55.351445913 CEST	8.8.8.8	192.168.2.22	0x676b	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:14:55.363015890 CEST	8.8.8.8	192.168.2.22	0x9564	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:14:55.374517918 CEST	8.8.8.8	192.168.2.22	0x363b	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:14:55.385876894 CEST	8.8.8.8	192.168.2.22	0x932	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:14:55.398452997 CEST	8.8.8.8	192.168.2.22	0xc8c3	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:14:55.411392927 CEST	8.8.8.8	192.168.2.22	0x66b2	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:14:55.423723936 CEST	8.8.8.8	192.168.2.22	0x29df	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:14:55.435688972 CEST	8.8.8.8	192.168.2.22	0x9ca	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:14:55.446341038 CEST	8.8.8.8	192.168.2.22	0x210d	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:14:55.459444046 CEST	8.8.8.8	192.168.2.22	0xc86b	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:14:55.510833979 CEST	8.8.8.8	192.168.2.22	0x5137	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:14:55.523878098 CEST	8.8.8.8	192.168.2.22	0x2c90	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:14:55.537658930 CEST	8.8.8.8	192.168.2.22	0x4641	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:14:55.566401958 CEST	8.8.8.8	192.168.2.22	0x9279	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:14:55.580512047 CEST	8.8.8.8	192.168.2.22	0x54a	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:14:55.592421055 CEST	8.8.8.8	192.168.2.22	0x372b	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:14:55.603323936 CEST	8.8.8.8	192.168.2.22	0xd676	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:14:55.615650892 CEST	8.8.8.8	192.168.2.22	0x20b	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:14:55.629196882 CEST	8.8.8.8	192.168.2.22	0x1340	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:14:55.640254021 CEST	8.8.8.8	192.168.2.22	0xcd16	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:14:55.650801897 CEST	8.8.8.8	192.168.2.22	0x5b26	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:14:55.662992954 CEST	8.8.8.8	192.168.2.22	0x30d6	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:14:55.675448895 CEST	8.8.8.8	192.168.2.22	0xaaa	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:14:55.688133955 CEST	8.8.8.8	192.168.2.22	0x2b26	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:14:55.701170921 CEST	8.8.8.8	192.168.2.22	0x611e	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:14:55.714081049 CEST	8.8.8.8	192.168.2.22	0x81ab	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:14:55.726016045 CEST	8.8.8.8	192.168.2.22	0xb27	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:14:55.739944935 CEST	8.8.8.8	192.168.2.22	0xdff6	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:14:55.752485037 CEST	8.8.8.8	192.168.2.22	0xded9	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:14:55.766539097 CEST	8.8.8.8	192.168.2.22	0x661	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:14:55.779476881 CEST	8.8.8.8	192.168.2.22	0xf6a	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:14:55.795495033 CEST	8.8.8.8	192.168.2.22	0x7fd0	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:14:55.817668915 CEST	8.8.8.8	192.168.2.22	0x6e0d	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:14:55.868730068 CEST	8.8.8.8	192.168.2.22	0xd2	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:14:55.880285978 CEST	8.8.8.8	192.168.2.22	0x5855	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:14:55.892889023 CEST	8.8.8.8	192.168.2.22	0x14cf	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:14:55.904941082 CEST	8.8.8.8	192.168.2.22	0x2a60	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:14:55.915716887 CEST	8.8.8.8	192.168.2.22	0x449	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:14:55.928191900 CEST	8.8.8.8	192.168.2.22	0x853e	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:14:55.941864967 CEST	8.8.8.8	192.168.2.22	0xc6c6	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:14:55.952399015 CEST	8.8.8.8	192.168.2.22	0xe0ef	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:14:55.972688913 CEST	8.8.8.8	192.168.2.22	0x2a8a	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:14:55.989415884 CEST	8.8.8.8	192.168.2.22	0xef87	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:14:56.003470898 CEST	8.8.8.8	192.168.2.22	0x8be0	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:14:56.014837980 CEST	8.8.8.8	192.168.2.22	0xedf7	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:14:56.026439905 CEST	8.8.8.8	192.168.2.22	0xbd56	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:14:56.040083885 CEST	8.8.8.8	192.168.2.22	0x9eb7	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:14:56.051817894 CEST	8.8.8.8	192.168.2.22	0x47a3	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:14:56.063713074 CEST	8.8.8.8	192.168.2.22	0x8419	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:14:56.077408075 CEST	8.8.8.8	192.168.2.22	0xb4b6	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:14:56.087948084 CEST	8.8.8.8	192.168.2.22	0x4c9c	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:14:56.100449085 CEST	8.8.8.8	192.168.2.22	0x7632	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:14:56.113593102 CEST	8.8.8.8	192.168.2.22	0x1c10	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:14:56.124655008 CEST	8.8.8.8	192.168.2.22	0x7964	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:14:56.135329962 CEST	8.8.8.8	192.168.2.22	0xa74e	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:14:56.148027897 CEST	8.8.8.8	192.168.2.22	0x109b	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:14:56.222269058 CEST	8.8.8.8	192.168.2.22	0xa7b4	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:14:56.261873960 CEST	8.8.8.8	192.168.2.22	0x5da8	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:14:56.280165911 CEST	8.8.8.8	192.168.2.22	0x63f0	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:14:56.300478935 CEST	8.8.8.8	192.168.2.22	0x9f4e	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:14:56.313416004 CEST	8.8.8.8	192.168.2.22	0x8b1a	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:14:56.332458973 CEST	8.8.8.8	192.168.2.22	0x9dec	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:14:56.360117912 CEST	8.8.8.8	192.168.2.22	0x1b87	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:14:56.372894049 CEST	8.8.8.8	192.168.2.22	0xc17e	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:14:56.768758059 CEST	8.8.8.8	192.168.2.22	0x8fd1	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:14:56.836158037 CEST	8.8.8.8	192.168.2.22	0x7d19	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:14:58.059233904 CEST	8.8.8.8	192.168.2.22	0x7816	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:14:58.073084116 CEST	8.8.8.8	192.168.2.22	0xd26f	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:14:58.087872028 CEST	8.8.8.8	192.168.2.22	0xeb12	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:14:58.100075006 CEST	8.8.8.8	192.168.2.22	0x30ad	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:14:58.112169027 CEST	8.8.8.8	192.168.2.22	0x635c	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:14:58.127446890 CEST	8.8.8.8	192.168.2.22	0x7208	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:14:58.140934944 CEST	8.8.8.8	192.168.2.22	0xbfec	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:14:58.159013987 CEST	8.8.8.8	192.168.2.22	0x9f59	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:14:58.171967983 CEST	8.8.8.8	192.168.2.22	0x663c	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:14:58.184070110 CEST	8.8.8.8	192.168.2.22	0xb306	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:14:58.197304964 CEST	8.8.8.8	192.168.2.22	0x8f31	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:14:58.209862947 CEST	8.8.8.8	192.168.2.22	0x8327	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:14:58.222285986 CEST	8.8.8.8	192.168.2.22	0x4e23	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:14:58.234527111 CEST	8.8.8.8	192.168.2.22	0x9c46	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:14:58.246776104 CEST	8.8.8.8	192.168.2.22	0xbedf	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:14:58.260406971 CEST	8.8.8.8	192.168.2.22	0xe228	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:14:58.271429062 CEST	8.8.8.8	192.168.2.22	0xd912	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:14:58.283849955 CEST	8.8.8.8	192.168.2.22	0xaf48	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:14:58.298496962 CEST	8.8.8.8	192.168.2.22	0xd719	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:14:58.311537027 CEST	8.8.8.8	192.168.2.22	0xd5d1	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:14:58.325598001 CEST	8.8.8.8	192.168.2.22	0xe2bd	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:14:58.337935925 CEST	8.8.8.8	192.168.2.22	0x3aab	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:14:58.403810024 CEST	8.8.8.8	192.168.2.22	0x3a41	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:14:58.418286085 CEST	8.8.8.8	192.168.2.22	0x8212	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:14:58.432219028 CEST	8.8.8.8	192.168.2.22	0x84e9	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:14:58.445465088 CEST	8.8.8.8	192.168.2.22	0x52b2	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:14:58.458698034 CEST	8.8.8.8	192.168.2.22	0x9d24	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:14:58.472527981 CEST	8.8.8.8	192.168.2.22	0xeb52	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:14:58.485477924 CEST	8.8.8.8	192.168.2.22	0xcef3	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:14:58.499713898 CEST	8.8.8.8	192.168.2.22	0x2efe	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:14:58.514671087 CEST	8.8.8.8	192.168.2.22	0x6311	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:14:58.527414083 CEST	8.8.8.8	192.168.2.22	0xe729	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:14:58.542198896 CEST	8.8.8.8	192.168.2.22	0xb201	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:14:58.554594040 CEST	8.8.8.8	192.168.2.22	0x8fe3	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:14:58.566871881 CEST	8.8.8.8	192.168.2.22	0xf232	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:14:58.578783035 CEST	8.8.8.8	192.168.2.22	0xc6d2	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:14:58.591800928 CEST	8.8.8.8	192.168.2.22	0x113a	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:14:58.604499102 CEST	8.8.8.8	192.168.2.22	0x6155	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:14:58.617041111 CEST	8.8.8.8	192.168.2.22	0x9e18	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:14:58.630072117 CEST	8.8.8.8	192.168.2.22	0xcaf2	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:14:58.643177986 CEST	8.8.8.8	192.168.2.22	0xa343	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:14:58.656152010 CEST	8.8.8.8	192.168.2.22	0x57ed	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:14:58.667841911 CEST	8.8.8.8	192.168.2.22	0xc2c8	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:14:58.681639910 CEST	8.8.8.8	192.168.2.22	0xa022	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:14:58.736591101 CEST	8.8.8.8	192.168.2.22	0x9c2b	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:14:58.749411106 CEST	8.8.8.8	192.168.2.22	0xf315	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:14:58.762044907 CEST	8.8.8.8	192.168.2.22	0x3ab	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:14:58.774559975 CEST	8.8.8.8	192.168.2.22	0xefd0	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:14:58.786170006 CEST	8.8.8.8	192.168.2.22	0x7a3f	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:14:58.807967901 CEST	8.8.8.8	192.168.2.22	0x4cf3	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:14:58.828443050 CEST	8.8.8.8	192.168.2.22	0x199d	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:14:58.842793941 CEST	8.8.8.8	192.168.2.22	0xdade	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:14:58.856386900 CEST	8.8.8.8	192.168.2.22	0x527b	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:14:58.869103909 CEST	8.8.8.8	192.168.2.22	0xf9b9	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:14:58.881325006 CEST	8.8.8.8	192.168.2.22	0x6fb1	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:14:58.894241095 CEST	8.8.8.8	192.168.2.22	0xbcca	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:14:58.905709982 CEST	8.8.8.8	192.168.2.22	0x28e6	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:14:58.918742895 CEST	8.8.8.8	192.168.2.22	0x4cf	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:14:58.930722952 CEST	8.8.8.8	192.168.2.22	0x5cf	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:14:58.943561077 CEST	8.8.8.8	192.168.2.22	0x341	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:14:58.956243992 CEST	8.8.8.8	192.168.2.22	0x4db9	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:14:58.969356060 CEST	8.8.8.8	192.168.2.22	0xea53	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:14:58.981095076 CEST	8.8.8.8	192.168.2.22	0xd780	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:14:58.994477034 CEST	8.8.8.8	192.168.2.22	0xfefe	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:14:59.007735014 CEST	8.8.8.8	192.168.2.22	0xb326	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:14:59.021193027 CEST	8.8.8.8	192.168.2.22	0x89c	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:14:59.087030888 CEST	8.8.8.8	192.168.2.22	0x2fff	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:14:59.100970984 CEST	8.8.8.8	192.168.2.22	0x8e6	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:14:59.114268064 CEST	8.8.8.8	192.168.2.22	0xf30e	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:14:59.126672029 CEST	8.8.8.8	192.168.2.22	0x52c7	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:14:59.140465021 CEST	8.8.8.8	192.168.2.22	0x452c	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:14:59.153084993 CEST	8.8.8.8	192.168.2.22	0x9c9b	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:14:59.165975094 CEST	8.8.8.8	192.168.2.22	0x8bcd	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:14:59.178466082 CEST	8.8.8.8	192.168.2.22	0x4eb6	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:14:59.190812111 CEST	8.8.8.8	192.168.2.22	0x1385	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:14:59.203353882 CEST	8.8.8.8	192.168.2.22	0x914d	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:14:59.215815067 CEST	8.8.8.8	192.168.2.22	0x772f	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:14:59.230102062 CEST	8.8.8.8	192.168.2.22	0xb3f0	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:14:59.243273020 CEST	8.8.8.8	192.168.2.22	0x176	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:14:59.257601023 CEST	8.8.8.8	192.168.2.22	0xe749	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:14:59.269860029 CEST	8.8.8.8	192.168.2.22	0x91c6	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:14:59.282169104 CEST	8.8.8.8	192.168.2.22	0xb3d5	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:14:59.296554089 CEST	8.8.8.8	192.168.2.22	0x364e	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:14:59.308636904 CEST	8.8.8.8	192.168.2.22	0xf01d	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:14:59.320497990 CEST	8.8.8.8	192.168.2.22	0x4015	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:14:59.333010912 CEST	8.8.8.8	192.168.2.22	0x2c05	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:14:59.344537020 CEST	8.8.8.8	192.168.2.22	0x84d2	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:14:59.355509043 CEST	8.8.8.8	192.168.2.22	0xc8b0	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:14:59.367249966 CEST	8.8.8.8	192.168.2.22	0x4ab3	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:14:59.663116932 CEST	8.8.8.8	192.168.2.22	0x3fab	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:14:59.674618006 CEST	8.8.8.8	192.168.2.22	0x66e9	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:14:59.687803030 CEST	8.8.8.8	192.168.2.22	0xd51f	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:14:59.699630976 CEST	8.8.8.8	192.168.2.22	0x29cb	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:14:59.710606098 CEST	8.8.8.8	192.168.2.22	0x60eb	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:14:59.773859978 CEST	8.8.8.8	192.168.2.22	0xed46	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:14:59.786685944 CEST	8.8.8.8	192.168.2.22	0xc156	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:14:59.798799992 CEST	8.8.8.8	192.168.2.22	0x6f2c	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:14:59.812031031 CEST	8.8.8.8	192.168.2.22	0x402f	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:14:59.825176001 CEST	8.8.8.8	192.168.2.22	0xf19	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:14:59.838361025 CEST	8.8.8.8	192.168.2.22	0x81ec	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:14:59.872692108 CEST	8.8.8.8	192.168.2.22	0x4cc4	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:14:59.883908033 CEST	8.8.8.8	192.168.2.22	0x36cd	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:14:59.896251917 CEST	8.8.8.8	192.168.2.22	0x2aa1	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:14:59.908905029 CEST	8.8.8.8	192.168.2.22	0x9734	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:14:59.920084953 CEST	8.8.8.8	192.168.2.22	0x3c36	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:14:59.932878971 CEST	8.8.8.8	192.168.2.22	0x7656	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:14:59.944685936 CEST	8.8.8.8	192.168.2.22	0xd0b0	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:14:59.955933094 CEST	8.8.8.8	192.168.2.22	0xeedd	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:14:59.967909098 CEST	8.8.8.8	192.168.2.22	0x1f9a	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:14:59.980598927 CEST	8.8.8.8	192.168.2.22	0xa52e	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:14:59.992615938 CEST	8.8.8.8	192.168.2.22	0x1207	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:00.033502102 CEST	8.8.8.8	192.168.2.22	0x9113	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:00.051760912 CEST	8.8.8.8	192.168.2.22	0x13a3	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:00.132500887 CEST	8.8.8.8	192.168.2.22	0xe8be	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:00.152029991 CEST	8.8.8.8	192.168.2.22	0xf2cf	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:00.174437046 CEST	8.8.8.8	192.168.2.22	0xa40f	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:00.194607973 CEST	8.8.8.8	192.168.2.22	0x595c	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:00.484205961 CEST	8.8.8.8	192.168.2.22	0xb8be	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:00.503261089 CEST	8.8.8.8	192.168.2.22	0x56f1	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:00.862663984 CEST	8.8.8.8	192.168.2.22	0x6ae5	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:01.415105104 CEST	8.8.8.8	192.168.2.22	0x33eb	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:01.428425074 CEST	8.8.8.8	192.168.2.22	0x7df0	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:01.443517923 CEST	8.8.8.8	192.168.2.22	0xfa00	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:01.456639051 CEST	8.8.8.8	192.168.2.22	0xf28	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:01.469145060 CEST	8.8.8.8	192.168.2.22	0xff87	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:01.489928961 CEST	8.8.8.8	192.168.2.22	0x6c80	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:01.521157026 CEST	8.8.8.8	192.168.2.22	0x6b4	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:01.535789967 CEST	8.8.8.8	192.168.2.22	0xa3a4	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:01.547907114 CEST	8.8.8.8	192.168.2.22	0xd508	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:01.560693979 CEST	8.8.8.8	192.168.2.22	0xb7d2	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:01.571840048 CEST	8.8.8.8	192.168.2.22	0x6eba	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:01.584286928 CEST	8.8.8.8	192.168.2.22	0xeb2e	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:01.596292973 CEST	8.8.8.8	192.168.2.22	0x9e82	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:01.607718945 CEST	8.8.8.8	192.168.2.22	0x3dfa	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:01.619709969 CEST	8.8.8.8	192.168.2.22	0x4420	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:01.632759094 CEST	8.8.8.8	192.168.2.22	0x5efb	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:01.644239902 CEST	8.8.8.8	192.168.2.22	0xec3b	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:01.656837940 CEST	8.8.8.8	192.168.2.22	0xf12d	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:01.668541908 CEST	8.8.8.8	192.168.2.22	0x6451	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:01.682049036 CEST	8.8.8.8	192.168.2.22	0x951b	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:01.694190979 CEST	8.8.8.8	192.168.2.22	0x69d2	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:01.707325935 CEST	8.8.8.8	192.168.2.22	0x4828	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:01.769969940 CEST	8.8.8.8	192.168.2.22	0xc98c	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:01.783217907 CEST	8.8.8.8	192.168.2.22	0x24e7	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:01.795145988 CEST	8.8.8.8	192.168.2.22	0x2d0b	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:01.808346987 CEST	8.8.8.8	192.168.2.22	0x3bdb	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:01.820565939 CEST	8.8.8.8	192.168.2.22	0xd7b4	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:01.833354950 CEST	8.8.8.8	192.168.2.22	0xeacb	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:01.845525980 CEST	8.8.8.8	192.168.2.22	0xd2b4	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:01.857937098 CEST	8.8.8.8	192.168.2.22	0x99ae	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:01.872056961 CEST	8.8.8.8	192.168.2.22	0x7a1e	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:01.887186050 CEST	8.8.8.8	192.168.2.22	0xc7a4	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:01.900052071 CEST	8.8.8.8	192.168.2.22	0xd70	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:01.913486958 CEST	8.8.8.8	192.168.2.22	0xb648	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:01.925980091 CEST	8.8.8.8	192.168.2.22	0x6844	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:01.939094067 CEST	8.8.8.8	192.168.2.22	0x2ba3	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:01.951738119 CEST	8.8.8.8	192.168.2.22	0xf68	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:01.964159966 CEST	8.8.8.8	192.168.2.22	0xac94	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:01.978559971 CEST	8.8.8.8	192.168.2.22	0xa78d	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:01.992634058 CEST	8.8.8.8	192.168.2.22	0x1866	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:02.009644032 CEST	8.8.8.8	192.168.2.22	0xd4a1	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:02.021992922 CEST	8.8.8.8	192.168.2.22	0x6e2a	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:02.033853054 CEST	8.8.8.8	192.168.2.22	0x2bbc	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:02.046382904 CEST	8.8.8.8	192.168.2.22	0x32db	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:02.126291037 CEST	8.8.8.8	192.168.2.22	0xcb2e	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:02.139637947 CEST	8.8.8.8	192.168.2.22	0x3f09	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:02.152122021 CEST	8.8.8.8	192.168.2.22	0x154d	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:02.164901972 CEST	8.8.8.8	192.168.2.22	0xeeab	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:02.176615953 CEST	8.8.8.8	192.168.2.22	0xf9a3	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:02.189882994 CEST	8.8.8.8	192.168.2.22	0xcc29	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:02.202411890 CEST	8.8.8.8	192.168.2.22	0xa05b	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:02.216269016 CEST	8.8.8.8	192.168.2.22	0xa8ed	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:02.228971004 CEST	8.8.8.8	192.168.2.22	0x429b	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:02.241727114 CEST	8.8.8.8	192.168.2.22	0x8ed1	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:02.254117966 CEST	8.8.8.8	192.168.2.22	0x26b8	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:02.267412901 CEST	8.8.8.8	192.168.2.22	0x9f11	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:02.280035019 CEST	8.8.8.8	192.168.2.22	0x8d34	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:02.293379068 CEST	8.8.8.8	192.168.2.22	0x17d8	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:02.306430101 CEST	8.8.8.8	192.168.2.22	0x89b	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:02.320873976 CEST	8.8.8.8	192.168.2.22	0xd220	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:02.333427906 CEST	8.8.8.8	192.168.2.22	0x478e	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:02.346404076 CEST	8.8.8.8	192.168.2.22	0x3fe7	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:02.358967066 CEST	8.8.8.8	192.168.2.22	0x7ca4	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:02.371654987 CEST	8.8.8.8	192.168.2.22	0x161e	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:02.382380962 CEST	8.8.8.8	192.168.2.22	0xca89	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:02.394582033 CEST	8.8.8.8	192.168.2.22	0xcbf5	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:02.453479052 CEST	8.8.8.8	192.168.2.22	0xa088	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:02.464728117 CEST	8.8.8.8	192.168.2.22	0x5815	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:02.476933002 CEST	8.8.8.8	192.168.2.22	0x47b7	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:02.488661051 CEST	8.8.8.8	192.168.2.22	0xe925	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:02.500569105 CEST	8.8.8.8	192.168.2.22	0x9f28	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:02.515480042 CEST	8.8.8.8	192.168.2.22	0xca9c	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:02.527789116 CEST	8.8.8.8	192.168.2.22	0x5bc5	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:02.539427042 CEST	8.8.8.8	192.168.2.22	0x1d73	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:02.551357985 CEST	8.8.8.8	192.168.2.22	0x92bd	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:02.564167976 CEST	8.8.8.8	192.168.2.22	0x7a72	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:02.575365067 CEST	8.8.8.8	192.168.2.22	0x848	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:02.586045980 CEST	8.8.8.8	192.168.2.22	0x137b	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:02.597526073 CEST	8.8.8.8	192.168.2.22	0x28c4	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:02.610449076 CEST	8.8.8.8	192.168.2.22	0xc836	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:02.623537064 CEST	8.8.8.8	192.168.2.22	0x53af	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:02.635802031 CEST	8.8.8.8	192.168.2.22	0x1f00	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:02.647650003 CEST	8.8.8.8	192.168.2.22	0x1123	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:02.660859108 CEST	8.8.8.8	192.168.2.22	0x9e96	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:02.674073935 CEST	8.8.8.8	192.168.2.22	0x9dda	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:02.686206102 CEST	8.8.8.8	192.168.2.22	0x2483	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:02.696882010 CEST	8.8.8.8	192.168.2.22	0x522d	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:02.709650040 CEST	8.8.8.8	192.168.2.22	0x2b2b	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:02.728625059 CEST	8.8.8.8	192.168.2.22	0x88e9	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:02.743097067 CEST	8.8.8.8	192.168.2.22	0x5478	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:02.790371895 CEST	8.8.8.8	192.168.2.22	0xdff8	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:02.802939892 CEST	8.8.8.8	192.168.2.22	0xec4e	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:02.815176964 CEST	8.8.8.8	192.168.2.22	0xa1f1	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:02.827739000 CEST	8.8.8.8	192.168.2.22	0x4513	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:02.839458942 CEST	8.8.8.8	192.168.2.22	0xff53	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:02.853025913 CEST	8.8.8.8	192.168.2.22	0x78a7	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:02.865283012 CEST	8.8.8.8	192.168.2.22	0x5349	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:02.877154112 CEST	8.8.8.8	192.168.2.22	0xc616	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:02.893425941 CEST	8.8.8.8	192.168.2.22	0x66eb	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:02.908946991 CEST	8.8.8.8	192.168.2.22	0xf30a	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:02.921726942 CEST	8.8.8.8	192.168.2.22	0x3483	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:02.935254097 CEST	8.8.8.8	192.168.2.22	0x4b5c	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:02.946599960 CEST	8.8.8.8	192.168.2.22	0x7e36	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:02.957683086 CEST	8.8.8.8	192.168.2.22	0x6a1c	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:02.969968081 CEST	8.8.8.8	192.168.2.22	0x3b2a	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:02.980601072 CEST	8.8.8.8	192.168.2.22	0xd398	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:02.993575096 CEST	8.8.8.8	192.168.2.22	0x2f1e	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:03.006453991 CEST	8.8.8.8	192.168.2.22	0x4e1a	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:03.018657923 CEST	8.8.8.8	192.168.2.22	0xdb45	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:03.032056093 CEST	8.8.8.8	192.168.2.22	0x64dc	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:03.043448925 CEST	8.8.8.8	192.168.2.22	0xd0ab	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:03.055083990 CEST	8.8.8.8	192.168.2.22	0x8390	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:03.065185070 CEST	8.8.8.8	192.168.2.22	0xdace	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:03.075644970 CEST	8.8.8.8	192.168.2.22	0x3cd2	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:03.165899038 CEST	8.8.8.8	192.168.2.22	0x6823	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:03.177047014 CEST	8.8.8.8	192.168.2.22	0x7409	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:03.188924074 CEST	8.8.8.8	192.168.2.22	0x6070	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:03.200611115 CEST	8.8.8.8	192.168.2.22	0x2cee	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:03.212997913 CEST	8.8.8.8	192.168.2.22	0x8ff7	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:03.229924917 CEST	8.8.8.8	192.168.2.22	0x2ed8	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:03.249567986 CEST	8.8.8.8	192.168.2.22	0xe45	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:03.261538029 CEST	8.8.8.8	192.168.2.22	0x149b	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:03.275826931 CEST	8.8.8.8	192.168.2.22	0xf0ac	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:03.287875891 CEST	8.8.8.8	192.168.2.22	0xe142	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:03.300050974 CEST	8.8.8.8	192.168.2.22	0x6f40	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:03.312143087 CEST	8.8.8.8	192.168.2.22	0xbdce	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:03.322675943 CEST	8.8.8.8	192.168.2.22	0xb2fa	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:03.335264921 CEST	8.8.8.8	192.168.2.22	0x22e4	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:03.346348047 CEST	8.8.8.8	192.168.2.22	0xfc18	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:03.360666037 CEST	8.8.8.8	192.168.2.22	0xd77c	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:03.372179031 CEST	8.8.8.8	192.168.2.22	0x5542	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:03.417901039 CEST	8.8.8.8	192.168.2.22	0x27ae	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:03.475989103 CEST	8.8.8.8	192.168.2.22	0x871a	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:03.519931078 CEST	8.8.8.8	192.168.2.22	0x5b46	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:03.557234049 CEST	8.8.8.8	192.168.2.22	0x48ab	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:03.598402977 CEST	8.8.8.8	192.168.2.22	0x2041	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:03.887213945 CEST	8.8.8.8	192.168.2.22	0x4de8	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:04.577820063 CEST	8.8.8.8	192.168.2.22	0x463e	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:04.963615894 CEST	8.8.8.8	192.168.2.22	0x613a	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:05.019421101 CEST	8.8.8.8	192.168.2.22	0xd011	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:05.035917997 CEST	8.8.8.8	192.168.2.22	0xc51c	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:05.048523903 CEST	8.8.8.8	192.168.2.22	0x6bb9	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:05.060620070 CEST	8.8.8.8	192.168.2.22	0xcb26	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:05.073420048 CEST	8.8.8.8	192.168.2.22	0xf6f8	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:05.085211992 CEST	8.8.8.8	192.168.2.22	0xafc3	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:05.098474026 CEST	8.8.8.8	192.168.2.22	0xc754	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:05.110395908 CEST	8.8.8.8	192.168.2.22	0xa443	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:05.123087883 CEST	8.8.8.8	192.168.2.22	0x1ec4	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:05.734805107 CEST	8.8.8.8	192.168.2.22	0x5f72	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:05.748270035 CEST	8.8.8.8	192.168.2.22	0x21ca	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:05.761698008 CEST	8.8.8.8	192.168.2.22	0x2ab1	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:05.774056911 CEST	8.8.8.8	192.168.2.22	0x9c0c	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:05.785912991 CEST	8.8.8.8	192.168.2.22	0x5a46	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:05.798661947 CEST	8.8.8.8	192.168.2.22	0x71c	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:05.810528040 CEST	8.8.8.8	192.168.2.22	0x736	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:05.824214935 CEST	8.8.8.8	192.168.2.22	0xc1ad	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:05.836558104 CEST	8.8.8.8	192.168.2.22	0x9ecd	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:05.904223919 CEST	8.8.8.8	192.168.2.22	0x1638	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:05.916918993 CEST	8.8.8.8	192.168.2.22	0x1747	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:05.929424047 CEST	8.8.8.8	192.168.2.22	0x57c1	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:05.941728115 CEST	8.8.8.8	192.168.2.22	0x700b	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:05.955431938 CEST	8.8.8.8	192.168.2.22	0x51a2	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:05.967964888 CEST	8.8.8.8	192.168.2.22	0x9035	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:05.980681896 CEST	8.8.8.8	192.168.2.22	0x5876	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:05.993170977 CEST	8.8.8.8	192.168.2.22	0x4cf3	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:06.007435083 CEST	8.8.8.8	192.168.2.22	0x47d2	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:06.020430088 CEST	8.8.8.8	192.168.2.22	0x72e2	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:06.034313917 CEST	8.8.8.8	192.168.2.22	0x9062	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:06.045963049 CEST	8.8.8.8	192.168.2.22	0xaf31	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:06.059906006 CEST	8.8.8.8	192.168.2.22	0xd77c	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:06.072175980 CEST	8.8.8.8	192.168.2.22	0xeb10	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:06.085064888 CEST	8.8.8.8	192.168.2.22	0xe6bd	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:06.096329927 CEST	8.8.8.8	192.168.2.22	0x4f57	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:06.109833956 CEST	8.8.8.8	192.168.2.22	0x9c24	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:06.121973991 CEST	8.8.8.8	192.168.2.22	0x4b0f	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:06.134422064 CEST	8.8.8.8	192.168.2.22	0x57e6	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:06.153892040 CEST	8.8.8.8	192.168.2.22	0x8878	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:06.169284105 CEST	8.8.8.8	192.168.2.22	0x67bd	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:06.184017897 CEST	8.8.8.8	192.168.2.22	0x106b	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:06.247639894 CEST	8.8.8.8	192.168.2.22	0x6f9c	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:06.260571957 CEST	8.8.8.8	192.168.2.22	0x2bfa	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:06.298429966 CEST	8.8.8.8	192.168.2.22	0xa106	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:06.309438944 CEST	8.8.8.8	192.168.2.22	0x1397	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:06.322799921 CEST	8.8.8.8	192.168.2.22	0x88d3	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:06.334379911 CEST	8.8.8.8	192.168.2.22	0xb001	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:06.348776102 CEST	8.8.8.8	192.168.2.22	0xe9ba	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:06.360925913 CEST	8.8.8.8	192.168.2.22	0x5e29	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:06.372606993 CEST	8.8.8.8	192.168.2.22	0x6754	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:06.383959055 CEST	8.8.8.8	192.168.2.22	0x316c	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:06.395028114 CEST	8.8.8.8	192.168.2.22	0xaaaf	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:06.405716896 CEST	8.8.8.8	192.168.2.22	0xa69	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:06.416764975 CEST	8.8.8.8	192.168.2.22	0xf95	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:06.429086924 CEST	8.8.8.8	192.168.2.22	0x8ff3	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:06.440776110 CEST	8.8.8.8	192.168.2.22	0x7b17	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:06.453444958 CEST	8.8.8.8	192.168.2.22	0xdd10	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:06.464369059 CEST	8.8.8.8	192.168.2.22	0xcaaa	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:06.476727962 CEST	8.8.8.8	192.168.2.22	0x7d2f	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:06.490750074 CEST	8.8.8.8	192.168.2.22	0x484f	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:06.503529072 CEST	8.8.8.8	192.168.2.22	0xbc20	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:06.514748096 CEST	8.8.8.8	192.168.2.22	0x2f46	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:06.525516033 CEST	8.8.8.8	192.168.2.22	0x4326	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:06.579066038 CEST	8.8.8.8	192.168.2.22	0x45ce	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:06.590837002 CEST	8.8.8.8	192.168.2.22	0x4079	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:06.602031946 CEST	8.8.8.8	192.168.2.22	0xfd84	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:06.613441944 CEST	8.8.8.8	192.168.2.22	0xe30a	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:06.625317097 CEST	8.8.8.8	192.168.2.22	0xfdb	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:06.635770082 CEST	8.8.8.8	192.168.2.22	0xfb6d	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:06.647279024 CEST	8.8.8.8	192.168.2.22	0xdb9b	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:06.658804893 CEST	8.8.8.8	192.168.2.22	0xde9a	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:06.671797037 CEST	8.8.8.8	192.168.2.22	0x2a94	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:06.685050964 CEST	8.8.8.8	192.168.2.22	0x130	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:06.697520971 CEST	8.8.8.8	192.168.2.22	0xc098	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:06.710036039 CEST	8.8.8.8	192.168.2.22	0x941f	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:06.725347996 CEST	8.8.8.8	192.168.2.22	0x2cb2	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:06.736525059 CEST	8.8.8.8	192.168.2.22	0x64eb	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:06.747214079 CEST	8.8.8.8	192.168.2.22	0x6c76	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:06.759139061 CEST	8.8.8.8	192.168.2.22	0x5e18	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:06.770138979 CEST	8.8.8.8	192.168.2.22	0x51c4	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:06.783307076 CEST	8.8.8.8	192.168.2.22	0x7d0	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:06.794205904 CEST	8.8.8.8	192.168.2.22	0xa82b	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:06.805171967 CEST	8.8.8.8	192.168.2.22	0xa6b8	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:06.817615986 CEST	8.8.8.8	192.168.2.22	0x640d	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:06.829472065 CEST	8.8.8.8	192.168.2.22	0x9af1	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:06.841671944 CEST	8.8.8.8	192.168.2.22	0x148e	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:06.853523016 CEST	8.8.8.8	192.168.2.22	0x1c76	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:06.865096092 CEST	8.8.8.8	192.168.2.22	0xf417	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:06.917375088 CEST	8.8.8.8	192.168.2.22	0x960c	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:06.928951025 CEST	8.8.8.8	192.168.2.22	0xfda0	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:06.940629005 CEST	8.8.8.8	192.168.2.22	0x2cfc	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:06.952702999 CEST	8.8.8.8	192.168.2.22	0xd00f	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:06.964426994 CEST	8.8.8.8	192.168.2.22	0x6636	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:06.975775957 CEST	8.8.8.8	192.168.2.22	0x85fe	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:06.987936020 CEST	8.8.8.8	192.168.2.22	0x1921	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:07.002650023 CEST	8.8.8.8	192.168.2.22	0x74cd	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:07.015847921 CEST	8.8.8.8	192.168.2.22	0x638d	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:07.027316093 CEST	8.8.8.8	192.168.2.22	0xc857	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:07.068836927 CEST	8.8.8.8	192.168.2.22	0xfa74	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:07.089046001 CEST	8.8.8.8	192.168.2.22	0x7492	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:07.107634068 CEST	8.8.8.8	192.168.2.22	0x4a5b	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:07.132170916 CEST	8.8.8.8	192.168.2.22	0xec7	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:07.162058115 CEST	8.8.8.8	192.168.2.22	0x62df	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:07.235411882 CEST	8.8.8.8	192.168.2.22	0x439b	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:07.703958988 CEST	8.8.8.8	192.168.2.22	0x45c5	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:08.581867933 CEST	8.8.8.8	192.168.2.22	0x8867	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:08.598900080 CEST	8.8.8.8	192.168.2.22	0x38c9	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:08.675638914 CEST	8.8.8.8	192.168.2.22	0x2b64	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:08.729175091 CEST	8.8.8.8	192.168.2.22	0xd394	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:08.744549990 CEST	8.8.8.8	192.168.2.22	0xafc2	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:08.757270098 CEST	8.8.8.8	192.168.2.22	0xc9f7	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:08.771254063 CEST	8.8.8.8	192.168.2.22	0x1331	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:08.784508944 CEST	8.8.8.8	192.168.2.22	0xb1f2	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:08.798316002 CEST	8.8.8.8	192.168.2.22	0xc8cb	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:08.812071085 CEST	8.8.8.8	192.168.2.22	0xaed9	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:08.825694084 CEST	8.8.8.8	192.168.2.22	0xad75	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:08.839638948 CEST	8.8.8.8	192.168.2.22	0xc8f2	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:08.852886915 CEST	8.8.8.8	192.168.2.22	0xcb58	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:08.865617037 CEST	8.8.8.8	192.168.2.22	0xbeb9	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:08.879940033 CEST	8.8.8.8	192.168.2.22	0x16c2	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:08.896388054 CEST	8.8.8.8	192.168.2.22	0x86c	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:08.910172939 CEST	8.8.8.8	192.168.2.22	0xb66b	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:08.923518896 CEST	8.8.8.8	192.168.2.22	0xe745	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:08.938421011 CEST	8.8.8.8	192.168.2.22	0xaf0f	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:09.009136915 CEST	8.8.8.8	192.168.2.22	0xc8c	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:09.023245096 CEST	8.8.8.8	192.168.2.22	0xbc4d	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:09.039513111 CEST	8.8.8.8	192.168.2.22	0x60aa	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:09.053550005 CEST	8.8.8.8	192.168.2.22	0x7b38	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:09.066812992 CEST	8.8.8.8	192.168.2.22	0xa643	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:09.079967022 CEST	8.8.8.8	192.168.2.22	0x2449	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:09.092021942 CEST	8.8.8.8	192.168.2.22	0xbda6	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:09.106488943 CEST	8.8.8.8	192.168.2.22	0x238a	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:09.119122982 CEST	8.8.8.8	192.168.2.22	0x56fc	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:09.132308006 CEST	8.8.8.8	192.168.2.22	0x9316	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:09.144092083 CEST	8.8.8.8	192.168.2.22	0xbe2	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:09.157740116 CEST	8.8.8.8	192.168.2.22	0xc781	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:09.171591043 CEST	8.8.8.8	192.168.2.22	0x863f	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:09.184879065 CEST	8.8.8.8	192.168.2.22	0x1180	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:09.198272943 CEST	8.8.8.8	192.168.2.22	0xd566	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:09.212439060 CEST	8.8.8.8	192.168.2.22	0xcfdc	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:09.225256920 CEST	8.8.8.8	192.168.2.22	0x5d83	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:09.238584042 CEST	8.8.8.8	192.168.2.22	0xc776	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:09.252078056 CEST	8.8.8.8	192.168.2.22	0x33fa	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:09.267266989 CEST	8.8.8.8	192.168.2.22	0x24fb	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:09.281143904 CEST	8.8.8.8	192.168.2.22	0x7032	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:09.344119072 CEST	8.8.8.8	192.168.2.22	0x20fa	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:09.357737064 CEST	8.8.8.8	192.168.2.22	0x52e3	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:09.369379997 CEST	8.8.8.8	192.168.2.22	0x54f6	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:09.380742073 CEST	8.8.8.8	192.168.2.22	0x530c	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:09.392522097 CEST	8.8.8.8	192.168.2.22	0xe4f5	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:09.404608011 CEST	8.8.8.8	192.168.2.22	0xf3fd	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:09.418221951 CEST	8.8.8.8	192.168.2.22	0xb018	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:09.429805040 CEST	8.8.8.8	192.168.2.22	0x949d	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:09.441668987 CEST	8.8.8.8	192.168.2.22	0xf5df	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:09.453937054 CEST	8.8.8.8	192.168.2.22	0xde7a	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:09.495290995 CEST	8.8.8.8	192.168.2.22	0x1753	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:09.507208109 CEST	8.8.8.8	192.168.2.22	0x58c8	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:09.518461943 CEST	8.8.8.8	192.168.2.22	0x2c57	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:09.529016972 CEST	8.8.8.8	192.168.2.22	0xe62c	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:09.544117928 CEST	8.8.8.8	192.168.2.22	0x23e5	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:09.554970026 CEST	8.8.8.8	192.168.2.22	0xed57	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:09.566796064 CEST	8.8.8.8	192.168.2.22	0xc612	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:09.578818083 CEST	8.8.8.8	192.168.2.22	0x31a	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:09.592751026 CEST	8.8.8.8	192.168.2.22	0x3660	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:09.604321957 CEST	8.8.8.8	192.168.2.22	0x3352	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:09.617115974 CEST	8.8.8.8	192.168.2.22	0x5a31	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:09.628602028 CEST	8.8.8.8	192.168.2.22	0xaee6	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:09.671778917 CEST	8.8.8.8	192.168.2.22	0x74b6	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:09.684185982 CEST	8.8.8.8	192.168.2.22	0x1e67	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:09.695457935 CEST	8.8.8.8	192.168.2.22	0xc584	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:09.705897093 CEST	8.8.8.8	192.168.2.22	0x5aaf	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:09.717430115 CEST	8.8.8.8	192.168.2.22	0x7632	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:09.729737997 CEST	8.8.8.8	192.168.2.22	0x666a	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:09.741058111 CEST	8.8.8.8	192.168.2.22	0x922e	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:09.752182007 CEST	8.8.8.8	192.168.2.22	0xcb91	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:09.763187885 CEST	8.8.8.8	192.168.2.22	0x31e9	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:09.774446011 CEST	8.8.8.8	192.168.2.22	0xe275	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:09.787341118 CEST	8.8.8.8	192.168.2.22	0xa3e1	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:09.799844980 CEST	8.8.8.8	192.168.2.22	0xd1c3	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:09.812758923 CEST	8.8.8.8	192.168.2.22	0xb64f	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:09.826533079 CEST	8.8.8.8	192.168.2.22	0x338d	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:09.838748932 CEST	8.8.8.8	192.168.2.22	0x9c03	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:09.850790977 CEST	8.8.8.8	192.168.2.22	0xdfd0	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:09.862556934 CEST	8.8.8.8	192.168.2.22	0x4bd7	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:09.874442101 CEST	8.8.8.8	192.168.2.22	0x245a	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:09.888513088 CEST	8.8.8.8	192.168.2.22	0x83b1	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:09.899025917 CEST	8.8.8.8	192.168.2.22	0x6dbf	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:09.910413980 CEST	8.8.8.8	192.168.2.22	0x9cc	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:09.921139956 CEST	8.8.8.8	192.168.2.22	0x2b88	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:09.932650089 CEST	8.8.8.8	192.168.2.22	0x6996	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:09.944468975 CEST	8.8.8.8	192.168.2.22	0x87a7	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:09.955607891 CEST	8.8.8.8	192.168.2.22	0x9353	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:09.967551947 CEST	8.8.8.8	192.168.2.22	0xe92c	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:10.036601067 CEST	8.8.8.8	192.168.2.22	0x11eb	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:10.048192024 CEST	8.8.8.8	192.168.2.22	0xf6f5	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:10.061038971 CEST	8.8.8.8	192.168.2.22	0x7a65	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:10.073961020 CEST	8.8.8.8	192.168.2.22	0xcdc4	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:10.086874962 CEST	8.8.8.8	192.168.2.22	0xe6e9	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:10.097501040 CEST	8.8.8.8	192.168.2.22	0x6094	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:10.110409021 CEST	8.8.8.8	192.168.2.22	0xc79a	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:10.122834921 CEST	8.8.8.8	192.168.2.22	0xd0	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:10.136320114 CEST	8.8.8.8	192.168.2.22	0x8319	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:10.148032904 CEST	8.8.8.8	192.168.2.22	0x9cfb	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:10.160789967 CEST	8.8.8.8	192.168.2.22	0xad83	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:10.171988010 CEST	8.8.8.8	192.168.2.22	0xe6f6	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:10.185627937 CEST	8.8.8.8	192.168.2.22	0x3d8	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:10.196506023 CEST	8.8.8.8	192.168.2.22	0xa6f	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:10.207823992 CEST	8.8.8.8	192.168.2.22	0x3f16	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:10.218487978 CEST	8.8.8.8	192.168.2.22	0xd6f	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:10.230523109 CEST	8.8.8.8	192.168.2.22	0x418f	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:10.241532087 CEST	8.8.8.8	192.168.2.22	0xdbd6	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:10.253897905 CEST	8.8.8.8	192.168.2.22	0x8e02	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:10.265841007 CEST	8.8.8.8	192.168.2.22	0xb9d1	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:10.281239033 CEST	8.8.8.8	192.168.2.22	0x20c	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:10.295643091 CEST	8.8.8.8	192.168.2.22	0xcc6	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:10.307722092 CEST	8.8.8.8	192.168.2.22	0x107c	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:10.318427086 CEST	8.8.8.8	192.168.2.22	0x3eb7	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:10.383285999 CEST	8.8.8.8	192.168.2.22	0xb92d	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:10.394479036 CEST	8.8.8.8	192.168.2.22	0xa8dc	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:10.410324097 CEST	8.8.8.8	192.168.2.22	0xe69b	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:10.425627947 CEST	8.8.8.8	192.168.2.22	0x807b	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:10.441688061 CEST	8.8.8.8	192.168.2.22	0xdaee	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:10.455833912 CEST	8.8.8.8	192.168.2.22	0x1563	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:10.470352888 CEST	8.8.8.8	192.168.2.22	0x8308	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:10.486267090 CEST	8.8.8.8	192.168.2.22	0xa5b7	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:10.528297901 CEST	8.8.8.8	192.168.2.22	0xe30	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:10.543555021 CEST	8.8.8.8	192.168.2.22	0xff6c	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:10.558512926 CEST	8.8.8.8	192.168.2.22	0x84b4	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:10.569854021 CEST	8.8.8.8	192.168.2.22	0x65de	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:10.610337973 CEST	8.8.8.8	192.168.2.22	0x25f5	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:10.631774902 CEST	8.8.8.8	192.168.2.22	0x7e2d	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:10.664171934 CEST	8.8.8.8	192.168.2.22	0xc6f2	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:10.735459089 CEST	8.8.8.8	192.168.2.22	0xf4d5	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:10.783621073 CEST	8.8.8.8	192.168.2.22	0xb22f	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:11.093053102 CEST	8.8.8.8	192.168.2.22	0xb5b3	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:11.402024984 CEST	8.8.8.8	192.168.2.22	0x8e92	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:11.732736111 CEST	8.8.8.8	192.168.2.22	0xf293	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:12.165776014 CEST	8.8.8.8	192.168.2.22	0x7e11	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:12.178302050 CEST	8.8.8.8	192.168.2.22	0x1152	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:12.192025900 CEST	8.8.8.8	192.168.2.22	0x5071	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:12.205147028 CEST	8.8.8.8	192.168.2.22	0x2fa3	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:12.217849970 CEST	8.8.8.8	192.168.2.22	0xadea	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:12.230324030 CEST	8.8.8.8	192.168.2.22	0x2814	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:12.243812084 CEST	8.8.8.8	192.168.2.22	0xd4af	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:12.258095980 CEST	8.8.8.8	192.168.2.22	0x5c7a	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:12.271629095 CEST	8.8.8.8	192.168.2.22	0x622c	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:12.284173012 CEST	8.8.8.8	192.168.2.22	0x3a4f	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:12.297784090 CEST	8.8.8.8	192.168.2.22	0x342c	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:12.310695887 CEST	8.8.8.8	192.168.2.22	0x94	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:12.324485064 CEST	8.8.8.8	192.168.2.22	0x4526	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:12.338382959 CEST	8.8.8.8	192.168.2.22	0xecb2	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:12.353120089 CEST	8.8.8.8	192.168.2.22	0x608e	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:12.366010904 CEST	8.8.8.8	192.168.2.22	0xa735	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:12.380080938 CEST	8.8.8.8	192.168.2.22	0x41ec	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:12.391406059 CEST	8.8.8.8	192.168.2.22	0x3005	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:12.402786016 CEST	8.8.8.8	192.168.2.22	0x4ad5	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:12.471860886 CEST	8.8.8.8	192.168.2.22	0xde02	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:12.484996080 CEST	8.8.8.8	192.168.2.22	0x178	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:12.497565031 CEST	8.8.8.8	192.168.2.22	0xbeae	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:12.510305882 CEST	8.8.8.8	192.168.2.22	0x4fe8	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:12.523848057 CEST	8.8.8.8	192.168.2.22	0x9839	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:12.537062883 CEST	8.8.8.8	192.168.2.22	0xaa5c	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:12.549716949 CEST	8.8.8.8	192.168.2.22	0x465e	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:12.562902927 CEST	8.8.8.8	192.168.2.22	0x163d	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:12.575879097 CEST	8.8.8.8	192.168.2.22	0xf84c	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:12.588880062 CEST	8.8.8.8	192.168.2.22	0xbb6d	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:12.601625919 CEST	8.8.8.8	192.168.2.22	0x3c74	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:12.615008116 CEST	8.8.8.8	192.168.2.22	0x2f4d	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:12.627064943 CEST	8.8.8.8	192.168.2.22	0xd1	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:12.640031099 CEST	8.8.8.8	192.168.2.22	0xdef1	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:12.681032896 CEST	8.8.8.8	192.168.2.22	0x28de	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:12.694470882 CEST	8.8.8.8	192.168.2.22	0x1348	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:12.706908941 CEST	8.8.8.8	192.168.2.22	0x3c21	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:12.719741106 CEST	8.8.8.8	192.168.2.22	0xb6ba	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:12.732083082 CEST	8.8.8.8	192.168.2.22	0x68df	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:12.744788885 CEST	8.8.8.8	192.168.2.22	0xaa6b	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:12.816806078 CEST	8.8.8.8	192.168.2.22	0x7955	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:12.830336094 CEST	8.8.8.8	192.168.2.22	0x9089	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:12.846115112 CEST	8.8.8.8	192.168.2.22	0x179d	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:12.871968985 CEST	8.8.8.8	192.168.2.22	0xd110	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:12.899292946 CEST	8.8.8.8	192.168.2.22	0xb3b5	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:12.922266960 CEST	8.8.8.8	192.168.2.22	0xd6ab	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:12.934354067 CEST	8.8.8.8	192.168.2.22	0xe8a1	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:12.947768927 CEST	8.8.8.8	192.168.2.22	0x5df0	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:12.960212946 CEST	8.8.8.8	192.168.2.22	0x1f49	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:12.974328995 CEST	8.8.8.8	192.168.2.22	0x44cc	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:12.986829042 CEST	8.8.8.8	192.168.2.22	0x7775	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:13.000911951 CEST	8.8.8.8	192.168.2.22	0xc84c	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:13.015469074 CEST	8.8.8.8	192.168.2.22	0xe9c3	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:13.027795076 CEST	8.8.8.8	192.168.2.22	0xc9d3	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:13.040462017 CEST	8.8.8.8	192.168.2.22	0x1065	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:13.053325891 CEST	8.8.8.8	192.168.2.22	0xb3ca	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:13.065592051 CEST	8.8.8.8	192.168.2.22	0x581e	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:13.079667091 CEST	8.8.8.8	192.168.2.22	0xe0e7	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:13.092139006 CEST	8.8.8.8	192.168.2.22	0x3ced	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:13.162352085 CEST	8.8.8.8	192.168.2.22	0x7843	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:13.173886061 CEST	8.8.8.8	192.168.2.22	0xad12	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:13.187278986 CEST	8.8.8.8	192.168.2.22	0xd86a	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:13.199376106 CEST	8.8.8.8	192.168.2.22	0x337	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:13.211996078 CEST	8.8.8.8	192.168.2.22	0x62cf	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:13.224469900 CEST	8.8.8.8	192.168.2.22	0xc072	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:13.237740040 CEST	8.8.8.8	192.168.2.22	0x5671	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:13.250096083 CEST	8.8.8.8	192.168.2.22	0x28ef	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:13.262023926 CEST	8.8.8.8	192.168.2.22	0xf85d	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:13.275557995 CEST	8.8.8.8	192.168.2.22	0x63fe	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:13.289525986 CEST	8.8.8.8	192.168.2.22	0x370f	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:13.303070068 CEST	8.8.8.8	192.168.2.22	0xae8d	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:13.316139936 CEST	8.8.8.8	192.168.2.22	0x2555	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:13.328392029 CEST	8.8.8.8	192.168.2.22	0x2077	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:13.340262890 CEST	8.8.8.8	192.168.2.22	0x346	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:13.352674007 CEST	8.8.8.8	192.168.2.22	0x5c86	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:13.365668058 CEST	8.8.8.8	192.168.2.22	0x72ea	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:13.377249956 CEST	8.8.8.8	192.168.2.22	0x1dd8	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:13.389667988 CEST	8.8.8.8	192.168.2.22	0x7bea	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:13.401629925 CEST	8.8.8.8	192.168.2.22	0x6f27	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:13.413080931 CEST	8.8.8.8	192.168.2.22	0x9d4c	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:13.424686909 CEST	8.8.8.8	192.168.2.22	0x196e	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:13.436728001 CEST	8.8.8.8	192.168.2.22	0xaeb1	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:13.501343012 CEST	8.8.8.8	192.168.2.22	0x2f45	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:13.515064955 CEST	8.8.8.8	192.168.2.22	0x7d74	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:13.525784016 CEST	8.8.8.8	192.168.2.22	0xc3dc	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:13.537470102 CEST	8.8.8.8	192.168.2.22	0xecd4	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:13.549539089 CEST	8.8.8.8	192.168.2.22	0x8440	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:13.561858892 CEST	8.8.8.8	192.168.2.22	0x3c0d	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:13.572808027 CEST	8.8.8.8	192.168.2.22	0x134e	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:13.585376978 CEST	8.8.8.8	192.168.2.22	0x9db	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:13.597316980 CEST	8.8.8.8	192.168.2.22	0x5532	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:13.610033989 CEST	8.8.8.8	192.168.2.22	0x9376	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:13.621584892 CEST	8.8.8.8	192.168.2.22	0x164f	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:13.633696079 CEST	8.8.8.8	192.168.2.22	0xec2b	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:13.644942999 CEST	8.8.8.8	192.168.2.22	0x9443	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:13.655584097 CEST	8.8.8.8	192.168.2.22	0x1cb	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:13.667216063 CEST	8.8.8.8	192.168.2.22	0x8750	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:13.712515116 CEST	8.8.8.8	192.168.2.22	0xd4d1	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:13.725287914 CEST	8.8.8.8	192.168.2.22	0xc5	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:13.739168882 CEST	8.8.8.8	192.168.2.22	0xb20	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:13.750463963 CEST	8.8.8.8	192.168.2.22	0x7e19	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:13.762926102 CEST	8.8.8.8	192.168.2.22	0x87ae	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:13.773648977 CEST	8.8.8.8	192.168.2.22	0xf8e0	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:13.824460983 CEST	8.8.8.8	192.168.2.22	0xcfb7	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:13.836319923 CEST	8.8.8.8	192.168.2.22	0x6239	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:13.849644899 CEST	8.8.8.8	192.168.2.22	0xc3b8	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:13.860718966 CEST	8.8.8.8	192.168.2.22	0x277f	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:13.874830008 CEST	8.8.8.8	192.168.2.22	0x7289	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:13.888941050 CEST	8.8.8.8	192.168.2.22	0x7325	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:13.902735949 CEST	8.8.8.8	192.168.2.22	0x4d96	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:13.916084051 CEST	8.8.8.8	192.168.2.22	0xe47f	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:13.934097052 CEST	8.8.8.8	192.168.2.22	0x3750	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:13.946959019 CEST	8.8.8.8	192.168.2.22	0x79a3	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:13.963301897 CEST	8.8.8.8	192.168.2.22	0x6011	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:13.977946043 CEST	8.8.8.8	192.168.2.22	0xf8a	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:13.993087053 CEST	8.8.8.8	192.168.2.22	0x6e72	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:14.008476019 CEST	8.8.8.8	192.168.2.22	0xf7a8	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:14.026200056 CEST	8.8.8.8	192.168.2.22	0x9e6c	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:14.040812016 CEST	8.8.8.8	192.168.2.22	0x9b38	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:14.055272102 CEST	8.8.8.8	192.168.2.22	0xd078	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:14.069624901 CEST	8.8.8.8	192.168.2.22	0xd72d	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:14.086194992 CEST	8.8.8.8	192.168.2.22	0xa8c3	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:14.102758884 CEST	8.8.8.8	192.168.2.22	0xa4ce	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:14.117552996 CEST	8.8.8.8	192.168.2.22	0x6206	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:14.258596897 CEST	8.8.8.8	192.168.2.22	0x3638	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:14.274817944 CEST	8.8.8.8	192.168.2.22	0xbaac	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:14.306323051 CEST	8.8.8.8	192.168.2.22	0xf06a	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:14.344026089 CEST	8.8.8.8	192.168.2.22	0x82b8	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:14.373960018 CEST	8.8.8.8	192.168.2.22	0x2e4c	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:14.404073000 CEST	8.8.8.8	192.168.2.22	0xf494	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:14.437885046 CEST	8.8.8.8	192.168.2.22	0xab30	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:14.722553015 CEST	8.8.8.8	192.168.2.22	0xf56b	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:15.736599922 CEST	8.8.8.8	192.168.2.22	0x8bce	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:16.175529957 CEST	8.8.8.8	192.168.2.22	0x817e	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:16.191708088 CEST	8.8.8.8	192.168.2.22	0xacad	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:16.229304075 CEST	8.8.8.8	192.168.2.22	0x54ff	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:16.240603924 CEST	8.8.8.8	192.168.2.22	0xdb93	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:16.251637936 CEST	8.8.8.8	192.168.2.22	0x7081	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:16.264800072 CEST	8.8.8.8	192.168.2.22	0xb899	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:16.311925888 CEST	8.8.8.8	192.168.2.22	0x8407	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:16.324357986 CEST	8.8.8.8	192.168.2.22	0x8490	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:16.336745977 CEST	8.8.8.8	192.168.2.22	0x5443	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:16.348973036 CEST	8.8.8.8	192.168.2.22	0xc7e9	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:16.361020088 CEST	8.8.8.8	192.168.2.22	0x6e63	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:16.373781919 CEST	8.8.8.8	192.168.2.22	0x993d	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:16.387653112 CEST	8.8.8.8	192.168.2.22	0xa5bc	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:16.400826931 CEST	8.8.8.8	192.168.2.22	0xfd54	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:16.413525105 CEST	8.8.8.8	192.168.2.22	0x7313	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:16.426109076 CEST	8.8.8.8	192.168.2.22	0x7cdf	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:16.439801931 CEST	8.8.8.8	192.168.2.22	0xd40c	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:16.452164888 CEST	8.8.8.8	192.168.2.22	0x449d	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:16.462609053 CEST	8.8.8.8	192.168.2.22	0x92e2	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:16.473591089 CEST	8.8.8.8	192.168.2.22	0x7a8e	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:16.484865904 CEST	8.8.8.8	192.168.2.22	0x375a	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:16.497824907 CEST	8.8.8.8	192.168.2.22	0xd476	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:16.508837938 CEST	8.8.8.8	192.168.2.22	0xac23	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:16.520220041 CEST	8.8.8.8	192.168.2.22	0xeb48	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:16.532067060 CEST	8.8.8.8	192.168.2.22	0xac7c	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:16.543126106 CEST	8.8.8.8	192.168.2.22	0x4491	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:16.555124998 CEST	8.8.8.8	192.168.2.22	0xcac5	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:16.565730095 CEST	8.8.8.8	192.168.2.22	0x8860	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:16.577496052 CEST	8.8.8.8	192.168.2.22	0xb476	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:16.591285944 CEST	8.8.8.8	192.168.2.22	0xc8e5	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:16.602680922 CEST	8.8.8.8	192.168.2.22	0xa1a2	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:16.668262959 CEST	8.8.8.8	192.168.2.22	0xa9b3	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:16.681359053 CEST	8.8.8.8	192.168.2.22	0xe538	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:16.693331003 CEST	8.8.8.8	192.168.2.22	0x9821	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:16.707523108 CEST	8.8.8.8	192.168.2.22	0xb59b	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:16.719706059 CEST	8.8.8.8	192.168.2.22	0xcc88	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:16.731796026 CEST	8.8.8.8	192.168.2.22	0x4c46	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:16.744062901 CEST	8.8.8.8	192.168.2.22	0xb130	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:16.756402016 CEST	8.8.8.8	192.168.2.22	0x91fd	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:16.768662930 CEST	8.8.8.8	192.168.2.22	0x1804	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:16.781256914 CEST	8.8.8.8	192.168.2.22	0x5b74	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:16.792994022 CEST	8.8.8.8	192.168.2.22	0x883e	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:16.805270910 CEST	8.8.8.8	192.168.2.22	0xe967	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:16.816560984 CEST	8.8.8.8	192.168.2.22	0x650	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:16.828639984 CEST	8.8.8.8	192.168.2.22	0x86b5	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:16.840972900 CEST	8.8.8.8	192.168.2.22	0x1890	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:16.853765965 CEST	8.8.8.8	192.168.2.22	0x53c2	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:16.865700006 CEST	8.8.8.8	192.168.2.22	0xf0a0	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:16.905853987 CEST	8.8.8.8	192.168.2.22	0xb974	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:16.917663097 CEST	8.8.8.8	192.168.2.22	0xa740	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:16.930903912 CEST	8.8.8.8	192.168.2.22	0x5085	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:16.943573952 CEST	8.8.8.8	192.168.2.22	0x658e	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:17.008330107 CEST	8.8.8.8	192.168.2.22	0xaa0a	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:17.018785000 CEST	8.8.8.8	192.168.2.22	0x95e9	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:17.030299902 CEST	8.8.8.8	192.168.2.22	0x57ff	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:17.275506020 CEST	8.8.8.8	192.168.2.22	0xb351	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:17.287050962 CEST	8.8.8.8	192.168.2.22	0xa436	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:17.330733061 CEST	8.8.8.8	192.168.2.22	0x458e	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:17.343839884 CEST	8.8.8.8	192.168.2.22	0x9b64	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:17.354798079 CEST	8.8.8.8	192.168.2.22	0xa9cd	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:17.366094112 CEST	8.8.8.8	192.168.2.22	0x66fe	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:17.375803947 CEST	8.8.8.8	192.168.2.22	0x35b2	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:17.386552095 CEST	8.8.8.8	192.168.2.22	0xee73	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:17.396827936 CEST	8.8.8.8	192.168.2.22	0x52ff	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:17.407354116 CEST	8.8.8.8	192.168.2.22	0xdc29	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:17.420391083 CEST	8.8.8.8	192.168.2.22	0x273b	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:17.431081057 CEST	8.8.8.8	192.168.2.22	0x236f	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:17.442240000 CEST	8.8.8.8	192.168.2.22	0x4248	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:17.452023983 CEST	8.8.8.8	192.168.2.22	0xd8f0	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:17.461704969 CEST	8.8.8.8	192.168.2.22	0xbccf	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:17.472297907 CEST	8.8.8.8	192.168.2.22	0x209	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:17.481976986 CEST	8.8.8.8	192.168.2.22	0xa47e	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:17.492856026 CEST	8.8.8.8	192.168.2.22	0x6d73	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:17.503531933 CEST	8.8.8.8	192.168.2.22	0x870	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:17.514168024 CEST	8.8.8.8	192.168.2.22	0x46c8	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:17.524262905 CEST	8.8.8.8	192.168.2.22	0x59f	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:17.537513971 CEST	8.8.8.8	192.168.2.22	0xe4cf	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:17.547786951 CEST	8.8.8.8	192.168.2.22	0x1e1c	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:17.558399916 CEST	8.8.8.8	192.168.2.22	0x5b87	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:17.568942070 CEST	8.8.8.8	192.168.2.22	0x3135	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:17.579428911 CEST	8.8.8.8	192.168.2.22	0x9b9a	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:17.589592934 CEST	8.8.8.8	192.168.2.22	0xf1c9	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:17.600969076 CEST	8.8.8.8	192.168.2.22	0x3388	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:17.612097025 CEST	8.8.8.8	192.168.2.22	0x168c	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:17.622863054 CEST	8.8.8.8	192.168.2.22	0xabc8	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:17.633857012 CEST	8.8.8.8	192.168.2.22	0x9e02	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:17.688361883 CEST	8.8.8.8	192.168.2.22	0xe134	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:17.698585987 CEST	8.8.8.8	192.168.2.22	0x611a	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:17.709359884 CEST	8.8.8.8	192.168.2.22	0x83de	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:17.719758987 CEST	8.8.8.8	192.168.2.22	0xee77	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:17.730571985 CEST	8.8.8.8	192.168.2.22	0x5f63	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:17.742157936 CEST	8.8.8.8	192.168.2.22	0xae81	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:17.754371881 CEST	8.8.8.8	192.168.2.22	0x50ae	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:17.766155005 CEST	8.8.8.8	192.168.2.22	0xa318	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:17.777872086 CEST	8.8.8.8	192.168.2.22	0x2194	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:17.788774014 CEST	8.8.8.8	192.168.2.22	0xcf2d	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:17.801480055 CEST	8.8.8.8	192.168.2.22	0x74e8	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:17.811789989 CEST	8.8.8.8	192.168.2.22	0xfc7a	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:17.824198008 CEST	8.8.8.8	192.168.2.22	0xb754	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:17.836190939 CEST	8.8.8.8	192.168.2.22	0xb7db	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:17.851500988 CEST	8.8.8.8	192.168.2.22	0x5eb2	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:17.862854958 CEST	8.8.8.8	192.168.2.22	0x759a	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:17.873910904 CEST	8.8.8.8	192.168.2.22	0xe8c2	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:17.885328054 CEST	8.8.8.8	192.168.2.22	0xc8b2	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:17.898041010 CEST	8.8.8.8	192.168.2.22	0xf976	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:17.922143936 CEST	8.8.8.8	192.168.2.22	0x7bf	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:17.940607071 CEST	8.8.8.8	192.168.2.22	0x20c0	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:17.952953100 CEST	8.8.8.8	192.168.2.22	0x4ded	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:17.964378119 CEST	8.8.8.8	192.168.2.22	0xa9d4	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:17.975068092 CEST	8.8.8.8	192.168.2.22	0x225	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:18.016530991 CEST	8.8.8.8	192.168.2.22	0x9	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:18.027478933 CEST	8.8.8.8	192.168.2.22	0x49d6	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:18.039391994 CEST	8.8.8.8	192.168.2.22	0xfc	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:18.049413919 CEST	8.8.8.8	192.168.2.22	0xe0b8	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:18.062083960 CEST	8.8.8.8	192.168.2.22	0xc749	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:18.072455883 CEST	8.8.8.8	192.168.2.22	0x6d29	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:18.083857059 CEST	8.8.8.8	192.168.2.22	0x9208	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:18.093998909 CEST	8.8.8.8	192.168.2.22	0x4e38	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:18.105309963 CEST	8.8.8.8	192.168.2.22	0xdd4d	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:18.116400003 CEST	8.8.8.8	192.168.2.22	0x1e4b	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:18.127842903 CEST	8.8.8.8	192.168.2.22	0x7dca	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:18.139652967 CEST	8.8.8.8	192.168.2.22	0x6768	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:18.151103973 CEST	8.8.8.8	192.168.2.22	0xa11d	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:18.193604946 CEST	8.8.8.8	192.168.2.22	0xc33e	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:18.215979099 CEST	8.8.8.8	192.168.2.22	0x3bad	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:18.244600058 CEST	8.8.8.8	192.168.2.22	0x5873	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:18.326286077 CEST	8.8.8.8	192.168.2.22	0xfc41	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:18.373271942 CEST	8.8.8.8	192.168.2.22	0xae4c	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:18.401936054 CEST	8.8.8.8	192.168.2.22	0xfe5e	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:18.487019062 CEST	8.8.8.8	192.168.2.22	0x39ea	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:18.616353035 CEST	8.8.8.8	192.168.2.22	0xeac7	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:18.632611990 CEST	8.8.8.8	192.168.2.22	0x586d	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:18.884673119 CEST	8.8.8.8	192.168.2.22	0xdfb6	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:19.114383936 CEST	8.8.8.8	192.168.2.22	0xdb6	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:19.266725063 CEST	8.8.8.8	192.168.2.22	0x29f6	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:19.473638058 CEST	8.8.8.8	192.168.2.22	0x3396	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:19.585973024 CEST	8.8.8.8	192.168.2.22	0xaf2c	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:19.650044918 CEST	8.8.8.8	192.168.2.22	0xdf2c	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:19.663094997 CEST	8.8.8.8	192.168.2.22	0xde22	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:19.675403118 CEST	8.8.8.8	192.168.2.22	0xa245	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:19.688056946 CEST	8.8.8.8	192.168.2.22	0x54f7	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:19.726869106 CEST	8.8.8.8	192.168.2.22	0xea8a	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:19.764780998 CEST	8.8.8.8	192.168.2.22	0xf645	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:19.778116941 CEST	8.8.8.8	192.168.2.22	0xb4e6	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:19.790774107 CEST	8.8.8.8	192.168.2.22	0xfcad	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:19.803136110 CEST	8.8.8.8	192.168.2.22	0x38ca	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:19.814876080 CEST	8.8.8.8	192.168.2.22	0x41df	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:19.827220917 CEST	8.8.8.8	192.168.2.22	0xc947	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:19.839678049 CEST	8.8.8.8	192.168.2.22	0x5769	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:19.851847887 CEST	8.8.8.8	192.168.2.22	0x6f76	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:19.864558935 CEST	8.8.8.8	192.168.2.22	0xef3	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:19.875010014 CEST	8.8.8.8	192.168.2.22	0xa68f	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:19.888720989 CEST	8.8.8.8	192.168.2.22	0x2bfe	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:19.900585890 CEST	8.8.8.8	192.168.2.22	0x729	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:19.917398930 CEST	8.8.8.8	192.168.2.22	0xe9c3	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:19.930464029 CEST	8.8.8.8	192.168.2.22	0x5dad	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:19.942213058 CEST	8.8.8.8	192.168.2.22	0x8c91	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:19.954761028 CEST	8.8.8.8	192.168.2.22	0x3a4f	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:19.967886925 CEST	8.8.8.8	192.168.2.22	0x3fb4	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:19.980262995 CEST	8.8.8.8	192.168.2.22	0xc19d	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:19.992000103 CEST	8.8.8.8	192.168.2.22	0xdac4	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:20.005294085 CEST	8.8.8.8	192.168.2.22	0x136f	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:20.018048048 CEST	8.8.8.8	192.168.2.22	0x5019	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:20.029076099 CEST	8.8.8.8	192.168.2.22	0x8451	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:20.120573997 CEST	8.8.8.8	192.168.2.22	0x6afa	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:20.134696960 CEST	8.8.8.8	192.168.2.22	0x1fec	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:20.147461891 CEST	8.8.8.8	192.168.2.22	0xf065	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:20.159379005 CEST	8.8.8.8	192.168.2.22	0x6148	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:20.172092915 CEST	8.8.8.8	192.168.2.22	0xd14c	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:20.184647083 CEST	8.8.8.8	192.168.2.22	0x647	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:20.195941925 CEST	8.8.8.8	192.168.2.22	0xe07a	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:20.207905054 CEST	8.8.8.8	192.168.2.22	0xcff9	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:20.221025944 CEST	8.8.8.8	192.168.2.22	0xdd46	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:20.232462883 CEST	8.8.8.8	192.168.2.22	0xa272	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:20.245351076 CEST	8.8.8.8	192.168.2.22	0xb91	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:20.257318974 CEST	8.8.8.8	192.168.2.22	0x6687	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:20.270040035 CEST	8.8.8.8	192.168.2.22	0x57a5	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:20.281054974 CEST	8.8.8.8	192.168.2.22	0x60de	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:20.295023918 CEST	8.8.8.8	192.168.2.22	0x7604	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:20.309552908 CEST	8.8.8.8	192.168.2.22	0x84f8	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:20.323940992 CEST	8.8.8.8	192.168.2.22	0x854f	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:20.337213039 CEST	8.8.8.8	192.168.2.22	0x37f1	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:20.365135908 CEST	8.8.8.8	192.168.2.22	0x91ac	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:20.428505898 CEST	8.8.8.8	192.168.2.22	0xfd7	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:20.443355083 CEST	8.8.8.8	192.168.2.22	0x7ac0	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:20.453600883 CEST	8.8.8.8	192.168.2.22	0xab09	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:20.465594053 CEST	8.8.8.8	192.168.2.22	0xccdb	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:20.478018999 CEST	8.8.8.8	192.168.2.22	0x196a	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:20.491238117 CEST	8.8.8.8	192.168.2.22	0xf69f	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:20.502629042 CEST	8.8.8.8	192.168.2.22	0x49c4	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:20.513782024 CEST	8.8.8.8	192.168.2.22	0x8a22	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:20.525513887 CEST	8.8.8.8	192.168.2.22	0x3741	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:20.536139965 CEST	8.8.8.8	192.168.2.22	0x3482	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:20.548223972 CEST	8.8.8.8	192.168.2.22	0x13eb	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:20.560408115 CEST	8.8.8.8	192.168.2.22	0xd3d4	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:20.573656082 CEST	8.8.8.8	192.168.2.22	0xce2f	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:20.584810019 CEST	8.8.8.8	192.168.2.22	0x73c3	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:20.596441984 CEST	8.8.8.8	192.168.2.22	0x7198	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:20.608999968 CEST	8.8.8.8	192.168.2.22	0x9cb6	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:20.619937897 CEST	8.8.8.8	192.168.2.22	0xd993	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:20.634161949 CEST	8.8.8.8	192.168.2.22	0xbab6	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:20.645410061 CEST	8.8.8.8	192.168.2.22	0xfabb	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:20.658348083 CEST	8.8.8.8	192.168.2.22	0x3903	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:20.670083046 CEST	8.8.8.8	192.168.2.22	0xa92e	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:20.682753086 CEST	8.8.8.8	192.168.2.22	0xb369	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:20.693269014 CEST	8.8.8.8	192.168.2.22	0x2afb	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:20.705024004 CEST	8.8.8.8	192.168.2.22	0xeca0	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:20.716353893 CEST	8.8.8.8	192.168.2.22	0xfa65	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:20.771186113 CEST	8.8.8.8	192.168.2.22	0x68d9	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:20.784610033 CEST	8.8.8.8	192.168.2.22	0x2128	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:20.795816898 CEST	8.8.8.8	192.168.2.22	0x1b4f	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:20.807786942 CEST	8.8.8.8	192.168.2.22	0x6be9	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:20.821567059 CEST	8.8.8.8	192.168.2.22	0x52e6	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:20.835005999 CEST	8.8.8.8	192.168.2.22	0x36e4	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:20.847431898 CEST	8.8.8.8	192.168.2.22	0xd237	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:20.858983040 CEST	8.8.8.8	192.168.2.22	0xeec5	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:20.870944023 CEST	8.8.8.8	192.168.2.22	0x2317	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:20.881391048 CEST	8.8.8.8	192.168.2.22	0x3208	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:20.894212961 CEST	8.8.8.8	192.168.2.22	0x2c9c	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:20.906472921 CEST	8.8.8.8	192.168.2.22	0x69e2	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:20.918828964 CEST	8.8.8.8	192.168.2.22	0xe121	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:20.931405067 CEST	8.8.8.8	192.168.2.22	0x506a	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:20.943516016 CEST	8.8.8.8	192.168.2.22	0xe975	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:20.954576015 CEST	8.8.8.8	192.168.2.22	0xd293	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:20.965157986 CEST	8.8.8.8	192.168.2.22	0x1469	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:20.977425098 CEST	8.8.8.8	192.168.2.22	0xae05	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:20.988063097 CEST	8.8.8.8	192.168.2.22	0xfb93	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:20.998939991 CEST	8.8.8.8	192.168.2.22	0x19c9	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:21.009524107 CEST	8.8.8.8	192.168.2.22	0x21b7	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:21.021342039 CEST	8.8.8.8	192.168.2.22	0x6de5	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:21.033179998 CEST	8.8.8.8	192.168.2.22	0x58cc	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:21.046556950 CEST	8.8.8.8	192.168.2.22	0x56a3	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:21.057699919 CEST	8.8.8.8	192.168.2.22	0x2a8d	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:21.080890894 CEST	8.8.8.8	192.168.2.22	0x65a7	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:21.159545898 CEST	8.8.8.8	192.168.2.22	0x6f2	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:21.170659065 CEST	8.8.8.8	192.168.2.22	0x6bd0	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:21.182251930 CEST	8.8.8.8	192.168.2.22	0x3cdd	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:21.192727089 CEST	8.8.8.8	192.168.2.22	0x3aa4	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:21.203401089 CEST	8.8.8.8	192.168.2.22	0x2be3	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:21.215250015 CEST	8.8.8.8	192.168.2.22	0x458e	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:21.227457047 CEST	8.8.8.8	192.168.2.22	0xbe58	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:21.238501072 CEST	8.8.8.8	192.168.2.22	0xd68	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:21.250015974 CEST	8.8.8.8	192.168.2.22	0xb91a	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:21.261362076 CEST	8.8.8.8	192.168.2.22	0x651b	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:21.273133993 CEST	8.8.8.8	192.168.2.22	0xcd5d	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:21.284027100 CEST	8.8.8.8	192.168.2.22	0x60f8	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:21.295140982 CEST	8.8.8.8	192.168.2.22	0x809c	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:21.305841923 CEST	8.8.8.8	192.168.2.22	0x33f	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:21.316848040 CEST	8.8.8.8	192.168.2.22	0xff7	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:21.327327967 CEST	8.8.8.8	192.168.2.22	0xd009	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:21.339452982 CEST	8.8.8.8	192.168.2.22	0x56ee	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:21.350560904 CEST	8.8.8.8	192.168.2.22	0xade3	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:21.362248898 CEST	8.8.8.8	192.168.2.22	0x4d4f	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:21.374701023 CEST	8.8.8.8	192.168.2.22	0x1c36	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:21.385593891 CEST	8.8.8.8	192.168.2.22	0x84ee	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:21.396584988 CEST	8.8.8.8	192.168.2.22	0x417c	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:21.407147884 CEST	8.8.8.8	192.168.2.22	0x26b1	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:21.433442116 CEST	8.8.8.8	192.168.2.22	0x519f	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:21.455040932 CEST	8.8.8.8	192.168.2.22	0x85bd	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:21.467458010 CEST	8.8.8.8	192.168.2.22	0x7cdc	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:21.478496075 CEST	8.8.8.8	192.168.2.22	0x573f	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:21.488775969 CEST	8.8.8.8	192.168.2.22	0x693e	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:21.499771118 CEST	8.8.8.8	192.168.2.22	0x61da	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:21.511709929 CEST	8.8.8.8	192.168.2.22	0xe06e	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:21.522898912 CEST	8.8.8.8	192.168.2.22	0xd001	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:21.534694910 CEST	8.8.8.8	192.168.2.22	0x6c3d	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:21.545898914 CEST	8.8.8.8	192.168.2.22	0xa3a8	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:21.557830095 CEST	8.8.8.8	192.168.2.22	0x9d62	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:21.568800926 CEST	8.8.8.8	192.168.2.22	0xe32a	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:21.579380035 CEST	8.8.8.8	192.168.2.22	0xd591	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:21.590804100 CEST	8.8.8.8	192.168.2.22	0x17b8	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:21.601191998 CEST	8.8.8.8	192.168.2.22	0x913a	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:21.611881018 CEST	8.8.8.8	192.168.2.22	0xa9de	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:21.623038054 CEST	8.8.8.8	192.168.2.22	0x6aaa	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:21.634332895 CEST	8.8.8.8	192.168.2.22	0x56db	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:21.645942926 CEST	8.8.8.8	192.168.2.22	0x2f3c	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:21.689198971 CEST	8.8.8.8	192.168.2.22	0x4b5a	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:21.709476948 CEST	8.8.8.8	192.168.2.22	0x26ee	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:21.732173920 CEST	8.8.8.8	192.168.2.22	0x9684	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:21.752685070 CEST	8.8.8.8	192.168.2.22	0x3262	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:21.813713074 CEST	8.8.8.8	192.168.2.22	0xe6d9	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:21.839807987 CEST	8.8.8.8	192.168.2.22	0x2b08	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:22.124783039 CEST	8.8.8.8	192.168.2.22	0x8bb7	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:22.363925934 CEST	8.8.8.8	192.168.2.22	0x8e15	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:22.713062048 CEST	8.8.8.8	192.168.2.22	0xf0fe	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:22.995218039 CEST	8.8.8.8	192.168.2.22	0x290e	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:23.483702898 CEST	8.8.8.8	192.168.2.22	0x7ea3	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:23.654642105 CEST	8.8.8.8	192.168.2.22	0xf1ab	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:23.667424917 CEST	8.8.8.8	192.168.2.22	0x8934	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:23.679832935 CEST	8.8.8.8	192.168.2.22	0xde2	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:23.693567991 CEST	8.8.8.8	192.168.2.22	0x130b	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:23.706993103 CEST	8.8.8.8	192.168.2.22	0x88df	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:23.719777107 CEST	8.8.8.8	192.168.2.22	0xb088	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:23.732377052 CEST	8.8.8.8	192.168.2.22	0x38c4	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:23.744764090 CEST	8.8.8.8	192.168.2.22	0x6329	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:23.759557009 CEST	8.8.8.8	192.168.2.22	0x6ca4	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:23.772789001 CEST	8.8.8.8	192.168.2.22	0xc641	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:23.786047935 CEST	8.8.8.8	192.168.2.22	0xa4fa	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:23.798227072 CEST	8.8.8.8	192.168.2.22	0x9736	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:23.810189962 CEST	8.8.8.8	192.168.2.22	0xc25a	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:23.823631048 CEST	8.8.8.8	192.168.2.22	0x8d37	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:23.839428902 CEST	8.8.8.8	192.168.2.22	0x8365	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:23.851527929 CEST	8.8.8.8	192.168.2.22	0x9372	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:23.864414930 CEST	8.8.8.8	192.168.2.22	0x74bb	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:23.879873037 CEST	8.8.8.8	192.168.2.22	0x58b1	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:23.921318054 CEST	8.8.8.8	192.168.2.22	0x8500	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:23.933377028 CEST	8.8.8.8	192.168.2.22	0x5447	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:23.946855068 CEST	8.8.8.8	192.168.2.22	0xcc9d	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:23.959276915 CEST	8.8.8.8	192.168.2.22	0xa4cc	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:23.973231077 CEST	8.8.8.8	192.168.2.22	0x720e	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:23.985822916 CEST	8.8.8.8	192.168.2.22	0x33e3	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:23.997859955 CEST	8.8.8.8	192.168.2.22	0xa6e	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:24.009298086 CEST	8.8.8.8	192.168.2.22	0x2782	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:24.022772074 CEST	8.8.8.8	192.168.2.22	0x98b2	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:24.036051035 CEST	8.8.8.8	192.168.2.22	0xd245	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:24.047528982 CEST	8.8.8.8	192.168.2.22	0x3aed	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:24.059665918 CEST	8.8.8.8	192.168.2.22	0x1bf4	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:24.070306063 CEST	8.8.8.8	192.168.2.22	0xa4d3	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:24.082113981 CEST	8.8.8.8	192.168.2.22	0x2b5e	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:24.092530012 CEST	8.8.8.8	192.168.2.22	0xd092	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:24.103558064 CEST	8.8.8.8	192.168.2.22	0xb2a1	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:24.115945101 CEST	8.8.8.8	192.168.2.22	0xcaf0	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:24.129390001 CEST	8.8.8.8	192.168.2.22	0xeb61	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:24.425599098 CEST	8.8.8.8	192.168.2.22	0xb1c8	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:24.521691084 CEST	8.8.8.8	192.168.2.22	0x4e17	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:24.671194077 CEST	8.8.8.8	192.168.2.22	0x12bb	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:24.683136940 CEST	8.8.8.8	192.168.2.22	0xc27c	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:24.696043015 CEST	8.8.8.8	192.168.2.22	0xb320	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:24.707972050 CEST	8.8.8.8	192.168.2.22	0xc95b	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:24.719197989 CEST	8.8.8.8	192.168.2.22	0x2dd3	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:24.730468988 CEST	8.8.8.8	192.168.2.22	0x88cb	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:24.741291046 CEST	8.8.8.8	192.168.2.22	0x9053	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:24.754138947 CEST	8.8.8.8	192.168.2.22	0x7fe	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:24.765408039 CEST	8.8.8.8	192.168.2.22	0x2e32	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:24.776446104 CEST	8.8.8.8	192.168.2.22	0xf9c1	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:24.793381929 CEST	8.8.8.8	192.168.2.22	0x8b98	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:24.807764053 CEST	8.8.8.8	192.168.2.22	0x7c8e	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:24.820421934 CEST	8.8.8.8	192.168.2.22	0x7f60	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:24.834232092 CEST	8.8.8.8	192.168.2.22	0x213f	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:24.844831944 CEST	8.8.8.8	192.168.2.22	0xbd41	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:24.856642008 CEST	8.8.8.8	192.168.2.22	0x8864	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:24.867805004 CEST	8.8.8.8	192.168.2.22	0x12a2	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:24.879435062 CEST	8.8.8.8	192.168.2.22	0x6805	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:24.889621019 CEST	8.8.8.8	192.168.2.22	0x7238	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:24.943288088 CEST	8.8.8.8	192.168.2.22	0x200	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:24.979212999 CEST	8.8.8.8	192.168.2.22	0xf155	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:25.014996052 CEST	8.8.8.8	192.168.2.22	0x8697	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:25.074655056 CEST	8.8.8.8	192.168.2.22	0x9c1b	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:25.085777998 CEST	8.8.8.8	192.168.2.22	0xf80f	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:25.098347902 CEST	8.8.8.8	192.168.2.22	0xcb81	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:25.108758926 CEST	8.8.8.8	192.168.2.22	0x4592	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:25.120196104 CEST	8.8.8.8	192.168.2.22	0xe1f0	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:25.131959915 CEST	8.8.8.8	192.168.2.22	0xfb7d	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:25.143059969 CEST	8.8.8.8	192.168.2.22	0xe427	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:25.154748917 CEST	8.8.8.8	192.168.2.22	0x197c	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:25.168494940 CEST	8.8.8.8	192.168.2.22	0x8454	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:26.466552973 CEST	8.8.8.8	192.168.2.22	0xfabe	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:26.475008965 CEST	8.8.8.8	192.168.2.22	0xfabe	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:26.530237913 CEST	8.8.8.8	192.168.2.22	0x8397	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:26.818578959 CEST	8.8.8.8	192.168.2.22	0x667f	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:26.837929010 CEST	8.8.8.8	192.168.2.22	0x8734	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:27.399364948 CEST	8.8.8.8	192.168.2.22	0x1f17	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:27.452140093 CEST	8.8.8.8	192.168.2.22	0x7dfb	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:27.468796015 CEST	8.8.8.8	192.168.2.22	0x918f	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:27.479608059 CEST	8.8.8.8	192.168.2.22	0x78f9	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:27.492082119 CEST	8.8.8.8	192.168.2.22	0x620e	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:27.530643940 CEST	8.8.8.8	192.168.2.22	0x1e69	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:27.542316914 CEST	8.8.8.8	192.168.2.22	0x3c0b	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:27.553967953 CEST	8.8.8.8	192.168.2.22	0x8483	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:27.566828966 CEST	8.8.8.8	192.168.2.22	0x319c	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:27.604979992 CEST	8.8.8.8	192.168.2.22	0x7a9b	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:27.616513014 CEST	8.8.8.8	192.168.2.22	0xadc6	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:27.626770973 CEST	8.8.8.8	192.168.2.22	0x2e0	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:27.638788939 CEST	8.8.8.8	192.168.2.22	0x3e0e	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:27.649938107 CEST	8.8.8.8	192.168.2.22	0xc160	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:27.661379099 CEST	8.8.8.8	192.168.2.22	0xd34a	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:27.672622919 CEST	8.8.8.8	192.168.2.22	0x58d6	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:27.685173988 CEST	8.8.8.8	192.168.2.22	0x9b25	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:27.696893930 CEST	8.8.8.8	192.168.2.22	0xcad4	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:27.707376957 CEST	8.8.8.8	192.168.2.22	0x4c25	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:27.718147993 CEST	8.8.8.8	192.168.2.22	0xfd50	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:27.748476028 CEST	8.8.8.8	192.168.2.22	0xd15b	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:27.781335115 CEST	8.8.8.8	192.168.2.22	0xb569	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:27.792910099 CEST	8.8.8.8	192.168.2.22	0xc906	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:27.802934885 CEST	8.8.8.8	192.168.2.22	0x3e36	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:27.813776970 CEST	8.8.8.8	192.168.2.22	0xe46	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:27.826519012 CEST	8.8.8.8	192.168.2.22	0xd18f	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:27.841032028 CEST	8.8.8.8	192.168.2.22	0x6583	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:27.854489088 CEST	8.8.8.8	192.168.2.22	0x4137	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:27.865680933 CEST	8.8.8.8	192.168.2.22	0xe54d	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:27.875957966 CEST	8.8.8.8	192.168.2.22	0xfaac	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:27.886995077 CEST	8.8.8.8	192.168.2.22	0xfa1a	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:27.898379087 CEST	8.8.8.8	192.168.2.22	0x6ff0	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:27.909828901 CEST	8.8.8.8	192.168.2.22	0xda69	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:27.921489000 CEST	8.8.8.8	192.168.2.22	0xd6f0	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:27.932015896 CEST	8.8.8.8	192.168.2.22	0xd897	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:27.943330050 CEST	8.8.8.8	192.168.2.22	0x9606	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:27.953979969 CEST	8.8.8.8	192.168.2.22	0x8e5b	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:27.967015982 CEST	8.8.8.8	192.168.2.22	0x384d	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:27.979007959 CEST	8.8.8.8	192.168.2.22	0x2bf3	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:27.989317894 CEST	8.8.8.8	192.168.2.22	0x7779	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:28.002420902 CEST	8.8.8.8	192.168.2.22	0x265e	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:28.014841080 CEST	8.8.8.8	192.168.2.22	0x2a82	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:28.028161049 CEST	8.8.8.8	192.168.2.22	0xc190	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:28.038467884 CEST	8.8.8.8	192.168.2.22	0x3492	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:28.050653934 CEST	8.8.8.8	192.168.2.22	0xc9ef	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:28.061531067 CEST	8.8.8.8	192.168.2.22	0x347e	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:28.094150066 CEST	8.8.8.8	192.168.2.22	0x1816	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:28.116832972 CEST	8.8.8.8	192.168.2.22	0x47bf	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:28.129235029 CEST	8.8.8.8	192.168.2.22	0x21fe	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:28.139472008 CEST	8.8.8.8	192.168.2.22	0xd460	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:28.151153088 CEST	8.8.8.8	192.168.2.22	0x405e	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:28.161273003 CEST	8.8.8.8	192.168.2.22	0xccc7	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:28.171607971 CEST	8.8.8.8	192.168.2.22	0x93f3	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:28.182986975 CEST	8.8.8.8	192.168.2.22	0x8d58	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:28.197086096 CEST	8.8.8.8	192.168.2.22	0xf769	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:28.206923962 CEST	8.8.8.8	192.168.2.22	0x61cd	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:28.219531059 CEST	8.8.8.8	192.168.2.22	0x21e0	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:28.231683969 CEST	8.8.8.8	192.168.2.22	0x302b	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:28.243628979 CEST	8.8.8.8	192.168.2.22	0x77b3	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:28.253933907 CEST	8.8.8.8	192.168.2.22	0xe6ee	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:28.264995098 CEST	8.8.8.8	192.168.2.22	0xb63	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:28.275624037 CEST	8.8.8.8	192.168.2.22	0x3009	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:28.286434889 CEST	8.8.8.8	192.168.2.22	0x39c	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:28.298077106 CEST	8.8.8.8	192.168.2.22	0x1916	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:28.309462070 CEST	8.8.8.8	192.168.2.22	0xeb1a	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:28.319530010 CEST	8.8.8.8	192.168.2.22	0xee7a	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:28.329849005 CEST	8.8.8.8	192.168.2.22	0x8b73	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:28.344760895 CEST	8.8.8.8	192.168.2.22	0x1005	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:28.356256008 CEST	8.8.8.8	192.168.2.22	0xa27a	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:28.370584011 CEST	8.8.8.8	192.168.2.22	0xbb0b	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:28.384929895 CEST	8.8.8.8	192.168.2.22	0x6381	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:28.398334026 CEST	8.8.8.8	192.168.2.22	0x37b4	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:28.409271955 CEST	8.8.8.8	192.168.2.22	0x65c5	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:28.467381954 CEST	8.8.8.8	192.168.2.22	0xa93c	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:28.478158951 CEST	8.8.8.8	192.168.2.22	0xf69c	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:28.491369009 CEST	8.8.8.8	192.168.2.22	0x358	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:28.502917051 CEST	8.8.8.8	192.168.2.22	0x8a56	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:28.512913942 CEST	8.8.8.8	192.168.2.22	0xad29	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:28.523978949 CEST	8.8.8.8	192.168.2.22	0x3774	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:28.562582970 CEST	8.8.8.8	192.168.2.22	0xc487	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:28.575095892 CEST	8.8.8.8	192.168.2.22	0x2467	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:28.586908102 CEST	8.8.8.8	192.168.2.22	0x9fd	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:28.598170042 CEST	8.8.8.8	192.168.2.22	0x8f23	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:28.609997988 CEST	8.8.8.8	192.168.2.22	0x6d09	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:28.621969938 CEST	8.8.8.8	192.168.2.22	0x88a9	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:28.632541895 CEST	8.8.8.8	192.168.2.22	0xf2ab	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:28.644053936 CEST	8.8.8.8	192.168.2.22	0x8e9f	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:28.654247046 CEST	8.8.8.8	192.168.2.22	0x53ae	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:28.664733887 CEST	8.8.8.8	192.168.2.22	0x9dea	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:28.675544977 CEST	8.8.8.8	192.168.2.22	0x5c73	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:28.686501026 CEST	8.8.8.8	192.168.2.22	0xdbe5	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:28.696935892 CEST	8.8.8.8	192.168.2.22	0x8508	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:28.708615065 CEST	8.8.8.8	192.168.2.22	0x289b	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:28.719120026 CEST	8.8.8.8	192.168.2.22	0xb0cd	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:28.730335951 CEST	8.8.8.8	192.168.2.22	0xa95f	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:28.741813898 CEST	8.8.8.8	192.168.2.22	0x1a53	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:28.755738020 CEST	8.8.8.8	192.168.2.22	0xec79	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:28.850136995 CEST	8.8.8.8	192.168.2.22	0xa39	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:28.900641918 CEST	8.8.8.8	192.168.2.22	0x8bc0	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:28.933140039 CEST	8.8.8.8	192.168.2.22	0x9c35	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:29.052902937 CEST	8.8.8.8	192.168.2.22	0x2052	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:29.121148109 CEST	8.8.8.8	192.168.2.22	0x4e65	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:29.320168018 CEST	8.8.8.8	192.168.2.22	0xbb8d	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:29.408858061 CEST	8.8.8.8	192.168.2.22	0x1a0b	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:29.629779100 CEST	8.8.8.8	192.168.2.22	0x1be5	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:31.097971916 CEST	8.8.8.8	192.168.2.22	0x5435	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:31.255410910 CEST	8.8.8.8	192.168.2.22	0xe027	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:31.401137114 CEST	8.8.8.8	192.168.2.22	0x70e8	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:31.457659006 CEST	8.8.8.8	192.168.2.22	0x7750	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:31.491205931 CEST	8.8.8.8	192.168.2.22	0x720c	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:31.505260944 CEST	8.8.8.8	192.168.2.22	0xd234	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:31.521766901 CEST	8.8.8.8	192.168.2.22	0xaefe	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:31.535959959 CEST	8.8.8.8	192.168.2.22	0x2253	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:31.550703049 CEST	8.8.8.8	192.168.2.22	0x65d3	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:31.565069914 CEST	8.8.8.8	192.168.2.22	0x50b1	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:31.577327967 CEST	8.8.8.8	192.168.2.22	0xe4d0	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:31.592612982 CEST	8.8.8.8	192.168.2.22	0x34d3	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:31.605727911 CEST	8.8.8.8	192.168.2.22	0x7900	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:31.621542931 CEST	8.8.8.8	192.168.2.22	0xa86a	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:31.637645960 CEST	8.8.8.8	192.168.2.22	0xb0a8	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:31.655658007 CEST	8.8.8.8	192.168.2.22	0xa967	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:31.752373934 CEST	8.8.8.8	192.168.2.22	0x4673	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:31.764215946 CEST	8.8.8.8	192.168.2.22	0xed99	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:31.775419950 CEST	8.8.8.8	192.168.2.22	0x9cea	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:31.788369894 CEST	8.8.8.8	192.168.2.22	0x776e	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:31.800545931 CEST	8.8.8.8	192.168.2.22	0xfd20	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:31.813095093 CEST	8.8.8.8	192.168.2.22	0xb3d3	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:31.825702906 CEST	8.8.8.8	192.168.2.22	0xebcb	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:31.839415073 CEST	8.8.8.8	192.168.2.22	0xc3e9	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:31.853094101 CEST	8.8.8.8	192.168.2.22	0xc5bb	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:31.866485119 CEST	8.8.8.8	192.168.2.22	0x5e1f	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:31.879271984 CEST	8.8.8.8	192.168.2.22	0xed87	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:31.893980026 CEST	8.8.8.8	192.168.2.22	0x87a1	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:31.905572891 CEST	8.8.8.8	192.168.2.22	0x2913	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:31.918859005 CEST	8.8.8.8	192.168.2.22	0x8ce0	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:31.930135012 CEST	8.8.8.8	192.168.2.22	0xd4dc	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:31.946235895 CEST	8.8.8.8	192.168.2.22	0xec2c	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:31.958205938 CEST	8.8.8.8	192.168.2.22	0xe2c7	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:31.971465111 CEST	8.8.8.8	192.168.2.22	0xed39	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:31.984030962 CEST	8.8.8.8	192.168.2.22	0x7d79	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:31.995280981 CEST	8.8.8.8	192.168.2.22	0xc096	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:32.010760069 CEST	8.8.8.8	192.168.2.22	0x473b	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:32.056205988 CEST	8.8.8.8	192.168.2.22	0xe722	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:32.070099115 CEST	8.8.8.8	192.168.2.22	0xec9c	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:32.083267927 CEST	8.8.8.8	192.168.2.22	0x23ad	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:32.095520020 CEST	8.8.8.8	192.168.2.22	0x6590	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:32.109363079 CEST	8.8.8.8	192.168.2.22	0xb871	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:32.123090029 CEST	8.8.8.8	192.168.2.22	0xd49a	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:32.134808064 CEST	8.8.8.8	192.168.2.22	0xe122	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:32.147490978 CEST	8.8.8.8	192.168.2.22	0xce8	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:32.161040068 CEST	8.8.8.8	192.168.2.22	0x4239	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:32.176343918 CEST	8.8.8.8	192.168.2.22	0x2618	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:32.188880920 CEST	8.8.8.8	192.168.2.22	0xf3c9	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:32.205324888 CEST	8.8.8.8	192.168.2.22	0xa5fb	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:32.218070030 CEST	8.8.8.8	192.168.2.22	0xf4f9	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:32.230635881 CEST	8.8.8.8	192.168.2.22	0x33bb	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:32.243438005 CEST	8.8.8.8	192.168.2.22	0x45b9	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:32.254544020 CEST	8.8.8.8	192.168.2.22	0xd041	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:32.267199039 CEST	8.8.8.8	192.168.2.22	0xd022	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:32.278687000 CEST	8.8.8.8	192.168.2.22	0x6cb4	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:32.292707920 CEST	8.8.8.8	192.168.2.22	0x4ace	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:32.304276943 CEST	8.8.8.8	192.168.2.22	0x1eab	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:32.316565990 CEST	8.8.8.8	192.168.2.22	0xb230	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:32.328100920 CEST	8.8.8.8	192.168.2.22	0x2ce8	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:32.341047049 CEST	8.8.8.8	192.168.2.22	0xbc40	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:32.416990995 CEST	8.8.8.8	192.168.2.22	0x6ec9	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:32.428268909 CEST	8.8.8.8	192.168.2.22	0xde55	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:32.475683928 CEST	8.8.8.8	192.168.2.22	0x6878	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:32.500569105 CEST	8.8.8.8	192.168.2.22	0xd179	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:32.572139978 CEST	8.8.8.8	192.168.2.22	0x5c88	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:32.638464928 CEST	8.8.8.8	192.168.2.22	0xa1ee	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:32.990533113 CEST	8.8.8.8	192.168.2.22	0xf697	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:33.236121893 CEST	8.8.8.8	192.168.2.22	0xc8da	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:33.262804985 CEST	8.8.8.8	192.168.2.22	0x853d	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:33.276305914 CEST	8.8.8.8	192.168.2.22	0x1707	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:33.291469097 CEST	8.8.8.8	192.168.2.22	0xee0	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:33.310828924 CEST	8.8.8.8	192.168.2.22	0x458e	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:33.360729933 CEST	8.8.8.8	192.168.2.22	0xd67e	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:33.431694984 CEST	8.8.8.8	192.168.2.22	0x6429	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:33.459533930 CEST	8.8.8.8	192.168.2.22	0xe144	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:33.500089884 CEST	8.8.8.8	192.168.2.22	0x66b5	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:33.826793909 CEST	8.8.8.8	192.168.2.22	0xb0aa	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:35.074522972 CEST	8.8.8.8	192.168.2.22	0xc274	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:35.345877886 CEST	8.8.8.8	192.168.2.22	0x59cd	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:35.363413095 CEST	8.8.8.8	192.168.2.22	0x65db	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:35.375545025 CEST	8.8.8.8	192.168.2.22	0x4386	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:35.388454914 CEST	8.8.8.8	192.168.2.22	0xa9fc	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:35.400229931 CEST	8.8.8.8	192.168.2.22	0x864b	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:35.414266109 CEST	8.8.8.8	192.168.2.22	0xa249	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:35.425806046 CEST	8.8.8.8	192.168.2.22	0x5bc3	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:35.456743956 CEST	8.8.8.8	192.168.2.22	0xf01c	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:35.490451097 CEST	8.8.8.8	192.168.2.22	0x3af2	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:35.503854990 CEST	8.8.8.8	192.168.2.22	0xc21d	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:35.518048048 CEST	8.8.8.8	192.168.2.22	0xe83f	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:35.530667067 CEST	8.8.8.8	192.168.2.22	0x83d2	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:35.542397022 CEST	8.8.8.8	192.168.2.22	0x382b	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:35.554783106 CEST	8.8.8.8	192.168.2.22	0x84e0	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:35.567430019 CEST	8.8.8.8	192.168.2.22	0xa13	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:35.581016064 CEST	8.8.8.8	192.168.2.22	0xc64c	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:35.592955112 CEST	8.8.8.8	192.168.2.22	0x5cf	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:35.605748892 CEST	8.8.8.8	192.168.2.22	0x8854	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:35.618367910 CEST	8.8.8.8	192.168.2.22	0x6f0a	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:35.631089926 CEST	8.8.8.8	192.168.2.22	0xaeef	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:35.643271923 CEST	8.8.8.8	192.168.2.22	0xa64e	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:35.655495882 CEST	8.8.8.8	192.168.2.22	0xcba6	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:35.668159008 CEST	8.8.8.8	192.168.2.22	0xfd4f	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:35.680269003 CEST	8.8.8.8	192.168.2.22	0x5305	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:35.691873074 CEST	8.8.8.8	192.168.2.22	0x4d13	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:35.712625980 CEST	8.8.8.8	192.168.2.22	0x760	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:35.724494934 CEST	8.8.8.8	192.168.2.22	0xe79d	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:35.737469912 CEST	8.8.8.8	192.168.2.22	0xf08b	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:35.752137899 CEST	8.8.8.8	192.168.2.22	0x7e80	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:35.765499115 CEST	8.8.8.8	192.168.2.22	0xdd2f	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:35.777650118 CEST	8.8.8.8	192.168.2.22	0xb795	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:35.832171917 CEST	8.8.8.8	192.168.2.22	0xae4d	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:35.847074986 CEST	8.8.8.8	192.168.2.22	0xe1ca	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:35.867760897 CEST	8.8.8.8	192.168.2.22	0x1efd	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:35.884412050 CEST	8.8.8.8	192.168.2.22	0xc24c	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:35.897099018 CEST	8.8.8.8	192.168.2.22	0xc717	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:36.149168968 CEST	8.8.8.8	192.168.2.22	0xd732	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:36.184585094 CEST	8.8.8.8	192.168.2.22	0xe7d7	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:36.239723921 CEST	8.8.8.8	192.168.2.22	0xd9b1	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:36.256233931 CEST	8.8.8.8	192.168.2.22	0x3769	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:36.296278000 CEST	8.8.8.8	192.168.2.22	0xe99d	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:36.321294069 CEST	8.8.8.8	192.168.2.22	0xa966	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:36.376863003 CEST	8.8.8.8	192.168.2.22	0x69e9	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:36.388089895 CEST	8.8.8.8	192.168.2.22	0x3106	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:36.560733080 CEST	8.8.8.8	192.168.2.22	0xed88	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:36.573590994 CEST	8.8.8.8	192.168.2.22	0xa57a	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:36.584989071 CEST	8.8.8.8	192.168.2.22	0xd5e7	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:36.598402023 CEST	8.8.8.8	192.168.2.22	0x94aa	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:36.608957052 CEST	8.8.8.8	192.168.2.22	0x344d	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:36.621970892 CEST	8.8.8.8	192.168.2.22	0xd956	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:36.633268118 CEST	8.8.8.8	192.168.2.22	0xb317	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:36.660963058 CEST	8.8.8.8	192.168.2.22	0x8e7d	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:36.675730944 CEST	8.8.8.8	192.168.2.22	0xdaa3	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:36.687290907 CEST	8.8.8.8	192.168.2.22	0x6203	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:36.697369099 CEST	8.8.8.8	192.168.2.22	0x1ff4	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:36.710079908 CEST	8.8.8.8	192.168.2.22	0x43ce	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:36.720433950 CEST	8.8.8.8	192.168.2.22	0x1dfb	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:36.731693983 CEST	8.8.8.8	192.168.2.22	0x23b6	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:36.741204977 CEST	8.8.8.8	192.168.2.22	0x7557	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:36.751723051 CEST	8.8.8.8	192.168.2.22	0x7229	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:36.762283087 CEST	8.8.8.8	192.168.2.22	0x9447	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:36.837222099 CEST	8.8.8.8	192.168.2.22	0x29d	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:36.945461035 CEST	8.8.8.8	192.168.2.22	0x1249	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:36.963166952 CEST	8.8.8.8	192.168.2.22	0xc435	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:36.978682995 CEST	8.8.8.8	192.168.2.22	0xff5f	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:36.997724056 CEST	8.8.8.8	192.168.2.22	0x436	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:37.009525061 CEST	8.8.8.8	192.168.2.22	0x61fb	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:37.026179075 CEST	8.8.8.8	192.168.2.22	0x5104	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:37.041975021 CEST	8.8.8.8	192.168.2.22	0x6090	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:37.089041948 CEST	8.8.8.8	192.168.2.22	0x513f	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:37.101052999 CEST	8.8.8.8	192.168.2.22	0xdc3b	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:37.455219030 CEST	8.8.8.8	192.168.2.22	0xce4	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:37.944128990 CEST	8.8.8.8	192.168.2.22	0x7015	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:38.092842102 CEST	8.8.8.8	192.168.2.22	0x3fbf	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:38.183209896 CEST	8.8.8.8	192.168.2.22	0xb266	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:38.297885895 CEST	8.8.8.8	192.168.2.22	0x51f6	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:38.349895954 CEST	8.8.8.8	192.168.2.22	0x811f	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:38.363893986 CEST	8.8.8.8	192.168.2.22	0x6685	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:38.377429008 CEST	8.8.8.8	192.168.2.22	0xc7e8	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:38.390639067 CEST	8.8.8.8	192.168.2.22	0x97bf	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:38.403831959 CEST	8.8.8.8	192.168.2.22	0xeb67	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:38.420799971 CEST	8.8.8.8	192.168.2.22	0xb68a	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:38.433126926 CEST	8.8.8.8	192.168.2.22	0x3fe7	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:38.446049929 CEST	8.8.8.8	192.168.2.22	0x1470	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:38.458003998 CEST	8.8.8.8	192.168.2.22	0x5e35	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:38.471076965 CEST	8.8.8.8	192.168.2.22	0xfe01	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:38.486459970 CEST	8.8.8.8	192.168.2.22	0x3e9a	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:38.500353098 CEST	8.8.8.8	192.168.2.22	0xa25b	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:38.513212919 CEST	8.8.8.8	192.168.2.22	0xfae0	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:38.525517941 CEST	8.8.8.8	192.168.2.22	0x3156	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:38.538038015 CEST	8.8.8.8	192.168.2.22	0x456f	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:38.590622902 CEST	8.8.8.8	192.168.2.22	0x6f0f	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:38.615510941 CEST	8.8.8.8	192.168.2.22	0x8a91	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:38.927337885 CEST	8.8.8.8	192.168.2.22	0x82d9	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:38.976155996 CEST	8.8.8.8	192.168.2.22	0x1aeb	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:39.026206017 CEST	8.8.8.8	192.168.2.22	0x855d	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:39.038393974 CEST	8.8.8.8	192.168.2.22	0x89f4	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:39.050091982 CEST	8.8.8.8	192.168.2.22	0xa701	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:39.072793007 CEST	8.8.8.8	192.168.2.22	0xe30f	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:39.084616899 CEST	8.8.8.8	192.168.2.22	0xd373	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:39.096453905 CEST	8.8.8.8	192.168.2.22	0x14d5	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:39.108628035 CEST	8.8.8.8	192.168.2.22	0xf9da	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:39.121006012 CEST	8.8.8.8	192.168.2.22	0xa2de	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:39.134421110 CEST	8.8.8.8	192.168.2.22	0x544c	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:39.146459103 CEST	8.8.8.8	192.168.2.22	0x1d92	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:39.940298080 CEST	8.8.8.8	192.168.2.22	0xe7e4	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:39.977425098 CEST	8.8.8.8	192.168.2.22	0x4b89	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:40.002465963 CEST	8.8.8.8	192.168.2.22	0x2c74	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:40.033302069 CEST	8.8.8.8	192.168.2.22	0xb1cc	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:40.046314955 CEST	8.8.8.8	192.168.2.22	0xde46	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:40.057240009 CEST	8.8.8.8	192.168.2.22	0xea02	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:40.069684029 CEST	8.8.8.8	192.168.2.22	0x1f75	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:40.079987049 CEST	8.8.8.8	192.168.2.22	0x5c6c	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:40.090739965 CEST	8.8.8.8	192.168.2.22	0x922d	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:40.102294922 CEST	8.8.8.8	192.168.2.22	0xcaa9	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:40.114892960 CEST	8.8.8.8	192.168.2.22	0x859e	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:40.133393049 CEST	8.8.8.8	192.168.2.22	0x724b	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:40.144376993 CEST	8.8.8.8	192.168.2.22	0x504e	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:40.157449007 CEST	8.8.8.8	192.168.2.22	0x9b53	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:40.169908047 CEST	8.8.8.8	192.168.2.22	0xfa49	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:40.182493925 CEST	8.8.8.8	192.168.2.22	0x5545	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:40.194753885 CEST	8.8.8.8	192.168.2.22	0x93cf	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:40.206497908 CEST	8.8.8.8	192.168.2.22	0x760d	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:40.217433929 CEST	8.8.8.8	192.168.2.22	0x2544	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:40.228724003 CEST	8.8.8.8	192.168.2.22	0x888e	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:40.240243912 CEST	8.8.8.8	192.168.2.22	0x432f	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:40.255989075 CEST	8.8.8.8	192.168.2.22	0xba68	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:40.294014931 CEST	8.8.8.8	192.168.2.22	0x42bd	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:40.306137085 CEST	8.8.8.8	192.168.2.22	0xa3b6	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:40.321625948 CEST	8.8.8.8	192.168.2.22	0x7a25	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:40.333101988 CEST	8.8.8.8	192.168.2.22	0xc2ea	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:40.378357887 CEST	8.8.8.8	192.168.2.22	0xd3e	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:40.416635990 CEST	8.8.8.8	192.168.2.22	0xf89e	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:40.440104961 CEST	8.8.8.8	192.168.2.22	0xef2b	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:40.466403008 CEST	8.8.8.8	192.168.2.22	0x6259	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:40.483086109 CEST	8.8.8.8	192.168.2.22	0x4d8d	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:43.092928886 CEST	8.8.8.8	192.168.2.22	0x6d98	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:43.115545988 CEST	8.8.8.8	192.168.2.22	0x9daa	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:43.128700018 CEST	8.8.8.8	192.168.2.22	0x2787	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:43.143523932 CEST	8.8.8.8	192.168.2.22	0x3fe	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:43.158529997 CEST	8.8.8.8	192.168.2.22	0x7180	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:43.188004017 CEST	8.8.8.8	192.168.2.22	0x6a0a	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:43.230597019 CEST	8.8.8.8	192.168.2.22	0x5b34	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:43.247675896 CEST	8.8.8.8	192.168.2.22	0x3ac2	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:43.264262915 CEST	8.8.8.8	192.168.2.22	0xc3df	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:43.282198906 CEST	8.8.8.8	192.168.2.22	0x4258	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:43.294656038 CEST	8.8.8.8	192.168.2.22	0x7416	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:43.307585955 CEST	8.8.8.8	192.168.2.22	0x4a5b	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:43.319591999 CEST	8.8.8.8	192.168.2.22	0xf219	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:43.331799984 CEST	8.8.8.8	192.168.2.22	0x1049	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:43.342669964 CEST	8.8.8.8	192.168.2.22	0x917d	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:43.354507923 CEST	8.8.8.8	192.168.2.22	0xf05a	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:43.366969109 CEST	8.8.8.8	192.168.2.22	0xcd2c	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:43.380594015 CEST	8.8.8.8	192.168.2.22	0x4edb	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:43.392206907 CEST	8.8.8.8	192.168.2.22	0x4c7d	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:43.405050039 CEST	8.8.8.8	192.168.2.22	0x6e7	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:43.417330980 CEST	8.8.8.8	192.168.2.22	0xee24	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:43.428756952 CEST	8.8.8.8	192.168.2.22	0x5a64	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:43.442689896 CEST	8.8.8.8	192.168.2.22	0x38a1	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:43.457129002 CEST	8.8.8.8	192.168.2.22	0xaf56	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:43.470170975 CEST	8.8.8.8	192.168.2.22	0xcc7	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:43.569606066 CEST	8.8.8.8	192.168.2.22	0xca13	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:43.583481073 CEST	8.8.8.8	192.168.2.22	0x4074	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:43.596054077 CEST	8.8.8.8	192.168.2.22	0xc09a	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:43.609302998 CEST	8.8.8.8	192.168.2.22	0x879f	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:43.622304916 CEST	8.8.8.8	192.168.2.22	0x806	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:43.634895086 CEST	8.8.8.8	192.168.2.22	0xbfec	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:43.649843931 CEST	8.8.8.8	192.168.2.22	0x44cf	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:43.663908958 CEST	8.8.8.8	192.168.2.22	0xca7a	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:43.677752018 CEST	8.8.8.8	192.168.2.22	0xaaf8	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:43.689496040 CEST	8.8.8.8	192.168.2.22	0xf087	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:43.702171087 CEST	8.8.8.8	192.168.2.22	0xf67d	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:43.714134932 CEST	8.8.8.8	192.168.2.22	0xf168	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:43.727201939 CEST	8.8.8.8	192.168.2.22	0xccb	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:43.739824057 CEST	8.8.8.8	192.168.2.22	0x4ab6	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:43.753061056 CEST	8.8.8.8	192.168.2.22	0xff55	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:43.765218973 CEST	8.8.8.8	192.168.2.22	0xfdd3	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:43.778023958 CEST	8.8.8.8	192.168.2.22	0xf463	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:43.789957047 CEST	8.8.8.8	192.168.2.22	0xf3d6	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:43.803726912 CEST	8.8.8.8	192.168.2.22	0xeb39	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:43.814044952 CEST	8.8.8.8	192.168.2.22	0x44a9	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:43.827158928 CEST	8.8.8.8	192.168.2.22	0x1d98	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:43.838707924 CEST	8.8.8.8	192.168.2.22	0x12fd	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:43.850264072 CEST	8.8.8.8	192.168.2.22	0x754b	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:43.879548073 CEST	8.8.8.8	192.168.2.22	0x20d2	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:43.916909933 CEST	8.8.8.8	192.168.2.22	0xbc9e	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:43.929441929 CEST	8.8.8.8	192.168.2.22	0x190	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:43.942553997 CEST	8.8.8.8	192.168.2.22	0x93eb	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:43.955641031 CEST	8.8.8.8	192.168.2.22	0x8165	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:43.971219063 CEST	8.8.8.8	192.168.2.22	0xe2c9	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:43.983330965 CEST	8.8.8.8	192.168.2.22	0x43db	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:43.995345116 CEST	8.8.8.8	192.168.2.22	0xaf8d	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:44.007047892 CEST	8.8.8.8	192.168.2.22	0x9a07	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:44.019646883 CEST	8.8.8.8	192.168.2.22	0x9909	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:44.030920029 CEST	8.8.8.8	192.168.2.22	0x323b	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:44.042414904 CEST	8.8.8.8	192.168.2.22	0xcde5	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:44.053224087 CEST	8.8.8.8	192.168.2.22	0x8718	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:44.064677954 CEST	8.8.8.8	192.168.2.22	0x96b0	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:44.075594902 CEST	8.8.8.8	192.168.2.22	0xe583	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:44.086675882 CEST	8.8.8.8	192.168.2.22	0xd5cb	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:44.097924948 CEST	8.8.8.8	192.168.2.22	0xc37e	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:44.108530045 CEST	8.8.8.8	192.168.2.22	0x1134	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:44.119492054 CEST	8.8.8.8	192.168.2.22	0xf534	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:44.131958961 CEST	8.8.8.8	192.168.2.22	0x834	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:44.141765118 CEST	8.8.8.8	192.168.2.22	0x6356	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:44.153687000 CEST	8.8.8.8	192.168.2.22	0x73fd	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:44.165762901 CEST	8.8.8.8	192.168.2.22	0x3929	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:44.177922964 CEST	8.8.8.8	192.168.2.22	0x54fd	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:44.189977884 CEST	8.8.8.8	192.168.2.22	0x222	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:44.201452017 CEST	8.8.8.8	192.168.2.22	0x1502	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:44.255776882 CEST	8.8.8.8	192.168.2.22	0xf291	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:44.267735958 CEST	8.8.8.8	192.168.2.22	0x43c9	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:44.279177904 CEST	8.8.8.8	192.168.2.22	0x846	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:44.290474892 CEST	8.8.8.8	192.168.2.22	0x1a4b	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:44.302267075 CEST	8.8.8.8	192.168.2.22	0x3606	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:44.315695047 CEST	8.8.8.8	192.168.2.22	0xea1e	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:44.326447964 CEST	8.8.8.8	192.168.2.22	0x2b7d	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:44.338839054 CEST	8.8.8.8	192.168.2.22	0x4023	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:44.350297928 CEST	8.8.8.8	192.168.2.22	0xef6f	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:44.366729975 CEST	8.8.8.8	192.168.2.22	0xd6a1	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:44.378978014 CEST	8.8.8.8	192.168.2.22	0xa781	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:44.390332937 CEST	8.8.8.8	192.168.2.22	0xed68	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:44.401582956 CEST	8.8.8.8	192.168.2.22	0x2010	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:44.413738966 CEST	8.8.8.8	192.168.2.22	0x3a7	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:44.425396919 CEST	8.8.8.8	192.168.2.22	0x2583	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:44.436948061 CEST	8.8.8.8	192.168.2.22	0x82eb	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:44.447217941 CEST	8.8.8.8	192.168.2.22	0xbc74	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:44.458817005 CEST	8.8.8.8	192.168.2.22	0x8b4	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:44.469754934 CEST	8.8.8.8	192.168.2.22	0x93f3	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:44.481355906 CEST	8.8.8.8	192.168.2.22	0xd16e	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:44.491715908 CEST	8.8.8.8	192.168.2.22	0x5b06	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:44.502324104 CEST	8.8.8.8	192.168.2.22	0x14eb	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:44.513477087 CEST	8.8.8.8	192.168.2.22	0xafdd	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:44.524394035 CEST	8.8.8.8	192.168.2.22	0x7f72	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:44.534760952 CEST	8.8.8.8	192.168.2.22	0x70e8	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:44.545903921 CEST	8.8.8.8	192.168.2.22	0x3643	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:44.618611097 CEST	8.8.8.8	192.168.2.22	0xe25f	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:44.648535013 CEST	8.8.8.8	192.168.2.22	0x876e	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:44.783507109 CEST	8.8.8.8	192.168.2.22	0x7bb4	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:44.842711926 CEST	8.8.8.8	192.168.2.22	0xc1cc	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:45.157711983 CEST	8.8.8.8	192.168.2.22	0x573a	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:45.201082945 CEST	8.8.8.8	192.168.2.22	0x95d4	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:45.224977016 CEST	8.8.8.8	192.168.2.22	0x2558	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:45.289630890 CEST	8.8.8.8	192.168.2.22	0x46a3	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:45.317598104 CEST	8.8.8.8	192.168.2.22	0xad5e	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:45.685049057 CEST	8.8.8.8	192.168.2.22	0x34c8	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:45.746524096 CEST	8.8.8.8	192.168.2.22	0xfddc	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:46.217876911 CEST	8.8.8.8	192.168.2.22	0x8098	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:46.441206932 CEST	8.8.8.8	192.168.2.22	0xed64	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:46.472136974 CEST	8.8.8.8	192.168.2.22	0x957	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:46.484148979 CEST	8.8.8.8	192.168.2.22	0x271b	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:46.496814013 CEST	8.8.8.8	192.168.2.22	0x50e7	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:46.508763075 CEST	8.8.8.8	192.168.2.22	0xc5af	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:46.522264004 CEST	8.8.8.8	192.168.2.22	0x3805	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:46.533813953 CEST	8.8.8.8	192.168.2.22	0x57eb	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:46.546601057 CEST	8.8.8.8	192.168.2.22	0x4dfa	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:46.558264971 CEST	8.8.8.8	192.168.2.22	0xd55b	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:46.571012974 CEST	8.8.8.8	192.168.2.22	0x98a8	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:46.583194971 CEST	8.8.8.8	192.168.2.22	0x9386	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:46.595915079 CEST	8.8.8.8	192.168.2.22	0x7cb0	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:46.609199047 CEST	8.8.8.8	192.168.2.22	0xeafa	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:46.622644901 CEST	8.8.8.8	192.168.2.22	0xfb35	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:46.634603024 CEST	8.8.8.8	192.168.2.22	0x925e	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:46.670933962 CEST	8.8.8.8	192.168.2.22	0xcb8c	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:46.683151960 CEST	8.8.8.8	192.168.2.22	0x2638	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:46.696185112 CEST	8.8.8.8	192.168.2.22	0xc7ff	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:46.712554932 CEST	8.8.8.8	192.168.2.22	0xcacd	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:46.934200048 CEST	8.8.8.8	192.168.2.22	0x1c2b	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:47.056765079 CEST	8.8.8.8	192.168.2.22	0x2819	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:47.089703083 CEST	8.8.8.8	192.168.2.22	0x20d2	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:47.101372004 CEST	8.8.8.8	192.168.2.22	0x98c2	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:47.113763094 CEST	8.8.8.8	192.168.2.22	0x10c0	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:47.124474049 CEST	8.8.8.8	192.168.2.22	0x7a80	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:47.136091948 CEST	8.8.8.8	192.168.2.22	0xfc63	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:47.146245003 CEST	8.8.8.8	192.168.2.22	0xbc68	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:47.157083035 CEST	8.8.8.8	192.168.2.22	0x2e64	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:47.167885065 CEST	8.8.8.8	192.168.2.22	0xaf38	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:47.180222034 CEST	8.8.8.8	192.168.2.22	0x904c	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:47.194843054 CEST	8.8.8.8	192.168.2.22	0xe602	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:47.206528902 CEST	8.8.8.8	192.168.2.22	0xee0e	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:47.217981100 CEST	8.8.8.8	192.168.2.22	0xde47	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:47.228971958 CEST	8.8.8.8	192.168.2.22	0xf2c8	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:47.239012003 CEST	8.8.8.8	192.168.2.22	0xb46d	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:47.248362064 CEST	8.8.8.8	192.168.2.22	0xb46f	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:47.257554054 CEST	8.8.8.8	192.168.2.22	0x93f5	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:47.268582106 CEST	8.8.8.8	192.168.2.22	0x8dbd	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:47.278868914 CEST	8.8.8.8	192.168.2.22	0xf44	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:47.288397074 CEST	8.8.8.8	192.168.2.22	0x3f5b	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:47.297986984 CEST	8.8.8.8	192.168.2.22	0x395d	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:47.307574034 CEST	8.8.8.8	192.168.2.22	0xdfe	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:47.317056894 CEST	8.8.8.8	192.168.2.22	0x39e1	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:47.326659918 CEST	8.8.8.8	192.168.2.22	0xfc97	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:47.335819960 CEST	8.8.8.8	192.168.2.22	0x7216	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:47.345153093 CEST	8.8.8.8	192.168.2.22	0x5569	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:47.354612112 CEST	8.8.8.8	192.168.2.22	0x57e0	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:47.364155054 CEST	8.8.8.8	192.168.2.22	0xbeb1	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:47.375523090 CEST	8.8.8.8	192.168.2.22	0xf441	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:47.385314941 CEST	8.8.8.8	192.168.2.22	0x1093	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:47.394870043 CEST	8.8.8.8	192.168.2.22	0x1aa2	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:47.407674074 CEST	8.8.8.8	192.168.2.22	0xaa03	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:47.417368889 CEST	8.8.8.8	192.168.2.22	0xbba5	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:47.429904938 CEST	8.8.8.8	192.168.2.22	0xdd25	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:47.439304113 CEST	8.8.8.8	192.168.2.22	0xc76f	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:47.450333118 CEST	8.8.8.8	192.168.2.22	0xb5d5	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:47.460629940 CEST	8.8.8.8	192.168.2.22	0x3bfc	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:47.471466064 CEST	8.8.8.8	192.168.2.22	0x4a3a	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:47.483059883 CEST	8.8.8.8	192.168.2.22	0x1c31	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:47.494895935 CEST	8.8.8.8	192.168.2.22	0xae68	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:47.505505085 CEST	8.8.8.8	192.168.2.22	0xbd19	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:47.516115904 CEST	8.8.8.8	192.168.2.22	0x5ed	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:47.530230999 CEST	8.8.8.8	192.168.2.22	0xe831	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:47.541742086 CEST	8.8.8.8	192.168.2.22	0xe60a	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:47.552272081 CEST	8.8.8.8	192.168.2.22	0xc012	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:47.562550068 CEST	8.8.8.8	192.168.2.22	0x3b0b	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:47.572979927 CEST	8.8.8.8	192.168.2.22	0x3b46	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:47.584325075 CEST	8.8.8.8	192.168.2.22	0x47ce	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:47.594942093 CEST	8.8.8.8	192.168.2.22	0xb82b	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:47.606458902 CEST	8.8.8.8	192.168.2.22	0x153f	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:47.617170095 CEST	8.8.8.8	192.168.2.22	0xe89d	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:47.628386974 CEST	8.8.8.8	192.168.2.22	0x3306	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:47.639159918 CEST	8.8.8.8	192.168.2.22	0xa124	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:47.651031971 CEST	8.8.8.8	192.168.2.22	0xbdf3	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:47.661771059 CEST	8.8.8.8	192.168.2.22	0xaaf	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:47.682148933 CEST	8.8.8.8	192.168.2.22	0xb1c1	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:47.696419001 CEST	8.8.8.8	192.168.2.22	0x3973	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:47.707875013 CEST	8.8.8.8	192.168.2.22	0x7d17	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:47.717788935 CEST	8.8.8.8	192.168.2.22	0xbd22	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:47.727758884 CEST	8.8.8.8	192.168.2.22	0xc29a	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:47.762366056 CEST	8.8.8.8	192.168.2.22	0x7751	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:47.827933073 CEST	8.8.8.8	192.168.2.22	0x1c45	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:47.887447119 CEST	8.8.8.8	192.168.2.22	0xddab	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:47.910713911 CEST	8.8.8.8	192.168.2.22	0x3299	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:47.947020054 CEST	8.8.8.8	192.168.2.22	0xf049	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:48.011127949 CEST	8.8.8.8	192.168.2.22	0x82d1	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:48.043608904 CEST	8.8.8.8	192.168.2.22	0xc3b5	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:48.079921007 CEST	8.8.8.8	192.168.2.22	0x5321	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:48.198950052 CEST	8.8.8.8	192.168.2.22	0x5be3	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:48.209918022 CEST	8.8.8.8	192.168.2.22	0xdd2	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:48.219793081 CEST	8.8.8.8	192.168.2.22	0xfd47	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:48.235608101 CEST	8.8.8.8	192.168.2.22	0x40e6	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:48.246350050 CEST	8.8.8.8	192.168.2.22	0x156d	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:48.259201050 CEST	8.8.8.8	192.168.2.22	0xe8c1	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:48.269952059 CEST	8.8.8.8	192.168.2.22	0x266d	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:48.279985905 CEST	8.8.8.8	192.168.2.22	0xaca3	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:48.289761066 CEST	8.8.8.8	192.168.2.22	0xac96	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:48.300652027 CEST	8.8.8.8	192.168.2.22	0x18fb	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:48.313204050 CEST	8.8.8.8	192.168.2.22	0xb2cc	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:48.349390030 CEST	8.8.8.8	192.168.2.22	0x84c4	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:48.359987020 CEST	8.8.8.8	192.168.2.22	0x983a	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:48.369424105 CEST	8.8.8.8	192.168.2.22	0xa080	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:48.380486965 CEST	8.8.8.8	192.168.2.22	0x6cd3	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:48.393183947 CEST	8.8.8.8	192.168.2.22	0x234e	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:48.403819084 CEST	8.8.8.8	192.168.2.22	0x6001	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:48.413253069 CEST	8.8.8.8	192.168.2.22	0xc0f1	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:48.423196077 CEST	8.8.8.8	192.168.2.22	0x31d8	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:48.433270931 CEST	8.8.8.8	192.168.2.22	0x4d6d	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:49.503870964 CEST	8.8.8.8	192.168.2.22	0x92b6	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:49.526227951 CEST	8.8.8.8	192.168.2.22	0x95e	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:49.567974091 CEST	8.8.8.8	192.168.2.22	0x92b8	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:49.577919960 CEST	8.8.8.8	192.168.2.22	0x4179	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:49.587666988 CEST	8.8.8.8	192.168.2.22	0x739e	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:49.599838972 CEST	8.8.8.8	192.168.2.22	0xf603	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:49.609863043 CEST	8.8.8.8	192.168.2.22	0xdf1c	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:49.620367050 CEST	8.8.8.8	192.168.2.22	0x5c13	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:49.630491972 CEST	8.8.8.8	192.168.2.22	0xba6c	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:49.640624046 CEST	8.8.8.8	192.168.2.22	0x9562	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:49.650542021 CEST	8.8.8.8	192.168.2.22	0xa5d1	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:49.660262108 CEST	8.8.8.8	192.168.2.22	0x8703	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:49.670355082 CEST	8.8.8.8	192.168.2.22	0xe8aa	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:49.680537939 CEST	8.8.8.8	192.168.2.22	0xc51c	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:49.690608025 CEST	8.8.8.8	192.168.2.22	0x7101	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:49.700875998 CEST	8.8.8.8	192.168.2.22	0x6469	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:49.710418940 CEST	8.8.8.8	192.168.2.22	0x7256	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:49.721101046 CEST	8.8.8.8	192.168.2.22	0xbddc	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:49.731372118 CEST	8.8.8.8	192.168.2.22	0xe9e4	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:49.741676092 CEST	8.8.8.8	192.168.2.22	0xa961	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:49.752556086 CEST	8.8.8.8	192.168.2.22	0x3c4f	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:49.763911009 CEST	8.8.8.8	192.168.2.22	0xcf3e	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:49.774934053 CEST	8.8.8.8	192.168.2.22	0x79be	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:49.785664082 CEST	8.8.8.8	192.168.2.22	0xfd7e	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:49.796319008 CEST	8.8.8.8	192.168.2.22	0x5529	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:49.808377981 CEST	8.8.8.8	192.168.2.22	0xf9ea	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:49.821486950 CEST	8.8.8.8	192.168.2.22	0x834b	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:49.911500931 CEST	8.8.8.8	192.168.2.22	0x459a	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:49.922045946 CEST	8.8.8.8	192.168.2.22	0x8b4	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:49.932868958 CEST	8.8.8.8	192.168.2.22	0x3afe	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:49.943038940 CEST	8.8.8.8	192.168.2.22	0x2075	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:49.953003883 CEST	8.8.8.8	192.168.2.22	0x780a	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:49.962609053 CEST	8.8.8.8	192.168.2.22	0x4fa3	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:49.973579884 CEST	8.8.8.8	192.168.2.22	0x653e	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:49.983573914 CEST	8.8.8.8	192.168.2.22	0xecd7	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:49.993586063 CEST	8.8.8.8	192.168.2.22	0xc543	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:50.005078077 CEST	8.8.8.8	192.168.2.22	0x9543	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:50.015036106 CEST	8.8.8.8	192.168.2.22	0x8cf5	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:50.026458979 CEST	8.8.8.8	192.168.2.22	0xd25a	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:50.036681890 CEST	8.8.8.8	192.168.2.22	0x751d	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:50.047130108 CEST	8.8.8.8	192.168.2.22	0xc749	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:50.056734085 CEST	8.8.8.8	192.168.2.22	0xe01e	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:50.067044020 CEST	8.8.8.8	192.168.2.22	0x6c92	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:50.106553078 CEST	8.8.8.8	192.168.2.22	0x364d	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:50.146605015 CEST	8.8.8.8	192.168.2.22	0xd7e9	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:50.156402111 CEST	8.8.8.8	192.168.2.22	0xf8c2	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:50.170691013 CEST	8.8.8.8	192.168.2.22	0x9a43	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:50.181029081 CEST	8.8.8.8	192.168.2.22	0x8284	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:50.190949917 CEST	8.8.8.8	192.168.2.22	0x37f5	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:50.201440096 CEST	8.8.8.8	192.168.2.22	0xd7b3	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:50.211245060 CEST	8.8.8.8	192.168.2.22	0xd97b	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:50.221589088 CEST	8.8.8.8	192.168.2.22	0x35ff	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:50.232376099 CEST	8.8.8.8	192.168.2.22	0xef31	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:50.242783070 CEST	8.8.8.8	192.168.2.22	0x14ad	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:50.254004955 CEST	8.8.8.8	192.168.2.22	0x27ee	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:50.267695904 CEST	8.8.8.8	192.168.2.22	0x2154	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:50.280817032 CEST	8.8.8.8	192.168.2.22	0x22ab	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:50.294476032 CEST	8.8.8.8	192.168.2.22	0x368c	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:50.309209108 CEST	8.8.8.8	192.168.2.22	0xeb20	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:50.395464897 CEST	8.8.8.8	192.168.2.22	0x2f7a	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:50.406591892 CEST	8.8.8.8	192.168.2.22	0x4f62	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:50.418411016 CEST	8.8.8.8	192.168.2.22	0x2851	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:50.430696011 CEST	8.8.8.8	192.168.2.22	0xefc1	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:50.443155050 CEST	8.8.8.8	192.168.2.22	0xeacd	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:50.455435038 CEST	8.8.8.8	192.168.2.22	0x78c4	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:50.469676971 CEST	8.8.8.8	192.168.2.22	0xc622	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:50.487890959 CEST	8.8.8.8	192.168.2.22	0x9967	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:50.513595104 CEST	8.8.8.8	192.168.2.22	0x9d86	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:50.526499987 CEST	8.8.8.8	192.168.2.22	0xa61	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:50.546230078 CEST	8.8.8.8	192.168.2.22	0xf5b2	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:50.585410118 CEST	8.8.8.8	192.168.2.22	0x8109	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:50.597126007 CEST	8.8.8.8	192.168.2.22	0x5363	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:50.608259916 CEST	8.8.8.8	192.168.2.22	0x4549	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:50.619786024 CEST	8.8.8.8	192.168.2.22	0x79a1	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:50.631192923 CEST	8.8.8.8	192.168.2.22	0x56b5	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:50.642472982 CEST	8.8.8.8	192.168.2.22	0x1762	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:50.654696941 CEST	8.8.8.8	192.168.2.22	0xbd87	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:50.665702105 CEST	8.8.8.8	192.168.2.22	0x54b7	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:50.677608967 CEST	8.8.8.8	192.168.2.22	0xee4e	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:50.690570116 CEST	8.8.8.8	192.168.2.22	0x805b	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:50.700948000 CEST	8.8.8.8	192.168.2.22	0xdf88	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:50.713989019 CEST	8.8.8.8	192.168.2.22	0x6634	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:50.725043058 CEST	8.8.8.8	192.168.2.22	0xee5	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:50.736670971 CEST	8.8.8.8	192.168.2.22	0x85d3	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:50.746295929 CEST	8.8.8.8	192.168.2.22	0x1a4b	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:50.756616116 CEST	8.8.8.8	192.168.2.22	0x9dd7	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:50.768754959 CEST	8.8.8.8	192.168.2.22	0x2690	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:50.780225992 CEST	8.8.8.8	192.168.2.22	0xd174	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:50.795741081 CEST	8.8.8.8	192.168.2.22	0x505f	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:50.809078932 CEST	8.8.8.8	192.168.2.22	0x21c4	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:50.820105076 CEST	8.8.8.8	192.168.2.22	0xe920	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:50.831099987 CEST	8.8.8.8	192.168.2.22	0x1a3f	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:50.855993032 CEST	8.8.8.8	192.168.2.22	0x3bb	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:50.867264032 CEST	8.8.8.8	192.168.2.22	0x218d	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:50.877608061 CEST	8.8.8.8	192.168.2.22	0xb2a1	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:50.889422894 CEST	8.8.8.8	192.168.2.22	0xc8cc	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:50.900943041 CEST	8.8.8.8	192.168.2.22	0xb5c0	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:50.912924051 CEST	8.8.8.8	192.168.2.22	0xe8e0	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:50.923722029 CEST	8.8.8.8	192.168.2.22	0xcc4c	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:50.934703112 CEST	8.8.8.8	192.168.2.22	0x965b	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:50.946250916 CEST	8.8.8.8	192.168.2.22	0x1ca3	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:50.957179070 CEST	8.8.8.8	192.168.2.22	0x2ab5	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:50.967983007 CEST	8.8.8.8	192.168.2.22	0x6e4f	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:50.979598045 CEST	8.8.8.8	192.168.2.22	0x2552	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:50.991044998 CEST	8.8.8.8	192.168.2.22	0xff2a	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:51.002465963 CEST	8.8.8.8	192.168.2.22	0x851b	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:51.011990070 CEST	8.8.8.8	192.168.2.22	0x64e3	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:51.022403002 CEST	8.8.8.8	192.168.2.22	0x337d	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:51.032622099 CEST	8.8.8.8	192.168.2.22	0x9946	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:51.042874098 CEST	8.8.8.8	192.168.2.22	0x636b	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:51.054620981 CEST	8.8.8.8	192.168.2.22	0x5475	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:51.066476107 CEST	8.8.8.8	192.168.2.22	0x2a7e	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:51.077557087 CEST	8.8.8.8	192.168.2.22	0x40d4	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:51.089957952 CEST	8.8.8.8	192.168.2.22	0x5e76	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:51.101092100 CEST	8.8.8.8	192.168.2.22	0x9c6f	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:51.113100052 CEST	8.8.8.8	192.168.2.22	0x2b29	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:51.124774933 CEST	8.8.8.8	192.168.2.22	0x58c2	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:51.136792898 CEST	8.8.8.8	192.168.2.22	0xa101	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:51.148859024 CEST	8.8.8.8	192.168.2.22	0x9e7c	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:51.163177013 CEST	8.8.8.8	192.168.2.22	0x487a	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:51.176280975 CEST	8.8.8.8	192.168.2.22	0x40b3	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:51.202080011 CEST	8.8.8.8	192.168.2.22	0x78fe	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:51.221990108 CEST	8.8.8.8	192.168.2.22	0xedc2	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:51.234287977 CEST	8.8.8.8	192.168.2.22	0x38d1	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:51.245686054 CEST	8.8.8.8	192.168.2.22	0x7c8e	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:51.257558107 CEST	8.8.8.8	192.168.2.22	0xa6ae	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:51.268886089 CEST	8.8.8.8	192.168.2.22	0xd33b	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:51.281723976 CEST	8.8.8.8	192.168.2.22	0x2a05	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:51.293292999 CEST	8.8.8.8	192.168.2.22	0x8141	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:51.304564953 CEST	8.8.8.8	192.168.2.22	0x3319	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:51.318543911 CEST	8.8.8.8	192.168.2.22	0x2024	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:51.329843998 CEST	8.8.8.8	192.168.2.22	0xeb99	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:51.341408014 CEST	8.8.8.8	192.168.2.22	0x4924	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:51.352844000 CEST	8.8.8.8	192.168.2.22	0x3019	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:51.364587069 CEST	8.8.8.8	192.168.2.22	0x20d8	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:51.377434015 CEST	8.8.8.8	192.168.2.22	0x4b59	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:51.388910055 CEST	8.8.8.8	192.168.2.22	0x8592	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:51.399895906 CEST	8.8.8.8	192.168.2.22	0x554f	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:51.410387039 CEST	8.8.8.8	192.168.2.22	0xa68	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:51.421777010 CEST	8.8.8.8	192.168.2.22	0xaa32	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:51.432897091 CEST	8.8.8.8	192.168.2.22	0x5f4	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:51.444931030 CEST	8.8.8.8	192.168.2.22	0x1722	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:51.457943916 CEST	8.8.8.8	192.168.2.22	0xc308	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:51.468724012 CEST	8.8.8.8	192.168.2.22	0x27ec	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:51.481273890 CEST	8.8.8.8	192.168.2.22	0xe713	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:51.493910074 CEST	8.8.8.8	192.168.2.22	0xb0b5	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:51.506449938 CEST	8.8.8.8	192.168.2.22	0x1ee2	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:51.518472910 CEST	8.8.8.8	192.168.2.22	0x2933	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:51.543030024 CEST	8.8.8.8	192.168.2.22	0xeb41	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:51.557046890 CEST	8.8.8.8	192.168.2.22	0xc32c	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:51.572468042 CEST	8.8.8.8	192.168.2.22	0x259a	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:51.610937119 CEST	8.8.8.8	192.168.2.22	0x30f9	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:51.621784925 CEST	8.8.8.8	192.168.2.22	0x5006	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:51.635711908 CEST	8.8.8.8	192.168.2.22	0x375	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:51.646537066 CEST	8.8.8.8	192.168.2.22	0xc8b5	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:51.664581060 CEST	8.8.8.8	192.168.2.22	0xe63	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:51.682550907 CEST	8.8.8.8	192.168.2.22	0xf954	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:51.697932005 CEST	8.8.8.8	192.168.2.22	0xd8d9	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:51.713239908 CEST	8.8.8.8	192.168.2.22	0xd5b1	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:51.733030081 CEST	8.8.8.8	192.168.2.22	0x7adf	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:51.743706942 CEST	8.8.8.8	192.168.2.22	0x9c2f	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:52.081516027 CEST	8.8.8.8	192.168.2.22	0x10f6	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:52.093635082 CEST	8.8.8.8	192.168.2.22	0x4ecb	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:52.109536886 CEST	8.8.8.8	192.168.2.22	0x3077	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:52.126281977 CEST	8.8.8.8	192.168.2.22	0x120b	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:52.168009996 CEST	8.8.8.8	192.168.2.22	0xc83b	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:52.181495905 CEST	8.8.8.8	192.168.2.22	0x54e0	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:52.199913025 CEST	8.8.8.8	192.168.2.22	0xc837	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:52.216988087 CEST	8.8.8.8	192.168.2.22	0xb780	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:52.233941078 CEST	8.8.8.8	192.168.2.22	0xe91d	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:52.258276939 CEST	8.8.8.8	192.168.2.22	0x8acf	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:52.273988962 CEST	8.8.8.8	192.168.2.22	0xd3cd	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:52.283713102 CEST	8.8.8.8	192.168.2.22	0x90d1	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:52.302814007 CEST	8.8.8.8	192.168.2.22	0x389	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:52.322766066 CEST	8.8.8.8	192.168.2.22	0x333a	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:52.341057062 CEST	8.8.8.8	192.168.2.22	0x80bd	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:52.352256060 CEST	8.8.8.8	192.168.2.22	0xdb7c	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:52.445887089 CEST	8.8.8.8	192.168.2.22	0x7d0a	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:52.456305981 CEST	8.8.8.8	192.168.2.22	0xe3b0	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:52.466207981 CEST	8.8.8.8	192.168.2.22	0x68da	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:52.475338936 CEST	8.8.8.8	192.168.2.22	0x3581	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:52.485482931 CEST	8.8.8.8	192.168.2.22	0x295e	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:52.494913101 CEST	8.8.8.8	192.168.2.22	0x2636	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:52.507898092 CEST	8.8.8.8	192.168.2.22	0xafba	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:52.517822981 CEST	8.8.8.8	192.168.2.22	0x64f	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:52.528203011 CEST	8.8.8.8	192.168.2.22	0xc468	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:52.537961006 CEST	8.8.8.8	192.168.2.22	0x3097	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:52.549031973 CEST	8.8.8.8	192.168.2.22	0xc65	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:52.561438084 CEST	8.8.8.8	192.168.2.22	0xbb17	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:52.575366974 CEST	8.8.8.8	192.168.2.22	0xf4ad	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:52.586900949 CEST	8.8.8.8	192.168.2.22	0x45eb	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:52.599972010 CEST	8.8.8.8	192.168.2.22	0xc83a	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:52.613408089 CEST	8.8.8.8	192.168.2.22	0xdfd7	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:52.624289989 CEST	8.8.8.8	192.168.2.22	0xf1ce	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:52.634663105 CEST	8.8.8.8	192.168.2.22	0xe0e1	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:52.646735907 CEST	8.8.8.8	192.168.2.22	0xf480	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:52.657345057 CEST	8.8.8.8	192.168.2.22	0x164d	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:52.668337107 CEST	8.8.8.8	192.168.2.22	0xddb2	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:52.678905010 CEST	8.8.8.8	192.168.2.22	0xff40	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:52.699733973 CEST	8.8.8.8	192.168.2.22	0x365e	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:52.712918043 CEST	8.8.8.8	192.168.2.22	0xd9a5	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:52.724368095 CEST	8.8.8.8	192.168.2.22	0xa50d	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:52.736521006 CEST	8.8.8.8	192.168.2.22	0xcd1c	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:52.748167038 CEST	8.8.8.8	192.168.2.22	0x3866	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:52.758733034 CEST	8.8.8.8	192.168.2.22	0x5385	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:52.773782015 CEST	8.8.8.8	192.168.2.22	0x22f0	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:52.788343906 CEST	8.8.8.8	192.168.2.22	0xea20	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:52.800582886 CEST	8.8.8.8	192.168.2.22	0x8788	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:52.810827971 CEST	8.8.8.8	192.168.2.22	0xa20d	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:52.823719978 CEST	8.8.8.8	192.168.2.22	0xfb4a	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:52.834990025 CEST	8.8.8.8	192.168.2.22	0x1c61	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:52.845488071 CEST	8.8.8.8	192.168.2.22	0x5340	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:52.855446100 CEST	8.8.8.8	192.168.2.22	0x6b98	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:52.866290092 CEST	8.8.8.8	192.168.2.22	0xc053	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:52.876338005 CEST	8.8.8.8	192.168.2.22	0x7fa7	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:52.887737989 CEST	8.8.8.8	192.168.2.22	0xe286	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:52.899074078 CEST	8.8.8.8	192.168.2.22	0x2c0c	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:52.909538984 CEST	8.8.8.8	192.168.2.22	0x3385	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:52.920594931 CEST	8.8.8.8	192.168.2.22	0xe559	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:52.932179928 CEST	8.8.8.8	192.168.2.22	0xc4f1	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:52.946175098 CEST	8.8.8.8	192.168.2.22	0x9dbd	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:52.958137035 CEST	8.8.8.8	192.168.2.22	0xd3f7	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:52.968542099 CEST	8.8.8.8	192.168.2.22	0xf805	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:52.979063034 CEST	8.8.8.8	192.168.2.22	0x838c	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:52.990645885 CEST	8.8.8.8	192.168.2.22	0x5855	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:53.002652884 CEST	8.8.8.8	192.168.2.22	0xf68b	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:53.014312029 CEST	8.8.8.8	192.168.2.22	0x6ca7	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:53.028256893 CEST	8.8.8.8	192.168.2.22	0xdc06	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:53.038233042 CEST	8.8.8.8	192.168.2.22	0xd9d7	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:53.056642056 CEST	8.8.8.8	192.168.2.22	0xcb50	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:53.070961952 CEST	8.8.8.8	192.168.2.22	0x1e7d	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:53.092468023 CEST	8.8.8.8	192.168.2.22	0xc87c	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:53.104773998 CEST	8.8.8.8	192.168.2.22	0x12c3	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:53.116744041 CEST	8.8.8.8	192.168.2.22	0xc55f	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:53.128696918 CEST	8.8.8.8	192.168.2.22	0xc9df	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:53.142009974 CEST	8.8.8.8	192.168.2.22	0xe747	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:53.153594017 CEST	8.8.8.8	192.168.2.22	0x72b0	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:53.164838076 CEST	8.8.8.8	192.168.2.22	0x8d0d	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:53.175992012 CEST	8.8.8.8	192.168.2.22	0xe08b	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:53.188874006 CEST	8.8.8.8	192.168.2.22	0x5e66	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:53.201061010 CEST	8.8.8.8	192.168.2.22	0xb90d	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:53.213120937 CEST	8.8.8.8	192.168.2.22	0xe6d5	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:53.225331068 CEST	8.8.8.8	192.168.2.22	0x2db0	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:53.237031937 CEST	8.8.8.8	192.168.2.22	0x9023	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:53.248744965 CEST	8.8.8.8	192.168.2.22	0xb80	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:53.259691954 CEST	8.8.8.8	192.168.2.22	0x86e3	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:53.271771908 CEST	8.8.8.8	192.168.2.22	0x319e	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:53.282068968 CEST	8.8.8.8	192.168.2.22	0xd3e5	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:53.296004057 CEST	8.8.8.8	192.168.2.22	0x8ac0	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:53.308792114 CEST	8.8.8.8	192.168.2.22	0x8c9a	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:53.319967031 CEST	8.8.8.8	192.168.2.22	0xcfc8	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:53.330831051 CEST	8.8.8.8	192.168.2.22	0x31e	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:53.342356920 CEST	8.8.8.8	192.168.2.22	0x456d	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:53.354010105 CEST	8.8.8.8	192.168.2.22	0xd849	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:53.366374969 CEST	8.8.8.8	192.168.2.22	0xcb63	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:53.409080982 CEST	8.8.8.8	192.168.2.22	0x69e2	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:53.422867060 CEST	8.8.8.8	192.168.2.22	0xc80	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:53.436151028 CEST	8.8.8.8	192.168.2.22	0x2812	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:53.448649883 CEST	8.8.8.8	192.168.2.22	0x9cf9	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:53.461565018 CEST	8.8.8.8	192.168.2.22	0xa2f9	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:53.473800898 CEST	8.8.8.8	192.168.2.22	0xb120	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:53.488329887 CEST	8.8.8.8	192.168.2.22	0x62a0	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:53.500154018 CEST	8.8.8.8	192.168.2.22	0xb0b0	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:53.511168003 CEST	8.8.8.8	192.168.2.22	0xb105	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:53.521454096 CEST	8.8.8.8	192.168.2.22	0x3b27	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:53.535645008 CEST	8.8.8.8	192.168.2.22	0x2e4b	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:53.548198938 CEST	8.8.8.8	192.168.2.22	0x9b72	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:53.559943914 CEST	8.8.8.8	192.168.2.22	0x2492	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:53.571597099 CEST	8.8.8.8	192.168.2.22	0xf6c3	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:53.586282015 CEST	8.8.8.8	192.168.2.22	0x5821	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:53.609021902 CEST	8.8.8.8	192.168.2.22	0x64ba	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:53.622786999 CEST	8.8.8.8	192.168.2.22	0x1fdd	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:53.639101982 CEST	8.8.8.8	192.168.2.22	0xa0b3	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:53.649933100 CEST	8.8.8.8	192.168.2.22	0xb6fd	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:53.660728931 CEST	8.8.8.8	192.168.2.22	0x4692	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:53.673156977 CEST	8.8.8.8	192.168.2.22	0x520f	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:53.685126066 CEST	8.8.8.8	192.168.2.22	0x7640	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:53.696852922 CEST	8.8.8.8	192.168.2.22	0x1885	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:53.708487988 CEST	8.8.8.8	192.168.2.22	0x57eb	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:53.719269037 CEST	8.8.8.8	192.168.2.22	0xf708	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:53.740386009 CEST	8.8.8.8	192.168.2.22	0x23e1	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:53.751213074 CEST	8.8.8.8	192.168.2.22	0x6982	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:53.761466026 CEST	8.8.8.8	192.168.2.22	0x307e	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:53.772255898 CEST	8.8.8.8	192.168.2.22	0x90a1	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:53.782437086 CEST	8.8.8.8	192.168.2.22	0xbe3e	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:53.792963982 CEST	8.8.8.8	192.168.2.22	0x889a	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:53.804932117 CEST	8.8.8.8	192.168.2.22	0x45ce	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:53.816929102 CEST	8.8.8.8	192.168.2.22	0x106c	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:53.827820063 CEST	8.8.8.8	192.168.2.22	0x37ac	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:53.838397026 CEST	8.8.8.8	192.168.2.22	0x3892	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:53.848817110 CEST	8.8.8.8	192.168.2.22	0x8ccd	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:53.859847069 CEST	8.8.8.8	192.168.2.22	0x83f3	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:53.870414972 CEST	8.8.8.8	192.168.2.22	0x1dc5	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:53.881675959 CEST	8.8.8.8	192.168.2.22	0x4f95	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:53.893290997 CEST	8.8.8.8	192.168.2.22	0xa26a	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:53.904738903 CEST	8.8.8.8	192.168.2.22	0x2adb	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:53.914676905 CEST	8.8.8.8	192.168.2.22	0x3d81	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:53.927932024 CEST	8.8.8.8	192.168.2.22	0x9421	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:53.939229965 CEST	8.8.8.8	192.168.2.22	0x6c2	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:53.949912071 CEST	8.8.8.8	192.168.2.22	0x402	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:53.962006092 CEST	8.8.8.8	192.168.2.22	0xb5	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:53.974701881 CEST	8.8.8.8	192.168.2.22	0x8ed8	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:54.085536003 CEST	8.8.8.8	192.168.2.22	0x1bff	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:54.111015081 CEST	8.8.8.8	192.168.2.22	0x20a9	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:54.122560978 CEST	8.8.8.8	192.168.2.22	0x28bf	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:54.135236025 CEST	8.8.8.8	192.168.2.22	0x600a	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:54.146868944 CEST	8.8.8.8	192.168.2.22	0xa6b3	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:54.158679008 CEST	8.8.8.8	192.168.2.22	0x1286	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:54.169884920 CEST	8.8.8.8	192.168.2.22	0xd10d	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:54.181967974 CEST	8.8.8.8	192.168.2.22	0x6b9	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:54.191984892 CEST	8.8.8.8	192.168.2.22	0xb6b7	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:54.205363035 CEST	8.8.8.8	192.168.2.22	0xc82f	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:54.217104912 CEST	8.8.8.8	192.168.2.22	0x6ff8	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:54.228840113 CEST	8.8.8.8	192.168.2.22	0x46e7	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:54.240858078 CEST	8.8.8.8	192.168.2.22	0x4166	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:54.251888990 CEST	8.8.8.8	192.168.2.22	0x8240	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:54.264197111 CEST	8.8.8.8	192.168.2.22	0xbcd9	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:54.277549028 CEST	8.8.8.8	192.168.2.22	0x2c4e	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:54.288990021 CEST	8.8.8.8	192.168.2.22	0xfa37	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:54.303185940 CEST	8.8.8.8	192.168.2.22	0x1404	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:54.495672941 CEST	8.8.8.8	192.168.2.22	0xddd0	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:54.516954899 CEST	8.8.8.8	192.168.2.22	0xb9fb	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:54.531250954 CEST	8.8.8.8	192.168.2.22	0x2a76	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:54.566092968 CEST	8.8.8.8	192.168.2.22	0x5beb	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:54.643652916 CEST	8.8.8.8	192.168.2.22	0xbdcb	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:54.658638000 CEST	8.8.8.8	192.168.2.22	0xd772	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:54.671468019 CEST	8.8.8.8	192.168.2.22	0x9408	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:54.682616949 CEST	8.8.8.8	192.168.2.22	0x89a6	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:54.694140911 CEST	8.8.8.8	192.168.2.22	0x5a25	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:54.707703114 CEST	8.8.8.8	192.168.2.22	0x9c8a	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:54.722352982 CEST	8.8.8.8	192.168.2.22	0x18d0	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:54.734891891 CEST	8.8.8.8	192.168.2.22	0x46d4	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:54.744934082 CEST	8.8.8.8	192.168.2.22	0xd04c	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:54.769727945 CEST	8.8.8.8	192.168.2.22	0xc377	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:54.781955004 CEST	8.8.8.8	192.168.2.22	0x6d5a	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:54.791517973 CEST	8.8.8.8	192.168.2.22	0x11eb	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:54.801752090 CEST	8.8.8.8	192.168.2.22	0xd8d0	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:54.820162058 CEST	8.8.8.8	192.168.2.22	0x3ceb	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:54.832958937 CEST	8.8.8.8	192.168.2.22	0xc4cd	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:54.844325066 CEST	8.8.8.8	192.168.2.22	0x56a1	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:54.856386900 CEST	8.8.8.8	192.168.2.22	0x65df	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:54.869931936 CEST	8.8.8.8	192.168.2.22	0xb4e	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:54.882268906 CEST	8.8.8.8	192.168.2.22	0x9ecd	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:54.894212008 CEST	8.8.8.8	192.168.2.22	0x8f11	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:54.908368111 CEST	8.8.8.8	192.168.2.22	0x32d4	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:54.922261953 CEST	8.8.8.8	192.168.2.22	0xfa2a	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:54.933433056 CEST	8.8.8.8	192.168.2.22	0xc910	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:54.945770025 CEST	8.8.8.8	192.168.2.22	0x6fc8	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:54.957726955 CEST	8.8.8.8	192.168.2.22	0xbdc0	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:54.969547987 CEST	8.8.8.8	192.168.2.22	0x5e13	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:54.982352972 CEST	8.8.8.8	192.168.2.22	0x640b	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:54.994849920 CEST	8.8.8.8	192.168.2.22	0xfa36	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:55.007445097 CEST	8.8.8.8	192.168.2.22	0x9bc	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:55.020915031 CEST	8.8.8.8	192.168.2.22	0x6aa1	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:55.112139940 CEST	8.8.8.8	192.168.2.22	0xcad4	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:55.165277958 CEST	8.8.8.8	192.168.2.22	0xce7f	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:55.195934057 CEST	8.8.8.8	192.168.2.22	0x70a6	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:55.217994928 CEST	8.8.8.8	192.168.2.22	0xfaa7	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:55.237474918 CEST	8.8.8.8	192.168.2.22	0x4216	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:55.263925076 CEST	8.8.8.8	192.168.2.22	0xc15e	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:55.297614098 CEST	8.8.8.8	192.168.2.22	0xfb6b	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:55.409658909 CEST	8.8.8.8	192.168.2.22	0x5796	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:55.535325050 CEST	8.8.8.8	192.168.2.22	0xd1d8	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:55.634433031 CEST	8.8.8.8	192.168.2.22	0x97b0	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:55.644922018 CEST	8.8.8.8	192.168.2.22	0x4a99	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:55.655622959 CEST	8.8.8.8	192.168.2.22	0xcbad	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:55.688883066 CEST	8.8.8.8	192.168.2.22	0xde96	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:55.752568960 CEST	8.8.8.8	192.168.2.22	0xfe5f	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:55.797911882 CEST	8.8.8.8	192.168.2.22	0xf577	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:55.872925043 CEST	8.8.8.8	192.168.2.22	0x95d3	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:55.907068014 CEST	8.8.8.8	192.168.2.22	0x1a5e	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:55.917618990 CEST	8.8.8.8	192.168.2.22	0x2825	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:55.932820082 CEST	8.8.8.8	192.168.2.22	0x1520	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:55.943325996 CEST	8.8.8.8	192.168.2.22	0x797b	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:55.953130007 CEST	8.8.8.8	192.168.2.22	0x73c	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:55.973186016 CEST	8.8.8.8	192.168.2.22	0x278a	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:55.983782053 CEST	8.8.8.8	192.168.2.22	0x7423	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:55.993374109 CEST	8.8.8.8	192.168.2.22	0x330c	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:56.004112005 CEST	8.8.8.8	192.168.2.22	0x772d	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:56.013659000 CEST	8.8.8.8	192.168.2.22	0x4e3b	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:56.024429083 CEST	8.8.8.8	192.168.2.22	0x58ea	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:56.033901930 CEST	8.8.8.8	192.168.2.22	0xf3fa	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:56.044095993 CEST	8.8.8.8	192.168.2.22	0x73c5	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:56.054331064 CEST	8.8.8.8	192.168.2.22	0xaf1d	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:56.063704967 CEST	8.8.8.8	192.168.2.22	0x524	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:56.073999882 CEST	8.8.8.8	192.168.2.22	0x2372	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:56.083631992 CEST	8.8.8.8	192.168.2.22	0xfef1	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:56.093182087 CEST	8.8.8.8	192.168.2.22	0xe269	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:56.102732897 CEST	8.8.8.8	192.168.2.22	0x92d4	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:56.114495993 CEST	8.8.8.8	192.168.2.22	0x305c	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:56.125987053 CEST	8.8.8.8	192.168.2.22	0xce1	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:56.157413960 CEST	8.8.8.8	192.168.2.22	0x2d5e	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:56.248209000 CEST	8.8.8.8	192.168.2.22	0xe0e2	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:56.260562897 CEST	8.8.8.8	192.168.2.22	0x19d2	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:56.334435940 CEST	8.8.8.8	192.168.2.22	0x23c8	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:56.375283957 CEST	8.8.8.8	192.168.2.22	0x6afb	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:56.397068024 CEST	8.8.8.8	192.168.2.22	0xf683	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:56.444437027 CEST	8.8.8.8	192.168.2.22	0x6161	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:56.500072002 CEST	8.8.8.8	192.168.2.22	0x22a9	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:56.513009071 CEST	8.8.8.8	192.168.2.22	0x308f	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:56.523578882 CEST	8.8.8.8	192.168.2.22	0x3c88	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:56.534745932 CEST	8.8.8.8	192.168.2.22	0x2c45	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:56.545928955 CEST	8.8.8.8	192.168.2.22	0xaa2a	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:56.558770895 CEST	8.8.8.8	192.168.2.22	0x39cd	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:56.568640947 CEST	8.8.8.8	192.168.2.22	0x35d7	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:56.581804037 CEST	8.8.8.8	192.168.2.22	0xc417	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:56.592700958 CEST	8.8.8.8	192.168.2.22	0xd996	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:56.603931904 CEST	8.8.8.8	192.168.2.22	0x6feb	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:56.614294052 CEST	8.8.8.8	192.168.2.22	0x8f44	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:56.624955893 CEST	8.8.8.8	192.168.2.22	0x73b8	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:56.635098934 CEST	8.8.8.8	192.168.2.22	0x6692	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:56.644931078 CEST	8.8.8.8	192.168.2.22	0x9afc	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:56.656923056 CEST	8.8.8.8	192.168.2.22	0x39bc	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:56.668469906 CEST	8.8.8.8	192.168.2.22	0x507b	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:56.679040909 CEST	8.8.8.8	192.168.2.22	0xb6b2	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:56.689805984 CEST	8.8.8.8	192.168.2.22	0x8355	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:56.700304985 CEST	8.8.8.8	192.168.2.22	0x6af4	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:56.710961103 CEST	8.8.8.8	192.168.2.22	0x8051	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:56.725848913 CEST	8.8.8.8	192.168.2.22	0x3986	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:56.737041950 CEST	8.8.8.8	192.168.2.22	0xea0a	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:56.748287916 CEST	8.8.8.8	192.168.2.22	0xbdd7	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:56.760567904 CEST	8.8.8.8	192.168.2.22	0x2dbd	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:56.771512985 CEST	8.8.8.8	192.168.2.22	0x60c6	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:56.785156012 CEST	8.8.8.8	192.168.2.22	0x1b7d	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:56.795402050 CEST	8.8.8.8	192.168.2.22	0x279d	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:56.811850071 CEST	8.8.8.8	192.168.2.22	0x7a8c	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:56.823689938 CEST	8.8.8.8	192.168.2.22	0xf4ea	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:56.833865881 CEST	8.8.8.8	192.168.2.22	0xac7b	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:56.846791983 CEST	8.8.8.8	192.168.2.22	0xea08	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:56.859052896 CEST	8.8.8.8	192.168.2.22	0x85ba	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:56.869251966 CEST	8.8.8.8	192.168.2.22	0xae80	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:56.883459091 CEST	8.8.8.8	192.168.2.22	0x4765	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:56.893898964 CEST	8.8.8.8	192.168.2.22	0x9fe6	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:56.905088902 CEST	8.8.8.8	192.168.2.22	0xeeb9	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:56.915097952 CEST	8.8.8.8	192.168.2.22	0x438a	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:56.925287962 CEST	8.8.8.8	192.168.2.22	0xef1	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:56.936428070 CEST	8.8.8.8	192.168.2.22	0xaa6f	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:56.946624994 CEST	8.8.8.8	192.168.2.22	0x47da	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:56.957300901 CEST	8.8.8.8	192.168.2.22	0xf829	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:56.967585087 CEST	8.8.8.8	192.168.2.22	0xd1ac	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:56.977494955 CEST	8.8.8.8	192.168.2.22	0x89f9	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:56.987903118 CEST	8.8.8.8	192.168.2.22	0x324d	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:56.997971058 CEST	8.8.8.8	192.168.2.22	0x8e5a	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:57.010941029 CEST	8.8.8.8	192.168.2.22	0x170c	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:57.024199009 CEST	8.8.8.8	192.168.2.22	0x6f91	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:57.037492037 CEST	8.8.8.8	192.168.2.22	0xabf7	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:57.050746918 CEST	8.8.8.8	192.168.2.22	0x8a98	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:57.064052105 CEST	8.8.8.8	192.168.2.22	0x14d8	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:57.076020002 CEST	8.8.8.8	192.168.2.22	0xc91f	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:57.088850975 CEST	8.8.8.8	192.168.2.22	0x8c5b	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:57.100589991 CEST	8.8.8.8	192.168.2.22	0x148c	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:57.113800049 CEST	8.8.8.8	192.168.2.22	0x23a5	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:57.125070095 CEST	8.8.8.8	192.168.2.22	0xcd9e	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:57.137217045 CEST	8.8.8.8	192.168.2.22	0xcce2	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:57.148443937 CEST	8.8.8.8	192.168.2.22	0x3ce7	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:57.160595894 CEST	8.8.8.8	192.168.2.22	0xe081	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:57.181143045 CEST	8.8.8.8	192.168.2.22	0xc3c7	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:57.197441101 CEST	8.8.8.8	192.168.2.22	0x61e2	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:57.228929996 CEST	8.8.8.8	192.168.2.22	0x9d6f	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:57.241771936 CEST	8.8.8.8	192.168.2.22	0x25b8	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:57.253943920 CEST	8.8.8.8	192.168.2.22	0x2351	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:57.265676975 CEST	8.8.8.8	192.168.2.22	0xb4a5	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:57.276813030 CEST	8.8.8.8	192.168.2.22	0x2ea6	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:57.289216042 CEST	8.8.8.8	192.168.2.22	0xb1e0	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:57.303045034 CEST	8.8.8.8	192.168.2.22	0x13ae	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:57.314970970 CEST	8.8.8.8	192.168.2.22	0xb623	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:57.326477051 CEST	8.8.8.8	192.168.2.22	0x3282	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:57.338649988 CEST	8.8.8.8	192.168.2.22	0xf6d4	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:57.350423098 CEST	8.8.8.8	192.168.2.22	0x6ade	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:57.361828089 CEST	8.8.8.8	192.168.2.22	0x45e9	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:57.374233961 CEST	8.8.8.8	192.168.2.22	0xfaf0	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:57.386472940 CEST	8.8.8.8	192.168.2.22	0xf5e2	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:57.397979021 CEST	8.8.8.8	192.168.2.22	0xe25a	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:57.408503056 CEST	8.8.8.8	192.168.2.22	0xac75	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:57.420005083 CEST	8.8.8.8	192.168.2.22	0x7905	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:57.431401014 CEST	8.8.8.8	192.168.2.22	0x3cac	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:57.442734003 CEST	8.8.8.8	192.168.2.22	0x7ac8	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:57.454679966 CEST	8.8.8.8	192.168.2.22	0xec6c	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:57.464447021 CEST	8.8.8.8	192.168.2.22	0xb971	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:57.475343943 CEST	8.8.8.8	192.168.2.22	0xf3f6	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:57.486037016 CEST	8.8.8.8	192.168.2.22	0xb52	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:57.498136044 CEST	8.8.8.8	192.168.2.22	0xe05f	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:57.508548975 CEST	8.8.8.8	192.168.2.22	0x58b3	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:57.530622005 CEST	8.8.8.8	192.168.2.22	0x30f4	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:57.556399107 CEST	8.8.8.8	192.168.2.22	0x5e59	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:57.571958065 CEST	8.8.8.8	192.168.2.22	0xa486	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:57.588123083 CEST	8.8.8.8	192.168.2.22	0x9610	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:57.601543903 CEST	8.8.8.8	192.168.2.22	0xd02a	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:57.612636089 CEST	8.8.8.8	192.168.2.22	0x230f	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:57.624308109 CEST	8.8.8.8	192.168.2.22	0xa9a4	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:57.635288000 CEST	8.8.8.8	192.168.2.22	0xa502	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:57.647543907 CEST	8.8.8.8	192.168.2.22	0xcdc4	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:57.658081055 CEST	8.8.8.8	192.168.2.22	0xbd07	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:57.669509888 CEST	8.8.8.8	192.168.2.22	0x6b69	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:57.681086063 CEST	8.8.8.8	192.168.2.22	0x33dd	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:57.692306995 CEST	8.8.8.8	192.168.2.22	0x1e45	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:57.710663080 CEST	8.8.8.8	192.168.2.22	0x17e8	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:57.723006010 CEST	8.8.8.8	192.168.2.22	0x1647	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:57.734731913 CEST	8.8.8.8	192.168.2.22	0xcb7a	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:57.745070934 CEST	8.8.8.8	192.168.2.22	0xdf70	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:57.756551981 CEST	8.8.8.8	192.168.2.22	0x4029	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:57.767977953 CEST	8.8.8.8	192.168.2.22	0x53dc	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:57.778979063 CEST	8.8.8.8	192.168.2.22	0x1b3f	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:57.790108919 CEST	8.8.8.8	192.168.2.22	0x9a8f	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:57.800549030 CEST	8.8.8.8	192.168.2.22	0x3da5	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:57.810163021 CEST	8.8.8.8	192.168.2.22	0x779b	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:57.821046114 CEST	8.8.8.8	192.168.2.22	0xacd9	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:57.832154989 CEST	8.8.8.8	192.168.2.22	0xa4cc	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:57.842679977 CEST	8.8.8.8	192.168.2.22	0x9143	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:57.854154110 CEST	8.8.8.8	192.168.2.22	0x7c89	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:57.873651028 CEST	8.8.8.8	192.168.2.22	0xa230	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:57.891258955 CEST	8.8.8.8	192.168.2.22	0xe5ea	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:57.901869059 CEST	8.8.8.8	192.168.2.22	0x8bb1	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:57.913393021 CEST	8.8.8.8	192.168.2.22	0x241a	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:57.923791885 CEST	8.8.8.8	192.168.2.22	0x487	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:57.935844898 CEST	8.8.8.8	192.168.2.22	0xa175	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:57.947227001 CEST	8.8.8.8	192.168.2.22	0x6527	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:57.957632065 CEST	8.8.8.8	192.168.2.22	0x3856	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:57.967880011 CEST	8.8.8.8	192.168.2.22	0xf8ac	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:57.980458021 CEST	8.8.8.8	192.168.2.22	0x225e	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:58.017535925 CEST	8.8.8.8	192.168.2.22	0x5140	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:58.036382914 CEST	8.8.8.8	192.168.2.22	0x9e1d	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:58.056955099 CEST	8.8.8.8	192.168.2.22	0x9561	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:58.080605030 CEST	8.8.8.8	192.168.2.22	0x94e1	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:58.102353096 CEST	8.8.8.8	192.168.2.22	0x4697	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:58.210014105 CEST	8.8.8.8	192.168.2.22	0xdfd5	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:58.238193989 CEST	8.8.8.8	192.168.2.22	0x9522	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:58.247750998 CEST	8.8.8.8	192.168.2.22	0x72d1	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:58.257112026 CEST	8.8.8.8	192.168.2.22	0xba57	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:58.268426895 CEST	8.8.8.8	192.168.2.22	0x2bb	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:58.324788094 CEST	8.8.8.8	192.168.2.22	0x7291	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:58.876971960 CEST	8.8.8.8	192.168.2.22	0x3b5e	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:58.932653904 CEST	8.8.8.8	192.168.2.22	0xeadc	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:58.997790098 CEST	8.8.8.8	192.168.2.22	0xd41a	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:59.010076046 CEST	8.8.8.8	192.168.2.22	0xf58f	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:59.021893024 CEST	8.8.8.8	192.168.2.22	0xd9d3	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:59.034851074 CEST	8.8.8.8	192.168.2.22	0x8ab2	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:59.048183918 CEST	8.8.8.8	192.168.2.22	0x6ed5	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:59.060709000 CEST	8.8.8.8	192.168.2.22	0x5046	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:59.073954105 CEST	8.8.8.8	192.168.2.22	0x4853	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:59.089521885 CEST	8.8.8.8	192.168.2.22	0x7448	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:59.103266001 CEST	8.8.8.8	192.168.2.22	0x81bb	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:59.116219044 CEST	8.8.8.8	192.168.2.22	0xb8f7	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:59.127711058 CEST	8.8.8.8	192.168.2.22	0x57d1	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:59.139655113 CEST	8.8.8.8	192.168.2.22	0x42d2	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:59.152939081 CEST	8.8.8.8	192.168.2.22	0xf26	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:59.165443897 CEST	8.8.8.8	192.168.2.22	0xc07f	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:59.188235998 CEST	8.8.8.8	192.168.2.22	0xc638	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:59.202030897 CEST	8.8.8.8	192.168.2.22	0x5a21	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:59.214452982 CEST	8.8.8.8	192.168.2.22	0x24d	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:59.238013029 CEST	8.8.8.8	192.168.2.22	0x1560	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:59.270311117 CEST	8.8.8.8	192.168.2.22	0x481e	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:59.282919884 CEST	8.8.8.8	192.168.2.22	0x36ab	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:59.295331955 CEST	8.8.8.8	192.168.2.22	0xca7c	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:59.307320118 CEST	8.8.8.8	192.168.2.22	0xc666	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:59.320635080 CEST	8.8.8.8	192.168.2.22	0x88ff	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:59.362186909 CEST	8.8.8.8	192.168.2.22	0x16f2	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:59.409688950 CEST	8.8.8.8	192.168.2.22	0x9bf8	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:59.427829027 CEST	8.8.8.8	192.168.2.22	0xc3a1	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:59.485749006 CEST	8.8.8.8	192.168.2.22	0x51de	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:59.515793085 CEST	8.8.8.8	192.168.2.22	0xdc2c	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:59.546457052 CEST	8.8.8.8	192.168.2.22	0x7858	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:59.664113998 CEST	8.8.8.8	192.168.2.22	0x4ac1	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:59.675012112 CEST	8.8.8.8	192.168.2.22	0xf1f1	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:59.683859110 CEST	8.8.8.8	192.168.2.22	0xf168	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:59.693279028 CEST	8.8.8.8	192.168.2.22	0x3e54	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:59.702203035 CEST	8.8.8.8	192.168.2.22	0x3628	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:59.711683035 CEST	8.8.8.8	192.168.2.22	0xd77d	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:59.721221924 CEST	8.8.8.8	192.168.2.22	0x2f76	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:59.730990887 CEST	8.8.8.8	192.168.2.22	0xb342	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:59.740600109 CEST	8.8.8.8	192.168.2.22	0xc9da	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:59.749716997 CEST	8.8.8.8	192.168.2.22	0x3630	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:59.759593964 CEST	8.8.8.8	192.168.2.22	0xe4e3	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:59.768450022 CEST	8.8.8.8	192.168.2.22	0x649c	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:59.777729034 CEST	8.8.8.8	192.168.2.22	0x8ec1	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:59.787069082 CEST	8.8.8.8	192.168.2.22	0x1ca5	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:59.796536922 CEST	8.8.8.8	192.168.2.22	0xf594	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:59.805881023 CEST	8.8.8.8	192.168.2.22	0x479a	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:59.814768076 CEST	8.8.8.8	192.168.2.22	0x3338	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:59.825037956 CEST	8.8.8.8	192.168.2.22	0x305e	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:59.834355116 CEST	8.8.8.8	192.168.2.22	0x65ea	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:59.844208002 CEST	8.8.8.8	192.168.2.22	0x8da	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:59.853477955 CEST	8.8.8.8	192.168.2.22	0x88f7	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:59.864111900 CEST	8.8.8.8	192.168.2.22	0x4cba	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:59.873697996 CEST	8.8.8.8	192.168.2.22	0xb3	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:59.884604931 CEST	8.8.8.8	192.168.2.22	0x5dfa	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:59.894216061 CEST	8.8.8.8	192.168.2.22	0x4388	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:59.904143095 CEST	8.8.8.8	192.168.2.22	0x7495	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:59.960786104 CEST	8.8.8.8	192.168.2.22	0x67e	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:59.973078012 CEST	8.8.8.8	192.168.2.22	0x3eed	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:59.984426022 CEST	8.8.8.8	192.168.2.22	0x30a9	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:15:59.995202065 CEST	8.8.8.8	192.168.2.22	0x3be7	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:00.006769896 CEST	8.8.8.8	192.168.2.22	0x2e8a	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:00.018615007 CEST	8.8.8.8	192.168.2.22	0xc4b1	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:00.030102968 CEST	8.8.8.8	192.168.2.22	0x5722	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:00.059973955 CEST	8.8.8.8	192.168.2.22	0xcfb3	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:00.074413061 CEST	8.8.8.8	192.168.2.22	0x3355	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:00.084597111 CEST	8.8.8.8	192.168.2.22	0xb8c8	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:00.096648932 CEST	8.8.8.8	192.168.2.22	0x6b49	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:00.108398914 CEST	8.8.8.8	192.168.2.22	0x880	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:00.119441032 CEST	8.8.8.8	192.168.2.22	0x1caf	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:00.130942106 CEST	8.8.8.8	192.168.2.22	0xd726	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:00.141571045 CEST	8.8.8.8	192.168.2.22	0x897	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:00.152637959 CEST	8.8.8.8	192.168.2.22	0x6c0	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:00.175510883 CEST	8.8.8.8	192.168.2.22	0x5e0	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:00.215883970 CEST	8.8.8.8	192.168.2.22	0x5011	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:00.232836962 CEST	8.8.8.8	192.168.2.22	0x3bd7	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:00.345324039 CEST	8.8.8.8	192.168.2.22	0xb778	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:00.357429981 CEST	8.8.8.8	192.168.2.22	0xdcac	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:00.377944946 CEST	8.8.8.8	192.168.2.22	0x32fe	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:00.396945953 CEST	8.8.8.8	192.168.2.22	0x22ad	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:00.423053026 CEST	8.8.8.8	192.168.2.22	0x4528	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:00.475213051 CEST	8.8.8.8	192.168.2.22	0x1f20	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:00.488111973 CEST	8.8.8.8	192.168.2.22	0x6845	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:00.498600006 CEST	8.8.8.8	192.168.2.22	0x4e97	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:00.511480093 CEST	8.8.8.8	192.168.2.22	0x48e7	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:00.524394989 CEST	8.8.8.8	192.168.2.22	0x2c29	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:00.537317038 CEST	8.8.8.8	192.168.2.22	0x58f6	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:00.550663948 CEST	8.8.8.8	192.168.2.22	0x4ba3	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:00.563992977 CEST	8.8.8.8	192.168.2.22	0x8aae	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:00.576395988 CEST	8.8.8.8	192.168.2.22	0x6645	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:00.588179111 CEST	8.8.8.8	192.168.2.22	0x67e0	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:00.598733902 CEST	8.8.8.8	192.168.2.22	0x8f31	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:00.641475916 CEST	8.8.8.8	192.168.2.22	0xb5d4	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:00.651567936 CEST	8.8.8.8	192.168.2.22	0x9e44	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:00.665162086 CEST	8.8.8.8	192.168.2.22	0xd260	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:00.676544905 CEST	8.8.8.8	192.168.2.22	0xd347	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:00.686000109 CEST	8.8.8.8	192.168.2.22	0x7bbd	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:00.696181059 CEST	8.8.8.8	192.168.2.22	0xd1cb	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:00.705924988 CEST	8.8.8.8	192.168.2.22	0xc29b	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:00.716886044 CEST	8.8.8.8	192.168.2.22	0xed85	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:00.726792097 CEST	8.8.8.8	192.168.2.22	0xc745	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:00.736494064 CEST	8.8.8.8	192.168.2.22	0xfa75	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:00.750488043 CEST	8.8.8.8	192.168.2.22	0xe71a	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:00.759753942 CEST	8.8.8.8	192.168.2.22	0x3fb5	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:00.770936012 CEST	8.8.8.8	192.168.2.22	0xd3b0	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:00.780563116 CEST	8.8.8.8	192.168.2.22	0x7ae2	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:00.790903091 CEST	8.8.8.8	192.168.2.22	0x22cc	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:00.799899101 CEST	8.8.8.8	192.168.2.22	0xc945	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:00.809118986 CEST	8.8.8.8	192.168.2.22	0xf6e9	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:00.818689108 CEST	8.8.8.8	192.168.2.22	0x7b34	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:00.828948021 CEST	8.8.8.8	192.168.2.22	0xc787	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:00.837851048 CEST	8.8.8.8	192.168.2.22	0x1c8c	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:00.847104073 CEST	8.8.8.8	192.168.2.22	0x5eae	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:00.857271910 CEST	8.8.8.8	192.168.2.22	0x8956	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:00.870389938 CEST	8.8.8.8	192.168.2.22	0x58e6	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:00.882580042 CEST	8.8.8.8	192.168.2.22	0x5224	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:00.894681931 CEST	8.8.8.8	192.168.2.22	0xedf1	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:00.905754089 CEST	8.8.8.8	192.168.2.22	0xe32d	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:00.917351961 CEST	8.8.8.8	192.168.2.22	0x6943	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:00.929913044 CEST	8.8.8.8	192.168.2.22	0xd43f	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:00.941690922 CEST	8.8.8.8	192.168.2.22	0x388f	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:01.001569986 CEST	8.8.8.8	192.168.2.22	0x7355	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:01.043482065 CEST	8.8.8.8	192.168.2.22	0x40bd	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:01.110771894 CEST	8.8.8.8	192.168.2.22	0xb315	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:01.176508904 CEST	8.8.8.8	192.168.2.22	0x2449	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:01.280744076 CEST	8.8.8.8	192.168.2.22	0x5e50	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:01.570230961 CEST	8.8.8.8	192.168.2.22	0xf9a1	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:01.585715055 CEST	8.8.8.8	192.168.2.22	0xf591	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:01.597659111 CEST	8.8.8.8	192.168.2.22	0x28da	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:01.618758917 CEST	8.8.8.8	192.168.2.22	0x1b49	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:01.654609919 CEST	8.8.8.8	192.168.2.22	0xcf23	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:01.685530901 CEST	8.8.8.8	192.168.2.22	0x3c75	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:01.730540037 CEST	8.8.8.8	192.168.2.22	0x8e96	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:01.790142059 CEST	8.8.8.8	192.168.2.22	0x1d7e	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:01.799973965 CEST	8.8.8.8	192.168.2.22	0xfe2e	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:01.827222109 CEST	8.8.8.8	192.168.2.22	0x46bb	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:01.852255106 CEST	8.8.8.8	192.168.2.22	0x41be	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:01.873972893 CEST	8.8.8.8	192.168.2.22	0xd45c	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:01.884080887 CEST	8.8.8.8	192.168.2.22	0xf752	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:01.893888950 CEST	8.8.8.8	192.168.2.22	0x86d3	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:01.904629946 CEST	8.8.8.8	192.168.2.22	0x99f2	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:01.914428949 CEST	8.8.8.8	192.168.2.22	0xb8d2	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:01.923871994 CEST	8.8.8.8	192.168.2.22	0xdf55	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:01.934310913 CEST	8.8.8.8	192.168.2.22	0x6951	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:01.944400072 CEST	8.8.8.8	192.168.2.22	0xa5a9	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:01.955560923 CEST	8.8.8.8	192.168.2.22	0xb262	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:01.965528011 CEST	8.8.8.8	192.168.2.22	0x5654	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:01.974921942 CEST	8.8.8.8	192.168.2.22	0x11c0	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:01.984867096 CEST	8.8.8.8	192.168.2.22	0x9d6e	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:01.994999886 CEST	8.8.8.8	192.168.2.22	0x6c89	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:02.007246971 CEST	8.8.8.8	192.168.2.22	0x60d2	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:02.018580914 CEST	8.8.8.8	192.168.2.22	0xab3	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:02.029624939 CEST	8.8.8.8	192.168.2.22	0x1683	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:02.039350986 CEST	8.8.8.8	192.168.2.22	0x41ba	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:02.049695015 CEST	8.8.8.8	192.168.2.22	0x8122	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:02.060517073 CEST	8.8.8.8	192.168.2.22	0xbe54	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:02.072024107 CEST	8.8.8.8	192.168.2.22	0xd703	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:02.307849884 CEST	8.8.8.8	192.168.2.22	0xbe0f	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:02.322511911 CEST	8.8.8.8	192.168.2.22	0x195d	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:02.339308023 CEST	8.8.8.8	192.168.2.22	0x59b3	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:02.349885941 CEST	8.8.8.8	192.168.2.22	0x8c26	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:02.359858990 CEST	8.8.8.8	192.168.2.22	0x38e1	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:02.369483948 CEST	8.8.8.8	192.168.2.22	0xfe8e	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:02.379813910 CEST	8.8.8.8	192.168.2.22	0x59c1	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:02.390584946 CEST	8.8.8.8	192.168.2.22	0xcc3a	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:02.401212931 CEST	8.8.8.8	192.168.2.22	0xe7da	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:02.411792994 CEST	8.8.8.8	192.168.2.22	0x8437	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:02.424413919 CEST	8.8.8.8	192.168.2.22	0x6646	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:02.566103935 CEST	8.8.8.8	192.168.2.22	0xedcb	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:02.582165956 CEST	8.8.8.8	192.168.2.22	0x2d07	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:02.592881918 CEST	8.8.8.8	192.168.2.22	0x584d	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:02.606842041 CEST	8.8.8.8	192.168.2.22	0xe36f	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:02.617331982 CEST	8.8.8.8	192.168.2.22	0xa7bf	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:02.630630970 CEST	8.8.8.8	192.168.2.22	0x434e	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:02.642326117 CEST	8.8.8.8	192.168.2.22	0x891c	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:02.653194904 CEST	8.8.8.8	192.168.2.22	0xfefc	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:02.665596008 CEST	8.8.8.8	192.168.2.22	0xf218	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:02.675997972 CEST	8.8.8.8	192.168.2.22	0x38ae	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:02.687705994 CEST	8.8.8.8	192.168.2.22	0xd5fd	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:02.699645996 CEST	8.8.8.8	192.168.2.22	0x97d4	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:02.710179090 CEST	8.8.8.8	192.168.2.22	0x46a9	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:02.721796036 CEST	8.8.8.8	192.168.2.22	0x4bd6	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:02.735002995 CEST	8.8.8.8	192.168.2.22	0xba9e	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:02.744990110 CEST	8.8.8.8	192.168.2.22	0x99f2	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:02.756539106 CEST	8.8.8.8	192.168.2.22	0x459	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:02.778721094 CEST	8.8.8.8	192.168.2.22	0x3bef	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:02.810926914 CEST	8.8.8.8	192.168.2.22	0x8016	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:02.821845055 CEST	8.8.8.8	192.168.2.22	0xaf19	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:02.832942009 CEST	8.8.8.8	192.168.2.22	0xb34a	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:02.844333887 CEST	8.8.8.8	192.168.2.22	0x5426	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:02.855189085 CEST	8.8.8.8	192.168.2.22	0x3013	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:02.866035938 CEST	8.8.8.8	192.168.2.22	0xfca4	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:02.877437115 CEST	8.8.8.8	192.168.2.22	0xc811	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:02.888044119 CEST	8.8.8.8	192.168.2.22	0x7626	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:02.899101019 CEST	8.8.8.8	192.168.2.22	0x175e	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:02.909594059 CEST	8.8.8.8	192.168.2.22	0x631c	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:02.919487000 CEST	8.8.8.8	192.168.2.22	0x6b08	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:02.931926012 CEST	8.8.8.8	192.168.2.22	0x1986	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:02.942667007 CEST	8.8.8.8	192.168.2.22	0x1364	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:02.953212976 CEST	8.8.8.8	192.168.2.22	0x8515	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:02.963612080 CEST	8.8.8.8	192.168.2.22	0xeee5	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:02.976064920 CEST	8.8.8.8	192.168.2.22	0x6b9f	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:02.988569021 CEST	8.8.8.8	192.168.2.22	0xed6b	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:02.999742985 CEST	8.8.8.8	192.168.2.22	0x1eb0	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:03.011996031 CEST	8.8.8.8	192.168.2.22	0x4b6a	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:03.023500919 CEST	8.8.8.8	192.168.2.22	0xcfa5	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:03.036756039 CEST	8.8.8.8	192.168.2.22	0xb052	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:03.047213078 CEST	8.8.8.8	192.168.2.22	0xbe73	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:03.056663990 CEST	8.8.8.8	192.168.2.22	0x30f0	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:03.067770958 CEST	8.8.8.8	192.168.2.22	0x8720	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:03.078303099 CEST	8.8.8.8	192.168.2.22	0x4ba2	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:03.088884115 CEST	8.8.8.8	192.168.2.22	0xec9b	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:03.101332903 CEST	8.8.8.8	192.168.2.22	0x5573	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:03.111455917 CEST	8.8.8.8	192.168.2.22	0xf8e	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:03.148710012 CEST	8.8.8.8	192.168.2.22	0xa26d	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:03.198710918 CEST	8.8.8.8	192.168.2.22	0xadb3	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:03.210942984 CEST	8.8.8.8	192.168.2.22	0xd8ba	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:03.222395897 CEST	8.8.8.8	192.168.2.22	0xb5c2	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:03.232626915 CEST	8.8.8.8	192.168.2.22	0x20d7	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:03.248091936 CEST	8.8.8.8	192.168.2.22	0x684c	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:03.263946056 CEST	8.8.8.8	192.168.2.22	0xf26d	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:03.274043083 CEST	8.8.8.8	192.168.2.22	0xa9c7	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:03.283832073 CEST	8.8.8.8	192.168.2.22	0xb473	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:03.298098087 CEST	8.8.8.8	192.168.2.22	0x1ca0	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:03.308967113 CEST	8.8.8.8	192.168.2.22	0x8bf6	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:03.318780899 CEST	8.8.8.8	192.168.2.22	0xa1cf	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:03.328932047 CEST	8.8.8.8	192.168.2.22	0xe7	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:03.340303898 CEST	8.8.8.8	192.168.2.22	0xe795	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:03.356813908 CEST	8.8.8.8	192.168.2.22	0x39e3	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:03.368458033 CEST	8.8.8.8	192.168.2.22	0x102c	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:03.379369974 CEST	8.8.8.8	192.168.2.22	0x9010	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:03.389261007 CEST	8.8.8.8	192.168.2.22	0xe86b	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:03.400716066 CEST	8.8.8.8	192.168.2.22	0x4f4b	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:03.412991047 CEST	8.8.8.8	192.168.2.22	0x84db	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:03.426884890 CEST	8.8.8.8	192.168.2.22	0xb823	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:03.897125959 CEST	8.8.8.8	192.168.2.22	0xdced	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:03.919501066 CEST	8.8.8.8	192.168.2.22	0xa630	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:03.930510044 CEST	8.8.8.8	192.168.2.22	0x5514	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:03.944353104 CEST	8.8.8.8	192.168.2.22	0x6122	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:03.955681086 CEST	8.8.8.8	192.168.2.22	0xa69e	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:03.965572119 CEST	8.8.8.8	192.168.2.22	0xd94	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:03.976866007 CEST	8.8.8.8	192.168.2.22	0x5468	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:03.988478899 CEST	8.8.8.8	192.168.2.22	0x5994	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:04.000333071 CEST	8.8.8.8	192.168.2.22	0xe938	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:04.011769056 CEST	8.8.8.8	192.168.2.22	0xbf9a	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:04.023374081 CEST	8.8.8.8	192.168.2.22	0x938e	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:04.036082983 CEST	8.8.8.8	192.168.2.22	0xa4b6	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:04.049700022 CEST	8.8.8.8	192.168.2.22	0x79a0	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:04.065396070 CEST	8.8.8.8	192.168.2.22	0x45c7	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:04.076556921 CEST	8.8.8.8	192.168.2.22	0xad5	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:04.376935005 CEST	8.8.8.8	192.168.2.22	0xe668	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:04.386858940 CEST	8.8.8.8	192.168.2.22	0x9139	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:04.398356915 CEST	8.8.8.8	192.168.2.22	0x242f	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:04.408150911 CEST	8.8.8.8	192.168.2.22	0xd7d0	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:04.418023109 CEST	8.8.8.8	192.168.2.22	0x2d0d	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:04.428410053 CEST	8.8.8.8	192.168.2.22	0xf785	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:04.438564062 CEST	8.8.8.8	192.168.2.22	0x2486	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:04.448291063 CEST	8.8.8.8	192.168.2.22	0xb31c	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:04.458847046 CEST	8.8.8.8	192.168.2.22	0xba8f	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:04.469403028 CEST	8.8.8.8	192.168.2.22	0x4c77	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:04.481300116 CEST	8.8.8.8	192.168.2.22	0x22e5	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:04.513355970 CEST	8.8.8.8	192.168.2.22	0xb02a	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:04.523816109 CEST	8.8.8.8	192.168.2.22	0x8474	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:04.534406900 CEST	8.8.8.8	192.168.2.22	0x5b9d	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:04.544596910 CEST	8.8.8.8	192.168.2.22	0xc246	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:04.554796934 CEST	8.8.8.8	192.168.2.22	0x79a9	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:04.574405909 CEST	8.8.8.8	192.168.2.22	0x989e	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:04.584804058 CEST	8.8.8.8	192.168.2.22	0xf078	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:04.595129967 CEST	8.8.8.8	192.168.2.22	0x6d9a	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:04.606467962 CEST	8.8.8.8	192.168.2.22	0xf088	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:04.621995926 CEST	8.8.8.8	192.168.2.22	0x8dcf	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:04.631874084 CEST	8.8.8.8	192.168.2.22	0x507c	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:04.643007994 CEST	8.8.8.8	192.168.2.22	0x912f	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:04.654452085 CEST	8.8.8.8	192.168.2.22	0xae15	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:04.664170980 CEST	8.8.8.8	192.168.2.22	0x4a	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:04.674398899 CEST	8.8.8.8	192.168.2.22	0x7a3f	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:04.690460920 CEST	8.8.8.8	192.168.2.22	0xb738	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:04.703000069 CEST	8.8.8.8	192.168.2.22	0xcb02	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:04.716012001 CEST	8.8.8.8	192.168.2.22	0x1ca0	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:04.727483988 CEST	8.8.8.8	192.168.2.22	0xba9	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:04.741488934 CEST	8.8.8.8	192.168.2.22	0xce6a	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:04.753451109 CEST	8.8.8.8	192.168.2.22	0xf2d1	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:04.768074036 CEST	8.8.8.8	192.168.2.22	0xe1de	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:04.779339075 CEST	8.8.8.8	192.168.2.22	0x15d9	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:04.790126085 CEST	8.8.8.8	192.168.2.22	0x3241	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:04.801362991 CEST	8.8.8.8	192.168.2.22	0xb93a	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:04.814338923 CEST	8.8.8.8	192.168.2.22	0x3f60	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:04.826756001 CEST	8.8.8.8	192.168.2.22	0x27f4	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:04.863542080 CEST	8.8.8.8	192.168.2.22	0x6a5b	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:04.876548052 CEST	8.8.8.8	192.168.2.22	0x22c5	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:04.894440889 CEST	8.8.8.8	192.168.2.22	0xfc6d	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:04.910430908 CEST	8.8.8.8	192.168.2.22	0x53a	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:04.923578024 CEST	8.8.8.8	192.168.2.22	0x9f53	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:04.936510086 CEST	8.8.8.8	192.168.2.22	0x7935	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:04.949297905 CEST	8.8.8.8	192.168.2.22	0xd221	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:04.962668896 CEST	8.8.8.8	192.168.2.22	0x142a	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:04.975045919 CEST	8.8.8.8	192.168.2.22	0xb02a	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:04.986947060 CEST	8.8.8.8	192.168.2.22	0x9d31	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:04.998634100 CEST	8.8.8.8	192.168.2.22	0x908d	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:05.011889935 CEST	8.8.8.8	192.168.2.22	0xee56	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:05.027825117 CEST	8.8.8.8	192.168.2.22	0x62aa	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:05.043627024 CEST	8.8.8.8	192.168.2.22	0x5c46	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:05.072067976 CEST	8.8.8.8	192.168.2.22	0xd91f	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:05.083774090 CEST	8.8.8.8	192.168.2.22	0xa637	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:05.099315882 CEST	8.8.8.8	192.168.2.22	0x9825	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:05.112245083 CEST	8.8.8.8	192.168.2.22	0x7b1a	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:05.123872042 CEST	8.8.8.8	192.168.2.22	0xfe1c	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:05.134886980 CEST	8.8.8.8	192.168.2.22	0xe38a	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:05.146970987 CEST	8.8.8.8	192.168.2.22	0x2c47	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:05.159235001 CEST	8.8.8.8	192.168.2.22	0x327f	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:05.210262060 CEST	8.8.8.8	192.168.2.22	0x6669	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:05.545358896 CEST	8.8.8.8	192.168.2.22	0x27cc	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:05.555808067 CEST	8.8.8.8	192.168.2.22	0xeb0d	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:05.567003965 CEST	8.8.8.8	192.168.2.22	0xf71b	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:05.578289986 CEST	8.8.8.8	192.168.2.22	0xb7c	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:05.589756012 CEST	8.8.8.8	192.168.2.22	0xeac5	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:05.601581097 CEST	8.8.8.8	192.168.2.22	0x7e9f	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:05.616164923 CEST	8.8.8.8	192.168.2.22	0xc6a2	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:05.634381056 CEST	8.8.8.8	192.168.2.22	0x70a4	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:05.643898010 CEST	8.8.8.8	192.168.2.22	0xc452	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:05.653363943 CEST	8.8.8.8	192.168.2.22	0xb258	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:05.662944078 CEST	8.8.8.8	192.168.2.22	0xb7d6	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:05.677589893 CEST	8.8.8.8	192.168.2.22	0xa747	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:05.695362091 CEST	8.8.8.8	192.168.2.22	0x15bd	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:05.706733942 CEST	8.8.8.8	192.168.2.22	0xd092	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:05.718106031 CEST	8.8.8.8	192.168.2.22	0x4199	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:05.733164072 CEST	8.8.8.8	192.168.2.22	0xb92b	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:05.743262053 CEST	8.8.8.8	192.168.2.22	0x9b9f	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:05.759339094 CEST	8.8.8.8	192.168.2.22	0xf671	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:05.769479990 CEST	8.8.8.8	192.168.2.22	0x6505	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:05.781610966 CEST	8.8.8.8	192.168.2.22	0xf050	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:05.791090965 CEST	8.8.8.8	192.168.2.22	0x507e	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:05.801564932 CEST	8.8.8.8	192.168.2.22	0x4d07	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:05.812916040 CEST	8.8.8.8	192.168.2.22	0x3183	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:05.826221943 CEST	8.8.8.8	192.168.2.22	0xb26d	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:05.836967945 CEST	8.8.8.8	192.168.2.22	0x316a	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:06.046195984 CEST	8.8.8.8	192.168.2.22	0xe5d3	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:06.080899954 CEST	8.8.8.8	192.168.2.22	0x2887	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:06.109963894 CEST	8.8.8.8	192.168.2.22	0xd468	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:06.174355984 CEST	8.8.8.8	192.168.2.22	0xcb08	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:06.189243078 CEST	8.8.8.8	192.168.2.22	0x75d9	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:06.589648008 CEST	8.8.8.8	192.168.2.22	0x864	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:06.679553986 CEST	8.8.8.8	192.168.2.22	0x8d74	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:06.731650114 CEST	8.8.8.8	192.168.2.22	0x4568	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:06.770500898 CEST	8.8.8.8	192.168.2.22	0xd2f	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:06.784796953 CEST	8.8.8.8	192.168.2.22	0x3807	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:06.800931931 CEST	8.8.8.8	192.168.2.22	0x3427	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:06.848577976 CEST	8.8.8.8	192.168.2.22	0x20f6	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:06.872155905 CEST	8.8.8.8	192.168.2.22	0x45d8	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:06.912607908 CEST	8.8.8.8	192.168.2.22	0xa86f	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:06.926507950 CEST	8.8.8.8	192.168.2.22	0x5720	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:06.935879946 CEST	8.8.8.8	192.168.2.22	0x3bcc	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:06.946811914 CEST	8.8.8.8	192.168.2.22	0x6024	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:06.957457066 CEST	8.8.8.8	192.168.2.22	0x8524	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:06.967211962 CEST	8.8.8.8	192.168.2.22	0x2586	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:06.976691961 CEST	8.8.8.8	192.168.2.22	0x58df	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:06.987071037 CEST	8.8.8.8	192.168.2.22	0x141f	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:06.997220039 CEST	8.8.8.8	192.168.2.22	0x59be	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:07.007047892 CEST	8.8.8.8	192.168.2.22	0xe84	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:07.015965939 CEST	8.8.8.8	192.168.2.22	0xeee8	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:07.025640965 CEST	8.8.8.8	192.168.2.22	0x751	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:07.034728050 CEST	8.8.8.8	192.168.2.22	0x3cf5	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:07.044049025 CEST	8.8.8.8	192.168.2.22	0x81f1	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:07.056338072 CEST	8.8.8.8	192.168.2.22	0x5c54	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:07.065896988 CEST	8.8.8.8	192.168.2.22	0x5bac	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:07.075975895 CEST	8.8.8.8	192.168.2.22	0x9807	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:07.086066961 CEST	8.8.8.8	192.168.2.22	0xbe4	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:07.095999002 CEST	8.8.8.8	192.168.2.22	0xc076	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:07.105099916 CEST	8.8.8.8	192.168.2.22	0x3480	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:07.114267111 CEST	8.8.8.8	192.168.2.22	0x9e0e	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:07.126980066 CEST	8.8.8.8	192.168.2.22	0xe66a	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:07.139375925 CEST	8.8.8.8	192.168.2.22	0x7dd	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:07.153902054 CEST	8.8.8.8	192.168.2.22	0xaee2	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:07.165268898 CEST	8.8.8.8	192.168.2.22	0xa618	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:07.175112009 CEST	8.8.8.8	192.168.2.22	0xf90b	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:07.185472012 CEST	8.8.8.8	192.168.2.22	0x62c1	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:07.195044041 CEST	8.8.8.8	192.168.2.22	0x5421	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:07.204058886 CEST	8.8.8.8	192.168.2.22	0x9108	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:07.213423014 CEST	8.8.8.8	192.168.2.22	0xdea8	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:07.223490953 CEST	8.8.8.8	192.168.2.22	0xe6c6	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:07.233418941 CEST	8.8.8.8	192.168.2.22	0xdad8	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:07.247340918 CEST	8.8.8.8	192.168.2.22	0x1724	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:07.257572889 CEST	8.8.8.8	192.168.2.22	0x5cf3	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:07.267343998 CEST	8.8.8.8	192.168.2.22	0x5358	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:07.276845932 CEST	8.8.8.8	192.168.2.22	0x718e	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:07.286864042 CEST	8.8.8.8	192.168.2.22	0xc300	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:07.298899889 CEST	8.8.8.8	192.168.2.22	0x44a6	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:07.310717106 CEST	8.8.8.8	192.168.2.22	0xc163	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:07.322889090 CEST	8.8.8.8	192.168.2.22	0x4015	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:07.333882093 CEST	8.8.8.8	192.168.2.22	0xbe15	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:07.346626043 CEST	8.8.8.8	192.168.2.22	0x90f4	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:07.359293938 CEST	8.8.8.8	192.168.2.22	0xcd42	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:07.372505903 CEST	8.8.8.8	192.168.2.22	0x5e03	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:07.383544922 CEST	8.8.8.8	192.168.2.22	0x7573	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:07.395411968 CEST	8.8.8.8	192.168.2.22	0xe388	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:07.407248020 CEST	8.8.8.8	192.168.2.22	0x6e25	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:07.419029951 CEST	8.8.8.8	192.168.2.22	0xaf96	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:07.431737900 CEST	8.8.8.8	192.168.2.22	0x5a91	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:07.446255922 CEST	8.8.8.8	192.168.2.22	0x5492	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:07.457508087 CEST	8.8.8.8	192.168.2.22	0xa8c9	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:07.471158028 CEST	8.8.8.8	192.168.2.22	0x83e	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:07.483130932 CEST	8.8.8.8	192.168.2.22	0x4e22	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:07.493992090 CEST	8.8.8.8	192.168.2.22	0x8910	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:07.528074026 CEST	8.8.8.8	192.168.2.22	0x55ad	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:07.541228056 CEST	8.8.8.8	192.168.2.22	0x9382	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:07.551894903 CEST	8.8.8.8	192.168.2.22	0x6832	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:07.562560081 CEST	8.8.8.8	192.168.2.22	0xb98	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:07.856759071 CEST	8.8.8.8	192.168.2.22	0xb193	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:07.990142107 CEST	8.8.8.8	192.168.2.22	0xe7f4	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:08.000380993 CEST	8.8.8.8	192.168.2.22	0x36e3	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:08.013027906 CEST	8.8.8.8	192.168.2.22	0x6f0d	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:08.025108099 CEST	8.8.8.8	192.168.2.22	0xbeeb	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:08.034126997 CEST	8.8.8.8	192.168.2.22	0xd346	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:08.044111967 CEST	8.8.8.8	192.168.2.22	0x17c9	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:08.054140091 CEST	8.8.8.8	192.168.2.22	0xd6a	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:08.063636065 CEST	8.8.8.8	192.168.2.22	0x63ed	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:08.074501991 CEST	8.8.8.8	192.168.2.22	0x4b58	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:08.087548018 CEST	8.8.8.8	192.168.2.22	0xf188	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:08.098579884 CEST	8.8.8.8	192.168.2.22	0xded	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:08.110169888 CEST	8.8.8.8	192.168.2.22	0x34d5	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:08.119087934 CEST	8.8.8.8	192.168.2.22	0x67f9	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:08.128465891 CEST	8.8.8.8	192.168.2.22	0xba8d	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:08.138997078 CEST	8.8.8.8	192.168.2.22	0xb599	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:08.149266958 CEST	8.8.8.8	192.168.2.22	0x6af8	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:08.161207914 CEST	8.8.8.8	192.168.2.22	0xf7c1	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:08.171143055 CEST	8.8.8.8	192.168.2.22	0xf2f2	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:08.181387901 CEST	8.8.8.8	192.168.2.22	0x7e86	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:08.190888882 CEST	8.8.8.8	192.168.2.22	0xa65c	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:08.201009989 CEST	8.8.8.8	192.168.2.22	0xc6b6	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:08.211517096 CEST	8.8.8.8	192.168.2.22	0xa137	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:08.221698046 CEST	8.8.8.8	192.168.2.22	0xcc1a	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:08.235470057 CEST	8.8.8.8	192.168.2.22	0x245c	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:08.245157957 CEST	8.8.8.8	192.168.2.22	0x5057	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:08.254388094 CEST	8.8.8.8	192.168.2.22	0x8727	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:08.264132023 CEST	8.8.8.8	192.168.2.22	0x37a2	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:08.273389101 CEST	8.8.8.8	192.168.2.22	0x769d	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:08.282999039 CEST	8.8.8.8	192.168.2.22	0x1a8a	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:08.292279005 CEST	8.8.8.8	192.168.2.22	0x6f3a	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:08.302944899 CEST	8.8.8.8	192.168.2.22	0x1735	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:08.314776897 CEST	8.8.8.8	192.168.2.22	0x8cb9	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:08.323904991 CEST	8.8.8.8	192.168.2.22	0x343d	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:08.333605051 CEST	8.8.8.8	192.168.2.22	0x647e	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:08.345119953 CEST	8.8.8.8	192.168.2.22	0xe34f	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:08.355532885 CEST	8.8.8.8	192.168.2.22	0x5d39	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:08.367646933 CEST	8.8.8.8	192.168.2.22	0x9e59	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:08.378420115 CEST	8.8.8.8	192.168.2.22	0x6427	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:08.392584085 CEST	8.8.8.8	192.168.2.22	0x9398	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:08.404618025 CEST	8.8.8.8	192.168.2.22	0x1232	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:08.417093039 CEST	8.8.8.8	192.168.2.22	0xcff6	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:08.427407980 CEST	8.8.8.8	192.168.2.22	0x41d3	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:08.437212944 CEST	8.8.8.8	192.168.2.22	0x5923	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:08.448497057 CEST	8.8.8.8	192.168.2.22	0x815b	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:08.460097075 CEST	8.8.8.8	192.168.2.22	0x3ec5	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:08.471880913 CEST	8.8.8.8	192.168.2.22	0x8c36	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:08.483241081 CEST	8.8.8.8	192.168.2.22	0xc927	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:08.494927883 CEST	8.8.8.8	192.168.2.22	0x4662	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:08.509576082 CEST	8.8.8.8	192.168.2.22	0x2444	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:08.521473885 CEST	8.8.8.8	192.168.2.22	0xb3e8	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:08.533572912 CEST	8.8.8.8	192.168.2.22	0x6aa9	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:08.545346022 CEST	8.8.8.8	192.168.2.22	0xe200	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:08.558090925 CEST	8.8.8.8	192.168.2.22	0x32ba	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:08.569401979 CEST	8.8.8.8	192.168.2.22	0xc444	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:08.581688881 CEST	8.8.8.8	192.168.2.22	0x3f9a	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:08.597752094 CEST	8.8.8.8	192.168.2.22	0x580c	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:08.648664951 CEST	8.8.8.8	192.168.2.22	0x5516	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:08.659425974 CEST	8.8.8.8	192.168.2.22	0xa428	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:08.669661999 CEST	8.8.8.8	192.168.2.22	0xa6fd	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:08.685532093 CEST	8.8.8.8	192.168.2.22	0x9ffc	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:08.726851940 CEST	8.8.8.8	192.168.2.22	0x236a	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:08.739131927 CEST	8.8.8.8	192.168.2.22	0xe5e9	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:08.751597881 CEST	8.8.8.8	192.168.2.22	0xa3ef	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:08.763240099 CEST	8.8.8.8	192.168.2.22	0xdfa8	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:08.774723053 CEST	8.8.8.8	192.168.2.22	0xc401	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:08.786241055 CEST	8.8.8.8	192.168.2.22	0x1193	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:08.798058987 CEST	8.8.8.8	192.168.2.22	0x91c5	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:08.809257030 CEST	8.8.8.8	192.168.2.22	0xb5f2	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:08.821755886 CEST	8.8.8.8	192.168.2.22	0x6530	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:08.844928026 CEST	8.8.8.8	192.168.2.22	0xb15c	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:08.857175112 CEST	8.8.8.8	192.168.2.22	0xc7f	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:08.867959976 CEST	8.8.8.8	192.168.2.22	0x5d91	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:08.878232956 CEST	8.8.8.8	192.168.2.22	0xff98	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:08.888920069 CEST	8.8.8.8	192.168.2.22	0x97f5	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:08.900651932 CEST	8.8.8.8	192.168.2.22	0x5dfc	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:08.910979986 CEST	8.8.8.8	192.168.2.22	0x36a6	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:08.921823978 CEST	8.8.8.8	192.168.2.22	0x9009	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:09.011584997 CEST	8.8.8.8	192.168.2.22	0xfcc6	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:09.029612064 CEST	8.8.8.8	192.168.2.22	0xecd4	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:09.075407982 CEST	8.8.8.8	192.168.2.22	0x56bd	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:09.097615957 CEST	8.8.8.8	192.168.2.22	0xac94	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:09.108587027 CEST	8.8.8.8	192.168.2.22	0x103	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:09.118285894 CEST	8.8.8.8	192.168.2.22	0x945d	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:09.127477884 CEST	8.8.8.8	192.168.2.22	0xd70f	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:09.137053013 CEST	8.8.8.8	192.168.2.22	0xae5c	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:09.154927015 CEST	8.8.8.8	192.168.2.22	0x9fa2	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:09.165093899 CEST	8.8.8.8	192.168.2.22	0xf1d6	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:09.174516916 CEST	8.8.8.8	192.168.2.22	0xc014	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:09.183933020 CEST	8.8.8.8	192.168.2.22	0xdb78	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:09.266138077 CEST	8.8.8.8	192.168.2.22	0x72e6	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:09.453980923 CEST	8.8.8.8	192.168.2.22	0x2a32	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:09.748023033 CEST	8.8.8.8	192.168.2.22	0x21f	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:10.034545898 CEST	8.8.8.8	192.168.2.22	0x14fd	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:10.090157986 CEST	8.8.8.8	192.168.2.22	0x7ff8	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:10.156220913 CEST	8.8.8.8	192.168.2.22	0xda7c	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:10.165916920 CEST	8.8.8.8	192.168.2.22	0x8dc3	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:10.178009033 CEST	8.8.8.8	192.168.2.22	0xc0ef	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:10.188019037 CEST	8.8.8.8	192.168.2.22	0x8cbf	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:10.198504925 CEST	8.8.8.8	192.168.2.22	0x58e5	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:10.208867073 CEST	8.8.8.8	192.168.2.22	0xc99c	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:11.267560959 CEST	8.8.8.8	192.168.2.22	0x830e	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:11.267800093 CEST	8.8.8.8	192.168.2.22	0x830e	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:11.509743929 CEST	8.8.8.8	192.168.2.22	0x4f6b	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:11.519943953 CEST	8.8.8.8	192.168.2.22	0x199a	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:11.529846907 CEST	8.8.8.8	192.168.2.22	0x63fa	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:11.539108992 CEST	8.8.8.8	192.168.2.22	0x54e3	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:11.554987907 CEST	8.8.8.8	192.168.2.22	0x2a46	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:11.564654112 CEST	8.8.8.8	192.168.2.22	0x4fd3	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:11.585134983 CEST	8.8.8.8	192.168.2.22	0x2596	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:11.595402956 CEST	8.8.8.8	192.168.2.22	0xa21d	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:11.605103970 CEST	8.8.8.8	192.168.2.22	0xb97b	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:11.616503954 CEST	8.8.8.8	192.168.2.22	0x6e4	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:11.626408100 CEST	8.8.8.8	192.168.2.22	0x6f70	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:11.636581898 CEST	8.8.8.8	192.168.2.22	0xed60	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:11.647001982 CEST	8.8.8.8	192.168.2.22	0x1a1b	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:11.658240080 CEST	8.8.8.8	192.168.2.22	0x8e22	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:11.670622110 CEST	8.8.8.8	192.168.2.22	0x16c7	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:11.682174921 CEST	8.8.8.8	192.168.2.22	0xcfb8	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:11.695956945 CEST	8.8.8.8	192.168.2.22	0xa098	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:11.705215931 CEST	8.8.8.8	192.168.2.22	0xcee1	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:11.738369942 CEST	8.8.8.8	192.168.2.22	0x94da	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:11.750046968 CEST	8.8.8.8	192.168.2.22	0x8aa0	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:11.768007994 CEST	8.8.8.8	192.168.2.22	0x2015	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:11.779232025 CEST	8.8.8.8	192.168.2.22	0xc236	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:11.788094997 CEST	8.8.8.8	192.168.2.22	0xe9d5	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:11.798469067 CEST	8.8.8.8	192.168.2.22	0x36c	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:11.808831930 CEST	8.8.8.8	192.168.2.22	0x5bac	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:11.818285942 CEST	8.8.8.8	192.168.2.22	0x4d1	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:11.829904079 CEST	8.8.8.8	192.168.2.22	0xa9d1	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:11.839462996 CEST	8.8.8.8	192.168.2.22	0xbc58	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:11.848814011 CEST	8.8.8.8	192.168.2.22	0xcb54	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:11.858629942 CEST	8.8.8.8	192.168.2.22	0xb5e9	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:11.867090940 CEST	8.8.8.8	192.168.2.22	0x9893	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:11.875941038 CEST	8.8.8.8	192.168.2.22	0x75eb	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:11.884942055 CEST	8.8.8.8	192.168.2.22	0xd2cb	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:11.894289970 CEST	8.8.8.8	192.168.2.22	0x8375	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:11.903353930 CEST	8.8.8.8	192.168.2.22	0xea1a	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:11.912822008 CEST	8.8.8.8	192.168.2.22	0xad56	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:11.921565056 CEST	8.8.8.8	192.168.2.22	0xf7ea	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:11.931024075 CEST	8.8.8.8	192.168.2.22	0x87a5	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:11.942349911 CEST	8.8.8.8	192.168.2.22	0x3f9b	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:11.951462984 CEST	8.8.8.8	192.168.2.22	0xee26	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:11.960251093 CEST	8.8.8.8	192.168.2.22	0xec6c	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:11.970300913 CEST	8.8.8.8	192.168.2.22	0x2cb8	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:11.981554985 CEST	8.8.8.8	192.168.2.22	0xc85c	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:11.992712975 CEST	8.8.8.8	192.168.2.22	0xee33	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:12.004038095 CEST	8.8.8.8	192.168.2.22	0x4e03	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:12.014076948 CEST	8.8.8.8	192.168.2.22	0xc98	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:12.026026011 CEST	8.8.8.8	192.168.2.22	0x7ea5	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:12.037667036 CEST	8.8.8.8	192.168.2.22	0xd4d5	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:12.048079014 CEST	8.8.8.8	192.168.2.22	0x8df9	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:12.091599941 CEST	8.8.8.8	192.168.2.22	0xa02c	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:12.102507114 CEST	8.8.8.8	192.168.2.22	0x6a0b	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:12.114356041 CEST	8.8.8.8	192.168.2.22	0xed70	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:12.124603033 CEST	8.8.8.8	192.168.2.22	0x4de0	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:12.134749889 CEST	8.8.8.8	192.168.2.22	0xcb9f	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:12.145337105 CEST	8.8.8.8	192.168.2.22	0x78d	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:12.155726910 CEST	8.8.8.8	192.168.2.22	0x26de	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:12.194873095 CEST	8.8.8.8	192.168.2.22	0x2d30	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:12.212093115 CEST	8.8.8.8	192.168.2.22	0xcdcc	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:12.233925104 CEST	8.8.8.8	192.168.2.22	0xd44	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:12.251444101 CEST	8.8.8.8	192.168.2.22	0x583e	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:12.272533894 CEST	8.8.8.8	192.168.2.22	0x7e6a	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:12.284332991 CEST	8.8.8.8	192.168.2.22	0xf6b	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:12.852117062 CEST	8.8.8.8	192.168.2.22	0x6223	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:13.009912968 CEST	8.8.8.8	192.168.2.22	0xa409	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:13.173218966 CEST	8.8.8.8	192.168.2.22	0x74c6	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:13.183659077 CEST	8.8.8.8	192.168.2.22	0x4e87	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:13.193145037 CEST	8.8.8.8	192.168.2.22	0x5fba	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:13.202155113 CEST	8.8.8.8	192.168.2.22	0x1a94	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:13.211410999 CEST	8.8.8.8	192.168.2.22	0x259d	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:13.221885920 CEST	8.8.8.8	192.168.2.22	0xb6f4	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:13.231477022 CEST	8.8.8.8	192.168.2.22	0xd28d	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:13.241079092 CEST	8.8.8.8	192.168.2.22	0x216d	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:13.250955105 CEST	8.8.8.8	192.168.2.22	0x9a88	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:13.260416031 CEST	8.8.8.8	192.168.2.22	0x6530	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:13.272933006 CEST	8.8.8.8	192.168.2.22	0xa5de	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:13.282157898 CEST	8.8.8.8	192.168.2.22	0x5c35	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:13.291798115 CEST	8.8.8.8	192.168.2.22	0x61f9	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:13.301050901 CEST	8.8.8.8	192.168.2.22	0xb58c	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:13.310240984 CEST	8.8.8.8	192.168.2.22	0xa335	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:13.320337057 CEST	8.8.8.8	192.168.2.22	0x3aa1	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:13.329212904 CEST	8.8.8.8	192.168.2.22	0xd350	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:13.338834047 CEST	8.8.8.8	192.168.2.22	0x828a	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:13.348185062 CEST	8.8.8.8	192.168.2.22	0xedd	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:13.357769966 CEST	8.8.8.8	192.168.2.22	0x7f49	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:13.367100954 CEST	8.8.8.8	192.168.2.22	0x98fd	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:13.376466990 CEST	8.8.8.8	192.168.2.22	0xf4be	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:13.387799978 CEST	8.8.8.8	192.168.2.22	0x27d	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:13.396677971 CEST	8.8.8.8	192.168.2.22	0x1fa8	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:13.406399965 CEST	8.8.8.8	192.168.2.22	0xd031	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:13.416693926 CEST	8.8.8.8	192.168.2.22	0xc07f	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:13.428009033 CEST	8.8.8.8	192.168.2.22	0x16ac	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:13.437944889 CEST	8.8.8.8	192.168.2.22	0x81fb	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:13.447685003 CEST	8.8.8.8	192.168.2.22	0xc38a	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:13.456980944 CEST	8.8.8.8	192.168.2.22	0x1a9a	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:13.466761112 CEST	8.8.8.8	192.168.2.22	0xb6b6	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:13.481729031 CEST	8.8.8.8	192.168.2.22	0x5232	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:13.491929054 CEST	8.8.8.8	192.168.2.22	0x6c13	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:13.506263971 CEST	8.8.8.8	192.168.2.22	0xae33	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:13.518342972 CEST	8.8.8.8	192.168.2.22	0xfc56	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:13.530073881 CEST	8.8.8.8	192.168.2.22	0x1ed2	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:13.542618036 CEST	8.8.8.8	192.168.2.22	0x8faf	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:13.556019068 CEST	8.8.8.8	192.168.2.22	0xd624	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:13.576992989 CEST	8.8.8.8	192.168.2.22	0x2b6e	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:13.634982109 CEST	8.8.8.8	192.168.2.22	0x931d	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:13.745805979 CEST	8.8.8.8	192.168.2.22	0xd70d	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:13.765783072 CEST	8.8.8.8	192.168.2.22	0xb084	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:14.138633013 CEST	8.8.8.8	192.168.2.22	0x6659	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:14.150237083 CEST	8.8.8.8	192.168.2.22	0xe731	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:14.182671070 CEST	8.8.8.8	192.168.2.22	0xfce8	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:14.192414999 CEST	8.8.8.8	192.168.2.22	0xa1a9	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:14.201817036 CEST	8.8.8.8	192.168.2.22	0x9ce9	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:14.211477995 CEST	8.8.8.8	192.168.2.22	0x94c8	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:14.221066952 CEST	8.8.8.8	192.168.2.22	0x3d2e	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:14.230798960 CEST	8.8.8.8	192.168.2.22	0x674b	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:14.240520000 CEST	8.8.8.8	192.168.2.22	0x9c5c	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:14.249998093 CEST	8.8.8.8	192.168.2.22	0xe70b	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:14.259372950 CEST	8.8.8.8	192.168.2.22	0x843d	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:14.269963980 CEST	8.8.8.8	192.168.2.22	0xf98e	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:14.279333115 CEST	8.8.8.8	192.168.2.22	0xb86f	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:14.288570881 CEST	8.8.8.8	192.168.2.22	0xe5d	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:14.298216105 CEST	8.8.8.8	192.168.2.22	0x4992	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:14.309298038 CEST	8.8.8.8	192.168.2.22	0xe19a	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:14.319125891 CEST	8.8.8.8	192.168.2.22	0x779d	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:14.328385115 CEST	8.8.8.8	192.168.2.22	0x3fd1	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:14.337526083 CEST	8.8.8.8	192.168.2.22	0x3e94	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:14.349263906 CEST	8.8.8.8	192.168.2.22	0xdbd	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:14.358197927 CEST	8.8.8.8	192.168.2.22	0x3619	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:14.368581057 CEST	8.8.8.8	192.168.2.22	0x734	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:14.377794027 CEST	8.8.8.8	192.168.2.22	0xc8d8	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:14.386990070 CEST	8.8.8.8	192.168.2.22	0x7f0e	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:14.396111012 CEST	8.8.8.8	192.168.2.22	0x3443	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:14.406469107 CEST	8.8.8.8	192.168.2.22	0xd98f	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:14.415962934 CEST	8.8.8.8	192.168.2.22	0xd6f9	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:14.426188946 CEST	8.8.8.8	192.168.2.22	0x7c4	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:14.436578989 CEST	8.8.8.8	192.168.2.22	0x9f5c	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:14.445774078 CEST	8.8.8.8	192.168.2.22	0x81a1	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:14.455770016 CEST	8.8.8.8	192.168.2.22	0xb5e2	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:14.465277910 CEST	8.8.8.8	192.168.2.22	0x44bc	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:14.474854946 CEST	8.8.8.8	192.168.2.22	0x8465	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:14.484766960 CEST	8.8.8.8	192.168.2.22	0x759e	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:14.494400978 CEST	8.8.8.8	192.168.2.22	0x4461	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:14.503249884 CEST	8.8.8.8	192.168.2.22	0x3d23	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:14.513839960 CEST	8.8.8.8	192.168.2.22	0xa13f	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:14.523277044 CEST	8.8.8.8	192.168.2.22	0x6998	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:14.532521963 CEST	8.8.8.8	192.168.2.22	0x423d	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:14.541851044 CEST	8.8.8.8	192.168.2.22	0xae91	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:14.552481890 CEST	8.8.8.8	192.168.2.22	0x6278	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:14.561857939 CEST	8.8.8.8	192.168.2.22	0x6ed7	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:14.570975065 CEST	8.8.8.8	192.168.2.22	0xd9e3	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:14.580415964 CEST	8.8.8.8	192.168.2.22	0xff73	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:14.591886997 CEST	8.8.8.8	192.168.2.22	0x561f	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:14.602128983 CEST	8.8.8.8	192.168.2.22	0xa219	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:14.612759113 CEST	8.8.8.8	192.168.2.22	0x83f6	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:14.625278950 CEST	8.8.8.8	192.168.2.22	0xd0b2	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:14.635916948 CEST	8.8.8.8	192.168.2.22	0x10b5	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:14.646126986 CEST	8.8.8.8	192.168.2.22	0x181f	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:14.656996965 CEST	8.8.8.8	192.168.2.22	0x5ee9	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:14.667483091 CEST	8.8.8.8	192.168.2.22	0xa8c4	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:14.677700043 CEST	8.8.8.8	192.168.2.22	0x7a79	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:14.689532995 CEST	8.8.8.8	192.168.2.22	0xfa6d	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:14.700567961 CEST	8.8.8.8	192.168.2.22	0x5d9c	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:14.719867945 CEST	8.8.8.8	192.168.2.22	0x564c	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:14.732840061 CEST	8.8.8.8	192.168.2.22	0xed2b	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:14.745096922 CEST	8.8.8.8	192.168.2.22	0xb11b	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:14.756582022 CEST	8.8.8.8	192.168.2.22	0x9232	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:14.767091036 CEST	8.8.8.8	192.168.2.22	0xae32	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:14.777555943 CEST	8.8.8.8	192.168.2.22	0x7fcb	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:14.788619041 CEST	8.8.8.8	192.168.2.22	0x8fd4	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:14.798868895 CEST	8.8.8.8	192.168.2.22	0xb457	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:14.810269117 CEST	8.8.8.8	192.168.2.22	0x2aa7	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:14.829215050 CEST	8.8.8.8	192.168.2.22	0xe890	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:14.839704990 CEST	8.8.8.8	192.168.2.22	0xe16c	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:14.881140947 CEST	8.8.8.8	192.168.2.22	0x4d1b	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:14.892266989 CEST	8.8.8.8	192.168.2.22	0xf481	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:14.903100967 CEST	8.8.8.8	192.168.2.22	0xf9ff	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:14.917880058 CEST	8.8.8.8	192.168.2.22	0x27f4	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:14.928859949 CEST	8.8.8.8	192.168.2.22	0x80c5	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:14.946681976 CEST	8.8.8.8	192.168.2.22	0xc291	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:14.956659079 CEST	8.8.8.8	192.168.2.22	0x5d79	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:14.969372988 CEST	8.8.8.8	192.168.2.22	0xa725	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:14.979300976 CEST	8.8.8.8	192.168.2.22	0x690	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:14.989986897 CEST	8.8.8.8	192.168.2.22	0xb565	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:15.002118111 CEST	8.8.8.8	192.168.2.22	0x85c9	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:15.012877941 CEST	8.8.8.8	192.168.2.22	0xf6f9	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:15.038394928 CEST	8.8.8.8	192.168.2.22	0x53cc	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:15.051069021 CEST	8.8.8.8	192.168.2.22	0x54c8	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:15.062031031 CEST	8.8.8.8	192.168.2.22	0x7666	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:15.071737051 CEST	8.8.8.8	192.168.2.22	0x4c88	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:15.083230972 CEST	8.8.8.8	192.168.2.22	0xf839	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:15.095881939 CEST	8.8.8.8	192.168.2.22	0xdba0	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:15.113189936 CEST	8.8.8.8	192.168.2.22	0x2b19	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:15.123497009 CEST	8.8.8.8	192.168.2.22	0x8158	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:15.134237051 CEST	8.8.8.8	192.168.2.22	0x98a0	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:15.147398949 CEST	8.8.8.8	192.168.2.22	0x3a1	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:15.157485008 CEST	8.8.8.8	192.168.2.22	0xa93a	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:15.167577982 CEST	8.8.8.8	192.168.2.22	0x8ac2	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:15.178392887 CEST	8.8.8.8	192.168.2.22	0x31f0	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:15.245913982 CEST	8.8.8.8	192.168.2.22	0x77a9	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:15.267556906 CEST	8.8.8.8	192.168.2.22	0xcb10	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:15.285434008 CEST	8.8.8.8	192.168.2.22	0xfbd	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:15.304892063 CEST	8.8.8.8	192.168.2.22	0xe9e3	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:15.325922966 CEST	8.8.8.8	192.168.2.22	0x94d3	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:15.338493109 CEST	8.8.8.8	192.168.2.22	0xaa06	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:15.364712954 CEST	8.8.8.8	192.168.2.22	0xe7b6	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:15.410197973 CEST	8.8.8.8	192.168.2.22	0x3b1d	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:15.423327923 CEST	8.8.8.8	192.168.2.22	0x2fcf	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:15.432614088 CEST	8.8.8.8	192.168.2.22	0x6bd8	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:15.442042112 CEST	8.8.8.8	192.168.2.22	0x500f	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:15.513557911 CEST	8.8.8.8	192.168.2.22	0x5518	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:16.643011093 CEST	8.8.8.8	192.168.2.22	0x7c7c	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:16.653552055 CEST	8.8.8.8	192.168.2.22	0x8b07	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:16.663566113 CEST	8.8.8.8	192.168.2.22	0x60fc	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:16.673032045 CEST	8.8.8.8	192.168.2.22	0xaab3	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:16.682406902 CEST	8.8.8.8	192.168.2.22	0x7dde	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:16.692903042 CEST	8.8.8.8	192.168.2.22	0xa654	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:16.702955961 CEST	8.8.8.8	192.168.2.22	0x9716	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:16.714979887 CEST	8.8.8.8	192.168.2.22	0x7b83	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:16.726300955 CEST	8.8.8.8	192.168.2.22	0x9770	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:16.736023903 CEST	8.8.8.8	192.168.2.22	0xa866	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:16.746026039 CEST	8.8.8.8	192.168.2.22	0x92a0	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:16.756007910 CEST	8.8.8.8	192.168.2.22	0x1377	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:16.766119003 CEST	8.8.8.8	192.168.2.22	0x7b62	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:16.776608944 CEST	8.8.8.8	192.168.2.22	0xa11b	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:16.787183046 CEST	8.8.8.8	192.168.2.22	0xb7cb	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:16.796251059 CEST	8.8.8.8	192.168.2.22	0xd50e	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:16.807437897 CEST	8.8.8.8	192.168.2.22	0xee15	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:16.817934990 CEST	8.8.8.8	192.168.2.22	0x8833	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:16.829139948 CEST	8.8.8.8	192.168.2.22	0xc43d	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:16.839652061 CEST	8.8.8.8	192.168.2.22	0x1c44	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:16.850908041 CEST	8.8.8.8	192.168.2.22	0xf828	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:16.861165047 CEST	8.8.8.8	192.168.2.22	0x85aa	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:16.871512890 CEST	8.8.8.8	192.168.2.22	0xb1fe	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:16.885468960 CEST	8.8.8.8	192.168.2.22	0x9744	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:16.899275064 CEST	8.8.8.8	192.168.2.22	0x9abb	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:16.911082983 CEST	8.8.8.8	192.168.2.22	0x32bd	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:16.946554899 CEST	8.8.8.8	192.168.2.22	0x423d	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:16.959007978 CEST	8.8.8.8	192.168.2.22	0xa6e0	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:16.971498966 CEST	8.8.8.8	192.168.2.22	0x661c	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:16.982958078 CEST	8.8.8.8	192.168.2.22	0xc104	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:16.995398045 CEST	8.8.8.8	192.168.2.22	0x8561	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:17.007047892 CEST	8.8.8.8	192.168.2.22	0xf326	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:17.018982887 CEST	8.8.8.8	192.168.2.22	0xca12	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:17.030704021 CEST	8.8.8.8	192.168.2.22	0xc91d	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:17.042453051 CEST	8.8.8.8	192.168.2.22	0x9d13	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:17.053715944 CEST	8.8.8.8	192.168.2.22	0x4a76	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:17.071013927 CEST	8.8.8.8	192.168.2.22	0xeb93	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:17.082734108 CEST	8.8.8.8	192.168.2.22	0x265c	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:17.094741106 CEST	8.8.8.8	192.168.2.22	0x4abd	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:17.107212067 CEST	8.8.8.8	192.168.2.22	0xf5cc	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:17.118689060 CEST	8.8.8.8	192.168.2.22	0x123d	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:17.129518032 CEST	8.8.8.8	192.168.2.22	0x334d	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:17.141377926 CEST	8.8.8.8	192.168.2.22	0x7694	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:17.153047085 CEST	8.8.8.8	192.168.2.22	0x1e32	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:17.165169954 CEST	8.8.8.8	192.168.2.22	0x1bc1	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:17.177437067 CEST	8.8.8.8	192.168.2.22	0xa929	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:17.190541983 CEST	8.8.8.8	192.168.2.22	0x574a	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:17.205936909 CEST	8.8.8.8	192.168.2.22	0x373a	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:17.219630957 CEST	8.8.8.8	192.168.2.22	0x7b8f	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:17.232599020 CEST	8.8.8.8	192.168.2.22	0xb8b9	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:17.251498938 CEST	8.8.8.8	192.168.2.22	0x7f7d	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:17.289781094 CEST	8.8.8.8	192.168.2.22	0x3cab	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:17.303183079 CEST	8.8.8.8	192.168.2.22	0xfd8a	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:17.315597057 CEST	8.8.8.8	192.168.2.22	0x7d50	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:17.354415894 CEST	8.8.8.8	192.168.2.22	0xa6b5	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:17.468187094 CEST	8.8.8.8	192.168.2.22	0xb633	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:17.487277031 CEST	8.8.8.8	192.168.2.22	0x22a5	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:17.505347013 CEST	8.8.8.8	192.168.2.22	0xdbfc	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:17.520899057 CEST	8.8.8.8	192.168.2.22	0xc846	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:17.531527996 CEST	8.8.8.8	192.168.2.22	0xccc5	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:17.546830893 CEST	8.8.8.8	192.168.2.22	0xf65	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:17.563724041 CEST	8.8.8.8	192.168.2.22	0x3082	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:17.676300049 CEST	8.8.8.8	192.168.2.22	0xff60	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:17.689233065 CEST	8.8.8.8	192.168.2.22	0x77ce	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:17.763274908 CEST	8.8.8.8	192.168.2.22	0x1e36	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:17.816265106 CEST	8.8.8.8	192.168.2.22	0x9598	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:17.869577885 CEST	8.8.8.8	192.168.2.22	0x89ef	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:17.881871939 CEST	8.8.8.8	192.168.2.22	0x128d	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:17.895459890 CEST	8.8.8.8	192.168.2.22	0x2647	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:17.910952091 CEST	8.8.8.8	192.168.2.22	0x71f6	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:17.925395966 CEST	8.8.8.8	192.168.2.22	0xbf84	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:17.941214085 CEST	8.8.8.8	192.168.2.22	0xd4f8	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:18.018556118 CEST	8.8.8.8	192.168.2.22	0xb949	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:18.031136990 CEST	8.8.8.8	192.168.2.22	0xd945	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:18.046578884 CEST	8.8.8.8	192.168.2.22	0xcab4	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:18.059902906 CEST	8.8.8.8	192.168.2.22	0x490d	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:18.072752953 CEST	8.8.8.8	192.168.2.22	0x92dc	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:18.084902048 CEST	8.8.8.8	192.168.2.22	0xc4aa	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:18.099618912 CEST	8.8.8.8	192.168.2.22	0x8a5b	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:18.113256931 CEST	8.8.8.8	192.168.2.22	0x1f54	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:18.127126932 CEST	8.8.8.8	192.168.2.22	0x4c0d	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:18.138962984 CEST	8.8.8.8	192.168.2.22	0xcdb5	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:18.150755882 CEST	8.8.8.8	192.168.2.22	0xbc3d	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:18.162756920 CEST	8.8.8.8	192.168.2.22	0xd3f5	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:18.175472975 CEST	8.8.8.8	192.168.2.22	0xae29	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:18.188051939 CEST	8.8.8.8	192.168.2.22	0xdb89	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:18.201554060 CEST	8.8.8.8	192.168.2.22	0x1337	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:18.212029934 CEST	8.8.8.8	192.168.2.22	0xf8ed	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:18.222671032 CEST	8.8.8.8	192.168.2.22	0x3d3b	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:18.239151001 CEST	8.8.8.8	192.168.2.22	0xbbe9	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:18.251303911 CEST	8.8.8.8	192.168.2.22	0x29fb	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:18.263278008 CEST	8.8.8.8	192.168.2.22	0x8724	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:18.275655985 CEST	8.8.8.8	192.168.2.22	0x8d32	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:18.286046982 CEST	8.8.8.8	192.168.2.22	0x4db1	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:18.328553915 CEST	8.8.8.8	192.168.2.22	0x1a69	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:18.338788986 CEST	8.8.8.8	192.168.2.22	0xdea6	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:18.348388910 CEST	8.8.8.8	192.168.2.22	0x635b	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:18.357800961 CEST	8.8.8.8	192.168.2.22	0x35af	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:18.370671034 CEST	8.8.8.8	192.168.2.22	0x1473	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:18.380795002 CEST	8.8.8.8	192.168.2.22	0x388b	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:18.393273115 CEST	8.8.8.8	192.168.2.22	0x13b2	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:18.404452085 CEST	8.8.8.8	192.168.2.22	0xbb9d	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:18.417136908 CEST	8.8.8.8	192.168.2.22	0x8f0a	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:18.428205967 CEST	8.8.8.8	192.168.2.22	0x36ec	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:18.438366890 CEST	8.8.8.8	192.168.2.22	0xd896	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:18.448715925 CEST	8.8.8.8	192.168.2.22	0xf213	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:18.457654953 CEST	8.8.8.8	192.168.2.22	0xaa8b	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:18.725483894 CEST	8.8.8.8	192.168.2.22	0x9b05	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:18.835927963 CEST	8.8.8.8	192.168.2.22	0x4dac	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:19.154350042 CEST	8.8.8.8	192.168.2.22	0x46a6	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:19.519251108 CEST	8.8.8.8	192.168.2.22	0x2d9c	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:19.533610106 CEST	8.8.8.8	192.168.2.22	0x8814	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:19.546150923 CEST	8.8.8.8	192.168.2.22	0x3716	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:19.558938980 CEST	8.8.8.8	192.168.2.22	0xda6c	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:19.571250916 CEST	8.8.8.8	192.168.2.22	0xba71	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:19.582396984 CEST	8.8.8.8	192.168.2.22	0x361c	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:19.594417095 CEST	8.8.8.8	192.168.2.22	0x734d	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:19.604641914 CEST	8.8.8.8	192.168.2.22	0x5983	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:19.615555048 CEST	8.8.8.8	192.168.2.22	0x146b	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:19.626673937 CEST	8.8.8.8	192.168.2.22	0x1258	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:19.637648106 CEST	8.8.8.8	192.168.2.22	0x168a	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:19.648082018 CEST	8.8.8.8	192.168.2.22	0x8ed0	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:19.658680916 CEST	8.8.8.8	192.168.2.22	0xd0ac	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:19.670319080 CEST	8.8.8.8	192.168.2.22	0x55b6	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:19.681701899 CEST	8.8.8.8	192.168.2.22	0x87e3	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:19.693481922 CEST	8.8.8.8	192.168.2.22	0x8701	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:19.726984978 CEST	8.8.8.8	192.168.2.22	0xddce	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:19.737711906 CEST	8.8.8.8	192.168.2.22	0xcf0d	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:19.748505116 CEST	8.8.8.8	192.168.2.22	0x920e	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:19.759495974 CEST	8.8.8.8	192.168.2.22	0x86df	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:19.770021915 CEST	8.8.8.8	192.168.2.22	0x5f63	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:19.780961990 CEST	8.8.8.8	192.168.2.22	0xf9c3	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:19.791650057 CEST	8.8.8.8	192.168.2.22	0x6f05	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:19.802033901 CEST	8.8.8.8	192.168.2.22	0x9cce	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:19.812926054 CEST	8.8.8.8	192.168.2.22	0xa70c	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:19.823823929 CEST	8.8.8.8	192.168.2.22	0x4c3	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:19.834460974 CEST	8.8.8.8	192.168.2.22	0xc6fc	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:19.844384909 CEST	8.8.8.8	192.168.2.22	0x69b8	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:19.853774071 CEST	8.8.8.8	192.168.2.22	0xf07f	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:19.863866091 CEST	8.8.8.8	192.168.2.22	0x95cb	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:19.873538017 CEST	8.8.8.8	192.168.2.22	0xe7a5	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:19.883369923 CEST	8.8.8.8	192.168.2.22	0xe43f	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:19.893515110 CEST	8.8.8.8	192.168.2.22	0x62b3	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:19.904266119 CEST	8.8.8.8	192.168.2.22	0xd8f3	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:19.919991970 CEST	8.8.8.8	192.168.2.22	0xde17	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:19.933198929 CEST	8.8.8.8	192.168.2.22	0x67be	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:19.942635059 CEST	8.8.8.8	192.168.2.22	0x7f25	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:19.952567101 CEST	8.8.8.8	192.168.2.22	0x97b0	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:19.963154078 CEST	8.8.8.8	192.168.2.22	0x3305	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:19.973261118 CEST	8.8.8.8	192.168.2.22	0x3149	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:19.983513117 CEST	8.8.8.8	192.168.2.22	0xf29f	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:19.992954969 CEST	8.8.8.8	192.168.2.22	0xc501	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:20.004901886 CEST	8.8.8.8	192.168.2.22	0xf205	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:20.014816999 CEST	8.8.8.8	192.168.2.22	0x435f	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:20.024302006 CEST	8.8.8.8	192.168.2.22	0xfe60	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:20.034002066 CEST	8.8.8.8	192.168.2.22	0x842e	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:20.065918922 CEST	8.8.8.8	192.168.2.22	0x87f2	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:20.075644016 CEST	8.8.8.8	192.168.2.22	0xe10b	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:20.087555885 CEST	8.8.8.8	192.168.2.22	0x737	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:20.097454071 CEST	8.8.8.8	192.168.2.22	0x1c95	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:20.107450008 CEST	8.8.8.8	192.168.2.22	0x98d7	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:20.116923094 CEST	8.8.8.8	192.168.2.22	0x344b	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:20.127916098 CEST	8.8.8.8	192.168.2.22	0x4376	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:20.165710926 CEST	8.8.8.8	192.168.2.22	0x3d6b	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:20.181905985 CEST	8.8.8.8	192.168.2.22	0xaa8c	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:20.193751097 CEST	8.8.8.8	192.168.2.22	0x228a	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:20.204247952 CEST	8.8.8.8	192.168.2.22	0x87f5	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:20.214168072 CEST	8.8.8.8	192.168.2.22	0x39a5	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:20.239250898 CEST	8.8.8.8	192.168.2.22	0x8bbf	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:20.252506018 CEST	8.8.8.8	192.168.2.22	0xb178	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:20.263118982 CEST	8.8.8.8	192.168.2.22	0x72f5	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:20.274174929 CEST	8.8.8.8	192.168.2.22	0xf244	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:20.284454107 CEST	8.8.8.8	192.168.2.22	0xc812	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:20.296350956 CEST	8.8.8.8	192.168.2.22	0xf3da	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:20.307491064 CEST	8.8.8.8	192.168.2.22	0x679b	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:20.317173004 CEST	8.8.8.8	192.168.2.22	0xdeea	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:20.329509020 CEST	8.8.8.8	192.168.2.22	0xb354	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:20.339958906 CEST	8.8.8.8	192.168.2.22	0x1d10	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:20.352212906 CEST	8.8.8.8	192.168.2.22	0x572	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:20.363044024 CEST	8.8.8.8	192.168.2.22	0x65f2	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:20.373400927 CEST	8.8.8.8	192.168.2.22	0x111	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:20.419112921 CEST	8.8.8.8	192.168.2.22	0xec01	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:20.431257963 CEST	8.8.8.8	192.168.2.22	0x6ac	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:20.443866014 CEST	8.8.8.8	192.168.2.22	0xc57b	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:20.455178022 CEST	8.8.8.8	192.168.2.22	0x8eeb	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:20.477015018 CEST	8.8.8.8	192.168.2.22	0x72ea	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:20.519248009 CEST	8.8.8.8	192.168.2.22	0x8e91	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:20.535392046 CEST	8.8.8.8	192.168.2.22	0xa80a	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:20.546968937 CEST	8.8.8.8	192.168.2.22	0x42b8	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:20.563031912 CEST	8.8.8.8	192.168.2.22	0xda0	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:20.574254036 CEST	8.8.8.8	192.168.2.22	0x10de	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:20.586930037 CEST	8.8.8.8	192.168.2.22	0x5754	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:20.601670027 CEST	8.8.8.8	192.168.2.22	0xf8f1	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:20.615381956 CEST	8.8.8.8	192.168.2.22	0x5130	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:20.844176054 CEST	8.8.8.8	192.168.2.22	0x129d	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:20.855355978 CEST	8.8.8.8	192.168.2.22	0x4cf8	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:20.867264032 CEST	8.8.8.8	192.168.2.22	0xf618	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:20.877950907 CEST	8.8.8.8	192.168.2.22	0xf830	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:20.890850067 CEST	8.8.8.8	192.168.2.22	0xe904	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:20.900965929 CEST	8.8.8.8	192.168.2.22	0xf429	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:20.914596081 CEST	8.8.8.8	192.168.2.22	0xac69	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:20.926384926 CEST	8.8.8.8	192.168.2.22	0x1ff8	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:20.936461926 CEST	8.8.8.8	192.168.2.22	0xd4f	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:20.959911108 CEST	8.8.8.8	192.168.2.22	0x527d	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:20.971102953 CEST	8.8.8.8	192.168.2.22	0xa1c2	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:20.981537104 CEST	8.8.8.8	192.168.2.22	0x8fd	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:20.991861105 CEST	8.8.8.8	192.168.2.22	0xd603	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:21.004331112 CEST	8.8.8.8	192.168.2.22	0xc32a	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:21.016678095 CEST	8.8.8.8	192.168.2.22	0xaa19	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:21.027499914 CEST	8.8.8.8	192.168.2.22	0x6966	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:21.039213896 CEST	8.8.8.8	192.168.2.22	0x93cc	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:21.048765898 CEST	8.8.8.8	192.168.2.22	0x95b	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:21.059079885 CEST	8.8.8.8	192.168.2.22	0xafe8	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:21.107511997 CEST	8.8.8.8	192.168.2.22	0x29d0	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:21.120172977 CEST	8.8.8.8	192.168.2.22	0x7da3	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:21.131797075 CEST	8.8.8.8	192.168.2.22	0x7ce2	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:21.142425060 CEST	8.8.8.8	192.168.2.22	0x3913	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:21.153506994 CEST	8.8.8.8	192.168.2.22	0xf252	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:21.163736105 CEST	8.8.8.8	192.168.2.22	0xf9d7	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:21.175267935 CEST	8.8.8.8	192.168.2.22	0xaab5	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:21.186762094 CEST	8.8.8.8	192.168.2.22	0x46d1	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:21.198312044 CEST	8.8.8.8	192.168.2.22	0x63d	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:21.210537910 CEST	8.8.8.8	192.168.2.22	0xa4ff	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:21.221307039 CEST	8.8.8.8	192.168.2.22	0x18a2	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:21.233064890 CEST	8.8.8.8	192.168.2.22	0x91d8	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:21.244234085 CEST	8.8.8.8	192.168.2.22	0xf388	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:21.261209011 CEST	8.8.8.8	192.168.2.22	0x63c7	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:21.279700994 CEST	8.8.8.8	192.168.2.22	0xf2c7	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:21.301357031 CEST	8.8.8.8	192.168.2.22	0x83e	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:21.312794924 CEST	8.8.8.8	192.168.2.22	0xccec	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:21.325161934 CEST	8.8.8.8	192.168.2.22	0x32dc	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:21.336766958 CEST	8.8.8.8	192.168.2.22	0xc251	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:21.351805925 CEST	8.8.8.8	192.168.2.22	0x8d2c	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:21.365195036 CEST	8.8.8.8	192.168.2.22	0x2ba6	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:21.376477957 CEST	8.8.8.8	192.168.2.22	0xa553	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:21.387392044 CEST	8.8.8.8	192.168.2.22	0x93c9	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:21.398710012 CEST	8.8.8.8	192.168.2.22	0x6120	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:21.427370071 CEST	8.8.8.8	192.168.2.22	0xeb16	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:21.456696033 CEST	8.8.8.8	192.168.2.22	0xd603	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:21.468503952 CEST	8.8.8.8	192.168.2.22	0x7ca4	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:21.478419065 CEST	8.8.8.8	192.168.2.22	0xf6ac	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:21.489217997 CEST	8.8.8.8	192.168.2.22	0xee28	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:21.501085043 CEST	8.8.8.8	192.168.2.22	0x39a6	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:21.512518883 CEST	8.8.8.8	192.168.2.22	0xd099	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:21.551762104 CEST	8.8.8.8	192.168.2.22	0x4cd7	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:21.573174000 CEST	8.8.8.8	192.168.2.22	0x59f2	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:21.595635891 CEST	8.8.8.8	192.168.2.22	0x6b15	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:21.617717981 CEST	8.8.8.8	192.168.2.22	0xe16	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:21.640475035 CEST	8.8.8.8	192.168.2.22	0xf343	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:21.863503933 CEST	8.8.8.8	192.168.2.22	0x9355	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:22.169769049 CEST	8.8.8.8	192.168.2.22	0x4d65	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:22.399372101 CEST	8.8.8.8	192.168.2.22	0x619b	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:22.546917915 CEST	8.8.8.8	192.168.2.22	0xfad9	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:22.618828058 CEST	8.8.8.8	192.168.2.22	0xc1d5	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:22.645833969 CEST	8.8.8.8	192.168.2.22	0xc10	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:22.654947996 CEST	8.8.8.8	192.168.2.22	0xe22f	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:22.667021036 CEST	8.8.8.8	192.168.2.22	0x24df	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:22.677943945 CEST	8.8.8.8	192.168.2.22	0x9d4e	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:22.687395096 CEST	8.8.8.8	192.168.2.22	0x2380	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:22.697858095 CEST	8.8.8.8	192.168.2.22	0x3a23	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:22.708122015 CEST	8.8.8.8	192.168.2.22	0x1617	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:22.718492031 CEST	8.8.8.8	192.168.2.22	0xa2bc	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:22.729300976 CEST	8.8.8.8	192.168.2.22	0xc4f4	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:22.739191055 CEST	8.8.8.8	192.168.2.22	0xdc22	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:22.749181032 CEST	8.8.8.8	192.168.2.22	0x23bb	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:22.758511066 CEST	8.8.8.8	192.168.2.22	0x7932	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:22.769484043 CEST	8.8.8.8	192.168.2.22	0x4d29	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:22.779252052 CEST	8.8.8.8	192.168.2.22	0x5d0b	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:22.792113066 CEST	8.8.8.8	192.168.2.22	0xe653	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:22.806154966 CEST	8.8.8.8	192.168.2.22	0x5d07	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:22.816956043 CEST	8.8.8.8	192.168.2.22	0x8073	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:22.827687025 CEST	8.8.8.8	192.168.2.22	0xc76c	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:22.839210987 CEST	8.8.8.8	192.168.2.22	0xe899	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:22.852440119 CEST	8.8.8.8	192.168.2.22	0x5fb5	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:22.866281033 CEST	8.8.8.8	192.168.2.22	0xc4df	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:22.878608942 CEST	8.8.8.8	192.168.2.22	0x6929	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:22.891278028 CEST	8.8.8.8	192.168.2.22	0xe7f0	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:22.903755903 CEST	8.8.8.8	192.168.2.22	0xb98c	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:22.919482946 CEST	8.8.8.8	192.168.2.22	0xc9dd	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:22.932310104 CEST	8.8.8.8	192.168.2.22	0x9234	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:22.945205927 CEST	8.8.8.8	192.168.2.22	0x1ec8	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:22.958750963 CEST	8.8.8.8	192.168.2.22	0xd04e	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:22.971041918 CEST	8.8.8.8	192.168.2.22	0xfb23	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:22.984735966 CEST	8.8.8.8	192.168.2.22	0xa8cb	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:22.996516943 CEST	8.8.8.8	192.168.2.22	0x2c13	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:23.007443905 CEST	8.8.8.8	192.168.2.22	0xd130	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:23.020288944 CEST	8.8.8.8	192.168.2.22	0x576b	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:23.031789064 CEST	8.8.8.8	192.168.2.22	0xc93f	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:23.043409109 CEST	8.8.8.8	192.168.2.22	0x21f0	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:23.055324078 CEST	8.8.8.8	192.168.2.22	0xbdd	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:23.067538977 CEST	8.8.8.8	192.168.2.22	0x97fa	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:23.079420090 CEST	8.8.8.8	192.168.2.22	0xf56c	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:23.092112064 CEST	8.8.8.8	192.168.2.22	0xaef6	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:23.327569962 CEST	8.8.8.8	192.168.2.22	0x4441	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:23.614653111 CEST	8.8.8.8	192.168.2.22	0x4277	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:23.627595901 CEST	8.8.8.8	192.168.2.22	0xd0a9	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:23.651925087 CEST	8.8.8.8	192.168.2.22	0xd518	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:23.661803007 CEST	8.8.8.8	192.168.2.22	0xba0	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:23.673597097 CEST	8.8.8.8	192.168.2.22	0xafa1	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:23.685251951 CEST	8.8.8.8	192.168.2.22	0x82c8	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:23.700422049 CEST	8.8.8.8	192.168.2.22	0x293b	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:23.710849047 CEST	8.8.8.8	192.168.2.22	0x19df	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:23.720597982 CEST	8.8.8.8	192.168.2.22	0xb48a	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:23.730333090 CEST	8.8.8.8	192.168.2.22	0x2179	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:23.739880085 CEST	8.8.8.8	192.168.2.22	0x3c93	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:23.750515938 CEST	8.8.8.8	192.168.2.22	0xe76d	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:23.761111021 CEST	8.8.8.8	192.168.2.22	0xc571	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:23.772299051 CEST	8.8.8.8	192.168.2.22	0xc91b	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:23.783765078 CEST	8.8.8.8	192.168.2.22	0xd0e4	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:23.797405005 CEST	8.8.8.8	192.168.2.22	0xcb97	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:23.807259083 CEST	8.8.8.8	192.168.2.22	0x345a	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:23.839726925 CEST	8.8.8.8	192.168.2.22	0x742	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:23.849251032 CEST	8.8.8.8	192.168.2.22	0xf91d	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:23.860424042 CEST	8.8.8.8	192.168.2.22	0xbffe	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:23.871413946 CEST	8.8.8.8	192.168.2.22	0x804a	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:23.884362936 CEST	8.8.8.8	192.168.2.22	0x2c3f	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:23.894895077 CEST	8.8.8.8	192.168.2.22	0x2ff7	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:23.905600071 CEST	8.8.8.8	192.168.2.22	0x73a	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:23.919460058 CEST	8.8.8.8	192.168.2.22	0xe84e	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:23.928747892 CEST	8.8.8.8	192.168.2.22	0x7b89	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:23.940263033 CEST	8.8.8.8	192.168.2.22	0x32cb	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:23.954549074 CEST	8.8.8.8	192.168.2.22	0x35ad	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:23.965745926 CEST	8.8.8.8	192.168.2.22	0xdb81	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:23.982074022 CEST	8.8.8.8	192.168.2.22	0xb087	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:23.992662907 CEST	8.8.8.8	192.168.2.22	0xd1d3	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:24.001925945 CEST	8.8.8.8	192.168.2.22	0x2377	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:24.012049913 CEST	8.8.8.8	192.168.2.22	0xd35	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:24.021609068 CEST	8.8.8.8	192.168.2.22	0xc3f0	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:24.101146936 CEST	8.8.8.8	192.168.2.22	0xcf59	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:24.463419914 CEST	8.8.8.8	192.168.2.22	0xdbfa	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:24.582571983 CEST	8.8.8.8	192.168.2.22	0x543e	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:24.597197056 CEST	8.8.8.8	192.168.2.22	0xc3b5	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:24.617691994 CEST	8.8.8.8	192.168.2.22	0x1fae	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:24.629342079 CEST	8.8.8.8	192.168.2.22	0x775c	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:24.642291069 CEST	8.8.8.8	192.168.2.22	0xbc81	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:24.655884027 CEST	8.8.8.8	192.168.2.22	0xf52	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:24.701304913 CEST	8.8.8.8	192.168.2.22	0x6841	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:24.730062962 CEST	8.8.8.8	192.168.2.22	0xad08	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:24.750845909 CEST	8.8.8.8	192.168.2.22	0xe0bc	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:24.763947010 CEST	8.8.8.8	192.168.2.22	0x6c2d	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:24.781869888 CEST	8.8.8.8	192.168.2.22	0xf27b	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:24.799418926 CEST	8.8.8.8	192.168.2.22	0x1fbf	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:24.810684919 CEST	8.8.8.8	192.168.2.22	0x855f	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:24.820481062 CEST	8.8.8.8	192.168.2.22	0x116d	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:24.832463026 CEST	8.8.8.8	192.168.2.22	0x932d	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:24.844518900 CEST	8.8.8.8	192.168.2.22	0xdccf	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:24.854013920 CEST	8.8.8.8	192.168.2.22	0x77d4	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:24.864021063 CEST	8.8.8.8	192.168.2.22	0x5a65	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:24.873960972 CEST	8.8.8.8	192.168.2.22	0xd2ef	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:24.883003950 CEST	8.8.8.8	192.168.2.22	0x297d	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:24.892779112 CEST	8.8.8.8	192.168.2.22	0xa6db	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:24.902160883 CEST	8.8.8.8	192.168.2.22	0xfe96	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:24.911058903 CEST	8.8.8.8	192.168.2.22	0x55d6	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:24.920558929 CEST	8.8.8.8	192.168.2.22	0x56b9	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:24.929795027 CEST	8.8.8.8	192.168.2.22	0x6d0c	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:24.939703941 CEST	8.8.8.8	192.168.2.22	0xd747	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:24.949743032 CEST	8.8.8.8	192.168.2.22	0xb343	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:24.986568928 CEST	8.8.8.8	192.168.2.22	0x5a6d	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:25.000556946 CEST	8.8.8.8	192.168.2.22	0x9287	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:25.057882071 CEST	8.8.8.8	192.168.2.22	0xd9f3	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:25.067244053 CEST	8.8.8.8	192.168.2.22	0x60de	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:25.078466892 CEST	8.8.8.8	192.168.2.22	0xe6e3	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:25.096982956 CEST	8.8.8.8	192.168.2.22	0x5c36	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:25.117273092 CEST	8.8.8.8	192.168.2.22	0x8989	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:25.131011963 CEST	8.8.8.8	192.168.2.22	0x4fec	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:25.141962051 CEST	8.8.8.8	192.168.2.22	0x64fd	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:25.206877947 CEST	8.8.8.8	192.168.2.22	0x415	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:25.309159040 CEST	8.8.8.8	192.168.2.22	0x448d	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:25.326725960 CEST	8.8.8.8	192.168.2.22	0x1ea1	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:25.349252939 CEST	8.8.8.8	192.168.2.22	0xc5b1	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:25.379081011 CEST	8.8.8.8	192.168.2.22	0xb9e8	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:25.395529032 CEST	8.8.8.8	192.168.2.22	0x6d43	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:25.420469999 CEST	8.8.8.8	192.168.2.22	0x1060	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:25.436247110 CEST	8.8.8.8	192.168.2.22	0xaab5	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:25.449111938 CEST	8.8.8.8	192.168.2.22	0x53cd	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:25.462403059 CEST	8.8.8.8	192.168.2.22	0x3538	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:25.472300053 CEST	8.8.8.8	192.168.2.22	0x882	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:25.483457088 CEST	8.8.8.8	192.168.2.22	0xcf04	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:25.502819061 CEST	8.8.8.8	192.168.2.22	0xf2fa	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:25.513866901 CEST	8.8.8.8	192.168.2.22	0x5da2	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:25.523843050 CEST	8.8.8.8	192.168.2.22	0x4958	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:25.533121109 CEST	8.8.8.8	192.168.2.22	0x23b6	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:25.543178082 CEST	8.8.8.8	192.168.2.22	0x7fdb	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:25.553432941 CEST	8.8.8.8	192.168.2.22	0x8991	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:25.602761984 CEST	8.8.8.8	192.168.2.22	0xb3eb	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:25.615839958 CEST	8.8.8.8	192.168.2.22	0x3ceb	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:25.628186941 CEST	8.8.8.8	192.168.2.22	0x3a2a	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:25.643152952 CEST	8.8.8.8	192.168.2.22	0x6259	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:25.658761978 CEST	8.8.8.8	192.168.2.22	0x91e9	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:25.673979998 CEST	8.8.8.8	192.168.2.22	0x9170	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:25.687655926 CEST	8.8.8.8	192.168.2.22	0x899c	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:25.705903053 CEST	8.8.8.8	192.168.2.22	0xad36	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:25.723645926 CEST	8.8.8.8	192.168.2.22	0x58fe	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:25.736805916 CEST	8.8.8.8	192.168.2.22	0x3a8d	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:25.801434040 CEST	8.8.8.8	192.168.2.22	0x5dfe	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:25.829507113 CEST	8.8.8.8	192.168.2.22	0xfdad	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:25.863009930 CEST	8.8.8.8	192.168.2.22	0x50e1	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:26.155517101 CEST	8.8.8.8	192.168.2.22	0x59f8	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:26.207381010 CEST	8.8.8.8	192.168.2.22	0x600c	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:26.274446964 CEST	8.8.8.8	192.168.2.22	0x9ea0	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:26.311439991 CEST	8.8.8.8	192.168.2.22	0xf382	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:26.322520971 CEST	8.8.8.8	192.168.2.22	0x7f46	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:26.333103895 CEST	8.8.8.8	192.168.2.22	0x4b98	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:26.343170881 CEST	8.8.8.8	192.168.2.22	0x8428	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:26.353097916 CEST	8.8.8.8	192.168.2.22	0xfa27	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:26.363585949 CEST	8.8.8.8	192.168.2.22	0x28e3	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:26.373776913 CEST	8.8.8.8	192.168.2.22	0x584f	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:26.383569956 CEST	8.8.8.8	192.168.2.22	0x4c1b	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:26.393086910 CEST	8.8.8.8	192.168.2.22	0x92b8	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:26.402378082 CEST	8.8.8.8	192.168.2.22	0x82f2	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:26.412595987 CEST	8.8.8.8	192.168.2.22	0xea16	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:26.423041105 CEST	8.8.8.8	192.168.2.22	0x3fc4	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:26.432955027 CEST	8.8.8.8	192.168.2.22	0x5715	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:26.442440987 CEST	8.8.8.8	192.168.2.22	0x7efc	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:26.453051090 CEST	8.8.8.8	192.168.2.22	0xf603	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:26.462939978 CEST	8.8.8.8	192.168.2.22	0x6a09	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:26.473670006 CEST	8.8.8.8	192.168.2.22	0x4d65	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:26.483714104 CEST	8.8.8.8	192.168.2.22	0x4451	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:26.493805885 CEST	8.8.8.8	192.168.2.22	0x4724	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:26.504064083 CEST	8.8.8.8	192.168.2.22	0x2034	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:26.515167952 CEST	8.8.8.8	192.168.2.22	0x4161	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:26.524854898 CEST	8.8.8.8	192.168.2.22	0x9ff7	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:26.538564920 CEST	8.8.8.8	192.168.2.22	0x85d9	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:26.551588058 CEST	8.8.8.8	192.168.2.22	0xb6ae	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:26.562244892 CEST	8.8.8.8	192.168.2.22	0x99d7	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:26.572531939 CEST	8.8.8.8	192.168.2.22	0x7e50	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:26.582777023 CEST	8.8.8.8	192.168.2.22	0xf631	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:27.111380100 CEST	8.8.8.8	192.168.2.22	0xf0eb	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:27.121505022 CEST	8.8.8.8	192.168.2.22	0x5245	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:27.703566074 CEST	8.8.8.8	192.168.2.22	0x2069	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:28.176075935 CEST	8.8.8.8	192.168.2.22	0x37f6	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:28.865505934 CEST	8.8.8.8	192.168.2.22	0x4171	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:28.906409979 CEST	8.8.8.8	192.168.2.22	0x7a49	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:28.923366070 CEST	8.8.8.8	192.168.2.22	0xc120	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:28.964737892 CEST	8.8.8.8	192.168.2.22	0xb97a	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:29.484368086 CEST	8.8.8.8	192.168.2.22	0xad0b	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:29.493535995 CEST	8.8.8.8	192.168.2.22	0x241b	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:29.502113104 CEST	8.8.8.8	192.168.2.22	0xd681	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:29.511018038 CEST	8.8.8.8	192.168.2.22	0x8864	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:29.981494904 CEST	8.8.8.8	192.168.2.22	0x9f1	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:30.468848944 CEST	8.8.8.8	192.168.2.22	0x76cf	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false
Sep 18, 2024 17:16:30.686207056 CEST	8.8.8.8	192.168.2.22	0x76cf	No error (0)	outlook-web.ddns.net	151.236.9.174	A (IP address)	IN (0x0001)	false

Target ID:	0
Start time:	11:14:19
Start date:	18/09/2024
Path:	C:\Windows\System32\msiexec.exe
Wow64 process (32bit):	false
Commandline:	"C:\Windows\System32\msiexec.exe" /i "C:\Users\user\Desktop\msws.msi"
Imagebase:	0xffbf0000
File size:	128'512 bytes
MD5 hash:	AC2E7152124CEED36846BD1B6592A00F
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	moderate
Has exited:	false

Show Windows behavior

Target ID:	2
Start time:	11:14:19
Start date:	18/09/2024
Path:	C:\Windows\System32\msiexec.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\msiexec.exe /V
Imagebase:	0xffbf0000
File size:	128'512 bytes
MD5 hash:	AC2E7152124CEED36846BD1B6592A00F
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	moderate
Has exited:	false

Show Windows behavior

Target ID:	5
Start time:	11:14:40
Start date:	18/09/2024
Path:	C:\Windows\SysWOW64\msiexec.exe
Wow64 process (32bit):	true
Commandline:	C:\Windows\syswow64\MsiExec.exe -Embedding A8865EE9E9B652151556A3A417CEBB17
Imagebase:	0x1d0000
File size:	73'216 bytes
MD5 hash:	4315D6ECAE85024A0567DF2CB253B7B0
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	moderate
Has exited:	false

Show Windows behavior

Target ID:	6
Start time:	11:14:43
Start date:	18/09/2024
Path:	C:\Windows\SysWOW64\expand.exe
Wow64 process (32bit):	true
Commandline:	"C:\Windows\System32\expand.exe" -R files.cab -F:* files
Imagebase:	0x390000
File size:	53'248 bytes
MD5 hash:	659CED6D7BDA047BCC6048384231DB9F
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	moderate
Has exited:	true

Show Windows behavior

Target ID:	8
Start time:	11:14:46
Start date:	18/09/2024
Path:	C:\Users\user\AppData\Local\Temp\MW-5f02c99a-ffa3-42d6-92b5-9b885a91c26d\files\MSWordServices.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\AppData\Local\Temp\MW-5f02c99a-ffa3-42d6-92b5-9b885a91c26d\files\MSWordServices.exe"
Imagebase:	0x2d900000
File size:	151'392 bytes
MD5 hash:	FC860959580C124E7E4781BB08437681
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_ORPCBackdoor, Description: Yara detected ORPCBackdoor, Source: 00000008.00000002.630639624.00000000002FD000.00000004.00000010.00020000.00000000.sdmp, Author: Joe Security
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	9
Start time:	11:14:48
Start date:	18/09/2024
Path:	C:\Windows\System32\taskeng.exe
Wow64 process (32bit):	false
Commandline:	taskeng.exe {B43B102B-D546-4F1A-A2C9-95B5D73CF7B1} S-1-5-21-966771315-3019405637-367336477-1006:user-PC\user:Interactive:[1]
Imagebase:	0xff6a0000
File size:	464'384 bytes
MD5 hash:	65EA57712340C09B1B0C427B4848AE05
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	false

Show Windows behavior

Target ID:	10
Start time:	11:14:48
Start date:	18/09/2024
Path:	C:\Users\user\AppData\Local\Temp\MW-5f02c99a-ffa3-42d6-92b5-9b885a91c26d\files\MSWordServices.exe
Wow64 process (32bit):	true
Commandline:	C:\Users\user\AppData\Local\Temp\MW-5f02c99a-ffa3-42d6-92b5-9b885a91c26d\files\MSWordServices.exe
Imagebase:	0x2d900000
File size:	151'392 bytes
MD5 hash:	FC860959580C124E7E4781BB08437681
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Execution Graph

Execution Coverage:	6.3%
Dynamic/Decrypted Code Coverage:	0%
Signature Coverage:	51.5%
Total number of Nodes:	1935
Total number of Limit Nodes:	20

Executed Functions

Function 69054F22 Relevance: 169.2, APIs: 48, Strings: 47, Instructions: 2972
filesleepCOMMONLIBRARYCODE

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

Sleep.KERNELBASE(000003E8,58160781928836700431202065781531683322301950835055,CA03C88E,?,?,?,?,?,?,69064DE0,690918B0,000000FE,?,69057E9A), ref: 69054F76
GetModuleFileNameA.KERNEL32(00000000,?,?,?), ref: 69054FD2
CreateFileA.KERNELBASE(00000000,00000080,00000000,?,6908438C,000000FF,?), ref: 6905508E
CloseHandle.KERNELBASE(?), ref: 690550B4
Sleep.KERNELBASE(0000EA60), ref: 690550BF

Part of subcall function 6905CB90: CoInitializeEx.OLE32(00000000,00000000), ref: 6905CBA9

CreateFileA.KERNELBASE(00000000,?,?,?,80000000,00000000,00000000), ref: 69055101
CloseHandle.KERNEL32(?), ref: 6905511E
CloseHandle.KERNEL32(?), ref: 6905512C
GetUserNameA.ADVAPI32(?,?), ref: 6905515C
Sleep.KERNEL32(00000BB8,?), ref: 690551BB
CreateFileA.KERNELBASE(00000000,00000080,00000000,?,?,?,00000000), ref: 69055328
ReadFile.KERNEL32(?,?,0000000F,?,00000000), ref: 6905535D
CloseHandle.KERNELBASE(?), ref: 690553B9
Sleep.KERNELBASE(?,?,?,?), ref: 69055467
CreateFileA.KERNELBASE(00000000,00000080,00000000,?,?,?,?), ref: 6905589E
RpcStringBindingComposeA.RPCRT4(00000000,?,?,?,00000000,?), ref: 69055BBF
RpcBindingFromStringBindingA.RPCRT4(?,?), ref: 69055BD8
_strcat.LIBCMT ref: 69055C8F

Strings

c, xrefs: 69055AB1
434D44, xrefs: 6905576B
---------, xrefs: 6905527E
633A5C5C50726F6772616D446174615C5C24746D702E747874, xrefs: 690554AB
p, xrefs: 69055AB8
d, xrefs: 69055CA2
c, xrefs: 69055A72
2463616368652E646174, xrefs: 690553E2
636D642E657865202F6320, xrefs: 690557A7
44574E, xrefs: 6905554F
5C6E5C6E205B50524F43455353204C4953545D205C6E, xrefs: 69055234
24746D702E747874, xrefs: 690552B7
48415348, xrefs: 690555B4
c, xrefs: 69055A80
4944, xrefs: 690554E5
>> , xrefs: 690577B5
4E4554455252, xrefs: 690555E6
_, xrefs: 69055A8E
n, xrefs: 69055A6B
52554E, xrefs: 690556F9
d, xrefs: 69057A6C
i, xrefs: 69055A95
53495A45, xrefs: 69055582
|-|, xrefs: 69056872
53595354454D20494E464F524D4154494F4E205C6E, xrefs: 690551D3
p, xrefs: 69055A9C
d, xrefs: 69056221
494E46, xrefs: 6905551C
58160781928836700431202065781531683322301950835055, xrefs: 69054F61
74732E646174, xrefs: 6905501E
4F4B, xrefs: 69055687
<, xrefs: 690575C2
_, xrefs: 69055AA3
a, xrefs: 69055A79
----, xrefs: 69057915
7C2A3F2928257D5E267B, xrefs: 69055470
t, xrefs: 69055AAA
4552524F52, xrefs: 69055619
4552524F525245504C414345, xrefs: 690556C1
444C59, xrefs: 69055732
443, xrefs: 69055A4B
outlook-web.ddns.net, xrefs: 69055B8A
5645524946494544, xrefs: 6905564D
633A5C55736572735C5075626C69635C63722E646174, xrefs: 690557E4
n, xrefs: 69055A87
433A5C5C50726F6772616D446174615C5C, xrefs: 69054F7F
|, xrefs: 69055D31

Memory Dump Source

Source File: 00000008.00000002.630949046.0000000069051000.00000020.00000001.01000000.00000008.sdmp, Offset: 69050000, based on PE: true

Associated: 00000008.00000002.630944757.0000000069050000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000008.00000002.630957701.0000000069084000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000008.00000002.630964126.0000000069094000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000008.00000002.630971010.00000000690A4000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000008.00000002.630975828.00000000690BC000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000008.00000002.630978860.00000000690BD000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_69050000_MSWordServices.jbxd

Similarity

API ID: File$CloseCreateHandleSleep$Binding$NameString$ComposeFromInitializeModuleReadUser_strcat
String ID: ----$---------$2463616368652E646174$24746D702E747874$433A5C5C50726F6772616D446174615C5C$434D44$443$444C59$44574E$4552524F52$4552524F525245504C414345$48415348$4944$494E46$4E4554455252$4F4B$52554E$53495A45$53595354454D20494E464F524D4154494F4E205C6E$5645524946494544$58160781928836700431202065781531683322301950835055$5C6E5C6E205B50524F43455353204C4953545D205C6E$633A5C55736572735C5075626C69635C63722E646174$633A5C5C50726F6772616D446174615C5C24746D702E747874$636D642E657865202F6320$74732E646174$7C2A3F2928257D5E267B$<$>> $_$_$a$c$c$c$d$d$d$i$n$n$outlook-web.ddns.net$p$p$t$|$|-|
API String ID: 163969156-3700135009
Opcode ID: a25addadcce377377083bab6306057f761fb9bedcd07b6fc927bb7d7e75a99d1
Instruction ID: 638852a4ba5440c6266bd395974db43488f4e5666c17bae964bfc9c96f7b4890
Opcode Fuzzy Hash: a25addadcce377377083bab6306057f761fb9bedcd07b6fc927bb7d7e75a99d1
Instruction Fuzzy Hash: 5B430B76814129AADF65DB60CD91FDEB3BCAF14308F4059E6A58AE3050EBB057E8CF50

Function 6905EA93 Relevance: 155.5, APIs: 25, Strings: 63, Instructions: 1459
registryCOMMONLIBRARYCODE

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

GetSystemDirectoryW.KERNEL32(?,00000104,69084B0A), ref: 6905EAD0
GetSystemInfo.KERNELBASE(?), ref: 6905EB13
GetComputerNameW.KERNEL32(?,00000400), ref: 6905EB31
RegOpenKeyExW.KERNEL32 ref: 6905EC11

Strings

BIOSVENDOR, xrefs: 6905F6D8
RegisteredOrganization:, xrefs: 6905EFC2
ProductName, xrefs: 6905EC59
OS Build Type :, xrefs: 6905EE7A
Virtual Memory: Available:, xrefs: 6905FF3F
Identifier, xrefs: 6905F514
SYSTEM\Setup, xrefs: 6905F829
SOFTWARE\Microsoft\Windows NT\CurrentVersion, xrefs: 6905EC07
PagingFiles, xrefs: 6906001B
HARDWARE\DESCRIPTION\System\CentralProcessor\%u, xrefs: 6905F4C4
Error! GetSystemDirectory failed., xrefs: 6905EADA
Virtual Memory: Max Size:, xrefs: 6905FEA8
HARDWARE\DESCRIPTION\System, xrefs: 6905F783
Manufacturer, xrefs: 6905F18F
To Be Filled By O.E.M., xrefs: 6905F235
Input Locale:, xrefs: 6905FB08
HARDWARE\DESCRIPTION\System\BIOS, xrefs: 6905F6DD
Std, xrefs: 6905FBE9
System Model:, xrefs: 6905F29B
Virtual Memory: In Use:, xrefs: 6905FFDD
RegisteredOrganization, xrefs: 6905EF5C
SystemPartition, xrefs: 6905F824
Available Physical Memory:, xrefs: 6905FE11
ProductId, xrefs: 6905F000
System type:, xrefs: 6905F375
MIME\Database\Rfc1766, xrefs: 6905FA4B
Page File Location(s):, xrefs: 690600FB
Keyboard Layout\Preload, xrefs: 6905FA08
[%02u]: , xrefs: 6905F4E0
Display, xrefs: 6905FC2C
Error! GetComputerName failed., xrefs: 6905EB3B
System Manufacturer:, xrefs: 6905F1F0
OS Name:, xrefs: 6905ECC6
Time zone:, xrefs: 6905FC97
Install Date:, xrefs: 6905F11E
%s\oeminfo.ini, xrefs: 6905F163
BIOSVENDOR:, xrefs: 6905F740
MIME\Database\Rfc1766, xrefs: 6905F8F2
SystemBiosVersion, xrefs: 6905F632
OS Version :, xrefs: 6905ED6B
To Be Filled By O.E.M., xrefs: 6905F18A
General, xrefs: 6905F23F
Host Name:, xrefs: 6905EBA8
Product ID:, xrefs: 6905F066
InstallDate, xrefs: 6905F09F
Registered Owner:, xrefs: 6905EF1E
HARDWARE\DESCRIPTION\System, xrefs: 6905F637
Model, xrefs: 6905F23A
System Locale:, xrefs: 6905F9AF
BIOS Date:, xrefs: 6905F7E6
CurrentType, xrefs: 6905EE14
SystemBiosDate, xrefs: 6905F77E
Domain:, xrefs: 690601C6
VendorIdentifier, xrefs: 6905F57F
BiosVersion:, xrefs: 6905F69A
SYSTEM\CurrentControlSet\Control\Session Manager\Memory Management, xrefs: 69060020
Boot Device:, xrefs: 6905F88C
SOFTWARE\Microsoft\Windows NT\CurrentVersion\Time Zones, xrefs: 6905FB6B
RegisteredOwner, xrefs: 6905EEB8
Error! RegOpenKeyEx failed., xrefs: 6905EC1B
Processor(s):, xrefs: 6905F464
General, xrefs: 6905F194
Total Physical Memory:, xrefs: 6905FD7A

Memory Dump Source

Source File: 00000008.00000002.630949046.0000000069051000.00000020.00000001.01000000.00000008.sdmp, Offset: 69050000, based on PE: true

Associated: 00000008.00000002.630944757.0000000069050000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000008.00000002.630957701.0000000069084000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000008.00000002.630964126.0000000069094000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000008.00000002.630971010.00000000690A4000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000008.00000002.630975828.00000000690BC000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000008.00000002.630978860.00000000690BD000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_69050000_MSWordServices.jbxd

Similarity

API ID: System$ComputerDirectoryInfoNameOpen
String ID: %s\oeminfo.ini$Available Physical Memory:$BIOS Date:$BIOSVENDOR$BIOSVENDOR:$BiosVersion:$Boot Device:$CurrentType$Display$Domain:$Error! GetComputerName failed.$Error! GetSystemDirectory failed.$Error! RegOpenKeyEx failed.$General$General$HARDWARE\DESCRIPTION\System$HARDWARE\DESCRIPTION\System$HARDWARE\DESCRIPTION\System\BIOS$HARDWARE\DESCRIPTION\System\CentralProcessor\%u$Host Name:$Identifier$Input Locale:$Install Date:$InstallDate$Keyboard Layout\Preload$MIME\Database\Rfc1766$MIME\Database\Rfc1766$Manufacturer$Model$OS Build Type :$OS Name:$OS Version :$Page File Location(s):$PagingFiles$Processor(s):$Product ID:$ProductId$ProductName$Registered Owner:$RegisteredOrganization$RegisteredOrganization:$RegisteredOwner$SOFTWARE\Microsoft\Windows NT\CurrentVersion$SOFTWARE\Microsoft\Windows NT\CurrentVersion\Time Zones$SYSTEM\CurrentControlSet\Control\Session Manager\Memory Management$SYSTEM\Setup$Std$System Locale:$System Manufacturer:$System Model:$System type:$SystemBiosDate$SystemBiosVersion$SystemPartition$Time zone:$To Be Filled By O.E.M.$To Be Filled By O.E.M.$Total Physical Memory:$VendorIdentifier$Virtual Memory: Available:$Virtual Memory: In Use:$Virtual Memory: Max Size:$[%02u]:
API String ID: 1805411109-2676738833
Opcode ID: 8a3e6bde2493c658f9e894c8b28676ee4baeb1bdaa218e2f2c3ad2fa7b5e30b3
Instruction ID: f7e7621aea4d1a92d5b27666ce7b8ebe62a4661a28a79840493bb11a726db112
Opcode Fuzzy Hash: 8a3e6bde2493c658f9e894c8b28676ee4baeb1bdaa218e2f2c3ad2fa7b5e30b3
Instruction Fuzzy Hash: DED2DB75915169AACF25EB50CE91FEDB37CAF14308F4099E5A11AA3060EF306FA9CF50

Function 6905CB90 Relevance: 65.6, APIs: 30, Strings: 7, Instructions: 882
COMMONLIBRARYCODE

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

CoInitializeEx.OLE32(00000000,00000000), ref: 6905CBA9
CoInitializeSecurity.OLE32(00000000,000000FF,00000000,00000000,00000006,00000003,00000000,00000000,00000000), ref: 6905CBD8
CoUninitialize.OLE32 ref: 6905CBED

Strings

2018-01-01T00:00:00, xrefs: 6905D4A1
PT1H, xrefs: 6905D679
PT24H, xrefs: 6905D5DD
PT5M, xrefs: 6905D241
MICROSOFT, xrefs: 6905CF4A
74732E646174, xrefs: 6905CBA3
Trigger1, xrefs: 6905D467

Memory Dump Source

Source File: 00000008.00000002.630949046.0000000069051000.00000020.00000001.01000000.00000008.sdmp, Offset: 69050000, based on PE: true

Associated: 00000008.00000002.630944757.0000000069050000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000008.00000002.630957701.0000000069084000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000008.00000002.630964126.0000000069094000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000008.00000002.630971010.00000000690A4000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000008.00000002.630975828.00000000690BC000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000008.00000002.630978860.00000000690BD000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_69050000_MSWordServices.jbxd

Similarity

API ID: Initialize$SecurityUninitialize
String ID: 2018-01-01T00:00:00$74732E646174$MICROSOFT$PT1H$PT24H$PT5M$Trigger1
API String ID: 3757020523-551846892
Opcode ID: 1ac457e21b1245130b40831eccb4a66c43b7e997826f6f47f664a30f4d541025
Instruction ID: 9f0a863cb42ea2d8aa27877288c200f9ac6436b060d66b3ca345d7ad1997d10c
Opcode Fuzzy Hash: 1ac457e21b1245130b40831eccb4a66c43b7e997826f6f47f664a30f4d541025
Instruction Fuzzy Hash: 5CA27B35905229EFCB21EF64DE8CB8DB7B5AF49315F0145E5E40AAB260CB71AE95CF00

Function 6905E49B Relevance: 54.3, APIs: 16, Strings: 15, Instructions: 73
libraryloaderCOMMONLIBRARYCODE

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

?GetFileVersionInfoByHandleEx@@YGHXZ.OLMAPI32(?,?,69062118,?,00000001,00000000,?,00000001,00000000,?,00000001,00000000,69091EC0,0000000C,00000007,69091E98), ref: 6905E4B0
GetProcAddress.KERNEL32(GetFileVersionInfoA,?,?,69062118,?,00000001,00000000,?,00000001,00000000,?,00000001,00000000,69091EC0,0000000C,00000007), ref: 6905E4C0
GetProcAddress.KERNEL32(GetFileVersionInfoByHandle,?,?,69062118,?,00000001,00000000,?,00000001,00000000,?,00000001,00000000,69091EC0,0000000C,00000007), ref: 6905E4D6
GetProcAddress.KERNEL32(GetFileVersionInfoExW,?,?,69062118,?,00000001,00000000,?,00000001,00000000,?,00000001,00000000,69091EC0,0000000C,00000007), ref: 6905E4EC
GetProcAddress.KERNEL32(GetFileVersionInfoSizeA,?,?,69062118,?,00000001,00000000,?,00000001,00000000,?,00000001,00000000,69091EC0,0000000C,00000007), ref: 6905E502
GetProcAddress.KERNEL32(GetFileVersionInfoSizeExW,?,?,69062118,?,00000001,00000000,?,00000001,00000000,?,00000001,00000000,69091EC0,0000000C,00000007), ref: 6905E518
GetProcAddress.KERNEL32(GetFileVersionInfoSizeW,?,?,69062118,?,00000001,00000000,?,00000001,00000000,?,00000001,00000000,69091EC0,0000000C,00000007), ref: 6905E52E
GetProcAddress.KERNEL32(GetFileVersionInfoW,?,?,69062118,?,00000001,00000000,?,00000001,00000000,?,00000001,00000000,69091EC0,0000000C,00000007), ref: 6905E544
GetProcAddress.KERNEL32(VerFindFileA,?,?,69062118,?,00000001,00000000,?,00000001,00000000,?,00000001,00000000,69091EC0,0000000C,00000007), ref: 6905E55A
GetProcAddress.KERNEL32(VerFindFileW,?,?,69062118,?,00000001,00000000,?,00000001,00000000,?,00000001,00000000,69091EC0,0000000C,00000007), ref: 6905E570
GetProcAddress.KERNEL32(VerInstallFileA,?,?,69062118,?,00000001,00000000,?,00000001,00000000,?,00000001,00000000,69091EC0,0000000C,00000007), ref: 6905E586
GetProcAddress.KERNEL32(VerInstallFileW,?,?,69062118,?,00000001,00000000,?,00000001,00000000,?,00000001,00000000,69091EC0,0000000C,00000007), ref: 6905E59C
GetProcAddress.KERNEL32(VerLanguageNameA,?,?,69062118,?,00000001,00000000,?,00000001,00000000,?,00000001,00000000,69091EC0,0000000C,00000007), ref: 6905E5B2
GetProcAddress.KERNEL32(VerLanguageNameW,?,?,69062118,?,00000001,00000000,?,00000001,00000000,?,00000001,00000000,69091EC0,0000000C,00000007), ref: 6905E5C8
GetProcAddress.KERNEL32(VerQueryValueA,?,?,69062118,?,00000001,00000000,?,00000001,00000000,?,00000001,00000000,69091EC0,0000000C,00000007), ref: 6905E5DE
GetProcAddress.KERNEL32(VerQueryValueW,?,?,69062118,?,00000001,00000000,?,00000001,00000000,?,00000001,00000000,69091EC0,0000000C,00000007), ref: 6905E5F4

Strings

VerQueryValueA, xrefs: 6905E5D3
GetFileVersionInfoW, xrefs: 6905E539
GetFileVersionInfoByHandle, xrefs: 6905E4CB
VerFindFileA, xrefs: 6905E54F
VerLanguageNameW, xrefs: 6905E5BD
GetFileVersionInfoExW, xrefs: 6905E4E1
VerLanguageNameA, xrefs: 6905E5A7
VerQueryValueW, xrefs: 6905E5E9
GetFileVersionInfoA, xrefs: 6905E4B5
VerInstallFileA, xrefs: 6905E57B
VerInstallFileW, xrefs: 6905E591
VerFindFileW, xrefs: 6905E565
GetFileVersionInfoSizeExW, xrefs: 6905E50D
GetFileVersionInfoSizeA, xrefs: 6905E4F7
GetFileVersionInfoSizeW, xrefs: 6905E523

Memory Dump Source

Source File: 00000008.00000002.630949046.0000000069051000.00000020.00000001.01000000.00000008.sdmp, Offset: 69050000, based on PE: true

Associated: 00000008.00000002.630944757.0000000069050000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000008.00000002.630957701.0000000069084000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000008.00000002.630964126.0000000069094000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000008.00000002.630971010.00000000690A4000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000008.00000002.630975828.00000000690BC000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000008.00000002.630978860.00000000690BD000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_69050000_MSWordServices.jbxd

Similarity

API ID: AddressProc$Ex@@FileHandleInfoVersion
String ID: GetFileVersionInfoA$GetFileVersionInfoByHandle$GetFileVersionInfoExW$GetFileVersionInfoSizeA$GetFileVersionInfoSizeExW$GetFileVersionInfoSizeW$GetFileVersionInfoW$VerFindFileA$VerFindFileW$VerInstallFileA$VerInstallFileW$VerLanguageNameA$VerLanguageNameW$VerQueryValueA$VerQueryValueW
API String ID: 3596192317-236624654
Opcode ID: d9c943c515ad8b213085080cb0f986470902aa6390c97c621d1747f6f13b6a8d
Instruction ID: cfd47817a9d2c6b81be705485bd80975a238c52fa389dabfba764f081f4452ce
Opcode Fuzzy Hash: d9c943c515ad8b213085080cb0f986470902aa6390c97c621d1747f6f13b6a8d
Instruction Fuzzy Hash: 803102B46221A4FFDF019F28CB189AA3FBDF717B413404925E955BB228D7320860DF99

Function 2D9174DE Relevance: 21.1, APIs: 10, Strings: 2, Instructions: 61
memorylibraryloaderCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

GetModuleHandleW.KERNEL32(kernel32.dll,HeapSetInformation), ref: 2D9174F1
GetProcAddress.KERNEL32(00000000), ref: 2D9174F8
GetProcessHeap.KERNEL32(00000001,00000000,00000000), ref: 2D91750A
GetSystemTimeAsFileTime.KERNEL32(?), ref: 2D917517
GetCurrentProcessId.KERNEL32 ref: 2D917523
GetCurrentThreadId.KERNEL32 ref: 2D91752B
GetTickCount.KERNEL32 ref: 2D917533
QueryPerformanceCounter.KERNEL32(?), ref: 2D91753F
VirtualProtect.KERNELBASE(2D9032CC,00000004,00000040,?), ref: 2D917561
VirtualProtect.KERNELBASE(2D9032CC,00000004,?,?), ref: 2D917581

Strings

kernel32.dll, xrefs: 2D9174EC
HeapSetInformation, xrefs: 2D9174E7

Memory Dump Source

Source File: 00000008.00000002.630919973.000000002D901000.00000020.00000001.01000000.00000007.sdmp, Offset: 2D900000, based on PE: true

Associated: 00000008.00000002.630913986.000000002D900000.00000002.00000001.01000000.00000007.sdmpDownload File
Associated: 00000008.00000002.630927583.000000002D91E000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000008.00000002.630932693.000000002D922000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000008.00000002.630937868.000000002D923000.00000002.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_2d900000_MSWordServices.jbxd

Similarity

API ID: CurrentProcessProtectTimeVirtual$AddressCountCounterFileHandleHeapModulePerformanceProcQuerySystemThreadTick
String ID: HeapSetInformation$kernel32.dll
API String ID: 2966426798-3597996958
Opcode ID: b874de96afea06442478bd9fbe3b87120fdc6e396c925a3bdb3b9b64a62ac1c9
Instruction ID: d5b8d0c97598e81ed9d62f1f1f35c188eb7b2bcb512c5e1a85e0fdb934f3561c
Opcode Fuzzy Hash: b874de96afea06442478bd9fbe3b87120fdc6e396c925a3bdb3b9b64a62ac1c9
Instruction Fuzzy Hash: D51133B6D04219ABCB10ABF4EC48B9E77BCEF48B56F420551FA01F7241D674DA018FA4

Function 69057E9F Relevance: 14.1, APIs: 6, Strings: 2, Instructions: 67
processCOMMONLIBRARYCODE

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

CreateToolhelp32Snapshot.KERNEL32(00000002,00000000), ref: 69057EB6
Process32First.KERNEL32(000000FF,00000128), ref: 69057EF6
CloseHandle.KERNEL32(000000FF), ref: 69057F05

Strings

ERROR, xrefs: 69057ECA
ERROR, xrefs: 69057F0B

Memory Dump Source

Source File: 00000008.00000002.630949046.0000000069051000.00000020.00000001.01000000.00000008.sdmp, Offset: 69050000, based on PE: true

Associated: 00000008.00000002.630944757.0000000069050000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000008.00000002.630957701.0000000069084000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000008.00000002.630964126.0000000069094000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000008.00000002.630971010.00000000690A4000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000008.00000002.630975828.00000000690BC000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000008.00000002.630978860.00000000690BD000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_69050000_MSWordServices.jbxd

Similarity

API ID: CloseCreateFirstHandleProcess32SnapshotToolhelp32
String ID: ERROR$ERROR
API String ID: 1083639309-2579291623
Opcode ID: 071c2eb4b6f11a8f67b07291bb39b9115df2cdb76054b3844feaf4a278860891
Instruction ID: 12b2d3fbb7ab46e1b258703492e674c207e7d8065cc421bd1879bdc66199d0c9
Opcode Fuzzy Hash: 071c2eb4b6f11a8f67b07291bb39b9115df2cdb76054b3844feaf4a278860891
Instruction Fuzzy Hash: 39216034A00218EBCF54DF60DE44FEE77B8AF09345F4098A4A51EAB1A0DB30AE95DF40

Function 2D903E45 Relevance: 5.3, APIs: 2, Strings: 1, Instructions: 38COMMONLIBRARYCODE

Download Yara Rule

APIs

OutputDebugStringA.KERNEL32(IsolationAware function called after IsolationAwareCleanup), ref: 2D903E58
GetLastError.KERNEL32 ref: 2D903E8E

Strings

IsolationAware function called after IsolationAwareCleanup, xrefs: 2D903E53

Memory Dump Source

Source File: 00000008.00000002.630919973.000000002D901000.00000020.00000001.01000000.00000007.sdmp, Offset: 2D900000, based on PE: true

Associated: 00000008.00000002.630913986.000000002D900000.00000002.00000001.01000000.00000007.sdmpDownload File
Associated: 00000008.00000002.630927583.000000002D91E000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000008.00000002.630932693.000000002D922000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000008.00000002.630937868.000000002D923000.00000002.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_2d900000_MSWordServices.jbxd

Similarity

API ID: DebugErrorLastOutputString
String ID: IsolationAware function called after IsolationAwareCleanup
API String ID: 4132100945-2690750368
Opcode ID: c9dbb1942da9a0ee2a771de0c7770b1407204ce53e36780f1235ca9fffc7a9bd
Instruction ID: 8fe7cabd272f9c170479654a25e3d4e0038b2ff711672a74414518e08fc11c6d
Opcode Fuzzy Hash: c9dbb1942da9a0ee2a771de0c7770b1407204ce53e36780f1235ca9fffc7a9bd
Instruction Fuzzy Hash: F0F0903280C1248B87179BA5BA0077A76AD9F45F9371002A6FBA6F0200C334C450DBD9

Function 690580D7 Relevance: 2.7, Strings: 2, Instructions: 216COMMONLIBRARYCODE

Download Yara Rule

Strings

%02X, xrefs: 69058127
outlook-web.ddns.net, xrefs: 690580E7

Memory Dump Source

Source File: 00000008.00000002.630949046.0000000069051000.00000020.00000001.01000000.00000008.sdmp, Offset: 69050000, based on PE: true

Associated: 00000008.00000002.630944757.0000000069050000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000008.00000002.630957701.0000000069084000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000008.00000002.630964126.0000000069094000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000008.00000002.630971010.00000000690A4000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000008.00000002.630975828.00000000690BC000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000008.00000002.630978860.00000000690BD000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_69050000_MSWordServices.jbxd

Similarity

API ID: AddressCall2ClientHandleModuleProc__fread_nolock
String ID: %02X$outlook-web.ddns.net
API String ID: 3264646418-2483746315
Opcode ID: 5e37d06dc6930f5e6a236fa80513e808be05a46efad7d583d1886b8da605d138
Instruction ID: 0336d5bebdd721ca01a5ac59097d34a9341a92bdf80c55f60b0e2aa3ea79e7dc
Opcode Fuzzy Hash: 5e37d06dc6930f5e6a236fa80513e808be05a46efad7d583d1886b8da605d138
Instruction Fuzzy Hash: C281D231A540A59FCB09CF68C951B7DBBF5FB8A305F04846ED9A2E7281C734A911CF98

Function 6905FB96 Relevance: 30.2, APIs: 5, Strings: 12, Instructions: 457
registryCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

RegEnumKeyExW.KERNEL32(?,00000000,?,00000400,00000000,00000000,00000000,00000000), ref: 6905FBCF
RegCloseKey.ADVAPI32(?), ref: 6905FD02
GlobalMemoryStatus.KERNEL32(?), ref: 6905FD0F

Part of subcall function 690605F9: RegOpenKeyExW.KERNEL32 ref: 6906062C

Part of subcall function 690605F9: RegQueryValueExW.KERNEL32(?,00000000,00000000,00000000,?,?), ref: 69060650
Part of subcall function 690605F9: RegCloseKey.KERNEL32(00000006), ref: 69060689

Part of subcall function 690603E4: GetNumberFormatW.KERNEL32 ref: 69060441

NetGetJoinInformation.NETAPI32(00000000,?,?,?,00000000,?,00000000,?), ref: 69060153
NetApiBufferFree.NETAPI32(?,69085408,?,Domain:,00000000,?,00000000,?,00000000,?), ref: 69060214

Strings

Available Physical Memory:, xrefs: 6905FE11
SYSTEM\CurrentControlSet\Control\Session Manager\Memory Management, xrefs: 69060020
PagingFiles, xrefs: 6906001B
Std, xrefs: 6905FBE9
Virtual Memory: In Use:, xrefs: 6905FFDD
Virtual Memory: Available:, xrefs: 6905FF3F
Domain:, xrefs: 690601C6
Time zone:, xrefs: 6905FC97
Virtual Memory: Max Size:, xrefs: 6905FEA8
Page File Location(s):, xrefs: 690600FB
Display, xrefs: 6905FC2C
Total Physical Memory:, xrefs: 6905FD7A

Memory Dump Source

Source File: 00000008.00000002.630949046.0000000069051000.00000020.00000001.01000000.00000008.sdmp, Offset: 69050000, based on PE: true

Associated: 00000008.00000002.630944757.0000000069050000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000008.00000002.630957701.0000000069084000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000008.00000002.630964126.0000000069094000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000008.00000002.630971010.00000000690A4000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000008.00000002.630975828.00000000690BC000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000008.00000002.630978860.00000000690BD000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_69050000_MSWordServices.jbxd

Similarity

API ID: Close$BufferEnumFormatFreeGlobalInformationJoinMemoryNumberOpenQueryStatusValue
String ID: Available Physical Memory:$Display$Domain:$Page File Location(s):$PagingFiles$SYSTEM\CurrentControlSet\Control\Session Manager\Memory Management$Std$Time zone:$Total Physical Memory:$Virtual Memory: Available:$Virtual Memory: In Use:$Virtual Memory: Max Size:
API String ID: 369352865-1736252339
Opcode ID: 17266175054c3baaf03a114a5dc76ae93e1c7bbc27df197e45775c4384ddaac5
Instruction ID: 30b14e2e26dc03c3a970dec15dad27122154ade6f07481a4d32ebb6e758f22ce
Opcode Fuzzy Hash: 17266175054c3baaf03a114a5dc76ae93e1c7bbc27df197e45775c4384ddaac5
Instruction Fuzzy Hash: 1112CE39915069AACF25EB50CE90EDDB379AF15348F4099E5A10BA3060EF306FA9CF54

Function 2D903C77 Relevance: 15.9, APIs: 4, Strings: 5, Instructions: 111
libraryCOMMONLIBRARYCODE

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

GetModuleFileNameW.KERNEL32(?,?,00000105), ref: 2D903D39
SetLastError.KERNEL32(0000006F), ref: 2D903D4F
GetLastError.KERNEL32 ref: 2D903DA7
LoadLibraryW.KERNEL32(Comctl32.dll), ref: 2D903E19

Strings

GetModuleHandleExW, xrefs: 2D903CF7
QueryActCtxW, xrefs: 2D903CB0
Comctl32.dll, xrefs: 2D903E05, 2D903E0A, 2D903E18
, xrefs: 2D903D5A
@, xrefs: 2D903DF4

Memory Dump Source

Source File: 00000008.00000002.630919973.000000002D901000.00000020.00000001.01000000.00000007.sdmp, Offset: 2D900000, based on PE: true

Associated: 00000008.00000002.630913986.000000002D900000.00000002.00000001.01000000.00000007.sdmpDownload File
Associated: 00000008.00000002.630927583.000000002D91E000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000008.00000002.630932693.000000002D922000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000008.00000002.630937868.000000002D923000.00000002.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_2d900000_MSWordServices.jbxd

Similarity

API ID: ErrorLast$FileLibraryLoadModuleName
String ID: $@$Comctl32.dll$GetModuleHandleExW$QueryActCtxW
API String ID: 2178654626-2626125606
Opcode ID: 5806db20f260c3915e418fb42e6e4dd8c1d278bd376aeb4103e69e078dc47694
Instruction ID: bc1689fa7b91e102a15d367830359a0262062ae513d56dfffa4fa3ca7d14c84f
Opcode Fuzzy Hash: 5806db20f260c3915e418fb42e6e4dd8c1d278bd376aeb4103e69e078dc47694
Instruction Fuzzy Hash: 8241B43090D6299BDB619B65EC88BAD77BCEF84712F1003D9F258F6190DB788A80CF55

Function 6906DA0B Relevance: 12.5, APIs: 6, Strings: 1, Instructions: 284
COMMONLIBRARYCODE

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

__allrem.LIBCMT ref: 6906DB93
__ehfuncinfo$??2@YAPAXIABUnothrow_t@std@@@Z.LIBCMT ref: 6906DBAF
__allrem.LIBCMT ref: 6906DBC6
__ehfuncinfo$??2@YAPAXIABUnothrow_t@std@@@Z.LIBCMT ref: 6906DBE4
__allrem.LIBCMT ref: 6906DBFB
__ehfuncinfo$??2@YAPAXIABUnothrow_t@std@@@Z.LIBCMT ref: 6906DC19

Strings

74732E646174, xrefs: 6906DC9F

Memory Dump Source

Source File: 00000008.00000002.630949046.0000000069051000.00000020.00000001.01000000.00000008.sdmp, Offset: 69050000, based on PE: true

Associated: 00000008.00000002.630944757.0000000069050000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000008.00000002.630957701.0000000069084000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000008.00000002.630964126.0000000069094000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000008.00000002.630971010.00000000690A4000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000008.00000002.630975828.00000000690BC000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000008.00000002.630978860.00000000690BD000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_69050000_MSWordServices.jbxd

Similarity

API ID: Unothrow_t@std@@@__allrem__ehfuncinfo$??2@
String ID: 74732E646174
API String ID: 1992179935-138923103
Opcode ID: 94d0e94a8f46061bbfe044791ce4e181156ba776a5c7f4a890ea9cae3aa4525e
Instruction ID: cf2951a91aa37061e9263c4c5948d3daa0cfe654b92a1bddd5e6cb30e0510154
Opcode Fuzzy Hash: 94d0e94a8f46061bbfe044791ce4e181156ba776a5c7f4a890ea9cae3aa4525e
Instruction Fuzzy Hash: 9B81F7766047069BE710DF68CC41B5AB7F9EF85778F209E2BE411DB2A0EB70D9018794

Function 690608DC Relevance: 12.3, APIs: 3, Strings: 4, Instructions: 61
libraryloaderCOMMONLIBRARYCODE

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

GetModuleHandleA.KERNEL32(RPCRT4.dll), ref: 690608F4
GetProcAddress.KERNEL32(000000FF,?), ref: 69060974
NdrClientCall2.RPCRT4(690854A8,-69085435,?), ref: 690609A1

Strings

all2, xrefs: 6906091D
NdrC, xrefs: 6906090D
RPCRT4.dll, xrefs: 690608EF
lientC, xrefs: 69060942

Memory Dump Source

Source File: 00000008.00000002.630949046.0000000069051000.00000020.00000001.01000000.00000008.sdmp, Offset: 69050000, based on PE: true

Associated: 00000008.00000002.630944757.0000000069050000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000008.00000002.630957701.0000000069084000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000008.00000002.630964126.0000000069094000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000008.00000002.630971010.00000000690A4000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000008.00000002.630975828.00000000690BC000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000008.00000002.630978860.00000000690BD000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_69050000_MSWordServices.jbxd

Similarity

API ID: AddressCall2ClientHandleModuleProc
String ID: NdrC$RPCRT4.dll$all2$lientC
API String ID: 614992055-1156160658
Opcode ID: 82cdea2ba0db66eed1039dffabca609fc0e67dd0694041f33dfcc443766c8f79
Instruction ID: 78aea55871808b4f61ab50fe8941835bc227945e665c773d34f8f12eb17620f2
Opcode Fuzzy Hash: 82cdea2ba0db66eed1039dffabca609fc0e67dd0694041f33dfcc443766c8f79
Instruction Fuzzy Hash: FA213E75D04198AFDF10CFA4CD44BEEBBF8AB49204F1099A7D52AF7240E7309A488F61

Function 2D9050C9 Relevance: 12.3, APIs: 4, Strings: 3, Instructions: 29
libraryloaderCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

GetModuleHandleW.KERNEL32(KERNEL32), ref: 2D9050CF
GetProcAddress.KERNEL32(00000000,SetProcessDEPPolicy), ref: 2D9050E9
GetProcAddress.KERNEL32(00000000,GetSystemDEPPolicy), ref: 2D9050F3
SetProcessDEPPolicy.KERNEL32(00000001), ref: 2D905106

Strings

GetSystemDEPPolicy, xrefs: 2D9050EB
KERNEL32, xrefs: 2D9050CA
SetProcessDEPPolicy, xrefs: 2D9050E3

Memory Dump Source

Source File: 00000008.00000002.630919973.000000002D901000.00000020.00000001.01000000.00000007.sdmp, Offset: 2D900000, based on PE: true

Associated: 00000008.00000002.630913986.000000002D900000.00000002.00000001.01000000.00000007.sdmpDownload File
Associated: 00000008.00000002.630927583.000000002D91E000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000008.00000002.630932693.000000002D922000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000008.00000002.630937868.000000002D923000.00000002.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_2d900000_MSWordServices.jbxd

Similarity

API ID: AddressProc$HandleModulePolicyProcess
String ID: GetSystemDEPPolicy$KERNEL32$SetProcessDEPPolicy
API String ID: 3256987805-2000083379
Opcode ID: a692533f08d0a5db5d3b5c696fe08c8b5feacefea6d0fef8e3fdf49f55356c83
Instruction ID: 3f620baaf3a721a5da0247c18f15a486c634fe8f0f1333359c2b502a7d374f45
Opcode Fuzzy Hash: a692533f08d0a5db5d3b5c696fe08c8b5feacefea6d0fef8e3fdf49f55356c83
Instruction Fuzzy Hash: F4E0863250D21137D7C151B9BDC4F7B56AC9EC9AA7B100156FA00F2105C994D4018960

Function 69061FF8 Relevance: 10.6, APIs: 7, Instructions: 136
COMMONLIBRARYCODE

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

__RTC_Initialize.LIBCMT ref: 6906203F
___scrt_uninitialize_crt.LIBCMT ref: 69062059

Memory Dump Source

Source File: 00000008.00000002.630949046.0000000069051000.00000020.00000001.01000000.00000008.sdmp, Offset: 69050000, based on PE: true

Associated: 00000008.00000002.630944757.0000000069050000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000008.00000002.630957701.0000000069084000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000008.00000002.630964126.0000000069094000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000008.00000002.630971010.00000000690A4000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000008.00000002.630975828.00000000690BC000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000008.00000002.630978860.00000000690BD000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_69050000_MSWordServices.jbxd

Similarity

API ID: Initialize___scrt_uninitialize_crt
String ID:
API String ID: 2442719207-0
Opcode ID: 1bbf831c3a6a22b862f02e57c0fe64194572c24ce9e669849024f66e393b38a0
Instruction ID: 1bf945f574d0ca97d7e76707aa5671256c914e2a8eaa1e993e8c16db4d11be1d
Opcode Fuzzy Hash: 1bbf831c3a6a22b862f02e57c0fe64194572c24ce9e669849024f66e393b38a0
Instruction Fuzzy Hash: E941A376E04614AFDF10CF6DCD40BAE7AB9EF507A5F008D15E815EB260C73089438B90

Function 2D916528 Relevance: 10.6, APIs: 7, Instructions: 92
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

?_set_new_handler@@YAP6AHI@ZP6AHI@Z@Z.MSVCR90 ref: 2D91653D

Part of subcall function 2D9171BB: _setmbcp.MSVCR90 ref: 2D9171C3

free.MSVCR90 ref: 2D9165A5
Mailbox.LIBCMT ref: 2D9165B8
Mailbox.LIBCMT ref: 2D9165C9
Mailbox.LIBCMT ref: 2D9165DA
Mailbox.LIBCMT ref: 2D9165EB
Mailbox.LIBCMT ref: 2D9165FC

Memory Dump Source

Source File: 00000008.00000002.630919973.000000002D901000.00000020.00000001.01000000.00000007.sdmp, Offset: 2D900000, based on PE: true

Associated: 00000008.00000002.630913986.000000002D900000.00000002.00000001.01000000.00000007.sdmpDownload File
Associated: 00000008.00000002.630927583.000000002D91E000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000008.00000002.630932693.000000002D922000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000008.00000002.630937868.000000002D923000.00000002.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_2d900000_MSWordServices.jbxd

Similarity

API ID: Mailbox$?_set_new_handler@@_setmbcpfree
String ID:
API String ID: 2556944153-0
Opcode ID: 4fe1910a5a10ae10a5a1c59ce11025aba5e3af6a45feea4b5402a2d2f4df1405
Instruction ID: 92d4599cc12e9464c91e62f7485f9e53a4ac760c12321bb8c26c474965da3c7e
Opcode Fuzzy Hash: 4fe1910a5a10ae10a5a1c59ce11025aba5e3af6a45feea4b5402a2d2f4df1405
Instruction Fuzzy Hash: 0C318E30A04A089FCB26DFA8C450A6E7BF5FF98750F11465CF686A7694DB31E941CB50

Function 69072B5E Relevance: 10.6, APIs: 4, Strings: 2, Instructions: 74
COMMONLIBRARYCODE

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

FreeLibrary.KERNEL32(00000000,?,00000000,00000800,00000000,00000000,?,CA03C88E,?,69072C6B,?,?,00000000,00000000), ref: 69072C1F

Strings

api-ms-, xrefs: 69072BB5
ext-ms-, xrefs: 69072BC9

Memory Dump Source

Source File: 00000008.00000002.630949046.0000000069051000.00000020.00000001.01000000.00000008.sdmp, Offset: 69050000, based on PE: true

Associated: 00000008.00000002.630944757.0000000069050000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000008.00000002.630957701.0000000069084000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000008.00000002.630964126.0000000069094000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000008.00000002.630971010.00000000690A4000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000008.00000002.630975828.00000000690BC000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000008.00000002.630978860.00000000690BD000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_69050000_MSWordServices.jbxd

Similarity

API ID: FreeLibrary
String ID: api-ms-$ext-ms-
API String ID: 3664257935-537541572
Opcode ID: ad0fc2958f7d6c230d244d077f2debc598d5b73d76610782d931f0bff53749b8
Instruction ID: 9e844c5cf1db276dde34f974117f6197298c87de8cb5783bc4ab2b1db4984747
Opcode Fuzzy Hash: ad0fc2958f7d6c230d244d077f2debc598d5b73d76610782d931f0bff53749b8
Instruction Fuzzy Hash: A321D572A09351A7DF319B2CDD55F8E37ADAB537B0F120910E915AB280D730E902C6D4

Function 69057AE4 Relevance: 8.9, APIs: 4, Strings: 1, Instructions: 195
sleepfileCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

CreateFileA.KERNELBASE(00000000,00000080,00000000,?,?,?,?), ref: 6905589E
_strcat.LIBCMT ref: 69057ABD
_strcat.LIBCMT ref: 69057B2D
_strncpy.LIBCMT ref: 69057B5F
Sleep.KERNEL32(00003A98,?,?,?,?,?,?,690842B6,690842A7,0000000C,0000000C,?,?,690B4458), ref: 69057C23
Sleep.KERNEL32(?,690842B6,690842A7,0000000C,0000000C,?,?,690B4458), ref: 69057C31
RpcStringFreeA.RPCRT4(?), ref: 69057CDA

Strings

d, xrefs: 69057A6C

Memory Dump Source

Source File: 00000008.00000002.630949046.0000000069051000.00000020.00000001.01000000.00000008.sdmp, Offset: 69050000, based on PE: true

Associated: 00000008.00000002.630944757.0000000069050000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000008.00000002.630957701.0000000069084000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000008.00000002.630964126.0000000069094000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000008.00000002.630971010.00000000690A4000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000008.00000002.630975828.00000000690BC000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000008.00000002.630978860.00000000690BD000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_69050000_MSWordServices.jbxd

Similarity

API ID: Sleep_strcat$CreateFileFreeString_strncpy
String ID: d
API String ID: 2099396881-2564639436
Opcode ID: 4a1c0cdc1e1f235312aeb41217d85186dd5634bb76f007dda5fd7709a750f1dd
Instruction ID: fad30902e2be12d7a62f76e654b134223a54145da3aad9cef662857404464e62
Opcode Fuzzy Hash: 4a1c0cdc1e1f235312aeb41217d85186dd5634bb76f007dda5fd7709a750f1dd
Instruction Fuzzy Hash: 018192758281599ADF64DB20CD91FEDB379AF20308F4099E9918BA3090DFB017F9CE45

Function 690562A0 Relevance: 8.9, APIs: 4, Strings: 1, Instructions: 176sleepfileCOMMON

Download Yara Rule

APIs

CreateFileA.KERNELBASE(00000000,00000080,00000000,?,?,?,?), ref: 6905589E
_strcat.LIBCMT ref: 69056279
_strcat.LIBCMT ref: 690562E9
_strncpy.LIBCMT ref: 6905631B
Sleep.KERNEL32(00003A98,?,?,?,?,?,?,690842B6,690842A7,0000000C,0000000C,?,?,690B4458), ref: 69057C23
RpcStringFreeA.RPCRT4(?), ref: 69057CDA

Strings

d, xrefs: 69056221

Memory Dump Source

Source File: 00000008.00000002.630949046.0000000069051000.00000020.00000001.01000000.00000008.sdmp, Offset: 69050000, based on PE: true

Associated: 00000008.00000002.630944757.0000000069050000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000008.00000002.630957701.0000000069084000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000008.00000002.630964126.0000000069094000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000008.00000002.630971010.00000000690A4000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000008.00000002.630975828.00000000690BC000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000008.00000002.630978860.00000000690BD000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_69050000_MSWordServices.jbxd

Similarity

API ID: _strcat$CreateFileFreeSleepString_strncpy
String ID: d
API String ID: 437704486-2564639436
Opcode ID: be89176aa31f1ce2c26c634af2cf67ef9636b9334856379b2fd5a8689eed2d74
Instruction ID: f6a001ef402d1a50cbbe0eb442764c27bda3a99724b39e288d1cb8baf2ad7217
Opcode Fuzzy Hash: be89176aa31f1ce2c26c634af2cf67ef9636b9334856379b2fd5a8689eed2d74
Instruction Fuzzy Hash: E071C075868159DADF64DB60CE91FEDB379AF20308F4098E9918BA3090DFB017E9CE45

Function 69066382 Relevance: 8.8, APIs: 4, Strings: 1, Instructions: 63COMMONLIBRARYCODE

Download Yara Rule

APIs

FreeLibrary.KERNEL32(00000000,?,00000000,?,?,?,69066445,6906500A,?,?,00000000,?,690664F7,00000002,FlsGetValue,69086D98), ref: 69066413

Strings

api-ms-, xrefs: 690663D3

Memory Dump Source

Source File: 00000008.00000002.630949046.0000000069051000.00000020.00000001.01000000.00000008.sdmp, Offset: 69050000, based on PE: true

Associated: 00000008.00000002.630944757.0000000069050000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000008.00000002.630957701.0000000069084000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000008.00000002.630964126.0000000069094000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000008.00000002.630971010.00000000690A4000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000008.00000002.630975828.00000000690BC000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000008.00000002.630978860.00000000690BD000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_69050000_MSWordServices.jbxd

Similarity

API ID: FreeLibrary
String ID: api-ms-
API String ID: 3664257935-2084034818
Opcode ID: 13a2ed3754735ca49eb2dc93f25a97d9b0f2a0160ee5b9935ea1d09a6955efa3
Instruction ID: 6a2e9c8d756ca7d05962fd89ee1449b29d70d110d97273f880a269d3f19f9791
Opcode Fuzzy Hash: 13a2ed3754735ca49eb2dc93f25a97d9b0f2a0160ee5b9935ea1d09a6955efa3
Instruction Fuzzy Hash: 69117032F49775ABDF228B6CCA45B4E33E8AF03774F120924E914EB290D771E94096D1

Function 690620A8 Relevance: 7.6, APIs: 5, Instructions: 87COMMONLIBRARYCODE

Download Yara Rule

APIs

dllmain_raw.LIBCMT ref: 690620E5
dllmain_crt_dispatch.LIBCMT ref: 690620FC
dllmain_raw.LIBCMT ref: 69062144
dllmain_crt_dispatch.LIBCMT ref: 69062157
dllmain_raw.LIBCMT ref: 6906216A

Memory Dump Source

Source File: 00000008.00000002.630949046.0000000069051000.00000020.00000001.01000000.00000008.sdmp, Offset: 69050000, based on PE: true

Associated: 00000008.00000002.630944757.0000000069050000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000008.00000002.630957701.0000000069084000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000008.00000002.630964126.0000000069094000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000008.00000002.630971010.00000000690A4000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000008.00000002.630975828.00000000690BC000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000008.00000002.630978860.00000000690BD000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_69050000_MSWordServices.jbxd

Similarity

API ID: dllmain_raw$dllmain_crt_dispatch
String ID:
API String ID: 3136044242-0
Opcode ID: 7cca1675f5e4644229480765d5e738c8a122493f9ce1d1849ac291d80fa800f6
Instruction ID: 8080ea5a5c169dbdae6004bb6ca47dfef21b43f1e3a214988c05a95cbe2acb1c
Opcode Fuzzy Hash: 7cca1675f5e4644229480765d5e738c8a122493f9ce1d1849ac291d80fa800f6
Instruction Fuzzy Hash: 6F216076D09615ABDF218E5DCD40BAE3ABDEB90B94B018915F918AB220C7308D538BA0

Function 690605F9 Relevance: 7.1, APIs: 3, Strings: 1, Instructions: 83registryCOMMONLIBRARYCODE

Download Yara Rule

APIs

RegOpenKeyExW.KERNEL32 ref: 6906062C
RegQueryValueExW.KERNEL32(?,00000000,00000000,00000000,?,?), ref: 69060650
RegCloseKey.KERNEL32(00000006), ref: 69060689

Strings

N/A, xrefs: 6906066A

Memory Dump Source

Source File: 00000008.00000002.630949046.0000000069051000.00000020.00000001.01000000.00000008.sdmp, Offset: 69050000, based on PE: true

Associated: 00000008.00000002.630944757.0000000069050000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000008.00000002.630957701.0000000069084000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000008.00000002.630964126.0000000069094000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000008.00000002.630971010.00000000690A4000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000008.00000002.630975828.00000000690BC000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000008.00000002.630978860.00000000690BD000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_69050000_MSWordServices.jbxd

Similarity

API ID: CloseOpenQueryValue
String ID: N/A
API String ID: 3677997916-2525114547
Opcode ID: 7ce519dfe5edf43ed287b5faba5a0e35e79282a551afe49ca4abe3ea71b96194
Instruction ID: 060f929c5b84f3d4c00e17e8e542f607879017f9146f2b3201524a7a92ff47c4
Opcode Fuzzy Hash: 7ce519dfe5edf43ed287b5faba5a0e35e79282a551afe49ca4abe3ea71b96194
Instruction Fuzzy Hash: 2E31D270A4420AEFDF40DFA9D945BAE7BF4BF44744F108829F815A72A0D7709A50CFA1

Function 6907711E Relevance: 5.7, APIs: 1, Strings: 2, Instructions: 408timeCOMMONLIBRARYCODE

Download Yara Rule

APIs

GetTimeZoneInformation.KERNELBASE(00000000,00000000,00000000,00000000,00000000,00000000,?,?,?,69077563,00000000,00000000,00000000), ref: 69077422

Strings

Eastern Standard Time, xrefs: 690774BB
Eastern Daylight Time, xrefs: 690774CF

Memory Dump Source

Source File: 00000008.00000002.630949046.0000000069051000.00000020.00000001.01000000.00000008.sdmp, Offset: 69050000, based on PE: true

Associated: 00000008.00000002.630944757.0000000069050000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000008.00000002.630957701.0000000069084000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000008.00000002.630964126.0000000069094000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000008.00000002.630971010.00000000690A4000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000008.00000002.630975828.00000000690BC000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000008.00000002.630978860.00000000690BD000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_69050000_MSWordServices.jbxd

Similarity

API ID: InformationTimeZone
String ID: Eastern Daylight Time$Eastern Standard Time
API String ID: 565725191-1879052519
Opcode ID: b91a8953465dda76db262b6cc75a6898936713601e45692e1349b22df1428ddf
Instruction ID: 2374f7e33e27f16e352b40b524eea17900bcc652ea42b94bc24d48d2a4fbf92f
Opcode Fuzzy Hash: b91a8953465dda76db262b6cc75a6898936713601e45692e1349b22df1428ddf
Instruction Fuzzy Hash: 11C14C76A00325EBDB20DF68CC01BAE77F9EF057A4F508826E911EF250E7719A41C798

Function 690773B0 Relevance: 5.4, APIs: 1, Strings: 2, Instructions: 156timeCOMMONLIBRARYCODE

Download Yara Rule

APIs

Part of subcall function 690726DF: HeapFree.KERNEL32(00000000,00000000), ref: 690726F5
Part of subcall function 690726DF: GetLastError.KERNEL32(?,?,6907C163,?,00000000,?,?,6907C404,?,00000007,?,?,6907B896,?,?), ref: 69072700

GetTimeZoneInformation.KERNELBASE(00000000,00000000,00000000,00000000,00000000,00000000,?,?,?,69077563,00000000,00000000,00000000), ref: 69077422

Strings

Eastern Standard Time, xrefs: 690774BB
Eastern Daylight Time, xrefs: 690774CF

Memory Dump Source

Source File: 00000008.00000002.630949046.0000000069051000.00000020.00000001.01000000.00000008.sdmp, Offset: 69050000, based on PE: true

Associated: 00000008.00000002.630944757.0000000069050000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000008.00000002.630957701.0000000069084000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000008.00000002.630964126.0000000069094000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000008.00000002.630971010.00000000690A4000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000008.00000002.630975828.00000000690BC000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000008.00000002.630978860.00000000690BD000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_69050000_MSWordServices.jbxd

Similarity

API ID: ErrorFreeHeapInformationLastTimeZone
String ID: Eastern Daylight Time$Eastern Standard Time
API String ID: 3335090040-1879052519
Opcode ID: 33c0858f6b6212564bdae20dfdf49cbe85164ac8d34c35c947594d1303abfb9a
Instruction ID: c856a6dab069cf94a8058ac1bbc7e0162df2d37e6655e520c439b445d8b40cf8
Opcode Fuzzy Hash: 33c0858f6b6212564bdae20dfdf49cbe85164ac8d34c35c947594d1303abfb9a
Instruction Fuzzy Hash: FF41B575900365EBCF20DF69C801B9E7BB8EF026B8B109966E424EF194DB719940CBD9

Function 69057C93 Relevance: 5.4, APIs: 2, Strings: 1, Instructions: 134fileCOMMON

Download Yara Rule

APIs

CreateFileA.KERNELBASE(00000000,00000080,00000000,?,?,?,?), ref: 6905589E
RpcStringFreeA.RPCRT4(?), ref: 69057CDA

Strings

Runtime reported exception , xrefs: 69057CAD

Memory Dump Source

Source File: 00000008.00000002.630949046.0000000069051000.00000020.00000001.01000000.00000008.sdmp, Offset: 69050000, based on PE: true

Associated: 00000008.00000002.630944757.0000000069050000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000008.00000002.630957701.0000000069084000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000008.00000002.630964126.0000000069094000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000008.00000002.630971010.00000000690A4000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000008.00000002.630975828.00000000690BC000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000008.00000002.630978860.00000000690BD000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_69050000_MSWordServices.jbxd

Similarity

API ID: CreateFileFreeString
String ID: Runtime reported exception
API String ID: 201379981-1260309434
Opcode ID: 85a7ff57dff246ca63ae02f53e0ac0220da117b71538a0136b118784e051029e
Instruction ID: a22266931b89656f06efa3b212167d363476fb537e39c729fd3c8fc84b2c20a3
Opcode Fuzzy Hash: 85a7ff57dff246ca63ae02f53e0ac0220da117b71538a0136b118784e051029e
Instruction Fuzzy Hash: 75518F389281599ADF64DB30CD91FEDB375AF60308F4099E9919BA3090DFB057E9CE44

Function 2D9171BB Relevance: 5.3, APIs: 1, Strings: 2, Instructions: 65COMMON

Download Yara Rule

APIs

_setmbcp.MSVCR90 ref: 2D9171C3

Part of subcall function 2D915E3D: GetVersionExA.KERNEL32(?), ref: 2D915E6A

Part of subcall function 2D911766: __EH_prolog3.LIBCMT ref: 2D91176D
Part of subcall function 2D911766: GetClassInfoW.USER32(?,?,?), ref: 2D91177F

Strings

AfxWndW, xrefs: 2D917245
AfxWndA, xrefs: 2D91723E

Memory Dump Source

Source File: 00000008.00000002.630919973.000000002D901000.00000020.00000001.01000000.00000007.sdmp, Offset: 2D900000, based on PE: true

Associated: 00000008.00000002.630913986.000000002D900000.00000002.00000001.01000000.00000007.sdmpDownload File
Associated: 00000008.00000002.630927583.000000002D91E000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000008.00000002.630932693.000000002D922000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000008.00000002.630937868.000000002D923000.00000002.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_2d900000_MSWordServices.jbxd

Similarity

API ID: ClassH_prolog3InfoVersion_setmbcp
String ID: AfxWndA$AfxWndW
API String ID: 329514372-64854810
Opcode ID: a432b84cfa0094700b5dfa70153b41741d1679f83b1bbd4325d8b15d77992e72
Instruction ID: 75b4776bd660af4bf2325f54ca0f8079d5d9d7d2635f15e8a8302c8b825345c1
Opcode Fuzzy Hash: a432b84cfa0094700b5dfa70153b41741d1679f83b1bbd4325d8b15d77992e72
Instruction Fuzzy Hash: 29211471A04209AFDB04CFA9D840A9EBBF8FF48750F10852AF904F7380E735E5428B55

Function 690780BE Relevance: 4.7, APIs: 3, Instructions: 202COMMON

Download Yara Rule

APIs

__freea.LIBCMT ref: 6907826D

Part of subcall function 69072719: HeapAlloc.KERNEL32(00000000,00000000,?,?,69061C0F,00000000,?,6905447E,00000000,?,6905179D,00000000,?,6905A4C6,00000000,?), ref: 6907274B

__freea.LIBCMT ref: 69078282
__freea.LIBCMT ref: 69078292

Memory Dump Source

Source File: 00000008.00000002.630949046.0000000069051000.00000020.00000001.01000000.00000008.sdmp, Offset: 69050000, based on PE: true

Associated: 00000008.00000002.630944757.0000000069050000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000008.00000002.630957701.0000000069084000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000008.00000002.630964126.0000000069094000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000008.00000002.630971010.00000000690A4000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000008.00000002.630975828.00000000690BC000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000008.00000002.630978860.00000000690BD000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_69050000_MSWordServices.jbxd

Similarity

API ID: __freea$AllocHeap
String ID:
API String ID: 85559729-0
Opcode ID: 48df3c20e8b5c516ee70854c9add0428efc9294a9d940779b7ef6911d4743d7f
Instruction ID: 20142a5be61431d102be1eb075f8cc2cab0a76b41ffe5cba3ca0f80fb96e0aa3
Opcode Fuzzy Hash: 48df3c20e8b5c516ee70854c9add0428efc9294a9d940779b7ef6911d4743d7f
Instruction Fuzzy Hash: 11519F76A00716AFEF208EA58CC0FAB36EDEF45364B154929FD14EB150EB31DC528768

Function 6906056B Relevance: 4.5, APIs: 3, Instructions: 47registryCOMMONLIBRARYCODE

Download Yara Rule

APIs

RegOpenKeyExW.ADVAPI32 ref: 690605A0
RegQueryValueExW.KERNEL32(00000004,00000001,00000000,00000000,00000004,00000004), ref: 690605C1
RegCloseKey.ADVAPI32(00000004), ref: 690605E4

Memory Dump Source

Source File: 00000008.00000002.630949046.0000000069051000.00000020.00000001.01000000.00000008.sdmp, Offset: 69050000, based on PE: true

Associated: 00000008.00000002.630944757.0000000069050000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000008.00000002.630957701.0000000069084000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000008.00000002.630964126.0000000069094000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000008.00000002.630971010.00000000690A4000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000008.00000002.630975828.00000000690BC000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000008.00000002.630978860.00000000690BD000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_69050000_MSWordServices.jbxd

Similarity

API ID: CloseOpenQueryValue
String ID:
API String ID: 3677997916-0
Opcode ID: b0866bb2ae83057ac61639497f054078995c923ec8ec01c7569b21f6c76cdbaa
Instruction ID: 8afb86906b896a377893ce8c016cb4bf92b5f43893c4d11f2db1e42dd1ce6e28
Opcode Fuzzy Hash: b0866bb2ae83057ac61639497f054078995c923ec8ec01c7569b21f6c76cdbaa
Instruction Fuzzy Hash: F8112070604209FFEF01CFA1C804BAE7BB8BF04305F008829E925AB1A0E7B4DA94CF50

Function 69075B29 Relevance: 4.5, APIs: 3, Instructions: 17fileCOMMONLIBRARYCODE

Download Yara Rule

APIs

DeleteFileW.KERNELBASE(69068FE3,?,69068FE3,?,?,?,2463616368652E646174), ref: 69075B31
GetLastError.KERNEL32(?,69068FE3,?,?,?,2463616368652E646174), ref: 69075B3B
__dosmaperr.LIBCMT ref: 69075B42

Memory Dump Source

Source File: 00000008.00000002.630949046.0000000069051000.00000020.00000001.01000000.00000008.sdmp, Offset: 69050000, based on PE: true

Associated: 00000008.00000002.630944757.0000000069050000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000008.00000002.630957701.0000000069084000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000008.00000002.630964126.0000000069094000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000008.00000002.630971010.00000000690A4000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000008.00000002.630975828.00000000690BC000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000008.00000002.630978860.00000000690BD000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_69050000_MSWordServices.jbxd

Similarity

API ID: DeleteErrorFileLast__dosmaperr
String ID:
API String ID: 1545401867-0
Opcode ID: 52991456f2058d6bc4f970e49ff1261fb2a7bcd8e8e7b6293d8148c6273d5c0b
Instruction ID: 76aa8184693e0f7cf883949f48bb06c700c30a4cb720e81ed0e67f20ae1ed4cc
Opcode Fuzzy Hash: 52991456f2058d6bc4f970e49ff1261fb2a7bcd8e8e7b6293d8148c6273d5c0b
Instruction Fuzzy Hash: 4FD01236218648BBDF501FF5AD099577B9EDA823743151A11F42DC70A0EF31C4D09695

Function 69072F36 Relevance: 3.5, APIs: 1, Strings: 1, Instructions: 26COMMONLIBRARYCODE

Download Yara Rule

APIs

InitializeCriticalSectionAndSpinCount.KERNELBASE(00000FA0,-00000020,6907376A,-00000020,00000FA0,00000000,00000000,00000000,00000000,?), ref: 69072F76

Strings

InitializeCriticalSectionEx, xrefs: 69072F46

Memory Dump Source

Source File: 00000008.00000002.630949046.0000000069051000.00000020.00000001.01000000.00000008.sdmp, Offset: 69050000, based on PE: true

Associated: 00000008.00000002.630944757.0000000069050000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000008.00000002.630957701.0000000069084000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000008.00000002.630964126.0000000069094000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000008.00000002.630971010.00000000690A4000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000008.00000002.630975828.00000000690BC000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000008.00000002.630978860.00000000690BD000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_69050000_MSWordServices.jbxd

Similarity

API ID: CountCriticalInitializeSectionSpin
String ID: InitializeCriticalSectionEx
API String ID: 2593887523-3084827643
Opcode ID: 3a3bccf7dde34b341f8a720351c194c0144fcf658a4b51f1a75d18f943a35d05
Instruction ID: cadd2140c49d82233bfabe23bade1293c16506cb91efa83a13e9715e74fb8113
Opcode Fuzzy Hash: 3a3bccf7dde34b341f8a720351c194c0144fcf658a4b51f1a75d18f943a35d05
Instruction Fuzzy Hash: C2E09232684218F7CF112F95DD04F8E3F55EF55770B808821F92C1A210C7329921D6D4

Function 2D919C6E Relevance: 3.5, APIs: 1, Strings: 1, Instructions: 4COMMON

Download Yara Rule

APIs

GlobalAddAtomA.KERNEL32(AfxOldWndProc), ref: 2D919C73

Strings

AfxOldWndProc, xrefs: 2D919C6E

Memory Dump Source

Source File: 00000008.00000002.630919973.000000002D901000.00000020.00000001.01000000.00000007.sdmp, Offset: 2D900000, based on PE: true

Associated: 00000008.00000002.630913986.000000002D900000.00000002.00000001.01000000.00000007.sdmpDownload File
Associated: 00000008.00000002.630927583.000000002D91E000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000008.00000002.630932693.000000002D922000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000008.00000002.630937868.000000002D923000.00000002.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_2d900000_MSWordServices.jbxd

Similarity

API ID: AtomGlobal
String ID: AfxOldWndProc
API String ID: 2189174293-2134796454
Opcode ID: 857c8a7839a1442c3de43a6b6d76c7d692911da0b0b5365662fbefcef452c939
Instruction ID: 2b4c37f4146aa7a5b3897d0d5af1ac4f42b237ee01e8b7dd856d47e9280d59f4
Opcode Fuzzy Hash: 857c8a7839a1442c3de43a6b6d76c7d692911da0b0b5365662fbefcef452c939
Instruction Fuzzy Hash: 70A002B901A269C69744AFF4E598BA436B0AEC4A43B2251C7B531F17759A284181CB1E

Function 6907ADA0 Relevance: 3.2, APIs: 2, Instructions: 177COMMON

Download Yara Rule

APIs

Part of subcall function 6907A8D0: GetOEMCP.KERNEL32(00000000,?,?,6907281E,4D88C033), ref: 6907A8FB

IsValidCodePage.KERNEL32(-00000030,00000000,?,?,?,?,?,?,?,?,6907ABE7,?,00000000,?,6907281E,4D88C033), ref: 6907AE01
GetCPInfo.KERNEL32(00000000,?,?,?,?,?,?,?,?,6907ABE7,?,00000000,?,6907281E,4D88C033), ref: 6907AE43

Memory Dump Source

Source File: 00000008.00000002.630949046.0000000069051000.00000020.00000001.01000000.00000008.sdmp, Offset: 69050000, based on PE: true

Associated: 00000008.00000002.630944757.0000000069050000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000008.00000002.630957701.0000000069084000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000008.00000002.630964126.0000000069094000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000008.00000002.630971010.00000000690A4000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000008.00000002.630975828.00000000690BC000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000008.00000002.630978860.00000000690BD000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_69050000_MSWordServices.jbxd

Similarity

API ID: CodeInfoPageValid
String ID:
API String ID: 546120528-0
Opcode ID: 2e20294113042830144dd75d3ae278122a57b3d58e704cd397e08ef859bee6c3
Instruction ID: 98a2b9948203437b997948dcbcf3c3a45fcd382f2e412963575a45ba812fe030
Opcode Fuzzy Hash: 2e20294113042830144dd75d3ae278122a57b3d58e704cd397e08ef859bee6c3
Instruction Fuzzy Hash: 975121B0A043459EDB21CFB5C8807ABBBF5BF46334F208D6AD0928F651E774D5468B94

Function 69060479 Relevance: 3.1, APIs: 2, Instructions: 78timeCOMMONLIBRARYCODE

Download Yara Rule

APIs

GetDateFormatW.KERNEL32 ref: 69060501
GetTimeFormatW.KERNEL32(00000800,00000000,?,00000000,00000000,00000000), ref: 69060559

Memory Dump Source

Source File: 00000008.00000002.630949046.0000000069051000.00000020.00000001.01000000.00000008.sdmp, Offset: 69050000, based on PE: true

Associated: 00000008.00000002.630944757.0000000069050000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000008.00000002.630957701.0000000069084000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000008.00000002.630964126.0000000069094000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000008.00000002.630971010.00000000690A4000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000008.00000002.630975828.00000000690BC000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000008.00000002.630978860.00000000690BD000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_69050000_MSWordServices.jbxd

Similarity

API ID: Format$DateTime
String ID:
API String ID: 2545834208-0
Opcode ID: f69ac2d6f44c8d83ab125ed74b1590bdf143e19c133c97803fd5f0b93cf5a135
Instruction ID: bccb97dfc022bd0924e61d1cad899d2e2bcc08621dac03681443d8c67d7161ea
Opcode Fuzzy Hash: f69ac2d6f44c8d83ab125ed74b1590bdf143e19c133c97803fd5f0b93cf5a135
Instruction Fuzzy Hash: C531C579E1024AAFCB00DFA8C981BAEB7B8FF08700F104456E915E7350E734AA45CBA5

Function 69061EF1 Relevance: 3.1, APIs: 2, Instructions: 76COMMON

Download Yara Rule

APIs

__RTC_Initialize.LIBCMT ref: 69061F3E

Part of subcall function 690626CA: InitializeSListHead.KERNEL32(690BC7C8,69061F48,69091E78,00000010,69061ED9,?,?,?,69062101,?,00000001,?,?,00000001,?,69091EC0), ref: 690626CF

___scrt_is_nonwritable_in_current_image.LIBCMT ref: 69061FA8

Memory Dump Source

Source File: 00000008.00000002.630949046.0000000069051000.00000020.00000001.01000000.00000008.sdmp, Offset: 69050000, based on PE: true

Associated: 00000008.00000002.630944757.0000000069050000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000008.00000002.630957701.0000000069084000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000008.00000002.630964126.0000000069094000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000008.00000002.630971010.00000000690A4000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000008.00000002.630975828.00000000690BC000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000008.00000002.630978860.00000000690BD000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_69050000_MSWordServices.jbxd

Similarity

API ID: Initialize$HeadList___scrt_is_nonwritable_in_current_image
String ID:
API String ID: 3231365870-0
Opcode ID: 36c94cdadc48c22a2a88ef00bb741d6339b98dcbb41a07efedf852c5d02e58b4
Instruction ID: 12aee9eddb76e8a2d2f1bfe4f80e0b191d302ab741291e51060c37e7a42c3730
Opcode Fuzzy Hash: 36c94cdadc48c22a2a88ef00bb741d6339b98dcbb41a07efedf852c5d02e58b4
Instruction Fuzzy Hash: EF21E13A64C245AEDF40EFBC990179C37E0AF1236CF50AC19E485A71F1CB722186D6A5

Function 2D9116D6 Relevance: 3.0, APIs: 2, Instructions: 45COMMON

Download Yara Rule

APIs

__EH_prolog3.LIBCMT ref: 2D9116DD
GetClassInfoA.USER32(?,?,?), ref: 2D9116EF

Part of subcall function 2D910D75: RegisterClassA.USER32(?), ref: 2D910DA4

Memory Dump Source

Source File: 00000008.00000002.630919973.000000002D901000.00000020.00000001.01000000.00000007.sdmp, Offset: 2D900000, based on PE: true

Associated: 00000008.00000002.630913986.000000002D900000.00000002.00000001.01000000.00000007.sdmpDownload File
Associated: 00000008.00000002.630927583.000000002D91E000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000008.00000002.630932693.000000002D922000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000008.00000002.630937868.000000002D923000.00000002.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_2d900000_MSWordServices.jbxd

Similarity

API ID: Class$H_prolog3InfoRegister
String ID:
API String ID: 1538853570-0
Opcode ID: 0d048d33d9568ad8a878d772342d47cfc2d86701b7f51cb5c49b14539e00a99a
Instruction ID: 2b76b8af1c9809aa105d0da5ef226d7d03be1f8acda3eeb4296e6a229dee216b
Opcode Fuzzy Hash: 0d048d33d9568ad8a878d772342d47cfc2d86701b7f51cb5c49b14539e00a99a
Instruction Fuzzy Hash: 0801DF7150825DBADB02AB708C80F9F7BADEF25380F518650FA55F7190CA34EB018BA6

Function 690616CA Relevance: 3.0, APIs: 2, Instructions: 35COMMONLIBRARYCODE

Download Yara Rule

APIs

RtlEncodePointer.NTDLL(00000008,?,69060F82,69060FC8,?,69060E0F,00000000,00000000,00000000,00000004,69053E5F,00000001,00000000,?,6905971B,00000008), ref: 690616DD
IsProcessorFeaturePresent.KERNEL32(00000017), ref: 6906EE95

Memory Dump Source

Source File: 00000008.00000002.630949046.0000000069051000.00000020.00000001.01000000.00000008.sdmp, Offset: 69050000, based on PE: true

Associated: 00000008.00000002.630944757.0000000069050000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000008.00000002.630957701.0000000069084000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000008.00000002.630964126.0000000069094000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000008.00000002.630971010.00000000690A4000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000008.00000002.630975828.00000000690BC000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000008.00000002.630978860.00000000690BD000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_69050000_MSWordServices.jbxd

Similarity

API ID: EncodeFeaturePointerPresentProcessor
String ID:
API String ID: 4030241255-0
Opcode ID: cbc53107aef7a40cb2c41f8ab4d56b30476398c3e1a6e1d25a55537338842283
Instruction ID: 032878d7188c5ca720e1bf86adb487a6f8ff71ffd64944af547d2f42b1d70b99
Opcode Fuzzy Hash: cbc53107aef7a40cb2c41f8ab4d56b30476398c3e1a6e1d25a55537338842283
Instruction Fuzzy Hash: 27F0B474248345FAFF005BB0EC1A73237D8BB46718F005428E6395B1E0EB714451CA91

Function 690538B3 Relevance: 3.0, APIs: 2, Instructions: 22memoryCOMMONLIBRARYCODE

Download Yara Rule

APIs

SysAllocString.OLEAUT32(690842A8), ref: 690538CE
_com_issue_error.COMSUPP ref: 690538EC

Memory Dump Source

Source File: 00000008.00000002.630949046.0000000069051000.00000020.00000001.01000000.00000008.sdmp, Offset: 69050000, based on PE: true

Associated: 00000008.00000002.630944757.0000000069050000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000008.00000002.630957701.0000000069084000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000008.00000002.630964126.0000000069094000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000008.00000002.630971010.00000000690A4000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000008.00000002.630975828.00000000690BC000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000008.00000002.630978860.00000000690BD000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_69050000_MSWordServices.jbxd

Similarity

API ID: AllocString_com_issue_error
String ID:
API String ID: 1702453268-0
Opcode ID: a2f73d9c2ec27a4ae3bd12991de54b9907979b7f467eff14b3fa86b7404bfa98
Instruction ID: 2c9669e75f1371a60e92b879b64558ab2e7e05fd84e8029b724610d58b9886e4
Opcode Fuzzy Hash: a2f73d9c2ec27a4ae3bd12991de54b9907979b7f467eff14b3fa86b7404bfa98
Instruction Fuzzy Hash: 1FF0A571504208EFCB05CF54C685B9DBBF5FB09359F208098E409AB260C775AE90DB54

Function 690653A1 Relevance: 3.0, APIs: 2, Instructions: 19COMMON

Download Yara Rule

APIs

___vcrt_FlsSetValue.LIBVCRUNTIME ref: 690653BF
___vcrt_uninitialize_ptd.LIBVCRUNTIME ref: 690653CA

Memory Dump Source

Source File: 00000008.00000002.630949046.0000000069051000.00000020.00000001.01000000.00000008.sdmp, Offset: 69050000, based on PE: true

Associated: 00000008.00000002.630944757.0000000069050000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000008.00000002.630957701.0000000069084000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000008.00000002.630964126.0000000069094000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000008.00000002.630971010.00000000690A4000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000008.00000002.630975828.00000000690BC000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000008.00000002.630978860.00000000690BD000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_69050000_MSWordServices.jbxd

Similarity

API ID: Value___vcrt____vcrt_uninitialize_ptd
String ID:
API String ID: 1660781231-0
Opcode ID: e97b00face0fc0c55c8904453aef4e955503ff19129e8ded85227a83b30514da
Instruction ID: b34e55d0d48fa3d8cc650ff231e06b91cb76bf8fd6a25d95104abea169079048
Opcode Fuzzy Hash: e97b00face0fc0c55c8904453aef4e955503ff19129e8ded85227a83b30514da
Instruction Fuzzy Hash: 0FD0C97E448222665D049AB86A4574E32A86D53BB97E0AF8ED060CB5F3EBA18045F252

Function 2D915FCC Relevance: 3.0, APIs: 2, Instructions: 15COMMON

Download Yara Rule

APIs

KiUserCallbackDispatcher.NTDLL(00000002,?,2D916023,?,?,?,2D912209), ref: 2D915FDE
GetSystemMetrics.USER32(00000003,?,2D916023,?,?,?,2D912209), ref: 2D915FE8

Memory Dump Source

Source File: 00000008.00000002.630919973.000000002D901000.00000020.00000001.01000000.00000007.sdmp, Offset: 2D900000, based on PE: true

Associated: 00000008.00000002.630913986.000000002D900000.00000002.00000001.01000000.00000007.sdmpDownload File
Associated: 00000008.00000002.630927583.000000002D91E000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000008.00000002.630932693.000000002D922000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000008.00000002.630937868.000000002D923000.00000002.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_2d900000_MSWordServices.jbxd

Similarity

API ID: CallbackDispatcherMetricsSystemUser
String ID:
API String ID: 365337688-0
Opcode ID: 579562cc34432b8f3b98766d14d64bb8531814eb3c12f8b0a38e2f922cfdc6cf
Instruction ID: 95d02ae81b30815f2ecc72ab3e2bab3fcb9b51c4302bb42fa41396224352fd02
Opcode Fuzzy Hash: 579562cc34432b8f3b98766d14d64bb8531814eb3c12f8b0a38e2f922cfdc6cf
Instruction Fuzzy Hash: 1BD09E7190D2249EE74D9B94A9097A837F8FB05B50F45405BF25496780C7B99441CB94

Function 6907A9A4 Relevance: 1.6, APIs: 1, Instructions: 147COMMON

Download Yara Rule

APIs

GetCPInfo.KERNEL32(E8458D00,?,6907ABF3,6907ABE7,00000000), ref: 6907A9D6

Memory Dump Source

Source File: 00000008.00000002.630949046.0000000069051000.00000020.00000001.01000000.00000008.sdmp, Offset: 69050000, based on PE: true

Associated: 00000008.00000002.630944757.0000000069050000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000008.00000002.630957701.0000000069084000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000008.00000002.630964126.0000000069094000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000008.00000002.630971010.00000000690A4000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000008.00000002.630975828.00000000690BC000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000008.00000002.630978860.00000000690BD000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_69050000_MSWordServices.jbxd

Similarity

API ID: Info
String ID:
API String ID: 1807457897-0
Opcode ID: a32f399e7597d375dfa184456edda998a04179031cea83a500e4fc3e0815d472
Instruction ID: c69d582dcf3d9ee9ddfeb78e988bb92f011217f2c6544dcd31949d2ab6f51eb4
Opcode Fuzzy Hash: a32f399e7597d375dfa184456edda998a04179031cea83a500e4fc3e0815d472
Instruction Fuzzy Hash: AF512871904358AADB318E28CD80BEA7BF9EB5A334F2449A9D599DB182D334DD45CF20

Function 69072C29 Relevance: 1.6, APIs: 1, Instructions: 57COMMONLIBRARYCODE

Download Yara Rule

Memory Dump Source

Source File: 00000008.00000002.630949046.0000000069051000.00000020.00000001.01000000.00000008.sdmp, Offset: 69050000, based on PE: true

Associated: 00000008.00000002.630944757.0000000069050000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000008.00000002.630957701.0000000069084000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000008.00000002.630964126.0000000069094000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000008.00000002.630971010.00000000690A4000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000008.00000002.630975828.00000000690BC000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000008.00000002.630978860.00000000690BD000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_69050000_MSWordServices.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 1fc5171bf387af132695a17509b0ebf64006f95edb2c342856ec75585eebad65
Instruction ID: 0a455c60bcb1a2b1513b9b975287bfed4dbf01fbb410884a804f43350b25aadd
Opcode Fuzzy Hash: 1fc5171bf387af132695a17509b0ebf64006f95edb2c342856ec75585eebad65
Instruction Fuzzy Hash: 5D01B1377103696FAF26CE6EDE40A5A37EBBBD63707108620FA14DF184DB31D8028694

Function 6906641D Relevance: 1.5, APIs: 1, Instructions: 34libraryloaderCOMMONLIBRARYCODE

Download Yara Rule

APIs

GetProcAddress.KERNEL32(00000000,?,?,00000000,?,690664F7,00000002,FlsGetValue,69086D98,FlsGetValue,00000000,?,6906538B,?,?,6906500A), ref: 6906644F

Memory Dump Source

Source File: 00000008.00000002.630949046.0000000069051000.00000020.00000001.01000000.00000008.sdmp, Offset: 69050000, based on PE: true

Associated: 00000008.00000002.630944757.0000000069050000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000008.00000002.630957701.0000000069084000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000008.00000002.630964126.0000000069094000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000008.00000002.630971010.00000000690A4000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000008.00000002.630975828.00000000690BC000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000008.00000002.630978860.00000000690BD000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_69050000_MSWordServices.jbxd

Similarity

API ID: AddressProc
String ID:
API String ID: 190572456-0
Opcode ID: 030fae151fc65672513f20ade85a9899a259b9c4c569df14667a2f871c05e4fc
Instruction ID: cd29ca36a6a9fdc5a1d22e7e7daf56ed6159dfcb3ef19693704c36be3c07917e
Opcode Fuzzy Hash: 030fae151fc65672513f20ade85a9899a259b9c4c569df14667a2f871c05e4fc
Instruction Fuzzy Hash: 70F0A0373052669F9F028EACED00A8A37E9FF427607104925FE28D71A0EB31D920CBD0

Function 69053ACF Relevance: 1.5, APIs: 1, Instructions: 30COMMONLIBRARYCODE

Download Yara Rule

APIs

_com_issue_error.COMSUPP ref: 69053B1C

Part of subcall function 690538B3: SysAllocString.OLEAUT32(690842A8), ref: 690538CE
Part of subcall function 690538B3: _com_issue_error.COMSUPP ref: 690538EC

Memory Dump Source

Source File: 00000008.00000002.630949046.0000000069051000.00000020.00000001.01000000.00000008.sdmp, Offset: 69050000, based on PE: true

Associated: 00000008.00000002.630944757.0000000069050000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000008.00000002.630957701.0000000069084000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000008.00000002.630964126.0000000069094000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000008.00000002.630971010.00000000690A4000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000008.00000002.630975828.00000000690BC000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000008.00000002.630978860.00000000690BD000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_69050000_MSWordServices.jbxd

Similarity

API ID: _com_issue_error$AllocString
String ID:
API String ID: 245909816-0
Opcode ID: 13b674d840465a56e2b40eb797581a7cda9a4d04fc487add7e1d411286644f8a
Instruction ID: a0b1eef80daf1751f887966a2b091647f9bc2329826b2f5caa7448a637b6b2b0
Opcode Fuzzy Hash: 13b674d840465a56e2b40eb797581a7cda9a4d04fc487add7e1d411286644f8a
Instruction Fuzzy Hash: ADF0F474D00208FFEB04DF94D64AB9DBBB1AF48319F1084A9E5066B290C7B45AA4CF54

Function 2D910D75 Relevance: 1.5, APIs: 1, Instructions: 23registryCOMMON

Download Yara Rule

APIs

RegisterClassA.USER32(?), ref: 2D910DA4

Part of subcall function 2D903E45: OutputDebugStringA.KERNEL32(IsolationAware function called after IsolationAwareCleanup), ref: 2D903E58

Memory Dump Source

Source File: 00000008.00000002.630919973.000000002D901000.00000020.00000001.01000000.00000007.sdmp, Offset: 2D900000, based on PE: true

Associated: 00000008.00000002.630913986.000000002D900000.00000002.00000001.01000000.00000007.sdmpDownload File
Associated: 00000008.00000002.630927583.000000002D91E000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000008.00000002.630932693.000000002D922000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000008.00000002.630937868.000000002D923000.00000002.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_2d900000_MSWordServices.jbxd

Similarity

API ID: ClassDebugOutputRegisterString
String ID:
API String ID: 3599523695-0
Opcode ID: c95188c6cdb9557d6a465356c04afde8654e65703d53988debafdd2f5b1e0261
Instruction ID: 0809db0205b462c6351725c3de75c4c594ac3ba6a07876c55f318876fe8ae23d
Opcode Fuzzy Hash: c95188c6cdb9557d6a465356c04afde8654e65703d53988debafdd2f5b1e0261
Instruction Fuzzy Hash: 12F01C74C0520D9ACB019FA589006EDBAB9EF94300F204256F164B2190CB35C642DB24

Function 69053E51 Relevance: 1.5, APIs: 1, Instructions: 12COMMONLIBRARYCODE

Download Yara Rule

APIs

std::locale::_Init.LIBCPMT ref: 69053E5A

Part of subcall function 69060DDD: __EH_prolog3.LIBCMT ref: 69060DE4
Part of subcall function 69060DDD: std::_Lockit::_Lockit.LIBCPMT ref: 69060DEF
Part of subcall function 69060DDD: std::locale::_Setgloballocale.LIBCPMT ref: 69060E0A
Part of subcall function 69060DDD: _Yarn.LIBCPMT ref: 69060E20
Part of subcall function 69060DDD: std::_Lockit::~_Lockit.LIBCPMT ref: 69060E60

Memory Dump Source

Source File: 00000008.00000002.630949046.0000000069051000.00000020.00000001.01000000.00000008.sdmp, Offset: 69050000, based on PE: true

Associated: 00000008.00000002.630944757.0000000069050000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000008.00000002.630957701.0000000069084000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000008.00000002.630964126.0000000069094000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000008.00000002.630971010.00000000690A4000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000008.00000002.630975828.00000000690BC000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000008.00000002.630978860.00000000690BD000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_69050000_MSWordServices.jbxd

Similarity

API ID: Lockitstd::_std::locale::_$H_prolog3InitLockit::_Lockit::~_SetgloballocaleYarn
String ID:
API String ID: 3852638621-0
Opcode ID: 8545ae05784f8a21cad9e0bf71749b5b2261889e105c3fa367e56751cb253a0e
Instruction ID: 39158ea678968cc591e5de8c585d2980b83bcbda7803cb7f11d15b8677914b3a
Opcode Fuzzy Hash: 8545ae05784f8a21cad9e0bf71749b5b2261889e105c3fa367e56751cb253a0e
Instruction Fuzzy Hash: 77C01270A44208FFCB04CB99E501A4CB7F49B04308F20809DA008A7381D6B1BE019B94

Function 2D917B5E Relevance: 1.5, APIs: 1, Instructions: 12COMMONLIBRARYCODE

Download Yara Rule

APIs

__onexit.MSVCRT ref: 2D917B66

Part of subcall function 2D917AB9: _decode_pointer.MSVCR90(2D91B680,00000014,2D917B6B,?), ref: 2D917AD1
Part of subcall function 2D917AB9: _onexit.MSVCR90 ref: 2D917ADF

Memory Dump Source

Source File: 00000008.00000002.630919973.000000002D901000.00000020.00000001.01000000.00000007.sdmp, Offset: 2D900000, based on PE: true

Associated: 00000008.00000002.630913986.000000002D900000.00000002.00000001.01000000.00000007.sdmpDownload File
Associated: 00000008.00000002.630927583.000000002D91E000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000008.00000002.630932693.000000002D922000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000008.00000002.630937868.000000002D923000.00000002.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_2d900000_MSWordServices.jbxd

Similarity

API ID: __onexit_decode_pointer_onexit
String ID:
API String ID: 1239580707-0
Opcode ID: 18df6e88158e6ef15c1797887b805ccb06412361fbc7add706a09e5bbcfb0787
Instruction ID: f053743b11a89faf715cec75b1f552fd5f5de03614e12898973f426eaca266b5
Opcode Fuzzy Hash: 18df6e88158e6ef15c1797887b805ccb06412361fbc7add706a09e5bbcfb0787
Instruction Fuzzy Hash: A4B0923209811FAB9A1059F6E8048253A89C7A1660B590222B50ED64A0DDA3D9154091

Function 2D91819E Relevance: 1.5, APIs: 1, Instructions: 9COMMON

Download Yara Rule

APIs

___delayLoadHelper2@8.DELAYIMP ref: 2D9181A8

Part of subcall function 2D918A22: RaiseException.KERNEL32(C06D0057,00000000,00000001,?), ref: 2D918A9B

Memory Dump Source

Source File: 00000008.00000002.630919973.000000002D901000.00000020.00000001.01000000.00000007.sdmp, Offset: 2D900000, based on PE: true

Associated: 00000008.00000002.630913986.000000002D900000.00000002.00000001.01000000.00000007.sdmpDownload File
Associated: 00000008.00000002.630927583.000000002D91E000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000008.00000002.630932693.000000002D922000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000008.00000002.630937868.000000002D923000.00000002.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_2d900000_MSWordServices.jbxd

Similarity

API ID: ExceptionHelper2@8LoadRaise___delay
String ID:
API String ID: 123106877-0
Opcode ID: 440137075b8614736313f31727f618e4e6a24be6415dc77cba5c613e3c29b872
Instruction ID: a535ddc71e109ca44521642629f1f5fd729afe5585702fcbfb0aee02be88f827
Opcode Fuzzy Hash: 440137075b8614736313f31727f618e4e6a24be6415dc77cba5c613e3c29b872
Instruction Fuzzy Hash: 7AA011A30A800ABC30088308EE08CBA820EC2C0A20320C20AF000F0800A800EC082030

Function 2D9181BC Relevance: 1.5, APIs: 1, Instructions: 9COMMON

Download Yara Rule

APIs

___delayLoadHelper2@8.DELAYIMP ref: 2D9181A8

Part of subcall function 2D918A22: RaiseException.KERNEL32(C06D0057,00000000,00000001,?), ref: 2D918A9B

Memory Dump Source

Source File: 00000008.00000002.630919973.000000002D901000.00000020.00000001.01000000.00000007.sdmp, Offset: 2D900000, based on PE: true

Associated: 00000008.00000002.630913986.000000002D900000.00000002.00000001.01000000.00000007.sdmpDownload File
Associated: 00000008.00000002.630927583.000000002D91E000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000008.00000002.630932693.000000002D922000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000008.00000002.630937868.000000002D923000.00000002.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_2d900000_MSWordServices.jbxd

Similarity

API ID: ExceptionHelper2@8LoadRaise___delay
String ID:
API String ID: 123106877-0
Opcode ID: 02e8256cac99965ba1ba6078fe23538027ab278ac287205f4d22f65205a31389
Instruction ID: 89e29b939a70c6477514a235337f912bd79c3b71f5bf37eccf175b61aa70e20a
Opcode Fuzzy Hash: 02e8256cac99965ba1ba6078fe23538027ab278ac287205f4d22f65205a31389
Instruction Fuzzy Hash: 42A011830AC00AFC30088308AE08CBA820EC2C0AA0320CA0AF000A0800A800CC082030

Function 2D9181D6 Relevance: 1.5, APIs: 1, Instructions: 9COMMON

Download Yara Rule

APIs

___delayLoadHelper2@8.DELAYIMP ref: 2D9181A8

Part of subcall function 2D918A22: RaiseException.KERNEL32(C06D0057,00000000,00000001,?), ref: 2D918A9B

Memory Dump Source

Source File: 00000008.00000002.630919973.000000002D901000.00000020.00000001.01000000.00000007.sdmp, Offset: 2D900000, based on PE: true

Associated: 00000008.00000002.630913986.000000002D900000.00000002.00000001.01000000.00000007.sdmpDownload File
Associated: 00000008.00000002.630927583.000000002D91E000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000008.00000002.630932693.000000002D922000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000008.00000002.630937868.000000002D923000.00000002.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_2d900000_MSWordServices.jbxd

Similarity

API ID: ExceptionHelper2@8LoadRaise___delay
String ID:
API String ID: 123106877-0
Opcode ID: 4cf408690ac34b6e24feb18ff44e263b94e42726dd4848af1f8f33a9081ad63c
Instruction ID: 89e29b939a70c6477514a235337f912bd79c3b71f5bf37eccf175b61aa70e20a
Opcode Fuzzy Hash: 4cf408690ac34b6e24feb18ff44e263b94e42726dd4848af1f8f33a9081ad63c
Instruction Fuzzy Hash: 42A011830AC00AFC30088308AE08CBA820EC2C0AA0320CA0AF000A0800A800CC082030

Function 2D9181C9 Relevance: 1.5, APIs: 1, Instructions: 9COMMON

Download Yara Rule

APIs

___delayLoadHelper2@8.DELAYIMP ref: 2D9181A8

Part of subcall function 2D918A22: RaiseException.KERNEL32(C06D0057,00000000,00000001,?), ref: 2D918A9B

Memory Dump Source

Source File: 00000008.00000002.630919973.000000002D901000.00000020.00000001.01000000.00000007.sdmp, Offset: 2D900000, based on PE: true

Associated: 00000008.00000002.630913986.000000002D900000.00000002.00000001.01000000.00000007.sdmpDownload File
Associated: 00000008.00000002.630927583.000000002D91E000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000008.00000002.630932693.000000002D922000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000008.00000002.630937868.000000002D923000.00000002.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_2d900000_MSWordServices.jbxd

Similarity

API ID: ExceptionHelper2@8LoadRaise___delay
String ID:
API String ID: 123106877-0
Opcode ID: 1d24279b31b29947bfcc79e42a777c119f98eb20e0cc645514429bcbcb24d689
Instruction ID: 89e29b939a70c6477514a235337f912bd79c3b71f5bf37eccf175b61aa70e20a
Opcode Fuzzy Hash: 1d24279b31b29947bfcc79e42a777c119f98eb20e0cc645514429bcbcb24d689
Instruction Fuzzy Hash: 42A011830AC00AFC30088308AE08CBA820EC2C0AA0320CA0AF000A0800A800CC082030

Function 2D9181F0 Relevance: 1.5, APIs: 1, Instructions: 9COMMON

Download Yara Rule

APIs

___delayLoadHelper2@8.DELAYIMP ref: 2D9181A8

Part of subcall function 2D918A22: RaiseException.KERNEL32(C06D0057,00000000,00000001,?), ref: 2D918A9B

Memory Dump Source

Source File: 00000008.00000002.630919973.000000002D901000.00000020.00000001.01000000.00000007.sdmp, Offset: 2D900000, based on PE: true

Associated: 00000008.00000002.630913986.000000002D900000.00000002.00000001.01000000.00000007.sdmpDownload File
Associated: 00000008.00000002.630927583.000000002D91E000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000008.00000002.630932693.000000002D922000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000008.00000002.630937868.000000002D923000.00000002.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_2d900000_MSWordServices.jbxd

Similarity

API ID: ExceptionHelper2@8LoadRaise___delay
String ID:
API String ID: 123106877-0
Opcode ID: f372bd14908de67905b9f97981909311afc7dda7592067ebe132faba2369c86d
Instruction ID: 89e29b939a70c6477514a235337f912bd79c3b71f5bf37eccf175b61aa70e20a
Opcode Fuzzy Hash: f372bd14908de67905b9f97981909311afc7dda7592067ebe132faba2369c86d
Instruction Fuzzy Hash: 42A011830AC00AFC30088308AE08CBA820EC2C0AA0320CA0AF000A0800A800CC082030

Function 2D9181FD Relevance: 1.5, APIs: 1, Instructions: 9COMMON

Download Yara Rule

APIs

___delayLoadHelper2@8.DELAYIMP ref: 2D9181A8

Part of subcall function 2D918A22: RaiseException.KERNEL32(C06D0057,00000000,00000001,?), ref: 2D918A9B

Memory Dump Source

Source File: 00000008.00000002.630919973.000000002D901000.00000020.00000001.01000000.00000007.sdmp, Offset: 2D900000, based on PE: true

Associated: 00000008.00000002.630913986.000000002D900000.00000002.00000001.01000000.00000007.sdmpDownload File
Associated: 00000008.00000002.630927583.000000002D91E000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000008.00000002.630932693.000000002D922000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000008.00000002.630937868.000000002D923000.00000002.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_2d900000_MSWordServices.jbxd

Similarity

API ID: ExceptionHelper2@8LoadRaise___delay
String ID:
API String ID: 123106877-0
Opcode ID: 0e320b272050f3fe377ddb28a61e37fecfe74537b9a8ce53776b7f0924d9f084
Instruction ID: 89e29b939a70c6477514a235337f912bd79c3b71f5bf37eccf175b61aa70e20a
Opcode Fuzzy Hash: 0e320b272050f3fe377ddb28a61e37fecfe74537b9a8ce53776b7f0924d9f084
Instruction Fuzzy Hash: 42A011830AC00AFC30088308AE08CBA820EC2C0AA0320CA0AF000A0800A800CC082030

Function 2D9181E3 Relevance: 1.5, APIs: 1, Instructions: 9COMMON

Download Yara Rule

APIs

___delayLoadHelper2@8.DELAYIMP ref: 2D9181A8

Part of subcall function 2D918A22: RaiseException.KERNEL32(C06D0057,00000000,00000001,?), ref: 2D918A9B

Memory Dump Source

Source File: 00000008.00000002.630919973.000000002D901000.00000020.00000001.01000000.00000007.sdmp, Offset: 2D900000, based on PE: true

Associated: 00000008.00000002.630913986.000000002D900000.00000002.00000001.01000000.00000007.sdmpDownload File
Associated: 00000008.00000002.630927583.000000002D91E000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000008.00000002.630932693.000000002D922000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000008.00000002.630937868.000000002D923000.00000002.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_2d900000_MSWordServices.jbxd

Similarity

API ID: ExceptionHelper2@8LoadRaise___delay
String ID:
API String ID: 123106877-0
Opcode ID: 1060675e85c8ece75f1ce2df8dba1397e23265f0e24a3e7fa20d4c4ba871f573
Instruction ID: 89e29b939a70c6477514a235337f912bd79c3b71f5bf37eccf175b61aa70e20a
Opcode Fuzzy Hash: 1060675e85c8ece75f1ce2df8dba1397e23265f0e24a3e7fa20d4c4ba871f573
Instruction Fuzzy Hash: 42A011830AC00AFC30088308AE08CBA820EC2C0AA0320CA0AF000A0800A800CC082030

Function 2D918217 Relevance: 1.5, APIs: 1, Instructions: 9COMMON

Download Yara Rule

APIs

___delayLoadHelper2@8.DELAYIMP ref: 2D9181A8

Part of subcall function 2D918A22: RaiseException.KERNEL32(C06D0057,00000000,00000001,?), ref: 2D918A9B

Memory Dump Source

Source File: 00000008.00000002.630919973.000000002D901000.00000020.00000001.01000000.00000007.sdmp, Offset: 2D900000, based on PE: true

Associated: 00000008.00000002.630913986.000000002D900000.00000002.00000001.01000000.00000007.sdmpDownload File
Associated: 00000008.00000002.630927583.000000002D91E000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000008.00000002.630932693.000000002D922000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000008.00000002.630937868.000000002D923000.00000002.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_2d900000_MSWordServices.jbxd

Similarity

API ID: ExceptionHelper2@8LoadRaise___delay
String ID:
API String ID: 123106877-0
Opcode ID: 6504c3c5bba56959925b585f6bc9636d89df652cc1eb499e2b4304b036409759
Instruction ID: 89e29b939a70c6477514a235337f912bd79c3b71f5bf37eccf175b61aa70e20a
Opcode Fuzzy Hash: 6504c3c5bba56959925b585f6bc9636d89df652cc1eb499e2b4304b036409759
Instruction Fuzzy Hash: 42A011830AC00AFC30088308AE08CBA820EC2C0AA0320CA0AF000A0800A800CC082030

Function 2D91820A Relevance: 1.5, APIs: 1, Instructions: 9COMMON

Download Yara Rule

APIs

___delayLoadHelper2@8.DELAYIMP ref: 2D9181A8

Part of subcall function 2D918A22: RaiseException.KERNEL32(C06D0057,00000000,00000001,?), ref: 2D918A9B

Memory Dump Source

Source File: 00000008.00000002.630919973.000000002D901000.00000020.00000001.01000000.00000007.sdmp, Offset: 2D900000, based on PE: true

Associated: 00000008.00000002.630913986.000000002D900000.00000002.00000001.01000000.00000007.sdmpDownload File
Associated: 00000008.00000002.630927583.000000002D91E000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000008.00000002.630932693.000000002D922000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000008.00000002.630937868.000000002D923000.00000002.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_2d900000_MSWordServices.jbxd

Similarity

API ID: ExceptionHelper2@8LoadRaise___delay
String ID:
API String ID: 123106877-0
Opcode ID: 9410fd50bb1a17411f7eab4d5ffc620547ccdc7bd6ab1c1064ff861a055f0e59
Instruction ID: 89e29b939a70c6477514a235337f912bd79c3b71f5bf37eccf175b61aa70e20a
Opcode Fuzzy Hash: 9410fd50bb1a17411f7eab4d5ffc620547ccdc7bd6ab1c1064ff861a055f0e59
Instruction Fuzzy Hash: 42A011830AC00AFC30088308AE08CBA820EC2C0AA0320CA0AF000A0800A800CC082030

Function 2D918234 Relevance: 1.5, APIs: 1, Instructions: 9COMMON

Download Yara Rule

APIs

___delayLoadHelper2@8.DELAYIMP ref: 2D9181A8

Part of subcall function 2D918A22: RaiseException.KERNEL32(C06D0057,00000000,00000001,?), ref: 2D918A9B

Memory Dump Source

Source File: 00000008.00000002.630919973.000000002D901000.00000020.00000001.01000000.00000007.sdmp, Offset: 2D900000, based on PE: true

Associated: 00000008.00000002.630913986.000000002D900000.00000002.00000001.01000000.00000007.sdmpDownload File
Associated: 00000008.00000002.630927583.000000002D91E000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000008.00000002.630932693.000000002D922000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000008.00000002.630937868.000000002D923000.00000002.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_2d900000_MSWordServices.jbxd

Similarity

API ID: ExceptionHelper2@8LoadRaise___delay
String ID:
API String ID: 123106877-0
Opcode ID: fa18aa9b46ab48324cf786d21a322623ac7f79e24d95da5f820f3f72509a738e
Instruction ID: 89e29b939a70c6477514a235337f912bd79c3b71f5bf37eccf175b61aa70e20a
Opcode Fuzzy Hash: fa18aa9b46ab48324cf786d21a322623ac7f79e24d95da5f820f3f72509a738e
Instruction Fuzzy Hash: 42A011830AC00AFC30088308AE08CBA820EC2C0AA0320CA0AF000A0800A800CC082030

Function 2D918224 Relevance: 1.5, APIs: 1, Instructions: 9COMMON

Download Yara Rule

APIs

___delayLoadHelper2@8.DELAYIMP ref: 2D9181A8

Part of subcall function 2D918A22: RaiseException.KERNEL32(C06D0057,00000000,00000001,?), ref: 2D918A9B

Memory Dump Source

Source File: 00000008.00000002.630919973.000000002D901000.00000020.00000001.01000000.00000007.sdmp, Offset: 2D900000, based on PE: true

Associated: 00000008.00000002.630913986.000000002D900000.00000002.00000001.01000000.00000007.sdmpDownload File
Associated: 00000008.00000002.630927583.000000002D91E000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000008.00000002.630932693.000000002D922000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000008.00000002.630937868.000000002D923000.00000002.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_2d900000_MSWordServices.jbxd

Similarity

API ID: ExceptionHelper2@8LoadRaise___delay
String ID:
API String ID: 123106877-0
Opcode ID: 631c51a8a260f7128e18a434e3568d04dcc1c77c7d735a6a139916f135f38173
Instruction ID: 89e29b939a70c6477514a235337f912bd79c3b71f5bf37eccf175b61aa70e20a
Opcode Fuzzy Hash: 631c51a8a260f7128e18a434e3568d04dcc1c77c7d735a6a139916f135f38173
Instruction Fuzzy Hash: 42A011830AC00AFC30088308AE08CBA820EC2C0AA0320CA0AF000A0800A800CC082030

Function 2D918254 Relevance: 1.5, APIs: 1, Instructions: 9COMMON

Download Yara Rule

APIs

___delayLoadHelper2@8.DELAYIMP ref: 2D9181A8

Part of subcall function 2D918A22: RaiseException.KERNEL32(C06D0057,00000000,00000001,?), ref: 2D918A9B

Memory Dump Source

Source File: 00000008.00000002.630919973.000000002D901000.00000020.00000001.01000000.00000007.sdmp, Offset: 2D900000, based on PE: true

Associated: 00000008.00000002.630913986.000000002D900000.00000002.00000001.01000000.00000007.sdmpDownload File
Associated: 00000008.00000002.630927583.000000002D91E000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000008.00000002.630932693.000000002D922000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000008.00000002.630937868.000000002D923000.00000002.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_2d900000_MSWordServices.jbxd

Similarity

API ID: ExceptionHelper2@8LoadRaise___delay
String ID:
API String ID: 123106877-0
Opcode ID: 3c4b12fc2633c0f1028f063e7a4263f531bca99448aa9453633aae43159ebf54
Instruction ID: 89e29b939a70c6477514a235337f912bd79c3b71f5bf37eccf175b61aa70e20a
Opcode Fuzzy Hash: 3c4b12fc2633c0f1028f063e7a4263f531bca99448aa9453633aae43159ebf54
Instruction Fuzzy Hash: 42A011830AC00AFC30088308AE08CBA820EC2C0AA0320CA0AF000A0800A800CC082030

Function 2D918244 Relevance: 1.5, APIs: 1, Instructions: 9COMMON

Download Yara Rule

APIs

___delayLoadHelper2@8.DELAYIMP ref: 2D9181A8

Part of subcall function 2D918A22: RaiseException.KERNEL32(C06D0057,00000000,00000001,?), ref: 2D918A9B

Memory Dump Source

Source File: 00000008.00000002.630919973.000000002D901000.00000020.00000001.01000000.00000007.sdmp, Offset: 2D900000, based on PE: true

Associated: 00000008.00000002.630913986.000000002D900000.00000002.00000001.01000000.00000007.sdmpDownload File
Associated: 00000008.00000002.630927583.000000002D91E000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000008.00000002.630932693.000000002D922000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000008.00000002.630937868.000000002D923000.00000002.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_2d900000_MSWordServices.jbxd

Similarity

API ID: ExceptionHelper2@8LoadRaise___delay
String ID:
API String ID: 123106877-0
Opcode ID: aacb696dd9c6f70f0551bb4b7bc2b0f9037c6edffe3e9be3ee3d2c9ecd37c117
Instruction ID: 89e29b939a70c6477514a235337f912bd79c3b71f5bf37eccf175b61aa70e20a
Opcode Fuzzy Hash: aacb696dd9c6f70f0551bb4b7bc2b0f9037c6edffe3e9be3ee3d2c9ecd37c117
Instruction Fuzzy Hash: 42A011830AC00AFC30088308AE08CBA820EC2C0AA0320CA0AF000A0800A800CC082030

Function 2D9178B5 Relevance: 1.5, APIs: 1, Instructions: 2COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000008.00000002.630919973.000000002D901000.00000020.00000001.01000000.00000007.sdmp, Offset: 2D900000, based on PE: true

Associated: 00000008.00000002.630913986.000000002D900000.00000002.00000001.01000000.00000007.sdmpDownload File
Associated: 00000008.00000002.630927583.000000002D91E000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000008.00000002.630932693.000000002D922000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000008.00000002.630937868.000000002D923000.00000002.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_2d900000_MSWordServices.jbxd

Similarity

API ID: CurrentProcessProtectTimeVirtual$AddressCountCounterFileHandleHeapModulePerformanceProcQuerySystemThreadTick
String ID:
API String ID: 2966426798-0
Opcode ID: b1d9e3360e75d73aef1975e7a51aa155834824d47b87844c87d294b04e291f44
Instruction ID: dbbec491db3338af3b9fed81d1c24489abab4f14fda3913f0576541afd65f981
Opcode Fuzzy Hash: b1d9e3360e75d73aef1975e7a51aa155834824d47b87844c87d294b04e291f44
Instruction Fuzzy Hash:

Function 2D905027 Relevance: 1.3, APIs: 1, Instructions: 28stringCOMMON

Download Yara Rule

APIs

lstrcmpiA.KERNEL32(?), ref: 2D905032

Memory Dump Source

Source File: 00000008.00000002.630919973.000000002D901000.00000020.00000001.01000000.00000007.sdmp, Offset: 2D900000, based on PE: true

Associated: 00000008.00000002.630913986.000000002D900000.00000002.00000001.01000000.00000007.sdmpDownload File
Associated: 00000008.00000002.630927583.000000002D91E000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000008.00000002.630932693.000000002D922000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000008.00000002.630937868.000000002D923000.00000002.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_2d900000_MSWordServices.jbxd

Similarity

API ID: lstrcmpi
String ID:
API String ID: 1586166983-0
Opcode ID: bde384254d03f084f1e3a2e6139cc3d19112a0026f5ceded0c8c9415c5140813
Instruction ID: 6cc59868d1480799c7784b5fa77939578e5145469084ab8e07f0b8e8c0c135bb
Opcode Fuzzy Hash: bde384254d03f084f1e3a2e6139cc3d19112a0026f5ceded0c8c9415c5140813
Instruction Fuzzy Hash: 84E06D31214108AF87929E64EC00A267BFCFF05A91300C869F859D6110EA21D810CBE0

Non-executed Functions

Function 2D907BC9 Relevance: 21.3, APIs: 14, Instructions: 274windowCOMMON

Download Yara Rule

APIs

__EH_prolog3_catch.LIBCMT ref: 2D907BD0
IsIconic.USER32(00000001), ref: 2D907C45
SetForegroundWindow.USER32(00000001), ref: 2D907C69
LoadMenuW.USER32(?,00000048,2D905B5D,?,?,?,00008920,000088BA,00008981,00008981), ref: 2D907CA7
MultiByteToWideChar.KERNEL32(00000000,00000000,00000001,?,00000001), ref: 2D907CDB
SetWindowLongA.USER32(00000003,000000F4,0000E900), ref: 2D907D64
GetFocus.USER32(?,?,00000000,?,?,00CF0000,00000000,00000000,00000000,00000000,?,00000000,00000000), ref: 2D907D6A
SetFocus.USER32 ref: 2D907D83

Part of subcall function 2D912F6C: GetMessageA.USER32 ref: 2D912F79
Part of subcall function 2D912F6C: TranslateMessage.USER32(2D91E9A0), ref: 2D912F99
Part of subcall function 2D912F6C: DispatchMessageA.USER32(2D91E9A0,?,?,00000000,?,?,00CF0000,00000000,00000000,00000000,00000000,?,00000000,00000000), ref: 2D912FA0

GetSystemMetrics.USER32(00000000,00000000,?,?,00000000,?,?,00CF0000,00000000,00000000,00000000,00000000,?,00000000,00000000), ref: 2D907DAF
GetSystemMetrics.USER32(00000001,?,?,00000000,?,?,00CF0000,00000000,00000000,00000000,00000000,?,00000000,00000000), ref: 2D907DDF
GetSystemMetrics.USER32(00000001,2D91F688,?,?,00000000,?,00000018,?,?,00000000,?,?,00CF0000,00000000,00000000,00000000), ref: 2D907E15
SetForegroundWindow.USER32(00000003), ref: 2D907E48
PeekMessageA.USER32(?,00000000,00000000,00000000,00000000), ref: 2D907E7E
PeekMessageA.USER32(?,00000000,00000000,00000000,00000000), ref: 2D907ECD

Memory Dump Source

Source File: 00000008.00000002.630919973.000000002D901000.00000020.00000001.01000000.00000007.sdmp, Offset: 2D900000, based on PE: true

Associated: 00000008.00000002.630913986.000000002D900000.00000002.00000001.01000000.00000007.sdmpDownload File
Associated: 00000008.00000002.630927583.000000002D91E000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000008.00000002.630932693.000000002D922000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000008.00000002.630937868.000000002D923000.00000002.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_2d900000_MSWordServices.jbxd

Similarity

API ID: Message$MetricsSystemWindow$FocusForegroundPeek$ByteCharDispatchH_prolog3_catchIconicLoadLongMenuMultiTranslateWide
String ID:
API String ID: 2541888167-0
Opcode ID: a469249eb8b19ffe6b69740ace2554047f1ac36e03facefd61fe2780277a7fb4
Instruction ID: 68b4c67fc30d407aa297f34c0da99461d59be207910079e8053c6d51990fd738
Opcode Fuzzy Hash: a469249eb8b19ffe6b69740ace2554047f1ac36e03facefd61fe2780277a7fb4
Instruction Fuzzy Hash: 1CA1C171A05118EFCF02DFA4D884AAE7BB9EF44722F108059FA05BB241CB75DA40CFA0

Function 2D9183CC Relevance: 19.4, APIs: 6, Strings: 5, Instructions: 116libraryloaderCOMMON

Download Yara Rule

APIs

GetSystemDirectoryW.KERNEL32(?,00000105), ref: 2D9183F5
LoadLibraryExW.KERNEL32(?,00000000,00000008,msi.dll,?,00000106), ref: 2D91844A
LoadLibraryW.KERNEL32(msi.dll), ref: 2D918457
GetProcAddress.KERNEL32(00000000,MsiGetProductCodeW), ref: 2D918473
GetProcAddress.KERNEL32(00000000,MsiProvideQualifiedComponentExW), ref: 2D918481

Strings

msi.dll, xrefs: 2D918435, 2D91843A, 2D918456
{1E77DE88-BCAB-4C37-B9E5-073AF52DFD7A}, xrefs: 2D918496, 2D9184D5, 2D918504
MsiProvideQualifiedComponentExW, xrefs: 2D918475
mso14.dll, xrefs: 2D918491, 2D9184D4, 2D918503
MsiGetProductCodeW, xrefs: 2D91846D

Memory Dump Source

Source File: 00000008.00000002.630919973.000000002D901000.00000020.00000001.01000000.00000007.sdmp, Offset: 2D900000, based on PE: true

Associated: 00000008.00000002.630913986.000000002D900000.00000002.00000001.01000000.00000007.sdmpDownload File
Associated: 00000008.00000002.630927583.000000002D91E000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000008.00000002.630932693.000000002D922000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000008.00000002.630937868.000000002D923000.00000002.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_2d900000_MSWordServices.jbxd

Similarity

API ID: AddressLibraryLoadProc$DirectorySystem
String ID: MsiGetProductCodeW$MsiProvideQualifiedComponentExW$msi.dll$mso14.dll${1E77DE88-BCAB-4C37-B9E5-073AF52DFD7A}
API String ID: 2381529825-3601640118
Opcode ID: 6977e3e198769d7077fe74d73a91887ce28f8f0f45b498c95d08f31d889c3b8f
Instruction ID: b3483526e07d66f5b97aa0f1c2b3b81ef6cf52152e227668de164e5e13782856
Opcode Fuzzy Hash: 6977e3e198769d7077fe74d73a91887ce28f8f0f45b498c95d08f31d889c3b8f
Instruction Fuzzy Hash: 764183B190412CABDB119BA4DCC8ABE77BCEF49345F4044EAF349E7140EB308A848F25

Function 2D90DC78 Relevance: 12.5, APIs: 8, Instructions: 540COMMON

Download Yara Rule

APIs

__EH_prolog3_catch_GS.LIBCMT ref: 2D90DC82
malloc.MSVCR90 ref: 2D90DCED
free.MSVCR90 ref: 2D90DD11
free.MSVCR90 ref: 2D90DD19
malloc.MSVCR90 ref: 2D90DE67

Memory Dump Source

Source File: 00000008.00000002.630919973.000000002D901000.00000020.00000001.01000000.00000007.sdmp, Offset: 2D900000, based on PE: true

Associated: 00000008.00000002.630913986.000000002D900000.00000002.00000001.01000000.00000007.sdmpDownload File
Associated: 00000008.00000002.630927583.000000002D91E000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000008.00000002.630932693.000000002D922000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000008.00000002.630937868.000000002D923000.00000002.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_2d900000_MSWordServices.jbxd

Similarity

API ID: freemalloc$H_prolog3_catch_
String ID:
API String ID: 2471221492-0
Opcode ID: 3369fa03d98c332ceaf6779ee9136d7aa6cc2772082b6328d37fff5f52f53a39
Instruction ID: d208b2cfa131a19464d05c20b5e447afb28df464ef8398eecf07703185b8aa18
Opcode Fuzzy Hash: 3369fa03d98c332ceaf6779ee9136d7aa6cc2772082b6328d37fff5f52f53a39
Instruction Fuzzy Hash: F4225C70904218DFDB22CF68E884BADBBB9FF49312F118599FA48BB255DB319941CF50

Function 6907CF41 Relevance: 10.8, APIs: 5, Strings: 1, Instructions: 251COMMONLIBRARYCODE

Download Yara Rule

APIs

Part of subcall function 690702DC: GetLastError.KERNEL32(?,00000008,69079E39,00000000,690668B0), ref: 690702E0
Part of subcall function 690702DC: SetLastError.KERNEL32(00000000,00000006,000000FF), ref: 69070382

GetACP.KERNEL32(?,?,?,?,?,?,69070D22,?,?,?,00000055,?,-00000050,?,?,00000000), ref: 6907D002
IsValidCodePage.KERNEL32(00000000,?,?,?,?,?,?,69070D22,?,?,?,00000055,?,-00000050,?,?), ref: 6907D02D
_wcschr.LIBVCRUNTIME ref: 6907D0C1
_wcschr.LIBVCRUNTIME ref: 6907D0CF
GetLocaleInfoW.KERNEL32(00000000,?,?,00000078,-00000050,00000000,000000D0), ref: 6907D190

Strings

utf8, xrefs: 6907D0FF

Memory Dump Source

Source File: 00000008.00000002.630949046.0000000069051000.00000020.00000001.01000000.00000008.sdmp, Offset: 69050000, based on PE: true

Associated: 00000008.00000002.630944757.0000000069050000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000008.00000002.630957701.0000000069084000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000008.00000002.630964126.0000000069094000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000008.00000002.630971010.00000000690A4000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000008.00000002.630975828.00000000690BC000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000008.00000002.630978860.00000000690BD000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_69050000_MSWordServices.jbxd

Similarity

API ID: ErrorLast_wcschr$CodeInfoLocalePageValid
String ID: utf8
API String ID: 4147378913-905460609
Opcode ID: 5d58cdc5ed8e43fe3b58682f9e1ec8da71ab7885986847649cd953743dc90571
Instruction ID: 246f49e02292a8c7b8b7f6990df7bc8a94c96c09f36a8e2a26d41a69f144239a
Opcode Fuzzy Hash: 5d58cdc5ed8e43fe3b58682f9e1ec8da71ab7885986847649cd953743dc90571
Instruction Fuzzy Hash: 2371C375604316BAEB349B75CC41BAA73ECBF45324F109C2AE519DF280EB71E941C7A8

Function 2D917592 Relevance: 10.6, APIs: 7, Instructions: 57COMMONLIBRARYCODE

Download Yara Rule

APIs

IsDebuggerPresent.KERNEL32 ref: 2D917E3C
_crt_debugger_hook.MSVCR90(00000001), ref: 2D917E49
SetUnhandledExceptionFilter.KERNEL32 ref: 2D917E51
UnhandledExceptionFilter.KERNEL32(2D903308), ref: 2D917E5C
_crt_debugger_hook.MSVCR90(00000001), ref: 2D917E6D
GetCurrentProcess.KERNEL32(C0000409), ref: 2D917E78
TerminateProcess.KERNEL32(00000000), ref: 2D917E7F

Memory Dump Source

Source File: 00000008.00000002.630919973.000000002D901000.00000020.00000001.01000000.00000007.sdmp, Offset: 2D900000, based on PE: true

Associated: 00000008.00000002.630913986.000000002D900000.00000002.00000001.01000000.00000007.sdmpDownload File
Associated: 00000008.00000002.630927583.000000002D91E000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000008.00000002.630932693.000000002D922000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000008.00000002.630937868.000000002D923000.00000002.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_2d900000_MSWordServices.jbxd

Similarity

API ID: ExceptionFilterProcessUnhandled_crt_debugger_hook$CurrentDebuggerPresentTerminate
String ID:
API String ID: 3369434319-0
Opcode ID: fb76a1abb9ecabda5fdee7ad839a8f906df18304e7c8249ca60c75223450e88f
Instruction ID: 392cb0dfc1a98cb0f5a91174fd1031d9c939234613a2d7bf82b2781ed03ee093
Opcode Fuzzy Hash: fb76a1abb9ecabda5fdee7ad839a8f906df18304e7c8249ca60c75223450e88f
Instruction Fuzzy Hash: D621DF7980A304AFC321DFA8E5897583BB4BF08B11F50905AF40897B90E7789585CF0D

Function 6907E384 Relevance: 10.2, APIs: 1, Strings: 4, Instructions: 1436COMMONLIBRARYCODE

Download Yara Rule

APIs

__floor_pentium4.LIBCMT ref: 6907E568

Strings

1#IND, xrefs: 6907E489
1#SNAN, xrefs: 6907E490
1#INF, xrefs: 6907E4BA
1#QNAN, xrefs: 6907E497

Memory Dump Source

Source File: 00000008.00000002.630949046.0000000069051000.00000020.00000001.01000000.00000008.sdmp, Offset: 69050000, based on PE: true

Associated: 00000008.00000002.630944757.0000000069050000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000008.00000002.630957701.0000000069084000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000008.00000002.630964126.0000000069094000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000008.00000002.630971010.00000000690A4000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000008.00000002.630975828.00000000690BC000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000008.00000002.630978860.00000000690BD000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_69050000_MSWordServices.jbxd

Similarity

API ID: __floor_pentium4
String ID: 1#IND$1#INF$1#QNAN$1#SNAN
API String ID: 4168288129-2761157908
Opcode ID: 09430a8825903e433f4ab0bb4aec33fbd683b43812d5df0f4b49d197abefa5de
Instruction ID: 59c3a329fcb78cf698e19e032f4d194a70990a999a3fb31db3d20ac7a5344fbe
Opcode Fuzzy Hash: 09430a8825903e433f4ab0bb4aec33fbd683b43812d5df0f4b49d197abefa5de
Instruction Fuzzy Hash: 74D24772E092288FDB65CE28DD407EAB7F9FB45354F1049EAD50DEB250E734AA818F44

Function 6907D6D0 Relevance: 8.8, APIs: 3, Strings: 2, Instructions: 85COMMONLIBRARYCODE

Download Yara Rule

APIs

GetLocaleInfoW.KERNEL32(?,2000000B,6907D9EE,00000002,00000000,?,?,?,6907D9EE,?,00000000), ref: 6907D769
GetLocaleInfoW.KERNEL32(?,20001004,6907D9EE,00000002,00000000,?,?,?,6907D9EE,?,00000000), ref: 6907D792
GetACP.KERNEL32(?,?,6907D9EE,?,00000000), ref: 6907D7A7

Strings

OCP, xrefs: 6907D724
ACP, xrefs: 6907D6EE

Memory Dump Source

Source File: 00000008.00000002.630949046.0000000069051000.00000020.00000001.01000000.00000008.sdmp, Offset: 69050000, based on PE: true

Associated: 00000008.00000002.630944757.0000000069050000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000008.00000002.630957701.0000000069084000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000008.00000002.630964126.0000000069094000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000008.00000002.630971010.00000000690A4000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000008.00000002.630975828.00000000690BC000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000008.00000002.630978860.00000000690BD000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_69050000_MSWordServices.jbxd

Similarity

API ID: InfoLocale
String ID: ACP$OCP
API String ID: 2299586839-711371036
Opcode ID: 5c6559486ccbb10aeba4c474f235f4d0437789caf57018895e5db8fa480aa8dc
Instruction ID: 25acb9604b0dfd3f90c438bf11745dc86da01dea3aa60c8cd78a796f62b4d2aa
Opcode Fuzzy Hash: 5c6559486ccbb10aeba4c474f235f4d0437789caf57018895e5db8fa480aa8dc
Instruction Fuzzy Hash: F4219232644300BADB349B28DA42B8B76F6BB81B74B568D26E809DF100F732D981C754

Function 6907D8A5 Relevance: 7.7, APIs: 5, Instructions: 183COMMONLIBRARYCODE

Download Yara Rule

APIs

Part of subcall function 690702DC: GetLastError.KERNEL32(?,00000008,69079E39,00000000,690668B0), ref: 690702E0
Part of subcall function 690702DC: SetLastError.KERNEL32(00000000,00000006,000000FF), ref: 69070382

GetUserDefaultLCID.KERNEL32(?,?,?,00000055,?), ref: 6907D9B1
IsValidCodePage.KERNEL32(00000000), ref: 6907D9FA
IsValidLocale.KERNEL32(?,00000001), ref: 6907DA09
GetLocaleInfoW.KERNEL32(?,00001001,-00000050,00000040,?,000000D0,00000055,00000000,?,?,00000055,00000000), ref: 6907DA51
GetLocaleInfoW.KERNEL32(?,00001002,00000030,00000040), ref: 6907DA70

Memory Dump Source

Source File: 00000008.00000002.630949046.0000000069051000.00000020.00000001.01000000.00000008.sdmp, Offset: 69050000, based on PE: true

Associated: 00000008.00000002.630944757.0000000069050000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000008.00000002.630957701.0000000069084000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000008.00000002.630964126.0000000069094000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000008.00000002.630971010.00000000690A4000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000008.00000002.630975828.00000000690BC000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000008.00000002.630978860.00000000690BD000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_69050000_MSWordServices.jbxd

Similarity

API ID: Locale$ErrorInfoLastValid$CodeDefaultPageUser
String ID:
API String ID: 415426439-0
Opcode ID: fa3c52e6dec76cef3e667012e761441fa16d7eaff8869c379196de1b6d3a6217
Instruction ID: bfb24e6217447ed42d5230e28b499c89b3d0deea215cff8cfc7178e8f222bb53
Opcode Fuzzy Hash: fa3c52e6dec76cef3e667012e761441fa16d7eaff8869c379196de1b6d3a6217
Instruction Fuzzy Hash: B6513F76A00305ABEF20DFA5CC44BBE77F8BF45720F15482AE924EF140E7709A418BA5

Function 69075CB2 Relevance: 6.3, APIs: 4, Instructions: 337COMMONLIBRARYCODE

Download Yara Rule

APIs

_strrchr.LIBCMT ref: 69075D3F

Memory Dump Source

Source File: 00000008.00000002.630949046.0000000069051000.00000020.00000001.01000000.00000008.sdmp, Offset: 69050000, based on PE: true

Associated: 00000008.00000002.630944757.0000000069050000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000008.00000002.630957701.0000000069084000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000008.00000002.630964126.0000000069094000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000008.00000002.630971010.00000000690A4000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000008.00000002.630975828.00000000690BC000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000008.00000002.630978860.00000000690BD000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_69050000_MSWordServices.jbxd

Similarity

API ID: _strrchr
String ID:
API String ID: 3213747228-0
Opcode ID: 5a2df6829468a3d1ba630fb8cbc36a6c6803c4e92b5340e5fff4db1baf62b945
Instruction ID: 25151c35220b32397ecef68c0a48cb4770ef5817c76c48b0631e97df083bff6e
Opcode Fuzzy Hash: 5a2df6829468a3d1ba630fb8cbc36a6c6803c4e92b5340e5fff4db1baf62b945
Instruction Fuzzy Hash: 9FB1273AA043459FEB25CF68C8917EEBBF5EF49360F14896AD804EF241D3349901CBA5

Function 6906270B Relevance: 6.1, APIs: 4, Instructions: 73COMMONLIBRARYCODE

Download Yara Rule

APIs

IsProcessorFeaturePresent.KERNEL32(00000017), ref: 69062717
IsDebuggerPresent.KERNEL32 ref: 690627E3
SetUnhandledExceptionFilter.KERNEL32 ref: 69062803
UnhandledExceptionFilter.KERNEL32(?), ref: 6906280D

Memory Dump Source

Source File: 00000008.00000002.630949046.0000000069051000.00000020.00000001.01000000.00000008.sdmp, Offset: 69050000, based on PE: true

Associated: 00000008.00000002.630944757.0000000069050000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000008.00000002.630957701.0000000069084000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000008.00000002.630964126.0000000069094000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000008.00000002.630971010.00000000690A4000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000008.00000002.630975828.00000000690BC000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000008.00000002.630978860.00000000690BD000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_69050000_MSWordServices.jbxd

Similarity

API ID: ExceptionFilterPresentUnhandled$DebuggerFeatureProcessor
String ID:
API String ID: 254469556-0
Opcode ID: e767eaa541d854b102ba27f44df900366bf5ef9e0ba293087337fbcbb53074cb
Instruction ID: 6749c16ecb048c371f039799a16edbe2c30c362fb536bfd1f398be9afff68084
Opcode Fuzzy Hash: e767eaa541d854b102ba27f44df900366bf5ef9e0ba293087337fbcbb53074cb
Instruction Fuzzy Hash: F3312975D06219DBDF11DFA4D9897CCBBF8BF09304F1044AAE408AB250EB705B858F85

Function 6907D354 Relevance: 4.7, APIs: 3, Instructions: 205COMMON

Download Yara Rule

APIs

Part of subcall function 690702DC: GetLastError.KERNEL32(?,00000008,69079E39,00000000,690668B0), ref: 690702E0
Part of subcall function 690702DC: SetLastError.KERNEL32(00000000,00000006,000000FF), ref: 69070382

GetLocaleInfoW.KERNEL32(00000000,?,?,00000078), ref: 6907D3A8
GetLocaleInfoW.KERNEL32(00000000,?,?,00000078), ref: 6907D3F2
GetLocaleInfoW.KERNEL32(00000000,?,?,00000078), ref: 6907D4B8

Memory Dump Source

Source File: 00000008.00000002.630949046.0000000069051000.00000020.00000001.01000000.00000008.sdmp, Offset: 69050000, based on PE: true

Associated: 00000008.00000002.630944757.0000000069050000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000008.00000002.630957701.0000000069084000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000008.00000002.630964126.0000000069094000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000008.00000002.630971010.00000000690A4000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000008.00000002.630975828.00000000690BC000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000008.00000002.630978860.00000000690BD000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_69050000_MSWordServices.jbxd

Similarity

API ID: InfoLocale$ErrorLast
String ID:
API String ID: 661929714-0
Opcode ID: dcb8794c63526d69d45f2fd8821b460d6623db60326eda237b482fa123642aef
Instruction ID: 1a9ec67496c76c199f19ec49e2b2ca09adb4cce74fd8d5830cbf41ae41507430
Opcode Fuzzy Hash: dcb8794c63526d69d45f2fd8821b460d6623db60326eda237b482fa123642aef
Instruction Fuzzy Hash: C8619F715443179FEB24CF28C982BAA77F8FF05324F10896AE915CB184E734E981DB58

Function 69066733 Relevance: 4.6, APIs: 3, Instructions: 77COMMONLIBRARYCODE

Download Yara Rule

APIs

IsDebuggerPresent.KERNEL32(?,?,?,?,?,?), ref: 6906682B
SetUnhandledExceptionFilter.KERNEL32 ref: 69066835
UnhandledExceptionFilter.KERNEL32(?), ref: 69066842

Memory Dump Source

Source File: 00000008.00000002.630949046.0000000069051000.00000020.00000001.01000000.00000008.sdmp, Offset: 69050000, based on PE: true

Associated: 00000008.00000002.630944757.0000000069050000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000008.00000002.630957701.0000000069084000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000008.00000002.630964126.0000000069094000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000008.00000002.630971010.00000000690A4000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000008.00000002.630975828.00000000690BC000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000008.00000002.630978860.00000000690BD000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_69050000_MSWordServices.jbxd

Similarity

API ID: ExceptionFilterUnhandled$DebuggerPresent
String ID:
API String ID: 3906539128-0
Opcode ID: 5e0d67ce36c11647a25ba31ef99b72d9240e6d4588060ba243f01107d9e7dfb3
Instruction ID: 4437d31665f30bea77679b43fd88dc753a0246e5ad6c5630b971265e80a6239b
Opcode Fuzzy Hash: 5e0d67ce36c11647a25ba31ef99b72d9240e6d4588060ba243f01107d9e7dfb3
Instruction Fuzzy Hash: DB31C575901228ABCF61DF64D98878CBBF8BF19314F5055EAE41CA7260EB709B858F44

Function 2D9140C6 Relevance: 4.5, APIs: 3, Instructions: 36windowCOMMON

Download Yara Rule

APIs

IsWindowVisible.USER32(?), ref: 2D9140D8
IsIconic.USER32(?), ref: 2D9140EA
ShowWindow.USER32(?,?), ref: 2D914108

Memory Dump Source

Source File: 00000008.00000002.630919973.000000002D901000.00000020.00000001.01000000.00000007.sdmp, Offset: 2D900000, based on PE: true

Associated: 00000008.00000002.630913986.000000002D900000.00000002.00000001.01000000.00000007.sdmpDownload File
Associated: 00000008.00000002.630927583.000000002D91E000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000008.00000002.630932693.000000002D922000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000008.00000002.630937868.000000002D923000.00000002.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_2d900000_MSWordServices.jbxd

Similarity

API ID: Window$IconicShowVisible
String ID:
API String ID: 500985287-0
Opcode ID: f160578b3df303eea6177fc5739c5783fd2c18c66079fa20d1a699b39c7540db
Instruction ID: 06fb136cd9078257f54e0134df3af43f04252b197dff732cc01da80189ec2539
Opcode Fuzzy Hash: f160578b3df303eea6177fc5739c5783fd2c18c66079fa20d1a699b39c7540db
Instruction Fuzzy Hash: C3F0B4313045095BC721072BDC08B2ABAADEFD7EB1B004139F665F21E0DE20C4118950

Function 2D90BB17 Relevance: 4.5, APIs: 3, Instructions: 35keyboardwindowCOMMON

Download Yara Rule

APIs

GetParent.USER32(?), ref: 2D90BB31
GetAsyncKeyState.USER32 ref: 2D90BB54
SendMessageA.USER32(?,00000028,00000000,00000000), ref: 2D90BB6D

Memory Dump Source

Source File: 00000008.00000002.630919973.000000002D901000.00000020.00000001.01000000.00000007.sdmp, Offset: 2D900000, based on PE: true

Associated: 00000008.00000002.630913986.000000002D900000.00000002.00000001.01000000.00000007.sdmpDownload File
Associated: 00000008.00000002.630927583.000000002D91E000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000008.00000002.630932693.000000002D922000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000008.00000002.630937868.000000002D923000.00000002.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_2d900000_MSWordServices.jbxd

Similarity

API ID: AsyncMessageParentSendState
String ID:
API String ID: 2531950252-0
Opcode ID: 3aa5404a20c3c713bee301f1871318cb3323833702be628f8de6f9144548c3fa
Instruction ID: 9fa3c41c625579aed6e4acdf7364e33437dec83bbcd3fb5dc60878da57eb8d87
Opcode Fuzzy Hash: 3aa5404a20c3c713bee301f1871318cb3323833702be628f8de6f9144548c3fa
Instruction Fuzzy Hash: 91F05B31549714E7D7121B50B805FAA36E8EF10FCBF108065F70475574E675C581DA99

Function 2D912F1C Relevance: 4.5, APIs: 3, Instructions: 28keyboardCOMMON

Download Yara Rule

APIs

GetKeyState.USER32(00000010), ref: 2D912F3F
GetKeyState.USER32(00000011), ref: 2D912F48
GetKeyState.USER32(00000012), ref: 2D912F51

Memory Dump Source

Source File: 00000008.00000002.630919973.000000002D901000.00000020.00000001.01000000.00000007.sdmp, Offset: 2D900000, based on PE: true

Associated: 00000008.00000002.630913986.000000002D900000.00000002.00000001.01000000.00000007.sdmpDownload File
Associated: 00000008.00000002.630927583.000000002D91E000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000008.00000002.630932693.000000002D922000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000008.00000002.630937868.000000002D923000.00000002.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_2d900000_MSWordServices.jbxd

Similarity

API ID: State
String ID:
API String ID: 1649606143-0
Opcode ID: 5e96bc9a252840c011b70d87ebfb8d1ef21afddea44e9bf50c578941d1a38f51
Instruction ID: 833f0bbaa78e7e013eb37f759471086fda7aff59b1ea53f040bf8630328012c5
Opcode Fuzzy Hash: 5e96bc9a252840c011b70d87ebfb8d1ef21afddea44e9bf50c578941d1a38f51
Instruction Fuzzy Hash: 14E01A3564625DC9EB417760B902FE416649B02B90F05C0A5BB5CBB2D6DAA0C6439EA0

Function 2D915E13 Relevance: 4.5, APIs: 3, Instructions: 19memoryCOMMONLIBRARYCODE

Download Yara Rule

APIs

TlsAlloc.KERNEL32(00000000,?,2D915946,?,?,?,2D910E48,00000004,2D904F59), ref: 2D915E1B
GetVersion.KERNEL32(?,2D915946,?,?,?,2D910E48,00000004,2D904F59), ref: 2D915E1F
TlsAlloc.KERNEL32(?,2D915946,?,?,?,2D910E48,00000004,2D904F59), ref: 2D915E32

Memory Dump Source

Source File: 00000008.00000002.630919973.000000002D901000.00000020.00000001.01000000.00000007.sdmp, Offset: 2D900000, based on PE: true

Associated: 00000008.00000002.630913986.000000002D900000.00000002.00000001.01000000.00000007.sdmpDownload File
Associated: 00000008.00000002.630927583.000000002D91E000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000008.00000002.630932693.000000002D922000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000008.00000002.630937868.000000002D923000.00000002.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_2d900000_MSWordServices.jbxd

Similarity

API ID: Alloc$Version
String ID:
API String ID: 3440021707-0
Opcode ID: 5deff1886f829f9e48e3b5be97cd3a917ed038672cf4db3485a30246029d6c12
Instruction ID: 7d7991f2cc88c958a33ade6ee3768f49a25d0deed5b300a3fdab4ba506bc24db
Opcode Fuzzy Hash: 5deff1886f829f9e48e3b5be97cd3a917ed038672cf4db3485a30246029d6c12
Instruction Fuzzy Hash: 4AD0A737F0E11E6247D2913CB90029922BEB9C58A33170863F240F3205D774C8034AA5

Function 2D911D25 Relevance: 3.8, APIs: 1, Strings: 1, Instructions: 346COMMON

Download Yara Rule

APIs

__EH_prolog3.LIBCMT ref: 2D911D2C

Strings

, xrefs: 2D911DC9

Memory Dump Source

Source File: 00000008.00000002.630919973.000000002D901000.00000020.00000001.01000000.00000007.sdmp, Offset: 2D900000, based on PE: true

Associated: 00000008.00000002.630913986.000000002D900000.00000002.00000001.01000000.00000007.sdmpDownload File
Associated: 00000008.00000002.630927583.000000002D91E000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000008.00000002.630932693.000000002D922000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000008.00000002.630937868.000000002D923000.00000002.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_2d900000_MSWordServices.jbxd

Similarity

API ID: H_prolog3
String ID:
API String ID: 431132790-3916222277
Opcode ID: 86dc749799d55d30e9faab614bcbe85cc26f06ef6865324f10d154297b178839
Instruction ID: bd4807c15d487ccb5e1ce36b0b61a93406787dfb665cd9ede0c18ede5ec9ff96
Opcode Fuzzy Hash: 86dc749799d55d30e9faab614bcbe85cc26f06ef6865324f10d154297b178839
Instruction Fuzzy Hash: 0CB1767460810DFFDB129F64CC80FAE3BA9FB48250F118258F919BB291DB36DA11CB65

Function 6906E7A0 Relevance: 3.4, APIs: 2, Instructions: 449COMMONLIBRARYCODE

Download Yara Rule

Memory Dump Source

Source File: 00000008.00000002.630949046.0000000069051000.00000020.00000001.01000000.00000008.sdmp, Offset: 69050000, based on PE: true

Associated: 00000008.00000002.630944757.0000000069050000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000008.00000002.630957701.0000000069084000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000008.00000002.630964126.0000000069094000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000008.00000002.630971010.00000000690A4000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000008.00000002.630975828.00000000690BC000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000008.00000002.630978860.00000000690BD000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_69050000_MSWordServices.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: f1abc4516867f9721299842ef38f97ff36ff93041716b9c1f66a367978e5b0d3
Instruction ID: 8dc5194df1feaad666dab5b007d90bd25c938cbb83cfc159330e4ec3cd1e2a73
Opcode Fuzzy Hash: f1abc4516867f9721299842ef38f97ff36ff93041716b9c1f66a367978e5b0d3
Instruction Fuzzy Hash: 02F14071E002199FDB14CF68C9907AEB7F1FF89324F158669D815A7390D730A951CF90

Function 6907203C Relevance: 1.8, APIs: 1, Instructions: 274COMMONLIBRARYCODE

Download Yara Rule

APIs

RaiseException.KERNEL32(C000000D,00000000,00000001,?,?,00000008,?,?,69072037,?,?,00000008,?,?,69081147,00000000), ref: 69072269

Memory Dump Source

Source File: 00000008.00000002.630949046.0000000069051000.00000020.00000001.01000000.00000008.sdmp, Offset: 69050000, based on PE: true

Associated: 00000008.00000002.630944757.0000000069050000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000008.00000002.630957701.0000000069084000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000008.00000002.630964126.0000000069094000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000008.00000002.630971010.00000000690A4000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000008.00000002.630975828.00000000690BC000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000008.00000002.630978860.00000000690BD000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_69050000_MSWordServices.jbxd

Similarity

API ID: ExceptionRaise
String ID:
API String ID: 3997070919-0
Opcode ID: c70f5cf856452fd7e4764a64d1951b91f0686db51ffbccfd249d3c68c54476cf
Instruction ID: c26706af82956472a411f3c0358173eb53cf028a619e9dfde1d091cd1a67a177
Opcode Fuzzy Hash: c70f5cf856452fd7e4764a64d1951b91f0686db51ffbccfd249d3c68c54476cf
Instruction Fuzzy Hash: 7DB14531610609DFDB24CF2CC486B587BE1FF45364F258A98E9A9CF2A1C335E992CB44

Function 690628D5 Relevance: 1.6, APIs: 1, Instructions: 147COMMON

Download Yara Rule

APIs

IsProcessorFeaturePresent.KERNEL32(0000000A), ref: 690628EB

Memory Dump Source

Source File: 00000008.00000002.630949046.0000000069051000.00000020.00000001.01000000.00000008.sdmp, Offset: 69050000, based on PE: true

Associated: 00000008.00000002.630944757.0000000069050000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000008.00000002.630957701.0000000069084000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000008.00000002.630964126.0000000069094000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000008.00000002.630971010.00000000690A4000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000008.00000002.630975828.00000000690BC000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000008.00000002.630978860.00000000690BD000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_69050000_MSWordServices.jbxd

Similarity

API ID: FeaturePresentProcessor
String ID:
API String ID: 2325560087-0
Opcode ID: a786d63f268bd7837e6a98aeab922a6fcd2479ec2ca90aade72f9bb04f484d7f
Instruction ID: 1cea2c600b7b75766b1759c95ae056b93c278afa745a6fad09e03bb1f10a0a80
Opcode Fuzzy Hash: a786d63f268bd7837e6a98aeab922a6fcd2479ec2ca90aade72f9bb04f484d7f
Instruction Fuzzy Hash: E651ADB2E142558FEF14CF5AC4827AEBBF4FB8A314F10886AC461EB254D3759941CFA0

Function 6907A2F4 Relevance: 1.6, APIs: 1, Instructions: 140COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000008.00000002.630949046.0000000069051000.00000020.00000001.01000000.00000008.sdmp, Offset: 69050000, based on PE: true

Associated: 00000008.00000002.630944757.0000000069050000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000008.00000002.630957701.0000000069084000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000008.00000002.630964126.0000000069094000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000008.00000002.630971010.00000000690A4000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000008.00000002.630975828.00000000690BC000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000008.00000002.630978860.00000000690BD000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_69050000_MSWordServices.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 9f940ba14c8e4468eef151f2894af8db7a105bf497ba31a220fe286d8b95468e
Instruction ID: a455ab2af99e2f28c63ff63a1daae4f81f87b8321f8560e1ff6ef06f21b526a3
Opcode Fuzzy Hash: 9f940ba14c8e4468eef151f2894af8db7a105bf497ba31a220fe286d8b95468e
Instruction Fuzzy Hash: 3641D5B580421DAFDB20CF68CC89BAABBB9AF45324F2046D9E40DD7200D7319E848F64

Function 6906C36A Relevance: 1.6, Strings: 1, Instructions: 388COMMONLIBRARYCODE

Download Yara Rule

Strings

0, xrefs: 6906C4FF

Memory Dump Source

Source File: 00000008.00000002.630949046.0000000069051000.00000020.00000001.01000000.00000008.sdmp, Offset: 69050000, based on PE: true

Associated: 00000008.00000002.630944757.0000000069050000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000008.00000002.630957701.0000000069084000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000008.00000002.630964126.0000000069094000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000008.00000002.630971010.00000000690A4000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000008.00000002.630975828.00000000690BC000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000008.00000002.630978860.00000000690BD000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_69050000_MSWordServices.jbxd

Similarity

API ID:
String ID: 0
API String ID: 0-4108050209
Opcode ID: fc896463354fe9d86a16e0b85a522e934efe314720f9f1ebc960775c1e87f335
Instruction ID: 6f008e9ee6447c166a4b59904d66f9b1a8f68ed340f79b0ae1e137e906d3a2c0
Opcode Fuzzy Hash: fc896463354fe9d86a16e0b85a522e934efe314720f9f1ebc960775c1e87f335
Instruction Fuzzy Hash: C4E1DA756006258FCF24CF28C580BAEB7F1BF4A714B509E1DD66A9B2B0D730E882CB51

Function 6906BFDC Relevance: 1.6, Strings: 1, Instructions: 344COMMONLIBRARYCODE

Download Yara Rule

Strings

0, xrefs: 6906C16A

Memory Dump Source

Source File: 00000008.00000002.630949046.0000000069051000.00000020.00000001.01000000.00000008.sdmp, Offset: 69050000, based on PE: true

Associated: 00000008.00000002.630944757.0000000069050000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000008.00000002.630957701.0000000069084000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000008.00000002.630964126.0000000069094000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000008.00000002.630971010.00000000690A4000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000008.00000002.630975828.00000000690BC000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000008.00000002.630978860.00000000690BD000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_69050000_MSWordServices.jbxd

Similarity

API ID:
String ID: 0
API String ID: 0-4108050209
Opcode ID: 33bfdf8c9470d1d85e1cb1e891edb3dfdef105690abc3ecd364dd48cc634f2b6
Instruction ID: a567a1e94ea2c0d48cf6f00b7f962c8925f73ca675abbf36c768abb70d2367c0
Opcode Fuzzy Hash: 33bfdf8c9470d1d85e1cb1e891edb3dfdef105690abc3ecd364dd48cc634f2b6
Instruction Fuzzy Hash: 98C1D0745006668FDF14CF68C5907AEB7F5BF0A304F508E1DDAA69B2B1C731A846CB90

Function 6907D5A7 Relevance: 1.6, APIs: 1, Instructions: 83COMMON

Download Yara Rule

APIs

Part of subcall function 690702DC: GetLastError.KERNEL32(?,00000008,69079E39,00000000,690668B0), ref: 690702E0
Part of subcall function 690702DC: SetLastError.KERNEL32(00000000,00000006,000000FF), ref: 69070382

GetLocaleInfoW.KERNEL32(00000000,?,?,00000078), ref: 6907D5FB

Memory Dump Source

Source File: 00000008.00000002.630949046.0000000069051000.00000020.00000001.01000000.00000008.sdmp, Offset: 69050000, based on PE: true

Associated: 00000008.00000002.630944757.0000000069050000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000008.00000002.630957701.0000000069084000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000008.00000002.630964126.0000000069094000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000008.00000002.630971010.00000000690A4000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000008.00000002.630975828.00000000690BC000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000008.00000002.630978860.00000000690BD000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_69050000_MSWordServices.jbxd

Similarity

API ID: ErrorLast$InfoLocale
String ID:
API String ID: 3736152602-0
Opcode ID: d193a2527ec1c2ded503a4f93774ec1d785c74929ee2f6208b515d561b259e7f
Instruction ID: 4560a2f90429d3a94b474d25797d5e02206b08c8c6281eaf1eb4027362c96204
Opcode Fuzzy Hash: d193a2527ec1c2ded503a4f93774ec1d785c74929ee2f6208b515d561b259e7f
Instruction Fuzzy Hash: 3F21C272654306ABDB28DA28DD41FAA37ECEF45724B10447BE909DB140EB34E940CB58

Function 6907D22E Relevance: 1.6, APIs: 1, Instructions: 63COMMONLIBRARYCODE

Download Yara Rule

APIs

Part of subcall function 690702DC: GetLastError.KERNEL32(?,00000008,69079E39,00000000,690668B0), ref: 690702E0
Part of subcall function 690702DC: SetLastError.KERNEL32(00000000,00000006,000000FF), ref: 69070382

EnumSystemLocalesW.KERNEL32(6907D354,00000001,00000000,?,-00000050,?,6907D985,00000000,?,?,?,00000055,?), ref: 6907D2A0

Memory Dump Source

Source File: 00000008.00000002.630949046.0000000069051000.00000020.00000001.01000000.00000008.sdmp, Offset: 69050000, based on PE: true

Associated: 00000008.00000002.630944757.0000000069050000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000008.00000002.630957701.0000000069084000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000008.00000002.630964126.0000000069094000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000008.00000002.630971010.00000000690A4000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000008.00000002.630975828.00000000690BC000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000008.00000002.630978860.00000000690BD000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_69050000_MSWordServices.jbxd

Similarity

API ID: ErrorLast$EnumLocalesSystem
String ID:
API String ID: 2417226690-0
Opcode ID: c623aa31fac0d67c508c31e24727513ed691f105cc73ec2c5df4a43794c3dc18
Instruction ID: 34bab84c75dda63ef5f172413092e45cd083ac962adfa2a70d64d6b7e6b88193
Opcode Fuzzy Hash: c623aa31fac0d67c508c31e24727513ed691f105cc73ec2c5df4a43794c3dc18
Instruction Fuzzy Hash: B3114C3B2043055FDB28DF38C9916AAB7E1FF80368B18482ED98B8BA40D331B803C744

Function 6907D7D6 Relevance: 1.5, APIs: 1, Instructions: 45COMMON

Download Yara Rule

APIs

Part of subcall function 690702DC: GetLastError.KERNEL32(?,00000008,69079E39,00000000,690668B0), ref: 690702E0
Part of subcall function 690702DC: SetLastError.KERNEL32(00000000,00000006,000000FF), ref: 69070382

GetLocaleInfoW.KERNEL32(?,20000001,?,00000002,?,00000000,?,?,6907D570,00000000,00000000,?), ref: 6907D802

Memory Dump Source

Source File: 00000008.00000002.630949046.0000000069051000.00000020.00000001.01000000.00000008.sdmp, Offset: 69050000, based on PE: true

Associated: 00000008.00000002.630944757.0000000069050000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000008.00000002.630957701.0000000069084000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000008.00000002.630964126.0000000069094000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000008.00000002.630971010.00000000690A4000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000008.00000002.630975828.00000000690BC000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000008.00000002.630978860.00000000690BD000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_69050000_MSWordServices.jbxd

Similarity

API ID: ErrorLast$InfoLocale
String ID:
API String ID: 3736152602-0
Opcode ID: 9db5851c7ab4159f2b653dfab82030662625d120400b653f8148cbaa6d1d6adb
Instruction ID: c23b0eb3bafdebfbc5f970924616fe65789f6fba4b08804aa05f4618c0094589
Opcode Fuzzy Hash: 9db5851c7ab4159f2b653dfab82030662625d120400b653f8148cbaa6d1d6adb
Instruction Fuzzy Hash: 79F0F937A00316ABDB245A64C805BBF37A8FF40774F504D2ADC15A7140EA30FD02C5D4

Function 6907D13C Relevance: 1.5, APIs: 1, Instructions: 43COMMON

Download Yara Rule

APIs

Part of subcall function 690702DC: GetLastError.KERNEL32(?,00000008,69079E39,00000000,690668B0), ref: 690702E0
Part of subcall function 690702DC: SetLastError.KERNEL32(00000000,00000006,000000FF), ref: 69070382

GetLocaleInfoW.KERNEL32(00000000,?,?,00000078,-00000050,00000000,000000D0), ref: 6907D190

Strings

utf8, xrefs: 6907D0FF

Memory Dump Source

Source File: 00000008.00000002.630949046.0000000069051000.00000020.00000001.01000000.00000008.sdmp, Offset: 69050000, based on PE: true

Associated: 00000008.00000002.630944757.0000000069050000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000008.00000002.630957701.0000000069084000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000008.00000002.630964126.0000000069094000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000008.00000002.630971010.00000000690A4000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000008.00000002.630975828.00000000690BC000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000008.00000002.630978860.00000000690BD000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_69050000_MSWordServices.jbxd

Similarity

API ID: ErrorLast$InfoLocale
String ID: utf8
API String ID: 3736152602-905460609
Opcode ID: e2c68b13122353d40ef11ee0f83983b342afc8eaad3ca66e4a9fc2db767eda30
Instruction ID: 37af13e24741fb345fb210a9c37c35bd5903f5b92a93b83cfb3dac1a80c7aa53
Opcode Fuzzy Hash: e2c68b13122353d40ef11ee0f83983b342afc8eaad3ca66e4a9fc2db767eda30
Instruction Fuzzy Hash: 22F0F436700249ABCB24DB38D805BBA33ACEB45324B10457AE506DB240EB34AD018794

Function 6907D2C9 Relevance: 1.5, APIs: 1, Instructions: 41COMMONLIBRARYCODE

Download Yara Rule

APIs

Part of subcall function 690702DC: GetLastError.KERNEL32(?,00000008,69079E39,00000000,690668B0), ref: 690702E0
Part of subcall function 690702DC: SetLastError.KERNEL32(00000000,00000006,000000FF), ref: 69070382

EnumSystemLocalesW.KERNEL32(6907D5A7,00000001,00000000,?,-00000050,?,6907D949,-00000050,?,?,?,00000055,?,-00000050,?,?), ref: 6907D313

Memory Dump Source

Source File: 00000008.00000002.630949046.0000000069051000.00000020.00000001.01000000.00000008.sdmp, Offset: 69050000, based on PE: true

Associated: 00000008.00000002.630944757.0000000069050000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000008.00000002.630957701.0000000069084000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000008.00000002.630964126.0000000069094000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000008.00000002.630971010.00000000690A4000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000008.00000002.630975828.00000000690BC000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000008.00000002.630978860.00000000690BD000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_69050000_MSWordServices.jbxd

Similarity

API ID: ErrorLast$EnumLocalesSystem
String ID:
API String ID: 2417226690-0
Opcode ID: d239c17233326e8b7f33c39b77e5481c61b2e1d3d0196fa5cffe971f162dea98
Instruction ID: 13e4f442365e7c1149087638f5d8c8ec5ec77f7f7973c6afe900675c60c82304
Opcode Fuzzy Hash: d239c17233326e8b7f33c39b77e5481c61b2e1d3d0196fa5cffe971f162dea98
Instruction Fuzzy Hash: 3EF046363043042FDB249F348880B6A7BE5FF8133CB05882EF9458F640D271AC02D668

Function 69072995 Relevance: 1.5, APIs: 1, Instructions: 33COMMONLIBRARYCODE

Download Yara Rule

APIs

Part of subcall function 6906DD5C: EnterCriticalSection.KERNEL32(-690BC8B0,?,6906F08F,00000000,69092220,0000000C,6906F056,69051ED7,?,690726B5,69051ED7,?,6907047A,00000001,00000364,00000000), ref: 6906DD6B

EnumSystemLocalesW.KERNEL32(69072988,00000001,69092400,0000000C,69072DB7,00000000), ref: 690729CD

Memory Dump Source

Source File: 00000008.00000002.630949046.0000000069051000.00000020.00000001.01000000.00000008.sdmp, Offset: 69050000, based on PE: true

Associated: 00000008.00000002.630944757.0000000069050000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000008.00000002.630957701.0000000069084000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000008.00000002.630964126.0000000069094000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000008.00000002.630971010.00000000690A4000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000008.00000002.630975828.00000000690BC000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000008.00000002.630978860.00000000690BD000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_69050000_MSWordServices.jbxd

Similarity

API ID: CriticalEnterEnumLocalesSectionSystem
String ID:
API String ID: 1272433827-0
Opcode ID: 741ecf46dd8d6b0431cb265109aa833e5d18d6cb8483b45ae6a8987be3da000b
Instruction ID: cb2cbd239943269862c19eea0713f68391646be45d89a8e4933ef81a4033fb9d
Opcode Fuzzy Hash: 741ecf46dd8d6b0431cb265109aa833e5d18d6cb8483b45ae6a8987be3da000b
Instruction Fuzzy Hash: 48F0447AA04214EFDB10DF9CD840BADB7F0FB4A325F10952AE514EB2A0DB765981CB94

Function 6907D1E3 Relevance: 1.5, APIs: 1, Instructions: 31COMMONLIBRARYCODE

Download Yara Rule

APIs

Part of subcall function 690702DC: GetLastError.KERNEL32(?,00000008,69079E39,00000000,690668B0), ref: 690702E0
Part of subcall function 690702DC: SetLastError.KERNEL32(00000000,00000006,000000FF), ref: 69070382

EnumSystemLocalesW.KERNEL32(6907D13C,00000001,00000000,?,?,6907D9A7,-00000050,?,?,?,00000055,?,-00000050,?,?,00000000), ref: 6907D21A

Memory Dump Source

Source File: 00000008.00000002.630949046.0000000069051000.00000020.00000001.01000000.00000008.sdmp, Offset: 69050000, based on PE: true

Associated: 00000008.00000002.630944757.0000000069050000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000008.00000002.630957701.0000000069084000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000008.00000002.630964126.0000000069094000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000008.00000002.630971010.00000000690A4000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000008.00000002.630975828.00000000690BC000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000008.00000002.630978860.00000000690BD000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_69050000_MSWordServices.jbxd

Similarity

API ID: ErrorLast$EnumLocalesSystem
String ID:
API String ID: 2417226690-0
Opcode ID: cc480b257811a4fbfb318328028631ce3921ec1ff5b6c5150c2e99c57e797644
Instruction ID: a58983e7a156f73763c1040baf939c9b3e8e18ce5da0db531d9d4dfae22150f1
Opcode Fuzzy Hash: cc480b257811a4fbfb318328028631ce3921ec1ff5b6c5150c2e99c57e797644
Instruction Fuzzy Hash: A5F0553A30030567CB149F75D90576ABFA8EFC2330B06845AEA098F240D2319843C798

Function 69072EBB Relevance: 1.5, APIs: 1, Instructions: 24COMMONLIBRARYCODE

Download Yara Rule

APIs

GetLocaleInfoW.KERNEL32(00000000,?,00000000,?,-00000050,?,?,?,69071888,?,20001004,00000000,00000002,?,?,69070E8A), ref: 69072EEF

Memory Dump Source

Source File: 00000008.00000002.630949046.0000000069051000.00000020.00000001.01000000.00000008.sdmp, Offset: 69050000, based on PE: true

Associated: 00000008.00000002.630944757.0000000069050000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000008.00000002.630957701.0000000069084000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000008.00000002.630964126.0000000069094000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000008.00000002.630971010.00000000690A4000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000008.00000002.630975828.00000000690BC000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000008.00000002.630978860.00000000690BD000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_69050000_MSWordServices.jbxd

Similarity

API ID: InfoLocale
String ID:
API String ID: 2299586839-0
Opcode ID: 35d44bcae581c46d8a362d8c758a8787f4e3542fbb058dd5df1c56cd5d194e32
Instruction ID: 3a860dd7b2c7221474031da84cb823f82e44b66303df9008cc52815f75eb33d5
Opcode Fuzzy Hash: 35d44bcae581c46d8a362d8c758a8787f4e3542fbb058dd5df1c56cd5d194e32
Instruction Fuzzy Hash: 76E04F35640618BBCF225F64DD08FAE3F69FF45761F008411FD156B150DB328922ABD9

Function 2D917EC9 Relevance: 1.5, APIs: 1, Instructions: 4COMMON

Download Yara Rule

APIs

SetUnhandledExceptionFilter.KERNEL32 ref: 2D917ECE

Memory Dump Source

Source File: 00000008.00000002.630919973.000000002D901000.00000020.00000001.01000000.00000007.sdmp, Offset: 2D900000, based on PE: true

Associated: 00000008.00000002.630913986.000000002D900000.00000002.00000001.01000000.00000007.sdmpDownload File
Associated: 00000008.00000002.630927583.000000002D91E000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000008.00000002.630932693.000000002D922000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000008.00000002.630937868.000000002D923000.00000002.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_2d900000_MSWordServices.jbxd

Similarity

API ID: ExceptionFilterUnhandled
String ID:
API String ID: 3192549508-0
Opcode ID: 37d6682bf4fadb18e07a199fcfab1c7c97ae7a0cffee8bdbfcb484eefdad23a9
Instruction ID: e8874c175a8ef16236591d01641a84afee870b6e643b3c472cf1abfe3cf19580
Opcode Fuzzy Hash: 37d6682bf4fadb18e07a199fcfab1c7c97ae7a0cffee8bdbfcb484eefdad23a9
Instruction Fuzzy Hash: 099002B015500586470017F4A84861525E06F886237450A507001E8139DB1684506925

Function 69078869 Relevance: .6, Instructions: 637COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000008.00000002.630949046.0000000069051000.00000020.00000001.01000000.00000008.sdmp, Offset: 69050000, based on PE: true

Associated: 00000008.00000002.630944757.0000000069050000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000008.00000002.630957701.0000000069084000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000008.00000002.630964126.0000000069094000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000008.00000002.630971010.00000000690A4000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000008.00000002.630975828.00000000690BC000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000008.00000002.630978860.00000000690BD000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_69050000_MSWordServices.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 4dfe01e3f1e86cc57011b3786ed383b6846407111887a051b2cfb2d088a79f74
Instruction ID: 977591cfb5a6e498d8cf678c152da4b6ed16ed4a602d5eaccb9fd248c8fea0ed
Opcode Fuzzy Hash: 4dfe01e3f1e86cc57011b3786ed383b6846407111887a051b2cfb2d088a79f74
Instruction Fuzzy Hash: E1323931E29F414DDB239534C972325A299AFB73D4F11DB37F82AB9A96EB29C4C34140

Function 6907C9F2 Relevance: .3, Instructions: 327COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000008.00000002.630949046.0000000069051000.00000020.00000001.01000000.00000008.sdmp, Offset: 69050000, based on PE: true

Associated: 00000008.00000002.630944757.0000000069050000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000008.00000002.630957701.0000000069084000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000008.00000002.630964126.0000000069094000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000008.00000002.630971010.00000000690A4000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000008.00000002.630975828.00000000690BC000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000008.00000002.630978860.00000000690BD000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_69050000_MSWordServices.jbxd

Similarity

API ID: ErrorLastProcess$CurrentFeatureInfoLocalePresentProcessorTerminate
String ID:
API String ID: 3471368781-0
Opcode ID: 53bd29689fc452e89dc63dbb6fc182bb7f7f94fdc418a17197a731c815aa73b2
Instruction ID: 023014fac066a28389a9dbd9bea6f363e22dc0b98de49e229d2344016268af93
Opcode Fuzzy Hash: 53bd29689fc452e89dc63dbb6fc182bb7f7f94fdc418a17197a731c815aa73b2
Instruction Fuzzy Hash: 8DB1E6755007159BDB34DF24CD82BA7B3F9EB44328F448D6DE942CB680EB75A981C718

Function 69062AF0 Relevance: .1, Instructions: 76COMMONLIBRARYCODE

Download Yara Rule

Memory Dump Source

Source File: 00000008.00000002.630949046.0000000069051000.00000020.00000001.01000000.00000008.sdmp, Offset: 69050000, based on PE: true

Associated: 00000008.00000002.630944757.0000000069050000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000008.00000002.630957701.0000000069084000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000008.00000002.630964126.0000000069094000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000008.00000002.630971010.00000000690A4000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000008.00000002.630975828.00000000690BC000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000008.00000002.630978860.00000000690BD000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_69050000_MSWordServices.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 567adef0f6a617ff7e9a8750fccc1eb3e230b1b82912df90697507ac2483188c
Instruction ID: 1942780585f9c927e348357146802aa230717006b23be9e21bd8033cb8d57d3d
Opcode Fuzzy Hash: 567adef0f6a617ff7e9a8750fccc1eb3e230b1b82912df90697507ac2483188c
Instruction Fuzzy Hash: 5D11C47764118383D2008D2DD8F47ABE7DBFADA3357296B7AD161CB678D323A1479600

Function 69072767 Relevance: .0, Instructions: 22COMMONLIBRARYCODE

Download Yara Rule

Memory Dump Source

Source File: 00000008.00000002.630949046.0000000069051000.00000020.00000001.01000000.00000008.sdmp, Offset: 69050000, based on PE: true

Associated: 00000008.00000002.630944757.0000000069050000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000008.00000002.630957701.0000000069084000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000008.00000002.630964126.0000000069094000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000008.00000002.630971010.00000000690A4000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000008.00000002.630975828.00000000690BC000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000008.00000002.630978860.00000000690BD000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_69050000_MSWordServices.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 40b09f30d7b6bf7c48fafd3229394655d06458f0b2aa6ed93c603fa64a0d1ab1
Instruction ID: a31136ab499b23f9fe38fc8bc372cda7a4a1aa6a1a454acf6351062ab2945837
Opcode Fuzzy Hash: 40b09f30d7b6bf7c48fafd3229394655d06458f0b2aa6ed93c603fa64a0d1ab1
Instruction Fuzzy Hash: 96E08C32921328EBCB20CB8CCA00E8AF3FCFB44A60B1148A6B501D7200C270EE81C7D4

Function 69066E04 Relevance: .0, Instructions: 12COMMONLIBRARYCODE

Download Yara Rule

Memory Dump Source

Source File: 00000008.00000002.630949046.0000000069051000.00000020.00000001.01000000.00000008.sdmp, Offset: 69050000, based on PE: true

Associated: 00000008.00000002.630944757.0000000069050000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000008.00000002.630957701.0000000069084000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000008.00000002.630964126.0000000069094000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000008.00000002.630971010.00000000690A4000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000008.00000002.630975828.00000000690BC000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000008.00000002.630978860.00000000690BD000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_69050000_MSWordServices.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 17ec15a48c8b1f8719dfe3b1da8bb77a82207cfc92cb9bf1eb211070ea6ed9ee
Instruction ID: 3f477d28eedb330f39e0acd3118a8437a9554ecebcb7a7aecc0046c45c9d2875
Opcode Fuzzy Hash: 17ec15a48c8b1f8719dfe3b1da8bb77a82207cfc92cb9bf1eb211070ea6ed9ee
Instruction Fuzzy Hash: 8BC08C38404A0086CE158910D3713A433BEF3817C2F802C8CC4420F691C75E9D82DA40

Function 2D915C05 Relevance: .0, Instructions: 4COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000008.00000002.630919973.000000002D901000.00000020.00000001.01000000.00000007.sdmp, Offset: 2D900000, based on PE: true

Associated: 00000008.00000002.630913986.000000002D900000.00000002.00000001.01000000.00000007.sdmpDownload File
Associated: 00000008.00000002.630927583.000000002D91E000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000008.00000002.630932693.000000002D922000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000008.00000002.630937868.000000002D923000.00000002.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_2d900000_MSWordServices.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 52236d87a9345100f7f3cfc79a13d613243773a7c9f9fd5453c74b531a8e9098
Instruction ID: 369a199bf5a4a3e6143e215430d498b6bfacb124cdb9dda6992b48518bd796c2
Opcode Fuzzy Hash: 52236d87a9345100f7f3cfc79a13d613243773a7c9f9fd5453c74b531a8e9098
Instruction Fuzzy Hash: 6D90023114C60CC652411589640573173ACA501AD3A4001A1E510916125566641089DD

Function 2D90DA85 Relevance: 33.4, APIs: 17, Strings: 2, Instructions: 197stringCOMMON

Download Yara Rule

APIs

GetProfileStringA.KERNEL32 ref: 2D90DABC
IsDBCSLeadByte.KERNEL32(00000000,?,?,?,?,?), ref: 2D90DAD6
CharNextA.USER32(?), ref: 2D90DB05
memset.MSVCR90 ref: 2D90DB19
CharNextA.USER32(?), ref: 2D90DB5A
isspace.MSVCR90 ref: 2D90DB66
memset.MSVCR90 ref: 2D90DB75
lstrlenA.KERNEL32(00000000), ref: 2D90DB88
CharPrevA.USER32(?,00000000), ref: 2D90DB94
isspace.MSVCR90 ref: 2D90DBA0
CharNextA.USER32(00000000), ref: 2D90DBA8
memset.MSVCR90 ref: 2D90DBB6
malloc.MSVCR90 ref: 2D90DBEF
malloc.MSVCR90 ref: 2D90DC11
lstrlenA.KERNEL32(?), ref: 2D90DC30
malloc.MSVCR90 ref: 2D90DC3A
CharNextA.USER32(?), ref: 2D90DC58

Strings

intl, xrefs: 2D90DAA6
sList, xrefs: 2D90DAA1

Memory Dump Source

Source File: 00000008.00000002.630919973.000000002D901000.00000020.00000001.01000000.00000007.sdmp, Offset: 2D900000, based on PE: true

Associated: 00000008.00000002.630913986.000000002D900000.00000002.00000001.01000000.00000007.sdmpDownload File
Associated: 00000008.00000002.630927583.000000002D91E000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000008.00000002.630932693.000000002D922000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000008.00000002.630937868.000000002D923000.00000002.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_2d900000_MSWordServices.jbxd

Similarity

API ID: Char$Next$mallocmemset$isspacelstrlen$ByteLeadPrevProfileString
String ID: intl$sList
API String ID: 1792931721-3643076868
Opcode ID: 61dc627b832bf1974ae536c520d2d1032bd7f5282b9ccbee7d16ca952ad0a73e
Instruction ID: 8ee7221587dd4f3e2fe2f6e98a08f88954846068404344dea6652d414cad8695
Opcode Fuzzy Hash: 61dc627b832bf1974ae536c520d2d1032bd7f5282b9ccbee7d16ca952ad0a73e
Instruction Fuzzy Hash: E861E474904259AFDB129F69E884BBDBBBCEF05662F1080AAF984F7641D375CA40CF50

Function 2D914681 Relevance: 31.7, APIs: 16, Strings: 2, Instructions: 188windowCOMMON

Download Yara Rule

APIs

Part of subcall function 2D912240: LoadResource.KERNEL32(2D900000,00000000,2D900000,?,000000F0), ref: 2D91227A
Part of subcall function 2D912240: LockResource.KERNEL32(00000000), ref: 2D912288
Part of subcall function 2D912240: SendDlgItemMessageA.USER32(00000001,?,?,00000000,00000000), ref: 2D9122D8
Part of subcall function 2D912240: FreeResource.KERNEL32(?), ref: 2D9122F0

EndDialog.USER32 ref: 2D9146BC

Part of subcall function 2D906288: GetDlgItem.USER32(?,?), ref: 2D906291

ShowWindow.USER32(?,00000000), ref: 2D9146E7
memset.MSVCR90 ref: 2D914714
memset.MSVCR90 ref: 2D914723
memset.MSVCR90 ref: 2D91476C
GetDC.USER32(00000000), ref: 2D9147BC
GetDeviceCaps.GDI32(00000000,0000005A,?,?,?,?,?,?,00000000), ref: 2D9147CB
ReleaseDC.USER32(00000000,?), ref: 2D9147F2
CreateFontIndirectW.GDI32(FFFFFFF5), ref: 2D914828
CreateFontIndirectW.GDI32(FFFFFFF5), ref: 2D91483B
CreateFontIndirectW.GDI32(FFFFFFF5), ref: 2D91485F
GetWindow.USER32(?,00000005), ref: 2D91486A
SendMessageA.USER32(?,00000031,00000000,00000000,?,00000000), ref: 2D91488A
GetObjectW.GDI32(00000000,0000005C,?), ref: 2D91489A
SendMessageA.USER32(?,00000030,?,00000000,?,00000000), ref: 2D9148D0
GetWindow.USER32(?,00000002), ref: 2D9148DA

Strings

@, xrefs: 2D91473E
@, xrefs: 2D9147A0

Memory Dump Source

Source File: 00000008.00000002.630919973.000000002D901000.00000020.00000001.01000000.00000007.sdmp, Offset: 2D900000, based on PE: true

Associated: 00000008.00000002.630913986.000000002D900000.00000002.00000001.01000000.00000007.sdmpDownload File
Associated: 00000008.00000002.630927583.000000002D91E000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000008.00000002.630932693.000000002D922000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000008.00000002.630937868.000000002D923000.00000002.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_2d900000_MSWordServices.jbxd

Similarity

API ID: CreateFontIndirectMessageResourceSendWindowmemset$Item$CapsDeviceDialogFreeLoadLockObjectReleaseShow
String ID: @$@
API String ID: 1409219205-149943524
Opcode ID: a0fd4a1aa8b6ba80b60fe063f384394711ced11c32a902e94a3352ee0e8e5738
Instruction ID: 89abdf2f6322782d22728cbf4564ac66ac51b04a7df6c66b2b61880811c812a7
Opcode Fuzzy Hash: a0fd4a1aa8b6ba80b60fe063f384394711ced11c32a902e94a3352ee0e8e5738
Instruction Fuzzy Hash: D4615D7194426DAFEB229B64CC44BAEB7BCBF19745F0046E9F209F2290D774DA808F54

Function 2D9041B0 Relevance: 24.6, APIs: 6, Strings: 8, Instructions: 106threadCOMMON

Download Yara Rule

APIs

GetParent.USER32(?), ref: 2D9041EF
GetWindowThreadProcessId.USER32(?,?), ref: 2D9041FC
GetCurrentProcessId.KERNEL32 ref: 2D904202
GetLastError.KERNEL32 ref: 2D904225
GetLastError.KERNEL32(?,?,?,?,?,?), ref: 2D9042AB
SetLastError.KERNEL32(?), ref: 2D9042E5

Strings

Unknown, xrefs: 2D90429A
o2ub, xrefs: 2D9042D1
t2ub, xrefs: 2D90426E
r2ub, xrefs: 2D90425D
W, xrefs: 2D9041C3
n2ub, xrefs: 2D9041CF
openas, xrefs: 2D904293
q2ub, xrefs: 2D9042D8

Memory Dump Source

Source File: 00000008.00000002.630919973.000000002D901000.00000020.00000001.01000000.00000007.sdmp, Offset: 2D900000, based on PE: true

Associated: 00000008.00000002.630913986.000000002D900000.00000002.00000001.01000000.00000007.sdmpDownload File
Associated: 00000008.00000002.630927583.000000002D91E000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000008.00000002.630932693.000000002D922000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000008.00000002.630937868.000000002D923000.00000002.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_2d900000_MSWordServices.jbxd

Similarity

API ID: ErrorLast$Process$CurrentParentThreadWindow
String ID: Unknown$W$n2ub$o2ub$openas$q2ub$r2ub$t2ub
API String ID: 3874811631-1827479352
Opcode ID: 37ada805d5c00af0948ffbd8df15442a6d99bf406d06d9eba2c67b19ecf83cc4
Instruction ID: 41947df8c1eb715ffb53d282ed706134d259c844c660f4eabf08afad9e45ba05
Opcode Fuzzy Hash: 37ada805d5c00af0948ffbd8df15442a6d99bf406d06d9eba2c67b19ecf83cc4
Instruction Fuzzy Hash: 4731E471608605EFCB019FE9E888A9E7ABCFF16656B118069F611B7210C774CA40CF58

Function 2D909A90 Relevance: 21.2, APIs: 10, Strings: 2, Instructions: 180stringCOMMON

Download Yara Rule

APIs

_splitpath_s.MSVCR90 ref: 2D909ADD

Part of subcall function 2D908FD6: lstrlenA.KERNEL32(?), ref: 2D908FE3

_splitpath_s.MSVCR90 ref: 2D909B35
lstrlenA.KERNEL32(?), ref: 2D909B5F
_makepath_s.MSVCR90 ref: 2D909B8C
CloseHandle.KERNEL32(00000000), ref: 2D909BCE

Part of subcall function 2D908FD6: IsCharAlphaNumericA.USER32(?), ref: 2D909017

Part of subcall function 2D904609: _vsnprintf.MSVCR90 ref: 2D90463A

CharPrevA.USER32(?,?), ref: 2D909C00
lstrlenA.KERNEL32(?), ref: 2D909C53
_makepath_s.MSVCR90 ref: 2D909C81
GetLastError.KERNEL32 ref: 2D909CA1
CloseHandle.KERNEL32(00000000), ref: 2D909CCB

Strings

., xrefs: 2D909AF2
%s%x, xrefs: 2D909C37

Memory Dump Source

Source File: 00000008.00000002.630919973.000000002D901000.00000020.00000001.01000000.00000007.sdmp, Offset: 2D900000, based on PE: true

Associated: 00000008.00000002.630913986.000000002D900000.00000002.00000001.01000000.00000007.sdmpDownload File
Associated: 00000008.00000002.630927583.000000002D91E000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000008.00000002.630932693.000000002D922000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000008.00000002.630937868.000000002D923000.00000002.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_2d900000_MSWordServices.jbxd

Similarity

API ID: lstrlen$CharCloseHandle_makepath_s_splitpath_s$AlphaErrorLastNumericPrev_vsnprintf
String ID: %s%x$.
API String ID: 3070513225-3101762996
Opcode ID: 3965abbaed424ab7c2eafaead425d9a3bf544cf5cc7dc646d1de19f82559a9f2
Instruction ID: eabafec2e416802511d5388f295ba71cde55844b5f6b56f78e27640552c3855e
Opcode Fuzzy Hash: 3965abbaed424ab7c2eafaead425d9a3bf544cf5cc7dc646d1de19f82559a9f2
Instruction Fuzzy Hash: F96126B690412CAEDB219B64DD84FEBB7BCEF19246F0045E5F609F2141E6349F848F64

Function 2D9036BC Relevance: 21.0, APIs: 6, Strings: 6, Instructions: 45libraryloaderCOMMON

Download Yara Rule

APIs

GetModuleHandleA.KERNEL32(olmapi32.dll,?,2D903757), ref: 2D9036EB
GetProcAddress.KERNEL32(00000000,SetGuardValue,?,?,2D903757), ref: 2D903704
GetProcAddress.KERNEL32(00000000,GetGuardValue,?,?,2D903757), ref: 2D903711
GetProcAddress.KERNEL32(00000000,SetExemptValue,?,?,2D903757), ref: 2D90371E
GetProcAddress.KERNEL32(00000000,GetExemptValue,?,?,2D903757), ref: 2D90372B
GetProcAddress.KERNEL32(00000000,AssertGuardedAPIAllowed,?,?,2D903757), ref: 2D903738

Strings

GetExemptValue, xrefs: 2D903720
SetExemptValue, xrefs: 2D903713
GetGuardValue, xrefs: 2D903706
AssertGuardedAPIAllowed, xrefs: 2D90372D
SetGuardValue, xrefs: 2D9036FE
olmapi32.dll, xrefs: 2D9036E6

Memory Dump Source

Source File: 00000008.00000002.630919973.000000002D901000.00000020.00000001.01000000.00000007.sdmp, Offset: 2D900000, based on PE: true

Associated: 00000008.00000002.630913986.000000002D900000.00000002.00000001.01000000.00000007.sdmpDownload File
Associated: 00000008.00000002.630927583.000000002D91E000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000008.00000002.630932693.000000002D922000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000008.00000002.630937868.000000002D923000.00000002.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_2d900000_MSWordServices.jbxd

Similarity

API ID: AddressProc$HandleModule
String ID: AssertGuardedAPIAllowed$GetExemptValue$GetGuardValue$SetExemptValue$SetGuardValue$olmapi32.dll
API String ID: 667068680-308179802
Opcode ID: 62b679ed6aa77efef14523773aef01a76f171b5d2af1854abc80ec728db0170c
Instruction ID: 24d33a3a6a954f91ef391fc41aad8ae33574e15a4308a97a575279aedae12f7a
Opcode Fuzzy Hash: 62b679ed6aa77efef14523773aef01a76f171b5d2af1854abc80ec728db0170c
Instruction Fuzzy Hash: 91F031708093516AD7415BB9AC48B667FFCAE85A1A304009BF069F721AD6B89441CF55

Function 2D9036DC Relevance: 21.0, APIs: 6, Strings: 6, Instructions: 34libraryloaderCOMMON

Download Yara Rule

APIs

GetModuleHandleA.KERNEL32(olmapi32.dll,?,2D903757), ref: 2D9036EB
GetProcAddress.KERNEL32(00000000,SetGuardValue,?,?,2D903757), ref: 2D903704
GetProcAddress.KERNEL32(00000000,GetGuardValue,?,?,2D903757), ref: 2D903711
GetProcAddress.KERNEL32(00000000,SetExemptValue,?,?,2D903757), ref: 2D90371E
GetProcAddress.KERNEL32(00000000,GetExemptValue,?,?,2D903757), ref: 2D90372B
GetProcAddress.KERNEL32(00000000,AssertGuardedAPIAllowed,?,?,2D903757), ref: 2D903738

Strings

GetExemptValue, xrefs: 2D903720
SetExemptValue, xrefs: 2D903713
GetGuardValue, xrefs: 2D903706
AssertGuardedAPIAllowed, xrefs: 2D90372D
SetGuardValue, xrefs: 2D9036FE
olmapi32.dll, xrefs: 2D9036E6

Memory Dump Source

Source File: 00000008.00000002.630919973.000000002D901000.00000020.00000001.01000000.00000007.sdmp, Offset: 2D900000, based on PE: true

Associated: 00000008.00000002.630913986.000000002D900000.00000002.00000001.01000000.00000007.sdmpDownload File
Associated: 00000008.00000002.630927583.000000002D91E000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000008.00000002.630932693.000000002D922000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000008.00000002.630937868.000000002D923000.00000002.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_2d900000_MSWordServices.jbxd

Similarity

API ID: AddressProc$HandleModule
String ID: AssertGuardedAPIAllowed$GetExemptValue$GetGuardValue$SetExemptValue$SetGuardValue$olmapi32.dll
API String ID: 667068680-308179802
Opcode ID: d985bf180804a332c1b4056dc46b9c3ae342a4a2046cbd88a1e674ffaa4621f7
Instruction ID: d3cd0a31c918bd5481efdd273efc0cf3e123238a02e9d2ac0241770651061a37
Opcode Fuzzy Hash: d985bf180804a332c1b4056dc46b9c3ae342a4a2046cbd88a1e674ffaa4621f7
Instruction Fuzzy Hash: BBF03A708093256AD3405BB9EC8CF66BEFCAFD5E26B00049BB029F7315D7B89540CE58

Function 2D90BCEB Relevance: 19.6, APIs: 13, Instructions: 138COMMON

Download Yara Rule

APIs

GetWindowRect.USER32(?,?), ref: 2D90BD3B
EnableWindow.USER32(?,00000001), ref: 2D90BD49
DeferWindowPos.USER32(?,?,00000000,?,?,00000000,00000000,0000000D), ref: 2D90BD63
EnableWindow.USER32(?,00000001), ref: 2D90BD6D
DeferWindowPos.USER32(?,?,00000000,?,?,00000000,00000000,0000000D), ref: 2D90BD92
ShowWindow.USER32(?,00000000), ref: 2D90BDB0
EnableWindow.USER32(?,00000000), ref: 2D90BDBD
ShowWindow.USER32(?,00000000), ref: 2D90BDCA
EnableWindow.USER32(?,00000000), ref: 2D90BDD7
DeferWindowPos.USER32(?,?,00000000,?,?,00000000,00000000,0000000D), ref: 2D90BE1E
DeferWindowPos.USER32(?,?,00000000,?,?,00000000,00000000,0000000D), ref: 2D90BE3D
DeferWindowPos.USER32(?,?,00000000,?,?,00000000,00000000,0000000D), ref: 2D90BE59
DeferWindowPos.USER32(?,?,00000000,00000000,?,?,?,0000000C), ref: 2D90BE86

Memory Dump Source

Source File: 00000008.00000002.630919973.000000002D901000.00000020.00000001.01000000.00000007.sdmp, Offset: 2D900000, based on PE: true

Associated: 00000008.00000002.630913986.000000002D900000.00000002.00000001.01000000.00000007.sdmpDownload File
Associated: 00000008.00000002.630927583.000000002D91E000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000008.00000002.630932693.000000002D922000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000008.00000002.630937868.000000002D923000.00000002.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_2d900000_MSWordServices.jbxd

Similarity

API ID: Window$Defer$Enable$Show$Rect
String ID:
API String ID: 3661885419-0
Opcode ID: 3345416a3b0379520746129509a0c67cfd959339a6bd05ea05c01926597a56b1
Instruction ID: 8edafed14fd850d7830da9a0d866eb0ec102592977c88839eb2a7d54a3d5b5b3
Opcode Fuzzy Hash: 3345416a3b0379520746129509a0c67cfd959339a6bd05ea05c01926597a56b1
Instruction Fuzzy Hash: 1F51D4B5500609EFDB11DFA8CC84EEABBF9FF48345F004819FA6996260C771AD509F60

Function 2D909F94 Relevance: 19.6, APIs: 9, Strings: 2, Instructions: 365comfileCOMMON

Download Yara Rule

APIs

__EH_prolog3_GS.LIBCMT ref: 2D909F9E
ReadClassStg.OLE32(?,?), ref: 2D90A089
OleLoad.OLE32(?,2D9017D0,?,?), ref: 2D90A0D6
_strdup.MSVCR90(?), ref: 2D90A1DB
MultiByteToWideChar.KERNEL32(00000000,00000001,?,000000FF,?,00000104,?,00000000,?,?), ref: 2D90A250
GetClassFile.OLE32(00000000), ref: 2D90A25F
MultiByteToWideChar.KERNEL32(00000000,00000001,?,000000FF,?,00000104,2D9017D0,00000001,00000000,?,?,?), ref: 2D90A2C3
OleCreateLinkToFile.OLE32(00000000), ref: 2D90A2D2
OleSetContainedObject.OLE32(?,00000001), ref: 2D90A31A

Strings

Note, xrefs: 2D90A307, 2D90A30C, 2D90A30D
HrThreadFuncWaitOnClose, xrefs: 2D90A3D9

Memory Dump Source

Source File: 00000008.00000002.630919973.000000002D901000.00000020.00000001.01000000.00000007.sdmp, Offset: 2D900000, based on PE: true

Associated: 00000008.00000002.630913986.000000002D900000.00000002.00000001.01000000.00000007.sdmpDownload File
Associated: 00000008.00000002.630927583.000000002D91E000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000008.00000002.630932693.000000002D922000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000008.00000002.630937868.000000002D923000.00000002.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_2d900000_MSWordServices.jbxd

Similarity

API ID: ByteCharClassFileMultiWide$ContainedCreateH_prolog3_LinkLoadObjectRead_strdup
String ID: HrThreadFuncWaitOnClose$Note
API String ID: 1990140484-506705169
Opcode ID: 527cfd73ad145fee7a9f2ce0b80368a14ea800c9c66df0111ed991ffdf745231
Instruction ID: 5ac6870450f2ac43e651dda6c73184d887b06daa8697587527029e324e9fce1b
Opcode Fuzzy Hash: 527cfd73ad145fee7a9f2ce0b80368a14ea800c9c66df0111ed991ffdf745231
Instruction Fuzzy Hash: 30D12A71514228AFCB168B64DC88BAA77BDEF49701F1544E4F609FB251DB70AA81CBA0

Function 2D908587 Relevance: 19.6, APIs: 13, Instructions: 103windowCOMMON

Download Yara Rule

APIs

GetWindowRect.USER32(?,?), ref: 2D9085A1
ScreenToClient.USER32(?,?), ref: 2D9085AA
GetWindowRect.USER32(?,?), ref: 2D9085CB
ScreenToClient.USER32(?,?), ref: 2D9085D4
GetWindowRect.USER32(?,?), ref: 2D9085EE
ScreenToClient.USER32(?,?), ref: 2D908609
MoveWindow.USER32(?,?,?,?,?,00000000), ref: 2D908620
MoveWindow.USER32(?,?,?,?,00000001,00000000), ref: 2D908635
SendMessageA.USER32(?,0000000B,00000000,00000000), ref: 2D908643
SendMessageA.USER32(?,00000441,00000000,00000000), ref: 2D908654
SendMessageA.USER32(?,0000000B,00000001,00000000), ref: 2D908662
GetWindowRect.USER32(?,?), ref: 2D90866E
ScreenToClient.USER32(?,?), ref: 2D908677

Memory Dump Source

Source File: 00000008.00000002.630919973.000000002D901000.00000020.00000001.01000000.00000007.sdmp, Offset: 2D900000, based on PE: true

Associated: 00000008.00000002.630913986.000000002D900000.00000002.00000001.01000000.00000007.sdmpDownload File
Associated: 00000008.00000002.630927583.000000002D91E000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000008.00000002.630932693.000000002D922000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000008.00000002.630937868.000000002D923000.00000002.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_2d900000_MSWordServices.jbxd

Similarity

API ID: Window$ClientRectScreen$MessageSend$Move
String ID:
API String ID: 442886372-0
Opcode ID: 23ae4b7e63a6aaa86fcfbf7edc3ad03d76d5053065282324be44eb23bc42eea7
Instruction ID: 78073372b002404ef1267e7e5d3590bab71c00f671c1bbba2546dbc33953e167
Opcode Fuzzy Hash: 23ae4b7e63a6aaa86fcfbf7edc3ad03d76d5053065282324be44eb23bc42eea7
Instruction Fuzzy Hash: C841CF76900609AFDB12DFA8DA45BDEBBF9FF08701F204465F611B2260D772AA109F14

Function 2D90F1BA Relevance: 19.4, APIs: 8, Strings: 3, Instructions: 126registryCOMMON

Download Yara Rule

APIs

RegOpenKeyExA.ADVAPI32(80000001,?,00000000,00000001,?), ref: 2D90F246
RegQueryValueExA.ADVAPI32 ref: 2D90F26D
RegCloseKey.ADVAPI32(?), ref: 2D90F29F
RegOpenKeyExA.ADVAPI32(80000001,?,00000000,00000001,?), ref: 2D90F2DA
RegQueryValueExA.ADVAPI32 ref: 2D90F301
GetSystemDefaultLCID.KERNEL32 ref: 2D90F31B
RegCloseKey.ADVAPI32(?), ref: 2D90F32F
GetSystemDefaultLCID.KERNEL32 ref: 2D90F337

Strings

Software\Microsoft\Office\14.0\Common\LanguageResources, xrefs: 2D90F1F2
UILanguage, xrefs: 2D90F1FC
Software\Policies\Microsoft\Office\14.0\Common\LanguageResources, xrefs: 2D90F1D2

Memory Dump Source

Source File: 00000008.00000002.630919973.000000002D901000.00000020.00000001.01000000.00000007.sdmp, Offset: 2D900000, based on PE: true

Associated: 00000008.00000002.630913986.000000002D900000.00000002.00000001.01000000.00000007.sdmpDownload File
Associated: 00000008.00000002.630927583.000000002D91E000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000008.00000002.630932693.000000002D922000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000008.00000002.630937868.000000002D923000.00000002.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_2d900000_MSWordServices.jbxd

Similarity

API ID: CloseDefaultOpenQuerySystemValue
String ID: Software\Microsoft\Office\14.0\Common\LanguageResources$Software\Policies\Microsoft\Office\14.0\Common\LanguageResources$UILanguage
API String ID: 1931360540-2478438763
Opcode ID: 132b856d46d4c165ca4ae1cafc131528d5be3bd5cfbb9cec9d53303db8a367e7
Instruction ID: 293359d5bc593bd8653cab71d29e13fa92cd562075f4eba91f41575c89da9b86
Opcode Fuzzy Hash: 132b856d46d4c165ca4ae1cafc131528d5be3bd5cfbb9cec9d53303db8a367e7
Instruction Fuzzy Hash: 4651E175A042289FEB22CE64D981FEAB7BDBF49751F0040D6F608EA281D7709A85CF51

Function 2D90BFE9 Relevance: 18.2, APIs: 12, Instructions: 158windowCOMMON

Download Yara Rule

APIs

GetWindowRect.USER32(?,?), ref: 2D90C02A
ScreenToClient.USER32(?,?), ref: 2D90C033
MoveWindow.USER32(?,?,?,?,00000001,00000000), ref: 2D90C04C

Part of subcall function 2D90BCEB: GetWindowRect.USER32(?,?), ref: 2D90BD3B
Part of subcall function 2D90BCEB: EnableWindow.USER32(?,00000001), ref: 2D90BD49
Part of subcall function 2D90BCEB: DeferWindowPos.USER32(?,?,00000000,?,?,00000000,00000000,0000000D), ref: 2D90BD63
Part of subcall function 2D90BCEB: EnableWindow.USER32(?,00000001), ref: 2D90BD6D
Part of subcall function 2D90BCEB: DeferWindowPos.USER32(?,?,00000000,?,?,00000000,00000000,0000000D), ref: 2D90BD92
Part of subcall function 2D90BCEB: DeferWindowPos.USER32(?,?,00000000,?,?,00000000,00000000,0000000D), ref: 2D90BE1E
Part of subcall function 2D90BCEB: DeferWindowPos.USER32(?,?,00000000,?,?,00000000,00000000,0000000D), ref: 2D90BE3D

GetWindowRect.USER32(?,?), ref: 2D90C0AB
MoveWindow.USER32(?,?,?,?,?,00000000), ref: 2D90C0DD
SendMessageA.USER32(?,00000441,00000000,00000000), ref: 2D90C0ED
SendMessageA.USER32(?,0000000B,00000000,00000000), ref: 2D90C16A
BeginDeferWindowPos.USER32 ref: 2D90C16E
DeferWindowPos.USER32(00000000,?,00000000,?,?,?,?,0000000C), ref: 2D90C18E
EndDeferWindowPos.USER32(?), ref: 2D90C1B7
SendMessageA.USER32(?,0000000B,00000001,00000000), ref: 2D90C1C6
RedrawWindow.USER32(?,00000000,00000000,00000585), ref: 2D90C1D4

Memory Dump Source

Source File: 00000008.00000002.630919973.000000002D901000.00000020.00000001.01000000.00000007.sdmp, Offset: 2D900000, based on PE: true

Associated: 00000008.00000002.630913986.000000002D900000.00000002.00000001.01000000.00000007.sdmpDownload File
Associated: 00000008.00000002.630927583.000000002D91E000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000008.00000002.630932693.000000002D922000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000008.00000002.630937868.000000002D923000.00000002.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_2d900000_MSWordServices.jbxd

Similarity

API ID: Window$Defer$MessageRectSend$EnableMove$BeginClientRedrawScreen
String ID:
API String ID: 245351979-0
Opcode ID: 8b4aea7004e398fb5591cf69386e59141ba8b570db8387a0f59e28403605cb85
Instruction ID: 086b85be6be34a8e5ad13bb205fd43b9bb1e83b347e7361db97b7013478d08bd
Opcode Fuzzy Hash: 8b4aea7004e398fb5591cf69386e59141ba8b570db8387a0f59e28403605cb85
Instruction Fuzzy Hash: 16511972600A05AFDB25DF64DD89FAABBF5FF08701F104919F696E6690C771A910CF04

Function 690805DE Relevance: 17.8, APIs: 9, Strings: 1, Instructions: 273COMMONLIBRARYCODE

Download Yara Rule

APIs

Part of subcall function 69080297: CreateFileW.KERNEL32(?,00000000,?,69080687,?,?,00000000), ref: 690802B4

GetLastError.KERNEL32 ref: 690806F2
__dosmaperr.LIBCMT ref: 690806F9
GetFileType.KERNEL32 ref: 69080705
GetLastError.KERNEL32 ref: 6908070F
__dosmaperr.LIBCMT ref: 69080718
CloseHandle.KERNEL32(00000000), ref: 69080738
CloseHandle.KERNEL32(690785C2), ref: 69080885
GetLastError.KERNEL32 ref: 690808B7
__dosmaperr.LIBCMT ref: 690808BE

Strings

H, xrefs: 69080843

Memory Dump Source

Source File: 00000008.00000002.630949046.0000000069051000.00000020.00000001.01000000.00000008.sdmp, Offset: 69050000, based on PE: true

Associated: 00000008.00000002.630944757.0000000069050000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000008.00000002.630957701.0000000069084000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000008.00000002.630964126.0000000069094000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000008.00000002.630971010.00000000690A4000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000008.00000002.630975828.00000000690BC000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000008.00000002.630978860.00000000690BD000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_69050000_MSWordServices.jbxd

Similarity

API ID: ErrorLast__dosmaperr$CloseFileHandle$CreateType
String ID: H
API String ID: 4237864984-2852464175
Opcode ID: af1abfcda2de4ba1b099cc91fc08eb0c886f7a28a27527a6edd1c8b1d5988de9
Instruction ID: 6af2aada1b6db00b8cf056da5b07f6447a295611813e658ed78c3ef70b31b020
Opcode Fuzzy Hash: af1abfcda2de4ba1b099cc91fc08eb0c886f7a28a27527a6edd1c8b1d5988de9
Instruction Fuzzy Hash: A9A12332B195989FCF09CF68C991BEE3BF1AB47324F140959E811EF290DB358852CB91

Function 2D90F729 Relevance: 17.7, APIs: 6, Strings: 4, Instructions: 171stringwindowCOMMON

Download Yara Rule

APIs

lstrlenW.KERNEL32(?), ref: 2D90F7D8
GetACP.KERNEL32(00000000,?,000000FF,?,000001FC), ref: 2D90F7F2
MultiByteToWideChar.KERNEL32(00000000), ref: 2D90F7F9
GetModuleHandleW.KERNEL32(mso.dll), ref: 2D90F8C8
MessageBoxW.USER32 ref: 2D90F923
CallNextHookEx.USER32(?,?,?), ref: 2D90F93C

Strings

mso.dll, xrefs: 2D90F8C3
%ld - [%08lX], xrefs: 2D90F87D
%ld - [%08lX:%08lX], xrefs: 2D90F855
[%08lX], xrefs: 2D90F8A2

Memory Dump Source

Source File: 00000008.00000002.630919973.000000002D901000.00000020.00000001.01000000.00000007.sdmp, Offset: 2D900000, based on PE: true

Associated: 00000008.00000002.630913986.000000002D900000.00000002.00000001.01000000.00000007.sdmpDownload File
Associated: 00000008.00000002.630927583.000000002D91E000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000008.00000002.630932693.000000002D922000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000008.00000002.630937868.000000002D923000.00000002.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_2d900000_MSWordServices.jbxd

Similarity

API ID: ByteCallCharHandleHookMessageModuleMultiNextWidelstrlen
String ID: %ld - [%08lX:%08lX]$%ld - [%08lX]$[%08lX]$mso.dll
API String ID: 3435520019-1696869425
Opcode ID: 10960b42924ae7277c76bf64820cab7083cb394c759fb7813aeaaa27cd0f2574
Instruction ID: b959639cde48b81f42f1a342ee58a0e52b28aaf464ebb9537383cb0a5a846bc9
Opcode Fuzzy Hash: 10960b42924ae7277c76bf64820cab7083cb394c759fb7813aeaaa27cd0f2574
Instruction Fuzzy Hash: B451BFB2904204AFEB068F34DD44FBA33BDEB84702F1085A5FB15F2292D635DA45CB58

Function 2D903FCE Relevance: 17.6, APIs: 9, Strings: 1, Instructions: 141COMMON

Download Yara Rule

APIs

MonitorFromWindow.USER32(?,00000002), ref: 2D903FF3
GetMonitorInfoA.USER32(00000000,00000028), ref: 2D904002
SystemParametersInfoA.USER32(00000030,00000000,?,00000000), ref: 2D904020
GetWindowRect.USER32(00000000,?), ref: 2D90403A
GetWindowRect.USER32(?,?), ref: 2D90404F
OffsetRect.USER32 ref: 2D904071
OffsetRect.USER32 ref: 2D904083
OffsetRect.USER32 ref: 2D904095
SetWindowPos.USER32(?,00000000,?,00000000,00000000,00000000,00000015), ref: 2D9040F3

Strings

(, xrefs: 2D903FE2

Memory Dump Source

Source File: 00000008.00000002.630919973.000000002D901000.00000020.00000001.01000000.00000007.sdmp, Offset: 2D900000, based on PE: true

Associated: 00000008.00000002.630913986.000000002D900000.00000002.00000001.01000000.00000007.sdmpDownload File
Associated: 00000008.00000002.630927583.000000002D91E000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000008.00000002.630932693.000000002D922000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000008.00000002.630937868.000000002D923000.00000002.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_2d900000_MSWordServices.jbxd

Similarity

API ID: Rect$Window$Offset$InfoMonitor$FromParametersSystem
String ID: (
API String ID: 4041948150-3887548279
Opcode ID: 4d6f305410a372769d49a28cc02394a19e0378d7437ee1542f948d9c02d8e404
Instruction ID: a8dd4cae3b913b64d94ad414a5862a19d5ae933ef92c9d0bfe81671aa19c6c63
Opcode Fuzzy Hash: 4d6f305410a372769d49a28cc02394a19e0378d7437ee1542f948d9c02d8e404
Instruction Fuzzy Hash: D0411572900129AFDF01DEA8DC49EEEB7BDFF0A312F018615F905F7180D674AA05CAA0

Function 2D907F1D Relevance: 15.9, APIs: 8, Strings: 1, Instructions: 167COMMON

Download Yara Rule

APIs

GetSysColor.USER32(0000000F), ref: 2D907F43

Strings

ToolbarWindow32, xrefs: 2D907FA2

Memory Dump Source

Source File: 00000008.00000002.630919973.000000002D901000.00000020.00000001.01000000.00000007.sdmp, Offset: 2D900000, based on PE: true

Associated: 00000008.00000002.630913986.000000002D900000.00000002.00000001.01000000.00000007.sdmpDownload File
Associated: 00000008.00000002.630927583.000000002D91E000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000008.00000002.630932693.000000002D922000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000008.00000002.630937868.000000002D923000.00000002.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_2d900000_MSWordServices.jbxd

Similarity

API ID: Color
String ID: ToolbarWindow32
API String ID: 2811717613-4104838417
Opcode ID: ada06aa2f9a5b05bfb3c21acb456ae2470962cdc98066887e4efd5248a990b91
Instruction ID: 3a5a7bf37956139e583281c8ec12bc5567a9d9b8806be2003c359fac9e9b2377
Opcode Fuzzy Hash: ada06aa2f9a5b05bfb3c21acb456ae2470962cdc98066887e4efd5248a990b91
Instruction Fuzzy Hash: 3F51B1B1E4438CAEEB119FA88881BEEBFB9EF59744F40446DF185B7282C6710805CB25

Function 2D916050 Relevance: 15.8, APIs: 6, Strings: 3, Instructions: 73libraryloaderCOMMON

Download Yara Rule

APIs

GetVersion.KERNEL32 ref: 2D916055
LoadCursorA.USER32(00000000,00007F02), ref: 2D9160C7
LoadCursorA.USER32(00000000,00007F00), ref: 2D9160D2
GetModuleHandleA.KERNEL32(USER32.DLL), ref: 2D9160E4
GetProcAddress.KERNEL32(00000000,SetScrollInfo), ref: 2D9160F8
GetProcAddress.KERNEL32(00000000,GetScrollInfo), ref: 2D916103

Strings

SetScrollInfo, xrefs: 2D9160F2
GetScrollInfo, xrefs: 2D9160FA
USER32.DLL, xrefs: 2D9160DF

Memory Dump Source

Source File: 00000008.00000002.630919973.000000002D901000.00000020.00000001.01000000.00000007.sdmp, Offset: 2D900000, based on PE: true

Associated: 00000008.00000002.630913986.000000002D900000.00000002.00000001.01000000.00000007.sdmpDownload File
Associated: 00000008.00000002.630927583.000000002D91E000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000008.00000002.630932693.000000002D922000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000008.00000002.630937868.000000002D923000.00000002.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_2d900000_MSWordServices.jbxd

Similarity

API ID: AddressCursorLoadProc$HandleModuleVersion
String ID: GetScrollInfo$SetScrollInfo$USER32.DLL
API String ID: 3295075773-1004610577
Opcode ID: 30bbd1f8a5f0fffbc7f5f4a03f3c22286d5e8cf97813501f04c30e67bad3db47
Instruction ID: c0f0a7db504faf64bce2c56458f6f2a949cfcac8e871a2cd31abbb0337c0e976
Opcode Fuzzy Hash: 30bbd1f8a5f0fffbc7f5f4a03f3c22286d5e8cf97813501f04c30e67bad3db47
Instruction Fuzzy Hash: 2711E4B1A187518FC7689F7A98C052ABAE9FF8A702341493EF18BE3B01D634E4048F54

Function 2D910444 Relevance: 15.2, APIs: 10, Instructions: 228stringCOMMON

Download Yara Rule

APIs

IsBadReadPtr.KERNEL32(?,00000004), ref: 2D910454
lstrlenW.KERNEL32(?,00000007,?), ref: 2D9105C3
lstrlenW.KERNEL32(?), ref: 2D9105D1
GetACP.KERNEL32(00000000,?,000000FF,?,?,00000000,00000000,-00000013,?), ref: 2D91068B
WideCharToMultiByte.KERNEL32(00000000), ref: 2D910694
GetACP.KERNEL32(00000000,?,000000FF,?,?,00000000,00000000), ref: 2D9106C0
WideCharToMultiByte.KERNEL32(00000000), ref: 2D9106C3

Memory Dump Source

Source File: 00000008.00000002.630919973.000000002D901000.00000020.00000001.01000000.00000007.sdmp, Offset: 2D900000, based on PE: true

Associated: 00000008.00000002.630913986.000000002D900000.00000002.00000001.01000000.00000007.sdmpDownload File
Associated: 00000008.00000002.630927583.000000002D91E000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000008.00000002.630932693.000000002D922000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000008.00000002.630937868.000000002D923000.00000002.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_2d900000_MSWordServices.jbxd

Similarity

API ID: ByteCharMultiWidelstrlen$Read
String ID:
API String ID: 3283085596-0
Opcode ID: 7d6aff3950b0bfcb1c3a8e27d5d92c261c3b5cac771b819eebdb0a3926cdf814
Instruction ID: f15df296af4c50eaf65f913f5a7af72f916b637c2994aa750f24380e4e1aa737
Opcode Fuzzy Hash: 7d6aff3950b0bfcb1c3a8e27d5d92c261c3b5cac771b819eebdb0a3926cdf814
Instruction Fuzzy Hash: CB911975A04109EFCB05CF99C980EA9BBF9FF48314B258199E908BB251D736EE41DF50

Function 2D908C62 Relevance: 15.1, APIs: 10, Instructions: 138fileCOMMON

Download Yara Rule

APIs

__EH_prolog3_catch.LIBCMT ref: 2D908C69
??_U@YAPAXI@Z.MSVCR90(00001000,00000030,2D909EEC,00000000,?,?,00000014,2D90A4D2), ref: 2D908CA0

Part of subcall function 2D913812: Mailbox.LIBCMT ref: 2D9159AE

Part of subcall function 2D906995: LoadCursorA.USER32(00000000,?), ref: 2D9069A0
Part of subcall function 2D906995: SetCursor.USER32(00000000), ref: 2D9069A7

SetCursor.USER32(2D90224C), ref: 2D908CF7
??_V@YAXPAX@Z.MSVCR90(?), ref: 2D908D03
GetLastError.KERNEL32 ref: 2D908D3F
ReadFile.KERNEL32(?,?,00001000,?,00000000), ref: 2D908DA9
GetLastError.KERNEL32 ref: 2D908DB5
CloseHandle.KERNEL32(000000FF), ref: 2D908DC9
SetCursor.USER32(2D90224C), ref: 2D908DD2
??_V@YAXPAX@Z.MSVCR90(?), ref: 2D908DDE

Part of subcall function 2D910293: LoadStringW.USER32(?,?,?,00000200), ref: 2D910398

Memory Dump Source

Source File: 00000008.00000002.630919973.000000002D901000.00000020.00000001.01000000.00000007.sdmp, Offset: 2D900000, based on PE: true

Associated: 00000008.00000002.630913986.000000002D900000.00000002.00000001.01000000.00000007.sdmpDownload File
Associated: 00000008.00000002.630927583.000000002D91E000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000008.00000002.630932693.000000002D922000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000008.00000002.630937868.000000002D923000.00000002.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_2d900000_MSWordServices.jbxd

Similarity

API ID: Cursor$ErrorLastLoad$CloseFileH_prolog3_catchHandleMailboxReadString
String ID:
API String ID: 318333782-0
Opcode ID: 8c9b1efe14ed6a9fa25f76856d9ceba0fe64fcc6903582ed3a8ad51c6b50596f
Instruction ID: 3a33f23ccd2bf768bdcc94e77fd89f2c3b14fc0235c05c1a00a43383cd24d7b7
Opcode Fuzzy Hash: 8c9b1efe14ed6a9fa25f76856d9ceba0fe64fcc6903582ed3a8ad51c6b50596f
Instruction Fuzzy Hash: A3513770A04209EFDB059FA4E888AADBB79FF19311F208659F615BB290C7348A44CF60

Function 2D918822 Relevance: 14.1, APIs: 4, Strings: 4, Instructions: 67registrylibraryCOMMON

Download Yara Rule

APIs

RegOpenKeyExW.ADVAPI32 ref: 2D918862
RegQueryValueExW.ADVAPI32(?,CommonFilesDir,00000000,00000000,?,0000020A), ref: 2D91888C
RegCloseKey.ADVAPI32(?), ref: 2D9188A2
LoadLibraryW.KERNEL32(?,\Microsoft Shared\office14\mso.dll,?,00000105), ref: 2D9188E1

Strings

Software\Microsoft\Windows\CurrentVersion, xrefs: 2D918846
\Microsoft Shared\office14\mso.dll, xrefs: 2D9188D0
CommonFilesDir, xrefs: 2D918881
mso.dll, xrefs: 2D9188ED

Memory Dump Source

Source File: 00000008.00000002.630919973.000000002D901000.00000020.00000001.01000000.00000007.sdmp, Offset: 2D900000, based on PE: true

Associated: 00000008.00000002.630913986.000000002D900000.00000002.00000001.01000000.00000007.sdmpDownload File
Associated: 00000008.00000002.630927583.000000002D91E000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000008.00000002.630932693.000000002D922000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000008.00000002.630937868.000000002D923000.00000002.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_2d900000_MSWordServices.jbxd

Similarity

API ID: CloseLibraryLoadOpenQueryValue
String ID: CommonFilesDir$Software\Microsoft\Windows\CurrentVersion$\Microsoft Shared\office14\mso.dll$mso.dll
API String ID: 3751545530-1101215619
Opcode ID: 216fb61daa059beb53ece31121cddeadd1a2cf8b525c3289339b28d5a499e02e
Instruction ID: 4743cacc8ed4975c76c59544444664f26894086de994a19ff1b859d6f067be3f
Opcode Fuzzy Hash: 216fb61daa059beb53ece31121cddeadd1a2cf8b525c3289339b28d5a499e02e
Instruction Fuzzy Hash: 9E215E31A4522DAAD711AB64DCCDAEEB6BCEF54741F0000E5F509F2151DA709A849B94

Function 2D90381E Relevance: 14.1, APIs: 6, Strings: 2, Instructions: 55libraryloaderCOMMONLIBRARYCODE

Download Yara Rule

APIs

GetVersion.KERNEL32 ref: 2D903837
GetFileAttributesW.KERNEL32(???.???), ref: 2D903842
GetModuleHandleA.KERNEL32(Unicows.dll), ref: 2D90384D
GetProcAddress.KERNEL32(00000000,?), ref: 2D903875
GetVersion.KERNEL32 ref: 2D903888
GetProcAddress.KERNEL32(00000000,?), ref: 2D9038A8

Strings

???.???, xrefs: 2D90383D
Unicows.dll, xrefs: 2D903848

Memory Dump Source

Source File: 00000008.00000002.630919973.000000002D901000.00000020.00000001.01000000.00000007.sdmp, Offset: 2D900000, based on PE: true

Associated: 00000008.00000002.630913986.000000002D900000.00000002.00000001.01000000.00000007.sdmpDownload File
Associated: 00000008.00000002.630927583.000000002D91E000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000008.00000002.630932693.000000002D922000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000008.00000002.630937868.000000002D923000.00000002.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_2d900000_MSWordServices.jbxd

Similarity

API ID: AddressProcVersion$AttributesFileHandleModule
String ID: ???.???$Unicows.dll
API String ID: 3183861727-2162356649
Opcode ID: 44847425b30f37ac4f91d70a63e917a2815d0a834fdc3d4ad2accee2834e2503
Instruction ID: 9bd799f1133dcd13654d3ee30c0ee5741643ca4f1e87455abab82c0c11e583a8
Opcode Fuzzy Hash: 44847425b30f37ac4f91d70a63e917a2815d0a834fdc3d4ad2accee2834e2503
Instruction Fuzzy Hash: DC111C7160820AEFEB419FE9E948B59BBFCAF04756B1480A6F944F7211D778E910CF14

Function 2D905300 Relevance: 13.7, APIs: 9, Instructions: 155windowCOMMON

Download Yara Rule

APIs

__EH_prolog3_catch.LIBCMT ref: 2D905307

Part of subcall function 2D9050C9: GetModuleHandleW.KERNEL32(KERNEL32), ref: 2D9050CF
Part of subcall function 2D9050C9: GetProcAddress.KERNEL32(00000000,SetProcessDEPPolicy), ref: 2D9050E9
Part of subcall function 2D9050C9: GetProcAddress.KERNEL32(00000000,GetSystemDEPPolicy), ref: 2D9050F3
Part of subcall function 2D9050C9: SetProcessDEPPolicy.KERNEL32(00000001), ref: 2D905106

malloc.MSVCR90 ref: 2D90533A
malloc.MSVCR90 ref: 2D90534B
LoadStringW.USER32(000089E8,00000100), ref: 2D905378
LoadStringW.USER32(000089E9,00000100), ref: 2D905394
CoBuildVersion.OLE32 ref: 2D90539E
CoRegisterClassObject.OLE32(2D901870,00000000,00000004,00000001,?), ref: 2D90542A

Part of subcall function 2D9107A6: malloc.MSVCR90 ref: 2D9107AD
Part of subcall function 2D9107A6: memset.MSVCR90 ref: 2D9107C5

CoRegisterClassObject.OLE32(2D901880,00000000,00000004,00000001,?), ref: 2D90548A
LoadIconA.USER32(000088B8), ref: 2D9054D3

Memory Dump Source

Source File: 00000008.00000002.630919973.000000002D901000.00000020.00000001.01000000.00000007.sdmp, Offset: 2D900000, based on PE: true

Associated: 00000008.00000002.630913986.000000002D900000.00000002.00000001.01000000.00000007.sdmpDownload File
Associated: 00000008.00000002.630927583.000000002D91E000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000008.00000002.630932693.000000002D922000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000008.00000002.630937868.000000002D923000.00000002.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_2d900000_MSWordServices.jbxd

Similarity

API ID: Loadmalloc$AddressClassObjectProcRegisterString$BuildH_prolog3_catchHandleIconModulePolicyProcessVersionmemset
String ID:
API String ID: 1755118194-0
Opcode ID: 2d3ec395e4a3177e62ff30b7a5abd4904cecedd38a68c870c1025b5d8ad0c564
Instruction ID: 2d25fe9eee45262bc905d807f22adce187f23b2233da7d097aac84761842e51b
Opcode Fuzzy Hash: 2d3ec395e4a3177e62ff30b7a5abd4904cecedd38a68c870c1025b5d8ad0c564
Instruction Fuzzy Hash: 4A51E271508305EBEB419BB49844BBE77F9EF55702F214469F644F7281DB74DA408B21

Function 69061920 Relevance: 13.7, APIs: 9, Instructions: 154memoryCOMMONLIBRARYCODE

Download Yara Rule

APIs

MultiByteToWideChar.KERNEL32(00000000,00000000,6905CF5A,6905CF5C,00000000,00000000,CA03C88E,?,?,?,6905CF5A,00000000,?,69053AA5,6905CF5A,0000000C), ref: 690619A9
MultiByteToWideChar.KERNEL32(00000000,00000000,6905CF5A,?,00000000,00000000,?,6905CF5A,00000000,?,69053AA5,6905CF5A), ref: 69061A24
SysAllocString.OLEAUT32(00000000), ref: 69061A2F
_com_issue_error.COMSUPP ref: 69061A58
_com_issue_error.COMSUPP ref: 69061A62
GetLastError.KERNEL32(80070057,CA03C88E,?,?,?,6905CF5A,00000000,?,69053AA5,6905CF5A,0000000C,?,6905CF5A), ref: 69061A67
_com_issue_error.COMSUPP ref: 69061A7A
GetLastError.KERNEL32(00000000,?,?,?,6905CF5A,00000000,?,69053AA5,6905CF5A,0000000C,?,6905CF5A), ref: 69061A90
_com_issue_error.COMSUPP ref: 69061AA3

Memory Dump Source

Source File: 00000008.00000002.630949046.0000000069051000.00000020.00000001.01000000.00000008.sdmp, Offset: 69050000, based on PE: true

Associated: 00000008.00000002.630944757.0000000069050000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000008.00000002.630957701.0000000069084000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000008.00000002.630964126.0000000069094000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000008.00000002.630971010.00000000690A4000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000008.00000002.630975828.00000000690BC000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000008.00000002.630978860.00000000690BD000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_69050000_MSWordServices.jbxd

Similarity

API ID: _com_issue_error$ByteCharErrorLastMultiWide$AllocString
String ID:
API String ID: 1353541977-0
Opcode ID: fbfee36b6e2febb1d6d1c3949c34f4931362986c3c63718b445c102ffc8a24ca
Instruction ID: 2aa53a4729e5ffd8d09a62b32a537eace1bb30377e4e9b2335876e03345f3801
Opcode Fuzzy Hash: fbfee36b6e2febb1d6d1c3949c34f4931362986c3c63718b445c102ffc8a24ca
Instruction Fuzzy Hash: 67411875A04205ABDB40CFA8C944B9FBBE8FF4A755F108A2AE519E7290D7349540CBE0

Function 69065646 Relevance: 12.6, APIs: 4, Strings: 3, Instructions: 303COMMONLIBRARYCODE

Download Yara Rule

APIs

type_info::operator==.LIBVCRUNTIME ref: 69065765
___TypeMatch.LIBVCRUNTIME ref: 69065873
_UnwindNestedFrames.LIBCMT ref: 690659C5
CallUnexpected.LIBVCRUNTIME ref: 690659E0

Strings

csm, xrefs: 690656F0
csm, xrefs: 69065683
csm, xrefs: 6906579C

Memory Dump Source

Source File: 00000008.00000002.630949046.0000000069051000.00000020.00000001.01000000.00000008.sdmp, Offset: 69050000, based on PE: true

Associated: 00000008.00000002.630944757.0000000069050000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000008.00000002.630957701.0000000069084000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000008.00000002.630964126.0000000069094000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000008.00000002.630971010.00000000690A4000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000008.00000002.630975828.00000000690BC000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000008.00000002.630978860.00000000690BD000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_69050000_MSWordServices.jbxd

Similarity

API ID: CallFramesMatchNestedTypeUnexpectedUnwindtype_info::operator==
String ID: csm$csm$csm
API String ID: 2751267872-393685449
Opcode ID: 590642f356d646bceb908d26e96d08a4f8e48b15bfb74b48edf72d2fec7dfed4
Instruction ID: 39952365bef5fa5e432b89fb796984c14d2098df4ed1d289446590ffea747f39
Opcode Fuzzy Hash: 590642f356d646bceb908d26e96d08a4f8e48b15bfb74b48edf72d2fec7dfed4
Instruction Fuzzy Hash: 8AB10B7980020AEFCF15CFA4D941B9EB7F5FF09324F14895AE815AB222D731DA51CBA1

Function 2D90C374 Relevance: 12.5, APIs: 6, Strings: 1, Instructions: 226windowCOMMON

Download Yara Rule

APIs

__EH_prolog3_catch.LIBCMT ref: 2D90C37B
DrawFocusRect.USER32 ref: 2D90C3D9
PatBlt.GDI32(?,?,?,?,?,00FF0062), ref: 2D90C421

Strings

..., xrefs: 2D90C45F

Memory Dump Source

Source File: 00000008.00000002.630919973.000000002D901000.00000020.00000001.01000000.00000007.sdmp, Offset: 2D900000, based on PE: true

Associated: 00000008.00000002.630913986.000000002D900000.00000002.00000001.01000000.00000007.sdmpDownload File
Associated: 00000008.00000002.630927583.000000002D91E000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000008.00000002.630932693.000000002D922000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000008.00000002.630937868.000000002D923000.00000002.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_2d900000_MSWordServices.jbxd

Similarity

API ID: DrawFocusH_prolog3_catchRect
String ID: ...
API String ID: 1217028765-440645147
Opcode ID: 4b5433648adc74883c94e9ba7dcdef1d2721f48189af49652e947fd006a42401
Instruction ID: 23d2428903ca5b6830f84d9eea88416188be3701de80b02045db9adb357f0400
Opcode Fuzzy Hash: 4b5433648adc74883c94e9ba7dcdef1d2721f48189af49652e947fd006a42401
Instruction Fuzzy Hash: 4E916970904249DFDB15CFA4C994AEEBBB8FF69305F21425CFA45B7291DB30AA09CB50

Function 2D9185D0 Relevance: 12.3, APIs: 4, Strings: 3, Instructions: 77registryCOMMON

Download Yara Rule

APIs

memset.MSVCR90 ref: 2D918605
RegOpenKeyExW.ADVAPI32 ref: 2D918659
RegQueryValueExW.ADVAPI32(000000FF,CommonFilesDir,00000000,00000000,?,0000020A), ref: 2D91867E

Part of subcall function 2D918540: LoadLibraryW.KERNEL32(?), ref: 2D9185BC

RegCloseKey.ADVAPI32(000000FF), ref: 2D9186CA

Strings

Software\Microsoft\Windows\CurrentVersion, xrefs: 2D91864F
Microsoft Shared\office14\, xrefs: 2D91861A
CommonFilesDir, xrefs: 2D918673

Memory Dump Source

Source File: 00000008.00000002.630919973.000000002D901000.00000020.00000001.01000000.00000007.sdmp, Offset: 2D900000, based on PE: true

Associated: 00000008.00000002.630913986.000000002D900000.00000002.00000001.01000000.00000007.sdmpDownload File
Associated: 00000008.00000002.630927583.000000002D91E000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000008.00000002.630932693.000000002D922000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000008.00000002.630937868.000000002D923000.00000002.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_2d900000_MSWordServices.jbxd

Similarity

API ID: CloseLibraryLoadOpenQueryValuememset
String ID: CommonFilesDir$Microsoft Shared\office14\$Software\Microsoft\Windows\CurrentVersion
API String ID: 79794857-3032397660
Opcode ID: d9982e49fd3fa10d6a5114e919757722acb031c7dd1bacdeae92f838a698a5d2
Instruction ID: b4aea192ed70e87ebfe89cf16d8e953831e82e2f60e2e6fa2d5170dadd6229e5
Opcode Fuzzy Hash: d9982e49fd3fa10d6a5114e919757722acb031c7dd1bacdeae92f838a698a5d2
Instruction Fuzzy Hash: F4215C7190822CAFDB12DB64DC84EEAB7BCEF18755F4001E5B549F2191DA309F858FA4

Function 2D90FB74 Relevance: 12.2, APIs: 8, Instructions: 194stringthreadCOMMON

Download Yara Rule

APIs

lstrlenW.KERNEL32(00000000,?,80000000), ref: 2D90FBFE
lstrlenA.KERNEL32(00000000,?,80000000), ref: 2D90FC06
LoadStringW.USER32(?,?,?,00000200), ref: 2D90FC79
GetACP.KERNEL32(00000000,00000201,000000FF,?,00000201,00000201,?,?,80000000), ref: 2D90FCEA
MultiByteToWideChar.KERNEL32(00000000), ref: 2D90FCF1
GetCurrentThreadId.KERNEL32(00000201,?,?,80000000), ref: 2D90FCF7
SetWindowsHookExW.USER32(000000FF,2D90F729,00000000,00000000), ref: 2D90FD06
UnhookWindowsHookEx.USER32 ref: 2D90FD70

Part of subcall function 2D90F61C: GetModuleHandleW.KERNEL32(mso.dll,?,2D90FBDC,?,00000201,?,?,80000000), ref: 2D90F624

Memory Dump Source

Source File: 00000008.00000002.630919973.000000002D901000.00000020.00000001.01000000.00000007.sdmp, Offset: 2D900000, based on PE: true

Associated: 00000008.00000002.630913986.000000002D900000.00000002.00000001.01000000.00000007.sdmpDownload File
Associated: 00000008.00000002.630927583.000000002D91E000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000008.00000002.630932693.000000002D922000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000008.00000002.630937868.000000002D923000.00000002.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_2d900000_MSWordServices.jbxd

Similarity

API ID: HookWindowslstrlen$ByteCharCurrentHandleLoadModuleMultiStringThreadUnhookWide
String ID:
API String ID: 4184960637-0
Opcode ID: 88ab69cd86a27c8b366f757d4d84e094b8a16ce2cd16767acf4f7beccdeabc34
Instruction ID: 1deb0af9742244eab07071e07ab31b57a73e7365b8edb2184dccf15185bee800
Opcode Fuzzy Hash: 88ab69cd86a27c8b366f757d4d84e094b8a16ce2cd16767acf4f7beccdeabc34
Instruction Fuzzy Hash: 33617C71904209EFCB01DFA4E985BAEBBB8FF08711F10456AFA15E7290C734DA54CB94

Function 2D9172DD Relevance: 12.1, APIs: 8, Instructions: 108COMMON

Download Yara Rule

APIs

??_V@YAXPAX@Z.MSVCR90(?,?,?,?,?,2D915264,?,000000FF,?,?,?,2D90A56B,?,?), ref: 2D9172FC
??_U@YAPAXI@Z.MSVCR90(?,?,?,?,?,2D915264,?,000000FF,?,?,?,2D90A56B,?,?), ref: 2D91731A
memset.MSVCR90 ref: 2D917326
memset.MSVCR90 ref: 2D91734F
??_U@YAPAXI@Z.MSVCR90(?,?,?,?,?,2D915264,?,000000FF,?,?,?,2D90A56B,?,?), ref: 2D91739F
memcpy.MSVCR90(00000000,?,?,?,?,?,?,?,2D915264,?,000000FF,?,?,?,2D90A56B,?), ref: 2D9173B1
memset.MSVCR90 ref: 2D9173C7
??_V@YAXPAX@Z.MSVCR90(?,?,00000000,?,00000000,?,?,?,?,?,?,?,2D915264,?,000000FF), ref: 2D9173CF

Memory Dump Source

Source File: 00000008.00000002.630919973.000000002D901000.00000020.00000001.01000000.00000007.sdmp, Offset: 2D900000, based on PE: true

Associated: 00000008.00000002.630913986.000000002D900000.00000002.00000001.01000000.00000007.sdmpDownload File
Associated: 00000008.00000002.630927583.000000002D91E000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000008.00000002.630932693.000000002D922000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000008.00000002.630937868.000000002D923000.00000002.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_2d900000_MSWordServices.jbxd

Similarity

API ID: memset$memcpy
String ID:
API String ID: 368790112-0
Opcode ID: cab2f0a68c08a215e292c57bf758677830bf06002173c9b7a8a0609d3745db6e
Instruction ID: 561eb56093e2ead9038c8610c33d4821759cb7febce55aee126aa9692495eaaf
Opcode Fuzzy Hash: cab2f0a68c08a215e292c57bf758677830bf06002173c9b7a8a0609d3745db6e
Instruction Fuzzy Hash: 8D31E8B160470ADFD7208F69DCC0E1BB3D9EF40254B20C92DF66AEB640D632E845CB50

Function 2D913210 Relevance: 12.1, APIs: 8, Instructions: 71COMMONLIBRARYCODE

Download Yara Rule

APIs

__EH_prolog3.LIBCMT ref: 2D913217
CloseHandle.KERNEL32(?), ref: 2D913234
Mailbox.LIBCMT ref: 2D913266
Mailbox.LIBCMT ref: 2D913277
Mailbox.LIBCMT ref: 2D913288
Mailbox.LIBCMT ref: 2D913299
Mailbox.LIBCMT ref: 2D9132AA
??3@YAXPAX@Z.MSVCR90(00000000,00000004,2D904F48,00000004,2D904F78), ref: 2D9132DE

Memory Dump Source

Source File: 00000008.00000002.630919973.000000002D901000.00000020.00000001.01000000.00000007.sdmp, Offset: 2D900000, based on PE: true

Associated: 00000008.00000002.630913986.000000002D900000.00000002.00000001.01000000.00000007.sdmpDownload File
Associated: 00000008.00000002.630927583.000000002D91E000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000008.00000002.630932693.000000002D922000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000008.00000002.630937868.000000002D923000.00000002.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_2d900000_MSWordServices.jbxd

Similarity

API ID: Mailbox$??3@CloseH_prolog3Handle
String ID:
API String ID: 1655960846-0
Opcode ID: 527c238c218aff494cc9f21b59d42d73631b0f32aaa55c879d5bfd2ec30ccbc6
Instruction ID: 6170f6fd445bc4a4e67da28905b73890f5bc6a7e6a9b11c3698a86e1a603a66c
Opcode Fuzzy Hash: 527c238c218aff494cc9f21b59d42d73631b0f32aaa55c879d5bfd2ec30ccbc6
Instruction Fuzzy Hash: 07217A34A0470AAFCB24AFB08090A6DBBF5FF64200F52096CE3D677681CB71E548CB91

Function 2D90F952 Relevance: 10.7, APIs: 5, Strings: 1, Instructions: 205COMMON

Download Yara Rule

APIs

isdigit.MSVCR90 ref: 2D90F9B4
isdigit.MSVCR90 ref: 2D90FB18

Strings

z, xrefs: 2D90FAD9

Memory Dump Source

Source File: 00000008.00000002.630919973.000000002D901000.00000020.00000001.01000000.00000007.sdmp, Offset: 2D900000, based on PE: true

Associated: 00000008.00000002.630913986.000000002D900000.00000002.00000001.01000000.00000007.sdmpDownload File
Associated: 00000008.00000002.630927583.000000002D91E000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000008.00000002.630932693.000000002D922000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000008.00000002.630937868.000000002D923000.00000002.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_2d900000_MSWordServices.jbxd

Similarity

API ID: isdigit
String ID: z
API String ID: 2326231117-1657960367
Opcode ID: 5dec7d677d88344a4b554e0faa595531041da70e60be6b71a5d68ace46f00471
Instruction ID: ce56be4de53224632536237ac47eec326bfe3001d136d5189e8e1cd03165aa9b
Opcode Fuzzy Hash: 5dec7d677d88344a4b554e0faa595531041da70e60be6b71a5d68ace46f00471
Instruction Fuzzy Hash: 30716E72904219EFCB01DFA5E844BAEB7B8FF85312F218596F951BB280E7349B51CB50

Function 2D90657A Relevance: 10.7, APIs: 5, Strings: 1, Instructions: 166windowCOMMON

Download Yara Rule

APIs

__EH_prolog3_catch_GS.LIBCMT ref: 2D906584

Part of subcall function 2D91127F: __EH_prolog3_catch.LIBCMT ref: 2D911286

Part of subcall function 2D90646A: GetWindowRect.USER32(?,?), ref: 2D90647F
Part of subcall function 2D90646A: ScreenToClient.USER32(?,?), ref: 2D90648C
Part of subcall function 2D90646A: MoveWindow.USER32(?,?,?,?,00000001,00000000), ref: 2D9064A2
Part of subcall function 2D90646A: SendMessageA.USER32(?,0000000B,00000000,00000000), ref: 2D9064D5
Part of subcall function 2D90646A: MoveWindow.USER32(?,00000000,?,?,?,00000001), ref: 2D9064EA
Part of subcall function 2D90646A: SendMessageA.USER32(?,0000000B,00000001,00000000), ref: 2D9064F8
Part of subcall function 2D90646A: RedrawWindow.USER32(?,00000000,00000000,00000585), ref: 2D906508

GetDlgItem.USER32(00000001,000088C2), ref: 2D9065CD

Part of subcall function 2D904745: _wcsicmp.MSVCR90 ref: 2D904757

EnableWindow.USER32(?,00000000), ref: 2D906778
SetWindowTextW.USER32(?,?), ref: 2D90679E
SetFocus.USER32 ref: 2D9067BA

Strings

IPM.Conflict.Message, xrefs: 2D9065E4

Memory Dump Source

Source File: 00000008.00000002.630919973.000000002D901000.00000020.00000001.01000000.00000007.sdmp, Offset: 2D900000, based on PE: true

Associated: 00000008.00000002.630913986.000000002D900000.00000002.00000001.01000000.00000007.sdmpDownload File
Associated: 00000008.00000002.630927583.000000002D91E000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000008.00000002.630932693.000000002D922000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000008.00000002.630937868.000000002D923000.00000002.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_2d900000_MSWordServices.jbxd

Similarity

API ID: Window$MessageMoveSend$ClientEnableFocusH_prolog3_catchH_prolog3_catch_ItemRectRedrawScreenText_wcsicmp
String ID: IPM.Conflict.Message
API String ID: 3324545711-3689180561
Opcode ID: 58cddbbfcf58ab93bcc43ab429e5ce6e9123e1343afcb445ae5658f2871278e6
Instruction ID: 65c6f4ce17f2013b9dbefa309d271aa6d511c51d61eb1dce6449d5ab8383d2cf
Opcode Fuzzy Hash: 58cddbbfcf58ab93bcc43ab429e5ce6e9123e1343afcb445ae5658f2871278e6
Instruction Fuzzy Hash: 1E517231E4825A9BDB11DB24DC80BA973B8EF11302F0581E4BA49BB295DF34AA448F91

Function 2D9071EC Relevance: 10.6, APIs: 5, Strings: 1, Instructions: 126windowCOMMON

Download Yara Rule

APIs

__EH_prolog3.LIBCMT ref: 2D9071F3
memset.MSVCR90 ref: 2D907206

Part of subcall function 2D9052D6: GetProcAddress.KERNEL32(00000000,00000142), ref: 2D9052F4

GetWindowRect.USER32(?,?), ref: 2D9072E8
PostMessageA.USER32 ref: 2D907357
SetCursor.USER32(?), ref: 2D907360

Strings

D, xrefs: 2D907296

Memory Dump Source

Source File: 00000008.00000002.630919973.000000002D901000.00000020.00000001.01000000.00000007.sdmp, Offset: 2D900000, based on PE: true

Associated: 00000008.00000002.630913986.000000002D900000.00000002.00000001.01000000.00000007.sdmpDownload File
Associated: 00000008.00000002.630927583.000000002D91E000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000008.00000002.630932693.000000002D922000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000008.00000002.630937868.000000002D923000.00000002.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_2d900000_MSWordServices.jbxd

Similarity

API ID: AddressCursorH_prolog3MessagePostProcRectWindowmemset
String ID: D
API String ID: 308528978-2746444292
Opcode ID: d6de88d255033430c163e61dbd1a63cb58e868b9a140036587d8b73798cab9e2
Instruction ID: 63edd15ca164e827c6c4a56e2a83891793aaefa124f4d3c24697607420e46229
Opcode Fuzzy Hash: d6de88d255033430c163e61dbd1a63cb58e868b9a140036587d8b73798cab9e2
Instruction Fuzzy Hash: E3416D30A04609EFDB11DBA0D888FAEBBB9FF44716F204558F669B7291D735A905CF10

Function 69064DE0 Relevance: 10.6, APIs: 5, Strings: 1, Instructions: 120COMMON

Download Yara Rule

APIs

_ValidateLocalCookies.LIBCMT ref: 69064E17
___except_validate_context_record.LIBVCRUNTIME ref: 69064E1F
_ValidateLocalCookies.LIBCMT ref: 69064EA8
__IsNonwritableInCurrentImage.LIBCMT ref: 69064ED3
_ValidateLocalCookies.LIBCMT ref: 69064F28

Strings

csm, xrefs: 69064EBD

Memory Dump Source

Source File: 00000008.00000002.630949046.0000000069051000.00000020.00000001.01000000.00000008.sdmp, Offset: 69050000, based on PE: true

Associated: 00000008.00000002.630944757.0000000069050000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000008.00000002.630957701.0000000069084000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000008.00000002.630964126.0000000069094000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000008.00000002.630971010.00000000690A4000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000008.00000002.630975828.00000000690BC000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000008.00000002.630978860.00000000690BD000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_69050000_MSWordServices.jbxd

Similarity

API ID: CookiesLocalValidate$CurrentImageNonwritable___except_validate_context_record
String ID: csm
API String ID: 1170836740-1018135373
Opcode ID: 1dd85473704a03e7230bc617ba4beeb5061abe95a14c9fc73983aface69fb1b0
Instruction ID: cd029f38453cabc8ffed8a7c00d1f32bb4e27ac29b4d732499e759eba63fbfcd
Opcode Fuzzy Hash: 1dd85473704a03e7230bc617ba4beeb5061abe95a14c9fc73983aface69fb1b0
Instruction Fuzzy Hash: 11415138A00219EFCF10CF68C994B9EBBF5FF46328F108955E8259B261D731AA55CB91

Function 2D913EC3 Relevance: 10.6, APIs: 7, Instructions: 112windowCOMMON

Download Yara Rule

APIs

Part of subcall function 2D915D40: GetFocus.USER32(?,?,2D913915,?), ref: 2D915D44
Part of subcall function 2D915D40: GetParent.USER32(00000000), ref: 2D915D6C
Part of subcall function 2D915D40: GetWindowLongA.USER32(?,000000F0), ref: 2D915D87
Part of subcall function 2D915D40: GetParent.USER32(?), ref: 2D915D95
Part of subcall function 2D915D40: GetDesktopWindow.USER32 ref: 2D915D99
Part of subcall function 2D915D40: SendMessageA.USER32(00000000,0000014F,00000000,00000000,00000000,00000003,?,?,?,2D913915,?), ref: 2D915DAD

Part of subcall function 2D915923: __EH_prolog3.LIBCMT ref: 2D91592A
Part of subcall function 2D915923: GetLastError.KERNEL32(00000004,2D910854,00000004,2D9109B6,00000000,?,?,?,2D910E48,00000004,2D904F59), ref: 2D91592F

GetMenu.USER32(?,?,?,?), ref: 2D913F12
GetMenu.USER32(?,?,?,?), ref: 2D913F27
GetMenuItemCount.USER32(00000000), ref: 2D913F30
GetSubMenu.USER32(00000000,00000000,?,?,?), ref: 2D913F41
GetMenuItemCount.USER32(?), ref: 2D913F65
GetMenuItemID.USER32(?,?), ref: 2D913F7F
GetMenuItemID.USER32(?,00000000), ref: 2D913FA2

Memory Dump Source

Source File: 00000008.00000002.630919973.000000002D901000.00000020.00000001.01000000.00000007.sdmp, Offset: 2D900000, based on PE: true

Associated: 00000008.00000002.630913986.000000002D900000.00000002.00000001.01000000.00000007.sdmpDownload File
Associated: 00000008.00000002.630927583.000000002D91E000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000008.00000002.630932693.000000002D922000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000008.00000002.630937868.000000002D923000.00000002.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_2d900000_MSWordServices.jbxd

Similarity

API ID: Menu$Item$CountParentWindow$DesktopErrorFocusH_prolog3LastLongMessageSend
String ID:
API String ID: 666752450-0
Opcode ID: 7e50f2f67739a61d7cdcad941b223a5860d99a40bc1a59d6dfcd83b9e28e82c1
Instruction ID: 3e6ad3b50b8aa5f63f36a6bcc0c0b573f4c8ee60bd76eae59854526eb32aa7da
Opcode Fuzzy Hash: 7e50f2f67739a61d7cdcad941b223a5860d99a40bc1a59d6dfcd83b9e28e82c1
Instruction Fuzzy Hash: A7414971A0420DABEF029F68C9809AEBBBAFF44350F2185AAF955F6251D731D941CF60

Function 2D915A21 Relevance: 10.6, APIs: 7, Instructions: 78COMMON

Download Yara Rule

APIs

Part of subcall function 2D915923: __EH_prolog3.LIBCMT ref: 2D91592A
Part of subcall function 2D915923: GetLastError.KERNEL32(00000004,2D910854,00000004,2D9109B6,00000000,?,?,?,2D910E48,00000004,2D904F59), ref: 2D91592F

_msize.MSVCR90 ref: 2D915A7F
_msize.MSVCR90 ref: 2D915A99
free.MSVCR90 ref: 2D915AA1
?_set_new_handler@@YAP6AHI@ZP6AHI@Z@Z.MSVCR90 ref: 2D915AB1
malloc.MSVCR90 ref: 2D915ABF
malloc.MSVCR90 ref: 2D915AD2
?_set_new_handler@@YAP6AHI@ZP6AHI@Z@Z.MSVCR90 ref: 2D915ADB

Memory Dump Source

Source File: 00000008.00000002.630919973.000000002D901000.00000020.00000001.01000000.00000007.sdmp, Offset: 2D900000, based on PE: true

Associated: 00000008.00000002.630913986.000000002D900000.00000002.00000001.01000000.00000007.sdmpDownload File
Associated: 00000008.00000002.630927583.000000002D91E000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000008.00000002.630932693.000000002D922000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000008.00000002.630937868.000000002D923000.00000002.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_2d900000_MSWordServices.jbxd

Similarity

API ID: ?_set_new_handler@@_msizemalloc$ErrorH_prolog3Lastfree
String ID:
API String ID: 3808399026-0
Opcode ID: 421017e334a960c3b6a300a771a068da43161511278868f39a0e303892d28bc1
Instruction ID: 32393fd11ad920c7f825696bedcca0823c0ec85d1cc78197c86044d33bb1a8aa
Opcode Fuzzy Hash: 421017e334a960c3b6a300a771a068da43161511278868f39a0e303892d28bc1
Instruction Fuzzy Hash: E8218331A487099FEB11ABB0D880B6AB7F8FF04651F12846AF645F3180EB34E904CB64

Function 2D915F07 Relevance: 10.6, APIs: 7, Instructions: 75stringCOMMON

Download Yara Rule

APIs

lstrlenW.KERNEL32(?,?,?,00000000), ref: 2D915F24
IsWindowUnicode.USER32(?), ref: 2D915F2D
SetWindowTextW.USER32(?,?,?,00000000), ref: 2D915F66

Part of subcall function 2D915CD7: IsWindowUnicode.USER32(?), ref: 2D915CE0
Part of subcall function 2D915CD7: GetWindowTextW.USER32(?,00000100,?,?,2D915F4E,?,?,00000100,?,00000000), ref: 2D915CF3

lstrcmpW.KERNEL32(?,?,?,?,00000100,?,00000000), ref: 2D915F5A
lstrcmpA.KERNEL32(?,00000000,?,?,00000100,?,00000001,?,00000000), ref: 2D915FA1
SetWindowTextA.USER32(?,00000000), ref: 2D915FAD
free.MSVCR90 ref: 2D915FB4

Memory Dump Source

Source File: 00000008.00000002.630919973.000000002D901000.00000020.00000001.01000000.00000007.sdmp, Offset: 2D900000, based on PE: true

Associated: 00000008.00000002.630913986.000000002D900000.00000002.00000001.01000000.00000007.sdmpDownload File
Associated: 00000008.00000002.630927583.000000002D91E000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000008.00000002.630932693.000000002D922000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000008.00000002.630937868.000000002D923000.00000002.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_2d900000_MSWordServices.jbxd

Similarity

API ID: Window$Text$Unicodelstrcmp$freelstrlen
String ID:
API String ID: 1265395221-0
Opcode ID: c7cc36424aaddb7eb70f3b1be1ce97400ab62d919ebba41db5dda4090b907a9c
Instruction ID: e57a933f89c6b38ed50185434c83cd3f05379c76e9632b17cb88a747f78c81bb
Opcode Fuzzy Hash: c7cc36424aaddb7eb70f3b1be1ce97400ab62d919ebba41db5dda4090b907a9c
Instruction Fuzzy Hash: 2A1142B260910CABDB52AA74DCC4FBFB7BCEF04A41F414566F642F2241DA38DA448A65

Function 2D90646A Relevance: 10.6, APIs: 7, Instructions: 66windowCOMMON

Download Yara Rule

APIs

GetWindowRect.USER32(?,?), ref: 2D90647F
ScreenToClient.USER32(?,?), ref: 2D90648C
MoveWindow.USER32(?,?,?,?,00000001,00000000), ref: 2D9064A2
SendMessageA.USER32(?,0000000B,00000000,00000000), ref: 2D9064D5
MoveWindow.USER32(?,00000000,?,?,?,00000001), ref: 2D9064EA
SendMessageA.USER32(?,0000000B,00000001,00000000), ref: 2D9064F8
RedrawWindow.USER32(?,00000000,00000000,00000585), ref: 2D906508

Memory Dump Source

Source File: 00000008.00000002.630919973.000000002D901000.00000020.00000001.01000000.00000007.sdmp, Offset: 2D900000, based on PE: true

Associated: 00000008.00000002.630913986.000000002D900000.00000002.00000001.01000000.00000007.sdmpDownload File
Associated: 00000008.00000002.630927583.000000002D91E000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000008.00000002.630932693.000000002D922000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000008.00000002.630937868.000000002D923000.00000002.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_2d900000_MSWordServices.jbxd

Similarity

API ID: Window$MessageMoveSend$ClientRectRedrawScreen
String ID:
API String ID: 4152145988-0
Opcode ID: 6989e2d2c41301b66a1b727194b834f3ac92bca478be138fb1152774b95e6c39
Instruction ID: 25b5309d3fdd42e4fea427a1757802146e963fa6d7049a4b903c5a6072ea69da
Opcode Fuzzy Hash: 6989e2d2c41301b66a1b727194b834f3ac92bca478be138fb1152774b95e6c39
Instruction Fuzzy Hash: 72113A32200654BFEB215FA5DC49F9B7BB9FF88B42F048418F645AA1A0C7B6A910DB54

Function 2D9141D3 Relevance: 10.6, APIs: 7, Instructions: 60COMMON

Download Yara Rule

APIs

FindResourceW.KERNEL32(2D900000,?,00000005,00000000,?,00000000,?,?,?,2D914967,?,?,00000000,?,?), ref: 2D9141EC
LoadResource.KERNEL32(2D900000,00000000,?,2D914967,?,?,00000000,?,?,?,2D907D54,?,?,?,00000000,?), ref: 2D9141FA
LockResource.KERNEL32(00000000,?,2D914967,?,?,00000000,?,?,?,2D907D54,?,?,?,00000000,?,?), ref: 2D914208
SizeofResource.KERNEL32(2D900000,00000000,?,2D914967,?,?,00000000,?,?,?,2D907D54,?,?,?,00000000,?), ref: 2D914217
malloc.MSVCR90 ref: 2D91422D
memcpy.MSVCR90(00000000,?,00000000,2D914967,?,?,00000000,?,?,?,2D907D54,?,?,?,00000000,?), ref: 2D914240
FreeResource.KERNEL32(?,?,2D914967,?,?,00000000,?,?,?,2D907D54,?,?,?,00000000,?,?), ref: 2D91424B

Memory Dump Source

Source File: 00000008.00000002.630919973.000000002D901000.00000020.00000001.01000000.00000007.sdmp, Offset: 2D900000, based on PE: true

Associated: 00000008.00000002.630913986.000000002D900000.00000002.00000001.01000000.00000007.sdmpDownload File
Associated: 00000008.00000002.630927583.000000002D91E000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000008.00000002.630932693.000000002D922000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000008.00000002.630937868.000000002D923000.00000002.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_2d900000_MSWordServices.jbxd

Similarity

API ID: Resource$FindFreeLoadLockSizeofmallocmemcpy
String ID:
API String ID: 2295636306-0
Opcode ID: 2d64ad32ac32d75abdde25ebfac5250bf1d5c02f9361205d0d4dcb9143372c45
Instruction ID: 29f8e4111827c5dbaef49a7e854b14d04ccdeb8cecbda6ca64070f84e1979137
Opcode Fuzzy Hash: 2d64ad32ac32d75abdde25ebfac5250bf1d5c02f9361205d0d4dcb9143372c45
Instruction Fuzzy Hash: A611007560460ABFDB025FE5DC48BAA7BBCEF4E692B104465F905F7200EB74D940CB64

Function 2D90B7D5 Relevance: 10.5, APIs: 7, Instructions: 41COMMONLIBRARYCODE

Download Yara Rule

APIs

__EH_prolog3.LIBCMT ref: 2D90B7DC
~_Task_impl.LIBCPMT ref: 2D90B7F9

Part of subcall function 2D915440: __EH_prolog3.LIBCMT ref: 2D915447

~_Task_impl.LIBCPMT ref: 2D90B808

Part of subcall function 2D9154BD: __EH_prolog3.LIBCMT ref: 2D9154C4

~_Task_impl.LIBCPMT ref: 2D90B817
~_Task_impl.LIBCPMT ref: 2D90B826
~_Task_impl.LIBCPMT ref: 2D90B835

Part of subcall function 2D9153F3: __EH_prolog3.LIBCMT ref: 2D9153FA

~_Task_impl.LIBCPMT ref: 2D90B844

Part of subcall function 2D904873: ??_V@YAXPAX@Z.MSVCR90(?,?,2D904B1B), ref: 2D904883

Part of subcall function 2D908409: __EH_prolog3.LIBCMT ref: 2D908410

Memory Dump Source

Source File: 00000008.00000002.630919973.000000002D901000.00000020.00000001.01000000.00000007.sdmp, Offset: 2D900000, based on PE: true

Associated: 00000008.00000002.630913986.000000002D900000.00000002.00000001.01000000.00000007.sdmpDownload File
Associated: 00000008.00000002.630927583.000000002D91E000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000008.00000002.630932693.000000002D922000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000008.00000002.630937868.000000002D923000.00000002.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_2d900000_MSWordServices.jbxd

Similarity

API ID: Task_impl$H_prolog3
String ID:
API String ID: 1204490572-0
Opcode ID: 3241c0b59448615a4cd37f35042fc3e99a8a9b7f06760bb5868e1f020493d317
Instruction ID: c0feb100a24dc0cb5835b6712cfa096a437f01b7370698c06aa372ba0c33c8d3
Opcode Fuzzy Hash: 3241c0b59448615a4cd37f35042fc3e99a8a9b7f06760bb5868e1f020493d317
Instruction Fuzzy Hash: DD114930409788DAD715DBA4C1143DDBBE0AF25301F92488DDA9A23281DBB86708D723

Function 2D90D55E Relevance: 10.1, APIs: 8, Instructions: 129COMMON

Download Yara Rule

APIs

malloc.MSVCR90 ref: 2D90D57E
malloc.MSVCR90 ref: 2D90D592
malloc.MSVCR90 ref: 2D90D5EC
memcpy.MSVCR90(?,?,?,?,2D90DE55,?,?), ref: 2D90D60A
free.MSVCR90 ref: 2D90D612
malloc.MSVCR90 ref: 2D90D627
memcpy.MSVCR90(00000000,000000FF,?,2D90DE55,?,?), ref: 2D90D649
free.MSVCR90 ref: 2D90D651

Memory Dump Source

Source File: 00000008.00000002.630919973.000000002D901000.00000020.00000001.01000000.00000007.sdmp, Offset: 2D900000, based on PE: true

Associated: 00000008.00000002.630913986.000000002D900000.00000002.00000001.01000000.00000007.sdmpDownload File
Associated: 00000008.00000002.630927583.000000002D91E000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000008.00000002.630932693.000000002D922000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000008.00000002.630937868.000000002D923000.00000002.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_2d900000_MSWordServices.jbxd

Similarity

API ID: malloc$freememcpy
String ID:
API String ID: 4259248891-0
Opcode ID: 01c201235a4f9ef5adcdd7d5822370101685d08291c9954d909efbd1c04c0ef2
Instruction ID: 2890b453fe86afdbec4c6d31e59ed98e92a28d7229bb19a9aeea4c981d11d0fa
Opcode Fuzzy Hash: 01c201235a4f9ef5adcdd7d5822370101685d08291c9954d909efbd1c04c0ef2
Instruction Fuzzy Hash: 1B416BB1600705AFEB15CF6DD880966B7EDFF44255710C82EF95AEB740EA31EA00CB50

Function 69075384 Relevance: 9.3, APIs: 6, Instructions: 298COMMONLIBRARYCODE

Download Yara Rule

Memory Dump Source

Source File: 00000008.00000002.630949046.0000000069051000.00000020.00000001.01000000.00000008.sdmp, Offset: 69050000, based on PE: true

Associated: 00000008.00000002.630944757.0000000069050000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000008.00000002.630957701.0000000069084000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000008.00000002.630964126.0000000069094000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000008.00000002.630971010.00000000690A4000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000008.00000002.630975828.00000000690BC000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000008.00000002.630978860.00000000690BD000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_69050000_MSWordServices.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: e95291b764f46044f9457bc7770685dccf3125d357350a47ac57c3fce55fa3d2
Instruction ID: a07acb1b77dd1c42eb328a6955001ab3ee6922eba855b686396b234081e2e624
Opcode Fuzzy Hash: e95291b764f46044f9457bc7770685dccf3125d357350a47ac57c3fce55fa3d2
Instruction Fuzzy Hash: ECB1B278A04349ABDF11CF98C490BEEBBF6BF86324F108955D514DF291CB719942CB64

Function 69061712 Relevance: 9.2, APIs: 6, Instructions: 175COMMON

Download Yara Rule

APIs

MultiByteToWideChar.KERNEL32(00000000,00000000,00000001,?,00000000,00000000,?,?,?,00000001), ref: 6906175B
MultiByteToWideChar.KERNEL32(00000001,00000001,00000000,?,00000000,00000000), ref: 690617C6
LCMapStringEx.KERNEL32 ref: 690617E3
LCMapStringEx.KERNEL32 ref: 69061822
LCMapStringEx.KERNEL32 ref: 69061881
WideCharToMultiByte.KERNEL32(00000000,00000000,00000000,00000000,?,?,00000000,00000000), ref: 690618A4

Memory Dump Source

Source File: 00000008.00000002.630949046.0000000069051000.00000020.00000001.01000000.00000008.sdmp, Offset: 69050000, based on PE: true

Associated: 00000008.00000002.630944757.0000000069050000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000008.00000002.630957701.0000000069084000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000008.00000002.630964126.0000000069094000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000008.00000002.630971010.00000000690A4000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000008.00000002.630975828.00000000690BC000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000008.00000002.630978860.00000000690BD000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_69050000_MSWordServices.jbxd

Similarity

API ID: ByteCharMultiStringWide
String ID:
API String ID: 2829165498-0
Opcode ID: b74e68c5a0cb57898160d4bb2c2aef4aac4b82afad4ca22e9750043bf78103db
Instruction ID: 501b8078fe4db84d99d1fb5cc03fe8ca1e7a45b4fa9ee97d8ff4ae8eab5951bc
Opcode Fuzzy Hash: b74e68c5a0cb57898160d4bb2c2aef4aac4b82afad4ca22e9750043bf78103db
Instruction Fuzzy Hash: 0D516E76A10206AFEF508F65CC45FAB3BFAEF41794F114925F914D71A0EB34D8548BA0

Function 2D911AAA Relevance: 9.1, APIs: 6, Instructions: 113COMMON

Download Yara Rule

APIs

__EH_prolog3_catch.LIBCMT ref: 2D911AB1
GetPropA.USER32(?,00000000), ref: 2D911AC1

Part of subcall function 2D915923: __EH_prolog3.LIBCMT ref: 2D91592A
Part of subcall function 2D915923: GetLastError.KERNEL32(00000004,2D910854,00000004,2D9109B6,00000000,?,?,?,2D910E48,00000004,2D904F59), ref: 2D91592F

CallWindowProcA.USER32(?,?,00000110,?,00000000), ref: 2D911B58

Part of subcall function 2D911492: GetWindowLongA.USER32(?,000000F0), ref: 2D9114A6
Part of subcall function 2D911492: GetWindowRect.USER32(?,?), ref: 2D9114BA
Part of subcall function 2D911492: IsWindowEnabled.USER32(?), ref: 2D9114DF

SetWindowLongA.USER32(?,000000FC,?), ref: 2D911B77
RemovePropA.USER32(?,00000000), ref: 2D911B86

Part of subcall function 2D910D23: GetWindowRect.USER32(?,?), ref: 2D910D2C
Part of subcall function 2D910D23: GetWindowLongA.USER32(?,000000F0), ref: 2D910D37

CallWindowProcA.USER32(?,?,?,?,00000000), ref: 2D911BE3

Memory Dump Source

Source File: 00000008.00000002.630919973.000000002D901000.00000020.00000001.01000000.00000007.sdmp, Offset: 2D900000, based on PE: true

Associated: 00000008.00000002.630913986.000000002D900000.00000002.00000001.01000000.00000007.sdmpDownload File
Associated: 00000008.00000002.630927583.000000002D91E000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000008.00000002.630932693.000000002D922000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000008.00000002.630937868.000000002D923000.00000002.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_2d900000_MSWordServices.jbxd

Similarity

API ID: Window$Long$CallProcPropRect$EnabledErrorH_prolog3H_prolog3_catchLastRemove
String ID:
API String ID: 1391589453-0
Opcode ID: 4fbfd98cbe2cb6deb81825a7b756ee763a0c1881590748147a5837a2e3193fa3
Instruction ID: fa14df5d921db8bde5a7156746ec40d3db91c0d7fea9e711e44c25f1a4d98264
Opcode Fuzzy Hash: 4fbfd98cbe2cb6deb81825a7b756ee763a0c1881590748147a5837a2e3193fa3
Instruction Fuzzy Hash: 9B41147280820DEBDF058FA4C944AEE7BB4EF08711F114155FA15BB290DB39DA44CFA0

Function 2D9084B0 Relevance: 9.1, APIs: 6, Instructions: 61COMMON

Download Yara Rule

APIs

__EH_prolog3_GS.LIBCMT ref: 2D9084B7

Part of subcall function 2D908374: SendMessageA.USER32(00000000,00000031,00000000,00000000,2D9084D1,00000058,2D9088D4), ref: 2D90837D

GetObjectA.GDI32(?,0000003C,?), ref: 2D9084DA
GetDC.USER32(00000000), ref: 2D9084E2

Part of subcall function 2D908338: CreateFontIndirectA.GDI32(?), ref: 2D908341

Part of subcall function 2D914F4C: SelectObject.GDI32(?,00000000), ref: 2D914F70
Part of subcall function 2D914F4C: SelectObject.GDI32(?,00000000), ref: 2D914F86

GetTextMetricsA.GDI32(?,?), ref: 2D908528
GetTextMetricsA.GDI32(?), ref: 2D908555
ReleaseDC.USER32(00000000,?), ref: 2D90856F

Part of subcall function 2D914ED4: __EH_prolog3.LIBCMT ref: 2D914EDB
Part of subcall function 2D914ED4: DeleteDC.GDI32(00000000), ref: 2D914EFB

Memory Dump Source

Source File: 00000008.00000002.630919973.000000002D901000.00000020.00000001.01000000.00000007.sdmp, Offset: 2D900000, based on PE: true

Associated: 00000008.00000002.630913986.000000002D900000.00000002.00000001.01000000.00000007.sdmpDownload File
Associated: 00000008.00000002.630927583.000000002D91E000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000008.00000002.630932693.000000002D922000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000008.00000002.630937868.000000002D923000.00000002.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_2d900000_MSWordServices.jbxd

Similarity

API ID: Object$MetricsSelectText$CreateDeleteFontH_prolog3H_prolog3_IndirectMessageReleaseSend
String ID:
API String ID: 275216013-0
Opcode ID: 3fec8a7f54d225b3a04d47041b0b939cbdfaff3df58c5677948275b5bead2e23
Instruction ID: 1f8710a8e145bd7d24401cbe6385c1edf9609661105e7700e55d3dafda2dbb05
Opcode Fuzzy Hash: 3fec8a7f54d225b3a04d47041b0b939cbdfaff3df58c5677948275b5bead2e23
Instruction Fuzzy Hash: 7421D87190420DAADB15DBE0D854BDDB7B9EF69301F518128F116BB2A4DF345A09CB50

Function 690652D8 Relevance: 9.1, APIs: 6, Instructions: 60COMMONLIBRARYCODE

Download Yara Rule

APIs

GetLastError.KERNEL32(00000001,?,690651E9,690622B5,69061EC9,?,69062101,?,00000001,?,?,00000001,?,69091EC0,0000000C,690621FA), ref: 690652E6
___vcrt_FlsGetValue.LIBVCRUNTIME ref: 690652F4
___vcrt_FlsSetValue.LIBVCRUNTIME ref: 6906530D
SetLastError.KERNEL32(00000000,69062101,?,00000001,?,?,00000001,?,69091EC0,0000000C,690621FA,?,00000001,?), ref: 6906535F

Memory Dump Source

Source File: 00000008.00000002.630949046.0000000069051000.00000020.00000001.01000000.00000008.sdmp, Offset: 69050000, based on PE: true

Associated: 00000008.00000002.630944757.0000000069050000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000008.00000002.630957701.0000000069084000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000008.00000002.630964126.0000000069094000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000008.00000002.630971010.00000000690A4000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000008.00000002.630975828.00000000690BC000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000008.00000002.630978860.00000000690BD000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_69050000_MSWordServices.jbxd

Similarity

API ID: ErrorLastValue___vcrt_
String ID:
API String ID: 3852720340-0
Opcode ID: e884b5e6dd916670484c0ab4f3b874929497d4393b75eaa530e2af7c357f264f
Instruction ID: 8a60474abcaaab60f014810b485f28c9ea4c718f603bb1c6ca098d49852665f7
Opcode Fuzzy Hash: e884b5e6dd916670484c0ab4f3b874929497d4393b75eaa530e2af7c357f264f
Instruction Fuzzy Hash: 4301D43A20C736BEAA1046B86D8571A3698FB43B797205B2DE120C70F1FFA24811E5D4

Function 2D9042F4 Relevance: 9.1, APIs: 4, Strings: 2, Instructions: 57COMMON

Download Yara Rule

APIs

memset.MSVCR90 ref: 2D90430C

Part of subcall function 2D9041B0: SetLastError.KERNEL32(?), ref: 2D9042E5

GetLastError.KERNEL32 ref: 2D904371
CloseHandle.KERNEL32(?), ref: 2D90437C
SetLastError.KERNEL32(00000000), ref: 2D904383

Strings

print, xrefs: 2D904321
<, xrefs: 2D904305

Memory Dump Source

Source File: 00000008.00000002.630919973.000000002D901000.00000020.00000001.01000000.00000007.sdmp, Offset: 2D900000, based on PE: true

Associated: 00000008.00000002.630913986.000000002D900000.00000002.00000001.01000000.00000007.sdmpDownload File
Associated: 00000008.00000002.630927583.000000002D91E000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000008.00000002.630932693.000000002D922000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000008.00000002.630937868.000000002D923000.00000002.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_2d900000_MSWordServices.jbxd

Similarity

API ID: ErrorLast$CloseHandlememset
String ID: <$print
API String ID: 637397322-3177634819
Opcode ID: d8c61dd94e037c3b20e46f623137d9a1aebce7df9e2942ed42fa58a28f1ee554
Instruction ID: cdb6b58a0975fd23a4ea7e43f27cb9e6ac44694fad7f246a991a4fb400730aab
Opcode Fuzzy Hash: d8c61dd94e037c3b20e46f623137d9a1aebce7df9e2942ed42fa58a28f1ee554
Instruction Fuzzy Hash: 8A110776900209EFCB41DFA8E984ACEBBF8EF49B41F105155FA04E7240E6349A40CB95

Function 2D915D40 Relevance: 9.1, APIs: 6, Instructions: 51windowCOMMON

Download Yara Rule

APIs

GetFocus.USER32(?,?,2D913915,?), ref: 2D915D44
GetParent.USER32(00000000), ref: 2D915D6C

Part of subcall function 2D915C0F: GetWindowLongA.USER32(?,000000F0), ref: 2D915C2E
Part of subcall function 2D915C0F: GetClassNameA.USER32(?,?,0000000A), ref: 2D915C43
Part of subcall function 2D915C0F: lstrcmpiA.KERNEL32(?,combobox), ref: 2D915C52

GetWindowLongA.USER32(?,000000F0), ref: 2D915D87
GetParent.USER32(?), ref: 2D915D95
GetDesktopWindow.USER32 ref: 2D915D99
SendMessageA.USER32(00000000,0000014F,00000000,00000000,00000000,00000003,?,?,?,2D913915,?), ref: 2D915DAD

Memory Dump Source

Source File: 00000008.00000002.630919973.000000002D901000.00000020.00000001.01000000.00000007.sdmp, Offset: 2D900000, based on PE: true

Associated: 00000008.00000002.630913986.000000002D900000.00000002.00000001.01000000.00000007.sdmpDownload File
Associated: 00000008.00000002.630927583.000000002D91E000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000008.00000002.630932693.000000002D922000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000008.00000002.630937868.000000002D923000.00000002.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_2d900000_MSWordServices.jbxd

Similarity

API ID: Window$LongParent$ClassDesktopFocusMessageNameSendlstrcmpi
String ID:
API String ID: 2818563221-0
Opcode ID: b9343218f800e47938ea2fa17113285f8786fe7f04673ad9aabcb0eb9daa442a
Instruction ID: 58456c4d20d8f469c0f2345f300dd562d98ce972b7dc7134e1ff2c321ca5c45d
Opcode Fuzzy Hash: b9343218f800e47938ea2fa17113285f8786fe7f04673ad9aabcb0eb9daa442a
Instruction Fuzzy Hash: 9D01F43A20529A27D3522A24EC8CFBE37BE9F81E51F030269FF05FB280DF68D4005664

Function 2D9186E4 Relevance: 8.8, APIs: 3, Strings: 2, Instructions: 65registryCOMMON

Download Yara Rule

APIs

RegOpenKeyExW.ADVAPI32 ref: 2D918736
RegQueryValueExW.ADVAPI32(?,mso.dll,00000000,00000000,?,00000208), ref: 2D918757
RegCloseKey.ADVAPI32(?), ref: 2D91876B

Strings

Software\Microsoft\Office\14.0\Common\FilesPaths, xrefs: 2D91871A
mso.dll, xrefs: 2D91874C

Memory Dump Source

Source File: 00000008.00000002.630919973.000000002D901000.00000020.00000001.01000000.00000007.sdmp, Offset: 2D900000, based on PE: true

Associated: 00000008.00000002.630913986.000000002D900000.00000002.00000001.01000000.00000007.sdmpDownload File
Associated: 00000008.00000002.630927583.000000002D91E000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000008.00000002.630932693.000000002D922000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000008.00000002.630937868.000000002D923000.00000002.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_2d900000_MSWordServices.jbxd

Similarity

API ID: CloseOpenQueryValue
String ID: Software\Microsoft\Office\14.0\Common\FilesPaths$mso.dll
API String ID: 3677997916-1420724145
Opcode ID: d8405d2e78548e9840f4d4d19bca70b639b88f9e8eef4cf1d9a1e05bad3f6f57
Instruction ID: fff22d032cea26245cdd00844c64e08e7e0794369b57fec1e3596380c07275b9
Opcode Fuzzy Hash: d8405d2e78548e9840f4d4d19bca70b639b88f9e8eef4cf1d9a1e05bad3f6f57
Instruction Fuzzy Hash: 9221587194411DAADB11DFA4DCC8BEAB7B8EF64301F0046E6B209E3160DA708E809F90

Function 69066E26 Relevance: 8.8, APIs: 3, Strings: 2, Instructions: 42libraryloaderCOMMONLIBRARYCODE

Download Yara Rule

APIs

GetModuleHandleExW.KERNEL32(00000000,mscoree.dll,00000000,CA03C88E,?,?,00000000,69083507,000000FF,?,69066DB6,?,?,69066D8A,00000000), ref: 69066E5B
GetProcAddress.KERNEL32(00000000,CorExitProcess,?,00000000,69083507,000000FF,?,69066DB6,?,?,69066D8A,00000000), ref: 69066E6D
FreeLibrary.KERNEL32(00000000,?,00000000,69083507,000000FF,?,69066DB6,?,?,69066D8A,00000000), ref: 69066E8F

Strings

mscoree.dll, xrefs: 69066E54
CorExitProcess, xrefs: 69066E65

Memory Dump Source

Source File: 00000008.00000002.630949046.0000000069051000.00000020.00000001.01000000.00000008.sdmp, Offset: 69050000, based on PE: true

Associated: 00000008.00000002.630944757.0000000069050000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000008.00000002.630957701.0000000069084000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000008.00000002.630964126.0000000069094000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000008.00000002.630971010.00000000690A4000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000008.00000002.630975828.00000000690BC000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000008.00000002.630978860.00000000690BD000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_69050000_MSWordServices.jbxd

Similarity

API ID: AddressFreeHandleLibraryModuleProc
String ID: CorExitProcess$mscoree.dll
API String ID: 4061214504-1276376045
Opcode ID: 8a72755417603ddea1eff7748829398a1175802b7482d4f1fa14fb360ad29b6a
Instruction ID: cd6f7a634c89523851bc3f3101323ab20a8c060af3f334ddb7e75b6a8c5fde42
Opcode Fuzzy Hash: 8a72755417603ddea1eff7748829398a1175802b7482d4f1fa14fb360ad29b6a
Instruction Fuzzy Hash: D3016231A14659FFDF118F50CE04BBE7BFCFB45751F000A29E821A7290DB749900CA90

Function 2D905BEE Relevance: 8.8, APIs: 3, Strings: 2, Instructions: 35COMMON

Download Yara Rule

APIs

_stricmp.MSVCR90(?,IPM.Conflict.Message), ref: 2D905C06
_stricmp.MSVCR90(?,IPM.Conflict.Folder), ref: 2D905C16
_stricmp.MSVCR90(?,?), ref: 2D905C2A

Strings

IPM.Conflict.Folder, xrefs: 2D905C0E
IPM.Conflict.Message, xrefs: 2D905BFE

Memory Dump Source

Source File: 00000008.00000002.630919973.000000002D901000.00000020.00000001.01000000.00000007.sdmp, Offset: 2D900000, based on PE: true

Associated: 00000008.00000002.630913986.000000002D900000.00000002.00000001.01000000.00000007.sdmpDownload File
Associated: 00000008.00000002.630927583.000000002D91E000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000008.00000002.630932693.000000002D922000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000008.00000002.630937868.000000002D923000.00000002.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_2d900000_MSWordServices.jbxd

Similarity

API ID: _stricmp
String ID: IPM.Conflict.Folder$IPM.Conflict.Message
API String ID: 2884411883-576266925
Opcode ID: c664559a9c9f70d296b772b2418d5b070eda03e439c831a8ea285e0178a7e7b1
Instruction ID: 1a69a76ca5d3fa26344a0f93f5822780ea378633a5667345aadeac0152637782
Opcode Fuzzy Hash: c664559a9c9f70d296b772b2418d5b070eda03e439c831a8ea285e0178a7e7b1
Instruction Fuzzy Hash: B5F0123261822E6EDB456E54FC02AA537D8DF051B3F108076FA04E6061DB31E510AF94

Function 2D90D31D Relevance: 7.6, APIs: 6, Instructions: 146stringCOMMON

Download Yara Rule

APIs

malloc.MSVCR90 ref: 2D90D3D2
free.MSVCR90 ref: 2D90D3F3
lstrlenA.KERNEL32(?,?,?), ref: 2D90D43E
malloc.MSVCR90 ref: 2D90D44B
MultiByteToWideChar.KERNEL32(00000000,00000001,?,00000000,00000000,00000001), ref: 2D90D466
free.MSVCR90 ref: 2D90D46F

Memory Dump Source

Source File: 00000008.00000002.630919973.000000002D901000.00000020.00000001.01000000.00000007.sdmp, Offset: 2D900000, based on PE: true

Associated: 00000008.00000002.630913986.000000002D900000.00000002.00000001.01000000.00000007.sdmpDownload File
Associated: 00000008.00000002.630927583.000000002D91E000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000008.00000002.630932693.000000002D922000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000008.00000002.630937868.000000002D923000.00000002.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_2d900000_MSWordServices.jbxd

Similarity

API ID: freemalloc$ByteCharMultiWidelstrlen
String ID:
API String ID: 4100972401-0
Opcode ID: 0dd822ee97a07587b369ea898bff99c7441c54b579435db3aa9a0cfacd1fb359
Instruction ID: 17b8878a2f2c6515f8c09edd2bebb10064bafdf76b038d99232acea4da70e96f
Opcode Fuzzy Hash: 0dd822ee97a07587b369ea898bff99c7441c54b579435db3aa9a0cfacd1fb359
Instruction Fuzzy Hash: 1E41B071504205EFDB16CF18EC84AAE7BBDFF84352F20469AF511E6281E772DA40CB60

Function 2D908126 Relevance: 7.6, APIs: 5, Instructions: 120windowCOMMON

Download Yara Rule

APIs

__EH_prolog3_catch.LIBCMT ref: 2D90812D

Part of subcall function 2D906995: LoadCursorA.USER32(00000000,?), ref: 2D9069A0
Part of subcall function 2D906995: SetCursor.USER32(00000000), ref: 2D9069A7

MessageBoxW.USER32 ref: 2D90820B
GetWindowRect.USER32(00000003,?), ref: 2D908260
PostMessageA.USER32 ref: 2D9082BA
SetCursor.USER32(?), ref: 2D9082F2

Memory Dump Source

Source File: 00000008.00000002.630919973.000000002D901000.00000020.00000001.01000000.00000007.sdmp, Offset: 2D900000, based on PE: true

Associated: 00000008.00000002.630913986.000000002D900000.00000002.00000001.01000000.00000007.sdmpDownload File
Associated: 00000008.00000002.630927583.000000002D91E000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000008.00000002.630932693.000000002D922000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000008.00000002.630937868.000000002D923000.00000002.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_2d900000_MSWordServices.jbxd

Similarity

API ID: Cursor$Message$H_prolog3_catchLoadPostRectWindow
String ID:
API String ID: 4269587068-0
Opcode ID: 8ef617b1b44f4df288f00f65b0eb4c4d6e4573199f92b44236c5b1fa9764ecc8
Instruction ID: cc78684829ba7846b7048ed79d782ae98df793c19b90b87b15f222ac919e2da1
Opcode Fuzzy Hash: 8ef617b1b44f4df288f00f65b0eb4c4d6e4573199f92b44236c5b1fa9764ecc8
Instruction Fuzzy Hash: 90518D70904649EFDB01EBE4D988BAEBBB9FF15305F10445CF64AB7291DB70AA05CB11

Function 2D906E33 Relevance: 7.6, APIs: 5, Instructions: 85windowCOMMON

Download Yara Rule

APIs

__EH_prolog3.LIBCMT ref: 2D906E3A

Part of subcall function 2D906995: LoadCursorA.USER32(00000000,?), ref: 2D9069A0
Part of subcall function 2D906995: SetCursor.USER32(00000000), ref: 2D9069A7

SetCursor.USER32(?), ref: 2D906E9B
SetCursor.USER32(?), ref: 2D906EC4
GetWindowRect.USER32(?,?), ref: 2D906ED5
PostMessageA.USER32 ref: 2D906F25

Memory Dump Source

Source File: 00000008.00000002.630919973.000000002D901000.00000020.00000001.01000000.00000007.sdmp, Offset: 2D900000, based on PE: true

Associated: 00000008.00000002.630913986.000000002D900000.00000002.00000001.01000000.00000007.sdmpDownload File
Associated: 00000008.00000002.630927583.000000002D91E000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000008.00000002.630932693.000000002D922000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000008.00000002.630937868.000000002D923000.00000002.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_2d900000_MSWordServices.jbxd

Similarity

API ID: Cursor$H_prolog3LoadMessagePostRectWindow
String ID:
API String ID: 4037273543-0
Opcode ID: 0cd9ef6c2300434b4beed8df20f84c3ce033bbd550e6bc83c7f64c3e873ded75
Instruction ID: 0451263017853d26de36106011f8fd1ce8e80d2e2f4c3f879ae652c0a39f4b5a
Opcode Fuzzy Hash: 0cd9ef6c2300434b4beed8df20f84c3ce033bbd550e6bc83c7f64c3e873ded75
Instruction Fuzzy Hash: BD316F30608646EFCB01DFA0D988EAEBBF5FF58706F004458F656A72A1DB74EA15CB11

Function 2D908A57 Relevance: 7.6, APIs: 5, Instructions: 85fileCOMMON

Download Yara Rule

APIs

__EH_prolog3_catch.LIBCMT ref: 2D908A5E
??_U@YAPAXI@Z.MSVCR90(00001000), ref: 2D908ACD

Part of subcall function 2D913812: Mailbox.LIBCMT ref: 2D9159AE

WriteFile.KERNEL32(000000FF,?,?,2D90224C,00000000), ref: 2D908B01
CloseHandle.KERNEL32(000000FF), ref: 2D908B2F
??_V@YAXPAX@Z.MSVCR90(?), ref: 2D908B3C

Memory Dump Source

Source File: 00000008.00000002.630919973.000000002D901000.00000020.00000001.01000000.00000007.sdmp, Offset: 2D900000, based on PE: true

Associated: 00000008.00000002.630913986.000000002D900000.00000002.00000001.01000000.00000007.sdmpDownload File
Associated: 00000008.00000002.630927583.000000002D91E000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000008.00000002.630932693.000000002D922000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000008.00000002.630937868.000000002D923000.00000002.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_2d900000_MSWordServices.jbxd

Similarity

API ID: CloseFileH_prolog3_catchHandleMailboxWrite
String ID:
API String ID: 1130278343-0
Opcode ID: a1854e6f3090bcc18ffba451e0e16ee7d44f890a498db7a328dc3a6f63f9c154
Instruction ID: d72498257ebf5a808149584e323624674e7549b5a216b88ab1b2548c650ef21f
Opcode Fuzzy Hash: a1854e6f3090bcc18ffba451e0e16ee7d44f890a498db7a328dc3a6f63f9c154
Instruction Fuzzy Hash: B6315AB1900119EFDF019FA4DC85EAEBBB8FF08361F108159F621B6290C7359E00CB64

Function 2D90D4A0 Relevance: 7.6, APIs: 6, Instructions: 79COMMON

Download Yara Rule

APIs

free.MSVCR90 ref: 2D90D4CA
free.MSVCR90 ref: 2D90D4D9
free.MSVCR90 ref: 2D90D51D
free.MSVCR90 ref: 2D90D537
free.MSVCR90 ref: 2D90D546
free.MSVCR90 ref: 2D90D54C

Memory Dump Source

Source File: 00000008.00000002.630919973.000000002D901000.00000020.00000001.01000000.00000007.sdmp, Offset: 2D900000, based on PE: true

Associated: 00000008.00000002.630913986.000000002D900000.00000002.00000001.01000000.00000007.sdmpDownload File
Associated: 00000008.00000002.630927583.000000002D91E000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000008.00000002.630932693.000000002D922000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000008.00000002.630937868.000000002D923000.00000002.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_2d900000_MSWordServices.jbxd

Similarity

API ID: free
String ID:
API String ID: 1294909896-0
Opcode ID: 25fb3c7a302c42c4db106aa026130f44d51cd59d976421f0f620d3f7e6c92f65
Instruction ID: 54ff55d5fa27fb79a36b32159cfd6172ec3d927d5a4d5082c66aa0c73807fcfc
Opcode Fuzzy Hash: 25fb3c7a302c42c4db106aa026130f44d51cd59d976421f0f620d3f7e6c92f65
Instruction Fuzzy Hash: DD216871900109FFDF068F5DE880A69BB79FF44356F2080A6FD04AA655D772E990DF90

Function 2D904391 Relevance: 7.6, APIs: 2, Strings: 3, Instructions: 76COMMON

Download Yara Rule

APIs

SetLastError.KERNEL32(00000000), ref: 2D90444B

Part of subcall function 2D9042F4: memset.MSVCR90 ref: 2D90430C

GetLastError.KERNEL32 ref: 2D90441B

Strings

k2ub, xrefs: 2D9043BA
m2ub, xrefs: 2D9043EC
l2ub, xrefs: 2D9043D3

Memory Dump Source

Source File: 00000008.00000002.630919973.000000002D901000.00000020.00000001.01000000.00000007.sdmp, Offset: 2D900000, based on PE: true

Associated: 00000008.00000002.630913986.000000002D900000.00000002.00000001.01000000.00000007.sdmpDownload File
Associated: 00000008.00000002.630927583.000000002D91E000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000008.00000002.630932693.000000002D922000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000008.00000002.630937868.000000002D923000.00000002.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_2d900000_MSWordServices.jbxd

Similarity

API ID: ErrorLast$memset
String ID: k2ub$l2ub$m2ub
API String ID: 4054172246-710509214
Opcode ID: a014364477d3a65b98d8856cf8cc2dbbb26512beaec59bad19e4555a2d030b98
Instruction ID: c2dfbdc07cfffca0386c9a14721d79e5228a72b7c378542f013fbdad6c4dbdbf
Opcode Fuzzy Hash: a014364477d3a65b98d8856cf8cc2dbbb26512beaec59bad19e4555a2d030b98
Instruction Fuzzy Hash: D921103280451CBBCB02AFA5ED44EDEBBBDEFA5652F128051F610B3120D7758E52DB50

Function 2D912319 Relevance: 7.6, APIs: 5, Instructions: 55threadCOMMON

Download Yara Rule

APIs

Part of subcall function 2D915923: __EH_prolog3.LIBCMT ref: 2D91592A
Part of subcall function 2D915923: GetLastError.KERNEL32(00000004,2D910854,00000004,2D9109B6,00000000,?,?,?,2D910E48,00000004,2D904F59), ref: 2D91592F

CallNextHookEx.USER32(?,?,?,?), ref: 2D912336
CallNextHookEx.USER32(?,00000003,?,?), ref: 2D91237D
UnhookWindowsHookEx.USER32 ref: 2D912388
GetCurrentThreadId.KERNEL32 ref: 2D91239D
SetWindowsHookExA.USER32(00000004,Function_00011CD5,00000000,00000000), ref: 2D9123AD

Memory Dump Source

Source File: 00000008.00000002.630919973.000000002D901000.00000020.00000001.01000000.00000007.sdmp, Offset: 2D900000, based on PE: true

Associated: 00000008.00000002.630913986.000000002D900000.00000002.00000001.01000000.00000007.sdmpDownload File
Associated: 00000008.00000002.630927583.000000002D91E000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000008.00000002.630932693.000000002D922000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000008.00000002.630937868.000000002D923000.00000002.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_2d900000_MSWordServices.jbxd

Similarity

API ID: Hook$CallNextWindows$CurrentErrorH_prolog3LastThreadUnhook
String ID:
API String ID: 2915796353-0
Opcode ID: 0fa8ab5b6ebeeac773e537b9d53b0b54231797e52cdf689844d151eb5b911a35
Instruction ID: 3b00e4655d15ab58b363384b88398ecfc5cc41c1d9e689fc93245c90a508f479
Opcode Fuzzy Hash: 0fa8ab5b6ebeeac773e537b9d53b0b54231797e52cdf689844d151eb5b911a35
Instruction Fuzzy Hash: 0B11C231108309EFDB12AF60DD89B5A7BB8FF08B52F009428FA02EA661D775E551CF14

Function 2D912A2D Relevance: 7.5, APIs: 5, Instructions: 48windowCOMMON

Download Yara Rule

APIs

EnableMenuItem.USER32 ref: 2D912A5A
GetFocus.USER32 ref: 2D912A6C
GetParent.USER32(?), ref: 2D912A7A
SetFocus.USER32 ref: 2D912A95
EnableWindow.USER32(?,?), ref: 2D912AAB

Memory Dump Source

Source File: 00000008.00000002.630919973.000000002D901000.00000020.00000001.01000000.00000007.sdmp, Offset: 2D900000, based on PE: true

Associated: 00000008.00000002.630913986.000000002D900000.00000002.00000001.01000000.00000007.sdmpDownload File
Associated: 00000008.00000002.630927583.000000002D91E000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000008.00000002.630932693.000000002D922000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000008.00000002.630937868.000000002D923000.00000002.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_2d900000_MSWordServices.jbxd

Similarity

API ID: EnableFocus$ItemMenuParentWindow
String ID:
API String ID: 783553715-0
Opcode ID: a6d1221c53ea5b38c64e38f94021bb8cfd5bf2c4aea98bc02367ab44cc2a7b84
Instruction ID: a2b0bdfbe21f6887497d5f19f27fb07ca494b3a712db62f501db8f24307c11ba
Opcode Fuzzy Hash: a6d1221c53ea5b38c64e38f94021bb8cfd5bf2c4aea98bc02367ab44cc2a7b84
Instruction Fuzzy Hash: 1C01A931104608AFCB25AF64D90AF9ABBF9EF00711F01C669F606E26A0C775E894CF94

Function 2D90510C Relevance: 7.5, APIs: 5, Instructions: 46COMMON

Download Yara Rule

APIs

CoRevokeClassObject.OLE32 ref: 2D905124
CoRevokeClassObject.OLE32(00000000), ref: 2D905136
FreeLibrary.KERNEL32(00000000), ref: 2D90515B
free.MSVCR90 ref: 2D905170
free.MSVCR90 ref: 2D905178

Memory Dump Source

Source File: 00000008.00000002.630919973.000000002D901000.00000020.00000001.01000000.00000007.sdmp, Offset: 2D900000, based on PE: true

Associated: 00000008.00000002.630913986.000000002D900000.00000002.00000001.01000000.00000007.sdmpDownload File
Associated: 00000008.00000002.630927583.000000002D91E000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000008.00000002.630932693.000000002D922000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000008.00000002.630937868.000000002D923000.00000002.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_2d900000_MSWordServices.jbxd

Similarity

API ID: ClassObjectRevokefree$FreeLibrary
String ID:
API String ID: 850073815-0
Opcode ID: d2cc155e35f4a416e2a937fcd3fa4bad07fb0eff6f264fc1923f4cb179c61b0a
Instruction ID: f51c55b804aba8d5ccf694b28cb9673a4c3c4169b40f81f59490620fe411c06d
Opcode Fuzzy Hash: d2cc155e35f4a416e2a937fcd3fa4bad07fb0eff6f264fc1923f4cb179c61b0a
Instruction Fuzzy Hash: 860156762183029BE7829B24E840BA2B3FDFF44712F610414F514F3290EBB8E820CFA4

Function 2D915C6C Relevance: 7.5, APIs: 5, Instructions: 45COMMON

Download Yara Rule

APIs

IsWindowUnicode.USER32(?), ref: 2D915C79
malloc.MSVCR90 ref: 2D915C8B
GetWindowTextW.USER32(?,00000000,?,2D915F95,?,?,00000100,?,00000001,?,00000000), ref: 2D915C9D
GetWindowTextA.USER32(?,00000001,?), ref: 2D915CBA
free.MSVCR90 ref: 2D915CC7

Memory Dump Source

Source File: 00000008.00000002.630919973.000000002D901000.00000020.00000001.01000000.00000007.sdmp, Offset: 2D900000, based on PE: true

Associated: 00000008.00000002.630913986.000000002D900000.00000002.00000001.01000000.00000007.sdmpDownload File
Associated: 00000008.00000002.630927583.000000002D91E000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000008.00000002.630932693.000000002D922000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000008.00000002.630937868.000000002D923000.00000002.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_2d900000_MSWordServices.jbxd

Similarity

API ID: Window$Text$Unicodefreemalloc
String ID:
API String ID: 1936483696-0
Opcode ID: 80bc73d0d622f11313534d45b9ff64eed878d385fe2f0cc67415ed160a2f0339
Instruction ID: e6b8599878033e61b72db4813ee02b8cfaeea31def82cf30756845ef3934a606
Opcode Fuzzy Hash: 80bc73d0d622f11313534d45b9ff64eed878d385fe2f0cc67415ed160a2f0339
Instruction Fuzzy Hash: 9EF06D3650A219BF8B121FA5DC48E9B7F79FF49BA27018126FD04A6210D735D911CAE4

Function 2D915CD7 Relevance: 7.5, APIs: 5, Instructions: 44COMMON

Download Yara Rule

APIs

IsWindowUnicode.USER32(?), ref: 2D915CE0
GetWindowTextW.USER32(?,00000100,?,?,2D915F4E,?,?,00000100,?,00000000), ref: 2D915CF3
malloc.MSVCR90 ref: 2D915D06
GetWindowTextA.USER32(?,00000000,?), ref: 2D915D19
free.MSVCR90 ref: 2D915D30

Memory Dump Source

Source File: 00000008.00000002.630919973.000000002D901000.00000020.00000001.01000000.00000007.sdmp, Offset: 2D900000, based on PE: true

Associated: 00000008.00000002.630913986.000000002D900000.00000002.00000001.01000000.00000007.sdmpDownload File
Associated: 00000008.00000002.630927583.000000002D91E000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000008.00000002.630932693.000000002D922000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000008.00000002.630937868.000000002D923000.00000002.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_2d900000_MSWordServices.jbxd

Similarity

API ID: Window$Text$Unicodefreemalloc
String ID:
API String ID: 1936483696-0
Opcode ID: 8f5a73677b28a2fc46377ca616fd265b2640b180ecd2b49f0c4c138bd6efdb8d
Instruction ID: b6815e543c75cd468fd74d7eb06cf77436931e2a8f39181f04c4dbd5d2db116b
Opcode Fuzzy Hash: 8f5a73677b28a2fc46377ca616fd265b2640b180ecd2b49f0c4c138bd6efdb8d
Instruction Fuzzy Hash: C9F04B3A108249BBCB021F65AC48EAA3BB9EF886A2701852AFA05E2210D735C410CB64

Function 2D904896 Relevance: 7.1, APIs: 3, Strings: 1, Instructions: 119COMMON

Download Yara Rule

APIs

??_V@YAXPAX@Z.MSVCR90(?), ref: 2D9049C3

Part of subcall function 2D90F52B: malloc.MSVCR90 ref: 2D90F531

memmove.MSVCR90(?,?,?), ref: 2D904991
memmove.MSVCR90(?,8007000E,?), ref: 2D9049A6

Strings

jsr9, xrefs: 2D9048D5

Memory Dump Source

Source File: 00000008.00000002.630919973.000000002D901000.00000020.00000001.01000000.00000007.sdmp, Offset: 2D900000, based on PE: true

Associated: 00000008.00000002.630913986.000000002D900000.00000002.00000001.01000000.00000007.sdmpDownload File
Associated: 00000008.00000002.630927583.000000002D91E000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000008.00000002.630932693.000000002D922000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000008.00000002.630937868.000000002D923000.00000002.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_2d900000_MSWordServices.jbxd

Similarity

API ID: memmove$malloc
String ID: jsr9
API String ID: 3263852767-1633979662
Opcode ID: bf3518efe7dfd3a358c7f3c6504b6faca0361622a601a3fdafd0a7f811bafe18
Instruction ID: 382503c441e71ee1be6ff370ea9aa0ed76cbb0fb916c8e6f87f3bb89b71e243d
Opcode Fuzzy Hash: bf3518efe7dfd3a358c7f3c6504b6faca0361622a601a3fdafd0a7f811bafe18
Instruction Fuzzy Hash: 1141B170A04604EFCB11CF59E98095EBBFAEF91751B20C56EF5A5E7210D770E941CB40

Function 2D914385 Relevance: 7.1, APIs: 3, Strings: 1, Instructions: 70COMMON

Download Yara Rule

APIs

__EH_prolog3_catch.LIBCMT ref: 2D91438C
GetWindowLongA.USER32(?,000000F0), ref: 2D9143BB
GetParent.USER32(?), ref: 2D9143CB

Strings

0, xrefs: 2D914391

Memory Dump Source

Source File: 00000008.00000002.630919973.000000002D901000.00000020.00000001.01000000.00000007.sdmp, Offset: 2D900000, based on PE: true

Associated: 00000008.00000002.630913986.000000002D900000.00000002.00000001.01000000.00000007.sdmpDownload File
Associated: 00000008.00000002.630927583.000000002D91E000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000008.00000002.630932693.000000002D922000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000008.00000002.630937868.000000002D923000.00000002.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_2d900000_MSWordServices.jbxd

Similarity

API ID: H_prolog3_catchLongParentWindow
String ID: 0
API String ID: 944585138-4108050209
Opcode ID: 53eed86ba01145a33b80746e64004092f589971a2c922e424bd0a84d6d5e7842
Instruction ID: 16b22e005a78ad8a222434d0d80d9bb41c4da97e2c67ae48229afbe507be49ea
Opcode Fuzzy Hash: 53eed86ba01145a33b80746e64004092f589971a2c922e424bd0a84d6d5e7842
Instruction Fuzzy Hash: CE21447190820EDBDF05DFA0C540B9E7BB4BF0A310F218199FA15BB290D776EA45CB91

Function 69052C9A Relevance: 7.1, APIs: 3, Strings: 1, Instructions: 68COMMON

Download Yara Rule

APIs

std::_Lockit::_Lockit.LIBCPMT ref: 69052CAF

Part of subcall function 69054779: std::_Lockit::_Lockit.LIBCPMT ref: 69054799
Part of subcall function 69054779: std::_Lockit::~_Lockit.LIBCPMT ref: 690547BF

std::_Lockit::~_Lockit.LIBCPMT ref: 69052D5B

Strings

0(:, xrefs: 69052CB4, 69052D37

Memory Dump Source

Source File: 00000008.00000002.630949046.0000000069051000.00000020.00000001.01000000.00000008.sdmp, Offset: 69050000, based on PE: true

Associated: 00000008.00000002.630944757.0000000069050000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000008.00000002.630957701.0000000069084000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000008.00000002.630964126.0000000069094000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000008.00000002.630971010.00000000690A4000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000008.00000002.630975828.00000000690BC000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000008.00000002.630978860.00000000690BD000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_69050000_MSWordServices.jbxd

Similarity

API ID: Lockitstd::_$Lockit::_Lockit::~_
String ID: 0(:
API String ID: 593203224-1081822106
Opcode ID: cd9b917a79a3b2518caf60869e9abd471995539bf947e70725352c326e8a2b43
Instruction ID: 2896983ab2dba8407470c35cae180e0b21849d3e515cdfd4a7e76e61ad3ece33
Opcode Fuzzy Hash: cd9b917a79a3b2518caf60869e9abd471995539bf947e70725352c326e8a2b43
Instruction Fuzzy Hash: C321C978D0021AEFCF04DFA8C985BEEBBB4FF15314F105929D512A72A0DB306A55CBA1

Function 2D904B08 Relevance: 7.1, APIs: 3, Strings: 1, Instructions: 61COMMON

Download Yara Rule

APIs

Part of subcall function 2D904873: ??_V@YAXPAX@Z.MSVCR90(?,?,2D904B1B), ref: 2D904883

GetACP.KERNEL32 ref: 2D904B25
WideCharToMultiByte.KERNEL32(?,?,?,000000FF,00000000,00000000,00000000,00000000), ref: 2D904B44
WideCharToMultiByte.KERNEL32(?,?,?,000000FF,?,00000001,00000000,00000000), ref: 2D904B8A

Strings

dk29, xrefs: 2D904B5F

Memory Dump Source

Source File: 00000008.00000002.630919973.000000002D901000.00000020.00000001.01000000.00000007.sdmp, Offset: 2D900000, based on PE: true

Associated: 00000008.00000002.630913986.000000002D900000.00000002.00000001.01000000.00000007.sdmpDownload File
Associated: 00000008.00000002.630927583.000000002D91E000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000008.00000002.630932693.000000002D922000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000008.00000002.630937868.000000002D923000.00000002.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_2d900000_MSWordServices.jbxd

Similarity

API ID: ByteCharMultiWide
String ID: dk29
API String ID: 626452242-1677150192
Opcode ID: 54cd556c52f306bb995ab3721d27e46b61d5a6813848f8a1285962df9107877e
Instruction ID: bf6691ebbad844abfb3134fde2ced17a3c7ffb8f1575516fe460f6b38992d166
Opcode Fuzzy Hash: 54cd556c52f306bb995ab3721d27e46b61d5a6813848f8a1285962df9107877e
Instruction Fuzzy Hash: 76113A72804118BB8F128F96DC44DDF7FBDEF86761B10825AF914A6160D6318A50DB60

Function 2D90FFF9 Relevance: 7.1, APIs: 3, Strings: 1, Instructions: 57COMMON

Download Yara Rule

APIs

__EH_prolog3_catch.LIBCMT ref: 2D910000
GetModuleHandleW.KERNEL32(mso.dll,0000001C,2D9100FB,00000000,?,?,00000000,00000000,?,?,2D90FD52,?,00000000,?,?,?), ref: 2D910075

Part of subcall function 2D904CF2: LoadStringW.USER32(?,?,?,00000100), ref: 2D904D3C

Strings

mso.dll, xrefs: 2D910070

Memory Dump Source

Source File: 00000008.00000002.630919973.000000002D901000.00000020.00000001.01000000.00000007.sdmp, Offset: 2D900000, based on PE: true

Associated: 00000008.00000002.630913986.000000002D900000.00000002.00000001.01000000.00000007.sdmpDownload File
Associated: 00000008.00000002.630927583.000000002D91E000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000008.00000002.630932693.000000002D922000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000008.00000002.630937868.000000002D923000.00000002.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_2d900000_MSWordServices.jbxd

Similarity

API ID: H_prolog3_catchHandleLoadModuleString
String ID: mso.dll
API String ID: 2579502969-1671880577
Opcode ID: dd69b0d10b434215bee836a1da702f6a5beb51775920a127c437b6ba4475ef39
Instruction ID: c30f72460850910ffc8c6374c91d779b13c0c09f888adc70da39720f3d7f7599
Opcode Fuzzy Hash: dd69b0d10b434215bee836a1da702f6a5beb51775920a127c437b6ba4475ef39
Instruction Fuzzy Hash: 1111893180815DEBCB12DFA0C804BDE7B70AF547A2F268154FA55B7290CB35DA10CBA1

Function 2D908ED9 Relevance: 7.0, APIs: 2, Strings: 2, Instructions: 50timeCOMMON

Download Yara Rule

APIs

GetSystemTime.KERNEL32(?), ref: 2D908EEB
SystemTimeToFileTime.KERNEL32(?,?), ref: 2D908EF9

Strings

@, xrefs: 2D908EE4
@, xrefs: 2D908F19

Memory Dump Source

Source File: 00000008.00000002.630919973.000000002D901000.00000020.00000001.01000000.00000007.sdmp, Offset: 2D900000, based on PE: true

Associated: 00000008.00000002.630913986.000000002D900000.00000002.00000001.01000000.00000007.sdmpDownload File
Associated: 00000008.00000002.630927583.000000002D91E000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000008.00000002.630932693.000000002D922000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000008.00000002.630937868.000000002D923000.00000002.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_2d900000_MSWordServices.jbxd

Similarity

API ID: Time$System$File
String ID: @$@
API String ID: 2838179519-149943524
Opcode ID: 08a932d5c94b5dd8974e83130cd4938677634f70b44b3697ea71ee8154a0d578
Instruction ID: 3f177cfe587c7ee1f98aefc79c0b7f2135e55c80632780e877ef553178879f73
Opcode Fuzzy Hash: 08a932d5c94b5dd8974e83130cd4938677634f70b44b3697ea71ee8154a0d578
Instruction Fuzzy Hash: 3311F071A11229ABDB00EFA4D849FDEBBB8FF08751F004459FA45F7240E774EA008BA4

Function 2D905264 Relevance: 7.0, APIs: 3, Strings: 1, Instructions: 43windowCOMMON

Download Yara Rule

APIs

LoadIconA.USER32(00000000,00007F00), ref: 2D90529A
LoadCursorA.USER32(00000000,00007F00), ref: 2D9052A5
GetStockObject.GDI32(00000000), ref: 2D9052AF

Strings

Cnfnot_ClassFactory, xrefs: 2D9052BF

Memory Dump Source

Source File: 00000008.00000002.630919973.000000002D901000.00000020.00000001.01000000.00000007.sdmp, Offset: 2D900000, based on PE: true

Associated: 00000008.00000002.630913986.000000002D900000.00000002.00000001.01000000.00000007.sdmpDownload File
Associated: 00000008.00000002.630927583.000000002D91E000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000008.00000002.630932693.000000002D922000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000008.00000002.630937868.000000002D923000.00000002.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_2d900000_MSWordServices.jbxd

Similarity

API ID: Load$CursorIconObjectStock
String ID: Cnfnot_ClassFactory
API String ID: 3711576554-2905417136
Opcode ID: c9b164db8e07fad24eea473b5987bb14eb7d56739adc5986050353c88e1aaea9
Instruction ID: 03f9824df6c037ddb76f34d8fca63fc85e7956f2575f59e6723157d109e45e74
Opcode Fuzzy Hash: c9b164db8e07fad24eea473b5987bb14eb7d56739adc5986050353c88e1aaea9
Instruction Fuzzy Hash: D2012C71C05218AFCB459FEA98846EEFFFCEF58612B10416BE501F3210D37885408FA4

Function 2D915C0F Relevance: 7.0, APIs: 3, Strings: 1, Instructions: 36stringCOMMON

Download Yara Rule

APIs

GetWindowLongA.USER32(?,000000F0), ref: 2D915C2E
GetClassNameA.USER32(?,?,0000000A), ref: 2D915C43
lstrcmpiA.KERNEL32(?,combobox), ref: 2D915C52

Strings

combobox, xrefs: 2D915C49

Memory Dump Source

Source File: 00000008.00000002.630919973.000000002D901000.00000020.00000001.01000000.00000007.sdmp, Offset: 2D900000, based on PE: true

Associated: 00000008.00000002.630913986.000000002D900000.00000002.00000001.01000000.00000007.sdmpDownload File
Associated: 00000008.00000002.630927583.000000002D91E000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000008.00000002.630932693.000000002D922000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000008.00000002.630937868.000000002D923000.00000002.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_2d900000_MSWordServices.jbxd

Similarity

API ID: ClassLongNameWindowlstrcmpi
String ID: combobox
API String ID: 2054663530-2240613097
Opcode ID: 91a4ab4f22fe47e1f5f3019f0c281e6d29075eab5e452b725dd600cb9d6fa6a5
Instruction ID: bc0f85f5071f45261005918adf2a1cc1d6d640fd32f75bc4741aff20faede261
Opcode Fuzzy Hash: 91a4ab4f22fe47e1f5f3019f0c281e6d29075eab5e452b725dd600cb9d6fa6a5
Instruction Fuzzy Hash: 1FF09032A19129AFCB41EFA8CC45EBE73BCEF09652B414915F412F7180D734E6058B99

Function 6907389F Relevance: 6.3, APIs: 4, Instructions: 338fileCOMMONLIBRARYCODE

Download Yara Rule

APIs

GetConsoleOutputCP.KERNEL32 ref: 69073902

Part of subcall function 69079E65: WideCharToMultiByte.KERNEL32(00000000,00000000,690666A1,?,69066732,00000016,6906EE89,0000FDE9,?,?,00000008,?,00000003,69092580,00000024,6906EE89), ref: 69079F11

WriteFile.KERNEL32(?,?,00000000,?,00000000), ref: 69073B5D
WriteFile.KERNEL32(?,?,00000001,?,00000000), ref: 69073BA5
GetLastError.KERNEL32 ref: 69073C48

Memory Dump Source

Source File: 00000008.00000002.630949046.0000000069051000.00000020.00000001.01000000.00000008.sdmp, Offset: 69050000, based on PE: true

Associated: 00000008.00000002.630944757.0000000069050000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000008.00000002.630957701.0000000069084000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000008.00000002.630964126.0000000069094000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000008.00000002.630971010.00000000690A4000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000008.00000002.630975828.00000000690BC000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000008.00000002.630978860.00000000690BD000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_69050000_MSWordServices.jbxd

Similarity

API ID: FileWrite$ByteCharConsoleErrorLastMultiOutputWide
String ID:
API String ID: 2112829910-0
Opcode ID: d45011419967abaefd4c99b481b70d4efdf86433e83b8b1e3e944bb897e6df42
Instruction ID: ae3369b9951005e568b03a3e30ef9af10cb2fc5d4b0901a97297608cc395d394
Opcode Fuzzy Hash: d45011419967abaefd4c99b481b70d4efdf86433e83b8b1e3e944bb897e6df42
Instruction Fuzzy Hash: DCD18A75E04258AFDF15CFA8D880AEDBBB5FF09324F14492AE865EB341E730A841CB54

Function 2D905DB3 Relevance: 6.3, APIs: 4, Instructions: 295COMMON

Download Yara Rule

APIs

__EH_prolog3_catch_GS.LIBCMT ref: 2D905DBD
??_V@YAXPAX@Z.MSVCR90 ref: 2D906097

Memory Dump Source

Source File: 00000008.00000002.630919973.000000002D901000.00000020.00000001.01000000.00000007.sdmp, Offset: 2D900000, based on PE: true

Associated: 00000008.00000002.630913986.000000002D900000.00000002.00000001.01000000.00000007.sdmpDownload File
Associated: 00000008.00000002.630927583.000000002D91E000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000008.00000002.630932693.000000002D922000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000008.00000002.630937868.000000002D923000.00000002.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_2d900000_MSWordServices.jbxd

Similarity

API ID: H_prolog3_catch_
String ID:
API String ID: 1329019490-0
Opcode ID: 835d5118c4c389efc01aa369a9ad2f27a86c6a407026eee3d0340d501c0a31c0
Instruction ID: 70b3245496cbd622bd9c181e425feb9650342d4c69caa356d7a8920fed700721
Opcode Fuzzy Hash: 835d5118c4c389efc01aa369a9ad2f27a86c6a407026eee3d0340d501c0a31c0
Instruction Fuzzy Hash: 7AC1BC70908268DBDB95DBA4DC88BACB7B5EF25301F1140D8F649B71A1DB349E84CF11

Function 690653EF Relevance: 6.2, APIs: 4, Instructions: 168COMMONLIBRARYCODE

Download Yara Rule

APIs

___AdjustPointer.LIBCMT ref: 690654B6
___AdjustPointer.LIBCMT ref: 690654D9
___AdjustPointer.LIBCMT ref: 69065575

Memory Dump Source

Source File: 00000008.00000002.630949046.0000000069051000.00000020.00000001.01000000.00000008.sdmp, Offset: 69050000, based on PE: true

Associated: 00000008.00000002.630944757.0000000069050000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000008.00000002.630957701.0000000069084000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000008.00000002.630964126.0000000069094000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000008.00000002.630971010.00000000690A4000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000008.00000002.630975828.00000000690BC000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000008.00000002.630978860.00000000690BD000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_69050000_MSWordServices.jbxd

Similarity

API ID: AdjustPointer
String ID:
API String ID: 1740715915-0
Opcode ID: a3932ce952b1190cd4fce6c08fe8afa0c52557f6817beaa38b30933cff18cfb5
Instruction ID: a128ef7e1177fe8b44d78239abaa46bae78bc73d4dc98991add32a2d12e60465
Opcode Fuzzy Hash: a3932ce952b1190cd4fce6c08fe8afa0c52557f6817beaa38b30933cff18cfb5
Instruction Fuzzy Hash: 8251EE7A605602AFEB14CF14D964BAA77F6FF40319F104829E815CB2B2E731E981CB90

Function 69076ABA Relevance: 6.1, APIs: 4, Instructions: 132COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000008.00000002.630949046.0000000069051000.00000020.00000001.01000000.00000008.sdmp, Offset: 69050000, based on PE: true

Associated: 00000008.00000002.630944757.0000000069050000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000008.00000002.630957701.0000000069084000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000008.00000002.630964126.0000000069094000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000008.00000002.630971010.00000000690A4000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000008.00000002.630975828.00000000690BC000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000008.00000002.630978860.00000000690BD000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_69050000_MSWordServices.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: dea424ceb55448479b79fa66cf2909807221c31cee60fd26d68d93b577f7ec03
Instruction ID: 678047f9857519a4df27cf88f29f5ed8d1833fd23139a301d822b3e07b942e61
Opcode Fuzzy Hash: dea424ceb55448479b79fa66cf2909807221c31cee60fd26d68d93b577f7ec03
Instruction Fuzzy Hash: 5641F975B00B04EFD724DF78CD41B5ABBEAEF89724F10992AE002DF291D371A5818B85

Function 6907A0B1 Relevance: 6.1, APIs: 4, Instructions: 82COMMON

Download Yara Rule

APIs

Part of subcall function 69079E65: WideCharToMultiByte.KERNEL32(00000000,00000000,690666A1,?,69066732,00000016,6906EE89,0000FDE9,?,?,00000008,?,00000003,69092580,00000024,6906EE89), ref: 69079F11

GetLastError.KERNEL32 ref: 6907A115
__dosmaperr.LIBCMT ref: 6907A11C
GetLastError.KERNEL32(?,?,?,?), ref: 6907A156
__dosmaperr.LIBCMT ref: 6907A15D

Memory Dump Source

Source File: 00000008.00000002.630949046.0000000069051000.00000020.00000001.01000000.00000008.sdmp, Offset: 69050000, based on PE: true

Associated: 00000008.00000002.630944757.0000000069050000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000008.00000002.630957701.0000000069084000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000008.00000002.630964126.0000000069094000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000008.00000002.630971010.00000000690A4000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000008.00000002.630975828.00000000690BC000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000008.00000002.630978860.00000000690BD000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_69050000_MSWordServices.jbxd

Similarity

API ID: ErrorLast__dosmaperr$ByteCharMultiWide
String ID:
API String ID: 1913693674-0
Opcode ID: f085d39f388924831384b41500c30864db0907eb3769e0b7b78ee539813f36fb
Instruction ID: 2003cbbb09db693dea5264b045f732fa6670d9d564aaec98a6c3101005e3630a
Opcode Fuzzy Hash: f085d39f388924831384b41500c30864db0907eb3769e0b7b78ee539813f36fb
Instruction Fuzzy Hash: 18218E35608705AFAB30DFA5C980B5BB7ADEF453B87209D19E8199B150DB30EC90CBA4

Function 2D912240 Relevance: 6.1, APIs: 4, Instructions: 81windowCOMMON

Download Yara Rule

APIs

LoadResource.KERNEL32(2D900000,00000000,2D900000,?,000000F0), ref: 2D91227A
LockResource.KERNEL32(00000000), ref: 2D912288
SendDlgItemMessageA.USER32(00000001,?,?,00000000,00000000), ref: 2D9122D8
FreeResource.KERNEL32(?), ref: 2D9122F0

Memory Dump Source

Source File: 00000008.00000002.630919973.000000002D901000.00000020.00000001.01000000.00000007.sdmp, Offset: 2D900000, based on PE: true

Associated: 00000008.00000002.630913986.000000002D900000.00000002.00000001.01000000.00000007.sdmpDownload File
Associated: 00000008.00000002.630927583.000000002D91E000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000008.00000002.630932693.000000002D922000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000008.00000002.630937868.000000002D923000.00000002.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_2d900000_MSWordServices.jbxd

Similarity

API ID: Resource$FreeItemLoadLockMessageSend
String ID:
API String ID: 3233515012-0
Opcode ID: 1b7faa6be833258d5e498f334db87327ba9e9dc0ba88ed7dab4f9a4b6b1b80f1
Instruction ID: e8448832fde1450ef6b0672f443cfc3d9c66f8f27f06f81af939815ef7d24cbf
Opcode Fuzzy Hash: 1b7faa6be833258d5e498f334db87327ba9e9dc0ba88ed7dab4f9a4b6b1b80f1
Instruction Fuzzy Hash: 40219271904118BFDB16AF98DC85ABE7BBCEB04351F50C466FA81F7240D274DE42ABA4

Function 6906EED9 Relevance: 6.1, APIs: 4, Instructions: 79COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000008.00000002.630949046.0000000069051000.00000020.00000001.01000000.00000008.sdmp, Offset: 69050000, based on PE: true

Associated: 00000008.00000002.630944757.0000000069050000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000008.00000002.630957701.0000000069084000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000008.00000002.630964126.0000000069094000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000008.00000002.630971010.00000000690A4000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000008.00000002.630975828.00000000690BC000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000008.00000002.630978860.00000000690BD000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_69050000_MSWordServices.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: ecfd93b739d8b7890c7b46db1811e94ceb373b24ffcecb9a8b2ef4dea6ad6a65
Instruction ID: 12aeafbf76fa8a6985a51f52c39bc60b8b038d208800c40013f0b6df59292d5d
Opcode Fuzzy Hash: ecfd93b739d8b7890c7b46db1811e94ceb373b24ffcecb9a8b2ef4dea6ad6a65
Instruction Fuzzy Hash: B3214D35608705AFDB20DF69CD80B6A7BADEF413A87119D15F958D71A1EB30E8A087A0

Function 6907B060 Relevance: 6.1, APIs: 4, Instructions: 74COMMON

Download Yara Rule

APIs

GetEnvironmentStringsW.KERNEL32 ref: 6907B068

Part of subcall function 69079E65: WideCharToMultiByte.KERNEL32(00000000,00000000,690666A1,?,69066732,00000016,6906EE89,0000FDE9,?,?,00000008,?,00000003,69092580,00000024,6906EE89), ref: 69079F11

FreeEnvironmentStringsW.KERNEL32(00000000), ref: 6907B0A0
FreeEnvironmentStringsW.KERNEL32(00000000), ref: 6907B0C0

Memory Dump Source

Source File: 00000008.00000002.630949046.0000000069051000.00000020.00000001.01000000.00000008.sdmp, Offset: 69050000, based on PE: true

Associated: 00000008.00000002.630944757.0000000069050000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000008.00000002.630957701.0000000069084000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000008.00000002.630964126.0000000069094000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000008.00000002.630971010.00000000690A4000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000008.00000002.630975828.00000000690BC000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000008.00000002.630978860.00000000690BD000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_69050000_MSWordServices.jbxd

Similarity

API ID: EnvironmentStrings$Free$ByteCharMultiWide
String ID:
API String ID: 158306478-0
Opcode ID: 7cf6390dd93ae3af6011afbc9517874e8a1a5cc60706dc158ffc230a5d09b1b9
Instruction ID: 7aa0f21e1d30b137866824ca5b9f7b2ef7fe33cc29a1927865dbf7f1579c4315
Opcode Fuzzy Hash: 7cf6390dd93ae3af6011afbc9517874e8a1a5cc60706dc158ffc230a5d09b1b9
Instruction Fuzzy Hash: 1511E5B5704709BFAA3156B74D89E7F69ACDE462F83005D19F4109B100EF70CD0185F9

Function 2D904B96 Relevance: 6.1, APIs: 2, Strings: 2, Instructions: 73COMMON

Download Yara Rule

APIs

Part of subcall function 2D904873: ??_V@YAXPAX@Z.MSVCR90(?,?,2D904B1B), ref: 2D904883

MultiByteToWideChar.KERNEL32(?,00000000,?,000000FF,00000000,00000000), ref: 2D904BF9
MultiByteToWideChar.KERNEL32(?,00000000,?,000000FF,?,?), ref: 2D904C39

Strings

pq8e, xrefs: 2D904BD3
ek29, xrefs: 2D904C13

Memory Dump Source

Source File: 00000008.00000002.630919973.000000002D901000.00000020.00000001.01000000.00000007.sdmp, Offset: 2D900000, based on PE: true

Associated: 00000008.00000002.630913986.000000002D900000.00000002.00000001.01000000.00000007.sdmpDownload File
Associated: 00000008.00000002.630927583.000000002D91E000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000008.00000002.630932693.000000002D922000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000008.00000002.630937868.000000002D923000.00000002.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_2d900000_MSWordServices.jbxd

Similarity

API ID: ByteCharMultiWide
String ID: ek29$pq8e
API String ID: 626452242-1107266725
Opcode ID: 289832f292bef27208cec160851a7ccf402e3a16d17e3959b5b585dc70defbb3
Instruction ID: 0c8b9caa0e7264df4785eb4f4757beb148e7b72d88b91dd45b10491b5177f536
Opcode Fuzzy Hash: 289832f292bef27208cec160851a7ccf402e3a16d17e3959b5b585dc70defbb3
Instruction Fuzzy Hash: 47118171908118FFCF016F95DC80CEE7F7DFF062A2B218166F615B2150E6319E51AB60

Function 2D904F8C Relevance: 6.1, APIs: 4, Instructions: 66timeCOMMON

Download Yara Rule

APIs

FileTimeToLocalFileTime.KERNEL32(?,?), ref: 2D904FAA
FileTimeToSystemTime.KERNEL32(?,?), ref: 2D904FB8
GetDateFormatW.KERNEL32 ref: 2D904FD0
GetTimeFormatW.KERNEL32(00000400,?,?,00000000,00000000,?), ref: 2D905018

Memory Dump Source

Source File: 00000008.00000002.630919973.000000002D901000.00000020.00000001.01000000.00000007.sdmp, Offset: 2D900000, based on PE: true

Associated: 00000008.00000002.630913986.000000002D900000.00000002.00000001.01000000.00000007.sdmpDownload File
Associated: 00000008.00000002.630927583.000000002D91E000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000008.00000002.630932693.000000002D922000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000008.00000002.630937868.000000002D923000.00000002.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_2d900000_MSWordServices.jbxd

Similarity

API ID: Time$File$Format$DateLocalSystem
String ID:
API String ID: 4010208002-0
Opcode ID: 0d506c86bc8d20333761228120dc7a4f1e3ba981059fe8d137410891a025c7ce
Instruction ID: 83d4b8e3fc89204dc5e3ab2e3d1cdb7f2211526a78d3230099f6a6d03e2b096c
Opcode Fuzzy Hash: 0d506c86bc8d20333761228120dc7a4f1e3ba981059fe8d137410891a025c7ce
Instruction Fuzzy Hash: 57116D76610209ABDB10CBA4DC46FEB77BDEF49B06F018061FA05E7281E67099418BE0

Function 2D91199D Relevance: 6.1, APIs: 4, Instructions: 55windowCOMMON

Download Yara Rule

APIs

IsWindowEnabled.USER32(00000000), ref: 2D9119AD
EnableWindow.USER32(00000000,00000001), ref: 2D9119DA

Part of subcall function 2D913955: IsWindow.USER32(?), ref: 2D91397E
Part of subcall function 2D913955: EnableWindow.USER32(?,00000001), ref: 2D913990
Part of subcall function 2D913955: ??_V@YAXPAX@Z.MSVCR90(?,00000000,00000000,?,2D9119D5,?,?,?,2D911DC9,?,?,00000034,2D907728,?,?,?), ref: 2D9139A8

GetWindowLongA.USER32(00000000,000000F0), ref: 2D9119E5
SendMessageA.USER32(?,0000036E,?,?,?,?,?,2D911DC9,?,?,00000034,2D907728,?,?,?), ref: 2D911A2A

Memory Dump Source

Source File: 00000008.00000002.630919973.000000002D901000.00000020.00000001.01000000.00000007.sdmp, Offset: 2D900000, based on PE: true

Associated: 00000008.00000002.630913986.000000002D900000.00000002.00000001.01000000.00000007.sdmpDownload File
Associated: 00000008.00000002.630927583.000000002D91E000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000008.00000002.630932693.000000002D922000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000008.00000002.630937868.000000002D923000.00000002.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_2d900000_MSWordServices.jbxd

Similarity

API ID: Window$Enable$EnabledLongMessageSend
String ID:
API String ID: 2621221260-0
Opcode ID: 80d8b98df82bfdefd72ce49d6432a82e25c13e1119175359add0ad463fe53604
Instruction ID: c30a9f0a5a82610760bf2824b9108d5751bd2d6751d474c64f9f03664168c86f
Opcode Fuzzy Hash: 80d8b98df82bfdefd72ce49d6432a82e25c13e1119175359add0ad463fe53604
Instruction Fuzzy Hash: A0118E31714609BFDB124F65D945BAE7AB9EF40A91F1081AAF626F6250EB31D940CF40

Function 2D911920 Relevance: 6.0, APIs: 4, Instructions: 49COMMON

Download Yara Rule

APIs

GetTopWindow.USER32(?), ref: 2D91192E
GetTopWindow.USER32(00000000), ref: 2D91196D
GetWindow.USER32(00000000,00000002), ref: 2D91198B

Memory Dump Source

Source File: 00000008.00000002.630919973.000000002D901000.00000020.00000001.01000000.00000007.sdmp, Offset: 2D900000, based on PE: true

Associated: 00000008.00000002.630913986.000000002D900000.00000002.00000001.01000000.00000007.sdmpDownload File
Associated: 00000008.00000002.630927583.000000002D91E000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000008.00000002.630932693.000000002D922000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000008.00000002.630937868.000000002D923000.00000002.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_2d900000_MSWordServices.jbxd

Similarity

API ID: Window
String ID:
API String ID: 2353593579-0
Opcode ID: 08ec9359e15abde23d99860a6cd64dff02d268bbee6ccc83fcd278bd801c5180
Instruction ID: 5d992fe696319ac45cd976b74f2a287ec8cf0b78a22073e032b82c1f42012e8b
Opcode Fuzzy Hash: 08ec9359e15abde23d99860a6cd64dff02d268bbee6ccc83fcd278bd801c5180
Instruction Fuzzy Hash: 7201D03600411EBBCF135F90AC04FAE3B6ABF18391F018051FA24B5160C736C661EFA5

Function 2D91137C Relevance: 6.0, APIs: 4, Instructions: 49COMMON

Download Yara Rule

APIs

FindResourceW.KERNEL32(2D900000,?,00000005,?,?,?,2D911500,2D91E6DC), ref: 2D9113A3
LoadResource.KERNEL32(2D900000,00000000,?,?,?,2D911500,2D91E6DC), ref: 2D9113AF
LockResource.KERNEL32(?,?,?,?,2D911500,2D91E6DC), ref: 2D9113C0
FreeResource.KERNEL32(?,?,?,?,2D911500,2D91E6DC), ref: 2D9113DF

Memory Dump Source

Source File: 00000008.00000002.630919973.000000002D901000.00000020.00000001.01000000.00000007.sdmp, Offset: 2D900000, based on PE: true

Associated: 00000008.00000002.630913986.000000002D900000.00000002.00000001.01000000.00000007.sdmpDownload File
Associated: 00000008.00000002.630927583.000000002D91E000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000008.00000002.630932693.000000002D922000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000008.00000002.630937868.000000002D923000.00000002.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_2d900000_MSWordServices.jbxd

Similarity

API ID: Resource$FindFreeLoadLock
String ID:
API String ID: 1078018258-0
Opcode ID: 54d8f05b15d5572b08f131e045fa052e8e0d0e40a8f400d6db05671858a71bfe
Instruction ID: 931d9dc8176b0f97ab4adb0ba254565b35c1b62b8a3baa81b6b29e161163d7ce
Opcode Fuzzy Hash: 54d8f05b15d5572b08f131e045fa052e8e0d0e40a8f400d6db05671858a71bfe
Instruction Fuzzy Hash: AA012632205D58BFC7432BA288C8A7A33BCAF4561670141EDFA01F7605E375C9838F94

Function 2D9111CF Relevance: 6.0, APIs: 4, Instructions: 48COMMON

Download Yara Rule

APIs

GetDlgItem.USER32(000088C4,?), ref: 2D9111DA
GetTopWindow.USER32(00000000), ref: 2D9111ED

Part of subcall function 2D9111CF: GetWindow.USER32(00000000,00000002), ref: 2D911234

GetTopWindow.USER32(000088C4), ref: 2D91121D

Memory Dump Source

Source File: 00000008.00000002.630919973.000000002D901000.00000020.00000001.01000000.00000007.sdmp, Offset: 2D900000, based on PE: true

Associated: 00000008.00000002.630913986.000000002D900000.00000002.00000001.01000000.00000007.sdmpDownload File
Associated: 00000008.00000002.630927583.000000002D91E000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000008.00000002.630932693.000000002D922000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000008.00000002.630937868.000000002D923000.00000002.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_2d900000_MSWordServices.jbxd

Similarity

API ID: Window$Item
String ID:
API String ID: 369458955-0
Opcode ID: 54411f134417d4655839eaf709aa2096772af0e2e60b50b05ad5d5f3c03e9644
Instruction ID: ab10189fd4c441d82d3d6312f069a09a04fe38d623a9eaf8bd02f5b59161be8c
Opcode Fuzzy Hash: 54411f134417d4655839eaf709aa2096772af0e2e60b50b05ad5d5f3c03e9644
Instruction Fuzzy Hash: 25014B3610961EB7CB132E619C00F9E3A6DAF157E1F018460FE14F5111E736D6518EE9

Function 2D911A35 Relevance: 6.0, APIs: 4, Instructions: 39COMMON

Download Yara Rule

APIs

GetLastActivePopup.USER32(?), ref: 2D911A66
GetForegroundWindow.USER32 ref: 2D911A78
IsWindowEnabled.USER32(?), ref: 2D911A8B
SetForegroundWindow.USER32(?), ref: 2D911A98

Memory Dump Source

Source File: 00000008.00000002.630919973.000000002D901000.00000020.00000001.01000000.00000007.sdmp, Offset: 2D900000, based on PE: true

Associated: 00000008.00000002.630913986.000000002D900000.00000002.00000001.01000000.00000007.sdmpDownload File
Associated: 00000008.00000002.630927583.000000002D91E000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000008.00000002.630932693.000000002D922000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000008.00000002.630937868.000000002D923000.00000002.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_2d900000_MSWordServices.jbxd

Similarity

API ID: Window$Foreground$ActiveEnabledLastPopup
String ID:
API String ID: 3209796547-0
Opcode ID: 57b67dea20ab1cfdb21bdbab79012c21e0ff4010b30ead0e195c94141dd8ab17
Instruction ID: 52edf175b5447f2cadfeae04027de49d3de9673216f0d637e3d9f950081aa5ba
Opcode Fuzzy Hash: 57b67dea20ab1cfdb21bdbab79012c21e0ff4010b30ead0e195c94141dd8ab17
Instruction Fuzzy Hash: 94F08C3190D70AFFDF126B60E80866A7BACAF00B92F0081A4F625F0050CBB9C148CEA0

Function 2D915923 Relevance: 6.0, APIs: 4, Instructions: 36COMMONLIBRARYCODE

Download Yara Rule

APIs

__EH_prolog3.LIBCMT ref: 2D91592A
GetLastError.KERNEL32(00000004,2D910854,00000004,2D9109B6,00000000,?,?,?,2D910E48,00000004,2D904F59), ref: 2D91592F
TlsGetValue.KERNEL32(00000016,?,?,?,2D910E48,00000004,2D904F59), ref: 2D915955
SetLastError.KERNEL32(00000000,?,?,?,2D910E48,00000004,2D904F59), ref: 2D915984

Part of subcall function 2D915E13: TlsAlloc.KERNEL32(00000000,?,2D915946,?,?,?,2D910E48,00000004,2D904F59), ref: 2D915E1B
Part of subcall function 2D915E13: GetVersion.KERNEL32(?,2D915946,?,?,?,2D910E48,00000004,2D904F59), ref: 2D915E1F
Part of subcall function 2D915E13: TlsAlloc.KERNEL32(?,2D915946,?,?,?,2D910E48,00000004,2D904F59), ref: 2D915E32

Memory Dump Source

Source File: 00000008.00000002.630919973.000000002D901000.00000020.00000001.01000000.00000007.sdmp, Offset: 2D900000, based on PE: true

Associated: 00000008.00000002.630913986.000000002D900000.00000002.00000001.01000000.00000007.sdmpDownload File
Associated: 00000008.00000002.630927583.000000002D91E000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000008.00000002.630932693.000000002D922000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000008.00000002.630937868.000000002D923000.00000002.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_2d900000_MSWordServices.jbxd

Similarity

API ID: AllocErrorLast$H_prolog3ValueVersion
String ID:
API String ID: 2925315393-0
Opcode ID: 66e8e6d658e13f31534e479bad1f924a698737b9499dfaf2db19df44a7c1cb04
Instruction ID: 483875cef858cf43397180bc92cc12ed245fe5da4001d6435c0023297c9e3577
Opcode Fuzzy Hash: 66e8e6d658e13f31534e479bad1f924a698737b9499dfaf2db19df44a7c1cb04
Instruction Fuzzy Hash: 03F0B471A1821E8FC7C697B8940476D26B4AF08B71B930755FA31F73C0DB38CA004A5A

Function 2D91416D Relevance: 6.0, APIs: 4, Instructions: 36COMMONLIBRARYCODE

Download Yara Rule

APIs

__EH_prolog3.LIBCMT ref: 2D914174
DeleteObject.GDI32(?), ref: 2D914197
DeleteObject.GDI32(?), ref: 2D9141A4
DeleteObject.GDI32(?), ref: 2D9141B1

Memory Dump Source

Source File: 00000008.00000002.630919973.000000002D901000.00000020.00000001.01000000.00000007.sdmp, Offset: 2D900000, based on PE: true

Associated: 00000008.00000002.630913986.000000002D900000.00000002.00000001.01000000.00000007.sdmpDownload File
Associated: 00000008.00000002.630927583.000000002D91E000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000008.00000002.630932693.000000002D922000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000008.00000002.630937868.000000002D923000.00000002.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_2d900000_MSWordServices.jbxd

Similarity

API ID: DeleteObject$H_prolog3
String ID:
API String ID: 2471701793-0
Opcode ID: 1f4de7d7d8c7414544a6f285e749abf87652850f3d5e3067ab21ac23b48c6097
Instruction ID: ac2ff6f8cd5e26289523ab2c2239d7aa1610c2baf7c8e08779668ebe9deba362
Opcode Fuzzy Hash: 1f4de7d7d8c7414544a6f285e749abf87652850f3d5e3067ab21ac23b48c6097
Instruction Fuzzy Hash: 6FF04F75A00719CBCB10EFA988C011EF7FABF6C610B610A6DF299F7650CB70E9408A45

Function 2D90845B Relevance: 6.0, APIs: 4, Instructions: 34windowCOMMON

Download Yara Rule

APIs

GetSysColor.USER32(0000000F), ref: 2D908462
SendMessageA.USER32(?,00000443,00000000,00000000), ref: 2D90847F
SendMessageA.USER32(?,0000043B,00000000,00000000), ref: 2D90848B
SendMessageA.USER32(?,00000445,00000000,00000000), ref: 2D9084A8

Memory Dump Source

Source File: 00000008.00000002.630919973.000000002D901000.00000020.00000001.01000000.00000007.sdmp, Offset: 2D900000, based on PE: true

Associated: 00000008.00000002.630913986.000000002D900000.00000002.00000001.01000000.00000007.sdmpDownload File
Associated: 00000008.00000002.630927583.000000002D91E000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000008.00000002.630932693.000000002D922000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000008.00000002.630937868.000000002D923000.00000002.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_2d900000_MSWordServices.jbxd

Similarity

API ID: MessageSend$Color
String ID:
API String ID: 3922397608-0
Opcode ID: 9b4e225869c85611c0400b8a98fd87437f454061ebb3ac1a74ae71067fa63ba8
Instruction ID: 8c9f1c85d2a42ab6ec9d223c481f333789731879ec8ce116e8d7e3c2ab31fb3f
Opcode Fuzzy Hash: 9b4e225869c85611c0400b8a98fd87437f454061ebb3ac1a74ae71067fa63ba8
Instruction Fuzzy Hash: 54F0A771600558B6DB115F13EC08F6B3E6CEBC5FA3F00803AB71865050C6714542CAA4

Function 2D9109DE Relevance: 6.0, APIs: 4, Instructions: 33COMMON

Download Yara Rule

APIs

IsWindowUnicode.USER32(?), ref: 2D9109F9
DefWindowProcW.USER32(?,?,?,?), ref: 2D910A0F
DefWindowProcA.USER32(?,?,?,?), ref: 2D910A17
CallWindowProcA.USER32(?,?,?,?,?), ref: 2D910A2C

Memory Dump Source

Source File: 00000008.00000002.630919973.000000002D901000.00000020.00000001.01000000.00000007.sdmp, Offset: 2D900000, based on PE: true

Associated: 00000008.00000002.630913986.000000002D900000.00000002.00000001.01000000.00000007.sdmpDownload File
Associated: 00000008.00000002.630927583.000000002D91E000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000008.00000002.630932693.000000002D922000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000008.00000002.630937868.000000002D923000.00000002.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_2d900000_MSWordServices.jbxd

Similarity

API ID: Window$Proc$CallUnicode
String ID:
API String ID: 3117573011-0
Opcode ID: 1e52d4245d125d9cb33daf9677ce63e8d39a43113ee0ddf8adf46cfff58780c6
Instruction ID: fff0e70afa0a5b716be6dd402994ef3397ef67d50685aa290aa74ab80a966d9c
Opcode Fuzzy Hash: 1e52d4245d125d9cb33daf9677ce63e8d39a43113ee0ddf8adf46cfff58780c6
Instruction Fuzzy Hash: 3BF0F936204209EFCF129FA4D808E9A7BB9FF087917108458FA5AF6521D732D824DF54

Function 2D9158AB Relevance: 6.0, APIs: 4, Instructions: 30COMMONLIBRARYCODE

Download Yara Rule

APIs

__EH_prolog3.LIBCMT ref: 2D9158B2
free.MSVCR90 ref: 2D9158CB
TlsGetValue.KERNEL32(00000004,2D912DCD,?,?,2D9159B3,00000001,2D91263C,?,?,?,?,?,?,?,?,?), ref: 2D9158DC
TlsSetValue.KERNEL32(00000000,?,?,2D9159B3,00000001,2D91263C,?,?,?,?,?,?,?,?,?,?), ref: 2D9158EE

Memory Dump Source

Source File: 00000008.00000002.630919973.000000002D901000.00000020.00000001.01000000.00000007.sdmp, Offset: 2D900000, based on PE: true

Associated: 00000008.00000002.630913986.000000002D900000.00000002.00000001.01000000.00000007.sdmpDownload File
Associated: 00000008.00000002.630927583.000000002D91E000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000008.00000002.630932693.000000002D922000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000008.00000002.630937868.000000002D923000.00000002.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_2d900000_MSWordServices.jbxd

Similarity

API ID: Value$H_prolog3free
String ID:
API String ID: 3023147540-0
Opcode ID: ff98934319097a55a104667ee5b36bf59932ea28c4652e42eadead6ee6551ef0
Instruction ID: 9c2edcbf3c3ef647b5a0ca480ff8bef92f0284ab0621fa8f9794b14a9f086963
Opcode Fuzzy Hash: ff98934319097a55a104667ee5b36bf59932ea28c4652e42eadead6ee6551ef0
Instruction Fuzzy Hash: 87F06D30908709DFDB25DBA0C8087997BB8FF10715F9185A9F566B62D0DBB4EA04CB18

Function 69081BDC Relevance: 6.0, APIs: 4, Instructions: 29COMMONLIBRARYCODE

Download Yara Rule

APIs

WriteConsoleW.KERNEL32 ref: 69081BF3
GetLastError.KERNEL32(?,6907E1F8,00000000,00000001,00000000,?,?,69073C9C,?,00000000,00000000,?,?,?,6907425A,?), ref: 69081BFF

Part of subcall function 69081BC5: CloseHandle.KERNEL32(FFFFFFFE), ref: 69081BD5

___initconout.LIBCMT ref: 69081C0F

Part of subcall function 69081B87: CreateFileW.KERNEL32(CONOUT$,40000000,00000003,00000000,00000003,00000000,00000000), ref: 69081B9A

WriteConsoleW.KERNEL32 ref: 69081C24

Memory Dump Source

Source File: 00000008.00000002.630949046.0000000069051000.00000020.00000001.01000000.00000008.sdmp, Offset: 69050000, based on PE: true

Associated: 00000008.00000002.630944757.0000000069050000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000008.00000002.630957701.0000000069084000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000008.00000002.630964126.0000000069094000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000008.00000002.630971010.00000000690A4000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000008.00000002.630975828.00000000690BC000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000008.00000002.630978860.00000000690BD000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_69050000_MSWordServices.jbxd

Similarity

API ID: ConsoleWrite$CloseCreateErrorFileHandleLast___initconout
String ID:
API String ID: 2744216297-0
Opcode ID: 5b576090506cb9c6c279751270c1a30080a96a80620bdf144267163143053011
Instruction ID: 50b0cc2e554946bd88bc67b9381e43491d74cc827089e4c0fcbe14b6a1f33f28
Opcode Fuzzy Hash: 5b576090506cb9c6c279751270c1a30080a96a80620bdf144267163143053011
Instruction Fuzzy Hash: 45F03736604155BBCF521F91DE08A9A3F6EFF067A4F014420FA2987110D73188209BD4

Function 2D916019 Relevance: 6.0, APIs: 4, Instructions: 24COMMON

Download Yara Rule

APIs

Part of subcall function 2D915FCC: KiUserCallbackDispatcher.NTDLL(00000002,?,2D916023,?,?,?,2D912209), ref: 2D915FDE
Part of subcall function 2D915FCC: GetSystemMetrics.USER32(00000003,?,2D916023,?,?,?,2D912209), ref: 2D915FE8

GetDC.USER32(00000000), ref: 2D916025
GetDeviceCaps.GDI32(00000000,00000058,?,?,?,2D912209), ref: 2D916036
GetDeviceCaps.GDI32(00000000,0000005A,?,?,?,2D912209), ref: 2D91603E
ReleaseDC.USER32(00000000,00000000), ref: 2D916046

Memory Dump Source

Source File: 00000008.00000002.630919973.000000002D901000.00000020.00000001.01000000.00000007.sdmp, Offset: 2D900000, based on PE: true

Associated: 00000008.00000002.630913986.000000002D900000.00000002.00000001.01000000.00000007.sdmpDownload File
Associated: 00000008.00000002.630927583.000000002D91E000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000008.00000002.630932693.000000002D922000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000008.00000002.630937868.000000002D923000.00000002.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_2d900000_MSWordServices.jbxd

Similarity

API ID: CapsDevice$CallbackDispatcherMetricsReleaseSystemUser
String ID:
API String ID: 1894321826-0
Opcode ID: 049b6a6070c98365043b1ea60942dca297bc5282477a8fca11a903662082954e
Instruction ID: 5d43c648738982464ad1a4cc755869e713bb2351d22f70d44767bccc16c9e39a
Opcode Fuzzy Hash: 049b6a6070c98365043b1ea60942dca297bc5282477a8fca11a903662082954e
Instruction Fuzzy Hash: 69E04F716447146AD31017729C48F4BBFACEF54A63F014422F608E72C1CA7888008EA0

Function 69058AA6 Relevance: 5.6, APIs: 2, Strings: 1, Instructions: 341COMMON

Download Yara Rule

APIs

_strcspn.LIBCMT ref: 69058B58
_strcspn.LIBCMT ref: 69058B9B

Strings

@, xrefs: 69058D25

Memory Dump Source

Source File: 00000008.00000002.630949046.0000000069051000.00000020.00000001.01000000.00000008.sdmp, Offset: 69050000, based on PE: true

Associated: 00000008.00000002.630944757.0000000069050000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000008.00000002.630957701.0000000069084000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000008.00000002.630964126.0000000069094000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000008.00000002.630971010.00000000690A4000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000008.00000002.630975828.00000000690BC000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000008.00000002.630978860.00000000690BD000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_69050000_MSWordServices.jbxd

Similarity

API ID: _strcspn
String ID: @
API String ID: 3709121408-2766056989
Opcode ID: 83e7c8863bdaf29565d6ccad28c55d3bca9863ac6468011ce02f888cbdbd0b44
Instruction ID: b2be53ce17ce22bad57706c313a706a3c4727041316dcf8e78138efbfb862951
Opcode Fuzzy Hash: 83e7c8863bdaf29565d6ccad28c55d3bca9863ac6468011ce02f888cbdbd0b44
Instruction Fuzzy Hash: D1E10875910249EFDF05DFA4CA91BEDBBB9FF09304F009869E916AB260DB309961CF50

Function 6907B14E Relevance: 5.5, APIs: 2, Strings: 1, Instructions: 224COMMON

Download Yara Rule

APIs

_wcschr.LIBVCRUNTIME ref: 6907B178

Part of subcall function 6906695C: IsProcessorFeaturePresent.KERNEL32(00000017), ref: 6906695E
Part of subcall function 6906695C: GetCurrentProcess.KERNEL32(C0000417,00000000,?,00000000,?,?,6906694E,00000000,00000000,00000000,00000000,00000000,?,690517D9,69051ED7), ref: 69066981
Part of subcall function 6906695C: TerminateProcess.KERNEL32(00000000,?,?,6906694E,00000000,00000000,00000000,00000000,00000000,?,690517D9,69051ED7), ref: 69066988

Strings

5:, xrefs: 6907B1B3, 6907B202, 6907B20F

Memory Dump Source

Source File: 00000008.00000002.630949046.0000000069051000.00000020.00000001.01000000.00000008.sdmp, Offset: 69050000, based on PE: true

Associated: 00000008.00000002.630944757.0000000069050000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000008.00000002.630957701.0000000069084000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000008.00000002.630964126.0000000069094000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000008.00000002.630971010.00000000690A4000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000008.00000002.630975828.00000000690BC000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000008.00000002.630978860.00000000690BD000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_69050000_MSWordServices.jbxd

Similarity

API ID: Process$CurrentFeaturePresentProcessorTerminate_wcschr
String ID: 5:
API String ID: 606420371-2148306840
Opcode ID: bc163108d742910712a74ace54d5aa76df08f82fad4d6b5f7ac4517a44ae512f
Instruction ID: 76c6bf58923e98cf4edc2a0a33d2ab3ad34b93b8b0b5c02dc621c494ecf11fd6
Opcode Fuzzy Hash: bc163108d742910712a74ace54d5aa76df08f82fad4d6b5f7ac4517a44ae512f
Instruction Fuzzy Hash: 2C610675B00314ABDF34DFBC8851B6E36E9AF05374F418D1EE911AF284EB31994187A9

Function 6906EC8D Relevance: 5.4, APIs: 2, Strings: 1, Instructions: 194COMMON

Download Yara Rule

APIs

__startOneArgErrorHandling.LIBCMT ref: 6906ED1D

Strings

pow, xrefs: 6906ECF5, 6906ED12

Memory Dump Source

Source File: 00000008.00000002.630949046.0000000069051000.00000020.00000001.01000000.00000008.sdmp, Offset: 69050000, based on PE: true

Associated: 00000008.00000002.630944757.0000000069050000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000008.00000002.630957701.0000000069084000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000008.00000002.630964126.0000000069094000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000008.00000002.630971010.00000000690A4000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000008.00000002.630975828.00000000690BC000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000008.00000002.630978860.00000000690BD000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_69050000_MSWordServices.jbxd

Similarity

API ID: ErrorHandling__start
String ID: pow
API String ID: 3213639722-2276729525
Opcode ID: b6c4cec34abcb23ef1227fa5e03cab40b8981149d7d6ee0e81cb218e8ac2edf0
Instruction ID: be898928cb7b22f0b77aea0b5e90061f1a923eaa02dcb85c81538c93351eee44
Opcode Fuzzy Hash: b6c4cec34abcb23ef1227fa5e03cab40b8981149d7d6ee0e81cb218e8ac2edf0
Instruction Fuzzy Hash: 8B513D71B0C301D6DB117B18CE5137E37E4AB42760F608D59E4F58B2F9EB3584A58B8A

Function 690659EB Relevance: 5.4, APIs: 1, Strings: 2, Instructions: 112COMMONLIBRARYCODE

Download Yara Rule

APIs

EncodePointer.KERNEL32(00000000,?,00000000,1FFFFFFF), ref: 69065A10

Strings

MOC, xrefs: 69065A22
RCC, xrefs: 69065A2A

Memory Dump Source

Source File: 00000008.00000002.630949046.0000000069051000.00000020.00000001.01000000.00000008.sdmp, Offset: 69050000, based on PE: true

Associated: 00000008.00000002.630944757.0000000069050000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000008.00000002.630957701.0000000069084000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000008.00000002.630964126.0000000069094000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000008.00000002.630971010.00000000690A4000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000008.00000002.630975828.00000000690BC000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000008.00000002.630978860.00000000690BD000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_69050000_MSWordServices.jbxd

Similarity

API ID: EncodePointer
String ID: MOC$RCC
API String ID: 2118026453-2084237596
Opcode ID: 8108d59168dc3bfde3489f6746d468b53c594c2fcf8c595186b91d351c011160
Instruction ID: ccd70cad2907e7201789f43bc522fdd5eeb030bc0bbcc8312e40261074fdafe9
Opcode Fuzzy Hash: 8108d59168dc3bfde3489f6746d468b53c594c2fcf8c595186b91d351c011160
Instruction Fuzzy Hash: 0A414779900209AFCF05CF94CD81BEE7BB6FF48304F149959F914A7262E3359950DB50

Function 2D906FBB Relevance: 5.3, APIs: 2, Strings: 1, Instructions: 86COMMON

Download Yara Rule

APIs

__EH_prolog3.LIBCMT ref: 2D906FC2
memset.MSVCR90 ref: 2D906FD5

Part of subcall function 2D9052D6: GetProcAddress.KERNEL32(00000000,00000142), ref: 2D9052F4

Strings

D, xrefs: 2D907047

Memory Dump Source

Source File: 00000008.00000002.630919973.000000002D901000.00000020.00000001.01000000.00000007.sdmp, Offset: 2D900000, based on PE: true

Associated: 00000008.00000002.630913986.000000002D900000.00000002.00000001.01000000.00000007.sdmpDownload File
Associated: 00000008.00000002.630927583.000000002D91E000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000008.00000002.630932693.000000002D922000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000008.00000002.630937868.000000002D923000.00000002.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_2d900000_MSWordServices.jbxd

Similarity

API ID: AddressH_prolog3Procmemset
String ID: D
API String ID: 2467443255-2746444292
Opcode ID: 117e021fff5590a732bb8b935fbb7edc062de3de9eae6d8993668aa5faf3d5fa
Instruction ID: 9ff2c32d820c6c72b97873b9a0018c80b89470db1880bf24caec9c61fc4d271f
Opcode Fuzzy Hash: 117e021fff5590a732bb8b935fbb7edc062de3de9eae6d8993668aa5faf3d5fa
Instruction Fuzzy Hash: 95315070A04205EBDB15DFA0D884EAD7BB9FF84351F204558F619FB290DB36E905CB50

Function 69068D88 Relevance: 5.3, APIs: 2, Strings: 1, Instructions: 73COMMONLIBRARYCODE

Download Yara Rule

APIs

Part of subcall function 69075AAD: MultiByteToWideChar.KERNEL32(6907AE39,00000100,E8458D00,00000000,00000000,00000020,?,69078002,00000000,00000000,00000100,00000020,00000000,00000000,E8458D00,00000100), ref: 69075B1D

GetLastError.KERNEL32(?,?,?,?,?,?,?,69068FCF,00000000,?,00000000,2463616368652E646174), ref: 69068DEC
__dosmaperr.LIBCMT ref: 69068DF3

Strings

2463616368652E646174, xrefs: 69068D8D

Memory Dump Source

Source File: 00000008.00000002.630949046.0000000069051000.00000020.00000001.01000000.00000008.sdmp, Offset: 69050000, based on PE: true

Associated: 00000008.00000002.630944757.0000000069050000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000008.00000002.630957701.0000000069084000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000008.00000002.630964126.0000000069094000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000008.00000002.630971010.00000000690A4000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000008.00000002.630975828.00000000690BC000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000008.00000002.630978860.00000000690BD000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_69050000_MSWordServices.jbxd

Similarity

API ID: ByteCharErrorLastMultiWide__dosmaperr
String ID: 2463616368652E646174
API String ID: 2434981716-3036274828
Opcode ID: d03fba51b03074a4d515f4210a74c47d87a38145ccda1aff91c6979ede16ba53
Instruction ID: 3f3db713dfbc2a55e8e39ffb47e7f2efd91343ace5537b755a36a6272ef85925
Opcode Fuzzy Hash: d03fba51b03074a4d515f4210a74c47d87a38145ccda1aff91c6979ede16ba53
Instruction Fuzzy Hash: A921A235644611FBDB218F29CD01B4BB7E9EF923B0B118919ED68A71B0E771E85187E0

Function 2D9117FB Relevance: 5.3, APIs: 1, Strings: 2, Instructions: 67COMMON

Download Yara Rule

APIs

Part of subcall function 2D915923: __EH_prolog3.LIBCMT ref: 2D91592A
Part of subcall function 2D915923: GetLastError.KERNEL32(00000004,2D910854,00000004,2D9109B6,00000000,?,?,?,2D910E48,00000004,2D904F59), ref: 2D91592F

GetClassInfoA.USER32(-00000068,?), ref: 2D91185A

Part of subcall function 2D904609: _vsnprintf.MSVCR90 ref: 2D90463A

Strings

Afx:%x, xrefs: 2D911825
Afx:%x:%x:%x:%x, xrefs: 2D91183F

Memory Dump Source

Source File: 00000008.00000002.630919973.000000002D901000.00000020.00000001.01000000.00000007.sdmp, Offset: 2D900000, based on PE: true

Associated: 00000008.00000002.630913986.000000002D900000.00000002.00000001.01000000.00000007.sdmpDownload File
Associated: 00000008.00000002.630927583.000000002D91E000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000008.00000002.630932693.000000002D922000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000008.00000002.630937868.000000002D923000.00000002.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_2d900000_MSWordServices.jbxd

Similarity

API ID: ClassErrorH_prolog3InfoLast_vsnprintf
String ID: Afx:%x$Afx:%x:%x:%x:%x
API String ID: 3801848739-1102061830
Opcode ID: c69841014955217e7e385bc9ec53b0498650c417242edd951a598dc0d0615a4c
Instruction ID: 107c67de3258487db6a2303d55d5b6354ff1e8bd694737d3a18b7e341cff1c74
Opcode Fuzzy Hash: c69841014955217e7e385bc9ec53b0498650c417242edd951a598dc0d0615a4c
Instruction Fuzzy Hash: 43210BB1D0420DABCB01DF99D840BEE7BB9EF59651F05806AFA04F2241E774DA50CBA5

Function 6905392D Relevance: 5.3, APIs: 2, Strings: 1, Instructions: 38COMMONLIBRARYCODE

Download Yara Rule

APIs

std::_Lockit::_Lockit.LIBCPMT ref: 69053939
std::_Locinfo::_Locinfo_ctor.LIBCPMT ref: 6905398C

Part of subcall function 69060EDD: _Yarn.LIBCPMT ref: 69060EFC
Part of subcall function 69060EDD: _Yarn.LIBCPMT ref: 69060F20

Strings

bad locale name, xrefs: 69053995

Memory Dump Source

Source File: 00000008.00000002.630949046.0000000069051000.00000020.00000001.01000000.00000008.sdmp, Offset: 69050000, based on PE: true

Associated: 00000008.00000002.630944757.0000000069050000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000008.00000002.630957701.0000000069084000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000008.00000002.630964126.0000000069094000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000008.00000002.630971010.00000000690A4000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000008.00000002.630975828.00000000690BC000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000008.00000002.630978860.00000000690BD000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_69050000_MSWordServices.jbxd

Similarity

API ID: Yarnstd::_$Locinfo::_Locinfo_ctorLockitLockit::_
String ID: bad locale name
API String ID: 1908188788-1405518554
Opcode ID: 215eb80642424f05ccdf342c97be511eef18ca04b32126efc71788b3ef21b9dd
Instruction ID: d4b257d44c46ae8ff30a3cbb706b41faa5ecbeab20a4b751394df07b5b9a84c9
Opcode Fuzzy Hash: 215eb80642424f05ccdf342c97be511eef18ca04b32126efc71788b3ef21b9dd
Instruction Fuzzy Hash: C7F01934904148EBCF08EB98CA60BACB371AF5130CF60985CD1032B291CB306F61EB65

Function 2D90F61C Relevance: 5.3, APIs: 2, Strings: 1, Instructions: 37windowCOMMON

Download Yara Rule

APIs

GetModuleHandleW.KERNEL32(mso.dll,?,2D90FBDC,?,00000201,?,?,80000000), ref: 2D90F624
MessageBoxW.USER32 ref: 2D90F681

Strings

mso.dll, xrefs: 2D90F61F

Memory Dump Source

Source File: 00000008.00000002.630919973.000000002D901000.00000020.00000001.01000000.00000007.sdmp, Offset: 2D900000, based on PE: true

Associated: 00000008.00000002.630913986.000000002D900000.00000002.00000001.01000000.00000007.sdmpDownload File
Associated: 00000008.00000002.630927583.000000002D91E000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000008.00000002.630932693.000000002D922000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000008.00000002.630937868.000000002D923000.00000002.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_2d900000_MSWordServices.jbxd

Similarity

API ID: HandleMessageModule
String ID: mso.dll
API String ID: 2216695990-1671880577
Opcode ID: 797a1109c104390c87ba88ad7f48cea3152b35379eca3dfdfbe1541da8377aab
Instruction ID: ac4b5729e991a3ca97b0f82888eebf9c3b318a16b572cebeafba52447e5c4e01
Opcode Fuzzy Hash: 797a1109c104390c87ba88ad7f48cea3152b35379eca3dfdfbe1541da8377aab
Instruction Fuzzy Hash: 83F0E93219840DBFE344DFB4DC06FA5379CEB14B86F048110F145E62D0DA6CD6848B35

Function 690612E8 Relevance: 5.3, APIs: 2, Strings: 1, Instructions: 33COMMONLIBRARYCODE

Download Yara Rule

APIs

std::_Lockit::_Lockit.LIBCPMT ref: 690612F3
std::_Lockit::~_Lockit.LIBCPMT ref: 69061331

Strings

outlook-web.ddns.net, xrefs: 690612EC

Memory Dump Source

Source File: 00000008.00000002.630949046.0000000069051000.00000020.00000001.01000000.00000008.sdmp, Offset: 69050000, based on PE: true

Associated: 00000008.00000002.630944757.0000000069050000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000008.00000002.630957701.0000000069084000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000008.00000002.630964126.0000000069094000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000008.00000002.630971010.00000000690A4000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000008.00000002.630975828.00000000690BC000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000008.00000002.630978860.00000000690BD000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_69050000_MSWordServices.jbxd

Similarity

API ID: Lockitstd::_$Lockit::_Lockit::~_
String ID: outlook-web.ddns.net
API String ID: 593203224-2894021055
Opcode ID: 7c957eabdacd62f3848e4df16011048d2f8c1ecc3b66531b45b15f55bc994c6f
Instruction ID: e76ab1f66dc5f9a2aefe810dea3cb9552d5d564b7bf39e55b03cea88b97dd25a
Opcode Fuzzy Hash: 7c957eabdacd62f3848e4df16011048d2f8c1ecc3b66531b45b15f55bc994c6f
Instruction Fuzzy Hash: EAF0E275600164AECB44DB5DC840B9DBBF5EBCB254725867CC41BD7220E7329E42C7D1

Analysis Process: MSWordServices.exePID: 3980, Parent PID: 3944COMMON

Execution Graph

Execution Coverage:	5.4%
Dynamic/Decrypted Code Coverage:	0%
Signature Coverage:	0%
Total number of Nodes:	1755
Total number of Limit Nodes:	28

Executed Functions

Function 69054F22 Relevance: 169.2, APIs: 48, Strings: 47, Instructions: 2972
filesleepCOMMONLIBRARYCODE

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

Sleep.KERNELBASE(000003E8,58160781928836700431202065781531683322301950835055,358B5801,?,?,?,?,?,?,69064DE0,690918B0,000000FE,?,69057E9A), ref: 69054F76
GetModuleFileNameA.KERNEL32(00000000,?,?,?), ref: 69054FD2
CreateFileA.KERNELBASE(00000000,00000080,00000000,?,6908438C,000000FF,?), ref: 6905508E
CloseHandle.KERNEL32(?), ref: 690550B4
Sleep.KERNEL32(0000EA60), ref: 690550BF

Part of subcall function 6905CB90: CoInitializeEx.OLE32(00000000,00000000), ref: 6905CBA9

CreateFileA.KERNEL32(00000000,?,?,?,80000000,00000000,00000000), ref: 69055101
CloseHandle.KERNEL32(?), ref: 6905511E
CloseHandle.KERNELBASE(?), ref: 6905512C
GetUserNameA.ADVAPI32(?,?), ref: 6905515C
Sleep.KERNEL32(00000BB8,?), ref: 690551BB
CreateFileA.KERNELBASE(00000000,00000080,00000000,?,?,?,00000000), ref: 69055328
ReadFile.KERNEL32(?,?,0000000F,?,00000000), ref: 6905535D
CloseHandle.KERNELBASE(?), ref: 690553B9
Sleep.KERNELBASE(?,?,?,?), ref: 69055467
CreateFileA.KERNELBASE(00000000,00000080,00000000,?,?,?,?), ref: 6905589E
RpcStringBindingComposeA.RPCRT4(00000000,?,?,?,00000000,?), ref: 69055BBF
RpcBindingFromStringBindingA.RPCRT4(?,?), ref: 69055BD8
_strcat.LIBCMT ref: 69055C8F

Strings

494E46, xrefs: 6905551C
d, xrefs: 69057A6C
t, xrefs: 69055AAA
p, xrefs: 69055A9C
5645524946494544, xrefs: 6905564D
n, xrefs: 69055A87
_, xrefs: 69055AA3
633A5C55736572735C5075626C69635C63722E646174, xrefs: 690557E4
24746D702E747874, xrefs: 690552B7
p, xrefs: 69055AB8
4E4554455252, xrefs: 690555E6
53495A45, xrefs: 69055582
74732E646174, xrefs: 6905501E
_, xrefs: 69055A8E
444C59, xrefs: 69055732
<, xrefs: 690575C2
5C6E5C6E205B50524F43455353204C4953545D205C6E, xrefs: 69055234
52554E, xrefs: 690556F9
---------, xrefs: 6905527E
d, xrefs: 69056221
636D642E657865202F6320, xrefs: 690557A7
i, xrefs: 69055A95
4944, xrefs: 690554E5
48415348, xrefs: 690555B4
4552524F525245504C414345, xrefs: 690556C1
4552524F52, xrefs: 69055619
4F4B, xrefs: 69055687
53595354454D20494E464F524D4154494F4E205C6E, xrefs: 690551D3
c, xrefs: 69055AB1
c, xrefs: 69055A80
a, xrefs: 69055A79
58160781928836700431202065781531683322301950835055, xrefs: 69054F61
d, xrefs: 69055CA2
|, xrefs: 69055D31
633A5C5C50726F6772616D446174615C5C24746D702E747874, xrefs: 690554AB
44574E, xrefs: 6905554F
outlook-web.ddns.net, xrefs: 69055B8A
434D44, xrefs: 6905576B
----, xrefs: 69057915
c, xrefs: 69055A72
443, xrefs: 69055A4B
n, xrefs: 69055A6B
|-|, xrefs: 69056872
>> , xrefs: 690577B5
2463616368652E646174, xrefs: 690553E2
7C2A3F2928257D5E267B, xrefs: 69055470
433A5C5C50726F6772616D446174615C5C, xrefs: 69054F7F

Memory Dump Source

Source File: 0000000A.00000002.520354624.0000000069051000.00000020.00000001.01000000.00000008.sdmp, Offset: 69050000, based on PE: true

Associated: 0000000A.00000002.520346406.0000000069050000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000A.00000002.520370595.0000000069084000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000A.00000002.520384600.0000000069094000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000A.00000002.520394111.00000000690BC000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000A.00000002.520406416.00000000690BD000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_69050000_MSWordServices.jbxd

Similarity

API ID: File$CloseCreateHandleSleep$Binding$NameString$ComposeFromInitializeModuleReadUser_strcat
String ID: ----$---------$2463616368652E646174$24746D702E747874$433A5C5C50726F6772616D446174615C5C$434D44$443$444C59$44574E$4552524F52$4552524F525245504C414345$48415348$4944$494E46$4E4554455252$4F4B$52554E$53495A45$53595354454D20494E464F524D4154494F4E205C6E$5645524946494544$58160781928836700431202065781531683322301950835055$5C6E5C6E205B50524F43455353204C4953545D205C6E$633A5C55736572735C5075626C69635C63722E646174$633A5C5C50726F6772616D446174615C5C24746D702E747874$636D642E657865202F6320$74732E646174$7C2A3F2928257D5E267B$<$>> $_$_$a$c$c$c$d$d$d$i$n$n$outlook-web.ddns.net$p$p$t$|$|-|
API String ID: 163969156-3700135009
Opcode ID: 95ae3f0dd6fe060a66645fb57228074d07579f9fb3bed799e39106052457bbb8
Instruction ID: 638852a4ba5440c6266bd395974db43488f4e5666c17bae964bfc9c96f7b4890
Opcode Fuzzy Hash: 95ae3f0dd6fe060a66645fb57228074d07579f9fb3bed799e39106052457bbb8
Instruction Fuzzy Hash: 5B430B76814129AADF65DB60CD91FDEB3BCAF14308F4059E6A58AE3050EBB057E8CF50

Function 6905EA93 Relevance: 155.5, APIs: 25, Strings: 63, Instructions: 1459
registryCOMMONLIBRARYCODE

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

GetSystemDirectoryW.KERNEL32(?,00000104,69084B0A), ref: 6905EAD0
GetSystemInfo.KERNELBASE(?), ref: 6905EB13
GetComputerNameW.KERNEL32(?,00000400), ref: 6905EB31
RegOpenKeyExW.KERNEL32 ref: 6905EC11

Strings

To Be Filled By O.E.M., xrefs: 6905F235
Error! GetComputerName failed., xrefs: 6905EB3B
BIOSVENDOR, xrefs: 6905F6D8
Display, xrefs: 6905FC2C
Registered Owner:, xrefs: 6905EF1E
Error! RegOpenKeyEx failed., xrefs: 6905EC1B
HARDWARE\DESCRIPTION\System\BIOS, xrefs: 6905F6DD
Available Physical Memory:, xrefs: 6905FE11
MIME\Database\Rfc1766, xrefs: 6905F8F2
SystemBiosVersion, xrefs: 6905F632
ProductId, xrefs: 6905F000
Input Locale:, xrefs: 6905FB08
Error! GetSystemDirectory failed., xrefs: 6905EADA
CurrentType, xrefs: 6905EE14
System type:, xrefs: 6905F375
Total Physical Memory:, xrefs: 6905FD7A
BiosVersion:, xrefs: 6905F69A
BIOSVENDOR:, xrefs: 6905F740
ProductName, xrefs: 6905EC59
General, xrefs: 6905F23F
RegisteredOrganization:, xrefs: 6905EFC2
Std, xrefs: 6905FBE9
HARDWARE\DESCRIPTION\System\CentralProcessor\%u, xrefs: 6905F4C4
SOFTWARE\Microsoft\Windows NT\CurrentVersion\Time Zones, xrefs: 6905FB6B
To Be Filled By O.E.M., xrefs: 6905F18A
RegisteredOrganization, xrefs: 6905EF5C
Boot Device:, xrefs: 6905F88C
HARDWARE\DESCRIPTION\System, xrefs: 6905F637
%s\oeminfo.ini, xrefs: 6905F163
SYSTEM\Setup, xrefs: 6905F829
OS Name:, xrefs: 6905ECC6
System Model:, xrefs: 6905F29B
InstallDate, xrefs: 6905F09F
Keyboard Layout\Preload, xrefs: 6905FA08
OS Build Type :, xrefs: 6905EE7A
VendorIdentifier, xrefs: 6905F57F
Processor(s):, xrefs: 6905F464
BIOS Date:, xrefs: 6905F7E6
Product ID:, xrefs: 6905F066
Identifier, xrefs: 6905F514
Install Date:, xrefs: 6905F11E
System Locale:, xrefs: 6905F9AF
System Manufacturer:, xrefs: 6905F1F0
Domain:, xrefs: 690601C6
SystemPartition, xrefs: 6905F824
OS Version :, xrefs: 6905ED6B
Model, xrefs: 6905F23A
SYSTEM\CurrentControlSet\Control\Session Manager\Memory Management, xrefs: 69060020
RegisteredOwner, xrefs: 6905EEB8
General, xrefs: 6905F194
SystemBiosDate, xrefs: 6905F77E
Page File Location(s):, xrefs: 690600FB
[%02u]: , xrefs: 6905F4E0
Virtual Memory: Available:, xrefs: 6905FF3F
Host Name:, xrefs: 6905EBA8
Time zone:, xrefs: 6905FC97
HARDWARE\DESCRIPTION\System, xrefs: 6905F783
Manufacturer, xrefs: 6905F18F
PagingFiles, xrefs: 6906001B
SOFTWARE\Microsoft\Windows NT\CurrentVersion, xrefs: 6905EC07
Virtual Memory: In Use:, xrefs: 6905FFDD
MIME\Database\Rfc1766, xrefs: 6905FA4B
Virtual Memory: Max Size:, xrefs: 6905FEA8

Memory Dump Source

Source File: 0000000A.00000002.520354624.0000000069051000.00000020.00000001.01000000.00000008.sdmp, Offset: 69050000, based on PE: true

Associated: 0000000A.00000002.520346406.0000000069050000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000A.00000002.520370595.0000000069084000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000A.00000002.520384600.0000000069094000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000A.00000002.520394111.00000000690BC000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000A.00000002.520406416.00000000690BD000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_69050000_MSWordServices.jbxd

Similarity

API ID: System$ComputerDirectoryInfoNameOpen
String ID: %s\oeminfo.ini$Available Physical Memory:$BIOS Date:$BIOSVENDOR$BIOSVENDOR:$BiosVersion:$Boot Device:$CurrentType$Display$Domain:$Error! GetComputerName failed.$Error! GetSystemDirectory failed.$Error! RegOpenKeyEx failed.$General$General$HARDWARE\DESCRIPTION\System$HARDWARE\DESCRIPTION\System$HARDWARE\DESCRIPTION\System\BIOS$HARDWARE\DESCRIPTION\System\CentralProcessor\%u$Host Name:$Identifier$Input Locale:$Install Date:$InstallDate$Keyboard Layout\Preload$MIME\Database\Rfc1766$MIME\Database\Rfc1766$Manufacturer$Model$OS Build Type :$OS Name:$OS Version :$Page File Location(s):$PagingFiles$Processor(s):$Product ID:$ProductId$ProductName$Registered Owner:$RegisteredOrganization$RegisteredOrganization:$RegisteredOwner$SOFTWARE\Microsoft\Windows NT\CurrentVersion$SOFTWARE\Microsoft\Windows NT\CurrentVersion\Time Zones$SYSTEM\CurrentControlSet\Control\Session Manager\Memory Management$SYSTEM\Setup$Std$System Locale:$System Manufacturer:$System Model:$System type:$SystemBiosDate$SystemBiosVersion$SystemPartition$Time zone:$To Be Filled By O.E.M.$To Be Filled By O.E.M.$Total Physical Memory:$VendorIdentifier$Virtual Memory: Available:$Virtual Memory: In Use:$Virtual Memory: Max Size:$[%02u]:
API String ID: 1805411109-2676738833
Opcode ID: 88a6ce8237dc09f2ee2be184f160e140c6aaf74117bf3a3fa7d875af25bf3632
Instruction ID: f7e7621aea4d1a92d5b27666ce7b8ebe62a4661a28a79840493bb11a726db112
Opcode Fuzzy Hash: 88a6ce8237dc09f2ee2be184f160e140c6aaf74117bf3a3fa7d875af25bf3632
Instruction Fuzzy Hash: DED2DB75915169AACF25EB50CE91FEDB37CAF14308F4099E5A11AA3060EF306FA9CF50

Function 6905E49B Relevance: 54.3, APIs: 16, Strings: 15, Instructions: 73
libraryloaderCOMMONLIBRARYCODE

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

?GetFileVersionInfoByHandleEx@@YGHXZ.OLMAPI32(?,?,69062118,?,00000001,00000000,?,00000001,00000000,?,00000001,00000000,69091EC0,0000000C,00000007,69091E98), ref: 6905E4B0
GetProcAddress.KERNEL32(GetFileVersionInfoA,?,?,69062118,?,00000001,00000000,?,00000001,00000000,?,00000001,00000000,69091EC0,0000000C,00000007), ref: 6905E4C0
GetProcAddress.KERNEL32(GetFileVersionInfoByHandle,?,?,69062118,?,00000001,00000000,?,00000001,00000000,?,00000001,00000000,69091EC0,0000000C,00000007), ref: 6905E4D6
GetProcAddress.KERNEL32(GetFileVersionInfoExW,?,?,69062118,?,00000001,00000000,?,00000001,00000000,?,00000001,00000000,69091EC0,0000000C,00000007), ref: 6905E4EC
GetProcAddress.KERNEL32(GetFileVersionInfoSizeA,?,?,69062118,?,00000001,00000000,?,00000001,00000000,?,00000001,00000000,69091EC0,0000000C,00000007), ref: 6905E502
GetProcAddress.KERNEL32(GetFileVersionInfoSizeExW,?,?,69062118,?,00000001,00000000,?,00000001,00000000,?,00000001,00000000,69091EC0,0000000C,00000007), ref: 6905E518
GetProcAddress.KERNEL32(GetFileVersionInfoSizeW,?,?,69062118,?,00000001,00000000,?,00000001,00000000,?,00000001,00000000,69091EC0,0000000C,00000007), ref: 6905E52E
GetProcAddress.KERNEL32(GetFileVersionInfoW,?,?,69062118,?,00000001,00000000,?,00000001,00000000,?,00000001,00000000,69091EC0,0000000C,00000007), ref: 6905E544
GetProcAddress.KERNEL32(VerFindFileA,?,?,69062118,?,00000001,00000000,?,00000001,00000000,?,00000001,00000000,69091EC0,0000000C,00000007), ref: 6905E55A
GetProcAddress.KERNEL32(VerFindFileW,?,?,69062118,?,00000001,00000000,?,00000001,00000000,?,00000001,00000000,69091EC0,0000000C,00000007), ref: 6905E570
GetProcAddress.KERNEL32(VerInstallFileA,?,?,69062118,?,00000001,00000000,?,00000001,00000000,?,00000001,00000000,69091EC0,0000000C,00000007), ref: 6905E586
GetProcAddress.KERNEL32(VerInstallFileW,?,?,69062118,?,00000001,00000000,?,00000001,00000000,?,00000001,00000000,69091EC0,0000000C,00000007), ref: 6905E59C
GetProcAddress.KERNEL32(VerLanguageNameA,?,?,69062118,?,00000001,00000000,?,00000001,00000000,?,00000001,00000000,69091EC0,0000000C,00000007), ref: 6905E5B2
GetProcAddress.KERNEL32(VerLanguageNameW,?,?,69062118,?,00000001,00000000,?,00000001,00000000,?,00000001,00000000,69091EC0,0000000C,00000007), ref: 6905E5C8
GetProcAddress.KERNEL32(VerQueryValueA,?,?,69062118,?,00000001,00000000,?,00000001,00000000,?,00000001,00000000,69091EC0,0000000C,00000007), ref: 6905E5DE
GetProcAddress.KERNEL32(VerQueryValueW,?,?,69062118,?,00000001,00000000,?,00000001,00000000,?,00000001,00000000,69091EC0,0000000C,00000007), ref: 6905E5F4

Strings

GetFileVersionInfoSizeA, xrefs: 6905E4F7
VerInstallFileW, xrefs: 6905E591
VerFindFileA, xrefs: 6905E54F
VerQueryValueA, xrefs: 6905E5D3
GetFileVersionInfoSizeExW, xrefs: 6905E50D
VerQueryValueW, xrefs: 6905E5E9
GetFileVersionInfoExW, xrefs: 6905E4E1
VerLanguageNameA, xrefs: 6905E5A7
GetFileVersionInfoA, xrefs: 6905E4B5
GetFileVersionInfoSizeW, xrefs: 6905E523
GetFileVersionInfoByHandle, xrefs: 6905E4CB
VerLanguageNameW, xrefs: 6905E5BD
VerInstallFileA, xrefs: 6905E57B
VerFindFileW, xrefs: 6905E565
GetFileVersionInfoW, xrefs: 6905E539

Memory Dump Source

Source File: 0000000A.00000002.520354624.0000000069051000.00000020.00000001.01000000.00000008.sdmp, Offset: 69050000, based on PE: true

Associated: 0000000A.00000002.520346406.0000000069050000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000A.00000002.520370595.0000000069084000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000A.00000002.520384600.0000000069094000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000A.00000002.520394111.00000000690BC000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000A.00000002.520406416.00000000690BD000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_69050000_MSWordServices.jbxd

Similarity

API ID: AddressProc$Ex@@FileHandleInfoVersion
String ID: GetFileVersionInfoA$GetFileVersionInfoByHandle$GetFileVersionInfoExW$GetFileVersionInfoSizeA$GetFileVersionInfoSizeExW$GetFileVersionInfoSizeW$GetFileVersionInfoW$VerFindFileA$VerFindFileW$VerInstallFileA$VerInstallFileW$VerLanguageNameA$VerLanguageNameW$VerQueryValueA$VerQueryValueW
API String ID: 3596192317-236624654
Opcode ID: d9c943c515ad8b213085080cb0f986470902aa6390c97c621d1747f6f13b6a8d
Instruction ID: cfd47817a9d2c6b81be705485bd80975a238c52fa389dabfba764f081f4452ce
Opcode Fuzzy Hash: d9c943c515ad8b213085080cb0f986470902aa6390c97c621d1747f6f13b6a8d
Instruction Fuzzy Hash: 803102B46221A4FFDF019F28CB189AA3FBDF717B413404925E955BB228D7320860DF99

Function 6905FB96 Relevance: 30.2, APIs: 5, Strings: 12, Instructions: 457
registryCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

RegEnumKeyExW.KERNEL32(?,00000000,?,00000400,00000000,00000000,00000000,00000000), ref: 6905FBCF
RegCloseKey.ADVAPI32(?), ref: 6905FD02
GlobalMemoryStatus.KERNEL32(?), ref: 6905FD0F

Part of subcall function 690605F9: RegOpenKeyExW.KERNEL32 ref: 6906062C

Part of subcall function 690605F9: RegQueryValueExW.KERNEL32(?,00000000,00000000,00000000,?,?), ref: 69060650
Part of subcall function 690605F9: RegCloseKey.KERNEL32(00000006), ref: 69060689

Part of subcall function 690603E4: GetNumberFormatW.KERNEL32 ref: 69060441

NetGetJoinInformation.NETAPI32(00000000,?,?,?,00000000,?,00000000,?), ref: 69060153
NetApiBufferFree.NETAPI32(?,69085408,?,Domain:,00000000,?,00000000,?,00000000,?), ref: 69060214

Strings

SYSTEM\CurrentControlSet\Control\Session Manager\Memory Management, xrefs: 69060020
Time zone:, xrefs: 6905FC97
PagingFiles, xrefs: 6906001B
Display, xrefs: 6905FC2C
Total Physical Memory:, xrefs: 6905FD7A
Virtual Memory: In Use:, xrefs: 6905FFDD
Domain:, xrefs: 690601C6
Page File Location(s):, xrefs: 690600FB
Virtual Memory: Available:, xrefs: 6905FF3F
Virtual Memory: Max Size:, xrefs: 6905FEA8
Available Physical Memory:, xrefs: 6905FE11
Std, xrefs: 6905FBE9

Memory Dump Source

Source File: 0000000A.00000002.520354624.0000000069051000.00000020.00000001.01000000.00000008.sdmp, Offset: 69050000, based on PE: true

Associated: 0000000A.00000002.520346406.0000000069050000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000A.00000002.520370595.0000000069084000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000A.00000002.520384600.0000000069094000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000A.00000002.520394111.00000000690BC000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000A.00000002.520406416.00000000690BD000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_69050000_MSWordServices.jbxd

Similarity

API ID: Close$BufferEnumFormatFreeGlobalInformationJoinMemoryNumberOpenQueryStatusValue
String ID: Available Physical Memory:$Display$Domain:$Page File Location(s):$PagingFiles$SYSTEM\CurrentControlSet\Control\Session Manager\Memory Management$Std$Time zone:$Total Physical Memory:$Virtual Memory: Available:$Virtual Memory: In Use:$Virtual Memory: Max Size:
API String ID: 369352865-1736252339
Opcode ID: 690be7dad0346f90594cca602dc690f2ace1887333f6039479dabb205c6aec2f
Instruction ID: 30b14e2e26dc03c3a970dec15dad27122154ade6f07481a4d32ebb6e758f22ce
Opcode Fuzzy Hash: 690be7dad0346f90594cca602dc690f2ace1887333f6039479dabb205c6aec2f
Instruction Fuzzy Hash: 1112CE39915069AACF25EB50CE90EDDB379AF15348F4099E5A10BA3060EF306FA9CF54

Function 2D9174DE Relevance: 21.1, APIs: 10, Strings: 2, Instructions: 61
memorylibraryloaderCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

GetModuleHandleW.KERNEL32(kernel32.dll,HeapSetInformation), ref: 2D9174F1
GetProcAddress.KERNEL32(00000000), ref: 2D9174F8
GetProcessHeap.KERNEL32(00000001,00000000,00000000), ref: 2D91750A
GetSystemTimeAsFileTime.KERNEL32(?), ref: 2D917517
GetCurrentProcessId.KERNEL32 ref: 2D917523
GetCurrentThreadId.KERNEL32 ref: 2D91752B
GetTickCount.KERNEL32 ref: 2D917533
QueryPerformanceCounter.KERNEL32(?), ref: 2D91753F
VirtualProtect.KERNELBASE(2D9032CC,00000004,00000040,?), ref: 2D917561
VirtualProtect.KERNELBASE(2D9032CC,00000004,?,?), ref: 2D917581

Strings

kernel32.dll, xrefs: 2D9174EC
HeapSetInformation, xrefs: 2D9174E7

Memory Dump Source

Source File: 0000000A.00000002.520302411.000000002D901000.00000020.00000001.01000000.00000007.sdmp, Offset: 2D900000, based on PE: true

Associated: 0000000A.00000002.520292586.000000002D900000.00000002.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000A.00000002.520318069.000000002D91E000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000A.00000002.520324941.000000002D922000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000A.00000002.520340216.000000002D923000.00000002.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_2d900000_MSWordServices.jbxd

Similarity

API ID: CurrentProcessProtectTimeVirtual$AddressCountCounterFileHandleHeapModulePerformanceProcQuerySystemThreadTick
String ID: HeapSetInformation$kernel32.dll
API String ID: 2966426798-3597996958
Opcode ID: b874de96afea06442478bd9fbe3b87120fdc6e396c925a3bdb3b9b64a62ac1c9
Instruction ID: d5b8d0c97598e81ed9d62f1f1f35c188eb7b2bcb512c5e1a85e0fdb934f3561c
Opcode Fuzzy Hash: b874de96afea06442478bd9fbe3b87120fdc6e396c925a3bdb3b9b64a62ac1c9
Instruction Fuzzy Hash: D51133B6D04219ABCB10ABF4EC48B9E77BCEF48B56F420551FA01F7241D674DA018FA4

Function 2D903C77 Relevance: 15.9, APIs: 4, Strings: 5, Instructions: 111
libraryCOMMONLIBRARYCODE

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

GetModuleFileNameW.KERNEL32(?,?,00000105), ref: 2D903D39
SetLastError.KERNEL32(0000006F), ref: 2D903D4F
GetLastError.KERNEL32 ref: 2D903DA7
LoadLibraryW.KERNEL32(Comctl32.dll), ref: 2D903E19

Strings

QueryActCtxW, xrefs: 2D903CB0
GetModuleHandleExW, xrefs: 2D903CF7
@, xrefs: 2D903DF4
, xrefs: 2D903D5A
Comctl32.dll, xrefs: 2D903E05, 2D903E0A, 2D903E18

Memory Dump Source

Source File: 0000000A.00000002.520302411.000000002D901000.00000020.00000001.01000000.00000007.sdmp, Offset: 2D900000, based on PE: true

Associated: 0000000A.00000002.520292586.000000002D900000.00000002.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000A.00000002.520318069.000000002D91E000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000A.00000002.520324941.000000002D922000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000A.00000002.520340216.000000002D923000.00000002.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_2d900000_MSWordServices.jbxd

Similarity

API ID: ErrorLast$FileLibraryLoadModuleName
String ID: $@$Comctl32.dll$GetModuleHandleExW$QueryActCtxW
API String ID: 2178654626-2626125606
Opcode ID: 5806db20f260c3915e418fb42e6e4dd8c1d278bd376aeb4103e69e078dc47694
Instruction ID: bc1689fa7b91e102a15d367830359a0262062ae513d56dfffa4fa3ca7d14c84f
Opcode Fuzzy Hash: 5806db20f260c3915e418fb42e6e4dd8c1d278bd376aeb4103e69e078dc47694
Instruction Fuzzy Hash: 8241B43090D6299BDB619B65EC88BAD77BCEF84712F1003D9F258F6190DB788A80CF55

Function 69057E9F Relevance: 14.1, APIs: 6, Strings: 2, Instructions: 67
processCOMMONLIBRARYCODE

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

CreateToolhelp32Snapshot.KERNEL32(00000002,00000000), ref: 69057EB6
Process32First.KERNEL32(000000FF,00000128), ref: 69057EF6
CloseHandle.KERNEL32(000000FF), ref: 69057F05

Strings

ERROR, xrefs: 69057ECA
ERROR, xrefs: 69057F0B

Memory Dump Source

Source File: 0000000A.00000002.520354624.0000000069051000.00000020.00000001.01000000.00000008.sdmp, Offset: 69050000, based on PE: true

Associated: 0000000A.00000002.520346406.0000000069050000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000A.00000002.520370595.0000000069084000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000A.00000002.520384600.0000000069094000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000A.00000002.520394111.00000000690BC000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000A.00000002.520406416.00000000690BD000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_69050000_MSWordServices.jbxd

Similarity

API ID: CloseCreateFirstHandleProcess32SnapshotToolhelp32
String ID: ERROR$ERROR
API String ID: 1083639309-2579291623
Opcode ID: 071c2eb4b6f11a8f67b07291bb39b9115df2cdb76054b3844feaf4a278860891
Instruction ID: 12b2d3fbb7ab46e1b258703492e674c207e7d8065cc421bd1879bdc66199d0c9
Opcode Fuzzy Hash: 071c2eb4b6f11a8f67b07291bb39b9115df2cdb76054b3844feaf4a278860891
Instruction Fuzzy Hash: 39216034A00218EBCF54DF60DE44FEE77B8AF09345F4098A4A51EAB1A0DB30AE95DF40

Function 6906DA0B Relevance: 12.5, APIs: 6, Strings: 1, Instructions: 284
COMMONLIBRARYCODE

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

__allrem.LIBCMT ref: 6906DB93
__ehfuncinfo$??2@YAPAXIABUnothrow_t@std@@@Z.LIBCMT ref: 6906DBAF
__allrem.LIBCMT ref: 6906DBC6
__ehfuncinfo$??2@YAPAXIABUnothrow_t@std@@@Z.LIBCMT ref: 6906DBE4
__allrem.LIBCMT ref: 6906DBFB
__ehfuncinfo$??2@YAPAXIABUnothrow_t@std@@@Z.LIBCMT ref: 6906DC19

Strings

74732E646174, xrefs: 6906DC9F

Memory Dump Source

Source File: 0000000A.00000002.520354624.0000000069051000.00000020.00000001.01000000.00000008.sdmp, Offset: 69050000, based on PE: true

Associated: 0000000A.00000002.520346406.0000000069050000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000A.00000002.520370595.0000000069084000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000A.00000002.520384600.0000000069094000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000A.00000002.520394111.00000000690BC000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000A.00000002.520406416.00000000690BD000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_69050000_MSWordServices.jbxd

Similarity

API ID: Unothrow_t@std@@@__allrem__ehfuncinfo$??2@
String ID: 74732E646174
API String ID: 1992179935-138923103
Opcode ID: 94d0e94a8f46061bbfe044791ce4e181156ba776a5c7f4a890ea9cae3aa4525e
Instruction ID: cf2951a91aa37061e9263c4c5948d3daa0cfe654b92a1bddd5e6cb30e0510154
Opcode Fuzzy Hash: 94d0e94a8f46061bbfe044791ce4e181156ba776a5c7f4a890ea9cae3aa4525e
Instruction Fuzzy Hash: 9B81F7766047069BE710DF68CC41B5AB7F9EF85778F209E2BE411DB2A0EB70D9018794

Function 2D9050C9 Relevance: 12.3, APIs: 4, Strings: 3, Instructions: 29
libraryloaderCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

GetModuleHandleW.KERNEL32(KERNEL32), ref: 2D9050CF
GetProcAddress.KERNEL32(00000000,SetProcessDEPPolicy), ref: 2D9050E9
GetProcAddress.KERNEL32(00000000,GetSystemDEPPolicy), ref: 2D9050F3
SetProcessDEPPolicy.KERNEL32(00000001), ref: 2D905106

Strings

GetSystemDEPPolicy, xrefs: 2D9050EB
SetProcessDEPPolicy, xrefs: 2D9050E3
KERNEL32, xrefs: 2D9050CA

Memory Dump Source

Source File: 0000000A.00000002.520302411.000000002D901000.00000020.00000001.01000000.00000007.sdmp, Offset: 2D900000, based on PE: true

Associated: 0000000A.00000002.520292586.000000002D900000.00000002.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000A.00000002.520318069.000000002D91E000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000A.00000002.520324941.000000002D922000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000A.00000002.520340216.000000002D923000.00000002.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_2d900000_MSWordServices.jbxd

Similarity

API ID: AddressProc$HandleModulePolicyProcess
String ID: GetSystemDEPPolicy$KERNEL32$SetProcessDEPPolicy
API String ID: 3256987805-2000083379
Opcode ID: a692533f08d0a5db5d3b5c696fe08c8b5feacefea6d0fef8e3fdf49f55356c83
Instruction ID: 3f620baaf3a721a5da0247c18f15a486c634fe8f0f1333359c2b502a7d374f45
Opcode Fuzzy Hash: a692533f08d0a5db5d3b5c696fe08c8b5feacefea6d0fef8e3fdf49f55356c83
Instruction Fuzzy Hash: F4E0863250D21137D7C151B9BDC4F7B56AC9EC9AA7B100156FA00F2105C994D4018960

Function 69061FF8 Relevance: 10.6, APIs: 7, Instructions: 136
COMMONLIBRARYCODE

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

__RTC_Initialize.LIBCMT ref: 6906203F
___scrt_uninitialize_crt.LIBCMT ref: 69062059

Memory Dump Source

Source File: 0000000A.00000002.520354624.0000000069051000.00000020.00000001.01000000.00000008.sdmp, Offset: 69050000, based on PE: true

Associated: 0000000A.00000002.520346406.0000000069050000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000A.00000002.520370595.0000000069084000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000A.00000002.520384600.0000000069094000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000A.00000002.520394111.00000000690BC000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000A.00000002.520406416.00000000690BD000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_69050000_MSWordServices.jbxd

Similarity

API ID: Initialize___scrt_uninitialize_crt
String ID:
API String ID: 2442719207-0
Opcode ID: 1bbf831c3a6a22b862f02e57c0fe64194572c24ce9e669849024f66e393b38a0
Instruction ID: 1bf945f574d0ca97d7e76707aa5671256c914e2a8eaa1e993e8c16db4d11be1d
Opcode Fuzzy Hash: 1bbf831c3a6a22b862f02e57c0fe64194572c24ce9e669849024f66e393b38a0
Instruction Fuzzy Hash: E941A376E04614AFDF10CF6DCD40BAE7AB9EF507A5F008D15E815EB260C73089438B90

Function 2D916528 Relevance: 10.6, APIs: 7, Instructions: 92
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

?_set_new_handler@@YAP6AHI@ZP6AHI@Z@Z.MSVCR90 ref: 2D91653D

Part of subcall function 2D9171BB: _setmbcp.MSVCR90 ref: 2D9171C3

free.MSVCR90 ref: 2D9165A5
Mailbox.LIBCMT ref: 2D9165B8
Mailbox.LIBCMT ref: 2D9165C9
Mailbox.LIBCMT ref: 2D9165DA
Mailbox.LIBCMT ref: 2D9165EB
Mailbox.LIBCMT ref: 2D9165FC

Memory Dump Source

Source File: 0000000A.00000002.520302411.000000002D901000.00000020.00000001.01000000.00000007.sdmp, Offset: 2D900000, based on PE: true

Associated: 0000000A.00000002.520292586.000000002D900000.00000002.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000A.00000002.520318069.000000002D91E000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000A.00000002.520324941.000000002D922000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000A.00000002.520340216.000000002D923000.00000002.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_2d900000_MSWordServices.jbxd

Similarity

API ID: Mailbox$?_set_new_handler@@_setmbcpfree
String ID:
API String ID: 2556944153-0
Opcode ID: 4fe1910a5a10ae10a5a1c59ce11025aba5e3af6a45feea4b5402a2d2f4df1405
Instruction ID: 92d4599cc12e9464c91e62f7485f9e53a4ac760c12321bb8c26c474965da3c7e
Opcode Fuzzy Hash: 4fe1910a5a10ae10a5a1c59ce11025aba5e3af6a45feea4b5402a2d2f4df1405
Instruction Fuzzy Hash: 0C318E30A04A089FCB26DFA8C450A6E7BF5FF98750F11465CF686A7694DB31E941CB50

Function 69072B5E Relevance: 10.6, APIs: 4, Strings: 2, Instructions: 74
COMMONLIBRARYCODE

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

FreeLibrary.KERNEL32(00000000,?,00000000,00000800,00000000,00000000,?,358B5801,?,69072C6B,?,?,00000000,00000000), ref: 69072C1F

Strings

api-ms-, xrefs: 69072BB5
ext-ms-, xrefs: 69072BC9

Memory Dump Source

Source File: 0000000A.00000002.520354624.0000000069051000.00000020.00000001.01000000.00000008.sdmp, Offset: 69050000, based on PE: true

Associated: 0000000A.00000002.520346406.0000000069050000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000A.00000002.520370595.0000000069084000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000A.00000002.520384600.0000000069094000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000A.00000002.520394111.00000000690BC000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000A.00000002.520406416.00000000690BD000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_69050000_MSWordServices.jbxd

Similarity

API ID: FreeLibrary
String ID: api-ms-$ext-ms-
API String ID: 3664257935-537541572
Opcode ID: ad0fc2958f7d6c230d244d077f2debc598d5b73d76610782d931f0bff53749b8
Instruction ID: 9e844c5cf1db276dde34f974117f6197298c87de8cb5783bc4ab2b1db4984747
Opcode Fuzzy Hash: ad0fc2958f7d6c230d244d077f2debc598d5b73d76610782d931f0bff53749b8
Instruction Fuzzy Hash: A321D572A09351A7DF319B2CDD55F8E37ADAB537B0F120910E915AB280D730E902C6D4

Function 69057AE4 Relevance: 8.9, APIs: 4, Strings: 1, Instructions: 195
sleepfileCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

CreateFileA.KERNELBASE(00000000,00000080,00000000,?,?,?,?), ref: 6905589E
_strcat.LIBCMT ref: 69057ABD
_strcat.LIBCMT ref: 69057B2D
_strncpy.LIBCMT ref: 69057B5F
Sleep.KERNEL32(00003A98,?,?,?,?,?,?,690842B6,690842A7,0000000C,0000000C,?,?,690B4458), ref: 69057C23
Sleep.KERNEL32(?,690842B6,690842A7,0000000C,0000000C,?,?,690B4458), ref: 69057C31
RpcStringFreeA.RPCRT4(?), ref: 69057CDA

Strings

d, xrefs: 69057A6C

Memory Dump Source

Source File: 0000000A.00000002.520354624.0000000069051000.00000020.00000001.01000000.00000008.sdmp, Offset: 69050000, based on PE: true

Associated: 0000000A.00000002.520346406.0000000069050000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000A.00000002.520370595.0000000069084000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000A.00000002.520384600.0000000069094000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000A.00000002.520394111.00000000690BC000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000A.00000002.520406416.00000000690BD000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_69050000_MSWordServices.jbxd

Similarity

API ID: Sleep_strcat$CreateFileFreeString_strncpy
String ID: d
API String ID: 2099396881-2564639436
Opcode ID: 4a1c0cdc1e1f235312aeb41217d85186dd5634bb76f007dda5fd7709a750f1dd
Instruction ID: fad30902e2be12d7a62f76e654b134223a54145da3aad9cef662857404464e62
Opcode Fuzzy Hash: 4a1c0cdc1e1f235312aeb41217d85186dd5634bb76f007dda5fd7709a750f1dd
Instruction Fuzzy Hash: 018192758281599ADF64DB20CD91FEDB379AF20308F4099E9918BA3090DFB017F9CE45

Function 690562A0 Relevance: 8.9, APIs: 4, Strings: 1, Instructions: 176
sleepfileCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

CreateFileA.KERNELBASE(00000000,00000080,00000000,?,?,?,?), ref: 6905589E
_strcat.LIBCMT ref: 69056279
_strcat.LIBCMT ref: 690562E9
_strncpy.LIBCMT ref: 6905631B
Sleep.KERNEL32(00003A98,?,?,?,?,?,?,690842B6,690842A7,0000000C,0000000C,?,?,690B4458), ref: 69057C23
RpcStringFreeA.RPCRT4(?), ref: 69057CDA

Strings

d, xrefs: 69056221

Memory Dump Source

Source File: 0000000A.00000002.520354624.0000000069051000.00000020.00000001.01000000.00000008.sdmp, Offset: 69050000, based on PE: true

Associated: 0000000A.00000002.520346406.0000000069050000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000A.00000002.520370595.0000000069084000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000A.00000002.520384600.0000000069094000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000A.00000002.520394111.00000000690BC000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000A.00000002.520406416.00000000690BD000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_69050000_MSWordServices.jbxd

Similarity

API ID: _strcat$CreateFileFreeSleepString_strncpy
String ID: d
API String ID: 437704486-2564639436
Opcode ID: be89176aa31f1ce2c26c634af2cf67ef9636b9334856379b2fd5a8689eed2d74
Instruction ID: f6a001ef402d1a50cbbe0eb442764c27bda3a99724b39e288d1cb8baf2ad7217
Opcode Fuzzy Hash: be89176aa31f1ce2c26c634af2cf67ef9636b9334856379b2fd5a8689eed2d74
Instruction Fuzzy Hash: E071C075868159DADF64DB60CE91FEDB379AF20308F4098E9918BA3090DFB017E9CE45

Function 69066382 Relevance: 8.8, APIs: 4, Strings: 1, Instructions: 63
COMMONLIBRARYCODE

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

FreeLibrary.KERNEL32(00000000,?,00000000,?,?,?,69066445,6906500A,?,?,00000000,?,690664F7,00000002,FlsGetValue,69086D98), ref: 69066413

Strings

api-ms-, xrefs: 690663D3

Memory Dump Source

Source File: 0000000A.00000002.520354624.0000000069051000.00000020.00000001.01000000.00000008.sdmp, Offset: 69050000, based on PE: true

Associated: 0000000A.00000002.520346406.0000000069050000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000A.00000002.520370595.0000000069084000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000A.00000002.520384600.0000000069094000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000A.00000002.520394111.00000000690BC000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000A.00000002.520406416.00000000690BD000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_69050000_MSWordServices.jbxd

Similarity

API ID: FreeLibrary
String ID: api-ms-
API String ID: 3664257935-2084034818
Opcode ID: 13a2ed3754735ca49eb2dc93f25a97d9b0f2a0160ee5b9935ea1d09a6955efa3
Instruction ID: 6a2e9c8d756ca7d05962fd89ee1449b29d70d110d97273f880a269d3f19f9791
Opcode Fuzzy Hash: 13a2ed3754735ca49eb2dc93f25a97d9b0f2a0160ee5b9935ea1d09a6955efa3
Instruction Fuzzy Hash: 69117032F49775ABDF228B6CCA45B4E33E8AF03774F120924E914EB290D771E94096D1

Function 690620A8 Relevance: 7.6, APIs: 5, Instructions: 87COMMONLIBRARYCODE

Download Yara Rule

APIs

dllmain_raw.LIBCMT ref: 690620E5
dllmain_crt_dispatch.LIBCMT ref: 690620FC
dllmain_raw.LIBCMT ref: 69062144
dllmain_crt_dispatch.LIBCMT ref: 69062157
dllmain_raw.LIBCMT ref: 6906216A

Memory Dump Source

Source File: 0000000A.00000002.520354624.0000000069051000.00000020.00000001.01000000.00000008.sdmp, Offset: 69050000, based on PE: true

Associated: 0000000A.00000002.520346406.0000000069050000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000A.00000002.520370595.0000000069084000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000A.00000002.520384600.0000000069094000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000A.00000002.520394111.00000000690BC000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000A.00000002.520406416.00000000690BD000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_69050000_MSWordServices.jbxd

Similarity

API ID: dllmain_raw$dllmain_crt_dispatch
String ID:
API String ID: 3136044242-0
Opcode ID: 7cca1675f5e4644229480765d5e738c8a122493f9ce1d1849ac291d80fa800f6
Instruction ID: 8080ea5a5c169dbdae6004bb6ca47dfef21b43f1e3a214988c05a95cbe2acb1c
Opcode Fuzzy Hash: 7cca1675f5e4644229480765d5e738c8a122493f9ce1d1849ac291d80fa800f6
Instruction Fuzzy Hash: 6F216076D09615ABDF218E5DCD40BAE3ABDEB90B94B018915F918AB220C7308D538BA0

Function 690605F9 Relevance: 7.1, APIs: 3, Strings: 1, Instructions: 83registryCOMMONLIBRARYCODE

Download Yara Rule

APIs

RegOpenKeyExW.KERNEL32 ref: 6906062C
RegQueryValueExW.KERNEL32(?,00000000,00000000,00000000,?,?), ref: 69060650
RegCloseKey.KERNEL32(00000006), ref: 69060689

Strings

N/A, xrefs: 6906066A

Memory Dump Source

Source File: 0000000A.00000002.520354624.0000000069051000.00000020.00000001.01000000.00000008.sdmp, Offset: 69050000, based on PE: true

Associated: 0000000A.00000002.520346406.0000000069050000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000A.00000002.520370595.0000000069084000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000A.00000002.520384600.0000000069094000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000A.00000002.520394111.00000000690BC000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000A.00000002.520406416.00000000690BD000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_69050000_MSWordServices.jbxd

Similarity

API ID: CloseOpenQueryValue
String ID: N/A
API String ID: 3677997916-2525114547
Opcode ID: 7ce519dfe5edf43ed287b5faba5a0e35e79282a551afe49ca4abe3ea71b96194
Instruction ID: 060f929c5b84f3d4c00e17e8e542f607879017f9146f2b3201524a7a92ff47c4
Opcode Fuzzy Hash: 7ce519dfe5edf43ed287b5faba5a0e35e79282a551afe49ca4abe3ea71b96194
Instruction Fuzzy Hash: 2E31D270A4420AEFDF40DFA9D945BAE7BF4BF44744F108829F815A72A0D7709A50CFA1

Function 6907711E Relevance: 5.7, APIs: 1, Strings: 2, Instructions: 408timeCOMMONLIBRARYCODE

Download Yara Rule

APIs

GetTimeZoneInformation.KERNELBASE(00000000,00000000,00000000,00000000,00000000,00000000,?,?,?,69077563,00000000,00000000,00000000), ref: 69077422

Strings

Eastern Daylight Time, xrefs: 690774CF
Eastern Standard Time, xrefs: 690774BB

Memory Dump Source

Source File: 0000000A.00000002.520354624.0000000069051000.00000020.00000001.01000000.00000008.sdmp, Offset: 69050000, based on PE: true

Associated: 0000000A.00000002.520346406.0000000069050000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000A.00000002.520370595.0000000069084000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000A.00000002.520384600.0000000069094000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000A.00000002.520394111.00000000690BC000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000A.00000002.520406416.00000000690BD000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_69050000_MSWordServices.jbxd

Similarity

API ID: InformationTimeZone
String ID: Eastern Daylight Time$Eastern Standard Time
API String ID: 565725191-1879052519
Opcode ID: b91a8953465dda76db262b6cc75a6898936713601e45692e1349b22df1428ddf
Instruction ID: 2374f7e33e27f16e352b40b524eea17900bcc652ea42b94bc24d48d2a4fbf92f
Opcode Fuzzy Hash: b91a8953465dda76db262b6cc75a6898936713601e45692e1349b22df1428ddf
Instruction Fuzzy Hash: 11C14C76A00325EBDB20DF68CC01BAE77F9EF057A4F508826E911EF250E7719A41C798

Function 690773B0 Relevance: 5.4, APIs: 1, Strings: 2, Instructions: 156timeCOMMONLIBRARYCODE

Download Yara Rule

APIs

Part of subcall function 690726DF: HeapFree.KERNEL32(00000000,00000000), ref: 690726F5
Part of subcall function 690726DF: GetLastError.KERNEL32(?,?,6907C163,?,00000000,?,?,6907C404,?,00000007,?,?,6907B896,?,?), ref: 69072700

GetTimeZoneInformation.KERNELBASE(00000000,00000000,00000000,00000000,00000000,00000000,?,?,?,69077563,00000000,00000000,00000000), ref: 69077422

Strings

Eastern Daylight Time, xrefs: 690774CF
Eastern Standard Time, xrefs: 690774BB

Memory Dump Source

Source File: 0000000A.00000002.520354624.0000000069051000.00000020.00000001.01000000.00000008.sdmp, Offset: 69050000, based on PE: true

Associated: 0000000A.00000002.520346406.0000000069050000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000A.00000002.520370595.0000000069084000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000A.00000002.520384600.0000000069094000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000A.00000002.520394111.00000000690BC000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000A.00000002.520406416.00000000690BD000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_69050000_MSWordServices.jbxd

Similarity

API ID: ErrorFreeHeapInformationLastTimeZone
String ID: Eastern Daylight Time$Eastern Standard Time
API String ID: 3335090040-1879052519
Opcode ID: 33c0858f6b6212564bdae20dfdf49cbe85164ac8d34c35c947594d1303abfb9a
Instruction ID: c856a6dab069cf94a8058ac1bbc7e0162df2d37e6655e520c439b445d8b40cf8
Opcode Fuzzy Hash: 33c0858f6b6212564bdae20dfdf49cbe85164ac8d34c35c947594d1303abfb9a
Instruction Fuzzy Hash: FF41B575900365EBCF20DF69C801B9E7BB8EF026B8B109966E424EF194DB719940CBD9

Function 69057C93 Relevance: 5.4, APIs: 2, Strings: 1, Instructions: 134fileCOMMON

Download Yara Rule

APIs

CreateFileA.KERNELBASE(00000000,00000080,00000000,?,?,?,?), ref: 6905589E
RpcStringFreeA.RPCRT4(?), ref: 69057CDA

Strings

Runtime reported exception , xrefs: 69057CAD

Memory Dump Source

Source File: 0000000A.00000002.520354624.0000000069051000.00000020.00000001.01000000.00000008.sdmp, Offset: 69050000, based on PE: true

Associated: 0000000A.00000002.520346406.0000000069050000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000A.00000002.520370595.0000000069084000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000A.00000002.520384600.0000000069094000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000A.00000002.520394111.00000000690BC000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000A.00000002.520406416.00000000690BD000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_69050000_MSWordServices.jbxd

Similarity

API ID: CreateFileFreeString
String ID: Runtime reported exception
API String ID: 201379981-1260309434
Opcode ID: 85a7ff57dff246ca63ae02f53e0ac0220da117b71538a0136b118784e051029e
Instruction ID: a22266931b89656f06efa3b212167d363476fb537e39c729fd3c8fc84b2c20a3
Opcode Fuzzy Hash: 85a7ff57dff246ca63ae02f53e0ac0220da117b71538a0136b118784e051029e
Instruction Fuzzy Hash: 75518F389281599ADF64DB30CD91FEDB375AF60308F4099E9919BA3090DFB057E9CE44

Function 2D9171BB Relevance: 5.3, APIs: 1, Strings: 2, Instructions: 65COMMON

Download Yara Rule

APIs

_setmbcp.MSVCR90 ref: 2D9171C3

Part of subcall function 2D915E3D: GetVersionExA.KERNEL32(?), ref: 2D915E6A

Part of subcall function 2D911766: __EH_prolog3.LIBCMT ref: 2D91176D
Part of subcall function 2D911766: GetClassInfoW.USER32(?,?,?), ref: 2D91177F

Strings

AfxWndA, xrefs: 2D91723E
AfxWndW, xrefs: 2D917245

Memory Dump Source

Source File: 0000000A.00000002.520302411.000000002D901000.00000020.00000001.01000000.00000007.sdmp, Offset: 2D900000, based on PE: true

Associated: 0000000A.00000002.520292586.000000002D900000.00000002.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000A.00000002.520318069.000000002D91E000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000A.00000002.520324941.000000002D922000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000A.00000002.520340216.000000002D923000.00000002.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_2d900000_MSWordServices.jbxd

Similarity

API ID: ClassH_prolog3InfoVersion_setmbcp
String ID: AfxWndA$AfxWndW
API String ID: 329514372-64854810
Opcode ID: a432b84cfa0094700b5dfa70153b41741d1679f83b1bbd4325d8b15d77992e72
Instruction ID: 75b4776bd660af4bf2325f54ca0f8079d5d9d7d2635f15e8a8302c8b825345c1
Opcode Fuzzy Hash: a432b84cfa0094700b5dfa70153b41741d1679f83b1bbd4325d8b15d77992e72
Instruction Fuzzy Hash: 29211471A04209AFDB04CFA9D840A9EBBF8FF48750F10852AF904F7380E735E5428B55

Function 2D903E45 Relevance: 5.3, APIs: 2, Strings: 1, Instructions: 38COMMONLIBRARYCODE

Download Yara Rule

APIs

OutputDebugStringA.KERNEL32(IsolationAware function called after IsolationAwareCleanup), ref: 2D903E58
GetLastError.KERNEL32 ref: 2D903E8E

Strings

IsolationAware function called after IsolationAwareCleanup, xrefs: 2D903E53

Memory Dump Source

Source File: 0000000A.00000002.520302411.000000002D901000.00000020.00000001.01000000.00000007.sdmp, Offset: 2D900000, based on PE: true

Associated: 0000000A.00000002.520292586.000000002D900000.00000002.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000A.00000002.520318069.000000002D91E000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000A.00000002.520324941.000000002D922000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000A.00000002.520340216.000000002D923000.00000002.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_2d900000_MSWordServices.jbxd

Similarity

API ID: DebugErrorLastOutputString
String ID: IsolationAware function called after IsolationAwareCleanup
API String ID: 4132100945-2690750368
Opcode ID: c9dbb1942da9a0ee2a771de0c7770b1407204ce53e36780f1235ca9fffc7a9bd
Instruction ID: 8fe7cabd272f9c170479654a25e3d4e0038b2ff711672a74414518e08fc11c6d
Opcode Fuzzy Hash: c9dbb1942da9a0ee2a771de0c7770b1407204ce53e36780f1235ca9fffc7a9bd
Instruction Fuzzy Hash: F0F0903280C1248B87179BA5BA0077A76AD9F45F9371002A6FBA6F0200C334C450DBD9

Function 690780BE Relevance: 4.7, APIs: 3, Instructions: 202COMMON

Download Yara Rule

APIs

__freea.LIBCMT ref: 6907826D

Part of subcall function 69072719: RtlAllocateHeap.NTDLL(00000000,00000000,?,?,69061C0F,00000000,?,6905447E,00000000,?,6905179D,00000000,?,6905A4C6,00000000,?), ref: 6907274B

__freea.LIBCMT ref: 69078282
__freea.LIBCMT ref: 69078292

Memory Dump Source

Source File: 0000000A.00000002.520354624.0000000069051000.00000020.00000001.01000000.00000008.sdmp, Offset: 69050000, based on PE: true

Associated: 0000000A.00000002.520346406.0000000069050000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000A.00000002.520370595.0000000069084000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000A.00000002.520384600.0000000069094000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000A.00000002.520394111.00000000690BC000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000A.00000002.520406416.00000000690BD000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_69050000_MSWordServices.jbxd

Similarity

API ID: __freea$AllocateHeap
String ID:
API String ID: 2243444508-0
Opcode ID: 48df3c20e8b5c516ee70854c9add0428efc9294a9d940779b7ef6911d4743d7f
Instruction ID: 20142a5be61431d102be1eb075f8cc2cab0a76b41ffe5cba3ca0f80fb96e0aa3
Opcode Fuzzy Hash: 48df3c20e8b5c516ee70854c9add0428efc9294a9d940779b7ef6911d4743d7f
Instruction Fuzzy Hash: 11519F76A00716AFEF208EA58CC0FAB36EDEF45364B154929FD14EB150EB31DC528768

Function 6906056B Relevance: 4.5, APIs: 3, Instructions: 47registryCOMMONLIBRARYCODE

Download Yara Rule

APIs

RegOpenKeyExW.ADVAPI32 ref: 690605A0
RegQueryValueExW.KERNEL32(00000004,00000001,00000000,00000000,00000004,00000004), ref: 690605C1
RegCloseKey.ADVAPI32(00000004), ref: 690605E4

Memory Dump Source

Source File: 0000000A.00000002.520354624.0000000069051000.00000020.00000001.01000000.00000008.sdmp, Offset: 69050000, based on PE: true

Associated: 0000000A.00000002.520346406.0000000069050000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000A.00000002.520370595.0000000069084000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000A.00000002.520384600.0000000069094000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000A.00000002.520394111.00000000690BC000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000A.00000002.520406416.00000000690BD000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_69050000_MSWordServices.jbxd

Similarity

API ID: CloseOpenQueryValue
String ID:
API String ID: 3677997916-0
Opcode ID: b0866bb2ae83057ac61639497f054078995c923ec8ec01c7569b21f6c76cdbaa
Instruction ID: 8afb86906b896a377893ce8c016cb4bf92b5f43893c4d11f2db1e42dd1ce6e28
Opcode Fuzzy Hash: b0866bb2ae83057ac61639497f054078995c923ec8ec01c7569b21f6c76cdbaa
Instruction Fuzzy Hash: F8112070604209FFEF01CFA1C804BAE7BB8BF04305F008829E925AB1A0E7B4DA94CF50

Function 69075B29 Relevance: 4.5, APIs: 3, Instructions: 17fileCOMMONLIBRARYCODE

Download Yara Rule

APIs

DeleteFileW.KERNELBASE(69068FE3,?,69068FE3,?,?,?,2463616368652E646174), ref: 69075B31
GetLastError.KERNEL32(?,69068FE3,?,?,?,2463616368652E646174), ref: 69075B3B
__dosmaperr.LIBCMT ref: 69075B42

Memory Dump Source

Source File: 0000000A.00000002.520354624.0000000069051000.00000020.00000001.01000000.00000008.sdmp, Offset: 69050000, based on PE: true

Associated: 0000000A.00000002.520346406.0000000069050000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000A.00000002.520370595.0000000069084000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000A.00000002.520384600.0000000069094000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000A.00000002.520394111.00000000690BC000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000A.00000002.520406416.00000000690BD000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_69050000_MSWordServices.jbxd

Similarity

API ID: DeleteErrorFileLast__dosmaperr
String ID:
API String ID: 1545401867-0
Opcode ID: 52991456f2058d6bc4f970e49ff1261fb2a7bcd8e8e7b6293d8148c6273d5c0b
Instruction ID: 76aa8184693e0f7cf883949f48bb06c700c30a4cb720e81ed0e67f20ae1ed4cc
Opcode Fuzzy Hash: 52991456f2058d6bc4f970e49ff1261fb2a7bcd8e8e7b6293d8148c6273d5c0b
Instruction Fuzzy Hash: 4FD01236218648BBDF501FF5AD099577B9EDA823743151A11F42DC70A0EF31C4D09695

Function 69072F36 Relevance: 3.5, APIs: 1, Strings: 1, Instructions: 26COMMONLIBRARYCODE

Download Yara Rule

APIs

InitializeCriticalSectionAndSpinCount.KERNELBASE(00000FA0,-00000020,6907376A,-00000020,00000FA0,00000000,00000000,00000000,00000000,?), ref: 69072F76

Strings

InitializeCriticalSectionEx, xrefs: 69072F46

Memory Dump Source

Source File: 0000000A.00000002.520354624.0000000069051000.00000020.00000001.01000000.00000008.sdmp, Offset: 69050000, based on PE: true

Associated: 0000000A.00000002.520346406.0000000069050000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000A.00000002.520370595.0000000069084000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000A.00000002.520384600.0000000069094000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000A.00000002.520394111.00000000690BC000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000A.00000002.520406416.00000000690BD000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_69050000_MSWordServices.jbxd

Similarity

API ID: CountCriticalInitializeSectionSpin
String ID: InitializeCriticalSectionEx
API String ID: 2593887523-3084827643
Opcode ID: 3a3bccf7dde34b341f8a720351c194c0144fcf658a4b51f1a75d18f943a35d05
Instruction ID: cadd2140c49d82233bfabe23bade1293c16506cb91efa83a13e9715e74fb8113
Opcode Fuzzy Hash: 3a3bccf7dde34b341f8a720351c194c0144fcf658a4b51f1a75d18f943a35d05
Instruction Fuzzy Hash: C2E09232684218F7CF112F95DD04F8E3F55EF55770B808821F92C1A210C7329921D6D4

Function 2D919C6E Relevance: 3.5, APIs: 1, Strings: 1, Instructions: 4COMMON

Download Yara Rule

APIs

GlobalAddAtomA.KERNEL32(AfxOldWndProc), ref: 2D919C73

Strings

AfxOldWndProc, xrefs: 2D919C6E

Memory Dump Source

Source File: 0000000A.00000002.520302411.000000002D901000.00000020.00000001.01000000.00000007.sdmp, Offset: 2D900000, based on PE: true

Associated: 0000000A.00000002.520292586.000000002D900000.00000002.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000A.00000002.520318069.000000002D91E000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000A.00000002.520324941.000000002D922000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000A.00000002.520340216.000000002D923000.00000002.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_2d900000_MSWordServices.jbxd

Similarity

API ID: AtomGlobal
String ID: AfxOldWndProc
API String ID: 2189174293-2134796454
Opcode ID: 857c8a7839a1442c3de43a6b6d76c7d692911da0b0b5365662fbefcef452c939
Instruction ID: 2b4c37f4146aa7a5b3897d0d5af1ac4f42b237ee01e8b7dd856d47e9280d59f4
Opcode Fuzzy Hash: 857c8a7839a1442c3de43a6b6d76c7d692911da0b0b5365662fbefcef452c939
Instruction Fuzzy Hash: 70A002B901A269C69744AFF4E598BA436B0AEC4A43B2251C7B531F17759A284181CB1E

Function 6907ADA0 Relevance: 3.2, APIs: 2, Instructions: 177COMMON

Download Yara Rule

APIs

Part of subcall function 6907A8D0: GetOEMCP.KERNEL32(00000000,?,?,6907281E,4D88C033), ref: 6907A8FB

IsValidCodePage.KERNEL32(-00000030,00000000,?,?,?,?,?,?,?,?,6907ABE7,?,00000000,?,6907281E,4D88C033), ref: 6907AE01
GetCPInfo.KERNEL32(00000000,?,?,?,?,?,?,?,?,6907ABE7,?,00000000,?,6907281E,4D88C033), ref: 6907AE43

Memory Dump Source

Source File: 0000000A.00000002.520354624.0000000069051000.00000020.00000001.01000000.00000008.sdmp, Offset: 69050000, based on PE: true

Associated: 0000000A.00000002.520346406.0000000069050000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000A.00000002.520370595.0000000069084000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000A.00000002.520384600.0000000069094000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000A.00000002.520394111.00000000690BC000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000A.00000002.520406416.00000000690BD000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_69050000_MSWordServices.jbxd

Similarity

API ID: CodeInfoPageValid
String ID:
API String ID: 546120528-0
Opcode ID: 2e20294113042830144dd75d3ae278122a57b3d58e704cd397e08ef859bee6c3
Instruction ID: 98a2b9948203437b997948dcbcf3c3a45fcd382f2e412963575a45ba812fe030
Opcode Fuzzy Hash: 2e20294113042830144dd75d3ae278122a57b3d58e704cd397e08ef859bee6c3
Instruction Fuzzy Hash: 975121B0A043459EDB21CFB5C8807ABBBF5BF46334F208D6AD0928F651E774D5468B94

Function 69060479 Relevance: 3.1, APIs: 2, Instructions: 78timeCOMMONLIBRARYCODE

Download Yara Rule

APIs

GetDateFormatW.KERNEL32 ref: 69060501
GetTimeFormatW.KERNEL32(00000800,00000000,?,00000000,00000000,00000000), ref: 69060559

Memory Dump Source

Source File: 0000000A.00000002.520354624.0000000069051000.00000020.00000001.01000000.00000008.sdmp, Offset: 69050000, based on PE: true

Associated: 0000000A.00000002.520346406.0000000069050000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000A.00000002.520370595.0000000069084000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000A.00000002.520384600.0000000069094000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000A.00000002.520394111.00000000690BC000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000A.00000002.520406416.00000000690BD000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_69050000_MSWordServices.jbxd

Similarity

API ID: Format$DateTime
String ID:
API String ID: 2545834208-0
Opcode ID: f69ac2d6f44c8d83ab125ed74b1590bdf143e19c133c97803fd5f0b93cf5a135
Instruction ID: bccb97dfc022bd0924e61d1cad899d2e2bcc08621dac03681443d8c67d7161ea
Opcode Fuzzy Hash: f69ac2d6f44c8d83ab125ed74b1590bdf143e19c133c97803fd5f0b93cf5a135
Instruction Fuzzy Hash: C531C579E1024AAFCB00DFA8C981BAEB7B8FF08700F104456E915E7350E734AA45CBA5

Function 69061EF1 Relevance: 3.1, APIs: 2, Instructions: 76COMMON

Download Yara Rule

APIs

__RTC_Initialize.LIBCMT ref: 69061F3E

Part of subcall function 690626CA: InitializeSListHead.KERNEL32(690BC7C8,69061F48,69091E78,00000010,69061ED9,?,?,?,69062101,?,00000001,?,?,00000001,?,69091EC0), ref: 690626CF

___scrt_is_nonwritable_in_current_image.LIBCMT ref: 69061FA8

Memory Dump Source

Source File: 0000000A.00000002.520354624.0000000069051000.00000020.00000001.01000000.00000008.sdmp, Offset: 69050000, based on PE: true

Associated: 0000000A.00000002.520346406.0000000069050000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000A.00000002.520370595.0000000069084000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000A.00000002.520384600.0000000069094000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000A.00000002.520394111.00000000690BC000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000A.00000002.520406416.00000000690BD000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_69050000_MSWordServices.jbxd

Similarity

API ID: Initialize$HeadList___scrt_is_nonwritable_in_current_image
String ID:
API String ID: 3231365870-0
Opcode ID: 36c94cdadc48c22a2a88ef00bb741d6339b98dcbb41a07efedf852c5d02e58b4
Instruction ID: 12aee9eddb76e8a2d2f1bfe4f80e0b191d302ab741291e51060c37e7a42c3730
Opcode Fuzzy Hash: 36c94cdadc48c22a2a88ef00bb741d6339b98dcbb41a07efedf852c5d02e58b4
Instruction Fuzzy Hash: EF21E13A64C245AEDF40EFBC990179C37E0AF1236CF50AC19E485A71F1CB722186D6A5

Function 2D9116D6 Relevance: 3.0, APIs: 2, Instructions: 45COMMON

Download Yara Rule

APIs

__EH_prolog3.LIBCMT ref: 2D9116DD
GetClassInfoA.USER32(?,?,?), ref: 2D9116EF

Part of subcall function 2D910D75: RegisterClassA.USER32(?), ref: 2D910DA4

Memory Dump Source

Source File: 0000000A.00000002.520302411.000000002D901000.00000020.00000001.01000000.00000007.sdmp, Offset: 2D900000, based on PE: true

Associated: 0000000A.00000002.520292586.000000002D900000.00000002.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000A.00000002.520318069.000000002D91E000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000A.00000002.520324941.000000002D922000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000A.00000002.520340216.000000002D923000.00000002.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_2d900000_MSWordServices.jbxd

Similarity

API ID: Class$H_prolog3InfoRegister
String ID:
API String ID: 1538853570-0
Opcode ID: 0d048d33d9568ad8a878d772342d47cfc2d86701b7f51cb5c49b14539e00a99a
Instruction ID: 2b76b8af1c9809aa105d0da5ef226d7d03be1f8acda3eeb4296e6a229dee216b
Opcode Fuzzy Hash: 0d048d33d9568ad8a878d772342d47cfc2d86701b7f51cb5c49b14539e00a99a
Instruction Fuzzy Hash: 0801DF7150825DBADB02AB708C80F9F7BADEF25380F518650FA55F7190CA34EB018BA6

Function 690616CA Relevance: 3.0, APIs: 2, Instructions: 35COMMONLIBRARYCODE

Download Yara Rule

APIs

RtlEncodePointer.NTDLL(00000008,?,69060F82,69060FC8,?,69060E0F,00000000,00000000,00000000,00000004,69053E5F,00000001,00000000,?,6905971B,00000008), ref: 690616DD
IsProcessorFeaturePresent.KERNEL32(00000017), ref: 6906EE95

Memory Dump Source

Source File: 0000000A.00000002.520354624.0000000069051000.00000020.00000001.01000000.00000008.sdmp, Offset: 69050000, based on PE: true

Associated: 0000000A.00000002.520346406.0000000069050000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000A.00000002.520370595.0000000069084000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000A.00000002.520384600.0000000069094000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000A.00000002.520394111.00000000690BC000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000A.00000002.520406416.00000000690BD000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_69050000_MSWordServices.jbxd

Similarity

API ID: EncodeFeaturePointerPresentProcessor
String ID:
API String ID: 4030241255-0
Opcode ID: cbc53107aef7a40cb2c41f8ab4d56b30476398c3e1a6e1d25a55537338842283
Instruction ID: 032878d7188c5ca720e1bf86adb487a6f8ff71ffd64944af547d2f42b1d70b99
Opcode Fuzzy Hash: cbc53107aef7a40cb2c41f8ab4d56b30476398c3e1a6e1d25a55537338842283
Instruction Fuzzy Hash: 27F0B474248345FAFF005BB0EC1A73237D8BB46718F005428E6395B1E0EB714451CA91

Function 690653A1 Relevance: 3.0, APIs: 2, Instructions: 19COMMON

Download Yara Rule

APIs

___vcrt_FlsSetValue.LIBVCRUNTIME ref: 690653BF
___vcrt_uninitialize_ptd.LIBVCRUNTIME ref: 690653CA

Memory Dump Source

Source File: 0000000A.00000002.520354624.0000000069051000.00000020.00000001.01000000.00000008.sdmp, Offset: 69050000, based on PE: true

Associated: 0000000A.00000002.520346406.0000000069050000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000A.00000002.520370595.0000000069084000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000A.00000002.520384600.0000000069094000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000A.00000002.520394111.00000000690BC000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000A.00000002.520406416.00000000690BD000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_69050000_MSWordServices.jbxd

Similarity

API ID: Value___vcrt____vcrt_uninitialize_ptd
String ID:
API String ID: 1660781231-0
Opcode ID: e97b00face0fc0c55c8904453aef4e955503ff19129e8ded85227a83b30514da
Instruction ID: b34e55d0d48fa3d8cc650ff231e06b91cb76bf8fd6a25d95104abea169079048
Opcode Fuzzy Hash: e97b00face0fc0c55c8904453aef4e955503ff19129e8ded85227a83b30514da
Instruction Fuzzy Hash: 0FD0C97E448222665D049AB86A4574E32A86D53BB97E0AF8ED060CB5F3EBA18045F252

Function 2D915FCC Relevance: 3.0, APIs: 2, Instructions: 15COMMON

Download Yara Rule

APIs

KiUserCallbackDispatcher.NTDLL(00000002,?,2D916023,?,?,?,2D912209), ref: 2D915FDE
GetSystemMetrics.USER32(00000003,?,2D916023,?,?,?,2D912209), ref: 2D915FE8

Memory Dump Source

Source File: 0000000A.00000002.520302411.000000002D901000.00000020.00000001.01000000.00000007.sdmp, Offset: 2D900000, based on PE: true

Associated: 0000000A.00000002.520292586.000000002D900000.00000002.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000A.00000002.520318069.000000002D91E000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000A.00000002.520324941.000000002D922000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000A.00000002.520340216.000000002D923000.00000002.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_2d900000_MSWordServices.jbxd

Similarity

API ID: CallbackDispatcherMetricsSystemUser
String ID:
API String ID: 365337688-0
Opcode ID: 579562cc34432b8f3b98766d14d64bb8531814eb3c12f8b0a38e2f922cfdc6cf
Instruction ID: 95d02ae81b30815f2ecc72ab3e2bab3fcb9b51c4302bb42fa41396224352fd02
Opcode Fuzzy Hash: 579562cc34432b8f3b98766d14d64bb8531814eb3c12f8b0a38e2f922cfdc6cf
Instruction Fuzzy Hash: 1BD09E7190D2249EE74D9B94A9097A837F8FB05B50F45405BF25496780C7B99441CB94

Function 6907A9A4 Relevance: 1.6, APIs: 1, Instructions: 147COMMON

Download Yara Rule

APIs

GetCPInfo.KERNEL32(E8458D00,?,6907ABF3,6907ABE7,00000000), ref: 6907A9D6

Memory Dump Source

Source File: 0000000A.00000002.520354624.0000000069051000.00000020.00000001.01000000.00000008.sdmp, Offset: 69050000, based on PE: true

Associated: 0000000A.00000002.520346406.0000000069050000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000A.00000002.520370595.0000000069084000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000A.00000002.520384600.0000000069094000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000A.00000002.520394111.00000000690BC000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000A.00000002.520406416.00000000690BD000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_69050000_MSWordServices.jbxd

Similarity

API ID: Info
String ID:
API String ID: 1807457897-0
Opcode ID: a32f399e7597d375dfa184456edda998a04179031cea83a500e4fc3e0815d472
Instruction ID: c69d582dcf3d9ee9ddfeb78e988bb92f011217f2c6544dcd31949d2ab6f51eb4
Opcode Fuzzy Hash: a32f399e7597d375dfa184456edda998a04179031cea83a500e4fc3e0815d472
Instruction Fuzzy Hash: AF512871904358AADB318E28CD80BEA7BF9EB5A334F2449A9D599DB182D334DD45CF20

Function 69072C29 Relevance: 1.6, APIs: 1, Instructions: 57COMMONLIBRARYCODE

Download Yara Rule

Memory Dump Source

Source File: 0000000A.00000002.520354624.0000000069051000.00000020.00000001.01000000.00000008.sdmp, Offset: 69050000, based on PE: true

Associated: 0000000A.00000002.520346406.0000000069050000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000A.00000002.520370595.0000000069084000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000A.00000002.520384600.0000000069094000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000A.00000002.520394111.00000000690BC000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000A.00000002.520406416.00000000690BD000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_69050000_MSWordServices.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 1fc5171bf387af132695a17509b0ebf64006f95edb2c342856ec75585eebad65
Instruction ID: 0a455c60bcb1a2b1513b9b975287bfed4dbf01fbb410884a804f43350b25aadd
Opcode Fuzzy Hash: 1fc5171bf387af132695a17509b0ebf64006f95edb2c342856ec75585eebad65
Instruction Fuzzy Hash: 5D01B1377103696FAF26CE6EDE40A5A37EBBBD63707108620FA14DF184DB31D8028694

Function 6906641D Relevance: 1.5, APIs: 1, Instructions: 34libraryloaderCOMMONLIBRARYCODE

Download Yara Rule

APIs

GetProcAddress.KERNEL32(00000000,?,?,00000000,?,690664F7,00000002,FlsGetValue,69086D98,FlsGetValue,00000000,?,6906538B,?,?,6906500A), ref: 6906644F

Memory Dump Source

Source File: 0000000A.00000002.520354624.0000000069051000.00000020.00000001.01000000.00000008.sdmp, Offset: 69050000, based on PE: true

Associated: 0000000A.00000002.520346406.0000000069050000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000A.00000002.520370595.0000000069084000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000A.00000002.520384600.0000000069094000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000A.00000002.520394111.00000000690BC000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000A.00000002.520406416.00000000690BD000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_69050000_MSWordServices.jbxd

Similarity

API ID: AddressProc
String ID:
API String ID: 190572456-0
Opcode ID: 030fae151fc65672513f20ade85a9899a259b9c4c569df14667a2f871c05e4fc
Instruction ID: cd29ca36a6a9fdc5a1d22e7e7daf56ed6159dfcb3ef19693704c36be3c07917e
Opcode Fuzzy Hash: 030fae151fc65672513f20ade85a9899a259b9c4c569df14667a2f871c05e4fc
Instruction Fuzzy Hash: 70F0A0373052669F9F028EACED00A8A37E9FF427607104925FE28D71A0EB31D920CBD0

Function 69072719 Relevance: 1.5, APIs: 1, Instructions: 32memoryCOMMONLIBRARYCODE

Download Yara Rule

APIs

RtlAllocateHeap.NTDLL(00000000,00000000,?,?,69061C0F,00000000,?,6905447E,00000000,?,6905179D,00000000,?,6905A4C6,00000000,?), ref: 6907274B

Memory Dump Source

Source File: 0000000A.00000002.520354624.0000000069051000.00000020.00000001.01000000.00000008.sdmp, Offset: 69050000, based on PE: true

Associated: 0000000A.00000002.520346406.0000000069050000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000A.00000002.520370595.0000000069084000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000A.00000002.520384600.0000000069094000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000A.00000002.520394111.00000000690BC000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000A.00000002.520406416.00000000690BD000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_69050000_MSWordServices.jbxd

Similarity

API ID: AllocateHeap
String ID:
API String ID: 1279760036-0
Opcode ID: a4c86c160e1e75646353cefe3840f64b353423294327ceed56c504f7782dbf20
Instruction ID: 54f4c0c90b74612e47d503a320b020c4a0e0fb88721a6c1a55409ba5385dc8a7
Opcode Fuzzy Hash: a4c86c160e1e75646353cefe3840f64b353423294327ceed56c504f7782dbf20
Instruction Fuzzy Hash: E7E06535644761BBEA31266E8F1175B7ADCAB427B0F011951DD549F194CB10D493C2E8

Function 2D910D75 Relevance: 1.5, APIs: 1, Instructions: 23registryCOMMON

Download Yara Rule

APIs

RegisterClassA.USER32(?), ref: 2D910DA4

Part of subcall function 2D903E45: OutputDebugStringA.KERNEL32(IsolationAware function called after IsolationAwareCleanup), ref: 2D903E58

Memory Dump Source

Source File: 0000000A.00000002.520302411.000000002D901000.00000020.00000001.01000000.00000007.sdmp, Offset: 2D900000, based on PE: true

Associated: 0000000A.00000002.520292586.000000002D900000.00000002.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000A.00000002.520318069.000000002D91E000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000A.00000002.520324941.000000002D922000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000A.00000002.520340216.000000002D923000.00000002.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_2d900000_MSWordServices.jbxd

Similarity

API ID: ClassDebugOutputRegisterString
String ID:
API String ID: 3599523695-0
Opcode ID: c95188c6cdb9557d6a465356c04afde8654e65703d53988debafdd2f5b1e0261
Instruction ID: 0809db0205b462c6351725c3de75c4c594ac3ba6a07876c55f318876fe8ae23d
Opcode Fuzzy Hash: c95188c6cdb9557d6a465356c04afde8654e65703d53988debafdd2f5b1e0261
Instruction Fuzzy Hash: 12F01C74C0520D9ACB019FA589006EDBAB9EF94300F204256F164B2190CB35C642DB24

Function 69053E51 Relevance: 1.5, APIs: 1, Instructions: 12COMMONLIBRARYCODE

Download Yara Rule

APIs

std::locale::_Init.LIBCPMT ref: 69053E5A

Part of subcall function 69060DDD: __EH_prolog3.LIBCMT ref: 69060DE4
Part of subcall function 69060DDD: std::_Lockit::_Lockit.LIBCPMT ref: 69060DEF
Part of subcall function 69060DDD: std::locale::_Setgloballocale.LIBCPMT ref: 69060E0A
Part of subcall function 69060DDD: _Yarn.LIBCPMT ref: 69060E20
Part of subcall function 69060DDD: std::_Lockit::~_Lockit.LIBCPMT ref: 69060E60

Memory Dump Source

Source File: 0000000A.00000002.520354624.0000000069051000.00000020.00000001.01000000.00000008.sdmp, Offset: 69050000, based on PE: true

Associated: 0000000A.00000002.520346406.0000000069050000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000A.00000002.520370595.0000000069084000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000A.00000002.520384600.0000000069094000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000A.00000002.520394111.00000000690BC000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000A.00000002.520406416.00000000690BD000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_69050000_MSWordServices.jbxd

Similarity

API ID: Lockitstd::_std::locale::_$H_prolog3InitLockit::_Lockit::~_SetgloballocaleYarn
String ID:
API String ID: 3852638621-0
Opcode ID: 8545ae05784f8a21cad9e0bf71749b5b2261889e105c3fa367e56751cb253a0e
Instruction ID: 39158ea678968cc591e5de8c585d2980b83bcbda7803cb7f11d15b8677914b3a
Opcode Fuzzy Hash: 8545ae05784f8a21cad9e0bf71749b5b2261889e105c3fa367e56751cb253a0e
Instruction Fuzzy Hash: 77C01270A44208FFCB04CB99E501A4CB7F49B04308F20809DA008A7381D6B1BE019B94

Function 2D917B5E Relevance: 1.5, APIs: 1, Instructions: 12COMMONLIBRARYCODE

Download Yara Rule

APIs

__onexit.MSVCRT ref: 2D917B66

Part of subcall function 2D917AB9: _decode_pointer.MSVCR90(2D91B680,00000014,2D917B6B,?), ref: 2D917AD1
Part of subcall function 2D917AB9: _onexit.MSVCR90 ref: 2D917ADF

Memory Dump Source

Source File: 0000000A.00000002.520302411.000000002D901000.00000020.00000001.01000000.00000007.sdmp, Offset: 2D900000, based on PE: true

Associated: 0000000A.00000002.520292586.000000002D900000.00000002.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000A.00000002.520318069.000000002D91E000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000A.00000002.520324941.000000002D922000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000A.00000002.520340216.000000002D923000.00000002.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_2d900000_MSWordServices.jbxd

Similarity

API ID: __onexit_decode_pointer_onexit
String ID:
API String ID: 1239580707-0
Opcode ID: 18df6e88158e6ef15c1797887b805ccb06412361fbc7add706a09e5bbcfb0787
Instruction ID: f053743b11a89faf715cec75b1f552fd5f5de03614e12898973f426eaca266b5
Opcode Fuzzy Hash: 18df6e88158e6ef15c1797887b805ccb06412361fbc7add706a09e5bbcfb0787
Instruction Fuzzy Hash: A4B0923209811FAB9A1059F6E8048253A89C7A1660B590222B50ED64A0DDA3D9154091

Function 2D91819E Relevance: 1.5, APIs: 1, Instructions: 9COMMON

Download Yara Rule

APIs

___delayLoadHelper2@8.DELAYIMP ref: 2D9181A8

Part of subcall function 2D918A22: RaiseException.KERNEL32(C06D0057,00000000,00000001,?), ref: 2D918A9B

Memory Dump Source

Source File: 0000000A.00000002.520302411.000000002D901000.00000020.00000001.01000000.00000007.sdmp, Offset: 2D900000, based on PE: true

Associated: 0000000A.00000002.520292586.000000002D900000.00000002.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000A.00000002.520318069.000000002D91E000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000A.00000002.520324941.000000002D922000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000A.00000002.520340216.000000002D923000.00000002.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_2d900000_MSWordServices.jbxd

Similarity

API ID: ExceptionHelper2@8LoadRaise___delay
String ID:
API String ID: 123106877-0
Opcode ID: 440137075b8614736313f31727f618e4e6a24be6415dc77cba5c613e3c29b872
Instruction ID: a535ddc71e109ca44521642629f1f5fd729afe5585702fcbfb0aee02be88f827
Opcode Fuzzy Hash: 440137075b8614736313f31727f618e4e6a24be6415dc77cba5c613e3c29b872
Instruction Fuzzy Hash: 7AA011A30A800ABC30088308EE08CBA820EC2C0A20320C20AF000F0800A800EC082030

Function 2D9181BC Relevance: 1.5, APIs: 1, Instructions: 9COMMON

Download Yara Rule

APIs

___delayLoadHelper2@8.DELAYIMP ref: 2D9181A8

Part of subcall function 2D918A22: RaiseException.KERNEL32(C06D0057,00000000,00000001,?), ref: 2D918A9B

Memory Dump Source

Source File: 0000000A.00000002.520302411.000000002D901000.00000020.00000001.01000000.00000007.sdmp, Offset: 2D900000, based on PE: true

Associated: 0000000A.00000002.520292586.000000002D900000.00000002.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000A.00000002.520318069.000000002D91E000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000A.00000002.520324941.000000002D922000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000A.00000002.520340216.000000002D923000.00000002.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_2d900000_MSWordServices.jbxd

Similarity

API ID: ExceptionHelper2@8LoadRaise___delay
String ID:
API String ID: 123106877-0
Opcode ID: 02e8256cac99965ba1ba6078fe23538027ab278ac287205f4d22f65205a31389
Instruction ID: 89e29b939a70c6477514a235337f912bd79c3b71f5bf37eccf175b61aa70e20a
Opcode Fuzzy Hash: 02e8256cac99965ba1ba6078fe23538027ab278ac287205f4d22f65205a31389
Instruction Fuzzy Hash: 42A011830AC00AFC30088308AE08CBA820EC2C0AA0320CA0AF000A0800A800CC082030

Function 2D9181D6 Relevance: 1.5, APIs: 1, Instructions: 9COMMON

Download Yara Rule

APIs

___delayLoadHelper2@8.DELAYIMP ref: 2D9181A8

Part of subcall function 2D918A22: RaiseException.KERNEL32(C06D0057,00000000,00000001,?), ref: 2D918A9B

Memory Dump Source

Source File: 0000000A.00000002.520302411.000000002D901000.00000020.00000001.01000000.00000007.sdmp, Offset: 2D900000, based on PE: true

Associated: 0000000A.00000002.520292586.000000002D900000.00000002.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000A.00000002.520318069.000000002D91E000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000A.00000002.520324941.000000002D922000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000A.00000002.520340216.000000002D923000.00000002.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_2d900000_MSWordServices.jbxd

Similarity

API ID: ExceptionHelper2@8LoadRaise___delay
String ID:
API String ID: 123106877-0
Opcode ID: 4cf408690ac34b6e24feb18ff44e263b94e42726dd4848af1f8f33a9081ad63c
Instruction ID: 89e29b939a70c6477514a235337f912bd79c3b71f5bf37eccf175b61aa70e20a
Opcode Fuzzy Hash: 4cf408690ac34b6e24feb18ff44e263b94e42726dd4848af1f8f33a9081ad63c
Instruction Fuzzy Hash: 42A011830AC00AFC30088308AE08CBA820EC2C0AA0320CA0AF000A0800A800CC082030

Function 2D9181C9 Relevance: 1.5, APIs: 1, Instructions: 9COMMON

Download Yara Rule

APIs

___delayLoadHelper2@8.DELAYIMP ref: 2D9181A8

Part of subcall function 2D918A22: RaiseException.KERNEL32(C06D0057,00000000,00000001,?), ref: 2D918A9B

Memory Dump Source

Source File: 0000000A.00000002.520302411.000000002D901000.00000020.00000001.01000000.00000007.sdmp, Offset: 2D900000, based on PE: true

Associated: 0000000A.00000002.520292586.000000002D900000.00000002.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000A.00000002.520318069.000000002D91E000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000A.00000002.520324941.000000002D922000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000A.00000002.520340216.000000002D923000.00000002.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_2d900000_MSWordServices.jbxd

Similarity

API ID: ExceptionHelper2@8LoadRaise___delay
String ID:
API String ID: 123106877-0
Opcode ID: 1d24279b31b29947bfcc79e42a777c119f98eb20e0cc645514429bcbcb24d689
Instruction ID: 89e29b939a70c6477514a235337f912bd79c3b71f5bf37eccf175b61aa70e20a
Opcode Fuzzy Hash: 1d24279b31b29947bfcc79e42a777c119f98eb20e0cc645514429bcbcb24d689
Instruction Fuzzy Hash: 42A011830AC00AFC30088308AE08CBA820EC2C0AA0320CA0AF000A0800A800CC082030

Function 2D9181F0 Relevance: 1.5, APIs: 1, Instructions: 9COMMON

Download Yara Rule

APIs

___delayLoadHelper2@8.DELAYIMP ref: 2D9181A8

Part of subcall function 2D918A22: RaiseException.KERNEL32(C06D0057,00000000,00000001,?), ref: 2D918A9B

Memory Dump Source

Source File: 0000000A.00000002.520302411.000000002D901000.00000020.00000001.01000000.00000007.sdmp, Offset: 2D900000, based on PE: true

Associated: 0000000A.00000002.520292586.000000002D900000.00000002.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000A.00000002.520318069.000000002D91E000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000A.00000002.520324941.000000002D922000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000A.00000002.520340216.000000002D923000.00000002.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_2d900000_MSWordServices.jbxd

Similarity

API ID: ExceptionHelper2@8LoadRaise___delay
String ID:
API String ID: 123106877-0
Opcode ID: f372bd14908de67905b9f97981909311afc7dda7592067ebe132faba2369c86d
Instruction ID: 89e29b939a70c6477514a235337f912bd79c3b71f5bf37eccf175b61aa70e20a
Opcode Fuzzy Hash: f372bd14908de67905b9f97981909311afc7dda7592067ebe132faba2369c86d
Instruction Fuzzy Hash: 42A011830AC00AFC30088308AE08CBA820EC2C0AA0320CA0AF000A0800A800CC082030

Function 2D9181FD Relevance: 1.5, APIs: 1, Instructions: 9COMMON

Download Yara Rule

APIs

___delayLoadHelper2@8.DELAYIMP ref: 2D9181A8

Part of subcall function 2D918A22: RaiseException.KERNEL32(C06D0057,00000000,00000001,?), ref: 2D918A9B

Memory Dump Source

Source File: 0000000A.00000002.520302411.000000002D901000.00000020.00000001.01000000.00000007.sdmp, Offset: 2D900000, based on PE: true

Associated: 0000000A.00000002.520292586.000000002D900000.00000002.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000A.00000002.520318069.000000002D91E000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000A.00000002.520324941.000000002D922000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000A.00000002.520340216.000000002D923000.00000002.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_2d900000_MSWordServices.jbxd

Similarity

API ID: ExceptionHelper2@8LoadRaise___delay
String ID:
API String ID: 123106877-0
Opcode ID: 0e320b272050f3fe377ddb28a61e37fecfe74537b9a8ce53776b7f0924d9f084
Instruction ID: 89e29b939a70c6477514a235337f912bd79c3b71f5bf37eccf175b61aa70e20a
Opcode Fuzzy Hash: 0e320b272050f3fe377ddb28a61e37fecfe74537b9a8ce53776b7f0924d9f084
Instruction Fuzzy Hash: 42A011830AC00AFC30088308AE08CBA820EC2C0AA0320CA0AF000A0800A800CC082030

Function 2D9181E3 Relevance: 1.5, APIs: 1, Instructions: 9COMMON

Download Yara Rule

APIs

___delayLoadHelper2@8.DELAYIMP ref: 2D9181A8

Part of subcall function 2D918A22: RaiseException.KERNEL32(C06D0057,00000000,00000001,?), ref: 2D918A9B

Memory Dump Source

Source File: 0000000A.00000002.520302411.000000002D901000.00000020.00000001.01000000.00000007.sdmp, Offset: 2D900000, based on PE: true

Associated: 0000000A.00000002.520292586.000000002D900000.00000002.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000A.00000002.520318069.000000002D91E000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000A.00000002.520324941.000000002D922000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000A.00000002.520340216.000000002D923000.00000002.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_2d900000_MSWordServices.jbxd

Similarity

API ID: ExceptionHelper2@8LoadRaise___delay
String ID:
API String ID: 123106877-0
Opcode ID: 1060675e85c8ece75f1ce2df8dba1397e23265f0e24a3e7fa20d4c4ba871f573
Instruction ID: 89e29b939a70c6477514a235337f912bd79c3b71f5bf37eccf175b61aa70e20a
Opcode Fuzzy Hash: 1060675e85c8ece75f1ce2df8dba1397e23265f0e24a3e7fa20d4c4ba871f573
Instruction Fuzzy Hash: 42A011830AC00AFC30088308AE08CBA820EC2C0AA0320CA0AF000A0800A800CC082030

Function 2D918217 Relevance: 1.5, APIs: 1, Instructions: 9COMMON

Download Yara Rule

APIs

___delayLoadHelper2@8.DELAYIMP ref: 2D9181A8

Part of subcall function 2D918A22: RaiseException.KERNEL32(C06D0057,00000000,00000001,?), ref: 2D918A9B

Memory Dump Source

Source File: 0000000A.00000002.520302411.000000002D901000.00000020.00000001.01000000.00000007.sdmp, Offset: 2D900000, based on PE: true

Associated: 0000000A.00000002.520292586.000000002D900000.00000002.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000A.00000002.520318069.000000002D91E000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000A.00000002.520324941.000000002D922000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000A.00000002.520340216.000000002D923000.00000002.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_2d900000_MSWordServices.jbxd

Similarity

API ID: ExceptionHelper2@8LoadRaise___delay
String ID:
API String ID: 123106877-0
Opcode ID: 6504c3c5bba56959925b585f6bc9636d89df652cc1eb499e2b4304b036409759
Instruction ID: 89e29b939a70c6477514a235337f912bd79c3b71f5bf37eccf175b61aa70e20a
Opcode Fuzzy Hash: 6504c3c5bba56959925b585f6bc9636d89df652cc1eb499e2b4304b036409759
Instruction Fuzzy Hash: 42A011830AC00AFC30088308AE08CBA820EC2C0AA0320CA0AF000A0800A800CC082030

Function 2D91820A Relevance: 1.5, APIs: 1, Instructions: 9COMMON

Download Yara Rule

APIs

___delayLoadHelper2@8.DELAYIMP ref: 2D9181A8

Part of subcall function 2D918A22: RaiseException.KERNEL32(C06D0057,00000000,00000001,?), ref: 2D918A9B

Memory Dump Source

Source File: 0000000A.00000002.520302411.000000002D901000.00000020.00000001.01000000.00000007.sdmp, Offset: 2D900000, based on PE: true

Associated: 0000000A.00000002.520292586.000000002D900000.00000002.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000A.00000002.520318069.000000002D91E000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000A.00000002.520324941.000000002D922000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000A.00000002.520340216.000000002D923000.00000002.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_2d900000_MSWordServices.jbxd

Similarity

API ID: ExceptionHelper2@8LoadRaise___delay
String ID:
API String ID: 123106877-0
Opcode ID: 9410fd50bb1a17411f7eab4d5ffc620547ccdc7bd6ab1c1064ff861a055f0e59
Instruction ID: 89e29b939a70c6477514a235337f912bd79c3b71f5bf37eccf175b61aa70e20a
Opcode Fuzzy Hash: 9410fd50bb1a17411f7eab4d5ffc620547ccdc7bd6ab1c1064ff861a055f0e59
Instruction Fuzzy Hash: 42A011830AC00AFC30088308AE08CBA820EC2C0AA0320CA0AF000A0800A800CC082030

Function 2D918234 Relevance: 1.5, APIs: 1, Instructions: 9COMMON

Download Yara Rule

APIs

___delayLoadHelper2@8.DELAYIMP ref: 2D9181A8

Part of subcall function 2D918A22: RaiseException.KERNEL32(C06D0057,00000000,00000001,?), ref: 2D918A9B

Memory Dump Source

Source File: 0000000A.00000002.520302411.000000002D901000.00000020.00000001.01000000.00000007.sdmp, Offset: 2D900000, based on PE: true

Associated: 0000000A.00000002.520292586.000000002D900000.00000002.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000A.00000002.520318069.000000002D91E000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000A.00000002.520324941.000000002D922000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000A.00000002.520340216.000000002D923000.00000002.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_2d900000_MSWordServices.jbxd

Similarity

API ID: ExceptionHelper2@8LoadRaise___delay
String ID:
API String ID: 123106877-0
Opcode ID: fa18aa9b46ab48324cf786d21a322623ac7f79e24d95da5f820f3f72509a738e
Instruction ID: 89e29b939a70c6477514a235337f912bd79c3b71f5bf37eccf175b61aa70e20a
Opcode Fuzzy Hash: fa18aa9b46ab48324cf786d21a322623ac7f79e24d95da5f820f3f72509a738e
Instruction Fuzzy Hash: 42A011830AC00AFC30088308AE08CBA820EC2C0AA0320CA0AF000A0800A800CC082030

Function 2D918224 Relevance: 1.5, APIs: 1, Instructions: 9COMMON

Download Yara Rule

APIs

___delayLoadHelper2@8.DELAYIMP ref: 2D9181A8

Part of subcall function 2D918A22: RaiseException.KERNEL32(C06D0057,00000000,00000001,?), ref: 2D918A9B

Memory Dump Source

Source File: 0000000A.00000002.520302411.000000002D901000.00000020.00000001.01000000.00000007.sdmp, Offset: 2D900000, based on PE: true

Associated: 0000000A.00000002.520292586.000000002D900000.00000002.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000A.00000002.520318069.000000002D91E000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000A.00000002.520324941.000000002D922000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000A.00000002.520340216.000000002D923000.00000002.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_2d900000_MSWordServices.jbxd

Similarity

API ID: ExceptionHelper2@8LoadRaise___delay
String ID:
API String ID: 123106877-0
Opcode ID: 631c51a8a260f7128e18a434e3568d04dcc1c77c7d735a6a139916f135f38173
Instruction ID: 89e29b939a70c6477514a235337f912bd79c3b71f5bf37eccf175b61aa70e20a
Opcode Fuzzy Hash: 631c51a8a260f7128e18a434e3568d04dcc1c77c7d735a6a139916f135f38173
Instruction Fuzzy Hash: 42A011830AC00AFC30088308AE08CBA820EC2C0AA0320CA0AF000A0800A800CC082030

Function 2D918254 Relevance: 1.5, APIs: 1, Instructions: 9COMMON

Download Yara Rule

APIs

___delayLoadHelper2@8.DELAYIMP ref: 2D9181A8

Part of subcall function 2D918A22: RaiseException.KERNEL32(C06D0057,00000000,00000001,?), ref: 2D918A9B

Memory Dump Source

Source File: 0000000A.00000002.520302411.000000002D901000.00000020.00000001.01000000.00000007.sdmp, Offset: 2D900000, based on PE: true

Associated: 0000000A.00000002.520292586.000000002D900000.00000002.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000A.00000002.520318069.000000002D91E000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000A.00000002.520324941.000000002D922000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000A.00000002.520340216.000000002D923000.00000002.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_2d900000_MSWordServices.jbxd

Similarity

API ID: ExceptionHelper2@8LoadRaise___delay
String ID:
API String ID: 123106877-0
Opcode ID: 3c4b12fc2633c0f1028f063e7a4263f531bca99448aa9453633aae43159ebf54
Instruction ID: 89e29b939a70c6477514a235337f912bd79c3b71f5bf37eccf175b61aa70e20a
Opcode Fuzzy Hash: 3c4b12fc2633c0f1028f063e7a4263f531bca99448aa9453633aae43159ebf54
Instruction Fuzzy Hash: 42A011830AC00AFC30088308AE08CBA820EC2C0AA0320CA0AF000A0800A800CC082030

Function 2D918244 Relevance: 1.5, APIs: 1, Instructions: 9COMMON

Download Yara Rule

APIs

___delayLoadHelper2@8.DELAYIMP ref: 2D9181A8

Part of subcall function 2D918A22: RaiseException.KERNEL32(C06D0057,00000000,00000001,?), ref: 2D918A9B

Memory Dump Source

Source File: 0000000A.00000002.520302411.000000002D901000.00000020.00000001.01000000.00000007.sdmp, Offset: 2D900000, based on PE: true

Associated: 0000000A.00000002.520292586.000000002D900000.00000002.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000A.00000002.520318069.000000002D91E000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000A.00000002.520324941.000000002D922000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000A.00000002.520340216.000000002D923000.00000002.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_2d900000_MSWordServices.jbxd

Similarity

API ID: ExceptionHelper2@8LoadRaise___delay
String ID:
API String ID: 123106877-0
Opcode ID: aacb696dd9c6f70f0551bb4b7bc2b0f9037c6edffe3e9be3ee3d2c9ecd37c117
Instruction ID: 89e29b939a70c6477514a235337f912bd79c3b71f5bf37eccf175b61aa70e20a
Opcode Fuzzy Hash: aacb696dd9c6f70f0551bb4b7bc2b0f9037c6edffe3e9be3ee3d2c9ecd37c117
Instruction Fuzzy Hash: 42A011830AC00AFC30088308AE08CBA820EC2C0AA0320CA0AF000A0800A800CC082030

Function 2D9178B5 Relevance: 1.5, APIs: 1, Instructions: 2COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000A.00000002.520302411.000000002D901000.00000020.00000001.01000000.00000007.sdmp, Offset: 2D900000, based on PE: true

Associated: 0000000A.00000002.520292586.000000002D900000.00000002.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000A.00000002.520318069.000000002D91E000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000A.00000002.520324941.000000002D922000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000A.00000002.520340216.000000002D923000.00000002.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_2d900000_MSWordServices.jbxd

Similarity

API ID: CurrentProcessProtectTimeVirtual$AddressCountCounterFileHandleHeapModulePerformanceProcQuerySystemThreadTick
String ID:
API String ID: 2966426798-0
Opcode ID: b1d9e3360e75d73aef1975e7a51aa155834824d47b87844c87d294b04e291f44
Instruction ID: dbbec491db3338af3b9fed81d1c24489abab4f14fda3913f0576541afd65f981
Opcode Fuzzy Hash: b1d9e3360e75d73aef1975e7a51aa155834824d47b87844c87d294b04e291f44
Instruction Fuzzy Hash:

Function 2D905027 Relevance: 1.3, APIs: 1, Instructions: 28stringCOMMON

Download Yara Rule

APIs

lstrcmpiA.KERNEL32(?), ref: 2D905032

Memory Dump Source

Source File: 0000000A.00000002.520302411.000000002D901000.00000020.00000001.01000000.00000007.sdmp, Offset: 2D900000, based on PE: true

Associated: 0000000A.00000002.520292586.000000002D900000.00000002.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000A.00000002.520318069.000000002D91E000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000A.00000002.520324941.000000002D922000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000A.00000002.520340216.000000002D923000.00000002.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_2d900000_MSWordServices.jbxd

Similarity

API ID: lstrcmpi
String ID:
API String ID: 1586166983-0
Opcode ID: bde384254d03f084f1e3a2e6139cc3d19112a0026f5ceded0c8c9415c5140813
Instruction ID: 6cc59868d1480799c7784b5fa77939578e5145469084ab8e07f0b8e8c0c135bb
Opcode Fuzzy Hash: bde384254d03f084f1e3a2e6139cc3d19112a0026f5ceded0c8c9415c5140813
Instruction Fuzzy Hash: 84E06D31214108AF87929E64EC00A267BFCFF05A91300C869F859D6110EA21D810CBE0

Non-executed Functions

Function 2D907BC9 Relevance: 21.3, APIs: 14, Instructions: 274windowCOMMON

Download Yara Rule

APIs

__EH_prolog3_catch.LIBCMT ref: 2D907BD0
IsIconic.USER32(00000001), ref: 2D907C45
SetForegroundWindow.USER32(00000001), ref: 2D907C69
LoadMenuW.USER32(?,00000048,2D905B5D,?,?,?,00008920,000088BA,00008981,00008981), ref: 2D907CA7
MultiByteToWideChar.KERNEL32(00000000,00000000,00000001,?,00000001), ref: 2D907CDB
SetWindowLongA.USER32(00000003,000000F4,0000E900), ref: 2D907D64
GetFocus.USER32(?,?,00000000,?,?,00CF0000,00000000,00000000,00000000,00000000,?,00000000,00000000), ref: 2D907D6A
SetFocus.USER32 ref: 2D907D83

Part of subcall function 2D912F6C: GetMessageA.USER32 ref: 2D912F79
Part of subcall function 2D912F6C: TranslateMessage.USER32(2D91E9A0), ref: 2D912F99
Part of subcall function 2D912F6C: DispatchMessageA.USER32(2D91E9A0,?,?,00000000,?,?,00CF0000,00000000,00000000,00000000,00000000,?,00000000,00000000), ref: 2D912FA0

GetSystemMetrics.USER32(00000000,00000000,?,?,00000000,?,?,00CF0000,00000000,00000000,00000000,00000000,?,00000000,00000000), ref: 2D907DAF
GetSystemMetrics.USER32(00000001,?,?,00000000,?,?,00CF0000,00000000,00000000,00000000,00000000,?,00000000,00000000), ref: 2D907DDF
GetSystemMetrics.USER32(00000001,2D91F688,?,?,00000000,?,00000018,?,?,00000000,?,?,00CF0000,00000000,00000000,00000000), ref: 2D907E15
SetForegroundWindow.USER32(00000003), ref: 2D907E48
PeekMessageA.USER32(?,00000000,00000000,00000000,00000000), ref: 2D907E7E
PeekMessageA.USER32(?,00000000,00000000,00000000,00000000), ref: 2D907ECD

Memory Dump Source

Source File: 0000000A.00000002.520302411.000000002D901000.00000020.00000001.01000000.00000007.sdmp, Offset: 2D900000, based on PE: true

Associated: 0000000A.00000002.520292586.000000002D900000.00000002.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000A.00000002.520318069.000000002D91E000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000A.00000002.520324941.000000002D922000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000A.00000002.520340216.000000002D923000.00000002.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_2d900000_MSWordServices.jbxd

Similarity

API ID: Message$MetricsSystemWindow$FocusForegroundPeek$ByteCharDispatchH_prolog3_catchIconicLoadLongMenuMultiTranslateWide
String ID:
API String ID: 2541888167-0
Opcode ID: a469249eb8b19ffe6b69740ace2554047f1ac36e03facefd61fe2780277a7fb4
Instruction ID: 68b4c67fc30d407aa297f34c0da99461d59be207910079e8053c6d51990fd738
Opcode Fuzzy Hash: a469249eb8b19ffe6b69740ace2554047f1ac36e03facefd61fe2780277a7fb4
Instruction Fuzzy Hash: 1CA1C171A05118EFCF02DFA4D884AAE7BB9EF44722F108059FA05BB241CB75DA40CFA0

Function 6907CF41 Relevance: 10.8, APIs: 5, Strings: 1, Instructions: 251COMMONLIBRARYCODE

Download Yara Rule

APIs

Part of subcall function 690702DC: GetLastError.KERNEL32(?,00000008,69079E39,00000000,690668B0), ref: 690702E0
Part of subcall function 690702DC: SetLastError.KERNEL32(00000000,00000006,000000FF), ref: 69070382

GetACP.KERNEL32(?,?,?,?,?,?,69070D22,?,?,?,00000055,?,-00000050,?,?,00000000), ref: 6907D002
IsValidCodePage.KERNEL32(00000000,?,?,?,?,?,?,69070D22,?,?,?,00000055,?,-00000050,?,?), ref: 6907D02D
_wcschr.LIBVCRUNTIME ref: 6907D0C1
_wcschr.LIBVCRUNTIME ref: 6907D0CF
GetLocaleInfoW.KERNEL32(00000000,?,?,00000078,-00000050,00000000,000000D0), ref: 6907D190

Strings

utf8, xrefs: 6907D0FF

Memory Dump Source

Source File: 0000000A.00000002.520354624.0000000069051000.00000020.00000001.01000000.00000008.sdmp, Offset: 69050000, based on PE: true

Associated: 0000000A.00000002.520346406.0000000069050000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000A.00000002.520370595.0000000069084000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000A.00000002.520384600.0000000069094000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000A.00000002.520394111.00000000690BC000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000A.00000002.520406416.00000000690BD000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_69050000_MSWordServices.jbxd

Similarity

API ID: ErrorLast_wcschr$CodeInfoLocalePageValid
String ID: utf8
API String ID: 4147378913-905460609
Opcode ID: 5d58cdc5ed8e43fe3b58682f9e1ec8da71ab7885986847649cd953743dc90571
Instruction ID: 246f49e02292a8c7b8b7f6990df7bc8a94c96c09f36a8e2a26d41a69f144239a
Opcode Fuzzy Hash: 5d58cdc5ed8e43fe3b58682f9e1ec8da71ab7885986847649cd953743dc90571
Instruction Fuzzy Hash: 2371C375604316BAEB349B75CC41BAA73ECBF45324F109C2AE519DF280EB71E941C7A8

Function 2D917592 Relevance: 10.6, APIs: 7, Instructions: 57COMMONLIBRARYCODE

Download Yara Rule

APIs

IsDebuggerPresent.KERNEL32 ref: 2D917E3C
_crt_debugger_hook.MSVCR90(00000001), ref: 2D917E49
SetUnhandledExceptionFilter.KERNEL32 ref: 2D917E51
UnhandledExceptionFilter.KERNEL32(2D903308), ref: 2D917E5C
_crt_debugger_hook.MSVCR90(00000001), ref: 2D917E6D
GetCurrentProcess.KERNEL32(C0000409), ref: 2D917E78
TerminateProcess.KERNEL32(00000000), ref: 2D917E7F

Memory Dump Source

Source File: 0000000A.00000002.520302411.000000002D901000.00000020.00000001.01000000.00000007.sdmp, Offset: 2D900000, based on PE: true

Associated: 0000000A.00000002.520292586.000000002D900000.00000002.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000A.00000002.520318069.000000002D91E000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000A.00000002.520324941.000000002D922000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000A.00000002.520340216.000000002D923000.00000002.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_2d900000_MSWordServices.jbxd

Similarity

API ID: ExceptionFilterProcessUnhandled_crt_debugger_hook$CurrentDebuggerPresentTerminate
String ID:
API String ID: 3369434319-0
Opcode ID: fb76a1abb9ecabda5fdee7ad839a8f906df18304e7c8249ca60c75223450e88f
Instruction ID: 392cb0dfc1a98cb0f5a91174fd1031d9c939234613a2d7bf82b2781ed03ee093
Opcode Fuzzy Hash: fb76a1abb9ecabda5fdee7ad839a8f906df18304e7c8249ca60c75223450e88f
Instruction Fuzzy Hash: D621DF7980A304AFC321DFA8E5897583BB4BF08B11F50905AF40897B90E7789585CF0D

Function 6907D6D0 Relevance: 8.8, APIs: 3, Strings: 2, Instructions: 85COMMONLIBRARYCODE

Download Yara Rule

APIs

GetLocaleInfoW.KERNEL32(?,2000000B,6907D9EE,00000002,00000000,?,?,?,6907D9EE,?,00000000), ref: 6907D769
GetLocaleInfoW.KERNEL32(?,20001004,6907D9EE,00000002,00000000,?,?,?,6907D9EE,?,00000000), ref: 6907D792
GetACP.KERNEL32(?,?,6907D9EE,?,00000000), ref: 6907D7A7

Strings

ACP, xrefs: 6907D6EE
OCP, xrefs: 6907D724

Memory Dump Source

Source File: 0000000A.00000002.520354624.0000000069051000.00000020.00000001.01000000.00000008.sdmp, Offset: 69050000, based on PE: true

Associated: 0000000A.00000002.520346406.0000000069050000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000A.00000002.520370595.0000000069084000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000A.00000002.520384600.0000000069094000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000A.00000002.520394111.00000000690BC000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000A.00000002.520406416.00000000690BD000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_69050000_MSWordServices.jbxd

Similarity

API ID: InfoLocale
String ID: ACP$OCP
API String ID: 2299586839-711371036
Opcode ID: 5c6559486ccbb10aeba4c474f235f4d0437789caf57018895e5db8fa480aa8dc
Instruction ID: 25acb9604b0dfd3f90c438bf11745dc86da01dea3aa60c8cd78a796f62b4d2aa
Opcode Fuzzy Hash: 5c6559486ccbb10aeba4c474f235f4d0437789caf57018895e5db8fa480aa8dc
Instruction Fuzzy Hash: F4219232644300BADB349B28DA42B8B76F6BB81B74B568D26E809DF100F732D981C754

Function 6907D8A5 Relevance: 7.7, APIs: 5, Instructions: 183COMMONLIBRARYCODE

Download Yara Rule

APIs

Part of subcall function 690702DC: GetLastError.KERNEL32(?,00000008,69079E39,00000000,690668B0), ref: 690702E0
Part of subcall function 690702DC: SetLastError.KERNEL32(00000000,00000006,000000FF), ref: 69070382

GetUserDefaultLCID.KERNEL32(?,?,?,00000055,?), ref: 6907D9B1
IsValidCodePage.KERNEL32(00000000), ref: 6907D9FA
IsValidLocale.KERNEL32(?,00000001), ref: 6907DA09
GetLocaleInfoW.KERNEL32(?,00001001,-00000050,00000040,?,000000D0,00000055,00000000,?,?,00000055,00000000), ref: 6907DA51
GetLocaleInfoW.KERNEL32(?,00001002,00000030,00000040), ref: 6907DA70

Memory Dump Source

Source File: 0000000A.00000002.520354624.0000000069051000.00000020.00000001.01000000.00000008.sdmp, Offset: 69050000, based on PE: true

Associated: 0000000A.00000002.520346406.0000000069050000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000A.00000002.520370595.0000000069084000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000A.00000002.520384600.0000000069094000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000A.00000002.520394111.00000000690BC000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000A.00000002.520406416.00000000690BD000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_69050000_MSWordServices.jbxd

Similarity

API ID: Locale$ErrorInfoLastValid$CodeDefaultPageUser
String ID:
API String ID: 415426439-0
Opcode ID: fa3c52e6dec76cef3e667012e761441fa16d7eaff8869c379196de1b6d3a6217
Instruction ID: bfb24e6217447ed42d5230e28b499c89b3d0deea215cff8cfc7178e8f222bb53
Opcode Fuzzy Hash: fa3c52e6dec76cef3e667012e761441fa16d7eaff8869c379196de1b6d3a6217
Instruction Fuzzy Hash: B6513F76A00305ABEF20DFA5CC44BBE77F8BF45720F15482AE924EF140E7709A418BA5

Function 69075CB2 Relevance: 6.3, APIs: 4, Instructions: 337COMMONLIBRARYCODE

Download Yara Rule

APIs

_strrchr.LIBCMT ref: 69075D3F

Memory Dump Source

Source File: 0000000A.00000002.520354624.0000000069051000.00000020.00000001.01000000.00000008.sdmp, Offset: 69050000, based on PE: true

Associated: 0000000A.00000002.520346406.0000000069050000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000A.00000002.520370595.0000000069084000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000A.00000002.520384600.0000000069094000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000A.00000002.520394111.00000000690BC000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000A.00000002.520406416.00000000690BD000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_69050000_MSWordServices.jbxd

Similarity

API ID: _strrchr
String ID:
API String ID: 3213747228-0
Opcode ID: 5a2df6829468a3d1ba630fb8cbc36a6c6803c4e92b5340e5fff4db1baf62b945
Instruction ID: 25151c35220b32397ecef68c0a48cb4770ef5817c76c48b0631e97df083bff6e
Opcode Fuzzy Hash: 5a2df6829468a3d1ba630fb8cbc36a6c6803c4e92b5340e5fff4db1baf62b945
Instruction Fuzzy Hash: 9FB1273AA043459FEB25CF68C8917EEBBF5EF49360F14896AD804EF241D3349901CBA5

Function 6906270B Relevance: 6.1, APIs: 4, Instructions: 73COMMONLIBRARYCODE

Download Yara Rule

APIs

IsProcessorFeaturePresent.KERNEL32(00000017), ref: 69062717
IsDebuggerPresent.KERNEL32 ref: 690627E3
SetUnhandledExceptionFilter.KERNEL32 ref: 69062803
UnhandledExceptionFilter.KERNEL32(?), ref: 6906280D

Memory Dump Source

Source File: 0000000A.00000002.520354624.0000000069051000.00000020.00000001.01000000.00000008.sdmp, Offset: 69050000, based on PE: true

Associated: 0000000A.00000002.520346406.0000000069050000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000A.00000002.520370595.0000000069084000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000A.00000002.520384600.0000000069094000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000A.00000002.520394111.00000000690BC000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000A.00000002.520406416.00000000690BD000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_69050000_MSWordServices.jbxd

Similarity

API ID: ExceptionFilterPresentUnhandled$DebuggerFeatureProcessor
String ID:
API String ID: 254469556-0
Opcode ID: e767eaa541d854b102ba27f44df900366bf5ef9e0ba293087337fbcbb53074cb
Instruction ID: 6749c16ecb048c371f039799a16edbe2c30c362fb536bfd1f398be9afff68084
Opcode Fuzzy Hash: e767eaa541d854b102ba27f44df900366bf5ef9e0ba293087337fbcbb53074cb
Instruction Fuzzy Hash: F3312975D06219DBDF11DFA4D9897CCBBF8BF09304F1044AAE408AB250EB705B858F85

Function 2D90DA85 Relevance: 33.4, APIs: 17, Strings: 2, Instructions: 197stringCOMMON

Download Yara Rule

APIs

GetProfileStringA.KERNEL32 ref: 2D90DABC
IsDBCSLeadByte.KERNEL32(00000000,?,?,?,?,?), ref: 2D90DAD6
CharNextA.USER32(?), ref: 2D90DB05
memset.MSVCR90 ref: 2D90DB19
CharNextA.USER32(?), ref: 2D90DB5A
isspace.MSVCR90 ref: 2D90DB66
memset.MSVCR90 ref: 2D90DB75
lstrlenA.KERNEL32(00000000), ref: 2D90DB88
CharPrevA.USER32(?,00000000), ref: 2D90DB94
isspace.MSVCR90 ref: 2D90DBA0
CharNextA.USER32(00000000), ref: 2D90DBA8
memset.MSVCR90 ref: 2D90DBB6
malloc.MSVCR90 ref: 2D90DBEF
malloc.MSVCR90 ref: 2D90DC11
lstrlenA.KERNEL32(?), ref: 2D90DC30
malloc.MSVCR90 ref: 2D90DC3A
CharNextA.USER32(?), ref: 2D90DC58

Strings

intl, xrefs: 2D90DAA6
sList, xrefs: 2D90DAA1

Memory Dump Source

Source File: 0000000A.00000002.520302411.000000002D901000.00000020.00000001.01000000.00000007.sdmp, Offset: 2D900000, based on PE: true

Associated: 0000000A.00000002.520292586.000000002D900000.00000002.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000A.00000002.520318069.000000002D91E000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000A.00000002.520324941.000000002D922000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000A.00000002.520340216.000000002D923000.00000002.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_2d900000_MSWordServices.jbxd

Similarity

API ID: Char$Next$mallocmemset$isspacelstrlen$ByteLeadPrevProfileString
String ID: intl$sList
API String ID: 1792931721-3643076868
Opcode ID: 61dc627b832bf1974ae536c520d2d1032bd7f5282b9ccbee7d16ca952ad0a73e
Instruction ID: 8ee7221587dd4f3e2fe2f6e98a08f88954846068404344dea6652d414cad8695
Opcode Fuzzy Hash: 61dc627b832bf1974ae536c520d2d1032bd7f5282b9ccbee7d16ca952ad0a73e
Instruction Fuzzy Hash: E861E474904259AFDB129F69E884BBDBBBCEF05662F1080AAF984F7641D375CA40CF50

Function 2D914681 Relevance: 31.7, APIs: 16, Strings: 2, Instructions: 188windowCOMMON

Download Yara Rule

APIs

Part of subcall function 2D912240: LoadResource.KERNEL32(2D900000,00000000,2D900000,?,000000F0), ref: 2D91227A
Part of subcall function 2D912240: LockResource.KERNEL32(00000000), ref: 2D912288
Part of subcall function 2D912240: SendDlgItemMessageA.USER32(00000001,?,?,00000000,00000000), ref: 2D9122D8
Part of subcall function 2D912240: FreeResource.KERNEL32(?), ref: 2D9122F0

EndDialog.USER32 ref: 2D9146BC

Part of subcall function 2D906288: GetDlgItem.USER32(?,?), ref: 2D906291

ShowWindow.USER32(?,00000000), ref: 2D9146E7
memset.MSVCR90 ref: 2D914714
memset.MSVCR90 ref: 2D914723
memset.MSVCR90 ref: 2D91476C
GetDC.USER32(00000000), ref: 2D9147BC
GetDeviceCaps.GDI32(00000000,0000005A,?,?,?,?,?,?,00000000), ref: 2D9147CB
ReleaseDC.USER32(00000000,?), ref: 2D9147F2
CreateFontIndirectW.GDI32(FFFFFFF5), ref: 2D914828
CreateFontIndirectW.GDI32(FFFFFFF5), ref: 2D91483B
CreateFontIndirectW.GDI32(FFFFFFF5), ref: 2D91485F
GetWindow.USER32(?,00000005), ref: 2D91486A
SendMessageA.USER32(?,00000031,00000000,00000000,?,00000000), ref: 2D91488A
GetObjectW.GDI32(00000000,0000005C,?), ref: 2D91489A
SendMessageA.USER32(?,00000030,?,00000000,?,00000000), ref: 2D9148D0
GetWindow.USER32(?,00000002), ref: 2D9148DA

Strings

@, xrefs: 2D91473E
@, xrefs: 2D9147A0

Memory Dump Source

Source File: 0000000A.00000002.520302411.000000002D901000.00000020.00000001.01000000.00000007.sdmp, Offset: 2D900000, based on PE: true

Associated: 0000000A.00000002.520292586.000000002D900000.00000002.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000A.00000002.520318069.000000002D91E000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000A.00000002.520324941.000000002D922000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000A.00000002.520340216.000000002D923000.00000002.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_2d900000_MSWordServices.jbxd

Similarity

API ID: CreateFontIndirectMessageResourceSendWindowmemset$Item$CapsDeviceDialogFreeLoadLockObjectReleaseShow
String ID: @$@
API String ID: 1409219205-149943524
Opcode ID: a0fd4a1aa8b6ba80b60fe063f384394711ced11c32a902e94a3352ee0e8e5738
Instruction ID: 89abdf2f6322782d22728cbf4564ac66ac51b04a7df6c66b2b61880811c812a7
Opcode Fuzzy Hash: a0fd4a1aa8b6ba80b60fe063f384394711ced11c32a902e94a3352ee0e8e5738
Instruction Fuzzy Hash: D4615D7194426DAFEB229B64CC44BAEB7BCBF19745F0046E9F209F2290D774DA808F54

Function 2D9041B0 Relevance: 24.6, APIs: 6, Strings: 8, Instructions: 106threadCOMMON

Download Yara Rule

APIs

GetParent.USER32(?), ref: 2D9041EF
GetWindowThreadProcessId.USER32(?,?), ref: 2D9041FC
GetCurrentProcessId.KERNEL32 ref: 2D904202
GetLastError.KERNEL32 ref: 2D904225
GetLastError.KERNEL32(?,?,?,?,?,?), ref: 2D9042AB
SetLastError.KERNEL32(?), ref: 2D9042E5

Strings

Unknown, xrefs: 2D90429A
W, xrefs: 2D9041C3
t2ub, xrefs: 2D90426E
openas, xrefs: 2D904293
n2ub, xrefs: 2D9041CF
q2ub, xrefs: 2D9042D8
r2ub, xrefs: 2D90425D
o2ub, xrefs: 2D9042D1

Memory Dump Source

Source File: 0000000A.00000002.520302411.000000002D901000.00000020.00000001.01000000.00000007.sdmp, Offset: 2D900000, based on PE: true

Associated: 0000000A.00000002.520292586.000000002D900000.00000002.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000A.00000002.520318069.000000002D91E000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000A.00000002.520324941.000000002D922000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000A.00000002.520340216.000000002D923000.00000002.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_2d900000_MSWordServices.jbxd

Similarity

API ID: ErrorLast$Process$CurrentParentThreadWindow
String ID: Unknown$W$n2ub$o2ub$openas$q2ub$r2ub$t2ub
API String ID: 3874811631-1827479352
Opcode ID: 37ada805d5c00af0948ffbd8df15442a6d99bf406d06d9eba2c67b19ecf83cc4
Instruction ID: 41947df8c1eb715ffb53d282ed706134d259c844c660f4eabf08afad9e45ba05
Opcode Fuzzy Hash: 37ada805d5c00af0948ffbd8df15442a6d99bf406d06d9eba2c67b19ecf83cc4
Instruction Fuzzy Hash: 4731E471608605EFCB019FE9E888A9E7ABCFF16656B118069F611B7210C774CA40CF58

Function 2D909A90 Relevance: 21.2, APIs: 10, Strings: 2, Instructions: 180stringCOMMON

Download Yara Rule

APIs

_splitpath_s.MSVCR90 ref: 2D909ADD

Part of subcall function 2D908FD6: lstrlenA.KERNEL32(?), ref: 2D908FE3

_splitpath_s.MSVCR90 ref: 2D909B35
lstrlenA.KERNEL32(?), ref: 2D909B5F
_makepath_s.MSVCR90 ref: 2D909B8C
CloseHandle.KERNEL32(00000000), ref: 2D909BCE

Part of subcall function 2D908FD6: IsCharAlphaNumericA.USER32(?), ref: 2D909017

Part of subcall function 2D904609: _vsnprintf.MSVCR90 ref: 2D90463A

CharPrevA.USER32(?,?), ref: 2D909C00
lstrlenA.KERNEL32(?), ref: 2D909C53
_makepath_s.MSVCR90 ref: 2D909C81
GetLastError.KERNEL32 ref: 2D909CA1
CloseHandle.KERNEL32(00000000), ref: 2D909CCB

Strings

., xrefs: 2D909AF2
%s%x, xrefs: 2D909C37

Memory Dump Source

Source File: 0000000A.00000002.520302411.000000002D901000.00000020.00000001.01000000.00000007.sdmp, Offset: 2D900000, based on PE: true

Associated: 0000000A.00000002.520292586.000000002D900000.00000002.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000A.00000002.520318069.000000002D91E000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000A.00000002.520324941.000000002D922000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000A.00000002.520340216.000000002D923000.00000002.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_2d900000_MSWordServices.jbxd

Similarity

API ID: lstrlen$CharCloseHandle_makepath_s_splitpath_s$AlphaErrorLastNumericPrev_vsnprintf
String ID: %s%x$.
API String ID: 3070513225-3101762996
Opcode ID: 3965abbaed424ab7c2eafaead425d9a3bf544cf5cc7dc646d1de19f82559a9f2
Instruction ID: eabafec2e416802511d5388f295ba71cde55844b5f6b56f78e27640552c3855e
Opcode Fuzzy Hash: 3965abbaed424ab7c2eafaead425d9a3bf544cf5cc7dc646d1de19f82559a9f2
Instruction Fuzzy Hash: F96126B690412CAEDB219B64DD84FEBB7BCEF19246F0045E5F609F2141E6349F848F64

Function 2D9036BC Relevance: 21.0, APIs: 6, Strings: 6, Instructions: 45libraryloaderCOMMON

Download Yara Rule

APIs

GetModuleHandleA.KERNEL32(olmapi32.dll,?,2D903757), ref: 2D9036EB
GetProcAddress.KERNEL32(00000000,SetGuardValue,?,?,2D903757), ref: 2D903704
GetProcAddress.KERNEL32(00000000,GetGuardValue,?,?,2D903757), ref: 2D903711
GetProcAddress.KERNEL32(00000000,SetExemptValue,?,?,2D903757), ref: 2D90371E
GetProcAddress.KERNEL32(00000000,GetExemptValue,?,?,2D903757), ref: 2D90372B
GetProcAddress.KERNEL32(00000000,AssertGuardedAPIAllowed,?,?,2D903757), ref: 2D903738

Strings

GetExemptValue, xrefs: 2D903720
SetGuardValue, xrefs: 2D9036FE
olmapi32.dll, xrefs: 2D9036E6
SetExemptValue, xrefs: 2D903713
AssertGuardedAPIAllowed, xrefs: 2D90372D
GetGuardValue, xrefs: 2D903706

Memory Dump Source

Source File: 0000000A.00000002.520302411.000000002D901000.00000020.00000001.01000000.00000007.sdmp, Offset: 2D900000, based on PE: true

Associated: 0000000A.00000002.520292586.000000002D900000.00000002.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000A.00000002.520318069.000000002D91E000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000A.00000002.520324941.000000002D922000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000A.00000002.520340216.000000002D923000.00000002.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_2d900000_MSWordServices.jbxd

Similarity

API ID: AddressProc$HandleModule
String ID: AssertGuardedAPIAllowed$GetExemptValue$GetGuardValue$SetExemptValue$SetGuardValue$olmapi32.dll
API String ID: 667068680-308179802
Opcode ID: 62b679ed6aa77efef14523773aef01a76f171b5d2af1854abc80ec728db0170c
Instruction ID: 24d33a3a6a954f91ef391fc41aad8ae33574e15a4308a97a575279aedae12f7a
Opcode Fuzzy Hash: 62b679ed6aa77efef14523773aef01a76f171b5d2af1854abc80ec728db0170c
Instruction Fuzzy Hash: 91F031708093516AD7415BB9AC48B667FFCAE85A1A304009BF069F721AD6B89441CF55

Function 2D9036DC Relevance: 21.0, APIs: 6, Strings: 6, Instructions: 34libraryloaderCOMMON

Download Yara Rule

APIs

GetModuleHandleA.KERNEL32(olmapi32.dll,?,2D903757), ref: 2D9036EB
GetProcAddress.KERNEL32(00000000,SetGuardValue,?,?,2D903757), ref: 2D903704
GetProcAddress.KERNEL32(00000000,GetGuardValue,?,?,2D903757), ref: 2D903711
GetProcAddress.KERNEL32(00000000,SetExemptValue,?,?,2D903757), ref: 2D90371E
GetProcAddress.KERNEL32(00000000,GetExemptValue,?,?,2D903757), ref: 2D90372B
GetProcAddress.KERNEL32(00000000,AssertGuardedAPIAllowed,?,?,2D903757), ref: 2D903738

Strings

GetExemptValue, xrefs: 2D903720
SetGuardValue, xrefs: 2D9036FE
olmapi32.dll, xrefs: 2D9036E6
SetExemptValue, xrefs: 2D903713
AssertGuardedAPIAllowed, xrefs: 2D90372D
GetGuardValue, xrefs: 2D903706

Memory Dump Source

Source File: 0000000A.00000002.520302411.000000002D901000.00000020.00000001.01000000.00000007.sdmp, Offset: 2D900000, based on PE: true

Associated: 0000000A.00000002.520292586.000000002D900000.00000002.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000A.00000002.520318069.000000002D91E000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000A.00000002.520324941.000000002D922000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000A.00000002.520340216.000000002D923000.00000002.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_2d900000_MSWordServices.jbxd

Similarity

API ID: AddressProc$HandleModule
String ID: AssertGuardedAPIAllowed$GetExemptValue$GetGuardValue$SetExemptValue$SetGuardValue$olmapi32.dll
API String ID: 667068680-308179802
Opcode ID: d985bf180804a332c1b4056dc46b9c3ae342a4a2046cbd88a1e674ffaa4621f7
Instruction ID: d3cd0a31c918bd5481efdd273efc0cf3e123238a02e9d2ac0241770651061a37
Opcode Fuzzy Hash: d985bf180804a332c1b4056dc46b9c3ae342a4a2046cbd88a1e674ffaa4621f7
Instruction Fuzzy Hash: BBF03A708093256AD3405BB9EC8CF66BEFCAFD5E26B00049BB029F7315D7B89540CE58

Function 2D90BCEB Relevance: 19.6, APIs: 13, Instructions: 138COMMON

Download Yara Rule

APIs

GetWindowRect.USER32(?,?), ref: 2D90BD3B
EnableWindow.USER32(?,00000001), ref: 2D90BD49
DeferWindowPos.USER32(?,?,00000000,?,?,00000000,00000000,0000000D), ref: 2D90BD63
EnableWindow.USER32(?,00000001), ref: 2D90BD6D
DeferWindowPos.USER32(?,?,00000000,?,?,00000000,00000000,0000000D), ref: 2D90BD92
ShowWindow.USER32(?,00000000), ref: 2D90BDB0
EnableWindow.USER32(?,00000000), ref: 2D90BDBD
ShowWindow.USER32(?,00000000), ref: 2D90BDCA
EnableWindow.USER32(?,00000000), ref: 2D90BDD7
DeferWindowPos.USER32(?,?,00000000,?,?,00000000,00000000,0000000D), ref: 2D90BE1E
DeferWindowPos.USER32(?,?,00000000,?,?,00000000,00000000,0000000D), ref: 2D90BE3D
DeferWindowPos.USER32(?,?,00000000,?,?,00000000,00000000,0000000D), ref: 2D90BE59
DeferWindowPos.USER32(?,?,00000000,00000000,?,?,?,0000000C), ref: 2D90BE86

Memory Dump Source

Source File: 0000000A.00000002.520302411.000000002D901000.00000020.00000001.01000000.00000007.sdmp, Offset: 2D900000, based on PE: true

Associated: 0000000A.00000002.520292586.000000002D900000.00000002.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000A.00000002.520318069.000000002D91E000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000A.00000002.520324941.000000002D922000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000A.00000002.520340216.000000002D923000.00000002.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_2d900000_MSWordServices.jbxd

Similarity

API ID: Window$Defer$Enable$Show$Rect
String ID:
API String ID: 3661885419-0
Opcode ID: 3345416a3b0379520746129509a0c67cfd959339a6bd05ea05c01926597a56b1
Instruction ID: 8edafed14fd850d7830da9a0d866eb0ec102592977c88839eb2a7d54a3d5b5b3
Opcode Fuzzy Hash: 3345416a3b0379520746129509a0c67cfd959339a6bd05ea05c01926597a56b1
Instruction Fuzzy Hash: 1F51D4B5500609EFDB11DFA8CC84EEABBF9FF48345F004819FA6996260C771AD509F60

Function 2D909F94 Relevance: 19.6, APIs: 9, Strings: 2, Instructions: 365comfileCOMMON

Download Yara Rule

APIs

__EH_prolog3_GS.LIBCMT ref: 2D909F9E
ReadClassStg.OLE32(?,?), ref: 2D90A089
OleLoad.OLE32(?,2D9017D0,?,?), ref: 2D90A0D6
_strdup.MSVCR90(?), ref: 2D90A1DB
MultiByteToWideChar.KERNEL32(00000000,00000001,?,000000FF,?,00000104,?,00000000,?,?), ref: 2D90A250
GetClassFile.OLE32(00000000), ref: 2D90A25F
MultiByteToWideChar.KERNEL32(00000000,00000001,?,000000FF,?,00000104,2D9017D0,00000001,00000000,?,?,?), ref: 2D90A2C3
OleCreateLinkToFile.OLE32(00000000), ref: 2D90A2D2
OleSetContainedObject.OLE32(?,00000001), ref: 2D90A31A

Strings

Note, xrefs: 2D90A307, 2D90A30C, 2D90A30D
HrThreadFuncWaitOnClose, xrefs: 2D90A3D9

Memory Dump Source

Source File: 0000000A.00000002.520302411.000000002D901000.00000020.00000001.01000000.00000007.sdmp, Offset: 2D900000, based on PE: true

Associated: 0000000A.00000002.520292586.000000002D900000.00000002.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000A.00000002.520318069.000000002D91E000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000A.00000002.520324941.000000002D922000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000A.00000002.520340216.000000002D923000.00000002.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_2d900000_MSWordServices.jbxd

Similarity

API ID: ByteCharClassFileMultiWide$ContainedCreateH_prolog3_LinkLoadObjectRead_strdup
String ID: HrThreadFuncWaitOnClose$Note
API String ID: 1990140484-506705169
Opcode ID: 527cfd73ad145fee7a9f2ce0b80368a14ea800c9c66df0111ed991ffdf745231
Instruction ID: 5ac6870450f2ac43e651dda6c73184d887b06daa8697587527029e324e9fce1b
Opcode Fuzzy Hash: 527cfd73ad145fee7a9f2ce0b80368a14ea800c9c66df0111ed991ffdf745231
Instruction Fuzzy Hash: 30D12A71514228AFCB168B64DC88BAA77BDEF49701F1544E4F609FB251DB70AA81CBA0

Function 2D908587 Relevance: 19.6, APIs: 13, Instructions: 103windowCOMMON

Download Yara Rule

APIs

GetWindowRect.USER32(?,?), ref: 2D9085A1
ScreenToClient.USER32(?,?), ref: 2D9085AA
GetWindowRect.USER32(?,?), ref: 2D9085CB
ScreenToClient.USER32(?,?), ref: 2D9085D4
GetWindowRect.USER32(?,?), ref: 2D9085EE
ScreenToClient.USER32(?,?), ref: 2D908609
MoveWindow.USER32(?,?,?,?,?,00000000), ref: 2D908620
MoveWindow.USER32(?,?,?,?,00000001,00000000), ref: 2D908635
SendMessageA.USER32(?,0000000B,00000000,00000000), ref: 2D908643
SendMessageA.USER32(?,00000441,00000000,00000000), ref: 2D908654
SendMessageA.USER32(?,0000000B,00000001,00000000), ref: 2D908662
GetWindowRect.USER32(?,?), ref: 2D90866E
ScreenToClient.USER32(?,?), ref: 2D908677

Memory Dump Source

Source File: 0000000A.00000002.520302411.000000002D901000.00000020.00000001.01000000.00000007.sdmp, Offset: 2D900000, based on PE: true

Associated: 0000000A.00000002.520292586.000000002D900000.00000002.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000A.00000002.520318069.000000002D91E000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000A.00000002.520324941.000000002D922000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000A.00000002.520340216.000000002D923000.00000002.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_2d900000_MSWordServices.jbxd

Similarity

API ID: Window$ClientRectScreen$MessageSend$Move
String ID:
API String ID: 442886372-0
Opcode ID: 23ae4b7e63a6aaa86fcfbf7edc3ad03d76d5053065282324be44eb23bc42eea7
Instruction ID: 78073372b002404ef1267e7e5d3590bab71c00f671c1bbba2546dbc33953e167
Opcode Fuzzy Hash: 23ae4b7e63a6aaa86fcfbf7edc3ad03d76d5053065282324be44eb23bc42eea7
Instruction Fuzzy Hash: C841CF76900609AFDB12DFA8DA45BDEBBF9FF08701F204465F611B2260D772AA109F14

Function 2D90F1BA Relevance: 19.4, APIs: 8, Strings: 3, Instructions: 126registryCOMMON

Download Yara Rule

APIs

RegOpenKeyExA.ADVAPI32(80000001,?,00000000,00000001,?), ref: 2D90F246
RegQueryValueExA.ADVAPI32 ref: 2D90F26D
RegCloseKey.ADVAPI32(?), ref: 2D90F29F
RegOpenKeyExA.ADVAPI32(80000001,?,00000000,00000001,?), ref: 2D90F2DA
RegQueryValueExA.ADVAPI32 ref: 2D90F301
GetSystemDefaultLCID.KERNEL32 ref: 2D90F31B
RegCloseKey.ADVAPI32(?), ref: 2D90F32F
GetSystemDefaultLCID.KERNEL32 ref: 2D90F337

Strings

Software\Policies\Microsoft\Office\14.0\Common\LanguageResources, xrefs: 2D90F1D2
Software\Microsoft\Office\14.0\Common\LanguageResources, xrefs: 2D90F1F2
UILanguage, xrefs: 2D90F1FC

Memory Dump Source

Source File: 0000000A.00000002.520302411.000000002D901000.00000020.00000001.01000000.00000007.sdmp, Offset: 2D900000, based on PE: true

Associated: 0000000A.00000002.520292586.000000002D900000.00000002.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000A.00000002.520318069.000000002D91E000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000A.00000002.520324941.000000002D922000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000A.00000002.520340216.000000002D923000.00000002.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_2d900000_MSWordServices.jbxd

Similarity

API ID: CloseDefaultOpenQuerySystemValue
String ID: Software\Microsoft\Office\14.0\Common\LanguageResources$Software\Policies\Microsoft\Office\14.0\Common\LanguageResources$UILanguage
API String ID: 1931360540-2478438763
Opcode ID: 132b856d46d4c165ca4ae1cafc131528d5be3bd5cfbb9cec9d53303db8a367e7
Instruction ID: 293359d5bc593bd8653cab71d29e13fa92cd562075f4eba91f41575c89da9b86
Opcode Fuzzy Hash: 132b856d46d4c165ca4ae1cafc131528d5be3bd5cfbb9cec9d53303db8a367e7
Instruction Fuzzy Hash: 4651E175A042289FEB22CE64D981FEAB7BDBF49751F0040D6F608EA281D7709A85CF51

Function 2D9183CC Relevance: 19.4, APIs: 6, Strings: 5, Instructions: 116libraryloaderCOMMON

Download Yara Rule

APIs

GetSystemDirectoryW.KERNEL32(?,00000105), ref: 2D9183F5
LoadLibraryExW.KERNEL32(?,00000000,00000008,msi.dll,?,00000106), ref: 2D91844A
LoadLibraryW.KERNEL32(msi.dll), ref: 2D918457
GetProcAddress.KERNEL32(00000000,MsiGetProductCodeW), ref: 2D918473
GetProcAddress.KERNEL32(00000000,MsiProvideQualifiedComponentExW), ref: 2D918481

Strings

MsiProvideQualifiedComponentExW, xrefs: 2D918475
msi.dll, xrefs: 2D918435, 2D91843A, 2D918456
MsiGetProductCodeW, xrefs: 2D91846D
{1E77DE88-BCAB-4C37-B9E5-073AF52DFD7A}, xrefs: 2D918496, 2D9184D5, 2D918504
mso14.dll, xrefs: 2D918491, 2D9184D4, 2D918503

Memory Dump Source

Source File: 0000000A.00000002.520302411.000000002D901000.00000020.00000001.01000000.00000007.sdmp, Offset: 2D900000, based on PE: true

Associated: 0000000A.00000002.520292586.000000002D900000.00000002.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000A.00000002.520318069.000000002D91E000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000A.00000002.520324941.000000002D922000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000A.00000002.520340216.000000002D923000.00000002.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_2d900000_MSWordServices.jbxd

Similarity

API ID: AddressLibraryLoadProc$DirectorySystem
String ID: MsiGetProductCodeW$MsiProvideQualifiedComponentExW$msi.dll$mso14.dll${1E77DE88-BCAB-4C37-B9E5-073AF52DFD7A}
API String ID: 2381529825-3601640118
Opcode ID: 6977e3e198769d7077fe74d73a91887ce28f8f0f45b498c95d08f31d889c3b8f
Instruction ID: b3483526e07d66f5b97aa0f1c2b3b81ef6cf52152e227668de164e5e13782856
Opcode Fuzzy Hash: 6977e3e198769d7077fe74d73a91887ce28f8f0f45b498c95d08f31d889c3b8f
Instruction Fuzzy Hash: 764183B190412CABDB119BA4DCC8ABE77BCEF49345F4044EAF349E7140EB308A848F25

Function 2D90BFE9 Relevance: 18.2, APIs: 12, Instructions: 158windowCOMMON

Download Yara Rule

APIs

GetWindowRect.USER32(?,?), ref: 2D90C02A
ScreenToClient.USER32(?,?), ref: 2D90C033
MoveWindow.USER32(?,?,?,?,00000001,00000000), ref: 2D90C04C

Part of subcall function 2D90BCEB: GetWindowRect.USER32(?,?), ref: 2D90BD3B
Part of subcall function 2D90BCEB: EnableWindow.USER32(?,00000001), ref: 2D90BD49
Part of subcall function 2D90BCEB: DeferWindowPos.USER32(?,?,00000000,?,?,00000000,00000000,0000000D), ref: 2D90BD63
Part of subcall function 2D90BCEB: EnableWindow.USER32(?,00000001), ref: 2D90BD6D
Part of subcall function 2D90BCEB: DeferWindowPos.USER32(?,?,00000000,?,?,00000000,00000000,0000000D), ref: 2D90BD92
Part of subcall function 2D90BCEB: DeferWindowPos.USER32(?,?,00000000,?,?,00000000,00000000,0000000D), ref: 2D90BE1E
Part of subcall function 2D90BCEB: DeferWindowPos.USER32(?,?,00000000,?,?,00000000,00000000,0000000D), ref: 2D90BE3D

GetWindowRect.USER32(?,?), ref: 2D90C0AB
MoveWindow.USER32(?,?,?,?,?,00000000), ref: 2D90C0DD
SendMessageA.USER32(?,00000441,00000000,00000000), ref: 2D90C0ED
SendMessageA.USER32(?,0000000B,00000000,00000000), ref: 2D90C16A
BeginDeferWindowPos.USER32 ref: 2D90C16E
DeferWindowPos.USER32(00000000,?,00000000,?,?,?,?,0000000C), ref: 2D90C18E
EndDeferWindowPos.USER32(?), ref: 2D90C1B7
SendMessageA.USER32(?,0000000B,00000001,00000000), ref: 2D90C1C6
RedrawWindow.USER32(?,00000000,00000000,00000585), ref: 2D90C1D4

Memory Dump Source

Source File: 0000000A.00000002.520302411.000000002D901000.00000020.00000001.01000000.00000007.sdmp, Offset: 2D900000, based on PE: true

Associated: 0000000A.00000002.520292586.000000002D900000.00000002.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000A.00000002.520318069.000000002D91E000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000A.00000002.520324941.000000002D922000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000A.00000002.520340216.000000002D923000.00000002.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_2d900000_MSWordServices.jbxd

Similarity

API ID: Window$Defer$MessageRectSend$EnableMove$BeginClientRedrawScreen
String ID:
API String ID: 245351979-0
Opcode ID: 8b4aea7004e398fb5591cf69386e59141ba8b570db8387a0f59e28403605cb85
Instruction ID: 086b85be6be34a8e5ad13bb205fd43b9bb1e83b347e7361db97b7013478d08bd
Opcode Fuzzy Hash: 8b4aea7004e398fb5591cf69386e59141ba8b570db8387a0f59e28403605cb85
Instruction Fuzzy Hash: 16511972600A05AFDB25DF64DD89FAABBF5FF08701F104919F696E6690C771A910CF04

Function 690805DE Relevance: 17.8, APIs: 9, Strings: 1, Instructions: 273COMMONLIBRARYCODE

Download Yara Rule

APIs

Part of subcall function 69080297: CreateFileW.KERNEL32(?,00000000,?,69080687,?,?,00000000), ref: 690802B4

GetLastError.KERNEL32 ref: 690806F2
__dosmaperr.LIBCMT ref: 690806F9
GetFileType.KERNEL32 ref: 69080705
GetLastError.KERNEL32 ref: 6908070F
__dosmaperr.LIBCMT ref: 69080718
CloseHandle.KERNEL32(00000000), ref: 69080738
CloseHandle.KERNEL32(690785C2), ref: 69080885
GetLastError.KERNEL32 ref: 690808B7
__dosmaperr.LIBCMT ref: 690808BE

Strings

H, xrefs: 69080843

Memory Dump Source

Source File: 0000000A.00000002.520354624.0000000069051000.00000020.00000001.01000000.00000008.sdmp, Offset: 69050000, based on PE: true

Associated: 0000000A.00000002.520346406.0000000069050000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000A.00000002.520370595.0000000069084000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000A.00000002.520384600.0000000069094000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000A.00000002.520394111.00000000690BC000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000A.00000002.520406416.00000000690BD000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_69050000_MSWordServices.jbxd

Similarity

API ID: ErrorLast__dosmaperr$CloseFileHandle$CreateType
String ID: H
API String ID: 4237864984-2852464175
Opcode ID: af1abfcda2de4ba1b099cc91fc08eb0c886f7a28a27527a6edd1c8b1d5988de9
Instruction ID: 6af2aada1b6db00b8cf056da5b07f6447a295611813e658ed78c3ef70b31b020
Opcode Fuzzy Hash: af1abfcda2de4ba1b099cc91fc08eb0c886f7a28a27527a6edd1c8b1d5988de9
Instruction Fuzzy Hash: A9A12332B195989FCF09CF68C991BEE3BF1AB47324F140959E811EF290DB358852CB91

Function 2D90F729 Relevance: 17.7, APIs: 6, Strings: 4, Instructions: 171stringwindowCOMMON

Download Yara Rule

APIs

lstrlenW.KERNEL32(?), ref: 2D90F7D8
GetACP.KERNEL32(00000000,?,000000FF,?,000001FC), ref: 2D90F7F2
MultiByteToWideChar.KERNEL32(00000000), ref: 2D90F7F9
GetModuleHandleW.KERNEL32(mso.dll), ref: 2D90F8C8
MessageBoxW.USER32 ref: 2D90F923
CallNextHookEx.USER32(?,?,?), ref: 2D90F93C

Strings

mso.dll, xrefs: 2D90F8C3
%ld - [%08lX:%08lX], xrefs: 2D90F855
%ld - [%08lX], xrefs: 2D90F87D
[%08lX], xrefs: 2D90F8A2

Memory Dump Source

Source File: 0000000A.00000002.520302411.000000002D901000.00000020.00000001.01000000.00000007.sdmp, Offset: 2D900000, based on PE: true

Associated: 0000000A.00000002.520292586.000000002D900000.00000002.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000A.00000002.520318069.000000002D91E000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000A.00000002.520324941.000000002D922000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000A.00000002.520340216.000000002D923000.00000002.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_2d900000_MSWordServices.jbxd

Similarity

API ID: ByteCallCharHandleHookMessageModuleMultiNextWidelstrlen
String ID: %ld - [%08lX:%08lX]$%ld - [%08lX]$[%08lX]$mso.dll
API String ID: 3435520019-1696869425
Opcode ID: 10960b42924ae7277c76bf64820cab7083cb394c759fb7813aeaaa27cd0f2574
Instruction ID: b959639cde48b81f42f1a342ee58a0e52b28aaf464ebb9537383cb0a5a846bc9
Opcode Fuzzy Hash: 10960b42924ae7277c76bf64820cab7083cb394c759fb7813aeaaa27cd0f2574
Instruction Fuzzy Hash: B451BFB2904204AFEB068F34DD44FBA33BDEB84702F1085A5FB15F2292D635DA45CB58

Function 2D903FCE Relevance: 17.6, APIs: 9, Strings: 1, Instructions: 141COMMON

Download Yara Rule

APIs

MonitorFromWindow.USER32(?,00000002), ref: 2D903FF3
GetMonitorInfoA.USER32(00000000,00000028), ref: 2D904002
SystemParametersInfoA.USER32(00000030,00000000,?,00000000), ref: 2D904020
GetWindowRect.USER32(00000000,?), ref: 2D90403A
GetWindowRect.USER32(?,?), ref: 2D90404F
OffsetRect.USER32 ref: 2D904071
OffsetRect.USER32 ref: 2D904083
OffsetRect.USER32 ref: 2D904095
SetWindowPos.USER32(?,00000000,?,00000000,00000000,00000000,00000015), ref: 2D9040F3

Strings

(, xrefs: 2D903FE2

Memory Dump Source

Source File: 0000000A.00000002.520302411.000000002D901000.00000020.00000001.01000000.00000007.sdmp, Offset: 2D900000, based on PE: true

Associated: 0000000A.00000002.520292586.000000002D900000.00000002.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000A.00000002.520318069.000000002D91E000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000A.00000002.520324941.000000002D922000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000A.00000002.520340216.000000002D923000.00000002.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_2d900000_MSWordServices.jbxd

Similarity

API ID: Rect$Window$Offset$InfoMonitor$FromParametersSystem
String ID: (
API String ID: 4041948150-3887548279
Opcode ID: 4d6f305410a372769d49a28cc02394a19e0378d7437ee1542f948d9c02d8e404
Instruction ID: a8dd4cae3b913b64d94ad414a5862a19d5ae933ef92c9d0bfe81671aa19c6c63
Opcode Fuzzy Hash: 4d6f305410a372769d49a28cc02394a19e0378d7437ee1542f948d9c02d8e404
Instruction Fuzzy Hash: D0411572900129AFDF01DEA8DC49EEEB7BDFF0A312F018615F905F7180D674AA05CAA0

Function 2D907F1D Relevance: 15.9, APIs: 8, Strings: 1, Instructions: 167COMMON

Download Yara Rule

APIs

GetSysColor.USER32(0000000F), ref: 2D907F43

Strings

ToolbarWindow32, xrefs: 2D907FA2

Memory Dump Source

Source File: 0000000A.00000002.520302411.000000002D901000.00000020.00000001.01000000.00000007.sdmp, Offset: 2D900000, based on PE: true

Associated: 0000000A.00000002.520292586.000000002D900000.00000002.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000A.00000002.520318069.000000002D91E000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000A.00000002.520324941.000000002D922000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000A.00000002.520340216.000000002D923000.00000002.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_2d900000_MSWordServices.jbxd

Similarity

API ID: Color
String ID: ToolbarWindow32
API String ID: 2811717613-4104838417
Opcode ID: ada06aa2f9a5b05bfb3c21acb456ae2470962cdc98066887e4efd5248a990b91
Instruction ID: 3a5a7bf37956139e583281c8ec12bc5567a9d9b8806be2003c359fac9e9b2377
Opcode Fuzzy Hash: ada06aa2f9a5b05bfb3c21acb456ae2470962cdc98066887e4efd5248a990b91
Instruction Fuzzy Hash: 3F51B1B1E4438CAEEB119FA88881BEEBFB9EF59744F40446DF185B7282C6710805CB25

Function 2D916050 Relevance: 15.8, APIs: 6, Strings: 3, Instructions: 73libraryloaderCOMMON

Download Yara Rule

APIs

GetVersion.KERNEL32 ref: 2D916055
LoadCursorA.USER32(00000000,00007F02), ref: 2D9160C7
LoadCursorA.USER32(00000000,00007F00), ref: 2D9160D2
GetModuleHandleA.KERNEL32(USER32.DLL), ref: 2D9160E4
GetProcAddress.KERNEL32(00000000,SetScrollInfo), ref: 2D9160F8
GetProcAddress.KERNEL32(00000000,GetScrollInfo), ref: 2D916103

Strings

SetScrollInfo, xrefs: 2D9160F2
USER32.DLL, xrefs: 2D9160DF
GetScrollInfo, xrefs: 2D9160FA

Memory Dump Source

Source File: 0000000A.00000002.520302411.000000002D901000.00000020.00000001.01000000.00000007.sdmp, Offset: 2D900000, based on PE: true

Associated: 0000000A.00000002.520292586.000000002D900000.00000002.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000A.00000002.520318069.000000002D91E000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000A.00000002.520324941.000000002D922000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000A.00000002.520340216.000000002D923000.00000002.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_2d900000_MSWordServices.jbxd

Similarity

API ID: AddressCursorLoadProc$HandleModuleVersion
String ID: GetScrollInfo$SetScrollInfo$USER32.DLL
API String ID: 3295075773-1004610577
Opcode ID: 30bbd1f8a5f0fffbc7f5f4a03f3c22286d5e8cf97813501f04c30e67bad3db47
Instruction ID: c0f0a7db504faf64bce2c56458f6f2a949cfcac8e871a2cd31abbb0337c0e976
Opcode Fuzzy Hash: 30bbd1f8a5f0fffbc7f5f4a03f3c22286d5e8cf97813501f04c30e67bad3db47
Instruction Fuzzy Hash: 2711E4B1A187518FC7689F7A98C052ABAE9FF8A702341493EF18BE3B01D634E4048F54

Function 2D910444 Relevance: 15.2, APIs: 10, Instructions: 228stringCOMMON

Download Yara Rule

APIs

IsBadReadPtr.KERNEL32(?,00000004), ref: 2D910454
lstrlenW.KERNEL32(?,00000007,?), ref: 2D9105C3
lstrlenW.KERNEL32(?), ref: 2D9105D1
GetACP.KERNEL32(00000000,?,000000FF,?,?,00000000,00000000,-00000013,?), ref: 2D91068B
WideCharToMultiByte.KERNEL32(00000000), ref: 2D910694
GetACP.KERNEL32(00000000,?,000000FF,?,?,00000000,00000000), ref: 2D9106C0
WideCharToMultiByte.KERNEL32(00000000), ref: 2D9106C3

Memory Dump Source

Source File: 0000000A.00000002.520302411.000000002D901000.00000020.00000001.01000000.00000007.sdmp, Offset: 2D900000, based on PE: true

Associated: 0000000A.00000002.520292586.000000002D900000.00000002.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000A.00000002.520318069.000000002D91E000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000A.00000002.520324941.000000002D922000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000A.00000002.520340216.000000002D923000.00000002.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_2d900000_MSWordServices.jbxd

Similarity

API ID: ByteCharMultiWidelstrlen$Read
String ID:
API String ID: 3283085596-0
Opcode ID: 7d6aff3950b0bfcb1c3a8e27d5d92c261c3b5cac771b819eebdb0a3926cdf814
Instruction ID: f15df296af4c50eaf65f913f5a7af72f916b637c2994aa750f24380e4e1aa737
Opcode Fuzzy Hash: 7d6aff3950b0bfcb1c3a8e27d5d92c261c3b5cac771b819eebdb0a3926cdf814
Instruction Fuzzy Hash: CB911975A04109EFCB05CF99C980EA9BBF9FF48314B258199E908BB251D736EE41DF50

Function 2D908C62 Relevance: 15.1, APIs: 10, Instructions: 138fileCOMMON

Download Yara Rule

APIs

__EH_prolog3_catch.LIBCMT ref: 2D908C69
??_U@YAPAXI@Z.MSVCR90(00001000,00000030,2D909EEC,00000000,?,?,00000014,2D90A4D2), ref: 2D908CA0

Part of subcall function 2D913812: Mailbox.LIBCMT ref: 2D9159AE

Part of subcall function 2D906995: LoadCursorA.USER32(00000000,?), ref: 2D9069A0
Part of subcall function 2D906995: SetCursor.USER32(00000000), ref: 2D9069A7

SetCursor.USER32(2D90224C), ref: 2D908CF7
??_V@YAXPAX@Z.MSVCR90(?), ref: 2D908D03
GetLastError.KERNEL32 ref: 2D908D3F
ReadFile.KERNEL32(?,?,00001000,?,00000000), ref: 2D908DA9
GetLastError.KERNEL32 ref: 2D908DB5
CloseHandle.KERNEL32(000000FF), ref: 2D908DC9
SetCursor.USER32(2D90224C), ref: 2D908DD2
??_V@YAXPAX@Z.MSVCR90(?), ref: 2D908DDE

Part of subcall function 2D910293: LoadStringW.USER32(?,?,?,00000200), ref: 2D910398

Memory Dump Source

Source File: 0000000A.00000002.520302411.000000002D901000.00000020.00000001.01000000.00000007.sdmp, Offset: 2D900000, based on PE: true

Associated: 0000000A.00000002.520292586.000000002D900000.00000002.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000A.00000002.520318069.000000002D91E000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000A.00000002.520324941.000000002D922000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000A.00000002.520340216.000000002D923000.00000002.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_2d900000_MSWordServices.jbxd

Similarity

API ID: Cursor$ErrorLastLoad$CloseFileH_prolog3_catchHandleMailboxReadString
String ID:
API String ID: 318333782-0
Opcode ID: 8c9b1efe14ed6a9fa25f76856d9ceba0fe64fcc6903582ed3a8ad51c6b50596f
Instruction ID: 3a33f23ccd2bf768bdcc94e77fd89f2c3b14fc0235c05c1a00a43383cd24d7b7
Opcode Fuzzy Hash: 8c9b1efe14ed6a9fa25f76856d9ceba0fe64fcc6903582ed3a8ad51c6b50596f
Instruction Fuzzy Hash: A3513770A04209EFDB059FA4E888AADBB79FF19311F208659F615BB290C7348A44CF60

Function 2D918822 Relevance: 14.1, APIs: 4, Strings: 4, Instructions: 67registrylibraryCOMMON

Download Yara Rule

APIs

RegOpenKeyExW.ADVAPI32 ref: 2D918862
RegQueryValueExW.ADVAPI32(?,CommonFilesDir,00000000,00000000,?,0000020A), ref: 2D91888C
RegCloseKey.ADVAPI32(?), ref: 2D9188A2
LoadLibraryW.KERNEL32(?,\Microsoft Shared\office14\mso.dll,?,00000105), ref: 2D9188E1

Strings

mso.dll, xrefs: 2D9188ED
Software\Microsoft\Windows\CurrentVersion, xrefs: 2D918846
CommonFilesDir, xrefs: 2D918881
\Microsoft Shared\office14\mso.dll, xrefs: 2D9188D0

Memory Dump Source

Source File: 0000000A.00000002.520302411.000000002D901000.00000020.00000001.01000000.00000007.sdmp, Offset: 2D900000, based on PE: true

Associated: 0000000A.00000002.520292586.000000002D900000.00000002.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000A.00000002.520318069.000000002D91E000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000A.00000002.520324941.000000002D922000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000A.00000002.520340216.000000002D923000.00000002.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_2d900000_MSWordServices.jbxd

Similarity

API ID: CloseLibraryLoadOpenQueryValue
String ID: CommonFilesDir$Software\Microsoft\Windows\CurrentVersion$\Microsoft Shared\office14\mso.dll$mso.dll
API String ID: 3751545530-1101215619
Opcode ID: 216fb61daa059beb53ece31121cddeadd1a2cf8b525c3289339b28d5a499e02e
Instruction ID: 4743cacc8ed4975c76c59544444664f26894086de994a19ff1b859d6f067be3f
Opcode Fuzzy Hash: 216fb61daa059beb53ece31121cddeadd1a2cf8b525c3289339b28d5a499e02e
Instruction Fuzzy Hash: 9E215E31A4522DAAD711AB64DCCDAEEB6BCEF54741F0000E5F509F2151DA709A849B94

Function 2D90381E Relevance: 14.1, APIs: 6, Strings: 2, Instructions: 55libraryloaderCOMMONLIBRARYCODE

Download Yara Rule

APIs

GetVersion.KERNEL32 ref: 2D903837
GetFileAttributesW.KERNEL32(???.???), ref: 2D903842
GetModuleHandleA.KERNEL32(Unicows.dll), ref: 2D90384D
GetProcAddress.KERNEL32(00000000,?), ref: 2D903875
GetVersion.KERNEL32 ref: 2D903888
GetProcAddress.KERNEL32(00000000,?), ref: 2D9038A8

Strings

Unicows.dll, xrefs: 2D903848
???.???, xrefs: 2D90383D

Memory Dump Source

Source File: 0000000A.00000002.520302411.000000002D901000.00000020.00000001.01000000.00000007.sdmp, Offset: 2D900000, based on PE: true

Associated: 0000000A.00000002.520292586.000000002D900000.00000002.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000A.00000002.520318069.000000002D91E000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000A.00000002.520324941.000000002D922000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000A.00000002.520340216.000000002D923000.00000002.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_2d900000_MSWordServices.jbxd

Similarity

API ID: AddressProcVersion$AttributesFileHandleModule
String ID: ???.???$Unicows.dll
API String ID: 3183861727-2162356649
Opcode ID: 44847425b30f37ac4f91d70a63e917a2815d0a834fdc3d4ad2accee2834e2503
Instruction ID: 9bd799f1133dcd13654d3ee30c0ee5741643ca4f1e87455abab82c0c11e583a8
Opcode Fuzzy Hash: 44847425b30f37ac4f91d70a63e917a2815d0a834fdc3d4ad2accee2834e2503
Instruction Fuzzy Hash: DC111C7160820AEFEB419FE9E948B59BBFCAF04756B1480A6F944F7211D778E910CF14

Function 2D905300 Relevance: 13.7, APIs: 9, Instructions: 155windowCOMMON

Download Yara Rule

APIs

__EH_prolog3_catch.LIBCMT ref: 2D905307

Part of subcall function 2D9050C9: GetModuleHandleW.KERNEL32(KERNEL32), ref: 2D9050CF
Part of subcall function 2D9050C9: GetProcAddress.KERNEL32(00000000,SetProcessDEPPolicy), ref: 2D9050E9
Part of subcall function 2D9050C9: GetProcAddress.KERNEL32(00000000,GetSystemDEPPolicy), ref: 2D9050F3
Part of subcall function 2D9050C9: SetProcessDEPPolicy.KERNEL32(00000001), ref: 2D905106

malloc.MSVCR90 ref: 2D90533A
malloc.MSVCR90 ref: 2D90534B
LoadStringW.USER32(000089E8,00000100), ref: 2D905378
LoadStringW.USER32(000089E9,00000100), ref: 2D905394
CoBuildVersion.OLE32 ref: 2D90539E
CoRegisterClassObject.OLE32(2D901870,00000000,00000004,00000001,?), ref: 2D90542A

Part of subcall function 2D9107A6: malloc.MSVCR90 ref: 2D9107AD
Part of subcall function 2D9107A6: memset.MSVCR90 ref: 2D9107C5

CoRegisterClassObject.OLE32(2D901880,00000000,00000004,00000001,?), ref: 2D90548A
LoadIconA.USER32(000088B8), ref: 2D9054D3

Memory Dump Source

Source File: 0000000A.00000002.520302411.000000002D901000.00000020.00000001.01000000.00000007.sdmp, Offset: 2D900000, based on PE: true

Associated: 0000000A.00000002.520292586.000000002D900000.00000002.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000A.00000002.520318069.000000002D91E000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000A.00000002.520324941.000000002D922000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000A.00000002.520340216.000000002D923000.00000002.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_2d900000_MSWordServices.jbxd

Similarity

API ID: Loadmalloc$AddressClassObjectProcRegisterString$BuildH_prolog3_catchHandleIconModulePolicyProcessVersionmemset
String ID:
API String ID: 1755118194-0
Opcode ID: 2d3ec395e4a3177e62ff30b7a5abd4904cecedd38a68c870c1025b5d8ad0c564
Instruction ID: 2d25fe9eee45262bc905d807f22adce187f23b2233da7d097aac84761842e51b
Opcode Fuzzy Hash: 2d3ec395e4a3177e62ff30b7a5abd4904cecedd38a68c870c1025b5d8ad0c564
Instruction Fuzzy Hash: 4A51E271508305EBEB419BB49844BBE77F9EF55702F214469F644F7281DB74DA408B21

Function 69061920 Relevance: 13.7, APIs: 9, Instructions: 154memoryCOMMONLIBRARYCODE

Download Yara Rule

APIs

MultiByteToWideChar.KERNEL32(00000000,00000000,6905CF5A,6905CF5C,00000000,00000000,358B5801,?,?,?,6905CF5A,00000000,?,69053AA5,6905CF5A,0000000C), ref: 690619A9
MultiByteToWideChar.KERNEL32(00000000,00000000,6905CF5A,?,00000000,00000000,?,6905CF5A,00000000,?,69053AA5,6905CF5A), ref: 69061A24
SysAllocString.OLEAUT32(00000000), ref: 69061A2F
_com_issue_error.COMSUPP ref: 69061A58
_com_issue_error.COMSUPP ref: 69061A62
GetLastError.KERNEL32(80070057,358B5801,?,?,?,6905CF5A,00000000,?,69053AA5,6905CF5A,0000000C,?,6905CF5A), ref: 69061A67
_com_issue_error.COMSUPP ref: 69061A7A
GetLastError.KERNEL32(00000000,?,?,?,6905CF5A,00000000,?,69053AA5,6905CF5A,0000000C,?,6905CF5A), ref: 69061A90
_com_issue_error.COMSUPP ref: 69061AA3

Memory Dump Source

Source File: 0000000A.00000002.520354624.0000000069051000.00000020.00000001.01000000.00000008.sdmp, Offset: 69050000, based on PE: true

Associated: 0000000A.00000002.520346406.0000000069050000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000A.00000002.520370595.0000000069084000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000A.00000002.520384600.0000000069094000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000A.00000002.520394111.00000000690BC000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000A.00000002.520406416.00000000690BD000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_69050000_MSWordServices.jbxd

Similarity

API ID: _com_issue_error$ByteCharErrorLastMultiWide$AllocString
String ID:
API String ID: 1353541977-0
Opcode ID: fbfee36b6e2febb1d6d1c3949c34f4931362986c3c63718b445c102ffc8a24ca
Instruction ID: 2aa53a4729e5ffd8d09a62b32a537eace1bb30377e4e9b2335876e03345f3801
Opcode Fuzzy Hash: fbfee36b6e2febb1d6d1c3949c34f4931362986c3c63718b445c102ffc8a24ca
Instruction Fuzzy Hash: 67411875A04205ABDB40CFA8C944B9FBBE8FF4A755F108A2AE519E7290D7349540CBE0

Function 69065646 Relevance: 12.6, APIs: 4, Strings: 3, Instructions: 303COMMONLIBRARYCODE

Download Yara Rule

APIs

type_info::operator==.LIBVCRUNTIME ref: 69065765
___TypeMatch.LIBVCRUNTIME ref: 69065873
_UnwindNestedFrames.LIBCMT ref: 690659C5
CallUnexpected.LIBVCRUNTIME ref: 690659E0

Strings

csm, xrefs: 69065683
csm, xrefs: 690656F0
csm, xrefs: 6906579C

Memory Dump Source

Source File: 0000000A.00000002.520354624.0000000069051000.00000020.00000001.01000000.00000008.sdmp, Offset: 69050000, based on PE: true

Associated: 0000000A.00000002.520346406.0000000069050000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000A.00000002.520370595.0000000069084000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000A.00000002.520384600.0000000069094000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000A.00000002.520394111.00000000690BC000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000A.00000002.520406416.00000000690BD000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_69050000_MSWordServices.jbxd

Similarity

API ID: CallFramesMatchNestedTypeUnexpectedUnwindtype_info::operator==
String ID: csm$csm$csm
API String ID: 2751267872-393685449
Opcode ID: 590642f356d646bceb908d26e96d08a4f8e48b15bfb74b48edf72d2fec7dfed4
Instruction ID: 39952365bef5fa5e432b89fb796984c14d2098df4ed1d289446590ffea747f39
Opcode Fuzzy Hash: 590642f356d646bceb908d26e96d08a4f8e48b15bfb74b48edf72d2fec7dfed4
Instruction Fuzzy Hash: 8AB10B7980020AEFCF15CFA4D941B9EB7F5FF09324F14895AE815AB222D731DA51CBA1

Function 2D90C374 Relevance: 12.5, APIs: 6, Strings: 1, Instructions: 226windowCOMMON

Download Yara Rule

APIs

__EH_prolog3_catch.LIBCMT ref: 2D90C37B
DrawFocusRect.USER32 ref: 2D90C3D9
PatBlt.GDI32(?,?,?,?,?,00FF0062), ref: 2D90C421

Strings

..., xrefs: 2D90C45F

Memory Dump Source

Source File: 0000000A.00000002.520302411.000000002D901000.00000020.00000001.01000000.00000007.sdmp, Offset: 2D900000, based on PE: true

Associated: 0000000A.00000002.520292586.000000002D900000.00000002.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000A.00000002.520318069.000000002D91E000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000A.00000002.520324941.000000002D922000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000A.00000002.520340216.000000002D923000.00000002.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_2d900000_MSWordServices.jbxd

Similarity

API ID: DrawFocusH_prolog3_catchRect
String ID: ...
API String ID: 1217028765-440645147
Opcode ID: 4b5433648adc74883c94e9ba7dcdef1d2721f48189af49652e947fd006a42401
Instruction ID: 23d2428903ca5b6830f84d9eea88416188be3701de80b02045db9adb357f0400
Opcode Fuzzy Hash: 4b5433648adc74883c94e9ba7dcdef1d2721f48189af49652e947fd006a42401
Instruction Fuzzy Hash: 4E916970904249DFDB15CFA4C994AEEBBB8FF69305F21425CFA45B7291DB30AA09CB50

Function 2D9185D0 Relevance: 12.3, APIs: 4, Strings: 3, Instructions: 77registryCOMMON

Download Yara Rule

APIs

memset.MSVCR90 ref: 2D918605
RegOpenKeyExW.ADVAPI32 ref: 2D918659
RegQueryValueExW.ADVAPI32(000000FF,CommonFilesDir,00000000,00000000,?,0000020A), ref: 2D91867E

Part of subcall function 2D918540: LoadLibraryW.KERNEL32(?), ref: 2D9185BC

RegCloseKey.ADVAPI32(000000FF), ref: 2D9186CA

Strings

Microsoft Shared\office14\, xrefs: 2D91861A
Software\Microsoft\Windows\CurrentVersion, xrefs: 2D91864F
CommonFilesDir, xrefs: 2D918673

Memory Dump Source

Source File: 0000000A.00000002.520302411.000000002D901000.00000020.00000001.01000000.00000007.sdmp, Offset: 2D900000, based on PE: true

Associated: 0000000A.00000002.520292586.000000002D900000.00000002.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000A.00000002.520318069.000000002D91E000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000A.00000002.520324941.000000002D922000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000A.00000002.520340216.000000002D923000.00000002.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_2d900000_MSWordServices.jbxd

Similarity

API ID: CloseLibraryLoadOpenQueryValuememset
String ID: CommonFilesDir$Microsoft Shared\office14\$Software\Microsoft\Windows\CurrentVersion
API String ID: 79794857-3032397660
Opcode ID: d9982e49fd3fa10d6a5114e919757722acb031c7dd1bacdeae92f838a698a5d2
Instruction ID: b4aea192ed70e87ebfe89cf16d8e953831e82e2f60e2e6fa2d5170dadd6229e5
Opcode Fuzzy Hash: d9982e49fd3fa10d6a5114e919757722acb031c7dd1bacdeae92f838a698a5d2
Instruction Fuzzy Hash: F4215C7190822CAFDB12DB64DC84EEAB7BCEF18755F4001E5B549F2191DA309F858FA4

Function 2D90FB74 Relevance: 12.2, APIs: 8, Instructions: 194stringthreadCOMMON

Download Yara Rule

APIs

lstrlenW.KERNEL32(00000000,?,80000000), ref: 2D90FBFE
lstrlenA.KERNEL32(00000000,?,80000000), ref: 2D90FC06
LoadStringW.USER32(?,?,?,00000200), ref: 2D90FC79
GetACP.KERNEL32(00000000,00000201,000000FF,?,00000201,00000201,?,?,80000000), ref: 2D90FCEA
MultiByteToWideChar.KERNEL32(00000000), ref: 2D90FCF1
GetCurrentThreadId.KERNEL32(00000201,?,?,80000000), ref: 2D90FCF7
SetWindowsHookExW.USER32(000000FF,2D90F729,00000000,00000000), ref: 2D90FD06
UnhookWindowsHookEx.USER32 ref: 2D90FD70

Part of subcall function 2D90F61C: GetModuleHandleW.KERNEL32(mso.dll,?,2D90FBDC,?,00000201,?,?,80000000), ref: 2D90F624

Memory Dump Source

Source File: 0000000A.00000002.520302411.000000002D901000.00000020.00000001.01000000.00000007.sdmp, Offset: 2D900000, based on PE: true

Associated: 0000000A.00000002.520292586.000000002D900000.00000002.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000A.00000002.520318069.000000002D91E000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000A.00000002.520324941.000000002D922000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000A.00000002.520340216.000000002D923000.00000002.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_2d900000_MSWordServices.jbxd

Similarity

API ID: HookWindowslstrlen$ByteCharCurrentHandleLoadModuleMultiStringThreadUnhookWide
String ID:
API String ID: 4184960637-0
Opcode ID: 88ab69cd86a27c8b366f757d4d84e094b8a16ce2cd16767acf4f7beccdeabc34
Instruction ID: 1deb0af9742244eab07071e07ab31b57a73e7365b8edb2184dccf15185bee800
Opcode Fuzzy Hash: 88ab69cd86a27c8b366f757d4d84e094b8a16ce2cd16767acf4f7beccdeabc34
Instruction Fuzzy Hash: 33617C71904209EFCB01DFA4E985BAEBBB8FF08711F10456AFA15E7290C734DA54CB94

Function 2D9172DD Relevance: 12.1, APIs: 8, Instructions: 108COMMON

Download Yara Rule

APIs

??_V@YAXPAX@Z.MSVCR90(?,?,?,?,?,2D915264,?,000000FF,?,?,?,2D90A56B,?,?), ref: 2D9172FC
??_U@YAPAXI@Z.MSVCR90(?,?,?,?,?,2D915264,?,000000FF,?,?,?,2D90A56B,?,?), ref: 2D91731A
memset.MSVCR90 ref: 2D917326
memset.MSVCR90 ref: 2D91734F
??_U@YAPAXI@Z.MSVCR90(?,?,?,?,?,2D915264,?,000000FF,?,?,?,2D90A56B,?,?), ref: 2D91739F
memcpy.MSVCR90(00000000,?,?,?,?,?,?,?,2D915264,?,000000FF,?,?,?,2D90A56B,?), ref: 2D9173B1
memset.MSVCR90 ref: 2D9173C7
??_V@YAXPAX@Z.MSVCR90(?,?,00000000,?,00000000,?,?,?,?,?,?,?,2D915264,?,000000FF), ref: 2D9173CF

Memory Dump Source

Source File: 0000000A.00000002.520302411.000000002D901000.00000020.00000001.01000000.00000007.sdmp, Offset: 2D900000, based on PE: true

Associated: 0000000A.00000002.520292586.000000002D900000.00000002.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000A.00000002.520318069.000000002D91E000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000A.00000002.520324941.000000002D922000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000A.00000002.520340216.000000002D923000.00000002.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_2d900000_MSWordServices.jbxd

Similarity

API ID: memset$memcpy
String ID:
API String ID: 368790112-0
Opcode ID: cab2f0a68c08a215e292c57bf758677830bf06002173c9b7a8a0609d3745db6e
Instruction ID: 561eb56093e2ead9038c8610c33d4821759cb7febce55aee126aa9692495eaaf
Opcode Fuzzy Hash: cab2f0a68c08a215e292c57bf758677830bf06002173c9b7a8a0609d3745db6e
Instruction Fuzzy Hash: 8D31E8B160470ADFD7208F69DCC0E1BB3D9EF40254B20C92DF66AEB640D632E845CB50

Function 2D913210 Relevance: 12.1, APIs: 8, Instructions: 71COMMONLIBRARYCODE

Download Yara Rule

APIs

__EH_prolog3.LIBCMT ref: 2D913217
CloseHandle.KERNEL32(?), ref: 2D913234
Mailbox.LIBCMT ref: 2D913266
Mailbox.LIBCMT ref: 2D913277
Mailbox.LIBCMT ref: 2D913288
Mailbox.LIBCMT ref: 2D913299
Mailbox.LIBCMT ref: 2D9132AA
??3@YAXPAX@Z.MSVCR90(00000000,00000004,2D904F48,00000004,2D904F78), ref: 2D9132DE

Memory Dump Source

Source File: 0000000A.00000002.520302411.000000002D901000.00000020.00000001.01000000.00000007.sdmp, Offset: 2D900000, based on PE: true

Associated: 0000000A.00000002.520292586.000000002D900000.00000002.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000A.00000002.520318069.000000002D91E000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000A.00000002.520324941.000000002D922000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000A.00000002.520340216.000000002D923000.00000002.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_2d900000_MSWordServices.jbxd

Similarity

API ID: Mailbox$??3@CloseH_prolog3Handle
String ID:
API String ID: 1655960846-0
Opcode ID: 527c238c218aff494cc9f21b59d42d73631b0f32aaa55c879d5bfd2ec30ccbc6
Instruction ID: 6170f6fd445bc4a4e67da28905b73890f5bc6a7e6a9b11c3698a86e1a603a66c
Opcode Fuzzy Hash: 527c238c218aff494cc9f21b59d42d73631b0f32aaa55c879d5bfd2ec30ccbc6
Instruction Fuzzy Hash: 07217A34A0470AAFCB24AFB08090A6DBBF5FF64200F52096CE3D677681CB71E548CB91

Function 2D90F952 Relevance: 10.7, APIs: 5, Strings: 1, Instructions: 205COMMON

Download Yara Rule

APIs

isdigit.MSVCR90 ref: 2D90F9B4
isdigit.MSVCR90 ref: 2D90FB18

Strings

z, xrefs: 2D90FAD9

Memory Dump Source

Source File: 0000000A.00000002.520302411.000000002D901000.00000020.00000001.01000000.00000007.sdmp, Offset: 2D900000, based on PE: true

Associated: 0000000A.00000002.520292586.000000002D900000.00000002.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000A.00000002.520318069.000000002D91E000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000A.00000002.520324941.000000002D922000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000A.00000002.520340216.000000002D923000.00000002.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_2d900000_MSWordServices.jbxd

Similarity

API ID: isdigit
String ID: z
API String ID: 2326231117-1657960367
Opcode ID: 5dec7d677d88344a4b554e0faa595531041da70e60be6b71a5d68ace46f00471
Instruction ID: ce56be4de53224632536237ac47eec326bfe3001d136d5189e8e1cd03165aa9b
Opcode Fuzzy Hash: 5dec7d677d88344a4b554e0faa595531041da70e60be6b71a5d68ace46f00471
Instruction Fuzzy Hash: 30716E72904219EFCB01DFA5E844BAEB7B8FF85312F218596F951BB280E7349B51CB50

Function 2D90657A Relevance: 10.7, APIs: 5, Strings: 1, Instructions: 166windowCOMMON

Download Yara Rule

APIs

__EH_prolog3_catch_GS.LIBCMT ref: 2D906584

Part of subcall function 2D91127F: __EH_prolog3_catch.LIBCMT ref: 2D911286

Part of subcall function 2D90646A: GetWindowRect.USER32(?,?), ref: 2D90647F
Part of subcall function 2D90646A: ScreenToClient.USER32(?,?), ref: 2D90648C
Part of subcall function 2D90646A: MoveWindow.USER32(?,?,?,?,00000001,00000000), ref: 2D9064A2
Part of subcall function 2D90646A: SendMessageA.USER32(?,0000000B,00000000,00000000), ref: 2D9064D5
Part of subcall function 2D90646A: MoveWindow.USER32(?,00000000,?,?,?,00000001), ref: 2D9064EA
Part of subcall function 2D90646A: SendMessageA.USER32(?,0000000B,00000001,00000000), ref: 2D9064F8
Part of subcall function 2D90646A: RedrawWindow.USER32(?,00000000,00000000,00000585), ref: 2D906508

GetDlgItem.USER32(00000001,000088C2), ref: 2D9065CD

Part of subcall function 2D904745: _wcsicmp.MSVCR90 ref: 2D904757

EnableWindow.USER32(?,00000000), ref: 2D906778
SetWindowTextW.USER32(?,?), ref: 2D90679E
SetFocus.USER32 ref: 2D9067BA

Strings

IPM.Conflict.Message, xrefs: 2D9065E4

Memory Dump Source

Source File: 0000000A.00000002.520302411.000000002D901000.00000020.00000001.01000000.00000007.sdmp, Offset: 2D900000, based on PE: true

Associated: 0000000A.00000002.520292586.000000002D900000.00000002.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000A.00000002.520318069.000000002D91E000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000A.00000002.520324941.000000002D922000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000A.00000002.520340216.000000002D923000.00000002.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_2d900000_MSWordServices.jbxd

Similarity

API ID: Window$MessageMoveSend$ClientEnableFocusH_prolog3_catchH_prolog3_catch_ItemRectRedrawScreenText_wcsicmp
String ID: IPM.Conflict.Message
API String ID: 3324545711-3689180561
Opcode ID: 58cddbbfcf58ab93bcc43ab429e5ce6e9123e1343afcb445ae5658f2871278e6
Instruction ID: 65c6f4ce17f2013b9dbefa309d271aa6d511c51d61eb1dce6449d5ab8383d2cf
Opcode Fuzzy Hash: 58cddbbfcf58ab93bcc43ab429e5ce6e9123e1343afcb445ae5658f2871278e6
Instruction Fuzzy Hash: 1E517231E4825A9BDB11DB24DC80BA973B8EF11302F0581E4BA49BB295DF34AA448F91

Function 2D9071EC Relevance: 10.6, APIs: 5, Strings: 1, Instructions: 126windowCOMMON

Download Yara Rule

APIs

__EH_prolog3.LIBCMT ref: 2D9071F3
memset.MSVCR90 ref: 2D907206

Part of subcall function 2D9052D6: GetProcAddress.KERNEL32(00000000,00000142), ref: 2D9052F4

GetWindowRect.USER32(?,?), ref: 2D9072E8
PostMessageA.USER32 ref: 2D907357
SetCursor.USER32(?), ref: 2D907360

Strings

D, xrefs: 2D907296

Memory Dump Source

Source File: 0000000A.00000002.520302411.000000002D901000.00000020.00000001.01000000.00000007.sdmp, Offset: 2D900000, based on PE: true

Associated: 0000000A.00000002.520292586.000000002D900000.00000002.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000A.00000002.520318069.000000002D91E000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000A.00000002.520324941.000000002D922000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000A.00000002.520340216.000000002D923000.00000002.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_2d900000_MSWordServices.jbxd

Similarity

API ID: AddressCursorH_prolog3MessagePostProcRectWindowmemset
String ID: D
API String ID: 308528978-2746444292
Opcode ID: d6de88d255033430c163e61dbd1a63cb58e868b9a140036587d8b73798cab9e2
Instruction ID: 63edd15ca164e827c6c4a56e2a83891793aaefa124f4d3c24697607420e46229
Opcode Fuzzy Hash: d6de88d255033430c163e61dbd1a63cb58e868b9a140036587d8b73798cab9e2
Instruction Fuzzy Hash: E3416D30A04609EFDB11DBA0D888FAEBBB9FF44716F204558F669B7291D735A905CF10

Function 69064DE0 Relevance: 10.6, APIs: 5, Strings: 1, Instructions: 120COMMON

Download Yara Rule

APIs

_ValidateLocalCookies.LIBCMT ref: 69064E17
___except_validate_context_record.LIBVCRUNTIME ref: 69064E1F
_ValidateLocalCookies.LIBCMT ref: 69064EA8
__IsNonwritableInCurrentImage.LIBCMT ref: 69064ED3
_ValidateLocalCookies.LIBCMT ref: 69064F28

Strings

csm, xrefs: 69064EBD

Memory Dump Source

Source File: 0000000A.00000002.520354624.0000000069051000.00000020.00000001.01000000.00000008.sdmp, Offset: 69050000, based on PE: true

Associated: 0000000A.00000002.520346406.0000000069050000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000A.00000002.520370595.0000000069084000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000A.00000002.520384600.0000000069094000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000A.00000002.520394111.00000000690BC000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000A.00000002.520406416.00000000690BD000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_69050000_MSWordServices.jbxd

Similarity

API ID: CookiesLocalValidate$CurrentImageNonwritable___except_validate_context_record
String ID: csm
API String ID: 1170836740-1018135373
Opcode ID: 1dd85473704a03e7230bc617ba4beeb5061abe95a14c9fc73983aface69fb1b0
Instruction ID: cd029f38453cabc8ffed8a7c00d1f32bb4e27ac29b4d732499e759eba63fbfcd
Opcode Fuzzy Hash: 1dd85473704a03e7230bc617ba4beeb5061abe95a14c9fc73983aface69fb1b0
Instruction Fuzzy Hash: 11415138A00219EFCF10CF68C994B9EBBF5FF46328F108955E8259B261D731AA55CB91

Function 2D913EC3 Relevance: 10.6, APIs: 7, Instructions: 112windowCOMMON

Download Yara Rule

APIs

Part of subcall function 2D915D40: GetFocus.USER32(?,?,2D913915,?), ref: 2D915D44
Part of subcall function 2D915D40: GetParent.USER32(00000000), ref: 2D915D6C
Part of subcall function 2D915D40: GetWindowLongA.USER32(?,000000F0), ref: 2D915D87
Part of subcall function 2D915D40: GetParent.USER32(?), ref: 2D915D95
Part of subcall function 2D915D40: GetDesktopWindow.USER32 ref: 2D915D99
Part of subcall function 2D915D40: SendMessageA.USER32(00000000,0000014F,00000000,00000000,00000000,00000003,?,?,?,2D913915,?), ref: 2D915DAD

Part of subcall function 2D915923: __EH_prolog3.LIBCMT ref: 2D91592A
Part of subcall function 2D915923: GetLastError.KERNEL32(00000004,2D910854,00000004,2D9109B6,00000000,?,?,?,2D910E48,00000004,2D904F59), ref: 2D91592F

GetMenu.USER32(?,?,?,?), ref: 2D913F12
GetMenu.USER32(?,?,?,?), ref: 2D913F27
GetMenuItemCount.USER32(00000000), ref: 2D913F30
GetSubMenu.USER32(00000000,00000000,?,?,?), ref: 2D913F41
GetMenuItemCount.USER32(?), ref: 2D913F65
GetMenuItemID.USER32(?,?), ref: 2D913F7F
GetMenuItemID.USER32(?,00000000), ref: 2D913FA2

Memory Dump Source

Source File: 0000000A.00000002.520302411.000000002D901000.00000020.00000001.01000000.00000007.sdmp, Offset: 2D900000, based on PE: true

Associated: 0000000A.00000002.520292586.000000002D900000.00000002.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000A.00000002.520318069.000000002D91E000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000A.00000002.520324941.000000002D922000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000A.00000002.520340216.000000002D923000.00000002.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_2d900000_MSWordServices.jbxd

Similarity

API ID: Menu$Item$CountParentWindow$DesktopErrorFocusH_prolog3LastLongMessageSend
String ID:
API String ID: 666752450-0
Opcode ID: 7e50f2f67739a61d7cdcad941b223a5860d99a40bc1a59d6dfcd83b9e28e82c1
Instruction ID: 3e6ad3b50b8aa5f63f36a6bcc0c0b573f4c8ee60bd76eae59854526eb32aa7da
Opcode Fuzzy Hash: 7e50f2f67739a61d7cdcad941b223a5860d99a40bc1a59d6dfcd83b9e28e82c1
Instruction Fuzzy Hash: A7414971A0420DABEF029F68C9809AEBBBAFF44350F2185AAF955F6251D731D941CF60

Function 2D915A21 Relevance: 10.6, APIs: 7, Instructions: 78COMMON

Download Yara Rule

APIs

Part of subcall function 2D915923: __EH_prolog3.LIBCMT ref: 2D91592A
Part of subcall function 2D915923: GetLastError.KERNEL32(00000004,2D910854,00000004,2D9109B6,00000000,?,?,?,2D910E48,00000004,2D904F59), ref: 2D91592F

_msize.MSVCR90 ref: 2D915A7F
_msize.MSVCR90 ref: 2D915A99
free.MSVCR90 ref: 2D915AA1
?_set_new_handler@@YAP6AHI@ZP6AHI@Z@Z.MSVCR90 ref: 2D915AB1
malloc.MSVCR90 ref: 2D915ABF
malloc.MSVCR90 ref: 2D915AD2
?_set_new_handler@@YAP6AHI@ZP6AHI@Z@Z.MSVCR90 ref: 2D915ADB

Memory Dump Source

Source File: 0000000A.00000002.520302411.000000002D901000.00000020.00000001.01000000.00000007.sdmp, Offset: 2D900000, based on PE: true

Associated: 0000000A.00000002.520292586.000000002D900000.00000002.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000A.00000002.520318069.000000002D91E000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000A.00000002.520324941.000000002D922000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000A.00000002.520340216.000000002D923000.00000002.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_2d900000_MSWordServices.jbxd

Similarity

API ID: ?_set_new_handler@@_msizemalloc$ErrorH_prolog3Lastfree
String ID:
API String ID: 3808399026-0
Opcode ID: 421017e334a960c3b6a300a771a068da43161511278868f39a0e303892d28bc1
Instruction ID: 32393fd11ad920c7f825696bedcca0823c0ec85d1cc78197c86044d33bb1a8aa
Opcode Fuzzy Hash: 421017e334a960c3b6a300a771a068da43161511278868f39a0e303892d28bc1
Instruction Fuzzy Hash: E8218331A487099FEB11ABB0D880B6AB7F8FF04651F12846AF645F3180EB34E904CB64

Function 2D915F07 Relevance: 10.6, APIs: 7, Instructions: 75stringCOMMON

Download Yara Rule

APIs

lstrlenW.KERNEL32(?,?,?,00000000), ref: 2D915F24
IsWindowUnicode.USER32(?), ref: 2D915F2D
SetWindowTextW.USER32(?,?,?,00000000), ref: 2D915F66

Part of subcall function 2D915CD7: IsWindowUnicode.USER32(?), ref: 2D915CE0
Part of subcall function 2D915CD7: GetWindowTextW.USER32(?,00000100,?,?,2D915F4E,?,?,00000100,?,00000000), ref: 2D915CF3

lstrcmpW.KERNEL32(?,?,?,?,00000100,?,00000000), ref: 2D915F5A
lstrcmpA.KERNEL32(?,00000000,?,?,00000100,?,00000001,?,00000000), ref: 2D915FA1
SetWindowTextA.USER32(?,00000000), ref: 2D915FAD
free.MSVCR90 ref: 2D915FB4

Memory Dump Source

Source File: 0000000A.00000002.520302411.000000002D901000.00000020.00000001.01000000.00000007.sdmp, Offset: 2D900000, based on PE: true

Associated: 0000000A.00000002.520292586.000000002D900000.00000002.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000A.00000002.520318069.000000002D91E000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000A.00000002.520324941.000000002D922000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000A.00000002.520340216.000000002D923000.00000002.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_2d900000_MSWordServices.jbxd

Similarity

API ID: Window$Text$Unicodelstrcmp$freelstrlen
String ID:
API String ID: 1265395221-0
Opcode ID: c7cc36424aaddb7eb70f3b1be1ce97400ab62d919ebba41db5dda4090b907a9c
Instruction ID: e57a933f89c6b38ed50185434c83cd3f05379c76e9632b17cb88a747f78c81bb
Opcode Fuzzy Hash: c7cc36424aaddb7eb70f3b1be1ce97400ab62d919ebba41db5dda4090b907a9c
Instruction Fuzzy Hash: 2A1142B260910CABDB52AA74DCC4FBFB7BCEF04A41F414566F642F2241DA38DA448A65

Function 2D90646A Relevance: 10.6, APIs: 7, Instructions: 66windowCOMMON

Download Yara Rule

APIs

GetWindowRect.USER32(?,?), ref: 2D90647F
ScreenToClient.USER32(?,?), ref: 2D90648C
MoveWindow.USER32(?,?,?,?,00000001,00000000), ref: 2D9064A2
SendMessageA.USER32(?,0000000B,00000000,00000000), ref: 2D9064D5
MoveWindow.USER32(?,00000000,?,?,?,00000001), ref: 2D9064EA
SendMessageA.USER32(?,0000000B,00000001,00000000), ref: 2D9064F8
RedrawWindow.USER32(?,00000000,00000000,00000585), ref: 2D906508

Memory Dump Source

Source File: 0000000A.00000002.520302411.000000002D901000.00000020.00000001.01000000.00000007.sdmp, Offset: 2D900000, based on PE: true

Associated: 0000000A.00000002.520292586.000000002D900000.00000002.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000A.00000002.520318069.000000002D91E000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000A.00000002.520324941.000000002D922000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000A.00000002.520340216.000000002D923000.00000002.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_2d900000_MSWordServices.jbxd

Similarity

API ID: Window$MessageMoveSend$ClientRectRedrawScreen
String ID:
API String ID: 4152145988-0
Opcode ID: 6989e2d2c41301b66a1b727194b834f3ac92bca478be138fb1152774b95e6c39
Instruction ID: 25b5309d3fdd42e4fea427a1757802146e963fa6d7049a4b903c5a6072ea69da
Opcode Fuzzy Hash: 6989e2d2c41301b66a1b727194b834f3ac92bca478be138fb1152774b95e6c39
Instruction Fuzzy Hash: 72113A32200654BFEB215FA5DC49F9B7BB9FF88B42F048418F645AA1A0C7B6A910DB54

Function 690608DC Relevance: 10.6, APIs: 2, Strings: 4, Instructions: 61libraryloaderCOMMONLIBRARYCODE

Download Yara Rule

APIs

GetModuleHandleA.KERNEL32(RPCRT4.dll), ref: 690608F4
GetProcAddress.KERNEL32(000000FF,?), ref: 69060974

Strings

lientC, xrefs: 69060942
NdrC, xrefs: 6906090D
RPCRT4.dll, xrefs: 690608EF
all2, xrefs: 6906091D

Memory Dump Source

Source File: 0000000A.00000002.520354624.0000000069051000.00000020.00000001.01000000.00000008.sdmp, Offset: 69050000, based on PE: true

Associated: 0000000A.00000002.520346406.0000000069050000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000A.00000002.520370595.0000000069084000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000A.00000002.520384600.0000000069094000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000A.00000002.520394111.00000000690BC000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000A.00000002.520406416.00000000690BD000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_69050000_MSWordServices.jbxd

Similarity

API ID: AddressHandleModuleProc
String ID: NdrC$RPCRT4.dll$all2$lientC
API String ID: 1646373207-1156160658
Opcode ID: 82cdea2ba0db66eed1039dffabca609fc0e67dd0694041f33dfcc443766c8f79
Instruction ID: 78aea55871808b4f61ab50fe8941835bc227945e665c773d34f8f12eb17620f2
Opcode Fuzzy Hash: 82cdea2ba0db66eed1039dffabca609fc0e67dd0694041f33dfcc443766c8f79
Instruction Fuzzy Hash: FA213E75D04198AFDF10CFA4CD44BEEBBF8AB49204F1099A7D52AF7240E7309A488F61

Function 2D9141D3 Relevance: 10.6, APIs: 7, Instructions: 60COMMON

Download Yara Rule

APIs

FindResourceW.KERNEL32(2D900000,?,00000005,00000000,?,00000000,?,?,?,2D914967,?,?,00000000,?,?), ref: 2D9141EC
LoadResource.KERNEL32(2D900000,00000000,?,2D914967,?,?,00000000,?,?,?,2D907D54,?,?,?,00000000,?), ref: 2D9141FA
LockResource.KERNEL32(00000000,?,2D914967,?,?,00000000,?,?,?,2D907D54,?,?,?,00000000,?,?), ref: 2D914208
SizeofResource.KERNEL32(2D900000,00000000,?,2D914967,?,?,00000000,?,?,?,2D907D54,?,?,?,00000000,?), ref: 2D914217
malloc.MSVCR90 ref: 2D91422D
memcpy.MSVCR90(00000000,?,00000000,2D914967,?,?,00000000,?,?,?,2D907D54,?,?,?,00000000,?), ref: 2D914240
FreeResource.KERNEL32(?,?,2D914967,?,?,00000000,?,?,?,2D907D54,?,?,?,00000000,?,?), ref: 2D91424B

Memory Dump Source

Source File: 0000000A.00000002.520302411.000000002D901000.00000020.00000001.01000000.00000007.sdmp, Offset: 2D900000, based on PE: true

Associated: 0000000A.00000002.520292586.000000002D900000.00000002.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000A.00000002.520318069.000000002D91E000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000A.00000002.520324941.000000002D922000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000A.00000002.520340216.000000002D923000.00000002.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_2d900000_MSWordServices.jbxd

Similarity

API ID: Resource$FindFreeLoadLockSizeofmallocmemcpy
String ID:
API String ID: 2295636306-0
Opcode ID: 2d64ad32ac32d75abdde25ebfac5250bf1d5c02f9361205d0d4dcb9143372c45
Instruction ID: 29f8e4111827c5dbaef49a7e854b14d04ccdeb8cecbda6ca64070f84e1979137
Opcode Fuzzy Hash: 2d64ad32ac32d75abdde25ebfac5250bf1d5c02f9361205d0d4dcb9143372c45
Instruction Fuzzy Hash: A611007560460ABFDB025FE5DC48BAA7BBCEF4E692B104465F905F7200EB74D940CB64

Function 2D90B7D5 Relevance: 10.5, APIs: 7, Instructions: 41COMMONLIBRARYCODE

Download Yara Rule

APIs

__EH_prolog3.LIBCMT ref: 2D90B7DC
~_Task_impl.LIBCPMT ref: 2D90B7F9

Part of subcall function 2D915440: __EH_prolog3.LIBCMT ref: 2D915447

~_Task_impl.LIBCPMT ref: 2D90B808

Part of subcall function 2D9154BD: __EH_prolog3.LIBCMT ref: 2D9154C4

~_Task_impl.LIBCPMT ref: 2D90B817
~_Task_impl.LIBCPMT ref: 2D90B826
~_Task_impl.LIBCPMT ref: 2D90B835

Part of subcall function 2D9153F3: __EH_prolog3.LIBCMT ref: 2D9153FA

~_Task_impl.LIBCPMT ref: 2D90B844

Part of subcall function 2D904873: ??_V@YAXPAX@Z.MSVCR90(?,?,2D904B1B), ref: 2D904883

Part of subcall function 2D908409: __EH_prolog3.LIBCMT ref: 2D908410

Memory Dump Source

Source File: 0000000A.00000002.520302411.000000002D901000.00000020.00000001.01000000.00000007.sdmp, Offset: 2D900000, based on PE: true

Associated: 0000000A.00000002.520292586.000000002D900000.00000002.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000A.00000002.520318069.000000002D91E000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000A.00000002.520324941.000000002D922000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000A.00000002.520340216.000000002D923000.00000002.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_2d900000_MSWordServices.jbxd

Similarity

API ID: Task_impl$H_prolog3
String ID:
API String ID: 1204490572-0
Opcode ID: 3241c0b59448615a4cd37f35042fc3e99a8a9b7f06760bb5868e1f020493d317
Instruction ID: c0feb100a24dc0cb5835b6712cfa096a437f01b7370698c06aa372ba0c33c8d3
Opcode Fuzzy Hash: 3241c0b59448615a4cd37f35042fc3e99a8a9b7f06760bb5868e1f020493d317
Instruction Fuzzy Hash: DD114930409788DAD715DBA4C1143DDBBE0AF25301F92488DDA9A23281DBB86708D723

Function 2D90D55E Relevance: 10.1, APIs: 8, Instructions: 129COMMON

Download Yara Rule

APIs

malloc.MSVCR90 ref: 2D90D57E
malloc.MSVCR90 ref: 2D90D592
malloc.MSVCR90 ref: 2D90D5EC
memcpy.MSVCR90(?,?,?,?,2D90DE55,?,?), ref: 2D90D60A
free.MSVCR90 ref: 2D90D612
malloc.MSVCR90 ref: 2D90D627
memcpy.MSVCR90(00000000,000000FF,?,2D90DE55,?,?), ref: 2D90D649
free.MSVCR90 ref: 2D90D651

Memory Dump Source

Source File: 0000000A.00000002.520302411.000000002D901000.00000020.00000001.01000000.00000007.sdmp, Offset: 2D900000, based on PE: true

Associated: 0000000A.00000002.520292586.000000002D900000.00000002.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000A.00000002.520318069.000000002D91E000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000A.00000002.520324941.000000002D922000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000A.00000002.520340216.000000002D923000.00000002.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_2d900000_MSWordServices.jbxd

Similarity

API ID: malloc$freememcpy
String ID:
API String ID: 4259248891-0
Opcode ID: 01c201235a4f9ef5adcdd7d5822370101685d08291c9954d909efbd1c04c0ef2
Instruction ID: 2890b453fe86afdbec4c6d31e59ed98e92a28d7229bb19a9aeea4c981d11d0fa
Opcode Fuzzy Hash: 01c201235a4f9ef5adcdd7d5822370101685d08291c9954d909efbd1c04c0ef2
Instruction Fuzzy Hash: 1B416BB1600705AFEB15CF6DD880966B7EDFF44255710C82EF95AEB740EA31EA00CB50

Function 69075384 Relevance: 9.3, APIs: 6, Instructions: 298COMMONLIBRARYCODE

Download Yara Rule

Memory Dump Source

Source File: 0000000A.00000002.520354624.0000000069051000.00000020.00000001.01000000.00000008.sdmp, Offset: 69050000, based on PE: true

Associated: 0000000A.00000002.520346406.0000000069050000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000A.00000002.520370595.0000000069084000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000A.00000002.520384600.0000000069094000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000A.00000002.520394111.00000000690BC000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000A.00000002.520406416.00000000690BD000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_69050000_MSWordServices.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: e95291b764f46044f9457bc7770685dccf3125d357350a47ac57c3fce55fa3d2
Instruction ID: a07acb1b77dd1c42eb328a6955001ab3ee6922eba855b686396b234081e2e624
Opcode Fuzzy Hash: e95291b764f46044f9457bc7770685dccf3125d357350a47ac57c3fce55fa3d2
Instruction Fuzzy Hash: ECB1B278A04349ABDF11CF98C490BEEBBF6BF86324F108955D514DF291CB719942CB64

Function 69061712 Relevance: 9.2, APIs: 6, Instructions: 175COMMON

Download Yara Rule

APIs

MultiByteToWideChar.KERNEL32(00000000,00000000,00000001,?,00000000,00000000,?,?,?,00000001), ref: 6906175B
MultiByteToWideChar.KERNEL32(00000001,00000001,00000000,?,00000000,00000000), ref: 690617C6
LCMapStringEx.KERNEL32 ref: 690617E3
LCMapStringEx.KERNEL32 ref: 69061822
LCMapStringEx.KERNEL32 ref: 69061881
WideCharToMultiByte.KERNEL32(00000000,00000000,00000000,00000000,?,?,00000000,00000000), ref: 690618A4

Memory Dump Source

Source File: 0000000A.00000002.520354624.0000000069051000.00000020.00000001.01000000.00000008.sdmp, Offset: 69050000, based on PE: true

Associated: 0000000A.00000002.520346406.0000000069050000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000A.00000002.520370595.0000000069084000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000A.00000002.520384600.0000000069094000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000A.00000002.520394111.00000000690BC000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000A.00000002.520406416.00000000690BD000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_69050000_MSWordServices.jbxd

Similarity

API ID: ByteCharMultiStringWide
String ID:
API String ID: 2829165498-0
Opcode ID: b74e68c5a0cb57898160d4bb2c2aef4aac4b82afad4ca22e9750043bf78103db
Instruction ID: 501b8078fe4db84d99d1fb5cc03fe8ca1e7a45b4fa9ee97d8ff4ae8eab5951bc
Opcode Fuzzy Hash: b74e68c5a0cb57898160d4bb2c2aef4aac4b82afad4ca22e9750043bf78103db
Instruction Fuzzy Hash: 0D516E76A10206AFEF508F65CC45FAB3BFAEF41794F114925F914D71A0EB34D8548BA0

Function 2D911AAA Relevance: 9.1, APIs: 6, Instructions: 113COMMON

Download Yara Rule

APIs

__EH_prolog3_catch.LIBCMT ref: 2D911AB1
GetPropA.USER32(?,00000000), ref: 2D911AC1

Part of subcall function 2D915923: __EH_prolog3.LIBCMT ref: 2D91592A
Part of subcall function 2D915923: GetLastError.KERNEL32(00000004,2D910854,00000004,2D9109B6,00000000,?,?,?,2D910E48,00000004,2D904F59), ref: 2D91592F

CallWindowProcA.USER32(?,?,00000110,?,00000000), ref: 2D911B58

Part of subcall function 2D911492: GetWindowLongA.USER32(?,000000F0), ref: 2D9114A6
Part of subcall function 2D911492: GetWindowRect.USER32(?,?), ref: 2D9114BA
Part of subcall function 2D911492: IsWindowEnabled.USER32(?), ref: 2D9114DF

SetWindowLongA.USER32(?,000000FC,?), ref: 2D911B77
RemovePropA.USER32(?,00000000), ref: 2D911B86

Part of subcall function 2D910D23: GetWindowRect.USER32(?,?), ref: 2D910D2C
Part of subcall function 2D910D23: GetWindowLongA.USER32(?,000000F0), ref: 2D910D37

CallWindowProcA.USER32(?,?,?,?,00000000), ref: 2D911BE3

Memory Dump Source

Source File: 0000000A.00000002.520302411.000000002D901000.00000020.00000001.01000000.00000007.sdmp, Offset: 2D900000, based on PE: true

Associated: 0000000A.00000002.520292586.000000002D900000.00000002.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000A.00000002.520318069.000000002D91E000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000A.00000002.520324941.000000002D922000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000A.00000002.520340216.000000002D923000.00000002.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_2d900000_MSWordServices.jbxd

Similarity

API ID: Window$Long$CallProcPropRect$EnabledErrorH_prolog3H_prolog3_catchLastRemove
String ID:
API String ID: 1391589453-0
Opcode ID: 4fbfd98cbe2cb6deb81825a7b756ee763a0c1881590748147a5837a2e3193fa3
Instruction ID: fa14df5d921db8bde5a7156746ec40d3db91c0d7fea9e711e44c25f1a4d98264
Opcode Fuzzy Hash: 4fbfd98cbe2cb6deb81825a7b756ee763a0c1881590748147a5837a2e3193fa3
Instruction Fuzzy Hash: 9B41147280820DEBDF058FA4C944AEE7BB4EF08711F114155FA15BB290DB39DA44CFA0

Function 2D9084B0 Relevance: 9.1, APIs: 6, Instructions: 61COMMON

Download Yara Rule

APIs

__EH_prolog3_GS.LIBCMT ref: 2D9084B7

Part of subcall function 2D908374: SendMessageA.USER32(00000000,00000031,00000000,00000000,2D9084D1,00000058,2D9088D4), ref: 2D90837D

GetObjectA.GDI32(?,0000003C,?), ref: 2D9084DA
GetDC.USER32(00000000), ref: 2D9084E2

Part of subcall function 2D908338: CreateFontIndirectA.GDI32(?), ref: 2D908341

Part of subcall function 2D914F4C: SelectObject.GDI32(?,00000000), ref: 2D914F70
Part of subcall function 2D914F4C: SelectObject.GDI32(?,00000000), ref: 2D914F86

GetTextMetricsA.GDI32(?,?), ref: 2D908528
GetTextMetricsA.GDI32(?), ref: 2D908555
ReleaseDC.USER32(00000000,?), ref: 2D90856F

Part of subcall function 2D914ED4: __EH_prolog3.LIBCMT ref: 2D914EDB
Part of subcall function 2D914ED4: DeleteDC.GDI32(00000000), ref: 2D914EFB

Memory Dump Source

Source File: 0000000A.00000002.520302411.000000002D901000.00000020.00000001.01000000.00000007.sdmp, Offset: 2D900000, based on PE: true

Associated: 0000000A.00000002.520292586.000000002D900000.00000002.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000A.00000002.520318069.000000002D91E000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000A.00000002.520324941.000000002D922000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000A.00000002.520340216.000000002D923000.00000002.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_2d900000_MSWordServices.jbxd

Similarity

API ID: Object$MetricsSelectText$CreateDeleteFontH_prolog3H_prolog3_IndirectMessageReleaseSend
String ID:
API String ID: 275216013-0
Opcode ID: 3fec8a7f54d225b3a04d47041b0b939cbdfaff3df58c5677948275b5bead2e23
Instruction ID: 1f8710a8e145bd7d24401cbe6385c1edf9609661105e7700e55d3dafda2dbb05
Opcode Fuzzy Hash: 3fec8a7f54d225b3a04d47041b0b939cbdfaff3df58c5677948275b5bead2e23
Instruction Fuzzy Hash: 7421D87190420DAADB15DBE0D854BDDB7B9EF69301F518128F116BB2A4DF345A09CB50

Function 690652D8 Relevance: 9.1, APIs: 6, Instructions: 60COMMONLIBRARYCODE

Download Yara Rule

APIs

GetLastError.KERNEL32(00000001,?,690651E9,690622B5,69061EC9,?,69062101,?,00000001,?,?,00000001,?,69091EC0,0000000C,690621FA), ref: 690652E6
___vcrt_FlsGetValue.LIBVCRUNTIME ref: 690652F4
___vcrt_FlsSetValue.LIBVCRUNTIME ref: 6906530D
SetLastError.KERNEL32(00000000,69062101,?,00000001,?,?,00000001,?,69091EC0,0000000C,690621FA,?,00000001,?), ref: 6906535F

Memory Dump Source

Source File: 0000000A.00000002.520354624.0000000069051000.00000020.00000001.01000000.00000008.sdmp, Offset: 69050000, based on PE: true

Associated: 0000000A.00000002.520346406.0000000069050000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000A.00000002.520370595.0000000069084000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000A.00000002.520384600.0000000069094000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000A.00000002.520394111.00000000690BC000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000A.00000002.520406416.00000000690BD000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_69050000_MSWordServices.jbxd

Similarity

API ID: ErrorLastValue___vcrt_
String ID:
API String ID: 3852720340-0
Opcode ID: e884b5e6dd916670484c0ab4f3b874929497d4393b75eaa530e2af7c357f264f
Instruction ID: 8a60474abcaaab60f014810b485f28c9ea4c718f603bb1c6ca098d49852665f7
Opcode Fuzzy Hash: e884b5e6dd916670484c0ab4f3b874929497d4393b75eaa530e2af7c357f264f
Instruction Fuzzy Hash: 4301D43A20C736BEAA1046B86D8571A3698FB43B797205B2DE120C70F1FFA24811E5D4

Function 2D9042F4 Relevance: 9.1, APIs: 4, Strings: 2, Instructions: 57COMMON

Download Yara Rule

APIs

memset.MSVCR90 ref: 2D90430C

Part of subcall function 2D9041B0: SetLastError.KERNEL32(?), ref: 2D9042E5

GetLastError.KERNEL32 ref: 2D904371
CloseHandle.KERNEL32(?), ref: 2D90437C
SetLastError.KERNEL32(00000000), ref: 2D904383

Strings

print, xrefs: 2D904321
<, xrefs: 2D904305

Memory Dump Source

Source File: 0000000A.00000002.520302411.000000002D901000.00000020.00000001.01000000.00000007.sdmp, Offset: 2D900000, based on PE: true

Associated: 0000000A.00000002.520292586.000000002D900000.00000002.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000A.00000002.520318069.000000002D91E000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000A.00000002.520324941.000000002D922000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000A.00000002.520340216.000000002D923000.00000002.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_2d900000_MSWordServices.jbxd

Similarity

API ID: ErrorLast$CloseHandlememset
String ID: <$print
API String ID: 637397322-3177634819
Opcode ID: d8c61dd94e037c3b20e46f623137d9a1aebce7df9e2942ed42fa58a28f1ee554
Instruction ID: cdb6b58a0975fd23a4ea7e43f27cb9e6ac44694fad7f246a991a4fb400730aab
Opcode Fuzzy Hash: d8c61dd94e037c3b20e46f623137d9a1aebce7df9e2942ed42fa58a28f1ee554
Instruction Fuzzy Hash: 8A110776900209EFCB41DFA8E984ACEBBF8EF49B41F105155FA04E7240E6349A40CB95

Function 2D915D40 Relevance: 9.1, APIs: 6, Instructions: 51windowCOMMON

Download Yara Rule

APIs

GetFocus.USER32(?,?,2D913915,?), ref: 2D915D44
GetParent.USER32(00000000), ref: 2D915D6C

Part of subcall function 2D915C0F: GetWindowLongA.USER32(?,000000F0), ref: 2D915C2E
Part of subcall function 2D915C0F: GetClassNameA.USER32(?,?,0000000A), ref: 2D915C43
Part of subcall function 2D915C0F: lstrcmpiA.KERNEL32(?,combobox), ref: 2D915C52

GetWindowLongA.USER32(?,000000F0), ref: 2D915D87
GetParent.USER32(?), ref: 2D915D95
GetDesktopWindow.USER32 ref: 2D915D99
SendMessageA.USER32(00000000,0000014F,00000000,00000000,00000000,00000003,?,?,?,2D913915,?), ref: 2D915DAD

Memory Dump Source

Source File: 0000000A.00000002.520302411.000000002D901000.00000020.00000001.01000000.00000007.sdmp, Offset: 2D900000, based on PE: true

Associated: 0000000A.00000002.520292586.000000002D900000.00000002.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000A.00000002.520318069.000000002D91E000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000A.00000002.520324941.000000002D922000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000A.00000002.520340216.000000002D923000.00000002.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_2d900000_MSWordServices.jbxd

Similarity

API ID: Window$LongParent$ClassDesktopFocusMessageNameSendlstrcmpi
String ID:
API String ID: 2818563221-0
Opcode ID: b9343218f800e47938ea2fa17113285f8786fe7f04673ad9aabcb0eb9daa442a
Instruction ID: 58456c4d20d8f469c0f2345f300dd562d98ce972b7dc7134e1ff2c321ca5c45d
Opcode Fuzzy Hash: b9343218f800e47938ea2fa17113285f8786fe7f04673ad9aabcb0eb9daa442a
Instruction Fuzzy Hash: 9D01F43A20529A27D3522A24EC8CFBE37BE9F81E51F030269FF05FB280DF68D4005664

Function 2D9186E4 Relevance: 8.8, APIs: 3, Strings: 2, Instructions: 65registryCOMMON

Download Yara Rule

APIs

RegOpenKeyExW.ADVAPI32 ref: 2D918736
RegQueryValueExW.ADVAPI32(?,mso.dll,00000000,00000000,?,00000208), ref: 2D918757
RegCloseKey.ADVAPI32(?), ref: 2D91876B

Strings

mso.dll, xrefs: 2D91874C
Software\Microsoft\Office\14.0\Common\FilesPaths, xrefs: 2D91871A

Memory Dump Source

Source File: 0000000A.00000002.520302411.000000002D901000.00000020.00000001.01000000.00000007.sdmp, Offset: 2D900000, based on PE: true

Associated: 0000000A.00000002.520292586.000000002D900000.00000002.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000A.00000002.520318069.000000002D91E000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000A.00000002.520324941.000000002D922000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000A.00000002.520340216.000000002D923000.00000002.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_2d900000_MSWordServices.jbxd

Similarity

API ID: CloseOpenQueryValue
String ID: Software\Microsoft\Office\14.0\Common\FilesPaths$mso.dll
API String ID: 3677997916-1420724145
Opcode ID: d8405d2e78548e9840f4d4d19bca70b639b88f9e8eef4cf1d9a1e05bad3f6f57
Instruction ID: fff22d032cea26245cdd00844c64e08e7e0794369b57fec1e3596380c07275b9
Opcode Fuzzy Hash: d8405d2e78548e9840f4d4d19bca70b639b88f9e8eef4cf1d9a1e05bad3f6f57
Instruction Fuzzy Hash: 9221587194411DAADB11DFA4DCC8BEAB7B8EF64301F0046E6B209E3160DA708E809F90

Function 69066E26 Relevance: 8.8, APIs: 3, Strings: 2, Instructions: 42libraryloaderCOMMONLIBRARYCODE

Download Yara Rule

APIs

GetModuleHandleExW.KERNEL32(00000000,mscoree.dll,00000000,358B5801,?,?,00000000,69083507,000000FF,?,69066DB6,?,?,69066D8A,00000000), ref: 69066E5B
GetProcAddress.KERNEL32(00000000,CorExitProcess,?,00000000,69083507,000000FF,?,69066DB6,?,?,69066D8A,00000000), ref: 69066E6D
FreeLibrary.KERNEL32(00000000,?,00000000,69083507,000000FF,?,69066DB6,?,?,69066D8A,00000000), ref: 69066E8F

Strings

mscoree.dll, xrefs: 69066E54
CorExitProcess, xrefs: 69066E65

Memory Dump Source

Source File: 0000000A.00000002.520354624.0000000069051000.00000020.00000001.01000000.00000008.sdmp, Offset: 69050000, based on PE: true

Associated: 0000000A.00000002.520346406.0000000069050000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000A.00000002.520370595.0000000069084000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000A.00000002.520384600.0000000069094000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000A.00000002.520394111.00000000690BC000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000A.00000002.520406416.00000000690BD000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_69050000_MSWordServices.jbxd

Similarity

API ID: AddressFreeHandleLibraryModuleProc
String ID: CorExitProcess$mscoree.dll
API String ID: 4061214504-1276376045
Opcode ID: 8a72755417603ddea1eff7748829398a1175802b7482d4f1fa14fb360ad29b6a
Instruction ID: cd6f7a634c89523851bc3f3101323ab20a8c060af3f334ddb7e75b6a8c5fde42
Opcode Fuzzy Hash: 8a72755417603ddea1eff7748829398a1175802b7482d4f1fa14fb360ad29b6a
Instruction Fuzzy Hash: D3016231A14659FFDF118F50CE04BBE7BFCFB45751F000A29E821A7290DB749900CA90

Function 2D905BEE Relevance: 8.8, APIs: 3, Strings: 2, Instructions: 35COMMON

Download Yara Rule

APIs

_stricmp.MSVCR90(?,IPM.Conflict.Message), ref: 2D905C06
_stricmp.MSVCR90(?,IPM.Conflict.Folder), ref: 2D905C16
_stricmp.MSVCR90(?,?), ref: 2D905C2A

Strings

IPM.Conflict.Message, xrefs: 2D905BFE
IPM.Conflict.Folder, xrefs: 2D905C0E

Memory Dump Source

Source File: 0000000A.00000002.520302411.000000002D901000.00000020.00000001.01000000.00000007.sdmp, Offset: 2D900000, based on PE: true

Associated: 0000000A.00000002.520292586.000000002D900000.00000002.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000A.00000002.520318069.000000002D91E000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000A.00000002.520324941.000000002D922000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000A.00000002.520340216.000000002D923000.00000002.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_2d900000_MSWordServices.jbxd

Similarity

API ID: _stricmp
String ID: IPM.Conflict.Folder$IPM.Conflict.Message
API String ID: 2884411883-576266925
Opcode ID: c664559a9c9f70d296b772b2418d5b070eda03e439c831a8ea285e0178a7e7b1
Instruction ID: 1a69a76ca5d3fa26344a0f93f5822780ea378633a5667345aadeac0152637782
Opcode Fuzzy Hash: c664559a9c9f70d296b772b2418d5b070eda03e439c831a8ea285e0178a7e7b1
Instruction Fuzzy Hash: B5F0123261822E6EDB456E54FC02AA537D8DF051B3F108076FA04E6061DB31E510AF94

Function 2D90D31D Relevance: 7.6, APIs: 6, Instructions: 146stringCOMMON

Download Yara Rule

APIs

malloc.MSVCR90 ref: 2D90D3D2
free.MSVCR90 ref: 2D90D3F3
lstrlenA.KERNEL32(?,?,?), ref: 2D90D43E
malloc.MSVCR90 ref: 2D90D44B
MultiByteToWideChar.KERNEL32(00000000,00000001,?,00000000,00000000,00000001), ref: 2D90D466
free.MSVCR90 ref: 2D90D46F

Memory Dump Source

Source File: 0000000A.00000002.520302411.000000002D901000.00000020.00000001.01000000.00000007.sdmp, Offset: 2D900000, based on PE: true

Associated: 0000000A.00000002.520292586.000000002D900000.00000002.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000A.00000002.520318069.000000002D91E000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000A.00000002.520324941.000000002D922000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000A.00000002.520340216.000000002D923000.00000002.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_2d900000_MSWordServices.jbxd

Similarity

API ID: freemalloc$ByteCharMultiWidelstrlen
String ID:
API String ID: 4100972401-0
Opcode ID: 0dd822ee97a07587b369ea898bff99c7441c54b579435db3aa9a0cfacd1fb359
Instruction ID: 17b8878a2f2c6515f8c09edd2bebb10064bafdf76b038d99232acea4da70e96f
Opcode Fuzzy Hash: 0dd822ee97a07587b369ea898bff99c7441c54b579435db3aa9a0cfacd1fb359
Instruction Fuzzy Hash: 1E41B071504205EFDB16CF18EC84AAE7BBDFF84352F20469AF511E6281E772DA40CB60

Function 2D908126 Relevance: 7.6, APIs: 5, Instructions: 120windowCOMMON

Download Yara Rule

APIs

__EH_prolog3_catch.LIBCMT ref: 2D90812D

Part of subcall function 2D906995: LoadCursorA.USER32(00000000,?), ref: 2D9069A0
Part of subcall function 2D906995: SetCursor.USER32(00000000), ref: 2D9069A7

MessageBoxW.USER32 ref: 2D90820B
GetWindowRect.USER32(00000003,?), ref: 2D908260
PostMessageA.USER32 ref: 2D9082BA
SetCursor.USER32(?), ref: 2D9082F2

Memory Dump Source

Source File: 0000000A.00000002.520302411.000000002D901000.00000020.00000001.01000000.00000007.sdmp, Offset: 2D900000, based on PE: true

Associated: 0000000A.00000002.520292586.000000002D900000.00000002.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000A.00000002.520318069.000000002D91E000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000A.00000002.520324941.000000002D922000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000A.00000002.520340216.000000002D923000.00000002.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_2d900000_MSWordServices.jbxd

Similarity

API ID: Cursor$Message$H_prolog3_catchLoadPostRectWindow
String ID:
API String ID: 4269587068-0
Opcode ID: 8ef617b1b44f4df288f00f65b0eb4c4d6e4573199f92b44236c5b1fa9764ecc8
Instruction ID: cc78684829ba7846b7048ed79d782ae98df793c19b90b87b15f222ac919e2da1
Opcode Fuzzy Hash: 8ef617b1b44f4df288f00f65b0eb4c4d6e4573199f92b44236c5b1fa9764ecc8
Instruction Fuzzy Hash: 90518D70904649EFDB01EBE4D988BAEBBB9FF15305F10445CF64AB7291DB70AA05CB11

Function 2D906E33 Relevance: 7.6, APIs: 5, Instructions: 85windowCOMMON

Download Yara Rule

APIs

__EH_prolog3.LIBCMT ref: 2D906E3A

Part of subcall function 2D906995: LoadCursorA.USER32(00000000,?), ref: 2D9069A0
Part of subcall function 2D906995: SetCursor.USER32(00000000), ref: 2D9069A7

SetCursor.USER32(?), ref: 2D906E9B
SetCursor.USER32(?), ref: 2D906EC4
GetWindowRect.USER32(?,?), ref: 2D906ED5
PostMessageA.USER32 ref: 2D906F25

Memory Dump Source

Source File: 0000000A.00000002.520302411.000000002D901000.00000020.00000001.01000000.00000007.sdmp, Offset: 2D900000, based on PE: true

Associated: 0000000A.00000002.520292586.000000002D900000.00000002.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000A.00000002.520318069.000000002D91E000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000A.00000002.520324941.000000002D922000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000A.00000002.520340216.000000002D923000.00000002.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_2d900000_MSWordServices.jbxd

Similarity

API ID: Cursor$H_prolog3LoadMessagePostRectWindow
String ID:
API String ID: 4037273543-0
Opcode ID: 0cd9ef6c2300434b4beed8df20f84c3ce033bbd550e6bc83c7f64c3e873ded75
Instruction ID: 0451263017853d26de36106011f8fd1ce8e80d2e2f4c3f879ae652c0a39f4b5a
Opcode Fuzzy Hash: 0cd9ef6c2300434b4beed8df20f84c3ce033bbd550e6bc83c7f64c3e873ded75
Instruction Fuzzy Hash: BD316F30608646EFCB01DFA0D988EAEBBF5FF58706F004458F656A72A1DB74EA15CB11

Function 2D908A57 Relevance: 7.6, APIs: 5, Instructions: 85fileCOMMON

Download Yara Rule

APIs

__EH_prolog3_catch.LIBCMT ref: 2D908A5E
??_U@YAPAXI@Z.MSVCR90(00001000), ref: 2D908ACD

Part of subcall function 2D913812: Mailbox.LIBCMT ref: 2D9159AE

WriteFile.KERNEL32(000000FF,?,?,2D90224C,00000000), ref: 2D908B01
CloseHandle.KERNEL32(000000FF), ref: 2D908B2F
??_V@YAXPAX@Z.MSVCR90(?), ref: 2D908B3C

Memory Dump Source

Source File: 0000000A.00000002.520302411.000000002D901000.00000020.00000001.01000000.00000007.sdmp, Offset: 2D900000, based on PE: true

Associated: 0000000A.00000002.520292586.000000002D900000.00000002.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000A.00000002.520318069.000000002D91E000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000A.00000002.520324941.000000002D922000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000A.00000002.520340216.000000002D923000.00000002.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_2d900000_MSWordServices.jbxd

Similarity

API ID: CloseFileH_prolog3_catchHandleMailboxWrite
String ID:
API String ID: 1130278343-0
Opcode ID: a1854e6f3090bcc18ffba451e0e16ee7d44f890a498db7a328dc3a6f63f9c154
Instruction ID: d72498257ebf5a808149584e323624674e7549b5a216b88ab1b2548c650ef21f
Opcode Fuzzy Hash: a1854e6f3090bcc18ffba451e0e16ee7d44f890a498db7a328dc3a6f63f9c154
Instruction Fuzzy Hash: B6315AB1900119EFDF019FA4DC85EAEBBB8FF08361F108159F621B6290C7359E00CB64

Function 2D90D4A0 Relevance: 7.6, APIs: 6, Instructions: 79COMMON

Download Yara Rule

APIs

free.MSVCR90 ref: 2D90D4CA
free.MSVCR90 ref: 2D90D4D9
free.MSVCR90 ref: 2D90D51D
free.MSVCR90 ref: 2D90D537
free.MSVCR90 ref: 2D90D546
free.MSVCR90 ref: 2D90D54C

Memory Dump Source

Source File: 0000000A.00000002.520302411.000000002D901000.00000020.00000001.01000000.00000007.sdmp, Offset: 2D900000, based on PE: true

Associated: 0000000A.00000002.520292586.000000002D900000.00000002.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000A.00000002.520318069.000000002D91E000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000A.00000002.520324941.000000002D922000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000A.00000002.520340216.000000002D923000.00000002.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_2d900000_MSWordServices.jbxd

Similarity

API ID: free
String ID:
API String ID: 1294909896-0
Opcode ID: 25fb3c7a302c42c4db106aa026130f44d51cd59d976421f0f620d3f7e6c92f65
Instruction ID: 54ff55d5fa27fb79a36b32159cfd6172ec3d927d5a4d5082c66aa0c73807fcfc
Opcode Fuzzy Hash: 25fb3c7a302c42c4db106aa026130f44d51cd59d976421f0f620d3f7e6c92f65
Instruction Fuzzy Hash: DD216871900109FFDF068F5DE880A69BB79FF44356F2080A6FD04AA655D772E990DF90

Function 2D904391 Relevance: 7.6, APIs: 2, Strings: 3, Instructions: 76COMMON

Download Yara Rule

APIs

SetLastError.KERNEL32(00000000), ref: 2D90444B

Part of subcall function 2D9042F4: memset.MSVCR90 ref: 2D90430C

GetLastError.KERNEL32 ref: 2D90441B

Strings

l2ub, xrefs: 2D9043D3
m2ub, xrefs: 2D9043EC
k2ub, xrefs: 2D9043BA

Memory Dump Source

Source File: 0000000A.00000002.520302411.000000002D901000.00000020.00000001.01000000.00000007.sdmp, Offset: 2D900000, based on PE: true

Associated: 0000000A.00000002.520292586.000000002D900000.00000002.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000A.00000002.520318069.000000002D91E000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000A.00000002.520324941.000000002D922000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000A.00000002.520340216.000000002D923000.00000002.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_2d900000_MSWordServices.jbxd

Similarity

API ID: ErrorLast$memset
String ID: k2ub$l2ub$m2ub
API String ID: 4054172246-710509214
Opcode ID: a014364477d3a65b98d8856cf8cc2dbbb26512beaec59bad19e4555a2d030b98
Instruction ID: c2dfbdc07cfffca0386c9a14721d79e5228a72b7c378542f013fbdad6c4dbdbf
Opcode Fuzzy Hash: a014364477d3a65b98d8856cf8cc2dbbb26512beaec59bad19e4555a2d030b98
Instruction Fuzzy Hash: D921103280451CBBCB02AFA5ED44EDEBBBDEFA5652F128051F610B3120D7758E52DB50

Function 2D912319 Relevance: 7.6, APIs: 5, Instructions: 55threadCOMMON

Download Yara Rule

APIs

Part of subcall function 2D915923: __EH_prolog3.LIBCMT ref: 2D91592A
Part of subcall function 2D915923: GetLastError.KERNEL32(00000004,2D910854,00000004,2D9109B6,00000000,?,?,?,2D910E48,00000004,2D904F59), ref: 2D91592F

CallNextHookEx.USER32(?,?,?,?), ref: 2D912336
CallNextHookEx.USER32(?,00000003,?,?), ref: 2D91237D
UnhookWindowsHookEx.USER32 ref: 2D912388
GetCurrentThreadId.KERNEL32 ref: 2D91239D
SetWindowsHookExA.USER32(00000004,Function_00011CD5,00000000,00000000), ref: 2D9123AD

Memory Dump Source

Source File: 0000000A.00000002.520302411.000000002D901000.00000020.00000001.01000000.00000007.sdmp, Offset: 2D900000, based on PE: true

Associated: 0000000A.00000002.520292586.000000002D900000.00000002.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000A.00000002.520318069.000000002D91E000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000A.00000002.520324941.000000002D922000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000A.00000002.520340216.000000002D923000.00000002.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_2d900000_MSWordServices.jbxd

Similarity

API ID: Hook$CallNextWindows$CurrentErrorH_prolog3LastThreadUnhook
String ID:
API String ID: 2915796353-0
Opcode ID: 0fa8ab5b6ebeeac773e537b9d53b0b54231797e52cdf689844d151eb5b911a35
Instruction ID: 3b00e4655d15ab58b363384b88398ecfc5cc41c1d9e689fc93245c90a508f479
Opcode Fuzzy Hash: 0fa8ab5b6ebeeac773e537b9d53b0b54231797e52cdf689844d151eb5b911a35
Instruction Fuzzy Hash: 0B11C231108309EFDB12AF60DD89B5A7BB8FF08B52F009428FA02EA661D775E551CF14

Function 2D912A2D Relevance: 7.5, APIs: 5, Instructions: 48windowCOMMON

Download Yara Rule

APIs

EnableMenuItem.USER32 ref: 2D912A5A
GetFocus.USER32 ref: 2D912A6C
GetParent.USER32(?), ref: 2D912A7A
SetFocus.USER32 ref: 2D912A95
EnableWindow.USER32(?,?), ref: 2D912AAB

Memory Dump Source

Source File: 0000000A.00000002.520302411.000000002D901000.00000020.00000001.01000000.00000007.sdmp, Offset: 2D900000, based on PE: true

Associated: 0000000A.00000002.520292586.000000002D900000.00000002.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000A.00000002.520318069.000000002D91E000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000A.00000002.520324941.000000002D922000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000A.00000002.520340216.000000002D923000.00000002.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_2d900000_MSWordServices.jbxd

Similarity

API ID: EnableFocus$ItemMenuParentWindow
String ID:
API String ID: 783553715-0
Opcode ID: a6d1221c53ea5b38c64e38f94021bb8cfd5bf2c4aea98bc02367ab44cc2a7b84
Instruction ID: a2b0bdfbe21f6887497d5f19f27fb07ca494b3a712db62f501db8f24307c11ba
Opcode Fuzzy Hash: a6d1221c53ea5b38c64e38f94021bb8cfd5bf2c4aea98bc02367ab44cc2a7b84
Instruction Fuzzy Hash: 1C01A931104608AFCB25AF64D90AF9ABBF9EF00711F01C669F606E26A0C775E894CF94

Function 2D90510C Relevance: 7.5, APIs: 5, Instructions: 46COMMON

Download Yara Rule

APIs

CoRevokeClassObject.OLE32 ref: 2D905124
CoRevokeClassObject.OLE32(00000000), ref: 2D905136
FreeLibrary.KERNEL32(00000000), ref: 2D90515B
free.MSVCR90 ref: 2D905170
free.MSVCR90 ref: 2D905178

Memory Dump Source

Source File: 0000000A.00000002.520302411.000000002D901000.00000020.00000001.01000000.00000007.sdmp, Offset: 2D900000, based on PE: true

Associated: 0000000A.00000002.520292586.000000002D900000.00000002.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000A.00000002.520318069.000000002D91E000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000A.00000002.520324941.000000002D922000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000A.00000002.520340216.000000002D923000.00000002.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_2d900000_MSWordServices.jbxd

Similarity

API ID: ClassObjectRevokefree$FreeLibrary
String ID:
API String ID: 850073815-0
Opcode ID: d2cc155e35f4a416e2a937fcd3fa4bad07fb0eff6f264fc1923f4cb179c61b0a
Instruction ID: f51c55b804aba8d5ccf694b28cb9673a4c3c4169b40f81f59490620fe411c06d
Opcode Fuzzy Hash: d2cc155e35f4a416e2a937fcd3fa4bad07fb0eff6f264fc1923f4cb179c61b0a
Instruction Fuzzy Hash: 860156762183029BE7829B24E840BA2B3FDFF44712F610414F514F3290EBB8E820CFA4

Function 2D915C6C Relevance: 7.5, APIs: 5, Instructions: 45COMMON

Download Yara Rule

APIs

IsWindowUnicode.USER32(?), ref: 2D915C79
malloc.MSVCR90 ref: 2D915C8B
GetWindowTextW.USER32(?,00000000,?,2D915F95,?,?,00000100,?,00000001,?,00000000), ref: 2D915C9D
GetWindowTextA.USER32(?,00000001,?), ref: 2D915CBA
free.MSVCR90 ref: 2D915CC7

Memory Dump Source

Source File: 0000000A.00000002.520302411.000000002D901000.00000020.00000001.01000000.00000007.sdmp, Offset: 2D900000, based on PE: true

Associated: 0000000A.00000002.520292586.000000002D900000.00000002.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000A.00000002.520318069.000000002D91E000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000A.00000002.520324941.000000002D922000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000A.00000002.520340216.000000002D923000.00000002.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_2d900000_MSWordServices.jbxd

Similarity

API ID: Window$Text$Unicodefreemalloc
String ID:
API String ID: 1936483696-0
Opcode ID: 80bc73d0d622f11313534d45b9ff64eed878d385fe2f0cc67415ed160a2f0339
Instruction ID: e6b8599878033e61b72db4813ee02b8cfaeea31def82cf30756845ef3934a606
Opcode Fuzzy Hash: 80bc73d0d622f11313534d45b9ff64eed878d385fe2f0cc67415ed160a2f0339
Instruction Fuzzy Hash: 9EF06D3650A219BF8B121FA5DC48E9B7F79FF49BA27018126FD04A6210D735D911CAE4

Function 2D915CD7 Relevance: 7.5, APIs: 5, Instructions: 44COMMON

Download Yara Rule

APIs

IsWindowUnicode.USER32(?), ref: 2D915CE0
GetWindowTextW.USER32(?,00000100,?,?,2D915F4E,?,?,00000100,?,00000000), ref: 2D915CF3
malloc.MSVCR90 ref: 2D915D06
GetWindowTextA.USER32(?,00000000,?), ref: 2D915D19
free.MSVCR90 ref: 2D915D30

Memory Dump Source

Source File: 0000000A.00000002.520302411.000000002D901000.00000020.00000001.01000000.00000007.sdmp, Offset: 2D900000, based on PE: true

Associated: 0000000A.00000002.520292586.000000002D900000.00000002.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000A.00000002.520318069.000000002D91E000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000A.00000002.520324941.000000002D922000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000A.00000002.520340216.000000002D923000.00000002.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_2d900000_MSWordServices.jbxd

Similarity

API ID: Window$Text$Unicodefreemalloc
String ID:
API String ID: 1936483696-0
Opcode ID: 8f5a73677b28a2fc46377ca616fd265b2640b180ecd2b49f0c4c138bd6efdb8d
Instruction ID: b6815e543c75cd468fd74d7eb06cf77436931e2a8f39181f04c4dbd5d2db116b
Opcode Fuzzy Hash: 8f5a73677b28a2fc46377ca616fd265b2640b180ecd2b49f0c4c138bd6efdb8d
Instruction Fuzzy Hash: C9F04B3A108249BBCB021F65AC48EAA3BB9EF886A2701852AFA05E2210D735C410CB64

Function 6907B14E Relevance: 7.2, APIs: 2, Strings: 2, Instructions: 224COMMON

Download Yara Rule

APIs

_wcschr.LIBVCRUNTIME ref: 6907B178

Part of subcall function 6906695C: IsProcessorFeaturePresent.KERNEL32(00000017), ref: 6906695E
Part of subcall function 6906695C: GetCurrentProcess.KERNEL32(C0000417,00000000,?,00000000,?,?,6906694E,00000000,00000000,00000000,00000000,00000000,?,690517D9,69051ED7), ref: 69066981
Part of subcall function 6906695C: TerminateProcess.KERNEL32(00000000,?,?,6906694E,00000000,00000000,00000000,00000000,00000000,?,690517D9,69051ED7), ref: 69066988

Strings

Z4, xrefs: 6907B1A3, 6907B1E2, 6907B217, 6907B22B, 6907B235, 6907B2FF
($4, xrefs: 6907B1B3, 6907B202, 6907B20F

Memory Dump Source

Source File: 0000000A.00000002.520354624.0000000069051000.00000020.00000001.01000000.00000008.sdmp, Offset: 69050000, based on PE: true

Associated: 0000000A.00000002.520346406.0000000069050000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000A.00000002.520370595.0000000069084000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000A.00000002.520384600.0000000069094000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000A.00000002.520394111.00000000690BC000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000A.00000002.520406416.00000000690BD000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_69050000_MSWordServices.jbxd

Similarity

API ID: Process$CurrentFeaturePresentProcessorTerminate_wcschr
String ID: Z4$($4
API String ID: 606420371-1647831319
Opcode ID: bc163108d742910712a74ace54d5aa76df08f82fad4d6b5f7ac4517a44ae512f
Instruction ID: 76c6bf58923e98cf4edc2a0a33d2ab3ad34b93b8b0b5c02dc621c494ecf11fd6
Opcode Fuzzy Hash: bc163108d742910712a74ace54d5aa76df08f82fad4d6b5f7ac4517a44ae512f
Instruction Fuzzy Hash: 2C610675B00314ABDF34DFBC8851B6E36E9AF05374F418D1EE911AF284EB31994187A9

Function 2D904896 Relevance: 7.1, APIs: 3, Strings: 1, Instructions: 119COMMON

Download Yara Rule

APIs

??_V@YAXPAX@Z.MSVCR90(?), ref: 2D9049C3

Part of subcall function 2D90F52B: malloc.MSVCR90 ref: 2D90F531

memmove.MSVCR90(?,?,?), ref: 2D904991
memmove.MSVCR90(?,8007000E,?), ref: 2D9049A6

Strings

jsr9, xrefs: 2D9048D5

Memory Dump Source

Source File: 0000000A.00000002.520302411.000000002D901000.00000020.00000001.01000000.00000007.sdmp, Offset: 2D900000, based on PE: true

Associated: 0000000A.00000002.520292586.000000002D900000.00000002.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000A.00000002.520318069.000000002D91E000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000A.00000002.520324941.000000002D922000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000A.00000002.520340216.000000002D923000.00000002.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_2d900000_MSWordServices.jbxd

Similarity

API ID: memmove$malloc
String ID: jsr9
API String ID: 3263852767-1633979662
Opcode ID: bf3518efe7dfd3a358c7f3c6504b6faca0361622a601a3fdafd0a7f811bafe18
Instruction ID: 382503c441e71ee1be6ff370ea9aa0ed76cbb0fb916c8e6f87f3bb89b71e243d
Opcode Fuzzy Hash: bf3518efe7dfd3a358c7f3c6504b6faca0361622a601a3fdafd0a7f811bafe18
Instruction Fuzzy Hash: 1141B170A04604EFCB11CF59E98095EBBFAEF91751B20C56EF5A5E7210D770E941CB40

Function 2D914385 Relevance: 7.1, APIs: 3, Strings: 1, Instructions: 70COMMON

Download Yara Rule

APIs

__EH_prolog3_catch.LIBCMT ref: 2D91438C
GetWindowLongA.USER32(?,000000F0), ref: 2D9143BB
GetParent.USER32(?), ref: 2D9143CB

Strings

0, xrefs: 2D914391

Memory Dump Source

Source File: 0000000A.00000002.520302411.000000002D901000.00000020.00000001.01000000.00000007.sdmp, Offset: 2D900000, based on PE: true

Associated: 0000000A.00000002.520292586.000000002D900000.00000002.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000A.00000002.520318069.000000002D91E000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000A.00000002.520324941.000000002D922000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000A.00000002.520340216.000000002D923000.00000002.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_2d900000_MSWordServices.jbxd

Similarity

API ID: H_prolog3_catchLongParentWindow
String ID: 0
API String ID: 944585138-4108050209
Opcode ID: 53eed86ba01145a33b80746e64004092f589971a2c922e424bd0a84d6d5e7842
Instruction ID: 16b22e005a78ad8a222434d0d80d9bb41c4da97e2c67ae48229afbe507be49ea
Opcode Fuzzy Hash: 53eed86ba01145a33b80746e64004092f589971a2c922e424bd0a84d6d5e7842
Instruction Fuzzy Hash: CE21447190820EDBDF05DFA0C540B9E7BB4BF0A310F218199FA15BB290D776EA45CB91

Function 69052AF0 Relevance: 7.1, APIs: 3, Strings: 1, Instructions: 68COMMONLIBRARYCODE

Download Yara Rule

APIs

std::_Lockit::_Lockit.LIBCPMT ref: 69052B05

Part of subcall function 69054779: std::_Lockit::_Lockit.LIBCPMT ref: 69054799
Part of subcall function 69054779: std::_Lockit::~_Lockit.LIBCPMT ref: 690547BF

std::_Lockit::~_Lockit.LIBCPMT ref: 69052BB1

Strings

h54, xrefs: 69052B0A, 69052B8D

Memory Dump Source

Source File: 0000000A.00000002.520354624.0000000069051000.00000020.00000001.01000000.00000008.sdmp, Offset: 69050000, based on PE: true

Associated: 0000000A.00000002.520346406.0000000069050000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000A.00000002.520370595.0000000069084000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000A.00000002.520384600.0000000069094000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000A.00000002.520394111.00000000690BC000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000A.00000002.520406416.00000000690BD000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_69050000_MSWordServices.jbxd

Similarity

API ID: Lockitstd::_$Lockit::_Lockit::~_
String ID: h54
API String ID: 593203224-973108617
Opcode ID: 85b446faf5adba640a83054693a55778d3012c25c647179d8fe8459f96a59c92
Instruction ID: 65dc12d9d8e7fd51d63a5ee8cd0e1e6b56d94968e4013fa03e7b552cca9e2779
Opcode Fuzzy Hash: 85b446faf5adba640a83054693a55778d3012c25c647179d8fe8459f96a59c92
Instruction Fuzzy Hash: AB21C778D0421EEFDF04DFA8C981BEEBBB5BF09304F109919D512A72A0DB306A55CB91

Function 2D904B08 Relevance: 7.1, APIs: 3, Strings: 1, Instructions: 61COMMON

Download Yara Rule

APIs

Part of subcall function 2D904873: ??_V@YAXPAX@Z.MSVCR90(?,?,2D904B1B), ref: 2D904883

GetACP.KERNEL32 ref: 2D904B25
WideCharToMultiByte.KERNEL32(?,?,?,000000FF,00000000,00000000,00000000,00000000), ref: 2D904B44
WideCharToMultiByte.KERNEL32(?,?,?,000000FF,?,00000001,00000000,00000000), ref: 2D904B8A

Strings

dk29, xrefs: 2D904B5F

Memory Dump Source

Source File: 0000000A.00000002.520302411.000000002D901000.00000020.00000001.01000000.00000007.sdmp, Offset: 2D900000, based on PE: true

Associated: 0000000A.00000002.520292586.000000002D900000.00000002.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000A.00000002.520318069.000000002D91E000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000A.00000002.520324941.000000002D922000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000A.00000002.520340216.000000002D923000.00000002.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_2d900000_MSWordServices.jbxd

Similarity

API ID: ByteCharMultiWide
String ID: dk29
API String ID: 626452242-1677150192
Opcode ID: 54cd556c52f306bb995ab3721d27e46b61d5a6813848f8a1285962df9107877e
Instruction ID: bf6691ebbad844abfb3134fde2ced17a3c7ffb8f1575516fe460f6b38992d166
Opcode Fuzzy Hash: 54cd556c52f306bb995ab3721d27e46b61d5a6813848f8a1285962df9107877e
Instruction Fuzzy Hash: 76113A72804118BB8F128F96DC44DDF7FBDEF86761B10825AF914A6160D6318A50DB60

Function 2D90FFF9 Relevance: 7.1, APIs: 3, Strings: 1, Instructions: 57COMMON

Download Yara Rule

APIs

__EH_prolog3_catch.LIBCMT ref: 2D910000
GetModuleHandleW.KERNEL32(mso.dll,0000001C,2D9100FB,00000000,?,?,00000000,00000000,?,?,2D90FD52,?,00000000,?,?,?), ref: 2D910075

Part of subcall function 2D904CF2: LoadStringW.USER32(?,?,?,00000100), ref: 2D904D3C

Strings

mso.dll, xrefs: 2D910070

Memory Dump Source

Source File: 0000000A.00000002.520302411.000000002D901000.00000020.00000001.01000000.00000007.sdmp, Offset: 2D900000, based on PE: true

Associated: 0000000A.00000002.520292586.000000002D900000.00000002.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000A.00000002.520318069.000000002D91E000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000A.00000002.520324941.000000002D922000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000A.00000002.520340216.000000002D923000.00000002.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_2d900000_MSWordServices.jbxd

Similarity

API ID: H_prolog3_catchHandleLoadModuleString
String ID: mso.dll
API String ID: 2579502969-1671880577
Opcode ID: dd69b0d10b434215bee836a1da702f6a5beb51775920a127c437b6ba4475ef39
Instruction ID: c30f72460850910ffc8c6374c91d779b13c0c09f888adc70da39720f3d7f7599
Opcode Fuzzy Hash: dd69b0d10b434215bee836a1da702f6a5beb51775920a127c437b6ba4475ef39
Instruction Fuzzy Hash: 1111893180815DEBCB12DFA0C804BDE7B70AF547A2F268154FA55B7290CB35DA10CBA1

Function 2D908ED9 Relevance: 7.0, APIs: 2, Strings: 2, Instructions: 50timeCOMMON

Download Yara Rule

APIs

GetSystemTime.KERNEL32(?), ref: 2D908EEB
SystemTimeToFileTime.KERNEL32(?,?), ref: 2D908EF9

Strings

@, xrefs: 2D908F19
@, xrefs: 2D908EE4

Memory Dump Source

Source File: 0000000A.00000002.520302411.000000002D901000.00000020.00000001.01000000.00000007.sdmp, Offset: 2D900000, based on PE: true

Associated: 0000000A.00000002.520292586.000000002D900000.00000002.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000A.00000002.520318069.000000002D91E000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000A.00000002.520324941.000000002D922000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000A.00000002.520340216.000000002D923000.00000002.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_2d900000_MSWordServices.jbxd

Similarity

API ID: Time$System$File
String ID: @$@
API String ID: 2838179519-149943524
Opcode ID: 08a932d5c94b5dd8974e83130cd4938677634f70b44b3697ea71ee8154a0d578
Instruction ID: 3f177cfe587c7ee1f98aefc79c0b7f2135e55c80632780e877ef553178879f73
Opcode Fuzzy Hash: 08a932d5c94b5dd8974e83130cd4938677634f70b44b3697ea71ee8154a0d578
Instruction Fuzzy Hash: 3311F071A11229ABDB00EFA4D849FDEBBB8FF08751F004459FA45F7240E774EA008BA4

Function 2D905264 Relevance: 7.0, APIs: 3, Strings: 1, Instructions: 43windowCOMMON

Download Yara Rule

APIs

LoadIconA.USER32(00000000,00007F00), ref: 2D90529A
LoadCursorA.USER32(00000000,00007F00), ref: 2D9052A5
GetStockObject.GDI32(00000000), ref: 2D9052AF

Strings

Cnfnot_ClassFactory, xrefs: 2D9052BF

Memory Dump Source

Source File: 0000000A.00000002.520302411.000000002D901000.00000020.00000001.01000000.00000007.sdmp, Offset: 2D900000, based on PE: true

Associated: 0000000A.00000002.520292586.000000002D900000.00000002.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000A.00000002.520318069.000000002D91E000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000A.00000002.520324941.000000002D922000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000A.00000002.520340216.000000002D923000.00000002.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_2d900000_MSWordServices.jbxd

Similarity

API ID: Load$CursorIconObjectStock
String ID: Cnfnot_ClassFactory
API String ID: 3711576554-2905417136
Opcode ID: c9b164db8e07fad24eea473b5987bb14eb7d56739adc5986050353c88e1aaea9
Instruction ID: 03f9824df6c037ddb76f34d8fca63fc85e7956f2575f59e6723157d109e45e74
Opcode Fuzzy Hash: c9b164db8e07fad24eea473b5987bb14eb7d56739adc5986050353c88e1aaea9
Instruction Fuzzy Hash: D2012C71C05218AFCB459FEA98846EEFFFCEF58612B10416BE501F3210D37885408FA4

Function 2D915C0F Relevance: 7.0, APIs: 3, Strings: 1, Instructions: 36stringCOMMON

Download Yara Rule

APIs

GetWindowLongA.USER32(?,000000F0), ref: 2D915C2E
GetClassNameA.USER32(?,?,0000000A), ref: 2D915C43
lstrcmpiA.KERNEL32(?,combobox), ref: 2D915C52

Strings

combobox, xrefs: 2D915C49

Memory Dump Source

Source File: 0000000A.00000002.520302411.000000002D901000.00000020.00000001.01000000.00000007.sdmp, Offset: 2D900000, based on PE: true

Associated: 0000000A.00000002.520292586.000000002D900000.00000002.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000A.00000002.520318069.000000002D91E000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000A.00000002.520324941.000000002D922000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000A.00000002.520340216.000000002D923000.00000002.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_2d900000_MSWordServices.jbxd

Similarity

API ID: ClassLongNameWindowlstrcmpi
String ID: combobox
API String ID: 2054663530-2240613097
Opcode ID: 91a4ab4f22fe47e1f5f3019f0c281e6d29075eab5e452b725dd600cb9d6fa6a5
Instruction ID: bc0f85f5071f45261005918adf2a1cc1d6d640fd32f75bc4741aff20faede261
Opcode Fuzzy Hash: 91a4ab4f22fe47e1f5f3019f0c281e6d29075eab5e452b725dd600cb9d6fa6a5
Instruction Fuzzy Hash: 1FF09032A19129AFCB41EFA8CC45EBE73BCEF09652B414915F412F7180D734E6058B99

Function 6907389F Relevance: 6.3, APIs: 4, Instructions: 338fileCOMMONLIBRARYCODE

Download Yara Rule

APIs

GetConsoleOutputCP.KERNEL32 ref: 69073902

Part of subcall function 69079E65: WideCharToMultiByte.KERNEL32(00000000,00000000,690666A1,?,69066732,00000016,6906EE89,0000FDE9,?,?,00000008,?,00000003,69092580,00000024,6906EE89), ref: 69079F11

WriteFile.KERNEL32(?,?,00000000,?,00000000), ref: 69073B5D
WriteFile.KERNEL32(?,?,00000001,?,00000000), ref: 69073BA5
GetLastError.KERNEL32 ref: 69073C48

Memory Dump Source

Source File: 0000000A.00000002.520354624.0000000069051000.00000020.00000001.01000000.00000008.sdmp, Offset: 69050000, based on PE: true

Associated: 0000000A.00000002.520346406.0000000069050000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000A.00000002.520370595.0000000069084000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000A.00000002.520384600.0000000069094000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000A.00000002.520394111.00000000690BC000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000A.00000002.520406416.00000000690BD000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_69050000_MSWordServices.jbxd

Similarity

API ID: FileWrite$ByteCharConsoleErrorLastMultiOutputWide
String ID:
API String ID: 2112829910-0
Opcode ID: d45011419967abaefd4c99b481b70d4efdf86433e83b8b1e3e944bb897e6df42
Instruction ID: ae3369b9951005e568b03a3e30ef9af10cb2fc5d4b0901a97297608cc395d394
Opcode Fuzzy Hash: d45011419967abaefd4c99b481b70d4efdf86433e83b8b1e3e944bb897e6df42
Instruction Fuzzy Hash: DCD18A75E04258AFDF15CFA8D880AEDBBB5FF09324F14492AE865EB341E730A841CB54

Function 2D905DB3 Relevance: 6.3, APIs: 4, Instructions: 295COMMON

Download Yara Rule

APIs

__EH_prolog3_catch_GS.LIBCMT ref: 2D905DBD
??_V@YAXPAX@Z.MSVCR90 ref: 2D906097

Memory Dump Source

Source File: 0000000A.00000002.520302411.000000002D901000.00000020.00000001.01000000.00000007.sdmp, Offset: 2D900000, based on PE: true

Associated: 0000000A.00000002.520292586.000000002D900000.00000002.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000A.00000002.520318069.000000002D91E000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000A.00000002.520324941.000000002D922000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000A.00000002.520340216.000000002D923000.00000002.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_2d900000_MSWordServices.jbxd

Similarity

API ID: H_prolog3_catch_
String ID:
API String ID: 1329019490-0
Opcode ID: 835d5118c4c389efc01aa369a9ad2f27a86c6a407026eee3d0340d501c0a31c0
Instruction ID: 70b3245496cbd622bd9c181e425feb9650342d4c69caa356d7a8920fed700721
Opcode Fuzzy Hash: 835d5118c4c389efc01aa369a9ad2f27a86c6a407026eee3d0340d501c0a31c0
Instruction Fuzzy Hash: 7AC1BC70908268DBDB95DBA4DC88BACB7B5EF25301F1140D8F649B71A1DB349E84CF11

Function 690653EF Relevance: 6.2, APIs: 4, Instructions: 168COMMONLIBRARYCODE

Download Yara Rule

APIs

___AdjustPointer.LIBCMT ref: 690654B6
___AdjustPointer.LIBCMT ref: 690654D9
___AdjustPointer.LIBCMT ref: 69065575

Memory Dump Source

Source File: 0000000A.00000002.520354624.0000000069051000.00000020.00000001.01000000.00000008.sdmp, Offset: 69050000, based on PE: true

Associated: 0000000A.00000002.520346406.0000000069050000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000A.00000002.520370595.0000000069084000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000A.00000002.520384600.0000000069094000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000A.00000002.520394111.00000000690BC000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000A.00000002.520406416.00000000690BD000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_69050000_MSWordServices.jbxd

Similarity

API ID: AdjustPointer
String ID:
API String ID: 1740715915-0
Opcode ID: a3932ce952b1190cd4fce6c08fe8afa0c52557f6817beaa38b30933cff18cfb5
Instruction ID: a128ef7e1177fe8b44d78239abaa46bae78bc73d4dc98991add32a2d12e60465
Opcode Fuzzy Hash: a3932ce952b1190cd4fce6c08fe8afa0c52557f6817beaa38b30933cff18cfb5
Instruction Fuzzy Hash: 8251EE7A605602AFEB14CF14D964BAA77F6FF40319F104829E815CB2B2E731E981CB90

Function 69076ABA Relevance: 6.1, APIs: 4, Instructions: 132COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000A.00000002.520354624.0000000069051000.00000020.00000001.01000000.00000008.sdmp, Offset: 69050000, based on PE: true

Associated: 0000000A.00000002.520346406.0000000069050000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000A.00000002.520370595.0000000069084000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000A.00000002.520384600.0000000069094000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000A.00000002.520394111.00000000690BC000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000A.00000002.520406416.00000000690BD000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_69050000_MSWordServices.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: dea424ceb55448479b79fa66cf2909807221c31cee60fd26d68d93b577f7ec03
Instruction ID: 678047f9857519a4df27cf88f29f5ed8d1833fd23139a301d822b3e07b942e61
Opcode Fuzzy Hash: dea424ceb55448479b79fa66cf2909807221c31cee60fd26d68d93b577f7ec03
Instruction Fuzzy Hash: 5641F975B00B04EFD724DF78CD41B5ABBEAEF89724F10992AE002DF291D371A5818B85

Function 6907A0B1 Relevance: 6.1, APIs: 4, Instructions: 82COMMON

Download Yara Rule

APIs

Part of subcall function 69079E65: WideCharToMultiByte.KERNEL32(00000000,00000000,690666A1,?,69066732,00000016,6906EE89,0000FDE9,?,?,00000008,?,00000003,69092580,00000024,6906EE89), ref: 69079F11

GetLastError.KERNEL32 ref: 6907A115
__dosmaperr.LIBCMT ref: 6907A11C
GetLastError.KERNEL32(?,?,?,?), ref: 6907A156
__dosmaperr.LIBCMT ref: 6907A15D

Memory Dump Source

Source File: 0000000A.00000002.520354624.0000000069051000.00000020.00000001.01000000.00000008.sdmp, Offset: 69050000, based on PE: true

Associated: 0000000A.00000002.520346406.0000000069050000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000A.00000002.520370595.0000000069084000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000A.00000002.520384600.0000000069094000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000A.00000002.520394111.00000000690BC000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000A.00000002.520406416.00000000690BD000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_69050000_MSWordServices.jbxd

Similarity

API ID: ErrorLast__dosmaperr$ByteCharMultiWide
String ID:
API String ID: 1913693674-0
Opcode ID: f085d39f388924831384b41500c30864db0907eb3769e0b7b78ee539813f36fb
Instruction ID: 2003cbbb09db693dea5264b045f732fa6670d9d564aaec98a6c3101005e3630a
Opcode Fuzzy Hash: f085d39f388924831384b41500c30864db0907eb3769e0b7b78ee539813f36fb
Instruction Fuzzy Hash: 18218E35608705AFAB30DFA5C980B5BB7ADEF453B87209D19E8199B150DB30EC90CBA4

Function 2D912240 Relevance: 6.1, APIs: 4, Instructions: 81windowCOMMON

Download Yara Rule

APIs

LoadResource.KERNEL32(2D900000,00000000,2D900000,?,000000F0), ref: 2D91227A
LockResource.KERNEL32(00000000), ref: 2D912288
SendDlgItemMessageA.USER32(00000001,?,?,00000000,00000000), ref: 2D9122D8
FreeResource.KERNEL32(?), ref: 2D9122F0

Memory Dump Source

Source File: 0000000A.00000002.520302411.000000002D901000.00000020.00000001.01000000.00000007.sdmp, Offset: 2D900000, based on PE: true

Associated: 0000000A.00000002.520292586.000000002D900000.00000002.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000A.00000002.520318069.000000002D91E000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000A.00000002.520324941.000000002D922000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000A.00000002.520340216.000000002D923000.00000002.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_2d900000_MSWordServices.jbxd

Similarity

API ID: Resource$FreeItemLoadLockMessageSend
String ID:
API String ID: 3233515012-0
Opcode ID: 1b7faa6be833258d5e498f334db87327ba9e9dc0ba88ed7dab4f9a4b6b1b80f1
Instruction ID: e8448832fde1450ef6b0672f443cfc3d9c66f8f27f06f81af939815ef7d24cbf
Opcode Fuzzy Hash: 1b7faa6be833258d5e498f334db87327ba9e9dc0ba88ed7dab4f9a4b6b1b80f1
Instruction Fuzzy Hash: 40219271904118BFDB16AF98DC85ABE7BBCEB04351F50C466FA81F7240D274DE42ABA4

Function 6906EED9 Relevance: 6.1, APIs: 4, Instructions: 79COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000A.00000002.520354624.0000000069051000.00000020.00000001.01000000.00000008.sdmp, Offset: 69050000, based on PE: true

Associated: 0000000A.00000002.520346406.0000000069050000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000A.00000002.520370595.0000000069084000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000A.00000002.520384600.0000000069094000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000A.00000002.520394111.00000000690BC000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000A.00000002.520406416.00000000690BD000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_69050000_MSWordServices.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: ecfd93b739d8b7890c7b46db1811e94ceb373b24ffcecb9a8b2ef4dea6ad6a65
Instruction ID: 12aeafbf76fa8a6985a51f52c39bc60b8b038d208800c40013f0b6df59292d5d
Opcode Fuzzy Hash: ecfd93b739d8b7890c7b46db1811e94ceb373b24ffcecb9a8b2ef4dea6ad6a65
Instruction Fuzzy Hash: B3214D35608705AFDB20DF69CD80B6A7BADEF413A87119D15F958D71A1EB30E8A087A0

Function 6907B060 Relevance: 6.1, APIs: 4, Instructions: 74COMMON

Download Yara Rule

APIs

GetEnvironmentStringsW.KERNEL32 ref: 6907B068

Part of subcall function 69079E65: WideCharToMultiByte.KERNEL32(00000000,00000000,690666A1,?,69066732,00000016,6906EE89,0000FDE9,?,?,00000008,?,00000003,69092580,00000024,6906EE89), ref: 69079F11

FreeEnvironmentStringsW.KERNEL32(00000000), ref: 6907B0A0
FreeEnvironmentStringsW.KERNEL32(00000000), ref: 6907B0C0

Memory Dump Source

Source File: 0000000A.00000002.520354624.0000000069051000.00000020.00000001.01000000.00000008.sdmp, Offset: 69050000, based on PE: true

Associated: 0000000A.00000002.520346406.0000000069050000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000A.00000002.520370595.0000000069084000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000A.00000002.520384600.0000000069094000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000A.00000002.520394111.00000000690BC000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000A.00000002.520406416.00000000690BD000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_69050000_MSWordServices.jbxd

Similarity

API ID: EnvironmentStrings$Free$ByteCharMultiWide
String ID:
API String ID: 158306478-0
Opcode ID: 7cf6390dd93ae3af6011afbc9517874e8a1a5cc60706dc158ffc230a5d09b1b9
Instruction ID: 7aa0f21e1d30b137866824ca5b9f7b2ef7fe33cc29a1927865dbf7f1579c4315
Opcode Fuzzy Hash: 7cf6390dd93ae3af6011afbc9517874e8a1a5cc60706dc158ffc230a5d09b1b9
Instruction Fuzzy Hash: 1511E5B5704709BFAA3156B74D89E7F69ACDE462F83005D19F4109B100EF70CD0185F9

Function 2D904B96 Relevance: 6.1, APIs: 2, Strings: 2, Instructions: 73COMMON

Download Yara Rule

APIs

Part of subcall function 2D904873: ??_V@YAXPAX@Z.MSVCR90(?,?,2D904B1B), ref: 2D904883

MultiByteToWideChar.KERNEL32(?,00000000,?,000000FF,00000000,00000000), ref: 2D904BF9
MultiByteToWideChar.KERNEL32(?,00000000,?,000000FF,?,?), ref: 2D904C39

Strings

ek29, xrefs: 2D904C13
pq8e, xrefs: 2D904BD3

Memory Dump Source

Source File: 0000000A.00000002.520302411.000000002D901000.00000020.00000001.01000000.00000007.sdmp, Offset: 2D900000, based on PE: true

Associated: 0000000A.00000002.520292586.000000002D900000.00000002.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000A.00000002.520318069.000000002D91E000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000A.00000002.520324941.000000002D922000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000A.00000002.520340216.000000002D923000.00000002.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_2d900000_MSWordServices.jbxd

Similarity

API ID: ByteCharMultiWide
String ID: ek29$pq8e
API String ID: 626452242-1107266725
Opcode ID: 289832f292bef27208cec160851a7ccf402e3a16d17e3959b5b585dc70defbb3
Instruction ID: 0c8b9caa0e7264df4785eb4f4757beb148e7b72d88b91dd45b10491b5177f536
Opcode Fuzzy Hash: 289832f292bef27208cec160851a7ccf402e3a16d17e3959b5b585dc70defbb3
Instruction Fuzzy Hash: 47118171908118FFCF016F95DC80CEE7F7DFF062A2B218166F615B2150E6319E51AB60

Function 2D904F8C Relevance: 6.1, APIs: 4, Instructions: 66timeCOMMON

Download Yara Rule

APIs

FileTimeToLocalFileTime.KERNEL32(?,?), ref: 2D904FAA
FileTimeToSystemTime.KERNEL32(?,?), ref: 2D904FB8
GetDateFormatW.KERNEL32 ref: 2D904FD0
GetTimeFormatW.KERNEL32(00000400,?,?,00000000,00000000,?), ref: 2D905018

Memory Dump Source

Source File: 0000000A.00000002.520302411.000000002D901000.00000020.00000001.01000000.00000007.sdmp, Offset: 2D900000, based on PE: true

Associated: 0000000A.00000002.520292586.000000002D900000.00000002.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000A.00000002.520318069.000000002D91E000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000A.00000002.520324941.000000002D922000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000A.00000002.520340216.000000002D923000.00000002.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_2d900000_MSWordServices.jbxd

Similarity

API ID: Time$File$Format$DateLocalSystem
String ID:
API String ID: 4010208002-0
Opcode ID: 0d506c86bc8d20333761228120dc7a4f1e3ba981059fe8d137410891a025c7ce
Instruction ID: 83d4b8e3fc89204dc5e3ab2e3d1cdb7f2211526a78d3230099f6a6d03e2b096c
Opcode Fuzzy Hash: 0d506c86bc8d20333761228120dc7a4f1e3ba981059fe8d137410891a025c7ce
Instruction Fuzzy Hash: 57116D76610209ABDB10CBA4DC46FEB77BDEF49B06F018061FA05E7281E67099418BE0

Function 2D91199D Relevance: 6.1, APIs: 4, Instructions: 55windowCOMMON

Download Yara Rule

APIs

IsWindowEnabled.USER32(00000000), ref: 2D9119AD
EnableWindow.USER32(00000000,00000001), ref: 2D9119DA

Part of subcall function 2D913955: IsWindow.USER32(?), ref: 2D91397E
Part of subcall function 2D913955: EnableWindow.USER32(?,00000001), ref: 2D913990
Part of subcall function 2D913955: ??_V@YAXPAX@Z.MSVCR90(?,00000000,00000000,?,2D9119D5,?,?,?,2D911DC9,?,?,00000034,2D907728,?,?,?), ref: 2D9139A8

GetWindowLongA.USER32(00000000,000000F0), ref: 2D9119E5
SendMessageA.USER32(?,0000036E,?,?,?,?,?,2D911DC9,?,?,00000034,2D907728,?,?,?), ref: 2D911A2A

Memory Dump Source

Source File: 0000000A.00000002.520302411.000000002D901000.00000020.00000001.01000000.00000007.sdmp, Offset: 2D900000, based on PE: true

Associated: 0000000A.00000002.520292586.000000002D900000.00000002.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000A.00000002.520318069.000000002D91E000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000A.00000002.520324941.000000002D922000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000A.00000002.520340216.000000002D923000.00000002.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_2d900000_MSWordServices.jbxd

Similarity

API ID: Window$Enable$EnabledLongMessageSend
String ID:
API String ID: 2621221260-0
Opcode ID: 80d8b98df82bfdefd72ce49d6432a82e25c13e1119175359add0ad463fe53604
Instruction ID: c30a9f0a5a82610760bf2824b9108d5751bd2d6751d474c64f9f03664168c86f
Opcode Fuzzy Hash: 80d8b98df82bfdefd72ce49d6432a82e25c13e1119175359add0ad463fe53604
Instruction Fuzzy Hash: A0118E31714609BFDB124F65D945BAE7AB9EF40A91F1081AAF626F6250EB31D940CF40

Function 2D911920 Relevance: 6.0, APIs: 4, Instructions: 49COMMON

Download Yara Rule

APIs

GetTopWindow.USER32(?), ref: 2D91192E
GetTopWindow.USER32(00000000), ref: 2D91196D
GetWindow.USER32(00000000,00000002), ref: 2D91198B

Memory Dump Source

Source File: 0000000A.00000002.520302411.000000002D901000.00000020.00000001.01000000.00000007.sdmp, Offset: 2D900000, based on PE: true

Associated: 0000000A.00000002.520292586.000000002D900000.00000002.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000A.00000002.520318069.000000002D91E000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000A.00000002.520324941.000000002D922000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000A.00000002.520340216.000000002D923000.00000002.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_2d900000_MSWordServices.jbxd

Similarity

API ID: Window
String ID:
API String ID: 2353593579-0
Opcode ID: 08ec9359e15abde23d99860a6cd64dff02d268bbee6ccc83fcd278bd801c5180
Instruction ID: 5d992fe696319ac45cd976b74f2a287ec8cf0b78a22073e032b82c1f42012e8b
Opcode Fuzzy Hash: 08ec9359e15abde23d99860a6cd64dff02d268bbee6ccc83fcd278bd801c5180
Instruction Fuzzy Hash: 7201D03600411EBBCF135F90AC04FAE3B6ABF18391F018051FA24B5160C736C661EFA5

Function 2D91137C Relevance: 6.0, APIs: 4, Instructions: 49COMMON

Download Yara Rule

APIs

FindResourceW.KERNEL32(2D900000,?,00000005,?,?,?,2D911500,2D91E6DC), ref: 2D9113A3
LoadResource.KERNEL32(2D900000,00000000,?,?,?,2D911500,2D91E6DC), ref: 2D9113AF
LockResource.KERNEL32(?,?,?,?,2D911500,2D91E6DC), ref: 2D9113C0
FreeResource.KERNEL32(?,?,?,?,2D911500,2D91E6DC), ref: 2D9113DF

Memory Dump Source

Source File: 0000000A.00000002.520302411.000000002D901000.00000020.00000001.01000000.00000007.sdmp, Offset: 2D900000, based on PE: true

Associated: 0000000A.00000002.520292586.000000002D900000.00000002.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000A.00000002.520318069.000000002D91E000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000A.00000002.520324941.000000002D922000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000A.00000002.520340216.000000002D923000.00000002.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_2d900000_MSWordServices.jbxd

Similarity

API ID: Resource$FindFreeLoadLock
String ID:
API String ID: 1078018258-0
Opcode ID: 54d8f05b15d5572b08f131e045fa052e8e0d0e40a8f400d6db05671858a71bfe
Instruction ID: 931d9dc8176b0f97ab4adb0ba254565b35c1b62b8a3baa81b6b29e161163d7ce
Opcode Fuzzy Hash: 54d8f05b15d5572b08f131e045fa052e8e0d0e40a8f400d6db05671858a71bfe
Instruction Fuzzy Hash: AA012632205D58BFC7432BA288C8A7A33BCAF4561670141EDFA01F7605E375C9838F94

Function 2D9111CF Relevance: 6.0, APIs: 4, Instructions: 48COMMON

Download Yara Rule

APIs

GetDlgItem.USER32(000088C4,?), ref: 2D9111DA
GetTopWindow.USER32(00000000), ref: 2D9111ED

Part of subcall function 2D9111CF: GetWindow.USER32(00000000,00000002), ref: 2D911234

GetTopWindow.USER32(000088C4), ref: 2D91121D

Memory Dump Source

Source File: 0000000A.00000002.520302411.000000002D901000.00000020.00000001.01000000.00000007.sdmp, Offset: 2D900000, based on PE: true

Associated: 0000000A.00000002.520292586.000000002D900000.00000002.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000A.00000002.520318069.000000002D91E000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000A.00000002.520324941.000000002D922000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000A.00000002.520340216.000000002D923000.00000002.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_2d900000_MSWordServices.jbxd

Similarity

API ID: Window$Item
String ID:
API String ID: 369458955-0
Opcode ID: 54411f134417d4655839eaf709aa2096772af0e2e60b50b05ad5d5f3c03e9644
Instruction ID: ab10189fd4c441d82d3d6312f069a09a04fe38d623a9eaf8bd02f5b59161be8c
Opcode Fuzzy Hash: 54411f134417d4655839eaf709aa2096772af0e2e60b50b05ad5d5f3c03e9644
Instruction Fuzzy Hash: 25014B3610961EB7CB132E619C00F9E3A6DAF157E1F018460FE14F5111E736D6518EE9

Function 2D911A35 Relevance: 6.0, APIs: 4, Instructions: 39COMMON

Download Yara Rule

APIs

GetLastActivePopup.USER32(?), ref: 2D911A66
GetForegroundWindow.USER32 ref: 2D911A78
IsWindowEnabled.USER32(?), ref: 2D911A8B
SetForegroundWindow.USER32(?), ref: 2D911A98

Memory Dump Source

Source File: 0000000A.00000002.520302411.000000002D901000.00000020.00000001.01000000.00000007.sdmp, Offset: 2D900000, based on PE: true

Associated: 0000000A.00000002.520292586.000000002D900000.00000002.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000A.00000002.520318069.000000002D91E000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000A.00000002.520324941.000000002D922000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000A.00000002.520340216.000000002D923000.00000002.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_2d900000_MSWordServices.jbxd

Similarity

API ID: Window$Foreground$ActiveEnabledLastPopup
String ID:
API String ID: 3209796547-0
Opcode ID: 57b67dea20ab1cfdb21bdbab79012c21e0ff4010b30ead0e195c94141dd8ab17
Instruction ID: 52edf175b5447f2cadfeae04027de49d3de9673216f0d637e3d9f950081aa5ba
Opcode Fuzzy Hash: 57b67dea20ab1cfdb21bdbab79012c21e0ff4010b30ead0e195c94141dd8ab17
Instruction Fuzzy Hash: 94F08C3190D70AFFDF126B60E80866A7BACAF00B92F0081A4F625F0050CBB9C148CEA0

Function 2D915923 Relevance: 6.0, APIs: 4, Instructions: 36COMMONLIBRARYCODE

Download Yara Rule

APIs

__EH_prolog3.LIBCMT ref: 2D91592A
GetLastError.KERNEL32(00000004,2D910854,00000004,2D9109B6,00000000,?,?,?,2D910E48,00000004,2D904F59), ref: 2D91592F
TlsGetValue.KERNEL32(00000016,?,?,?,2D910E48,00000004,2D904F59), ref: 2D915955
SetLastError.KERNEL32(00000000,?,?,?,2D910E48,00000004,2D904F59), ref: 2D915984

Part of subcall function 2D915E13: TlsAlloc.KERNEL32(00000000,?,2D915946,?,?,?,2D910E48,00000004,2D904F59), ref: 2D915E1B
Part of subcall function 2D915E13: GetVersion.KERNEL32(?,2D915946,?,?,?,2D910E48,00000004,2D904F59), ref: 2D915E1F
Part of subcall function 2D915E13: TlsAlloc.KERNEL32(?,2D915946,?,?,?,2D910E48,00000004,2D904F59), ref: 2D915E32

Memory Dump Source

Source File: 0000000A.00000002.520302411.000000002D901000.00000020.00000001.01000000.00000007.sdmp, Offset: 2D900000, based on PE: true

Associated: 0000000A.00000002.520292586.000000002D900000.00000002.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000A.00000002.520318069.000000002D91E000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000A.00000002.520324941.000000002D922000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000A.00000002.520340216.000000002D923000.00000002.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_2d900000_MSWordServices.jbxd

Similarity

API ID: AllocErrorLast$H_prolog3ValueVersion
String ID:
API String ID: 2925315393-0
Opcode ID: 66e8e6d658e13f31534e479bad1f924a698737b9499dfaf2db19df44a7c1cb04
Instruction ID: 483875cef858cf43397180bc92cc12ed245fe5da4001d6435c0023297c9e3577
Opcode Fuzzy Hash: 66e8e6d658e13f31534e479bad1f924a698737b9499dfaf2db19df44a7c1cb04
Instruction Fuzzy Hash: 03F0B471A1821E8FC7C697B8940476D26B4AF08B71B930755FA31F73C0DB38CA004A5A

Function 2D91416D Relevance: 6.0, APIs: 4, Instructions: 36COMMONLIBRARYCODE

Download Yara Rule

APIs

__EH_prolog3.LIBCMT ref: 2D914174
DeleteObject.GDI32(?), ref: 2D914197
DeleteObject.GDI32(?), ref: 2D9141A4
DeleteObject.GDI32(?), ref: 2D9141B1

Memory Dump Source

Source File: 0000000A.00000002.520302411.000000002D901000.00000020.00000001.01000000.00000007.sdmp, Offset: 2D900000, based on PE: true

Associated: 0000000A.00000002.520292586.000000002D900000.00000002.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000A.00000002.520318069.000000002D91E000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000A.00000002.520324941.000000002D922000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000A.00000002.520340216.000000002D923000.00000002.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_2d900000_MSWordServices.jbxd

Similarity

API ID: DeleteObject$H_prolog3
String ID:
API String ID: 2471701793-0
Opcode ID: 1f4de7d7d8c7414544a6f285e749abf87652850f3d5e3067ab21ac23b48c6097
Instruction ID: ac2ff6f8cd5e26289523ab2c2239d7aa1610c2baf7c8e08779668ebe9deba362
Opcode Fuzzy Hash: 1f4de7d7d8c7414544a6f285e749abf87652850f3d5e3067ab21ac23b48c6097
Instruction Fuzzy Hash: 6FF04F75A00719CBCB10EFA988C011EF7FABF6C610B610A6DF299F7650CB70E9408A45

Function 2D90845B Relevance: 6.0, APIs: 4, Instructions: 34windowCOMMON

Download Yara Rule

APIs

GetSysColor.USER32(0000000F), ref: 2D908462
SendMessageA.USER32(?,00000443,00000000,00000000), ref: 2D90847F
SendMessageA.USER32(?,0000043B,00000000,00000000), ref: 2D90848B
SendMessageA.USER32(?,00000445,00000000,00000000), ref: 2D9084A8

Memory Dump Source

Source File: 0000000A.00000002.520302411.000000002D901000.00000020.00000001.01000000.00000007.sdmp, Offset: 2D900000, based on PE: true

Associated: 0000000A.00000002.520292586.000000002D900000.00000002.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000A.00000002.520318069.000000002D91E000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000A.00000002.520324941.000000002D922000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000A.00000002.520340216.000000002D923000.00000002.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_2d900000_MSWordServices.jbxd

Similarity

API ID: MessageSend$Color
String ID:
API String ID: 3922397608-0
Opcode ID: 9b4e225869c85611c0400b8a98fd87437f454061ebb3ac1a74ae71067fa63ba8
Instruction ID: 8c9f1c85d2a42ab6ec9d223c481f333789731879ec8ce116e8d7e3c2ab31fb3f
Opcode Fuzzy Hash: 9b4e225869c85611c0400b8a98fd87437f454061ebb3ac1a74ae71067fa63ba8
Instruction Fuzzy Hash: 54F0A771600558B6DB115F13EC08F6B3E6CEBC5FA3F00803AB71865050C6714542CAA4

Function 2D9109DE Relevance: 6.0, APIs: 4, Instructions: 33COMMON

Download Yara Rule

APIs

IsWindowUnicode.USER32(?), ref: 2D9109F9
DefWindowProcW.USER32(?,?,?,?), ref: 2D910A0F
DefWindowProcA.USER32(?,?,?,?), ref: 2D910A17
CallWindowProcA.USER32(?,?,?,?,?), ref: 2D910A2C

Memory Dump Source

Source File: 0000000A.00000002.520302411.000000002D901000.00000020.00000001.01000000.00000007.sdmp, Offset: 2D900000, based on PE: true

Associated: 0000000A.00000002.520292586.000000002D900000.00000002.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000A.00000002.520318069.000000002D91E000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000A.00000002.520324941.000000002D922000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000A.00000002.520340216.000000002D923000.00000002.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_2d900000_MSWordServices.jbxd

Similarity

API ID: Window$Proc$CallUnicode
String ID:
API String ID: 3117573011-0
Opcode ID: 1e52d4245d125d9cb33daf9677ce63e8d39a43113ee0ddf8adf46cfff58780c6
Instruction ID: fff0e70afa0a5b716be6dd402994ef3397ef67d50685aa290aa74ab80a966d9c
Opcode Fuzzy Hash: 1e52d4245d125d9cb33daf9677ce63e8d39a43113ee0ddf8adf46cfff58780c6
Instruction Fuzzy Hash: 3BF0F936204209EFCF129FA4D808E9A7BB9FF087917108458FA5AF6521D732D824DF54

Function 2D9158AB Relevance: 6.0, APIs: 4, Instructions: 30COMMONLIBRARYCODE

Download Yara Rule

APIs

__EH_prolog3.LIBCMT ref: 2D9158B2
free.MSVCR90 ref: 2D9158CB
TlsGetValue.KERNEL32(00000004,2D912DCD,?,?,2D9159B3,00000001,2D91263C,?,?,?,?,?,?,?,?,?), ref: 2D9158DC
TlsSetValue.KERNEL32(00000000,?,?,2D9159B3,00000001,2D91263C,?,?,?,?,?,?,?,?,?,?), ref: 2D9158EE

Memory Dump Source

Source File: 0000000A.00000002.520302411.000000002D901000.00000020.00000001.01000000.00000007.sdmp, Offset: 2D900000, based on PE: true

Associated: 0000000A.00000002.520292586.000000002D900000.00000002.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000A.00000002.520318069.000000002D91E000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000A.00000002.520324941.000000002D922000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000A.00000002.520340216.000000002D923000.00000002.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_2d900000_MSWordServices.jbxd

Similarity

API ID: Value$H_prolog3free
String ID:
API String ID: 3023147540-0
Opcode ID: ff98934319097a55a104667ee5b36bf59932ea28c4652e42eadead6ee6551ef0
Instruction ID: 9c2edcbf3c3ef647b5a0ca480ff8bef92f0284ab0621fa8f9794b14a9f086963
Opcode Fuzzy Hash: ff98934319097a55a104667ee5b36bf59932ea28c4652e42eadead6ee6551ef0
Instruction Fuzzy Hash: 87F06D30908709DFDB25DBA0C8087997BB8FF10715F9185A9F566B62D0DBB4EA04CB18

Function 69081BDC Relevance: 6.0, APIs: 4, Instructions: 29COMMONLIBRARYCODE

Download Yara Rule

APIs

WriteConsoleW.KERNEL32 ref: 69081BF3
GetLastError.KERNEL32(?,6907E1F8,00000000,00000001,00000000,?,?,69073C9C,?,00000000,00000000,?,?,?,6907425A,?), ref: 69081BFF

Part of subcall function 69081BC5: CloseHandle.KERNEL32(FFFFFFFE), ref: 69081BD5

___initconout.LIBCMT ref: 69081C0F

Part of subcall function 69081B87: CreateFileW.KERNEL32(CONOUT$,40000000,00000003,00000000,00000003,00000000,00000000), ref: 69081B9A

WriteConsoleW.KERNEL32 ref: 69081C24

Memory Dump Source

Source File: 0000000A.00000002.520354624.0000000069051000.00000020.00000001.01000000.00000008.sdmp, Offset: 69050000, based on PE: true

Associated: 0000000A.00000002.520346406.0000000069050000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000A.00000002.520370595.0000000069084000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000A.00000002.520384600.0000000069094000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000A.00000002.520394111.00000000690BC000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000A.00000002.520406416.00000000690BD000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_69050000_MSWordServices.jbxd

Similarity

API ID: ConsoleWrite$CloseCreateErrorFileHandleLast___initconout
String ID:
API String ID: 2744216297-0
Opcode ID: 5b576090506cb9c6c279751270c1a30080a96a80620bdf144267163143053011
Instruction ID: 50b0cc2e554946bd88bc67b9381e43491d74cc827089e4c0fcbe14b6a1f33f28
Opcode Fuzzy Hash: 5b576090506cb9c6c279751270c1a30080a96a80620bdf144267163143053011
Instruction Fuzzy Hash: 45F03736604155BBCF521F91DE08A9A3F6EFF067A4F014420FA2987110D73188209BD4

Function 2D916019 Relevance: 6.0, APIs: 4, Instructions: 24COMMON

Download Yara Rule

APIs

Part of subcall function 2D915FCC: KiUserCallbackDispatcher.NTDLL(00000002,?,2D916023,?,?,?,2D912209), ref: 2D915FDE
Part of subcall function 2D915FCC: GetSystemMetrics.USER32(00000003,?,2D916023,?,?,?,2D912209), ref: 2D915FE8

GetDC.USER32(00000000), ref: 2D916025
GetDeviceCaps.GDI32(00000000,00000058,?,?,?,2D912209), ref: 2D916036
GetDeviceCaps.GDI32(00000000,0000005A,?,?,?,2D912209), ref: 2D91603E
ReleaseDC.USER32(00000000,00000000), ref: 2D916046

Memory Dump Source

Source File: 0000000A.00000002.520302411.000000002D901000.00000020.00000001.01000000.00000007.sdmp, Offset: 2D900000, based on PE: true

Associated: 0000000A.00000002.520292586.000000002D900000.00000002.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000A.00000002.520318069.000000002D91E000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000A.00000002.520324941.000000002D922000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000A.00000002.520340216.000000002D923000.00000002.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_2d900000_MSWordServices.jbxd

Similarity

API ID: CapsDevice$CallbackDispatcherMetricsReleaseSystemUser
String ID:
API String ID: 1894321826-0
Opcode ID: 049b6a6070c98365043b1ea60942dca297bc5282477a8fca11a903662082954e
Instruction ID: 5d43c648738982464ad1a4cc755869e713bb2351d22f70d44767bccc16c9e39a
Opcode Fuzzy Hash: 049b6a6070c98365043b1ea60942dca297bc5282477a8fca11a903662082954e
Instruction Fuzzy Hash: 69E04F716447146AD31017729C48F4BBFACEF54A63F014422F608E72C1CA7888008EA0

Function 69058AA6 Relevance: 5.6, APIs: 2, Strings: 1, Instructions: 341COMMON

Download Yara Rule

APIs

_strcspn.LIBCMT ref: 69058B58
_strcspn.LIBCMT ref: 69058B9B

Strings

@, xrefs: 69058D25

Memory Dump Source

Source File: 0000000A.00000002.520354624.0000000069051000.00000020.00000001.01000000.00000008.sdmp, Offset: 69050000, based on PE: true

Associated: 0000000A.00000002.520346406.0000000069050000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000A.00000002.520370595.0000000069084000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000A.00000002.520384600.0000000069094000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000A.00000002.520394111.00000000690BC000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000A.00000002.520406416.00000000690BD000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_69050000_MSWordServices.jbxd

Similarity

API ID: _strcspn
String ID: @
API String ID: 3709121408-2766056989
Opcode ID: 83e7c8863bdaf29565d6ccad28c55d3bca9863ac6468011ce02f888cbdbd0b44
Instruction ID: b2be53ce17ce22bad57706c313a706a3c4727041316dcf8e78138efbfb862951
Opcode Fuzzy Hash: 83e7c8863bdaf29565d6ccad28c55d3bca9863ac6468011ce02f888cbdbd0b44
Instruction Fuzzy Hash: D1E10875910249EFDF05DFA4CA91BEDBBB9FF09304F009869E916AB260DB309961CF50

Function 6906EC8D Relevance: 5.4, APIs: 2, Strings: 1, Instructions: 194COMMON

Download Yara Rule

APIs

__startOneArgErrorHandling.LIBCMT ref: 6906ED1D

Strings

pow, xrefs: 6906ECF5, 6906ED12

Memory Dump Source

Source File: 0000000A.00000002.520354624.0000000069051000.00000020.00000001.01000000.00000008.sdmp, Offset: 69050000, based on PE: true

Associated: 0000000A.00000002.520346406.0000000069050000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000A.00000002.520370595.0000000069084000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000A.00000002.520384600.0000000069094000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000A.00000002.520394111.00000000690BC000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000A.00000002.520406416.00000000690BD000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_69050000_MSWordServices.jbxd

Similarity

API ID: ErrorHandling__start
String ID: pow
API String ID: 3213639722-2276729525
Opcode ID: b6c4cec34abcb23ef1227fa5e03cab40b8981149d7d6ee0e81cb218e8ac2edf0
Instruction ID: be898928cb7b22f0b77aea0b5e90061f1a923eaa02dcb85c81538c93351eee44
Opcode Fuzzy Hash: b6c4cec34abcb23ef1227fa5e03cab40b8981149d7d6ee0e81cb218e8ac2edf0
Instruction Fuzzy Hash: 8B513D71B0C301D6DB117B18CE5137E37E4AB42760F608D59E4F58B2F9EB3584A58B8A

Function 690659EB Relevance: 5.4, APIs: 1, Strings: 2, Instructions: 112COMMONLIBRARYCODE

Download Yara Rule

APIs

EncodePointer.KERNEL32(00000000,?,00000000,1FFFFFFF), ref: 69065A10

Strings

RCC, xrefs: 69065A2A
MOC, xrefs: 69065A22

Memory Dump Source

Source File: 0000000A.00000002.520354624.0000000069051000.00000020.00000001.01000000.00000008.sdmp, Offset: 69050000, based on PE: true

Associated: 0000000A.00000002.520346406.0000000069050000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000A.00000002.520370595.0000000069084000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000A.00000002.520384600.0000000069094000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000A.00000002.520394111.00000000690BC000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000A.00000002.520406416.00000000690BD000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_69050000_MSWordServices.jbxd

Similarity

API ID: EncodePointer
String ID: MOC$RCC
API String ID: 2118026453-2084237596
Opcode ID: 8108d59168dc3bfde3489f6746d468b53c594c2fcf8c595186b91d351c011160
Instruction ID: ccd70cad2907e7201789f43bc522fdd5eeb030bc0bbcc8312e40261074fdafe9
Opcode Fuzzy Hash: 8108d59168dc3bfde3489f6746d468b53c594c2fcf8c595186b91d351c011160
Instruction Fuzzy Hash: 0A414779900209AFCF05CF94CD81BEE7BB6FF48304F149959F914A7262E3359950DB50

Function 2D906FBB Relevance: 5.3, APIs: 2, Strings: 1, Instructions: 86COMMON

Download Yara Rule

APIs

__EH_prolog3.LIBCMT ref: 2D906FC2
memset.MSVCR90 ref: 2D906FD5

Part of subcall function 2D9052D6: GetProcAddress.KERNEL32(00000000,00000142), ref: 2D9052F4

Strings

D, xrefs: 2D907047

Memory Dump Source

Source File: 0000000A.00000002.520302411.000000002D901000.00000020.00000001.01000000.00000007.sdmp, Offset: 2D900000, based on PE: true

Associated: 0000000A.00000002.520292586.000000002D900000.00000002.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000A.00000002.520318069.000000002D91E000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000A.00000002.520324941.000000002D922000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000A.00000002.520340216.000000002D923000.00000002.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_2d900000_MSWordServices.jbxd

Similarity

API ID: AddressH_prolog3Procmemset
String ID: D
API String ID: 2467443255-2746444292
Opcode ID: 117e021fff5590a732bb8b935fbb7edc062de3de9eae6d8993668aa5faf3d5fa
Instruction ID: 9ff2c32d820c6c72b97873b9a0018c80b89470db1880bf24caec9c61fc4d271f
Opcode Fuzzy Hash: 117e021fff5590a732bb8b935fbb7edc062de3de9eae6d8993668aa5faf3d5fa
Instruction Fuzzy Hash: 95315070A04205EBDB15DFA0D884EAD7BB9FF84351F204558F619FB290DB36E905CB50

Function 69068D88 Relevance: 5.3, APIs: 2, Strings: 1, Instructions: 73COMMONLIBRARYCODE

Download Yara Rule

APIs

Part of subcall function 69075AAD: MultiByteToWideChar.KERNEL32(6907AE39,00000100,E8458D00,00000000,00000000,00000020,?,69078002,00000000,00000000,00000100,00000020,00000000,00000000,E8458D00,00000100), ref: 69075B1D

GetLastError.KERNEL32(?,?,?,?,?,?,?,69068FCF,00000000,?,00000000,2463616368652E646174), ref: 69068DEC
__dosmaperr.LIBCMT ref: 69068DF3

Strings

2463616368652E646174, xrefs: 69068D8D

Memory Dump Source

Source File: 0000000A.00000002.520354624.0000000069051000.00000020.00000001.01000000.00000008.sdmp, Offset: 69050000, based on PE: true

Associated: 0000000A.00000002.520346406.0000000069050000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000A.00000002.520370595.0000000069084000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000A.00000002.520384600.0000000069094000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000A.00000002.520394111.00000000690BC000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000A.00000002.520406416.00000000690BD000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_69050000_MSWordServices.jbxd

Similarity

API ID: ByteCharErrorLastMultiWide__dosmaperr
String ID: 2463616368652E646174
API String ID: 2434981716-3036274828
Opcode ID: d03fba51b03074a4d515f4210a74c47d87a38145ccda1aff91c6979ede16ba53
Instruction ID: 3f3db713dfbc2a55e8e39ffb47e7f2efd91343ace5537b755a36a6272ef85925
Opcode Fuzzy Hash: d03fba51b03074a4d515f4210a74c47d87a38145ccda1aff91c6979ede16ba53
Instruction Fuzzy Hash: A921A235644611FBDB218F29CD01B4BB7E9EF923B0B118919ED68A71B0E771E85187E0

Function 2D9117FB Relevance: 5.3, APIs: 1, Strings: 2, Instructions: 67COMMON

Download Yara Rule

APIs

Part of subcall function 2D915923: __EH_prolog3.LIBCMT ref: 2D91592A
Part of subcall function 2D915923: GetLastError.KERNEL32(00000004,2D910854,00000004,2D9109B6,00000000,?,?,?,2D910E48,00000004,2D904F59), ref: 2D91592F

GetClassInfoA.USER32(-00000068,?), ref: 2D91185A

Part of subcall function 2D904609: _vsnprintf.MSVCR90 ref: 2D90463A

Strings

Afx:%x, xrefs: 2D911825
Afx:%x:%x:%x:%x, xrefs: 2D91183F

Memory Dump Source

Source File: 0000000A.00000002.520302411.000000002D901000.00000020.00000001.01000000.00000007.sdmp, Offset: 2D900000, based on PE: true

Associated: 0000000A.00000002.520292586.000000002D900000.00000002.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000A.00000002.520318069.000000002D91E000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000A.00000002.520324941.000000002D922000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000A.00000002.520340216.000000002D923000.00000002.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_2d900000_MSWordServices.jbxd

Similarity

API ID: ClassErrorH_prolog3InfoLast_vsnprintf
String ID: Afx:%x$Afx:%x:%x:%x:%x
API String ID: 3801848739-1102061830
Opcode ID: c69841014955217e7e385bc9ec53b0498650c417242edd951a598dc0d0615a4c
Instruction ID: 107c67de3258487db6a2303d55d5b6354ff1e8bd694737d3a18b7e341cff1c74
Opcode Fuzzy Hash: c69841014955217e7e385bc9ec53b0498650c417242edd951a598dc0d0615a4c
Instruction Fuzzy Hash: 43210BB1D0420DABCB01DF99D840BEE7BB9EF59651F05806AFA04F2241E774DA50CBA5

Function 6905392D Relevance: 5.3, APIs: 2, Strings: 1, Instructions: 38COMMONLIBRARYCODE

Download Yara Rule

APIs

std::_Lockit::_Lockit.LIBCPMT ref: 69053939
std::_Locinfo::_Locinfo_ctor.LIBCPMT ref: 6905398C

Part of subcall function 69060EDD: _Yarn.LIBCPMT ref: 69060EFC
Part of subcall function 69060EDD: _Yarn.LIBCPMT ref: 69060F20

Strings

bad locale name, xrefs: 69053995

Memory Dump Source

Source File: 0000000A.00000002.520354624.0000000069051000.00000020.00000001.01000000.00000008.sdmp, Offset: 69050000, based on PE: true

Associated: 0000000A.00000002.520346406.0000000069050000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000A.00000002.520370595.0000000069084000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000A.00000002.520384600.0000000069094000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000A.00000002.520394111.00000000690BC000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000A.00000002.520406416.00000000690BD000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_69050000_MSWordServices.jbxd

Similarity

API ID: Yarnstd::_$Locinfo::_Locinfo_ctorLockitLockit::_
String ID: bad locale name
API String ID: 1908188788-1405518554
Opcode ID: 215eb80642424f05ccdf342c97be511eef18ca04b32126efc71788b3ef21b9dd
Instruction ID: d4b257d44c46ae8ff30a3cbb706b41faa5ecbeab20a4b751394df07b5b9a84c9
Opcode Fuzzy Hash: 215eb80642424f05ccdf342c97be511eef18ca04b32126efc71788b3ef21b9dd
Instruction Fuzzy Hash: C7F01934904148EBCF08EB98CA60BACB371AF5130CF60985CD1032B291CB306F61EB65

Function 2D90F61C Relevance: 5.3, APIs: 2, Strings: 1, Instructions: 37windowCOMMON

Download Yara Rule

APIs

GetModuleHandleW.KERNEL32(mso.dll,?,2D90FBDC,?,00000201,?,?,80000000), ref: 2D90F624
MessageBoxW.USER32 ref: 2D90F681

Strings

mso.dll, xrefs: 2D90F61F

Memory Dump Source

Source File: 0000000A.00000002.520302411.000000002D901000.00000020.00000001.01000000.00000007.sdmp, Offset: 2D900000, based on PE: true

Associated: 0000000A.00000002.520292586.000000002D900000.00000002.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000A.00000002.520318069.000000002D91E000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000A.00000002.520324941.000000002D922000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000A.00000002.520340216.000000002D923000.00000002.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_2d900000_MSWordServices.jbxd

Similarity

API ID: HandleMessageModule
String ID: mso.dll
API String ID: 2216695990-1671880577
Opcode ID: 797a1109c104390c87ba88ad7f48cea3152b35379eca3dfdfbe1541da8377aab
Instruction ID: ac4b5729e991a3ca97b0f82888eebf9c3b318a16b572cebeafba52447e5c4e01
Opcode Fuzzy Hash: 797a1109c104390c87ba88ad7f48cea3152b35379eca3dfdfbe1541da8377aab
Instruction Fuzzy Hash: 83F0E93219840DBFE344DFB4DC06FA5379CEB14B86F048110F145E62D0DA6CD6848B35

Function 690612E8 Relevance: 5.3, APIs: 2, Strings: 1, Instructions: 33COMMONLIBRARYCODE

Download Yara Rule

APIs

std::_Lockit::_Lockit.LIBCPMT ref: 690612F3
std::_Lockit::~_Lockit.LIBCPMT ref: 69061331

Strings

outlook-web.ddns.net, xrefs: 690612EC

Memory Dump Source

Source File: 0000000A.00000002.520354624.0000000069051000.00000020.00000001.01000000.00000008.sdmp, Offset: 69050000, based on PE: true

Associated: 0000000A.00000002.520346406.0000000069050000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000A.00000002.520370595.0000000069084000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000A.00000002.520384600.0000000069094000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000A.00000002.520394111.00000000690BC000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000A.00000002.520406416.00000000690BD000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_69050000_MSWordServices.jbxd

Similarity

API ID: Lockitstd::_$Lockit::_Lockit::~_
String ID: outlook-web.ddns.net
API String ID: 593203224-2894021055
Opcode ID: 7c957eabdacd62f3848e4df16011048d2f8c1ecc3b66531b45b15f55bc994c6f
Instruction ID: e76ab1f66dc5f9a2aefe810dea3cb9552d5d564b7bf39e55b03cea88b97dd25a
Opcode Fuzzy Hash: 7c957eabdacd62f3848e4df16011048d2f8c1ecc3b66531b45b15f55bc994c6f
Instruction Fuzzy Hash: EAF0E275600164AECB44DB5DC840B9DBBF5EBCB254725867CC41BD7220E7329E42C7D1

Function 6906F964 Relevance: 5.3, APIs: 1, Strings: 2, Instructions: 16COMMON

Download Yara Rule

APIs

__EH_prolog3.LIBCMT ref: 6906F96B

Strings

Z4, xrefs: 6906F985
($4, xrefs: 6906F974

Memory Dump Source

Source File: 0000000A.00000002.520354624.0000000069051000.00000020.00000001.01000000.00000008.sdmp, Offset: 69050000, based on PE: true

Associated: 0000000A.00000002.520346406.0000000069050000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000A.00000002.520370595.0000000069084000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000A.00000002.520384600.0000000069094000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000A.00000002.520394111.00000000690BC000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000A.00000002.520406416.00000000690BD000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_69050000_MSWordServices.jbxd

Similarity

API ID: H_prolog3
String ID: Z4$($4
API String ID: 431132790-1647831319
Opcode ID: df3ad7427fd3d6aeb6010fdd19f653507c17c03f9f0d2c176720f5b604cad5b6
Instruction ID: 95ec2f71dd8f5f9a83fc8887b3e3c9089a6983b8bd0d4e8ffbda3304ce3d01b8
Opcode Fuzzy Hash: df3ad7427fd3d6aeb6010fdd19f653507c17c03f9f0d2c176720f5b604cad5b6
Instruction Fuzzy Hash: A6E0EC79610110BACF00ABB8D931B4C35656B1134CF54EC6495406B1B8CB7706116AA2

Description:	Adversaries may move onto systems, possibly those on disconnected or air-gapped networks, by copying malware to removable media and taking advantage of Autorun features when the media is inserted into a system and executes. In the case of Lateral Movement, this may occur through modification of executable files stored on removable media or by copying malware and renaming it to look like a legitimate file to trick users into executing it on a separate system. In the case of Initial Access, this may occur through manual manipulation of the media, modification of systems used to initially format the media, or modification to the media's firmware itself.
Tactics:	Initial Access, Lateral Movement
Data Sources:	Drive: Drive Creation, File: File Access, File: File Creation, Process: Process Creation
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may interact with the native OS application programming interface (API) to execute behaviors. Native APIs provide a controlled means of calling low-level OS services within the kernel, such as those involving hardware/devices, memory, and processes.These native APIs are leveraged by the OS during system boot (when other system components are not yet initialized) as well as carrying out tasks and requests during routine operations.
Tactics:	Execution
Data Sources:	Module: Module Load, Process: OS API Execution
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may abuse task scheduling functionality to facilitate initial or recurring execution of malicious code. Utilities exist within all major operating systems to schedule programs or scripts to be executed at a specified date and time. A task can also be scheduled on a remote system, provided the proper authentication is met (ex: RPC and file and printer sharing in Windows environments). Scheduling a task on a remote system typically may require being a member of an admin or otherwise privileged group on the remote system.
Tactics:	Execution, Persistence, Privilege Escalation
Data Sources:	Command: Command Execution, Container: Container Creation, File: File Creation, File: File Modification, Process: Process Creation, Scheduled Job: Scheduled Job Creation
Platforms:	Containers, Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may execute their own malicious payloads by side-loading DLLs. Similar to DLL Search Order Hijacking , side-loading involves hijacking which DLL a program loads. But rather than just planting the DLL within the search order of a program then waiting for the victim application to be invoked, adversaries may directly side-load their payloads by planting then invoking a legitimate application that executes their payload(s).
Tactics:	Defense Evasion, Persistence, Privilege Escalation
Data Sources:	File: File Creation, File: File Modification, Module: Module Load, Process: Process Creation
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may create or modify Windows services to repeatedly execute malicious payloads as part of persistence. When Windows boots up, it starts programs or applications called services that perform background system functions.Windows service configuration information, including the file path to the service's executable or recovery programs/commands, is stored in the Windows Registry.
Tactics:	Persistence, Privilege Escalation
Data Sources:	Command: Command Execution, Driver: Driver Load, File: File Metadata, Network Traffic: Network Traffic Flow, Process: OS API Execution, Process: Process Creation, Service: Service Creation, Service: Service Modification, Windows Registry: Windows Registry Key Creation, Windows Registry: Windows Registry Key Modification
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use bootkits to persist on systems. Bootkits reside at a layer below the operating system and may make it difficult to perform full remediation unless an organization suspects one was used and can act accordingly.
Tactics:	Defense Evasion, Persistence
Data Sources:	Drive: Drive Modification
Platforms:	Linux, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use Obfuscated Files or Information to hide artifacts of an intrusion from analysis. They may require separate mechanisms to decode or deobfuscate that information depending on how they intend to use it. Methods for doing that include built-in functionality of malware or by using utilities present on the system.
Tactics:	Defense Evasion
Data Sources:	File: File Modification, Process: Process Creation, Script: Script Execution
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to make an executable or file difficult to discover or analyze by encrypting, encoding, or otherwise obfuscating its contents on the system or in transit. This is common behavior that can be used across different platforms and the network to evade defenses.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Creation, File: File Metadata, Module: Module Load, Process: OS API Execution, Process: Process Creation, Script: Script Execution, WMI: WMI Creation, Windows Registry: Windows Registry Key Creation
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may delete files left behind by the actions of their intrusion activity. Malware, tools, or other non-native files dropped or created on a system by an adversary (ex: Ingress Tool Transfer ) may leave traces to indicate to what was done within a network and how. Removal of these files can occur during an intrusion, or as part of a post-intrusion process to minimize the adversary's footprint.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Deletion
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to manipulate features of their artifacts to make them appear legitimate or benign to users and/or security tools. Masquerading occurs when the name or location of an object, legitimate or malicious, is manipulated or abused for the sake of evading defenses and observation. This may include manipulating file metadata, tricking users into misidentifying the file type, and giving legitimate task or service names.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Metadata, File: File Modification, Image: Image Metadata, Process: OS API Execution, Process: Process Creation, Process: Process Metadata, Scheduled Job: Scheduled Job Metadata, Scheduled Job: Scheduled Job Modification, Service: Service Creation, Service: Service Metadata
Platforms:	Containers, Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ various means to detect and avoid virtualization and analysis environments. This may include changing behaviors based on the results of checks for the presence of artifacts indicative of a virtual machine environment (VME) or sandbox. If the adversary detects a VME, they may alter their malware to disengage from the victim or conceal the core functions of the implant. They may also search for VME artifacts before dropping secondary or additional payloads. Adversaries may use the information learned from [Virtualization/Sandbox Evasion](https://attack.mitre.org/techniques/T1497) during automated discovery to shape follow-on behaviors.
Tactics:	Defense Evasion, Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use methods of capturing user input to obtain credentials or collect information. During normal system usage, users often provide credentials to various different locations, such as login pages/portals or system dialog boxes. Input capture mechanisms may be transparent to the user (e.g. Credential API Hooking ) or rely on deceiving the user into providing input into what they believe to be a genuine service (e.g. Web Portal Capture ).
Tactics:	Collection, Credential Access
Data Sources:	Driver: Driver Load, File: File Modification, Process: OS API Execution, Process: Process Creation, Process: Process Metadata, Windows Registry: Windows Registry Key Modification
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	An adversary may gather the system time and/or time zone from a local or remote system. The system time is set and stored by the Windows Time Service within a domain to maintain time synchronization between systems and services in an enterprise network.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to gather information about attached peripheral devices and components connected to a computer system.Peripheral devices could include auxiliary resources that support a variety of functionalities such as keyboards, printers, cameras, smart card readers, or removable storage. The information may be used to enhance their awareness of the system and network environment or may be used for further actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to get a listing of valid accounts, usernames, or email addresses on a system or within a compromised environment. This information can help adversaries determine which accounts exist, which can aid in follow-on behavior such as brute-forcing, spear-phishing attacks, or account takeovers (e.g., Valid Accounts ).
Tactics:	Discovery
Data Sources:	Command: Command Execution, File: File Access, Process: Process Creation
Platforms:	Azure AD, Google Workspace, IaaS, Linux, macOS, Office 365, SaaS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may enumerate files and directories or may search in specific locations of a host or network share for certain information within a file system. Adversaries may use the information from File and Directory Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	An adversary may attempt to get detailed information about the operating system and hardware, including version, patches, hotfixes, service packs, and architecture. Adversaries may use the information from System Information Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	IaaS, Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to get information about running processes on a system. Information obtained could be used to gain an understanding of common software/applications running on systems within the network. Adversaries may use the information from Process Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to identify the primary user, currently logged in user, set of users that commonly uses a system, or whether a user is actively using the system. They may do this, for example, by retrieving account usernames or by using OS Credential Dumping . The information may be collected in a number of different ways using other Discovery techniques, because user and username details are prevalent throughout a system and include running process ownership, file/directory ownership, session information, and system logs. Adversaries may use the information from [System Owner/User Discovery](https://attack.mitre.org/techniques/T1033) during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Active Directory: Active Directory Object Access, Command: Command Execution, File: File Access, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow, Process: OS API Execution, Process: Process Access, Process: Process Creation, Windows Registry: Windows Registry Key Access
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report msws.msi

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Threat Intel

Malware Configuration

Yara Signatures

Memory Dumps

Sigma Signatures

Suricata Signatures

Joe Sandbox Signatures

AV Detection

Compliance

Spreading

Networking

Key, Mouse, Clipboard, Microphone and Screen Capturing

System Summary

Data Obfuscation

Persistence and Installation Behavior

Boot Survival

Hooking and other Techniques for Hiding and Protection

Malware Analysis System Evasion

Anti Debugging

HIPS / PFW / Operating System Protection Evasion

Language, Device and Operating System Detection

Stealing of Sensitive Information

Remote Access Functionality

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

World Map of Contacted IPs

Public IPs

General Information

Warnings

Simulations

Behavior and APIs

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

C:\System Volume Information\SPP\OnlineMetadataCache\{f64aefbd-6ad8-454c-995b-50917ae57ae1}_OnDiskSnapshotProp

C:\System Volume Information\SPP\metadata-2

C:\System Volume Information\SPP\snapshot-2

C:\Users\user\AppData\Local\Temp\MW-5f02c99a-ffa3-42d6-92b5-9b885a91c26d\files.cab

C:\Users\user\AppData\Local\Temp\MW-5f02c99a-ffa3-42d6-92b5-9b885a91c26d\files\$dpx$.tmp\b0b5c17324baed4b8b7e2afef99cf028.tmp

C:\Users\user\AppData\Local\Temp\MW-5f02c99a-ffa3-42d6-92b5-9b885a91c26d\files\$dpx$.tmp\bcae35571a762b408b0a7ce9cef941cd.tmp

C:\Users\user\AppData\Local\Temp\MW-5f02c99a-ffa3-42d6-92b5-9b885a91c26d\files\MSWordServices.exe (copy)

C:\Users\user\AppData\Local\Temp\MW-5f02c99a-ffa3-42d6-92b5-9b885a91c26d\files\OLMAPI32.dll (copy)

C:\Users\user\AppData\Local\Temp\MW-5f02c99a-ffa3-42d6-92b5-9b885a91c26d\msiwrapper.ini

C:\Users\user\AppData\Local\Temp\~DF40E42F4E3D8C5E33.TMP

C:\Users\user\AppData\Local\Temp\~DFFC47027088490937.TMP

C:\Windows\Installer\5e5e08.msi

C:\Windows\Installer\5e5e09.ipi

C:\Windows\Installer\MSI2270.tmp

C:\Windows\Installer\SourceHash{E22E6085-4A70-49E4-B1C5-4305B74C3132}

C:\Windows\Logs\DPX\setupact.log

Static File Info

General

Windows Analysis Report
msws.msi

Function 69054F22 Relevance: 169.2, APIs: 48, Strings: 47, Instructions: 2972
filesleepCOMMONLIBRARYCODE

Function 6905EA93 Relevance: 155.5, APIs: 25, Strings: 63, Instructions: 1459
registryCOMMONLIBRARYCODE

Function 6905CB90 Relevance: 65.6, APIs: 30, Strings: 7, Instructions: 882
COMMONLIBRARYCODE

Function 6905E49B Relevance: 54.3, APIs: 16, Strings: 15, Instructions: 73
libraryloaderCOMMONLIBRARYCODE

Function 2D9174DE Relevance: 21.1, APIs: 10, Strings: 2, Instructions: 61
memorylibraryloaderCOMMON

Function 69057E9F Relevance: 14.1, APIs: 6, Strings: 2, Instructions: 67
processCOMMONLIBRARYCODE

Function 6905FB96 Relevance: 30.2, APIs: 5, Strings: 12, Instructions: 457
registryCOMMON

Function 2D903C77 Relevance: 15.9, APIs: 4, Strings: 5, Instructions: 111
libraryCOMMONLIBRARYCODE

Function 6906DA0B Relevance: 12.5, APIs: 6, Strings: 1, Instructions: 284
COMMONLIBRARYCODE

Function 690608DC Relevance: 12.3, APIs: 3, Strings: 4, Instructions: 61
libraryloaderCOMMONLIBRARYCODE

Function 2D9050C9 Relevance: 12.3, APIs: 4, Strings: 3, Instructions: 29
libraryloaderCOMMON

Function 69061FF8 Relevance: 10.6, APIs: 7, Instructions: 136
COMMONLIBRARYCODE

Function 2D916528 Relevance: 10.6, APIs: 7, Instructions: 92
COMMON

Function 69072B5E Relevance: 10.6, APIs: 4, Strings: 2, Instructions: 74
COMMONLIBRARYCODE

Function 69057AE4 Relevance: 8.9, APIs: 4, Strings: 1, Instructions: 195
sleepfileCOMMON

Description:	An adversary may compress and/or encrypt data that is collected prior to exfiltration. Compressing the data can help to obfuscate the collected data and minimize the amount of data sent over the network. Encryption can be used to hide information that is being exfiltrated from detection or make exfiltration less conspicuous upon inspection by a defender.
Tactics:	Collection
Data Sources:	Command: Command Execution, File: File Creation, Process: Process Creation, Script: Script Execution
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre